last executing test programs: 1m7.637236824s ago: executing program 4 (id=5): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xddf9, 0x1, 0xfffffffe, 0x34d, 0x0, r1}) sendfile(r0, r1, 0x0, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x8, [@restrict={0xf, 0x0, 0x0, 0xb, 0x2}, @enum={0xd, 0x6, 0x0, 0x6, 0x4, [{0xa, 0x80000000}, {0x7, 0x9}, {0xf, 0x5}, {0xc, 0xf}, {0x2, 0xf4f}, {0xc, 0x7}]}, @volatile={0x4, 0x0, 0x0, 0x9, 0x2}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x3}, @union={0x6, 0x5, 0x0, 0x5, 0x1, 0x7ff, [{0xe, 0x2, 0x6}, {0x0, 0x2, 0xbed7}, {0x0, 0x0, 0x8}, {0x10, 0x3, 0x2}, {0x7, 0x2, 0xfffffffc}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x19, 0x0, 0x65, 0x7}]}, {0x0, [0x30, 0x30, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000000840)=""/223, 0xdc, 0xdf, 0x0, 0x74d}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x19, 0x4, 0x4, 0x2, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000013b704000000000000850000003300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_open_dev$media(&(0x7f0000000080), 0x8, 0x88000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x12, r6, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x4f, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9e5, 0x0, 0x1, 0x80000000}}}}]}, 0x48}}, 0x4000010) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0x541b, 0x0) 1m5.603723308s ago: executing program 4 (id=20): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x20, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x10}, [@FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000001040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000080)=0x1, 0x4) r4 = io_uring_setup(0xfc6, &(0x7f0000000180)) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r6 = syz_io_uring_setup(0x4758, &(0x7f0000000200)={0x0, 0x9d0a, 0x1000, 0x0, 0xe5, 0x0, r4}, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f00000002c0)=r4, 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405668, &(0x7f0000000140)={0x9, 0x901904c3453ccd09, 0x0, "0000087aba10fdfffffbe30b517501c53051a30000000000000016ebffffff00", 0x34565559}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x18, &(0x7f0000000040)={0x0, 0x7, 0x21, {0x21, 0x3b, "a7ea31cb7f5b992b0535fb21e05a1e84a5a6869ce07801cc8147ac037f16dd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m1.585817489s ago: executing program 4 (id=26): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000532000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/233, 0xe9, 0x1, &(0x7f00000007c0)=""/152, 0x98}, &(0x7f0000000440)=0x40) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = fspick(r3, &(0x7f0000000000)='.\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000280)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0xffffffff], [0x0, 0x0, 0xffffffff], [0xfffffffffffffffa]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={r7}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000005c0)={0x0, 0x0, 0x8, 0x2400, 0x2, [0x0, 0x0, 0x0, r7], [0xf, 0xc, 0xe40, 0x6], [0x4, 0x7, 0x4, 0x7], [0x7, 0x3, 0x4, 0x3]}) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) r8 = dup(r4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) ioctl$TCGETA(r8, 0x5405, &(0x7f0000000280)) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb013, 0x2, 0x0, 0x0, 0x88d7, 0x8f, 0x100a, 0x8012, 0x1002, 0xffbfffff, 0xff, 0x7, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x6, 0x9, 0x6, 0x4, 0x3, 0x7, 0xa, 0x5, 0x1, 0x52, 0xc, 0x8, 0x400002, 0x2]}) fsopen(0x0, 0x0) 1m1.003855445s ago: executing program 4 (id=29): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 58.727889136s ago: executing program 4 (id=38): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x3a09, 0x800, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a0000020000009110a9000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff0}, 0x94) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x21, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000040)={0x0, r1, 0x38, {0x1, 0x7f}, 0x8}, 0x1) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x5, 0x1, 0x4, r0}, 0x50) r4 = socket(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r6) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r7, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r8, 0x47b6, 0x800000, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @remote}, 0x1, 0x3, 0x4, 0x3}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="5b9262a9594a4824115f11b0b5b2379676261039008f85f0ac3c79c47d2b98f35467765fe9af1cf1b30068f3a66948213e0da7834c130982601561c5d46c413a107b842529bda21b43f39a308e722df76911be7104fe1319bd8ded3f9a9463868425636c411a80e929b8de6f285835f9e470d536552a4f0512d0dcda1921be07dfe7d10deccaf4080fe6c740f12adaac00", 0x91}], 0x1, &(0x7f0000000680)=[{0x1010, 0x10b, 0x5e4, "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"}, {0x60, 0x115, 0x1f959055, "4f266e1cf5dae402881d4cbe4a48017971d781640cc1056790378cd51aebef5d1d17af36eaff4bf3a5326d159ee056daa053d9ae05c1d49e52181d3bd4980ca5d60ee13199f68f23aa07"}, {0xf8, 0x1, 0xffffff81, "b625cd80164268a3cfcfb98fd43aa6d7ffe2c58e7bfd003f9335f4408c227c7eef23286a1d4e5e9efb3e9e4c48dfc2a44dd84ee3b4bc9602b4b9556ac201585ecfba19bc39cda1ff172f6de10feff703b1dcfe41c76b77c8c5b9db812092004ce95b49aa17fb06a57bf8ff5cd261fffea7eebb8c10a8acc8994108598c87c88bc7bae859c84c1b131ffd776c4376559f8cac5ad8077bbe48fbbe59af8090f1236662250b57e0872f5613b0a00a14d74b2cf73a318ad6e321dcd73be2ea43e9e7fddf352ae7776e6d3a336dfce1e0c456ba5e7a5b85a6503786257765d53d83523b52"}], 0x1168}, 0x200080c1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 11.222700174s ago: executing program 3 (id=144): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "051000"}, @main=@item_4={0x3, 0x0, 0x9, "fd8ccb8b"}]}}, 0x0}, 0x0) 8.428468329s ago: executing program 3 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) getpgrp(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.302629057s ago: executing program 2 (id=150): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380200001600010127bd7000fedbdf250a010100000000000000000000000000fc0100000000000000000000000000014e2480014e244de20a0080802c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d633"], 0x238}, 0x1, 0x0, 0x0, 0x80}, 0x0) (fail_nth: 1) 8.192571799s ago: executing program 1 (id=151): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00') r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) close_range(r0, r1, 0x0) setreuid(0x0, 0xee00) r2 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000100)={0x1d, r4}, 0x10) 8.040363804s ago: executing program 1 (id=152): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0xdbc, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0xd90, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0xd88, 0x4, [@m_police={0xd84, 0x3, 0x0, 0x0, {{0xb}, {0xd0c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0x9, 0xa4ea, 0x200, 0x2, 0x9, 0x7, 0x1, 0x7, 0x10000, 0xfff, 0x5, 0x8000, 0x4, 0x8, 0x1, 0x4e14194b, 0x9, 0xfffffffa, 0x3, 0x4, 0xfffffffc, 0x6, 0x4, 0x5, 0x8, 0x4, 0x95b, 0x2, 0x0, 0x3, 0x9, 0x8, 0x5, 0x194f, 0xbf6, 0xe6c5, 0x5, 0xf, 0xffffff81, 0x5, 0x2, 0xd, 0x7ff, 0x7, 0xfff, 0x2, 0xfffffffa, 0x81, 0x54c, 0x8, 0x91, 0x8, 0x7, 0x1, 0x101, 0x7, 0xa9, 0x5, 0x7, 0x4, 0x3, 0x10001, 0x16c00000, 0x1, 0x3, 0x8, 0xc, 0xb, 0x81, 0x4, 0x3, 0x0, 0x10001, 0x7, 0x5, 0x80000000, 0x101, 0x5, 0xb, 0x380, 0x6, 0x1, 0xea6, 0x400, 0x4, 0x1, 0xe, 0x7, 0xfff, 0x9, 0x5, 0x2, 0x8, 0x89df, 0x9, 0x7, 0x56, 0x6, 0x65b, 0x8, 0x7ff, 0x9, 0x100, 0x1ff, 0x1ff, 0x7, 0x5, 0x8001, 0x0, 0x7, 0x0, 0x1e, 0x800, 0x2, 0x10, 0x2, 0x8f, 0x8, 0x6, 0x1, 0x9, 0x34, 0x6, 0x3, 0x400, 0xf22, 0xa, 0x7ff, 0x5, 0xfffffff7, 0x22, 0x2, 0x10, 0x8, 0x9, 0x6, 0x4, 0x9, 0xf, 0xfffff800, 0x4, 0x10, 0x9, 0x0, 0x1ff, 0x9, 0x7, 0x8, 0x7, 0x92, 0x200, 0x4, 0xc, 0x6, 0x2, 0x4, 0x2a9, 0x7, 0x8, 0x3, 0x101, 0x10000, 0x3, 0xe, 0x3, 0x6, 0x6, 0x1, 0x0, 0x7, 0x0, 0x3, 0x32a2, 0x4, 0xfb8, 0x1be0, 0xd, 0x916, 0x24, 0xfffffffa, 0x1, 0x200, 0x101, 0x7, 0x6, 0xfffffffb, 0x1, 0x6, 0x6, 0x0, 0x10000, 0x0, 0x7ff, 0x0, 0x3, 0x6, 0x8, 0x1, 0x9, 0x72f, 0x7, 0x1, 0xb, 0x1, 0xcab, 0x800, 0x10, 0x10000, 0x6, 0x8, 0xda0, 0x2, 0x4, 0x7, 0x6, 0x1, 0x8, 0x2, 0x81, 0x81, 0x4, 0x2f9, 0xf46, 0x800, 0x80000000, 0x80f0, 0x4, 0x8, 0x3, 0x10001, 0x371, 0x5, 0xfd, 0xa, 0xe217, 0x6, 0x7fffffff, 0x9, 0x6, 0x3, 0x80, 0x4, 0x7, 0x6, 0xa, 0x7, 0x2, 0x6, 0x3ae8, 0x1, 0xea, 0x3, 0x0, 0x3ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x7, 0x7, 0x38d7, {0x71, 0x2, 0x2, 0x9, 0xc3a0, 0xd32f}, {0xb, 0x1, 0x4, 0x46, 0x1000, 0xfffffffe}, 0xb, 0xa0c5, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x9, 0xff, 0x0, {0x7, 0x1, 0x8fa, 0xbd, 0x9, 0x3}, {0x8, 0x0, 0x9533, 0x3, 0x64f5, 0x3}, 0x7, 0x5, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5db1, 0x5, 0xe7a9, 0x0, 0x1ff, 0xe, 0x1, 0x9, 0x700000, 0x2, 0xfc1d, 0x400, 0x9, 0x6, 0x1, 0x979, 0x3, 0x7, 0x502, 0x1, 0x9, 0x9, 0x0, 0x8000, 0x3, 0x50d, 0x3, 0x7, 0x1000, 0x3, 0x42, 0x6, 0x7fff, 0xd7, 0x2, 0x0, 0xe137, 0x9, 0x0, 0xffffc5de, 0xff, 0x5, 0x7, 0x9, 0xf, 0x1000, 0x7, 0xfd04, 0x7, 0x7d5, 0x1, 0x4, 0x2, 0x5, 0x9c0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x3ff, 0x4, 0x0, 0xd84a, 0x87, 0xfffffff9, 0x1, 0x4, 0x6, 0x6, 0x9, 0xc, 0xffff13b1, 0x5, 0x10000, 0x4, 0x8, 0x3f, 0x2, 0xfffffc00, 0xfffffbff, 0xf56a, 0x1ff, 0x0, 0x0, 0x5, 0x1, 0x6, 0x8, 0x1, 0x9, 0x5, 0xfffff0fb, 0xe, 0x7, 0x2, 0x8, 0xb16, 0x2, 0x3, 0xc54, 0x4, 0x6, 0x2, 0x9804, 0xfffffffd, 0x9, 0x7fff, 0x5, 0x5, 0xa, 0x5, 0xfffffffd, 0x8000, 0x24000, 0x3, 0x0, 0x8001, 0x7f, 0x5, 0x4, 0x3, 0x9, 0x3, 0xd7, 0x3, 0x0, 0x3, 0x0, 0x8001, 0x2, 0x4, 0x5, 0x1c, 0xffffff00, 0x7, 0x3, 0x2, 0x5, 0x5, 0xfffff762, 0xffffc01f, 0x3, 0x401, 0x6, 0x10001, 0x200, 0x2, 0x8, 0xfffffff8, 0x4, 0xff, 0x5de, 0x5, 0x0, 0x4, 0xefde, 0xc5, 0x9, 0x1ff, 0xb6, 0x3, 0xd8d, 0xaa, 0x7eb530e4, 0x0, 0x3f05d376, 0x8, 0x4, 0x86fe, 0x6, 0xa, 0x2, 0x3, 0x5, 0x7, 0x1, 0xbad7, 0xa9, 0xc9e, 0x6, 0xfd, 0xc, 0x8001, 0x10000, 0x7, 0xfffffffb, 0x4, 0x7, 0x8000, 0xfffffffb, 0x1d19, 0x8, 0xffff, 0xfffff622, 0x8, 0x9042, 0x5, 0x4, 0xd, 0x647c, 0x4, 0x2, 0x17, 0x8, 0x9, 0x101, 0x4, 0x5ba7, 0x0, 0x2, 0x1, 0xffffffff, 0x200, 0x2, 0x8, 0x4, 0x2, 0x2, 0x148b, 0x2, 0x0, 0x2f, 0x5, 0x401, 0xed, 0x9, 0x3, 0x0, 0xc, 0x1, 0x7, 0x800, 0xfffffff9, 0x5, 0x7f, 0x5, 0xffffff28, 0x2, 0x1ff, 0x800, 0x1ff, 0x15, 0x4, 0x5, 0x77, 0x9a3f, 0x7406a8a6, 0x1a44825d, 0xd719, 0x101, 0x10000, 0x5, 0x1, 0x3, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x3, 0x9, 0xb5, 0x45, {0x6, 0x0, 0x9, 0x9, 0x8, 0x6}, {0x6, 0x0, 0xfff8, 0x400, 0x4, 0xc}, 0x7, 0x800, 0x4c}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x12000, 0x6, 0x5b68, 0x4, 0x7f, 0x4, 0x5, 0xd0e, 0x15, 0x4c, 0x0, 0x7ff, 0xffffffff, 0x7fffffff, 0x81, 0x4, 0x1, 0xf, 0x8000, 0x727, 0x80000000, 0x4, 0x5fb, 0x0, 0x6, 0x8, 0x3, 0x2000, 0x101, 0x400, 0x1, 0x7fffffff, 0x1, 0x1052, 0x7ff, 0x3, 0xbfe, 0x4, 0x3, 0x5, 0x159, 0x1, 0x7, 0x3, 0x7, 0x3, 0x7, 0x1, 0x4, 0x4, 0xffff0000, 0x8001, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0xd, 0x6, 0x8001, 0xc7, 0x6, 0x6, 0x8, 0x3, 0x661, 0x7fffffff, 0x40, 0x4, 0xd, 0x7f, 0x4c7, 0xec50, 0x80000000, 0x9, 0x1, 0x7, 0x25, 0x7, 0x3, 0x8000, 0xc, 0x400, 0x1, 0x8, 0x2, 0x4, 0xce0, 0x4, 0x7, 0x64, 0x9, 0x3, 0x1, 0xd9e, 0x2, 0x5, 0x5, 0x7, 0x0, 0x3, 0x4, 0x3, 0x5, 0x1, 0x3, 0x10, 0xfffffffb, 0x8, 0xffffffff, 0x5, 0x8, 0x3, 0x27d1, 0x3, 0xfffffffc, 0x9, 0x3, 0x5, 0x63c, 0xfffffe01, 0xc, 0x4, 0x3, 0xb2c, 0x42d3fd28, 0x0, 0x2, 0xfffffffe, 0x45, 0x200, 0xa, 0x52, 0xffffffff, 0x1ff, 0x7, 0x1, 0x5, 0xc4cd, 0x10000, 0x7fff, 0x0, 0xac4e, 0x7, 0xfffffc01, 0x4, 0x9707, 0x0, 0x1, 0x1, 0x1ff, 0x7, 0x3, 0x4, 0x6, 0x40, 0x10000009, 0x5, 0xa782, 0x10000000, 0x80, 0x800, 0x1, 0x7, 0x3, 0x3, 0xa, 0x60, 0x5188, 0xc5, 0x7, 0x2, 0x7fff, 0xb, 0x9af2, 0x7, 0x6e3, 0x3, 0x0, 0x5, 0x7, 0x9, 0x1, 0x8, 0x4, 0x6, 0x1ff, 0x9, 0x4e83, 0x2, 0x31d, 0x6, 0x8, 0x9, 0x9, 0x7, 0x6, 0xc7f5, 0x4, 0x7, 0x7, 0x7, 0x5, 0x3ff, 0x5, 0x1, 0x3, 0x6687, 0xc41, 0x4, 0x63d1, 0x96, 0x2, 0x0, 0xa77, 0xd, 0x4, 0x4, 0x9, 0x930, 0x10001, 0x9, 0x8, 0x5, 0x2, 0x3cb6, 0x5, 0x4, 0x1, 0x8, 0x5, 0x7ff, 0x7, 0x4, 0x5, 0xaa3, 0x9, 0x8001, 0xe90, 0x3ff, 0xfffffffa, 0x8, 0x2800000, 0x2, 0x9, 0x9, 0x8, 0x7, 0x2, 0x9cf, 0x719, 0xfffffff4, 0x4, 0x56, 0x8000, 0x2]}]]}, {0x4f, 0x6, "fe6d860dd84cbb0f361d847bcdf4f1cca1e189ca63b31409d2acc4a678e75e5969d6bbe5a54ecf29b01ab3b4a3b575873b9ace4b4d426436bc19fe437db796f824b3650f50334b10d4b94e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xdbc}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 6.827443166s ago: executing program 3 (id=153): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000367000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="c419ac", 0x3}, {&(0x7f0000001880)="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", 0x1000}], 0x2, &(0x7f00000017c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x80, 0x200c4811}}], 0x1, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000aa0000000060a010400000000000000000a0000040900010073797a31000000006c000480240001800b000100657874686472000014000280080006400000000408000640000000001800018011000100666c6f775f6f66666c6f6164d9c000002c0001800a000100696e6e65720000001c00028008000340000000040800034000000000080003400000000614000480100001800a0001007175657565000000140000001100010000000400000000000000000a9da9b5a06a2c428135cc143a7de0a4063cb4b7378b26dd1af648a324fbc962900d5f20d1d8716f7385cf81dd9160dd8ebf3af8d1aa"], 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) syz_usb_connect(0x2, 0x4e, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="169bde60d653032000008c09049ba100000000000000"], 0x7) r8 = socket$inet6(0xa, 0x3, 0xb) ioctl$FITHAW(r8, 0xc0045878) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, 0x0, 0x0) 6.790211088s ago: executing program 2 (id=154): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)=[0x0], &(0x7f0000000880), 0x0, 0xae, &(0x7f00000008c0)=[{}], 0x8, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) 6.626546484s ago: executing program 1 (id=156): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x14ec, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x14c0, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x14b8, 0x4, [@m_police={0xe0c, 0x3, 0x0, 0x0, {{0xb}, {0xd48, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0x9, 0xa4ea, 0x200, 0x2, 0x9, 0x7, 0x1, 0x7, 0x10000, 0xfff, 0x5, 0x8000, 0x4, 0x8, 0x1, 0x4e14194b, 0x9, 0xfffffffa, 0x3, 0x4, 0xfffffffc, 0x6, 0x4, 0x5, 0x8, 0x4, 0x95b, 0x2, 0x0, 0x3, 0x9, 0x8, 0x5, 0x194f, 0xbf6, 0xe6c5, 0x5, 0xf, 0xffffff81, 0x5, 0x2, 0xd, 0x7ff, 0x7, 0xfff, 0x2, 0xfffffffa, 0x81, 0x54c, 0x8, 0x91, 0x8, 0x7, 0x1, 0x101, 0x7, 0xa9, 0x5, 0x7, 0x4, 0x3, 0x10001, 0x16c00000, 0x1, 0x3, 0x8, 0xc, 0xb, 0x81, 0x4, 0x3, 0x0, 0x10001, 0x7, 0x5, 0x80000000, 0x101, 0x5, 0xb, 0x380, 0x6, 0x1, 0xea6, 0x400, 0x4, 0x1, 0xe, 0x7, 0xfff, 0x9, 0x5, 0x2, 0x8, 0x89df, 0x9, 0x7, 0x56, 0x6, 0x65b, 0x8, 0x7ff, 0x9, 0x100, 0x1ff, 0x1ff, 0x7, 0x5, 0x8001, 0x0, 0x7, 0x0, 0x1e, 0x800, 0x2, 0x10, 0x2, 0x8f, 0x8, 0x6, 0x1, 0x9, 0x34, 0x6, 0x3, 0x400, 0xf22, 0xa, 0x7ff, 0x5, 0xfffffff7, 0x22, 0x2, 0x10, 0x8, 0x9, 0x6, 0x4, 0x9, 0xf, 0xfffff800, 0x4, 0x10, 0x9, 0x0, 0x1ff, 0x9, 0x7, 0x8, 0x7, 0x92, 0x200, 0x4, 0xc, 0x6, 0x2, 0x4, 0x2a9, 0x7, 0x8, 0x3, 0x101, 0x10000, 0x3, 0xe, 0x3, 0x6, 0x6, 0x1, 0x0, 0x7, 0x0, 0x3, 0x32a2, 0x4, 0xfb8, 0x1be0, 0xd, 0x916, 0x24, 0xfffffffa, 0x1, 0x200, 0x101, 0x7, 0x6, 0xfffffffb, 0x1, 0x6, 0x6, 0x0, 0x10000, 0x0, 0x7ff, 0x0, 0x3, 0x6, 0x8, 0x1, 0x9, 0x72f, 0x7, 0x1, 0xb, 0x1, 0xcab, 0x800, 0x10, 0x10000, 0x6, 0x8, 0xda0, 0x2, 0x4, 0x7, 0x6, 0x1, 0x8, 0x2, 0x81, 0x81, 0x4, 0x2f9, 0xf46, 0x800, 0x80000000, 0x80f0, 0x4, 0x8, 0x3, 0x10001, 0x371, 0x5, 0xfd, 0xa, 0xe217, 0x6, 0x7fffffff, 0x9, 0x6, 0x3, 0x80, 0x4, 0x7, 0x6, 0xa, 0x7, 0x2, 0x6, 0x3ae8, 0x1, 0xea, 0x3, 0x0, 0x3ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x7, 0x7, 0x38d7, {0x71, 0x2, 0x2, 0x9, 0xc3a0, 0xd32f}, {0xb, 0x1, 0x4, 0x46, 0x1000, 0xfffffffe}, 0xb, 0xa0c5, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x9, 0xff, 0x0, {0x7, 0x1, 0x8fa, 0xbd, 0x9, 0x3}, {0x8, 0x0, 0x9533, 0x3, 0x64f5, 0x3}, 0x7, 0x5, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x6, 0x6, 0x8, {0x5, 0x2, 0x8, 0x7fff, 0x7, 0x273}, {0x8, 0x0, 0x7, 0x13, 0x7, 0x8}, 0x5fa, 0x5, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5db1, 0x5, 0xe7a9, 0x0, 0x1ff, 0xe, 0x1, 0x9, 0x700000, 0x2, 0xfc1d, 0x400, 0x9, 0x6, 0x1, 0x979, 0x3, 0x7, 0x502, 0x1, 0x9, 0x9, 0x0, 0x8000, 0x3, 0x50d, 0x3, 0x7, 0x1000, 0x3, 0x42, 0x6, 0x7fff, 0xd7, 0x2, 0x0, 0xe137, 0x9, 0x0, 0xffffc5de, 0xff, 0x5, 0x7, 0x9, 0xf, 0x1000, 0x7, 0xfd04, 0x7, 0x7d5, 0x1, 0x4, 0x2, 0x5, 0x9c0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x3ff, 0x4, 0x0, 0xd84a, 0x87, 0xfffffff9, 0x1, 0x4, 0x6, 0x6, 0x9, 0xc, 0xffff13b1, 0x5, 0x10000, 0x4, 0x8, 0x3f, 0x2, 0xfffffc00, 0xfffffbff, 0xf56a, 0x1ff, 0x0, 0x0, 0x5, 0x1, 0x6, 0x8, 0x1, 0x9, 0x5, 0xfffff0fb, 0xe, 0x7, 0x2, 0x8, 0xb16, 0x2, 0x3, 0xc54, 0x4, 0x6, 0x2, 0x9804, 0xfffffffd, 0x9, 0x7fff, 0x5, 0x5, 0xa, 0x5, 0xfffffffd, 0x8000, 0x24000, 0x3, 0x0, 0x8001, 0x7f, 0x5, 0x4, 0x3, 0x9, 0x3, 0xd7, 0x3, 0x0, 0x3, 0x0, 0x8001, 0x2, 0x4, 0x5, 0x1c, 0xffffff00, 0x7, 0x3, 0x2, 0x5, 0x5, 0xfffff762, 0xffffc01f, 0x3, 0x401, 0x6, 0x10001, 0x200, 0x2, 0x8, 0xfffffff8, 0x4, 0xff, 0x5de, 0x5, 0x0, 0x4, 0xefde, 0xc5, 0x9, 0x1ff, 0xb6, 0x3, 0xd8d, 0xaa, 0x7eb530e4, 0x0, 0x3f05d376, 0x8, 0x4, 0x86fe, 0x6, 0xa, 0x2, 0x3, 0x5, 0x7, 0x1, 0xbad7, 0xa9, 0xc9e, 0x6, 0xfd, 0xc, 0x8001, 0x10000, 0x7, 0xfffffffb, 0x4, 0x7, 0x8000, 0xfffffffb, 0x1d19, 0x8, 0xffff, 0xfffff622, 0x8, 0x9042, 0x5, 0x4, 0xd, 0x647c, 0x4, 0x2, 0x17, 0x8, 0x9, 0x101, 0x4, 0x5ba7, 0x0, 0x2, 0x1, 0xffffffff, 0x200, 0x2, 0x8, 0x4, 0x2, 0x2, 0x148b, 0x2, 0x0, 0x2f, 0x5, 0x401, 0xed, 0x9, 0x3, 0x0, 0xc, 0x1, 0x7, 0x800, 0xfffffff9, 0x5, 0x7f, 0x5, 0xffffff28, 0x2, 0x1ff, 0x800, 0x1ff, 0x15, 0x4, 0x5, 0x77, 0x9a3f, 0x7406a8a6, 0x1a44825d, 0xd719, 0x101, 0x10000, 0x5, 0x1, 0x3, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x3, 0x9, 0xb5, 0x45, {0x6, 0x0, 0x9, 0x9, 0x8, 0x6}, {0x6, 0x0, 0xfff8, 0x400, 0x4, 0xc}, 0x7, 0x800, 0x4c}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x12000, 0x6, 0x5b68, 0x4, 0x7f, 0x4, 0x5, 0xd0e, 0x15, 0x4c, 0x0, 0x7ff, 0xffffffff, 0x7fffffff, 0x81, 0x4, 0x1, 0xf, 0x8000, 0x727, 0x80000000, 0x4, 0x5fb, 0x0, 0x6, 0x8, 0x3, 0x2000, 0x101, 0x400, 0x1, 0x7fffffff, 0x1, 0x1052, 0x7ff, 0x3, 0xbfe, 0x4, 0x3, 0x5, 0x159, 0x1, 0x7, 0x3, 0x7, 0x3, 0x7, 0x1, 0x4, 0x4, 0xffff0000, 0x8001, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0xd, 0x6, 0x8001, 0xc7, 0x6, 0x6, 0x8, 0x3, 0x661, 0x7fffffff, 0x40, 0x4, 0xd, 0x7f, 0x4c7, 0xec50, 0x80000000, 0x9, 0x1, 0x7, 0x25, 0x7, 0x3, 0x8000, 0xc, 0x400, 0x1, 0x8, 0x2, 0x4, 0xce0, 0x4, 0x7, 0x64, 0x9, 0x3, 0x1, 0xd9e, 0x2, 0x5, 0x5, 0x7, 0x0, 0x3, 0x4, 0x3, 0x5, 0x1, 0x3, 0x10, 0xfffffffb, 0x8, 0xffffffff, 0x5, 0x8, 0x3, 0x27d1, 0x3, 0xfffffffc, 0x9, 0x3, 0x5, 0x63c, 0xfffffe01, 0xc, 0x4, 0x3, 0xb2c, 0x42d3fd28, 0x0, 0x2, 0xfffffffe, 0x45, 0x200, 0xa, 0x52, 0xffffffff, 0x1ff, 0x7, 0x1, 0x5, 0xc4cd, 0x10000, 0x7fff, 0x0, 0xac4e, 0x7, 0xfffffc01, 0x4, 0x9707, 0x0, 0x1, 0x1, 0x1ff, 0x7, 0x3, 0x4, 0x6, 0x40, 0x10000009, 0x5, 0xa782, 0x10000000, 0x80, 0x800, 0x1, 0x7, 0x3, 0x3, 0xa, 0x60, 0x5188, 0xc5, 0x7, 0x2, 0x7fff, 0xb, 0x9af2, 0x7, 0x6e3, 0x3, 0x0, 0x5, 0x7, 0x9, 0x1, 0x8, 0x4, 0x6, 0x1ff, 0x9, 0x4e83, 0x2, 0x31d, 0x6, 0x8, 0x9, 0x9, 0x7, 0x6, 0xc7f5, 0x4, 0x7, 0x7, 0x7, 0x5, 0x3ff, 0x5, 0x1, 0x3, 0x6687, 0xc41, 0x4, 0x63d1, 0x96, 0x2, 0x0, 0xa77, 0xd, 0x4, 0x4, 0x9, 0x930, 0x10001, 0x9, 0x8, 0x5, 0x2, 0x3cb6, 0x5, 0x4, 0x1, 0x8, 0x5, 0x7ff, 0x7, 0x4, 0x5, 0xaa3, 0x9, 0x8001, 0xe90, 0x3ff, 0xfffffffa, 0x8, 0x2800000, 0x2, 0x9, 0x9, 0x8, 0x7, 0x2, 0x9cf, 0x719, 0xfffffff4, 0x4, 0x56, 0x8000, 0x2]}]]}, {0x99, 0x6, "fe6d860dd84cbb0f361d847bcdf4f1cca1e189ca63b31409d2acc4a678e75e5969d6bbe5a54ecf29b01ab3b4a3b575873b9ace4b4d426436bc19fe437db796f824b3650f50334b10d4b94e2d7d6c31aea3e06975ef3aaa1770d81ceb777a8a733f87a5fd75c8c7aaaf871120b4486a042df4912b9067f5a70de44db7a118c6fc2718a5996c29d9b0aed950a3b4dd45a3ddb7e37f5a"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xf0, 0x9, 0x0, 0x0, {{0xc}, {0x4}, {0xc1, 0x6, "14337e58be45d60f659754ec12e5d9ab30fcb57981051924d37f4f0fd25a3ef87b4e232d3bfdc9c80e6ee7845cbdd8ea6467a6e4d8f14d4a03a927cf8cd13c4b64426d975ee16c7b9e3ea473e415c230d4a08725de6d4cf8fa0a2ee1d29d4426544a0954a83455c69df54a86f88e23bdfc955eff64c7fb93320b3d431c93a09c51b007f50b01eda77a1d9eecd6c666f112264ca0082163908544f2055aff6b63df294e668556bd859c2aeeed83a0033d335fa628e8c8f83687fc15f992"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x8c, 0x0, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="584b3d6d9c36"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x2, 0x30000006, 0x5, 0x4}, 0x5}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf167}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x60, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0x21, 0x6, "d6337fc71344d621b3f41a408848462f2be26f838c2124f3ed97095d70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x4cc, 0x12, 0x0, 0x0, {{0xb}, {0x4a0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x19c44db1, 0xdcb, 0x1, 0x1, 0x2, 0x1, 0xcd4, 0x7, 0x5, 0x1000, 0x4, 0xfffffffd, 0x1, 0xbb77, 0x1, 0x3, 0x8, 0x2, 0x4, 0xea, 0x2, 0x8b5c, 0x8, 0x34e, 0x8, 0x1, 0x80000001, 0x3, 0x932, 0x7, 0x9, 0x8001, 0x80, 0x2, 0x4, 0x10000, 0x9, 0x200, 0x3, 0x400, 0x4, 0xf, 0x6, 0x1a, 0x5, 0x5, 0x80000000, 0x1bb6, 0x2, 0x9, 0x4, 0x8, 0x6, 0x5, 0x9800, 0x1, 0x356, 0x3, 0x8, 0x1, 0xffffffff, 0xfffffff4, 0x7, 0x6599, 0x4, 0xe931, 0x0, 0x4, 0x5, 0x2, 0x7, 0x1, 0xda, 0x5, 0x75f3c000, 0xa, 0x8c0b, 0x560, 0x7c, 0x100, 0x0, 0xfffffffd, 0x78d7f19a, 0xc, 0x8, 0x7fffffff, 0x3, 0x9, 0x7f, 0x5, 0xffff5c04, 0x8000, 0xdfbe, 0xf6646b3e, 0xffff, 0x2, 0x2e4, 0x400, 0x780f, 0x9, 0x9, 0x9, 0x2, 0x5, 0x4, 0x6, 0x6, 0xd, 0x4, 0xfc, 0x58a6970a, 0x3, 0x1000, 0x12, 0xc, 0x1, 0xff, 0x9, 0x7, 0xe, 0x6, 0x8, 0x7a05cad8, 0x1, 0x84, 0x400, 0xfffffffb, 0x9, 0xe, 0x8, 0x5, 0x4, 0xfffff800, 0x6, 0x7, 0xffffffff, 0x41, 0x6, 0x100, 0xfb67, 0x7, 0xe698, 0x7, 0x4, 0x7, 0x1000, 0xfffffffd, 0x6, 0x9, 0x80000000, 0x0, 0xf, 0xc392, 0xdaa9, 0x7, 0x4, 0x1, 0x9, 0x7fffffff, 0x5d394290, 0x5, 0xd, 0x6, 0x6, 0x200, 0x8, 0x1, 0xa63, 0x5, 0x10001, 0x582, 0x6, 0x6, 0x2, 0x8001, 0x7, 0x8, 0x84c, 0xffff, 0x7, 0xffff, 0x5699, 0xd8fa, 0x7, 0x3, 0x0, 0xb396, 0x7fff, 0x2d3, 0x4, 0x5e73, 0x0, 0x1, 0x18a, 0x3ff, 0x0, 0xc4, 0x2, 0x3ff, 0x3, 0x1ff, 0x8, 0x5fd7000, 0xf3, 0x4, 0x3, 0xd8, 0x1, 0x8, 0x0, 0x8, 0x1, 0xca4a, 0xfffffffe, 0xb, 0x2, 0x3, 0x81, 0x7, 0x6, 0x200, 0x1, 0x39b2, 0x8, 0x1, 0x9, 0x0, 0x9, 0x9, 0x8, 0x4, 0x3, 0x2, 0x446, 0x839, 0x7, 0xea0b, 0x401, 0x1, 0x2, 0xa956, 0x9, 0x7, 0x8, 0x4, 0x1, 0x7f, 0x4d, 0x5, 0xf, 0x800000, 0x35, 0xaa, 0x0, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x75}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x1, 0x1, 0x3, {0x3, 0x0, 0x1, 0xfff7, 0x9, 0x7}, {0x3, 0x0, 0x6, 0xa8, 0x8, 0x3}, 0x4, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x7, 0xd3b, 0x2, {0xf6, 0x1, 0x4, 0x200, 0x4597, 0x7fff}, {0x2, 0x2, 0x2, 0xbe, 0x9, 0x40}, 0x6, 0x10001, 0x2}}], [], []]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x14ec}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 6.451002712s ago: executing program 0 (id=157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000680)='sys_exit\x00', r0, 0x0, 0x5}, 0x18) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000000)={0x202b, 0x0, 0x4}) 6.369722173s ago: executing program 2 (id=158): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x87f4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$radio(0x0, 0x3, 0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000021) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40010042) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x10, &(0x7f0000000240), 0x8) socket$kcm(0x29, 0x5, 0x0) 5.924243358s ago: executing program 0 (id=159): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "051000"}, @main=@item_4={0x3, 0x0, 0x9, "fd8ccb8b"}]}}, 0x0}, 0x0) 5.923253683s ago: executing program 1 (id=160): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x1000000}) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x99}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.134104835s ago: executing program 3 (id=161): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) readv(r6, &(0x7f0000000880)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1) 4.926131031s ago: executing program 2 (id=162): socket$inet(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_open_dev$sg(&(0x7f00000060c0), 0xffffffff, 0x8002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0xd8, 0x30, 0x401, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x52, 0x6, "d8f195109eca43e24feb4a8813f9ac6d6d39c9ebe9a80bcd00b38ecc713449b747214140f06ce9a8c1cf27b01655777c76fbc86741641520d583a73c8aaf72e123f9741caf1e98eb581ba0afcaed"}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3.563767183s ago: executing program 2 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) getpgrp(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.460331186s ago: executing program 0 (id=164): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4058090) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x2, 0x2000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600f4c9d3dbd865739d00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000054f21900000000002c37a9abe1b78c86bba31300", [0x0, 0x2000000000001]}}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = userfaultfd(0x1) socket(0x10, 0x803, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0xcb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x57, 0x0, &(0x7f0000000140)="e0b954bc6762240c618f030000008a52a26e", 0x0, 0x20041ff, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000002300)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000129"], 0xffe) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x100}) 1.113280139s ago: executing program 3 (id=165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x5) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = socket$inet6(0xa, 0x3, 0x7) unshare(0x2a020400) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r5, &(0x7f00000000c0)=""/55, 0x37) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$netrom(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec00000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200e0000001080007400000000088000d80080001"], 0xec}, 0x1, 0x0, 0x0, 0xdb8c26e94fc79d65}, 0x0) 711.249777ms ago: executing program 1 (id=166): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0xde0, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0xdb4, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0xdac, 0x4, [@m_police={0xda8, 0x3, 0x0, 0x0, {{0xb}, {0xd0c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0x9, 0xa4ea, 0x200, 0x2, 0x9, 0x7, 0x1, 0x7, 0x10000, 0xfff, 0x5, 0x8000, 0x4, 0x8, 0x1, 0x4e14194b, 0x9, 0xfffffffa, 0x3, 0x4, 0xfffffffc, 0x6, 0x4, 0x5, 0x8, 0x4, 0x95b, 0x2, 0x0, 0x3, 0x9, 0x8, 0x5, 0x194f, 0xbf6, 0xe6c5, 0x5, 0xf, 0xffffff81, 0x5, 0x2, 0xd, 0x7ff, 0x7, 0xfff, 0x2, 0xfffffffa, 0x81, 0x54c, 0x8, 0x91, 0x8, 0x7, 0x1, 0x101, 0x7, 0xa9, 0x5, 0x7, 0x4, 0x3, 0x10001, 0x16c00000, 0x1, 0x3, 0x8, 0xc, 0xb, 0x81, 0x4, 0x3, 0x0, 0x10001, 0x7, 0x5, 0x80000000, 0x101, 0x5, 0xb, 0x380, 0x6, 0x1, 0xea6, 0x400, 0x4, 0x1, 0xe, 0x7, 0xfff, 0x9, 0x5, 0x2, 0x8, 0x89df, 0x9, 0x7, 0x56, 0x6, 0x65b, 0x8, 0x7ff, 0x9, 0x100, 0x1ff, 0x1ff, 0x7, 0x5, 0x8001, 0x0, 0x7, 0x0, 0x1e, 0x800, 0x2, 0x10, 0x2, 0x8f, 0x8, 0x6, 0x1, 0x9, 0x34, 0x6, 0x3, 0x400, 0xf22, 0xa, 0x7ff, 0x5, 0xfffffff7, 0x22, 0x2, 0x10, 0x8, 0x9, 0x6, 0x4, 0x9, 0xf, 0xfffff800, 0x4, 0x10, 0x9, 0x0, 0x1ff, 0x9, 0x7, 0x8, 0x7, 0x92, 0x200, 0x4, 0xc, 0x6, 0x2, 0x4, 0x2a9, 0x7, 0x8, 0x3, 0x101, 0x10000, 0x3, 0xe, 0x3, 0x6, 0x6, 0x1, 0x0, 0x7, 0x0, 0x3, 0x32a2, 0x4, 0xfb8, 0x1be0, 0xd, 0x916, 0x24, 0xfffffffa, 0x1, 0x200, 0x101, 0x7, 0x6, 0xfffffffb, 0x1, 0x6, 0x6, 0x0, 0x10000, 0x0, 0x7ff, 0x0, 0x3, 0x6, 0x8, 0x1, 0x9, 0x72f, 0x7, 0x1, 0xb, 0x1, 0xcab, 0x800, 0x10, 0x10000, 0x6, 0x8, 0xda0, 0x2, 0x4, 0x7, 0x6, 0x1, 0x8, 0x2, 0x81, 0x81, 0x4, 0x2f9, 0xf46, 0x800, 0x80000000, 0x80f0, 0x4, 0x8, 0x3, 0x10001, 0x371, 0x5, 0xfd, 0xa, 0xe217, 0x6, 0x7fffffff, 0x9, 0x6, 0x3, 0x80, 0x4, 0x7, 0x6, 0xa, 0x7, 0x2, 0x6, 0x3ae8, 0x1, 0xea, 0x3, 0x0, 0x3ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x7, 0x7, 0x38d7, {0x71, 0x2, 0x2, 0x9, 0xc3a0, 0xd32f}, {0xb, 0x1, 0x4, 0x46, 0x1000, 0xfffffffe}, 0xb, 0xa0c5, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x9, 0xff, 0x0, {0x7, 0x1, 0x8fa, 0xbd, 0x9, 0x3}, {0x8, 0x0, 0x9533, 0x3, 0x64f5, 0x3}, 0x7, 0x5, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5db1, 0x5, 0xe7a9, 0x0, 0x1ff, 0xe, 0x1, 0x9, 0x700000, 0x2, 0xfc1d, 0x400, 0x9, 0x6, 0x1, 0x979, 0x3, 0x7, 0x502, 0x1, 0x9, 0x9, 0x0, 0x8000, 0x3, 0x50d, 0x3, 0x7, 0x1000, 0x3, 0x42, 0x6, 0x7fff, 0xd7, 0x2, 0x0, 0xe137, 0x9, 0x0, 0xffffc5de, 0xff, 0x5, 0x7, 0x9, 0xf, 0x1000, 0x7, 0xfd04, 0x7, 0x7d5, 0x1, 0x4, 0x2, 0x5, 0x9c0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x3ff, 0x4, 0x0, 0xd84a, 0x87, 0xfffffff9, 0x1, 0x4, 0x6, 0x6, 0x9, 0xc, 0xffff13b1, 0x5, 0x10000, 0x4, 0x8, 0x3f, 0x2, 0xfffffc00, 0xfffffbff, 0xf56a, 0x1ff, 0x0, 0x0, 0x5, 0x1, 0x6, 0x8, 0x1, 0x9, 0x5, 0xfffff0fb, 0xe, 0x7, 0x2, 0x8, 0xb16, 0x2, 0x3, 0xc54, 0x4, 0x6, 0x2, 0x9804, 0xfffffffd, 0x9, 0x7fff, 0x5, 0x5, 0xa, 0x5, 0xfffffffd, 0x8000, 0x24000, 0x3, 0x0, 0x8001, 0x7f, 0x5, 0x4, 0x3, 0x9, 0x3, 0xd7, 0x3, 0x0, 0x3, 0x0, 0x8001, 0x2, 0x4, 0x5, 0x1c, 0xffffff00, 0x7, 0x3, 0x2, 0x5, 0x5, 0xfffff762, 0xffffc01f, 0x3, 0x401, 0x6, 0x10001, 0x200, 0x2, 0x8, 0xfffffff8, 0x4, 0xff, 0x5de, 0x5, 0x0, 0x4, 0xefde, 0xc5, 0x9, 0x1ff, 0xb6, 0x3, 0xd8d, 0xaa, 0x7eb530e4, 0x0, 0x3f05d376, 0x8, 0x4, 0x86fe, 0x6, 0xa, 0x2, 0x3, 0x5, 0x7, 0x1, 0xbad7, 0xa9, 0xc9e, 0x6, 0xfd, 0xc, 0x8001, 0x10000, 0x7, 0xfffffffb, 0x4, 0x7, 0x8000, 0xfffffffb, 0x1d19, 0x8, 0xffff, 0xfffff622, 0x8, 0x9042, 0x5, 0x4, 0xd, 0x647c, 0x4, 0x2, 0x17, 0x8, 0x9, 0x101, 0x4, 0x5ba7, 0x0, 0x2, 0x1, 0xffffffff, 0x200, 0x2, 0x8, 0x4, 0x2, 0x2, 0x148b, 0x2, 0x0, 0x2f, 0x5, 0x401, 0xed, 0x9, 0x3, 0x0, 0xc, 0x1, 0x7, 0x800, 0xfffffff9, 0x5, 0x7f, 0x5, 0xffffff28, 0x2, 0x1ff, 0x800, 0x1ff, 0x15, 0x4, 0x5, 0x77, 0x9a3f, 0x7406a8a6, 0x1a44825d, 0xd719, 0x101, 0x10000, 0x5, 0x1, 0x3, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x3, 0x9, 0xb5, 0x45, {0x6, 0x0, 0x9, 0x9, 0x8, 0x6}, {0x6, 0x0, 0xfff8, 0x400, 0x4, 0xc}, 0x7, 0x800, 0x4c}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x12000, 0x6, 0x5b68, 0x4, 0x7f, 0x4, 0x5, 0xd0e, 0x15, 0x4c, 0x0, 0x7ff, 0xffffffff, 0x7fffffff, 0x81, 0x4, 0x1, 0xf, 0x8000, 0x727, 0x80000000, 0x4, 0x5fb, 0x0, 0x6, 0x8, 0x3, 0x2000, 0x101, 0x400, 0x1, 0x7fffffff, 0x1, 0x1052, 0x7ff, 0x3, 0xbfe, 0x4, 0x3, 0x5, 0x159, 0x1, 0x7, 0x3, 0x7, 0x3, 0x7, 0x1, 0x4, 0x4, 0xffff0000, 0x8001, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0xd, 0x6, 0x8001, 0xc7, 0x6, 0x6, 0x8, 0x3, 0x661, 0x7fffffff, 0x40, 0x4, 0xd, 0x7f, 0x4c7, 0xec50, 0x80000000, 0x9, 0x1, 0x7, 0x25, 0x7, 0x3, 0x8000, 0xc, 0x400, 0x1, 0x8, 0x2, 0x4, 0xce0, 0x4, 0x7, 0x64, 0x9, 0x3, 0x1, 0xd9e, 0x2, 0x5, 0x5, 0x7, 0x0, 0x3, 0x4, 0x3, 0x5, 0x1, 0x3, 0x10, 0xfffffffb, 0x8, 0xffffffff, 0x5, 0x8, 0x3, 0x27d1, 0x3, 0xfffffffc, 0x9, 0x3, 0x5, 0x63c, 0xfffffe01, 0xc, 0x4, 0x3, 0xb2c, 0x42d3fd28, 0x0, 0x2, 0xfffffffe, 0x45, 0x200, 0xa, 0x52, 0xffffffff, 0x1ff, 0x7, 0x1, 0x5, 0xc4cd, 0x10000, 0x7fff, 0x0, 0xac4e, 0x7, 0xfffffc01, 0x4, 0x9707, 0x0, 0x1, 0x1, 0x1ff, 0x7, 0x3, 0x4, 0x6, 0x40, 0x10000009, 0x5, 0xa782, 0x10000000, 0x80, 0x800, 0x1, 0x7, 0x3, 0x3, 0xa, 0x60, 0x5188, 0xc5, 0x7, 0x2, 0x7fff, 0xb, 0x9af2, 0x7, 0x6e3, 0x3, 0x0, 0x5, 0x7, 0x9, 0x1, 0x8, 0x4, 0x6, 0x1ff, 0x9, 0x4e83, 0x2, 0x31d, 0x6, 0x8, 0x9, 0x9, 0x7, 0x6, 0xc7f5, 0x4, 0x7, 0x7, 0x7, 0x5, 0x3ff, 0x5, 0x1, 0x3, 0x6687, 0xc41, 0x4, 0x63d1, 0x96, 0x2, 0x0, 0xa77, 0xd, 0x4, 0x4, 0x9, 0x930, 0x10001, 0x9, 0x8, 0x5, 0x2, 0x3cb6, 0x5, 0x4, 0x1, 0x8, 0x5, 0x7ff, 0x7, 0x4, 0x5, 0xaa3, 0x9, 0x8001, 0xe90, 0x3ff, 0xfffffffa, 0x8, 0x2800000, 0x2, 0x9, 0x9, 0x8, 0x7, 0x2, 0x9cf, 0x719, 0xfffffff4, 0x4, 0x56, 0x8000, 0x2]}]]}, {0x74, 0x6, "fe6d860dd84cbb0f361d847bcdf4f1cca1e189ca63b31409d2acc4a678e75e5969d6bbe5a54ecf29b01ab3b4a3b575873b9ace4b4d426436bc19fe437db796f824b3650f50334b10d4b94e2d7d6c31aea3e06975ef3aaa1770d81ceb777a8a733f87a5fd75c8c7aaaf871120b4486a04"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xde0}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 649.884877ms ago: executing program 0 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000880)=0x3) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) unshare(0x20000400) r2 = socket$nl_generic(0x10, 0x3, 0x10) sync_file_range(r2, 0x3, 0x9, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x8aa1, 0x10100, 0xfffffffc, 0xdc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r3, 0x207a98, 0x0, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"d1cdab94c0fb106a8c462d651e0ddd5f307e68000000000000fd00", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"6a6e866ec7adac9e09fdcb1ab0ca3f417b927573e1f59bfdc080dcb8d5b25333"}) 440.806283ms ago: executing program 0 (id=168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)=[0x0], &(0x7f0000000880), 0x0, 0xae, 0x0, 0x0, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) 200.051234ms ago: executing program 0 (id=169): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) write(r0, &(0x7f0000000000)="08001800000020a3", 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300)={0x4, 0x6, 0xfe, 0x8, 0xfe, 0x9, 0x5, 0x1, 0x0, 0x0, 0x20, 0xff, 0x0, 0x22}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x28044010}, 0x20041040) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=""/175, 0xaf, 0x0, &(0x7f0000000240)=""/119, 0x77}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r4, 0x25, 0xe, @val=@target_btf_id=r5}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) 199.750944ms ago: executing program 1 (id=170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8afb5086d04b3082a6d000000040902"], 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (fail_nth: 1) 83.743608ms ago: executing program 3 (id=171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000001000319d592ee65e7f5cdb8d940000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0xd2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001680)) r9 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, &(0x7f00000001c0)={0x0, r9}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000000)={0x0, r9}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000080)=0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 0s ago: executing program 2 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000073, 0x0, 0x7fc}]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c61737400000000040002801400000000000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.16' (ED25519) to the list of known hosts. [ 86.998372][ T10] cfg80211: failed to load regulatory.db [ 89.588946][ T5787] cgroup: Unknown subsys name 'net' [ 89.799787][ T5787] cgroup: Unknown subsys name 'cpuset' [ 89.864721][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.876947][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.268116][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.272754][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.273793][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.278470][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.279254][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.280287][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.287360][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.291941][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.303072][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.304375][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.420630][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.421173][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.443776][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.455572][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.458481][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.459000][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.472619][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.484757][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.487554][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.487606][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.490261][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.492810][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.493672][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.516570][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.517482][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.572570][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 95.658903][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 95.925883][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 95.931771][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 95.957235][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 96.355817][ T61] Bluetooth: hci1: command tx timeout [ 96.434138][ T61] Bluetooth: hci0: command tx timeout [ 96.520972][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.521819][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.522513][ T5799] bridge_slave_0: entered allmulticast mode [ 96.525505][ T5799] bridge_slave_0: entered promiscuous mode [ 96.594275][ T5804] Bluetooth: hci4: command tx timeout [ 96.594289][ T5118] Bluetooth: hci2: command tx timeout [ 96.594590][ T61] Bluetooth: hci3: command tx timeout [ 96.670766][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.670875][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.671018][ T5799] bridge_slave_1: entered allmulticast mode [ 96.672723][ T5799] bridge_slave_1: entered promiscuous mode [ 96.712066][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.712235][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.712440][ T5800] bridge_slave_0: entered allmulticast mode [ 96.715285][ T5800] bridge_slave_0: entered promiscuous mode [ 96.856438][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.856611][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.856739][ T5800] bridge_slave_1: entered allmulticast mode [ 96.858521][ T5800] bridge_slave_1: entered promiscuous mode [ 97.439457][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.575203][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.575443][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.575633][ T5809] bridge_slave_0: entered allmulticast mode [ 97.577655][ T5809] bridge_slave_0: entered promiscuous mode [ 97.581382][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.581529][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.582085][ T5808] bridge_slave_0: entered allmulticast mode [ 97.583892][ T5808] bridge_slave_0: entered promiscuous mode [ 97.644623][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.644967][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.645056][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.645169][ T5810] bridge_slave_0: entered allmulticast mode [ 97.646846][ T5810] bridge_slave_0: entered promiscuous mode [ 97.738669][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.738940][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.739107][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.739290][ T5809] bridge_slave_1: entered allmulticast mode [ 97.741400][ T5809] bridge_slave_1: entered promiscuous mode [ 97.742863][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.742975][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.743082][ T5808] bridge_slave_1: entered allmulticast mode [ 97.746827][ T5808] bridge_slave_1: entered promiscuous mode [ 97.855075][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.855203][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.855330][ T5810] bridge_slave_1: entered allmulticast mode [ 97.857077][ T5810] bridge_slave_1: entered promiscuous mode [ 97.860895][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.367637][ T5799] team0: Port device team_slave_0 added [ 98.434353][ T61] Bluetooth: hci1: command tx timeout [ 98.514173][ T61] Bluetooth: hci0: command tx timeout [ 98.536579][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.540275][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.542634][ T5799] team0: Port device team_slave_1 added [ 98.573283][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.577089][ T5800] team0: Port device team_slave_0 added [ 98.581615][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.586466][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.667209][ T5800] team0: Port device team_slave_1 added [ 98.674378][ T5804] Bluetooth: hci4: command tx timeout [ 98.674667][ T61] Bluetooth: hci3: command tx timeout [ 98.684313][ T61] Bluetooth: hci2: command tx timeout [ 98.837578][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.447045][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.447059][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.447073][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.536589][ T5809] team0: Port device team_slave_0 added [ 99.539397][ T5808] team0: Port device team_slave_0 added [ 99.626430][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.626448][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.626474][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.628881][ T5809] team0: Port device team_slave_1 added [ 99.629644][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.629654][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.629667][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.632370][ T5808] team0: Port device team_slave_1 added [ 99.635095][ T5810] team0: Port device team_slave_0 added [ 99.805902][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.805916][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.805931][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.926907][ T5810] team0: Port device team_slave_1 added [ 100.156657][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.156670][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.156684][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.307271][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.307290][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.307309][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.466581][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.466598][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.466613][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.467629][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.467643][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.467667][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.470195][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.470210][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.470235][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.515632][ T61] Bluetooth: hci1: command tx timeout [ 100.594133][ T61] Bluetooth: hci0: command tx timeout [ 100.709787][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.709805][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.709821][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.726532][ T5799] hsr_slave_0: entered promiscuous mode [ 100.727496][ T5799] hsr_slave_1: entered promiscuous mode [ 100.755452][ T5804] Bluetooth: hci3: command tx timeout [ 100.755466][ T5118] Bluetooth: hci4: command tx timeout [ 100.755568][ T61] Bluetooth: hci2: command tx timeout [ 100.853033][ T5800] hsr_slave_0: entered promiscuous mode [ 100.854416][ T5800] hsr_slave_1: entered promiscuous mode [ 100.855594][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 100.855692][ T5800] Cannot create hsr debugfs directory [ 101.371858][ T5809] hsr_slave_0: entered promiscuous mode [ 101.372858][ T5809] hsr_slave_1: entered promiscuous mode [ 101.373510][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 101.373527][ T5809] Cannot create hsr debugfs directory [ 101.383428][ T5808] hsr_slave_0: entered promiscuous mode [ 101.386029][ T5808] hsr_slave_1: entered promiscuous mode [ 101.387144][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 101.387179][ T5808] Cannot create hsr debugfs directory [ 101.679768][ T5810] hsr_slave_0: entered promiscuous mode [ 101.680744][ T5810] hsr_slave_1: entered promiscuous mode [ 101.681408][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 101.681427][ T5810] Cannot create hsr debugfs directory [ 102.594142][ T61] Bluetooth: hci1: command tx timeout [ 102.674178][ T61] Bluetooth: hci0: command tx timeout [ 102.834277][ T5804] Bluetooth: hci3: command tx timeout [ 102.834327][ T61] Bluetooth: hci2: command tx timeout [ 102.844163][ T61] Bluetooth: hci4: command tx timeout [ 103.057614][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.103727][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.140500][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.203800][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.303404][ T5808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.351078][ T5808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.392864][ T5808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.446738][ T5808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.600020][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.648971][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.685776][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.740072][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.890402][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.927766][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.963304][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.019118][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.189058][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.242032][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.243231][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.287153][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.328500][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.429932][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.448825][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.478441][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.479218][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.529073][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.529347][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.590725][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.631509][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.648495][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.648633][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.689761][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.689904][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.753914][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.800589][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.800735][ T1345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.822390][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.863087][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.863291][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.002683][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.010407][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.082637][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.082834][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.143355][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.143527][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.183246][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.259508][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.259599][ T1345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.319290][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.319452][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.398767][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.627283][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.788569][ T5799] veth0_vlan: entered promiscuous mode [ 105.852788][ T5799] veth1_vlan: entered promiscuous mode [ 105.871135][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.988988][ T5808] veth0_vlan: entered promiscuous mode [ 106.059684][ T5808] veth1_vlan: entered promiscuous mode [ 106.116972][ T5799] veth0_macvtap: entered promiscuous mode [ 106.145965][ T5799] veth1_macvtap: entered promiscuous mode [ 106.183405][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.261719][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.317012][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.388169][ T1177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.393815][ T1177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.413352][ T1177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.420775][ T5808] veth0_macvtap: entered promiscuous mode [ 106.429405][ T1177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.441576][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.528610][ T5808] veth1_macvtap: entered promiscuous mode [ 106.671369][ T5809] veth0_vlan: entered promiscuous mode [ 106.711418][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.772394][ T5809] veth1_vlan: entered promiscuous mode [ 106.777775][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.812485][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.812508][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.857719][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.878271][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.893835][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.923763][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.961579][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.961602][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.009694][ T5810] veth0_vlan: entered promiscuous mode [ 107.010222][ T5800] veth0_vlan: entered promiscuous mode [ 107.149967][ T5800] veth1_vlan: entered promiscuous mode [ 107.152492][ T5810] veth1_vlan: entered promiscuous mode [ 107.230890][ T5809] veth0_macvtap: entered promiscuous mode [ 107.269940][ T5809] veth1_macvtap: entered promiscuous mode [ 107.364757][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.364779][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.460503][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.552798][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.565082][ T5810] veth0_macvtap: entered promiscuous mode [ 107.567587][ T5800] veth0_macvtap: entered promiscuous mode [ 107.650812][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.650835][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.676776][ T5810] veth1_macvtap: entered promiscuous mode [ 107.682943][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.693399][ T5800] veth1_macvtap: entered promiscuous mode [ 107.723311][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.727696][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.755024][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.886921][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.896991][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.027224][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.089103][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.137569][ T1398] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.138594][ T1398] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.138640][ T1398] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.138678][ T1398] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.509577][ T5927] overlayfs: failed to resolve './file0': -2 [ 108.553486][ T5930] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.022996][ T140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.195569][ T140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.393289][ T140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.422404][ T140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.508969][ T806] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 109.675141][ T5936] overlayfs: failed to resolve './file0': -2 [ 109.699347][ T806] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.699386][ T806] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 109.699443][ T806] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 109.699457][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.726686][ T5936] FAULT_INJECTION: forcing a failure. [ 109.726686][ T5936] name failslab, interval 1, probability 0, space 0, times 1 [ 109.726720][ T5936] CPU: 0 UID: 0 PID: 5936 Comm: syz.0.8 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 109.726744][ T5936] Tainted: [L]=SOFTLOCKUP [ 109.726750][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.726761][ T5936] Call Trace: [ 109.726768][ T5936] [ 109.726776][ T5936] dump_stack_lvl+0x189/0x250 [ 109.726803][ T5936] ? __pfx____ratelimit+0x10/0x10 [ 109.726827][ T5936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.726850][ T5936] ? __pfx__printk+0x10/0x10 [ 109.726875][ T5936] ? __pfx___might_resched+0x10/0x10 [ 109.726898][ T5936] should_fail_ex+0x46c/0x600 [ 109.726924][ T5936] should_failslab+0xa8/0x100 [ 109.726945][ T5936] __kmalloc_noprof+0xe0/0x7e0 [ 109.726968][ T5936] ? kfree+0x4d/0x900 [ 109.726987][ T5936] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 109.727018][ T5936] tomoyo_realpath_from_path+0xe3/0x5d0 [ 109.727044][ T5936] ? tomoyo_domain+0xd9/0x130 [ 109.727075][ T5936] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 109.727096][ T5936] tomoyo_path_number_perm+0x1e8/0x5a0 [ 109.727120][ T5936] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 109.727145][ T5936] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 109.727170][ T5936] ? lockdep_hardirqs_on+0x98/0x140 [ 109.727224][ T5936] ? __fget_files+0x2a/0x420 [ 109.727248][ T5936] ? __fget_files+0x3a6/0x420 [ 109.727265][ T5936] ? __fget_files+0x2a/0x420 [ 109.727287][ T5936] security_file_ioctl+0xcb/0x2d0 [ 109.727311][ T5936] __se_sys_ioctl+0x47/0x170 [ 109.727338][ T5936] do_syscall_64+0xfa/0xf80 [ 109.727363][ T5936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.727380][ T5936] ? clear_bhb_loop+0x60/0xb0 [ 109.727402][ T5936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.727419][ T5936] RIP: 0033:0x7ff78a39f749 [ 109.727435][ T5936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.727449][ T5936] RSP: 002b:00007ff788606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.727469][ T5936] RAX: ffffffffffffffda RBX: 00007ff78a5f5fa0 RCX: 00007ff78a39f749 [ 109.727482][ T5936] RDX: 0000200000000580 RSI: 00000000c048aeca RDI: 0000000000000006 [ 109.727494][ T5936] RBP: 00007ff788606090 R08: 0000000000000000 R09: 0000000000000000 [ 109.727512][ T5936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.727523][ T5936] R13: 00007ff78a5f6038 R14: 00007ff78a5f5fa0 R15: 00007ffdd7e38758 [ 109.727555][ T5936] [ 109.727562][ T5936] ERROR: Out of memory at tomoyo_realpath_from_path. [ 110.053308][ T806] usb 4-1: config 0 descriptor?? [ 110.102961][ T806] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 110.103364][ T806] dvb-usb: bulk message failed: -22 (3/0) [ 110.126077][ T806] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 110.131558][ T806] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 110.131676][ T806] usb 4-1: media controller created [ 110.142678][ T806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.169374][ T806] dvb-usb: bulk message failed: -22 (6/0) [ 110.169516][ T806] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 110.191058][ T1398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.191079][ T1398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.247051][ T806] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 110.256518][ T806] dvb-usb: schedule remote query interval to 150 msecs. [ 110.256543][ T806] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 110.416035][ T806] dvb-usb: bulk message failed: -22 (1/0) [ 110.416083][ T806] dvb-usb: error while querying for an remote control event. [ 110.462968][ T5932] dvb-usb: bulk message failed: -22 (2/0) [ 110.463107][ T5932] dvb-usb: bulk message failed: -22 (4/0) [ 110.527573][ T806] usb 4-1: USB disconnect, device number 2 [ 110.725202][ T5940] overlayfs: failed to resolve './file0': -2 [ 110.921628][ T806] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 111.101391][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.101416][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.268347][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.268371][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.383095][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.383119][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.402384][ T37] audit: type=1326 audit(1765635944.444:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec91af749 code=0x7ffc0000 [ 111.402443][ T37] audit: type=1326 audit(1765635944.494:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ec91a65e7 code=0x7ffc0000 [ 111.402484][ T37] audit: type=1326 audit(1765635944.494:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ec914b829 code=0x7ffc0000 [ 111.402528][ T37] audit: type=1326 audit(1765635944.494:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3ec91af749 code=0x7ffc0000 [ 111.455944][ T37] audit: type=1326 audit(1765635944.534:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ec91a65e7 code=0x7ffc0000 [ 111.467522][ T37] audit: type=1326 audit(1765635944.564:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ec914b829 code=0x7ffc0000 [ 111.468331][ T37] audit: type=1326 audit(1765635944.574:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ec91a65e7 code=0x7ffc0000 [ 111.468895][ T37] audit: type=1326 audit(1765635944.574:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ec914b829 code=0x7ffc0000 [ 111.479592][ T37] audit: type=1326 audit(1765635944.574:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec91af749 code=0x7ffc0000 [ 111.480102][ T37] audit: type=1326 audit(1765635944.584:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ec91a65e7 code=0x7ffc0000 [ 111.652780][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.652804][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.016279][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.016304][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.606390][ T5974] FAULT_INJECTION: forcing a failure. [ 113.606390][ T5974] name failslab, interval 1, probability 0, space 0, times 0 [ 113.606429][ T5974] CPU: 1 UID: 0 PID: 5974 Comm: syz.1.2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 113.606458][ T5974] Tainted: [L]=SOFTLOCKUP [ 113.606465][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.606477][ T5974] Call Trace: [ 113.606485][ T5974] [ 113.606494][ T5974] dump_stack_lvl+0x189/0x250 [ 113.606527][ T5974] ? __pfx____ratelimit+0x10/0x10 [ 113.606556][ T5974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.606583][ T5974] ? __pfx__printk+0x10/0x10 [ 113.606612][ T5974] ? __pfx___might_resched+0x10/0x10 [ 113.606639][ T5974] should_fail_ex+0x46c/0x600 [ 113.606670][ T5974] should_failslab+0xa8/0x100 [ 113.606693][ T5974] __kmalloc_noprof+0xe0/0x7e0 [ 113.606722][ T5974] ? kfree+0x4d/0x900 [ 113.606744][ T5974] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 113.606780][ T5974] tomoyo_realpath_from_path+0xe3/0x5d0 [ 113.606811][ T5974] ? tomoyo_domain+0xd9/0x130 [ 113.606847][ T5974] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 113.606872][ T5974] tomoyo_path_number_perm+0x1e8/0x5a0 [ 113.606900][ T5974] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 113.606930][ T5974] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 113.606960][ T5974] ? lockdep_hardirqs_on+0x98/0x140 [ 113.607024][ T5974] ? __fget_files+0x2a/0x420 [ 113.607052][ T5974] ? __fget_files+0x3a6/0x420 [ 113.607072][ T5974] ? __fget_files+0x2a/0x420 [ 113.607098][ T5974] security_file_ioctl+0xcb/0x2d0 [ 113.607126][ T5974] __se_sys_ioctl+0x47/0x170 [ 113.607167][ T5974] do_syscall_64+0xfa/0xf80 [ 113.607197][ T5974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.607217][ T5974] ? clear_bhb_loop+0x60/0xb0 [ 113.607243][ T5974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.607263][ T5974] RIP: 0033:0x7f7d4a28f749 [ 113.607282][ T5974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.607298][ T5974] RSP: 002b:00007f7d484ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.607321][ T5974] RAX: ffffffffffffffda RBX: 00007f7d4a4e5fa0 RCX: 00007f7d4a28f749 [ 113.607336][ T5974] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 113.607349][ T5974] RBP: 00007f7d484ee090 R08: 0000000000000000 R09: 0000000000000000 [ 113.607361][ T5974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.607373][ T5974] R13: 00007f7d4a4e6038 R14: 00007f7d4a4e5fa0 R15: 00007ffd31501698 [ 113.607409][ T5974] [ 113.607417][ T5974] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.626261][ T5971] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 114.861320][ T5985] input: syz1 as /devices/virtual/input/input6 [ 117.214125][ T5811] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 117.565638][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.565670][ T5811] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 117.565716][ T5811] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 117.565739][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.682747][ T5811] usb 5-1: config 0 descriptor?? [ 118.278213][ T5811] corsair-psu 0003:1B1C:1C07.0001: unknown main item tag 0x2 [ 118.278259][ T5811] corsair-psu 0003:1B1C:1C07.0001: item fetching failed at offset 2/5 [ 118.279477][ T5811] corsair-psu 0003:1B1C:1C07.0001: probe with driver corsair-psu failed with error -22 [ 118.620454][ T10] usb 5-1: USB disconnect, device number 2 [ 119.460492][ T6021] capability: warning: `syz.3.27' uses deprecated v2 capabilities in a way that may be insecure [ 119.625517][ T5890] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 119.672766][ T6025] FAULT_INJECTION: forcing a failure. [ 119.672766][ T6025] name failslab, interval 1, probability 0, space 0, times 0 [ 119.672806][ T6025] CPU: 1 UID: 0 PID: 6025 Comm: syz.0.28 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 119.672834][ T6025] Tainted: [L]=SOFTLOCKUP [ 119.672841][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.672852][ T6025] Call Trace: [ 119.672860][ T6025] [ 119.672870][ T6025] dump_stack_lvl+0x189/0x250 [ 119.672901][ T6025] ? __pfx____ratelimit+0x10/0x10 [ 119.672929][ T6025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.672954][ T6025] ? __pfx__printk+0x10/0x10 [ 119.672983][ T6025] ? __pfx___might_resched+0x10/0x10 [ 119.673006][ T6025] ? fs_reclaim_acquire+0x7d/0x100 [ 119.673031][ T6025] should_fail_ex+0x46c/0x600 [ 119.673063][ T6025] should_failslab+0xa8/0x100 [ 119.673086][ T6025] __kmalloc_cache_noprof+0x84/0x6d0 [ 119.673117][ T6025] ? drm_atomic_state_alloc+0xa9/0x100 [ 119.673163][ T6025] drm_atomic_state_alloc+0xa9/0x100 [ 119.673189][ T6025] drm_client_modeset_commit_atomic+0xe2/0x760 [ 119.673228][ T6025] ? do_raw_spin_lock+0x121/0x290 [ 119.673256][ T6025] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 119.673305][ T6025] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 119.673333][ T6025] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 119.673361][ T6025] ? mutex_lock_nested+0x154/0x1d0 [ 119.673381][ T6025] ? drm_client_modeset_commit_locked+0x4c/0x4d0 [ 119.673411][ T6025] drm_client_modeset_commit_locked+0xce/0x4d0 [ 119.673445][ T6025] drm_client_modeset_commit+0x4a/0x70 [ 119.673472][ T6025] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9c/0x1c0 [ 119.673510][ T6025] drm_fbdev_client_restore+0x1b/0x30 [ 119.673533][ T6025] drm_client_dev_restore+0x14f/0x290 [ 119.673567][ T6025] drm_release+0x330/0x400 [ 119.673597][ T6025] ? __pfx_drm_release+0x10/0x10 [ 119.673618][ T6025] __fput+0x45b/0xa80 [ 119.673656][ T6025] fput_close_sync+0x113/0x220 [ 119.673680][ T6025] ? __pfx_fput_close_sync+0x10/0x10 [ 119.673719][ T6025] __x64_sys_close+0x7f/0x110 [ 119.673744][ T6025] do_syscall_64+0xfa/0xf80 [ 119.673775][ T6025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.673795][ T6025] ? clear_bhb_loop+0x60/0xb0 [ 119.673822][ T6025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.673839][ T6025] RIP: 0033:0x7ff78a39f749 [ 119.673857][ T6025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.673871][ T6025] RSP: 002b:00007ff788606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 119.673893][ T6025] RAX: ffffffffffffffda RBX: 00007ff78a5f5fa0 RCX: 00007ff78a39f749 [ 119.673908][ T6025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 119.673924][ T6025] RBP: 00007ff788606090 R08: 0000000000000000 R09: 0000000000000000 [ 119.673935][ T6025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.673946][ T6025] R13: 00007ff78a5f6038 R14: 00007ff78a5f5fa0 R15: 00007ffdd7e38758 [ 119.673983][ T6025] [ 119.865497][ T6027] netlink: 204 bytes leftover after parsing attributes in process `syz.0.30'. [ 119.865522][ T6027] netlink: 72 bytes leftover after parsing attributes in process `syz.0.30'. [ 119.865842][ T6027] netlink: 'syz.0.30': attribute type 5 has an invalid length. [ 120.040312][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 120.055973][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.056006][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.056047][ T5890] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 120.056068][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.108554][ T5890] usb 2-1: config 0 descriptor?? [ 120.894017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.606751][ T5890] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 121.738241][ T5890] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error -71). [ 121.766831][ T5890] usb 2-1: USB disconnect, device number 2 [ 121.901798][ T6040] fido_id[6040]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 121.943490][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.34'. [ 122.474111][ T5890] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.625901][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 122.630505][ T5890] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.630534][ T5890] usb 4-1: config 0 has no interface number 0 [ 122.630592][ T5890] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.630617][ T5890] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.630658][ T5890] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 122.630680][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.666749][ T1345] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.691709][ T5890] usb 4-1: config 0 descriptor?? [ 123.556856][ T6063] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 124.381592][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.527493][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.528704][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.533682][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.562037][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.603299][ T5890] uclogic 0003:28BD:0071.0003: pen parameters not found [ 124.603335][ T5890] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring [ 124.879916][ T1345] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.962593][ T6071] 9pnet: p9_errstr2errno: server reported unknown error  [ 124.973370][ T5876] usb 4-1: USB disconnect, device number 3 [ 125.434312][ T806] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 125.714030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.863988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.349931][ T1345] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.394952][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.394988][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.395030][ T806] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 126.395052][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.418744][ T806] usb 3-1: config 0 descriptor?? [ 126.594508][ T61] Bluetooth: hci1: command tx timeout [ 126.878004][ T1345] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.939792][ T806] arvo 0003:1E7D:30D4.0004: item fetching failed at offset 5/7 [ 126.940883][ T806] arvo 0003:1E7D:30D4.0004: parse failed [ 126.940962][ T806] arvo 0003:1E7D:30D4.0004: probe with driver arvo failed with error -22 [ 127.122311][ T806] usb 3-1: USB disconnect, device number 2 [ 127.956829][ T5875] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.105178][ T5875] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 128.112422][ T1345] bridge_slave_1: left allmulticast mode [ 128.112596][ T1345] bridge_slave_1: left promiscuous mode [ 128.120415][ T1345] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.161598][ T5875] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 128.161625][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.161637][ T5875] usb 2-1: Product: syz [ 128.161645][ T5875] usb 2-1: Manufacturer: syz [ 128.161653][ T5875] usb 2-1: SerialNumber: syz [ 128.207054][ T1345] bridge_slave_0: left allmulticast mode [ 128.207100][ T1345] bridge_slave_0: left promiscuous mode [ 128.207397][ T1345] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.213851][ T5875] usb 2-1: config 0 descriptor?? [ 128.251771][ T5875] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 128.261319][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.262599][ T5875] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 128.262668][ T5875] usb 2-1: media controller created [ 128.291491][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.335444][ T806] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.391946][ T5875] DVB: Unable to find symbol mt352_attach() [ 128.441275][ T5875] DVB: Unable to find symbol nxt6000_attach() [ 128.441287][ T5875] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 128.445682][ T5875] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 128.449932][ T5875] dvb-usb: schedule remote query interval to 1000 msecs. [ 128.449954][ T5875] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 128.449969][ T5875] dvb-usb: bulk message failed: -22 (7/0) [ 128.449985][ T5875] dvb-usb: bulk message failed: -22 (7/0) [ 128.777485][ T61] Bluetooth: hci1: command tx timeout [ 128.793334][ T806] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.803807][ T806] usb 1-1: config 128 has an invalid interface number: 139 but max is 0 [ 128.803836][ T806] usb 1-1: config 128 has no interface number 0 [ 128.803871][ T806] usb 1-1: config 128 interface 139 has no altsetting 0 [ 129.783668][ T5876] dvb-usb: bulk message failed: -22 (7/0) [ 129.783693][ T5876] dvb-usb: error while querying for an remote control event. [ 129.930302][ T806] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=7e.da [ 129.930405][ T806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.930426][ T806] usb 1-1: Product: ♙療Ϳ䍰갞깥畧ࢨ譙怷쪀Ἲ筇烱⃌島䙳傿賨댓ፕꆄ㎩が餵퍁붥磅욗긿ꒉ罩꽴햬䘘䅶뱡㱓ꦉ켼㶼覂Ἳ鸳뙤ꈃ꙲秸랑狹ꠦ⟉ᚔ쀡㊧ᦡꬆ控Ԯґ往텤앚屋૔ﶘ몘껌緺㗉䶥ᒧ籩䏫ꏈ⩥텄䞑㔕襚⬊ [ 129.930453][ T806] usb 1-1: Manufacturer: Ї [ 129.930471][ T806] usb 1-1: SerialNumber: ᰊ [ 130.230108][ T806] usb 1-1: USB disconnect, device number 2 [ 130.465878][ T5811] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 130.573447][ T6114] FAULT_INJECTION: forcing a failure. [ 130.573447][ T6114] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.573473][ T6114] CPU: 1 UID: 0 PID: 6114 Comm: syz.2.57 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 130.573489][ T6114] Tainted: [L]=SOFTLOCKUP [ 130.573493][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.573500][ T6114] Call Trace: [ 130.573504][ T6114] [ 130.573510][ T6114] dump_stack_lvl+0x189/0x250 [ 130.573529][ T6114] ? __pfx____ratelimit+0x10/0x10 [ 130.573546][ T6114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.573560][ T6114] ? __pfx__printk+0x10/0x10 [ 130.573571][ T6114] ? __might_fault+0xb0/0x130 [ 130.573594][ T6114] should_fail_ex+0x46c/0x600 [ 130.573610][ T6114] _copy_from_user+0x2d/0xb0 [ 130.573635][ T6114] ___sys_recvmsg+0x12e/0x510 [ 130.573663][ T6114] ? __pfx____sys_recvmsg+0x10/0x10 [ 130.573711][ T6114] ? __fget_files+0x3a6/0x420 [ 130.573738][ T6114] do_recvmmsg+0x30d/0x770 [ 130.573756][ T6114] ? __pfx_do_recvmmsg+0x10/0x10 [ 130.573767][ T6114] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 130.573783][ T6114] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 130.573805][ T6114] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 130.573827][ T6114] __x64_sys_recvmmsg+0x190/0x240 [ 130.573842][ T6114] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 130.573857][ T6114] ? do_syscall_64+0xbe/0xf80 [ 130.573874][ T6114] do_syscall_64+0xfa/0xf80 [ 130.573889][ T6114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.573900][ T6114] ? clear_bhb_loop+0x60/0xb0 [ 130.573921][ T6114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.573938][ T6114] RIP: 0033:0x7fbf36c9f749 [ 130.573956][ T6114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.573971][ T6114] RSP: 002b:00007fbf34f06038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 130.573993][ T6114] RAX: ffffffffffffffda RBX: 00007fbf36ef5fa0 RCX: 00007fbf36c9f749 [ 130.574007][ T6114] RDX: 0000000000000001 RSI: 0000200000003ec0 RDI: 0000000000000003 [ 130.574018][ T6114] RBP: 00007fbf34f06090 R08: 0000000000000000 R09: 0000000000000000 [ 130.574030][ T6114] R10: 0000000040012100 R11: 0000000000000246 R12: 0000000000000001 [ 130.574041][ T6114] R13: 00007fbf36ef6038 R14: 00007fbf36ef5fa0 R15: 00007fff07a7c2c8 [ 130.574083][ T6114] [ 130.655828][ T5811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.655866][ T5811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 130.677931][ T5811] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 130.677965][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 130.677984][ T5811] usb 4-1: SerialNumber: syz [ 130.844980][ T5999] dvb-usb: bulk message failed: -22 (7/0) [ 130.845003][ T5999] dvb-usb: error while querying for an remote control event. [ 130.845443][ T61] Bluetooth: hci1: command tx timeout [ 131.042767][ T5811] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 131.064932][ T5811] usb-storage 4-1:1.0: USB Mass Storage device detected [ 131.116185][ T5811] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 131.123899][ T5811] scsi host1: usb-storage 4-1:1.0 [ 131.272243][ T5890] usb 2-1: USB disconnect, device number 3 [ 131.388336][ T5811] usb 4-1: USB disconnect, device number 4 [ 131.626898][ T5890] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 131.732526][ T806] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 131.907340][ T806] usb 1-1: config index 0 descriptor too short (expected 12580, got 36) [ 131.907370][ T806] usb 1-1: config 83 has too many interfaces: 42, using maximum allowed: 32 [ 131.907391][ T806] usb 1-1: config 83 has 1 interface, different from the descriptor's value: 42 [ 131.907448][ T806] usb 1-1: config 83 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.907473][ T806] usb 1-1: config 83 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.907496][ T806] usb 1-1: config 83 interface 0 has no altsetting 0 [ 131.907530][ T806] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 131.907553][ T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.726352][ T806] usb 1-1: string descriptor 0 read error: -71 [ 132.765978][ T806] usbhid 1-1:83.0: can't add hid device: -71 [ 132.766125][ T806] usbhid 1-1:83.0: probe with driver usbhid failed with error -71 [ 132.816033][ T806] usb 1-1: USB disconnect, device number 3 [ 132.914927][ T61] Bluetooth: hci1: command tx timeout [ 133.041036][ T6146] capability: warning: `syz.3.63' uses 32-bit capabilities (legacy support in use) [ 135.584700][ T806] IPVS: starting estimator thread 0... [ 135.694277][ T6168] IPVS: using max 6 ests per chain, 14400 per kthread [ 135.806352][ T6171] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.866738][ T1345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.984982][ T1345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.050335][ T1345] bond0 (unregistering): Released all slaves [ 136.495402][ T6060] chnl_net:caif_netlink_parms(): no params data found [ 136.634161][ T806] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.819967][ T806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.820013][ T806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.820053][ T806] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 136.820076][ T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.830126][ T806] usb 1-1: config 0 descriptor?? [ 137.051914][ T6186] FAULT_INJECTION: forcing a failure. [ 137.051914][ T6186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.051950][ T6186] CPU: 0 UID: 0 PID: 6186 Comm: syz.2.74 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 137.051974][ T6186] Tainted: [L]=SOFTLOCKUP [ 137.051980][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.051990][ T6186] Call Trace: [ 137.051996][ T6186] [ 137.052004][ T6186] dump_stack_lvl+0x189/0x250 [ 137.052031][ T6186] ? __pfx____ratelimit+0x10/0x10 [ 137.052055][ T6186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.052076][ T6186] ? __pfx__printk+0x10/0x10 [ 137.052093][ T6186] ? __might_fault+0xb0/0x130 [ 137.052128][ T6186] should_fail_ex+0x46c/0x600 [ 137.052153][ T6186] _copy_from_user+0x2d/0xb0 [ 137.052177][ T6186] ___sys_sendmsg+0x158/0x2a0 [ 137.052199][ T6186] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.052261][ T6186] ? __fget_files+0x2a/0x420 [ 137.052277][ T6186] ? __fget_files+0x3a6/0x420 [ 137.052304][ T6186] __x64_sys_sendmsg+0x1a1/0x260 [ 137.052323][ T6186] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.052350][ T6186] ? __pfx_ksys_write+0x10/0x10 [ 137.052376][ T6186] ? do_syscall_64+0xbe/0xf80 [ 137.052403][ T6186] do_syscall_64+0xfa/0xf80 [ 137.052427][ T6186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.052445][ T6186] ? clear_bhb_loop+0x60/0xb0 [ 137.052468][ T6186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.052486][ T6186] RIP: 0033:0x7fbf36c9f749 [ 137.052504][ T6186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.052519][ T6186] RSP: 002b:00007fbf34f06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.052541][ T6186] RAX: ffffffffffffffda RBX: 00007fbf36ef5fa0 RCX: 00007fbf36c9f749 [ 137.052555][ T6186] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 137.052567][ T6186] RBP: 00007fbf34f06090 R08: 0000000000000000 R09: 0000000000000000 [ 137.052579][ T6186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.052590][ T6186] R13: 00007fbf36ef6038 R14: 00007fbf36ef5fa0 R15: 00007fff07a7c2c8 [ 137.052623][ T6186] [ 137.293312][ T806] arvo 0003:1E7D:30D4.0005: item fetching failed at offset 5/7 [ 137.293834][ T806] arvo 0003:1E7D:30D4.0005: parse failed [ 137.293874][ T806] arvo 0003:1E7D:30D4.0005: probe with driver arvo failed with error -22 [ 137.464944][ T5811] usb 1-1: USB disconnect, device number 4 [ 137.738782][ T5998] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.884097][ T6002] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.885283][ T5998] usb 4-1: Using ep0 maxpacket: 32 [ 137.890230][ T5998] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 137.890258][ T5998] usb 4-1: config 0 has no interface number 0 [ 137.890305][ T5998] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 137.890321][ T5998] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 137.893480][ T5998] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 137.893506][ T5998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.893524][ T5998] usb 4-1: Product: syz [ 137.893537][ T5998] usb 4-1: Manufacturer: syz [ 137.893549][ T5998] usb 4-1: SerialNumber: syz [ 137.955450][ T5998] usb 4-1: config 0 descriptor?? [ 138.090553][ T6002] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 138.090583][ T6002] usb 2-1: config 0 has no interface number 0 [ 138.090615][ T6002] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 138.090659][ T6002] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 138.090685][ T6002] usb 2-1: config 0 interface 255 has no altsetting 0 [ 138.090728][ T6002] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 138.090750][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.218841][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.219649][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.285971][ T6002] usb 2-1: config 0 descriptor?? [ 138.292162][ T6002] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 138.330705][ T5998] radio-si470x 4-1:0.35: this is not a si470x device. [ 138.370946][ T5998] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 138.418583][ T5998] usb 4-1: USB disconnect, device number 5 [ 138.494596][ T806] usb 2-1: USB disconnect, device number 4 [ 139.029818][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.030183][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.030437][ T6060] bridge_slave_0: entered allmulticast mode [ 139.080594][ T6060] bridge_slave_0: entered promiscuous mode [ 139.122931][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.140457][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.140678][ T6060] bridge_slave_1: entered allmulticast mode [ 139.152994][ T6060] bridge_slave_1: entered promiscuous mode [ 139.403131][ T1345] hsr_slave_0: left promiscuous mode [ 139.434008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.444012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.453994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.464000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.467991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.473994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.483982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.044065][ T1345] hsr_slave_1: left promiscuous mode [ 141.067523][ T1345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.067646][ T1345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.194263][ T1345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.194298][ T1345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.509562][ T1345] veth1_macvtap: left promiscuous mode [ 141.509862][ T1345] veth0_macvtap: left promiscuous mode [ 141.510213][ T1345] veth1_vlan: left promiscuous mode [ 141.525049][ T1345] veth0_vlan: left promiscuous mode [ 143.134422][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 143.134450][ T6243] netlink: 32 bytes leftover after parsing attributes in process `syz.2.87'. [ 143.804070][ T6067] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.958487][ T6067] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.958517][ T6067] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 143.958574][ T6067] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 143.958599][ T6067] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.009030][ T6067] usb 3-1: config 0 descriptor?? [ 145.491365][ T6259] Zero length message leads to an empty skb [ 145.501375][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 145.543651][ T6259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.546641][ T6259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.067372][ T6067] Bluetooth: Can't get version to change to load ram patch err [ 146.067386][ T6067] Bluetooth: Loading patch file failed [ 146.067415][ T6067] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 146.114882][ T6067] usb 3-1: USB disconnect, device number 3 [ 146.375325][ T5998] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 146.531012][ T5998] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 146.531042][ T5998] usb 4-1: config 0 has no interface number 0 [ 146.531087][ T5998] usb 4-1: config 0 interface 255 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.577381][ T5998] usb 4-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 146.577414][ T5998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.577434][ T5998] usb 4-1: Product: syz [ 146.577449][ T5998] usb 4-1: Manufacturer: syz [ 146.577464][ T5998] usb 4-1: SerialNumber: syz [ 146.582244][ T5998] usb 4-1: config 0 descriptor?? [ 146.668860][ T5998] vmk80xx 4-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 147.751319][ T1345] team0 (unregistering): Port device team_slave_1 removed [ 147.994773][ T1345] team0 (unregistering): Port device team_slave_0 removed [ 150.004124][ T6002] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.164268][ T6002] usb 3-1: Using ep0 maxpacket: 32 [ 150.166154][ T6002] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 150.166184][ T6002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.170417][ T6002] usb 3-1: config 0 descriptor?? [ 150.229896][ T6002] as10x_usb: device has been detected [ 150.231071][ T6002] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 150.260635][ T6002] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 150.317305][ T6002] as10x_usb: error during firmware upload part1 [ 150.317733][ T6002] Registered device nBox DVB-T Dongle [ 150.377430][ T6002] usb 3-1: USB disconnect, device number 4 [ 150.451466][ T6002] Unregistered device nBox DVB-T Dongle [ 150.471602][ T6002] as10x_usb: device has been disconnected [ 150.894260][ T6002] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 151.056452][ T6002] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 151.056483][ T6002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.082680][ T6002] usb 3-1: config 0 descriptor?? [ 151.311553][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.312440][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.352038][ T6002] kaweth 3-1:0.0: Firmware present in device. [ 151.633430][ T6002] kaweth 3-1:0.0: Statistics collection: 0 [ 151.633446][ T6002] kaweth 3-1:0.0: Multicast filter limit: 0 [ 151.633454][ T6002] kaweth 3-1:0.0: MTU: 0 [ 151.633461][ T6002] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 152.537821][ T5998] usb 4-1: USB disconnect, device number 6 [ 152.571350][ T6060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.759665][ T6060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.920241][ T6297] netlink: 52 bytes leftover after parsing attributes in process `syz.3.104'. [ 152.973745][ T6002] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 152.987099][ T6295] warning: `syz.0.102' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 152.991221][ T6002] usb 3-1: USB disconnect, device number 5 [ 153.052549][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.077129][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.365208][ T6060] team0: Port device team_slave_0 added [ 153.408858][ T6060] team0: Port device team_slave_1 added [ 155.008393][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.008409][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.053667][ T6060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.073091][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.073110][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.073137][ T6060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.278914][ T6317] Illegal XDP return value 256 on prog (id 19) dev N/A, expect packet loss! [ 155.354094][ T49] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 155.521109][ T49] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.536226][ T49] usb 3-1: config 0 has an invalid interface number: 144 but max is 1 [ 155.536256][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.536275][ T49] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 155.536294][ T49] usb 3-1: config 0 has no interface number 0 [ 155.536349][ T49] usb 3-1: config 0 interface 144 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 155.536377][ T49] usb 3-1: config 0 interface 144 has no altsetting 0 [ 155.600433][ T49] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=d0.ae [ 155.600463][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.600481][ T49] usb 3-1: Product: syz [ 155.600494][ T49] usb 3-1: Manufacturer: syz [ 155.600507][ T49] usb 3-1: SerialNumber: syz [ 155.646896][ T49] usb 3-1: config 0 descriptor?? [ 155.665147][ T49] ims_pcu 3-1:0.144: Zero length descriptor [ 155.665219][ T49] ims_pcu 3-1:0.144: probe with driver ims_pcu failed with error -22 [ 155.822944][ T6060] hsr_slave_0: entered promiscuous mode [ 155.844418][ T6060] hsr_slave_1: entered promiscuous mode [ 155.845591][ T6060] debugfs: 'hsr0' already exists in 'hsr' [ 155.845618][ T6060] Cannot create hsr debugfs directory [ 155.991667][ T6331] FAULT_INJECTION: forcing a failure. [ 155.991667][ T6331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.991707][ T6331] CPU: 0 UID: 0 PID: 6331 Comm: syz.0.115 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 155.991735][ T6331] Tainted: [L]=SOFTLOCKUP [ 155.991742][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.991754][ T6331] Call Trace: [ 155.991763][ T6331] [ 155.991772][ T6331] dump_stack_lvl+0x189/0x250 [ 155.991806][ T6331] ? __pfx____ratelimit+0x10/0x10 [ 155.991844][ T6331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.991871][ T6331] ? __pfx__printk+0x10/0x10 [ 155.991911][ T6331] should_fail_ex+0x46c/0x600 [ 155.991942][ T6331] _copy_to_user+0x31/0xb0 [ 155.991974][ T6331] simple_read_from_buffer+0xe1/0x170 [ 155.992003][ T6331] proc_fail_nth_read+0x1b6/0x220 [ 155.992038][ T6331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.992072][ T6331] ? rw_verify_area+0x2ac/0x4e0 [ 155.992099][ T6331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.992130][ T6331] vfs_read+0x206/0xa30 [ 155.992170][ T6331] ? __pfx_vfs_read+0x10/0x10 [ 155.992195][ T6331] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 155.992230][ T6331] ? mutex_lock_nested+0x154/0x1d0 [ 155.992252][ T6331] ? fdget_pos+0x253/0x320 [ 155.992286][ T6331] ksys_read+0x14b/0x260 [ 155.992310][ T6331] ? __pfx_filldir+0x10/0x10 [ 155.992341][ T6331] ? __pfx_ksys_read+0x10/0x10 [ 155.992374][ T6331] ? do_syscall_64+0xbe/0xf80 [ 155.992407][ T6331] do_syscall_64+0xfa/0xf80 [ 155.992436][ T6331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.992457][ T6331] ? clear_bhb_loop+0x60/0xb0 [ 155.992483][ T6331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.992503][ T6331] RIP: 0033:0x7ff78a39e15c [ 155.992523][ T6331] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 155.992540][ T6331] RSP: 002b:00007ff788606030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.992562][ T6331] RAX: ffffffffffffffda RBX: 00007ff78a5f5fa0 RCX: 00007ff78a39e15c [ 155.992578][ T6331] RDX: 000000000000000f RSI: 00007ff7886060a0 RDI: 0000000000000005 [ 155.992591][ T6331] RBP: 00007ff788606090 R08: 0000000000000000 R09: 0000000000000000 [ 155.992605][ T6331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.992618][ T6331] R13: 00007ff78a5f6038 R14: 00007ff78a5f5fa0 R15: 00007ffdd7e38758 [ 155.992654][ T6331] [ 156.386448][ T6067] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 157.286941][ T5964] usb 3-1: USB disconnect, device number 6 [ 157.341067][ T6067] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 157.341120][ T6067] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.341156][ T6067] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 157.341199][ T6067] usb 4-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 157.341223][ T6067] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.446983][ T6067] usb 4-1: config 0 descriptor?? [ 157.820974][ T6358] syz.2.120 uses obsolete (PF_INET,SOCK_PACKET) [ 157.905919][ T6360] Bluetooth: MGMT ver 1.23 [ 158.897092][ T6067] usbhid 4-1:0.0: can't add hid device: -71 [ 158.897243][ T6067] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 158.917147][ T6067] usb 4-1: USB disconnect, device number 7 [ 159.863316][ T6376] FAULT_INJECTION: forcing a failure. [ 159.863316][ T6376] name failslab, interval 1, probability 0, space 0, times 0 [ 159.863355][ T6376] CPU: 0 UID: 0 PID: 6376 Comm: syz.3.123 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 159.863383][ T6376] Tainted: [L]=SOFTLOCKUP [ 159.863390][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.863401][ T6376] Call Trace: [ 159.863409][ T6376] [ 159.863417][ T6376] dump_stack_lvl+0x189/0x250 [ 159.863448][ T6376] ? __pfx____ratelimit+0x10/0x10 [ 159.863475][ T6376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.863501][ T6376] ? __pfx__printk+0x10/0x10 [ 159.863528][ T6376] ? __pfx___might_resched+0x10/0x10 [ 159.863555][ T6376] should_fail_ex+0x46c/0x600 [ 159.863584][ T6376] should_failslab+0xa8/0x100 [ 159.863606][ T6376] __kmalloc_noprof+0xe0/0x7e0 [ 159.863633][ T6376] ? kfree+0x4d/0x900 [ 159.863655][ T6376] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 159.863691][ T6376] tomoyo_realpath_from_path+0xe3/0x5d0 [ 159.863721][ T6376] ? tomoyo_domain+0xd9/0x130 [ 159.863756][ T6376] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 159.863780][ T6376] tomoyo_path_number_perm+0x1e8/0x5a0 [ 159.863816][ T6376] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 159.863846][ T6376] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 159.863875][ T6376] ? lockdep_hardirqs_on+0x98/0x140 [ 159.863942][ T6376] ? __fget_files+0x2a/0x420 [ 159.863968][ T6376] ? __fget_files+0x3a6/0x420 [ 159.863987][ T6376] ? __fget_files+0x2a/0x420 [ 159.864012][ T6376] security_file_ioctl+0xcb/0x2d0 [ 159.864039][ T6376] __se_sys_ioctl+0x47/0x170 [ 159.864069][ T6376] do_syscall_64+0xfa/0xf80 [ 159.864097][ T6376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.864117][ T6376] ? clear_bhb_loop+0x60/0xb0 [ 159.864141][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.864159][ T6376] RIP: 0033:0x7f3ec91af749 [ 159.864178][ T6376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.864194][ T6376] RSP: 002b:00007f3ec7416038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.864217][ T6376] RAX: ffffffffffffffda RBX: 00007f3ec9405fa0 RCX: 00007f3ec91af749 [ 159.864232][ T6376] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 159.864244][ T6376] RBP: 00007f3ec7416090 R08: 0000000000000000 R09: 0000000000000000 [ 159.864256][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.864267][ T6376] R13: 00007f3ec9406038 R14: 00007f3ec9405fa0 R15: 00007ffe267ea788 [ 159.864303][ T6376] [ 159.878330][ T6376] ERROR: Out of memory at tomoyo_realpath_from_path. [ 159.961321][ T61] Bluetooth: hci0: command tx timeout [ 161.190330][ T6382] FAULT_INJECTION: forcing a failure. [ 161.190330][ T6382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.190370][ T6382] CPU: 0 UID: 0 PID: 6382 Comm: syz.1.124 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 161.190398][ T6382] Tainted: [L]=SOFTLOCKUP [ 161.190404][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.190415][ T6382] Call Trace: [ 161.190423][ T6382] [ 161.190433][ T6382] dump_stack_lvl+0x189/0x250 [ 161.190465][ T6382] ? __pfx____ratelimit+0x10/0x10 [ 161.190492][ T6382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.190519][ T6382] ? __pfx__printk+0x10/0x10 [ 161.190540][ T6382] ? __might_fault+0xb0/0x130 [ 161.190581][ T6382] should_fail_ex+0x46c/0x600 [ 161.190612][ T6382] _copy_from_user+0x2d/0xb0 [ 161.190642][ T6382] ___sys_sendmsg+0x158/0x2a0 [ 161.190668][ T6382] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.190731][ T6382] ? __fget_files+0x2a/0x420 [ 161.190752][ T6382] ? __fget_files+0x3a6/0x420 [ 161.190786][ T6382] __x64_sys_sendmsg+0x1a1/0x260 [ 161.190811][ T6382] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.190845][ T6382] ? __pfx_ksys_write+0x10/0x10 [ 161.190886][ T6382] ? do_syscall_64+0xbe/0xf80 [ 161.190918][ T6382] do_syscall_64+0xfa/0xf80 [ 161.190945][ T6382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.190965][ T6382] ? clear_bhb_loop+0x60/0xb0 [ 161.190989][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.191008][ T6382] RIP: 0033:0x7f7d4a28f749 [ 161.191025][ T6382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.191041][ T6382] RSP: 002b:00007f7d484ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.191063][ T6382] RAX: ffffffffffffffda RBX: 00007f7d4a4e5fa0 RCX: 00007f7d4a28f749 [ 161.191077][ T6382] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000007 [ 161.191090][ T6382] RBP: 00007f7d484ee090 R08: 0000000000000000 R09: 0000000000000000 [ 161.191102][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.191113][ T6382] R13: 00007f7d4a4e6038 R14: 00007f7d4a4e5fa0 R15: 00007ffd31501698 [ 161.191146][ T6382] [ 161.530832][ T6390] No control pipe specified [ 161.944676][ T5964] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 162.108889][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.108924][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.108963][ T5964] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 162.108985][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.201459][ T5964] usb 3-1: config 0 descriptor?? [ 162.643678][ T5964] usbhid 3-1:0.0: can't add hid device: -71 [ 162.643811][ T5964] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 162.699117][ T5964] usb 3-1: USB disconnect, device number 7 [ 162.824193][ T6067] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 162.989249][ T6067] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 162.989280][ T6067] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 162.989300][ T6067] usb 1-1: config 8 has no interface number 0 [ 162.989458][ T6067] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 162.989487][ T6067] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.065407][ T6067] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 163.065440][ T6067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.065460][ T6067] usb 1-1: Product: syz [ 163.065474][ T6067] usb 1-1: Manufacturer: syz [ 163.065488][ T6067] usb 1-1: SerialNumber: syz [ 165.809058][ T6067] usb 1-1: USB disconnect, device number 5 [ 167.087492][ T6441] FAULT_INJECTION: forcing a failure. [ 167.087492][ T6441] name failslab, interval 1, probability 0, space 0, times 0 [ 167.087531][ T6441] CPU: 1 UID: 0 PID: 6441 Comm: syz.0.138 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 167.087559][ T6441] Tainted: [L]=SOFTLOCKUP [ 167.087588][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.087599][ T6441] Call Trace: [ 167.087607][ T6441] [ 167.087617][ T6441] dump_stack_lvl+0x189/0x250 [ 167.087650][ T6441] ? __pfx____ratelimit+0x10/0x10 [ 167.087678][ T6441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.087705][ T6441] ? __pfx__printk+0x10/0x10 [ 167.087740][ T6441] ? __pfx___might_resched+0x10/0x10 [ 167.087768][ T6441] should_fail_ex+0x46c/0x600 [ 167.087798][ T6441] should_failslab+0xa8/0x100 [ 167.087821][ T6441] __kmalloc_noprof+0xe0/0x7e0 [ 167.087850][ T6441] ? kfree+0x4d/0x900 [ 167.087872][ T6441] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 167.087909][ T6441] tomoyo_realpath_from_path+0xe3/0x5d0 [ 167.087940][ T6441] ? tomoyo_domain+0xd9/0x130 [ 167.087976][ T6441] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 167.088000][ T6441] tomoyo_path_number_perm+0x1e8/0x5a0 [ 167.088028][ T6441] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 167.088058][ T6441] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 167.088088][ T6441] ? lockdep_hardirqs_on+0x98/0x140 [ 167.088151][ T6441] ? __fget_files+0x2a/0x420 [ 167.088178][ T6441] ? __fget_files+0x3a6/0x420 [ 167.088199][ T6441] ? __fget_files+0x2a/0x420 [ 167.088225][ T6441] security_file_ioctl+0xcb/0x2d0 [ 167.088254][ T6441] __se_sys_ioctl+0x47/0x170 [ 167.088284][ T6441] do_syscall_64+0xfa/0xf80 [ 167.088314][ T6441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.088335][ T6441] ? clear_bhb_loop+0x60/0xb0 [ 167.088360][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.088380][ T6441] RIP: 0033:0x7ff78a39f749 [ 167.088398][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.088415][ T6441] RSP: 002b:00007ff788606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.088437][ T6441] RAX: ffffffffffffffda RBX: 00007ff78a5f5fa0 RCX: 00007ff78a39f749 [ 167.088452][ T6441] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 167.088464][ T6441] RBP: 00007ff788606090 R08: 0000000000000000 R09: 0000000000000000 [ 167.088477][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.088489][ T6441] R13: 00007ff78a5f6038 R14: 00007ff78a5f5fa0 R15: 00007ffdd7e38758 [ 167.088524][ T6441] [ 167.088532][ T6441] ERROR: Out of memory at tomoyo_realpath_from_path. [ 167.334028][ T6067] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 167.654130][ T5999] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 167.755447][ T6067] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.755477][ T6067] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 167.755534][ T6067] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 167.755559][ T6067] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.834084][ T6067] usb 3-1: config 0 descriptor?? [ 167.999572][ T5999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 167.999623][ T5999] usb 4-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.00 [ 167.999646][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.118501][ T5999] usb 4-1: config 0 descriptor?? [ 168.129235][ T6447] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 168.482701][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.499710][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.692323][ T5999] ntrig 0003:1B96:0001.0006: hidraw0: USB HID v0.06 Device [HID 1b96:0001] on usb-dummy_hcd.3-1/input0 [ 168.910715][ T5999] usb 4-1: USB disconnect, device number 8 [ 169.019014][ T6067] Bluetooth: Can't get version to change to load ram patch err [ 169.019027][ T6067] Bluetooth: Loading patch file failed [ 169.019053][ T6067] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 169.023120][ T6067] usb 3-1: USB disconnect, device number 8 [ 169.153066][ T6463] fido_id[6463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 169.572875][ T6060] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.703222][ T6060] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.870648][ T6060] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.965397][ T6060] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.024191][ T5999] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 170.072403][ T6476] kvm_intel: kvm [6469]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 170.073867][ T6476] kvm_intel: kvm [6469]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 170.076863][ T6476] kvm_intel: kvm [6469]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 170.077835][ T6476] kvm_intel: kvm [6469]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 170.078804][ T6476] kvm_intel: kvm [6469]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 170.079761][ T6476] kvm_intel: kvm [6469]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 170.080723][ T6476] kvm_intel: kvm [6469]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 170.081676][ T6476] kvm_intel: kvm [6469]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 170.082641][ T6476] kvm_intel: kvm [6469]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 170.083638][ T6476] kvm_intel: kvm [6469]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 170.259118][ T5999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.259154][ T5999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.259196][ T5999] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 170.259285][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.311780][ T5999] usb 4-1: config 0 descriptor?? [ 170.601042][ T6060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.809569][ T5999] usbhid 4-1:0.0: can't add hid device: -71 [ 170.809711][ T5999] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 170.823829][ T5999] usb 4-1: USB disconnect, device number 9 [ 170.906255][ T6060] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.963140][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.963389][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.013636][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.021468][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.102746][ T6060] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.102773][ T6060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.480808][ T6506] block nbd0: NBD_DISCONNECT [ 172.519197][ T6060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.649935][ T6515] FAULT_INJECTION: forcing a failure. [ 173.649935][ T6515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.649976][ T6515] CPU: 1 UID: 0 PID: 6515 Comm: syz.2.150 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 173.650004][ T6515] Tainted: [L]=SOFTLOCKUP [ 173.650011][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.650023][ T6515] Call Trace: [ 173.650031][ T6515] [ 173.650040][ T6515] dump_stack_lvl+0x189/0x250 [ 173.650072][ T6515] ? __pfx____ratelimit+0x10/0x10 [ 173.650100][ T6515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.650127][ T6515] ? __pfx__printk+0x10/0x10 [ 173.650148][ T6515] ? __might_fault+0xb0/0x130 [ 173.650189][ T6515] should_fail_ex+0x46c/0x600 [ 173.650219][ T6515] _copy_from_user+0x2d/0xb0 [ 173.650249][ T6515] ___sys_sendmsg+0x158/0x2a0 [ 173.650275][ T6515] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.650339][ T6515] ? __fget_files+0x2a/0x420 [ 173.650359][ T6515] ? __fget_files+0x3a6/0x420 [ 173.650393][ T6515] __x64_sys_sendmsg+0x1a1/0x260 [ 173.650419][ T6515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.650453][ T6515] ? __pfx_ksys_write+0x10/0x10 [ 173.650484][ T6515] ? do_syscall_64+0xbe/0xf80 [ 173.650517][ T6515] do_syscall_64+0xfa/0xf80 [ 173.650546][ T6515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.650566][ T6515] ? clear_bhb_loop+0x60/0xb0 [ 173.650591][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.650610][ T6515] RIP: 0033:0x7fbf36c9f749 [ 173.650629][ T6515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.650645][ T6515] RSP: 002b:00007fbf34f06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.650676][ T6515] RAX: ffffffffffffffda RBX: 00007fbf36ef5fa0 RCX: 00007fbf36c9f749 [ 173.650691][ T6515] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 173.650704][ T6515] RBP: 00007fbf34f06090 R08: 0000000000000000 R09: 0000000000000000 [ 173.650716][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.650728][ T6515] R13: 00007fbf36ef6038 R14: 00007fbf36ef5fa0 R15: 00007fff07a7c2c8 [ 173.650763][ T6515] [ 174.238365][ T6524] No control pipe specified [ 175.031027][ T6547] ======================================================= [ 175.031027][ T6547] WARNING: The mand mount option has been deprecated and [ 175.031027][ T6547] and is ignored by this kernel. Remove the mand [ 175.031027][ T6547] option from the mount to silence this warning. [ 175.031027][ T6547] ======================================================= [ 175.094540][ T6548] overlayfs: overlapping lowerdir path [ 175.210029][ T6549] sctp: [Deprecated]: syz.2.158 (pid 6549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.210029][ T6549] Use struct sctp_sack_info instead [ 177.570051][ T6060] veth0_vlan: entered promiscuous mode [ 177.619748][ T6060] veth1_vlan: entered promiscuous mode [ 177.699000][ T6579] loop2: detected capacity change from 0 to 7 [ 177.784703][ T6060] veth0_macvtap: entered promiscuous mode [ 177.795096][ T5934] Dev loop2: unable to read RDB block 7 [ 177.795132][ T5934] loop2: AHDI p1 p2 p3 [ 177.795168][ T5934] loop2: partition table partially beyond EOD, truncated [ 177.817631][ T6060] veth1_macvtap: entered promiscuous mode [ 177.831571][ T5934] loop2: p1 start 1601398130 is beyond EOD, truncated [ 177.831595][ T5934] loop2: p2 start 1702059890 is beyond EOD, truncated [ 177.898451][ T6579] Dev loop2: unable to read RDB block 7 [ 177.898479][ T6579] loop2: AHDI p1 p2 p3 [ 177.898500][ T6579] loop2: partition table partially beyond EOD, truncated [ 177.908644][ T6579] loop2: p1 start 1601398130 is beyond EOD, truncated [ 177.908675][ T6579] loop2: p2 start 1702059890 is beyond EOD, truncated [ 178.016576][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.090289][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.232701][ T6425] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.233006][ T6425] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.233046][ T6425] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.233084][ T6425] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.149500][ T6598] netlink: 124 bytes leftover after parsing attributes in process `syz.3.165'. [ 180.273811][ T6602] No control pipe specified [ 180.506108][ T1345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.506132][ T1345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.737999][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.738021][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.495635][ T6620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.172'. [ 182.492700][ T49] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 183.589199][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 183.624452][ T49] usb 2-1: config 0 has no interfaces? [ 183.628899][ T49] usb 2-1: config 0 has no interfaces? [ 183.632255][ T49] usb 2-1: config 0 has no interfaces? [ 183.638134][ T49] usb 2-1: config 0 has no interfaces? [ 183.638179][ T49] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 183.638203][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.664053][ T6568] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 183.694675][ T49] usb 2-1: config 0 descriptor?? [ 186.604116][ T6568] usb 4-1: Using ep0 maxpacket: 32 [ 187.579641][ T6568] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 187.583572][ T6568] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 187.583602][ T6568] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 187.583631][ T6568] usb 4-1: Product: syz [ 187.583645][ T6568] usb 4-1: Manufacturer: syz [ 187.583659][ T6568] usb 4-1: SerialNumber: syz [ 187.681063][ T6568] usb 4-1: config 0 descriptor?? [ 187.682084][ T6623] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 244.010832][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.010955][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.067796][ T6630] Bluetooth: hci4: command 0x0406 tx timeout [ 281.067846][ T6630] Bluetooth: hci2: command 0x0406 tx timeout [ 281.067873][ T6630] Bluetooth: hci0: command 0x0406 tx timeout [ 281.067899][ T6630] Bluetooth: hci3: command tx timeout [ 283.548184][ T5815] Bluetooth: hci1: command tx timeout [ 287.459086][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.459168][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 295.603881][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 295.603902][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6610/2:b..l P6060/3:b..l P6568/1:b..l P30/3:b..l [ 295.603970][ C1] rcu: (detected by 1, t=10502 jiffies, g=15141, q=778 ncpus=2) [ 295.603989][ C1] task:ksoftirqd/1 state:D stack:21368 pid:30 tgid:30 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 295.604075][ C1] Call Trace: [ 295.604082][ C1] [ 295.604097][ C1] __schedule+0x1480/0x50a0 [ 295.604151][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 295.604179][ C1] ? __pfx___schedule+0x10/0x10 [ 295.604227][ C1] schedule_rtlock+0x30/0x70 [ 295.604252][ C1] rtlock_slowlock_locked+0x3819/0x4010 [ 295.604278][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 295.604322][ C1] ? rtlock_slowlock_locked+0x286/0x4010 [ 295.604345][ C1] ? do_raw_spin_lock+0x121/0x290 [ 295.604374][ C1] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 295.604409][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 295.604449][ C1] rt_spin_lock+0x158/0x3e0 [ 295.604475][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 295.604501][ C1] ? rcu_is_watching+0x15/0xb0 [ 295.604528][ C1] usb_hcd_submit_urb+0x261/0x1b60 [ 295.604568][ C1] hub_resubmit_irq_urb+0x80/0x160 [ 295.604595][ C1] __usb_hcd_giveback_urb+0x3b4/0x5e0 [ 295.604627][ C1] usb_giveback_urb_bh+0x296/0x420 [ 295.604666][ C1] ? __pfx_usb_giveback_urb_bh+0x10/0x10 [ 295.604697][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.604722][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 295.604744][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 295.604767][ C1] process_scheduled_works+0xad1/0x1770 [ 295.604822][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 295.604863][ C1] bh_worker+0x2ca/0x630 [ 295.604901][ C1] tasklet_hi_action+0xf/0x70 [ 295.604926][ C1] handle_softirqs+0x226/0x6d0 [ 295.604960][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 295.604994][ C1] run_ksoftirqd+0xac/0x210 [ 295.605030][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 295.605053][ C1] ? schedule+0x91/0x360 [ 295.605086][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 295.605109][ C1] smpboot_thread_fn+0x542/0xa60 [ 295.605135][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 295.605169][ C1] kthread+0x711/0x8a0 [ 295.605199][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 295.605223][ C1] ? __pfx_kthread+0x10/0x10 [ 295.605247][ C1] ? rt_spin_unlock+0x150/0x200 [ 295.605274][ C1] ? rt_spin_unlock+0x161/0x200 [ 295.605293][ C1] ? __pfx_kthread+0x10/0x10 [ 295.605321][ C1] ret_from_fork+0x599/0xb30 [ 295.605346][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 295.605381][ C1] ? __switch_to_asm+0x39/0x70 [ 295.605406][ C1] ? __switch_to_asm+0x33/0x70 [ 295.605431][ C1] ? __pfx_kthread+0x10/0x10 [ 295.605458][ C1] ret_from_fork_asm+0x1a/0x30 [ 295.605505][ C1] [ 295.605573][ C1] task:kworker/1:11 state:R running task stack:22408 pid:6568 tgid:6568 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 295.605634][ C1] Workqueue: usb_hub_wq hub_event [ 295.605654][ C1] Call Trace: [ 295.605660][ C1] [ 295.605672][ C1] __schedule+0x1480/0x50a0 [ 295.605710][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 295.605739][ C1] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 295.605851][ C1] ? __pfx___schedule+0x10/0x10 [ 295.605904][ C1] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 295.605934][ C1] ? __queue_work+0x1d0/0xff0 [ 295.605958][ C1] ? usb_hcd_poll_rh_status+0x406/0x620 [ 295.605984][ C1] preempt_schedule_notrace+0xd1/0x110 [ 295.606022][ C1] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 295.606054][ C1] ? queue_work_on+0x115/0x270 [ 295.606079][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 295.606110][ C1] rcu_is_watching+0x7f/0xb0 [ 295.606132][ C1] lock_release+0x4b/0x3b0 [ 295.606160][ C1] ? rt_spin_unlock+0x161/0x200 [ 295.606187][ C1] rt_spin_unlock+0x29/0x200 [ 295.606213][ C1] usb_hcd_poll_rh_status+0x406/0x620 [ 295.606244][ C1] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 295.606276][ C1] ? rt_spin_unlock+0x161/0x200 [ 295.606301][ C1] dummy_hub_control+0xffb/0x1a30 [ 295.606339][ C1] usb_hcd_submit_urb+0xdbe/0x1b60 [ 295.606377][ C1] usb_start_wait_urb+0x115/0x4f0 [ 295.606405][ C1] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 295.606451][ C1] usb_control_msg+0x232/0x3e0 [ 295.606479][ C1] hub_ext_port_status+0x116/0x820 [ 295.606535][ C1] hub_event+0x778/0x4f30 [ 295.606628][ C1] ? __pfx_hub_event+0x10/0x10 [ 295.606651][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 295.606681][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.606707][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 295.606728][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 295.606752][ C1] process_scheduled_works+0xad1/0x1770 [ 295.606804][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 295.606846][ C1] worker_thread+0x8a0/0xda0 [ 295.606873][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 295.606910][ C1] ? __kthread_parkme+0x7b/0x200 [ 295.606945][ C1] kthread+0x711/0x8a0 [ 295.606977][ C1] ? __pfx_worker_thread+0x10/0x10 [ 295.607000][ C1] ? __pfx_kthread+0x10/0x10 [ 295.607034][ C1] ? rt_spin_unlock+0x150/0x200 [ 295.607061][ C1] ? rt_spin_unlock+0x161/0x200 [ 295.607081][ C1] ? __pfx_kthread+0x10/0x10 [ 295.607110][ C1] ret_from_fork+0x599/0xb30 [ 295.607135][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 295.607169][ C1] ? __switch_to_asm+0x39/0x70 [ 295.607195][ C1] ? __switch_to_asm+0x33/0x70 [ 295.607219][ C1] ? __pfx_kthread+0x10/0x10 [ 295.607248][ C1] ret_from_fork_asm+0x1a/0x30 [ 295.607295][ C1] [ 295.607305][ C1] task:syz-executor state:R running task stack:18616 pid:6060 tgid:6060 ppid:1 task_flags:0x40054c flags:0x00080002 [ 295.607420][ C1] Call Trace: [ 295.607428][ C1] [ 295.607441][ C1] __schedule+0x1480/0x50a0 [ 295.607483][ C1] ? post_alloc_hook+0x247/0x290 [ 295.607525][ C1] ? __pfx___schedule+0x10/0x10 [ 295.607557][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 295.607588][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 295.607618][ C1] preempt_schedule_irq+0xb5/0x150 [ 295.607645][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 295.607670][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 295.607702][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 295.607725][ C1] irqentry_exit+0x5d8/0x660 [ 295.607759][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 295.607780][ C1] RIP: 0010:lock_acquire+0x16c/0x340 [ 295.607806][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 b4 88 14 10 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 295.607822][ C1] RSP: 0018:ffffc9000c0372b0 EFLAGS: 00000206 [ 295.607839][ C1] RAX: 74a338e04295be00 RBX: 0000000000000000 RCX: 74a338e04295be00 [ 295.607854][ C1] RDX: 00000000fa4225d5 RSI: ffffffff8cfdf958 RDI: ffffffff8b3f4de0 [ 295.607867][ C1] RBP: ffffffff8229b224 R08: ffffffff8229b224 R09: ffffffff8d5ae880 [ 295.607881][ C1] R10: dffffc0000000000 R11: fffff94000305d81 R12: 0000000000000002 [ 295.607894][ C1] R13: ffffffff8d5ae880 R14: 0000000000000000 R15: 0000000000000246 [ 295.607911][ C1] ? page_table_check_clear+0x144/0x5f0 [ 295.607941][ C1] ? page_table_check_clear+0x144/0x5f0 [ 295.607979][ C1] ? pfn_valid+0xba/0x490 [ 295.608018][ C1] ? pfn_valid+0xba/0x490 [ 295.608049][ C1] page_table_check_clear+0x164/0x5f0 [ 295.608075][ C1] ? page_table_check_clear+0x144/0x5f0 [ 295.608100][ C1] ? page_table_check_clear+0x144/0x5f0 [ 295.608131][ C1] unmap_page_range+0x2f39/0x3ce0 [ 295.608204][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 295.608235][ C1] ? mas_find+0xb0e/0xd30 [ 295.608260][ C1] ? unmap_vmas+0x144/0x580 [ 295.608285][ C1] unmap_vmas+0x399/0x580 [ 295.608317][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 295.608367][ C1] exit_mmap+0x239/0xb10 [ 295.608402][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 295.608427][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 295.608469][ C1] ? __pfx_exit_aio+0x10/0x10 [ 295.608505][ C1] ? uprobe_clear_state+0x288/0x2a0 [ 295.608530][ C1] ? mm_update_next_owner+0xa7/0x870 [ 295.608563][ C1] __mmput+0xcb/0x3d0 [ 295.608588][ C1] exit_mm+0x1da/0x2c0 [ 295.608619][ C1] ? __pfx_exit_mm+0x10/0x10 [ 295.608658][ C1] do_exit+0x658/0x2310 [ 295.608685][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 295.608724][ C1] ? __pfx_do_exit+0x10/0x10 [ 295.608749][ C1] ? rt_mutex_slowunlock+0x493/0x8a0 [ 295.608768][ C1] ? rt_spin_lock+0x1c1/0x3e0 [ 295.608805][ C1] do_group_exit+0x21c/0x2d0 [ 295.608833][ C1] ? rt_spin_unlock+0x161/0x200 [ 295.608859][ C1] get_signal+0x125d/0x1310 [ 295.608906][ C1] arch_do_signal_or_restart+0x9a/0x7a0 [ 295.608939][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 295.608985][ C1] ? exit_to_user_mode_loop+0x55/0x4f0 [ 295.609025][ C1] exit_to_user_mode_loop+0x87/0x4f0 [ 295.609050][ C1] ? rcu_is_watching+0x15/0xb0 [ 295.609074][ C1] do_syscall_64+0x2e3/0xf80 [ 295.609103][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.609122][ C1] ? clear_bhb_loop+0x60/0xb0 [ 295.609147][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.609166][ C1] RIP: 0033:0x7f3af33be15c [ 295.609183][ C1] RSP: 002b:00007fff7131fdd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.609202][ C1] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f3af33be15c [ 295.609215][ C1] RDX: 0000000000000030 RSI: 00007fff7131fe90 RDI: 00000000000000f9 [ 295.609227][ C1] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007fff7131fb47 [ 295.609239][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.609250][ C1] R13: 00007f3af35e4280 R14: 0000000000000003 R15: 00007fff7131fe90 [ 295.609283][ C1] [ 295.609291][ C1] task:syz.0.169 state:R running task stack:24920 pid:6610 tgid:6610 ppid:5799 task_flags:0x40044c flags:0x00080002 [ 295.609351][ C1] Call Trace: [ 295.609357][ C1] [ 295.609369][ C1] __schedule+0x1480/0x50a0 [ 295.609427][ C1] ? __pfx___schedule+0x10/0x10 [ 295.609454][ C1] ? irqentry_exit+0x5dd/0x660 [ 295.609486][ C1] ? trace_irq_disable+0x37/0x100 [ 295.609512][ C1] ? preempt_schedule+0xae/0xc0 [ 295.609540][ C1] preempt_schedule_common+0x83/0xd0 [ 295.609567][ C1] preempt_schedule+0xae/0xc0 [ 295.609592][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 295.609620][ C1] ? lock_release+0x2a6/0x3b0 [ 295.609647][ C1] preempt_schedule_thunk+0x16/0x30 [ 295.609670][ C1] ? pfn_valid+0x3fd/0x490 [ 295.609699][ C1] pfn_valid+0x402/0x490 [ 295.609729][ C1] page_table_check_clear+0x21/0x5f0 [ 295.609755][ C1] ? vm_normal_page+0xbe/0x1a0 [ 295.609779][ C1] unmap_page_range+0x2f39/0x3ce0 [ 295.609850][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 295.609878][ C1] ? mas_find+0xb0e/0xd30 [ 295.609902][ C1] ? unmap_vmas+0x144/0x580 [ 295.609928][ C1] unmap_vmas+0x399/0x580 [ 295.609960][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 295.610018][ C1] exit_mmap+0x239/0xb10 [ 295.610052][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 295.610076][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 295.610118][ C1] ? __pfx_exit_aio+0x10/0x10 [ 295.610153][ C1] ? uprobe_clear_state+0x288/0x2a0 [ 295.610178][ C1] ? mm_update_next_owner+0x808/0x870 [ 295.610210][ C1] __mmput+0xcb/0x3d0 [ 295.610235][ C1] exit_mm+0x1da/0x2c0 [ 295.610265][ C1] ? __pfx_exit_mm+0x10/0x10 [ 295.610304][ C1] do_exit+0x658/0x2310 [ 295.610345][ C1] ? __pfx_do_exit+0x10/0x10 [ 295.610369][ C1] ? rt_mutex_slowunlock+0x614/0x8a0 [ 295.610390][ C1] ? rt_spin_lock+0x1c1/0x3e0 [ 295.610428][ C1] do_group_exit+0x21c/0x2d0 [ 295.610455][ C1] ? rt_spin_unlock+0x161/0x200 [ 295.610480][ C1] get_signal+0x125d/0x1310 [ 295.610526][ C1] arch_do_signal_or_restart+0x9a/0x7a0 [ 295.610555][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 295.610579][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 295.610606][ C1] ? read_tsc+0x9/0x20 [ 295.610639][ C1] ? exit_to_user_mode_loop+0x55/0x4f0 [ 295.610669][ C1] exit_to_user_mode_loop+0x87/0x4f0 [ 295.610694][ C1] ? rcu_is_watching+0x15/0xb0 [ 295.610718][ C1] do_syscall_64+0x2e3/0xf80 [ 295.610746][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.610764][ C1] ? clear_bhb_loop+0x60/0xb0 [ 295.610788][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.610807][ C1] RIP: 0033:0x7ff78a3d2005 [ 295.610822][ C1] RSP: 002b:00007ffdd7e38850 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 295.610842][ C1] RAX: 0000000000000000 RBX: 00007ff78a5f5fa0 RCX: 00007ff78a3d2005 [ 295.610855][ C1] RDX: 00007ffdd7e38890 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.610867][ C1] RBP: 00007ff78a5f7da0 R08: 0000000000000000 R09: 3fffffffffffffff [ 295.610879][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002c80c [ 295.610891][ C1] R13: 00007ff78a5f6090 R14: ffffffffffffffff R15: 00007ffdd7e389d0 [ 295.610925][ C1] [ 295.610934][ C1] rcu: rcu_preempt kthread starved for 782 jiffies! g15141 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 295.610955][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 295.610965][ C1] rcu: RCU grace-period kthread stack dump: [ 295.610972][ C1] task:rcu_preempt state:R running task stack:26136 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 295.611040][ C1] Call Trace: [ 295.611046][ C1] [ 295.611058][ C1] __schedule+0x1480/0x50a0 [ 295.611110][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 295.611138][ C1] ? __pfx___schedule+0x10/0x10 [ 295.611176][ C1] ? schedule+0x91/0x360 [ 295.611204][ C1] schedule+0x165/0x360 [ 295.611231][ C1] schedule_timeout+0x12b/0x270 [ 295.611257][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 295.611279][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 295.611304][ C1] ? __pfx_process_timeout+0x10/0x10 [ 295.611333][ C1] ? prepare_to_swait_event+0x341/0x380 [ 295.611364][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 295.611406][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 295.611434][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 295.611459][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 295.611499][ C1] rcu_gp_kthread+0x99/0x390 [ 295.611528][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 295.611556][ C1] ? __kthread_parkme+0x7b/0x200 [ 295.611580][ C1] ? __kthread_parkme+0x1a1/0x200 [ 295.611611][ C1] kthread+0x711/0x8a0 [ 295.611641][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 295.611666][ C1] ? __pfx_kthread+0x10/0x10 [ 295.611690][ C1] ? rt_spin_unlock+0x150/0x200 [ 295.611716][ C1] ? rt_spin_unlock+0x161/0x200 [ 295.611735][ C1] ? __pfx_kthread+0x10/0x10 [ 295.611761][ C1] ret_from_fork+0x599/0xb30 [ 295.611786][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 295.611819][ C1] ? __switch_to_asm+0x39/0x70 [ 295.611843][ C1] ? __switch_to_asm+0x33/0x70 [ 295.611868][ C1] ? __pfx_kthread+0x10/0x10 [ 295.611895][ C1] ret_from_fork_asm+0x1a/0x30 [ 295.611940][ C1] [ 295.611947][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 295.611964][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 295.611989][ C1] Tainted: [L]=SOFTLOCKUP [ 295.611995][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 295.612013][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 295.612038][ C1] Code: 03 ca 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 26 15 00 f3 0f 1e fa fb f4 d8 c9 03 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 295.612053][ C1] RSP: 0018:ffffc900001d7de0 EFLAGS: 000002c2 [ 295.612069][ C1] RAX: a48b3a43442f2000 RBX: ffffffff819663da RCX: a48b3a43442f2000 [ 295.612082][ C1] RDX: 0000000000000001 RSI: ffffffff8ce09b53 RDI: ffffffff8b3f4de0 [ 295.612095][ C1] RBP: ffffc900001d7f10 R08: ffff8880b8933c5b R09: 1ffff1101712678b [ 295.612108][ C1] R10: dffffc0000000000 R11: ffffed101712678c R12: ffffffff8edb0c70 [ 295.612122][ C1] R13: 1ffff11003757b58 R14: 0000000000000001 R15: 0000000000000001 [ 295.612135][ C1] FS: 0000000000000000(0000) GS:ffff888126e06000(0000) knlGS:0000000000000000 [ 295.612150][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.612163][ C1] CR2: 0000000000000002 CR3: 000000005dc5c000 CR4: 00000000003526f0 [ 295.612180][ C1] Call Trace: [ 295.612188][ C1] [ 295.612195][ C1] default_idle+0x13/0x20 [ 295.612212][ C1] default_idle_call+0x73/0xb0 [ 295.612231][ C1] do_idle+0x1ea/0x520 [ 295.612249][ C1] ? irqentry_exit+0x5ba/0x660 [ 295.612280][ C1] ? __pfx_do_idle+0x10/0x10 [ 295.612315][ C1] cpu_startup_entry+0x44/0x60 [ 295.612335][ C1] start_secondary+0x101/0x110 [ 295.612355][ C1] common_startup_64+0x13e/0x147 [ 295.612398][ C1] [ 342.824300][ T38] INFO: task syz.3.171:6617 blocked for more than 144 seconds. [ 342.824331][ T38] Tainted: G L syzkaller #0 [ 342.824342][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 342.824352][ T38] task:syz.3.171 state:D stack:24920 pid:6617 tgid:6617 ppid:5808 task_flags:0x400040 flags:0x00080000 [ 342.824427][ T38] Call Trace: [ 342.824435][ T38] [ 342.824450][ T38] __schedule+0x1480/0x50a0 [ 342.824498][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 342.824534][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 342.824569][ T38] ? __pfx___schedule+0x10/0x10 [ 342.824612][ T38] ? schedule+0x91/0x360 [ 342.824643][ T38] schedule+0x165/0x360 [ 342.824672][ T38] schedule_timeout+0x9a/0x270 [ 342.824699][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 342.824740][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.824769][ T38] ? lockdep_hardirqs_on+0x98/0x140 [ 342.824795][ T38] ? wait_for_completion+0x267/0x5d0 [ 342.824826][ T38] wait_for_completion+0x2bf/0x5d0 [ 342.824869][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 342.824895][ T38] ? start_poll_synchronize_rcu_common+0x149/0x290 [ 342.824928][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 342.824958][ T38] synchronize_rcu_normal+0x17d/0x260 [ 342.824981][ T38] ? __pfx_synchronize_rcu_normal+0x10/0x10 [ 342.825005][ T38] ? __kernel_text_address+0xd/0x40 [ 342.825046][ T38] ? stack_trace_save+0x9c/0xe0 [ 342.825071][ T38] ? __pfx_stack_trace_save+0x10/0x10 [ 342.825097][ T38] ? __pfx___might_resched+0x10/0x10 [ 342.825121][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 342.825165][ T38] synchronize_rcu_expedited+0x161/0x730 [ 342.825193][ T38] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 342.825239][ T38] ? __pfx___might_resched+0x10/0x10 [ 342.825263][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 342.825293][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 342.825335][ T38] synchronize_rcu+0x11a/0x310 [ 342.825357][ T38] ? __pfx_synchronize_rcu+0x10/0x10 [ 342.825388][ T38] ? vhost_vsock_dev_release+0x167/0x450 [ 342.825432][ T38] vhost_vsock_dev_release+0x16c/0x450 [ 342.825463][ T38] ? evm_file_release+0x10a/0x1e0 [ 342.825494][ T38] ? __pfx_vhost_vsock_dev_release+0x10/0x10 [ 342.825523][ T38] __fput+0x45b/0xa80 [ 342.825562][ T38] task_work_run+0x1d4/0x260 [ 342.825596][ T38] ? __pfx_task_work_run+0x10/0x10 [ 342.825624][ T38] ? __se_sys_close_range+0x4f0/0x650 [ 342.825653][ T38] ? exit_to_user_mode_loop+0x55/0x4f0 [ 342.825684][ T38] exit_to_user_mode_loop+0xff/0x4f0 [ 342.825711][ T38] ? rcu_is_watching+0x15/0xb0 [ 342.825738][ T38] do_syscall_64+0x2e3/0xf80 [ 342.825768][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.825789][ T38] ? clear_bhb_loop+0x60/0xb0 [ 342.825815][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.825836][ T38] RIP: 0033:0x7f3ec91af749 [ 342.825855][ T38] RSP: 002b:00007ffe267ea8e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 342.825876][ T38] RAX: 0000000000000000 RBX: 00007f3ec9407da0 RCX: 00007f3ec91af749 [ 342.825891][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 342.825903][ T38] RBP: 00007f3ec9407da0 R08: 0000000000000280 R09: 0000001e267eabdf [ 342.825917][ T38] R10: 00007f3ec9407cb0 R11: 0000000000000246 R12: 000000000002e377 [ 342.825931][ T38] R13: 00007f3ec9406180 R14: ffffffffffffffff R15: 00007ffe267eaa00 [ 342.825968][ T38] [ 342.825981][ T38] [ 342.825981][ T38] Showing all locks held in the system: [ 342.825990][ T38] 3 locks held by kworker/u8:0/12: [ 342.826002][ T38] #0: ffff888019ad6938 ((wq_completion)pm){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 342.826055][ T38] #1: ffffc90000117b80 ((work_completion)(&dev->power.work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 342.826107][ T38] #2: ffff8880278995b8 (&port_dev->status_lock){+.+.}-{4:4}, at: usb_port_suspend+0x188/0x1510 [ 342.826155][ T38] 3 locks held by kworker/u8:1/13: [ 342.826167][ T38] #0: ffff88802fbce938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 342.826240][ T38] #1: ffffc90000127b80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 342.826291][ T38] #2: ffffffff8e8a3578 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 342.826346][ T38] 7 locks held by ktimers/1/29: [ 342.826357][ T38] #0: ffffffff8d44ea00 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x530 [ 342.826408][ T38] #1: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x530 [ 342.826468][ T38] #2: ffff8880b8924358 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0x130/0x650 [ 342.826522][ T38] #3: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 342.826572][ T38] #4: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: ieee80211_rx_napi+0xca/0x3d0 [ 342.826621][ T38] #5: ffffffff8d44ea00 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x530 [ 342.826670][ T38] #6: ffff88805e100228 (&rdev->bss_lock){+...}-{3:3}, at: cfg80211_inform_single_bss_data+0xbca/0x1ab0 [ 342.826729][ T38] 9 locks held by ksoftirqd/1/30: [ 342.826741][ T38] #0: ffffffff8d44ea00 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x530 [ 342.826790][ T38] #1: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x530 [ 342.826839][ T38] #2: ffff8880b893ac58 (&pool->cb_lock){+...}-{3:3}, at: bh_worker+0x81/0x630 [ 342.826891][ T38] #3: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 342.826940][ T38] #4: ffff88813ff56d38 ((wq_completion)events_bh_highpri){+...}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 342.826990][ T38] #5: ffffc90000a4f9c0 ((work_completion)(&bh->bh)){+...}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 342.827041][ T38] #6: ffff88802785f4a8 (&hub->irq_urb_lock){+.+.}-{3:3}, at: hub_resubmit_irq_urb+0x29/0x160 [ 342.827092][ T38] #7: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 342.827140][ T38] #8: ffffffff8e160d38 (hcd_root_hub_lock){+.+.}-{3:3}, at: usb_hcd_submit_urb+0x261/0x1b60 [ 342.827195][ T38] 1 lock held by khungtaskd/38: [ 342.827206][ T38] #0: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 342.827266][ T38] 3 locks held by kworker/u8:2/43: [ 342.827279][ T38] 6 locks held by kworker/u8:3/58: [ 342.827291][ T38] 6 locks held by kworker/u9:0/61: [ 342.827302][ T38] #0: ffff888027887138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 342.827351][ T38] #1: ffffc9000127fb80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 342.827402][ T38] #2: ffff888038498f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 342.827465][ T38] #3: ffff8880384980b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 342.827513][ T38] #4: ffffffff8ea12ff8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 342.827561][ T38] #5: ffff888026f69b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 342.827617][ T38] 3 locks held by kworker/u8:4/68: [ 342.827629][ T38] 5 locks held by kworker/u8:5/88: [ 342.827643][ T38] 3 locks held by kworker/u8:6/140: [ 342.827659][ T38] 3 locks held by kworker/u8:11/1345: [ 342.827682][ T38] 9 locks held by kworker/u8:16/3489: [ 342.827694][ T38] 5 locks held by kworker/u9:1/5118: [ 342.827705][ T38] #0: ffff888027885938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 342.827756][ T38] #1: ffffc9000f52fb80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 342.827806][ T38] #2: ffff888028e40f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 342.827860][ T38] #3: ffff888028e400b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 342.827908][ T38] #4: ffffffff8ea12ff8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 342.827956][ T38] 1 lock held by klogd/5158: [ 342.827967][ T38] 7 locks held by udevd/5169: [ 342.827979][ T38] 2 locks held by getty/5555: [ 342.827990][ T38] #0: ffff8880344b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 342.828039][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 342.828095][ T38] 1 lock held by syz-executor/5787: [ 342.828107][ T38] #0: ffffffff8d20c0a8 (tasklist_lock){++++}-{3:3}, at: __do_wait+0xe1/0x740 [ 342.828164][ T38] 1 lock held by syz-executor/5799: [ 342.828175][ T38] #0: ffffffff8d20c0a8 (tasklist_lock){++++}-{3:3}, at: __do_wait+0xe1/0x740 [ 342.828231][ T38] 5 locks held by kworker/u9:2/5801: [ 342.828242][ T38] #0: ffff888010ce7938 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 342.828292][ T38] #1: ffffc90004f8fb80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 342.828343][ T38] #2: ffff888055d74f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 342.828396][ T38] #3: ffff888055d740b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 342.828452][ T38] #4: ffffffff8ea12ff8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 342.828500][ T38] 5 locks held by kworker/u9:3/5804: [ 342.828511][ T38] #0: ffff888027e8b938 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 342.828561][ T38] #1: ffffc90004fcfb80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 342.828611][ T38] #2: ffff888055da8f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 342.828665][ T38] #3: ffff888055da80b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 342.828712][ T38] #4: ffffffff8ea12ff8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 342.828760][ T38] 5 locks held by kworker/u9:4/5805: [ 342.828771][ T38] #0: ffff888053f9b138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 342.828822][ T38] #1: ffffc90004fefb80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 342.828872][ T38] #2: ffff8880374d0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 342.828926][ T38] #3: ffff8880374d00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 342.828975][ T38] #4: ffffffff8ea12ff8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 342.829023][ T38] 1 lock held by syz-executor/5808: [ 342.829034][ T38] #0: ffffffff8d20c0a8 (tasklist_lock){++++}-{3:3}, at: __se_sys_kill+0xfd/0x450 [ 342.829088][ T38] 1 lock held by syz-executor/5809: [ 342.829099][ T38] #0: ffffffff8d20c0a8 (tasklist_lock){++++}-{3:3}, at: __do_wait+0xe1/0x740 [ 342.829156][ T38] 1 lock held by syz-executor/5810: [ 342.829167][ T38] #0: ffffffff8d20c0a8 (tasklist_lock){++++}-{3:3}, at: __do_wait+0xe1/0x740 [ 342.829228][ T38] 3 locks held by kworker/0:6/5890: [ 342.829239][ T38] 1 lock held by udevd/5934: [ 342.829250][ T38] #0: ffff888029748a08 (&ep->lock){+.+.}-{3:3}, at: do_epoll_wait+0x848/0xbb0 [ 342.829303][ T38] 5 locks held by syz-executor/6060: [ 342.829315][ T38] 3 locks held by kworker/u8:18/6425: [ 342.829327][ T38] 7 locks held by kworker/1:11/6568: [ 342.829339][ T38] 4 locks held by syz.0.169/6610: [ 342.829351][ T38] 1 lock held by syz.0.169/6612: [ 342.829362][ T38] 1 lock held by syz.1.170/6613: [ 342.829373][ T38] #0: ffffffff8d20c0a8 (tasklist_lock){++++}-{3:3}, at: mm_update_next_owner+0xdd/0x870 [ 342.829438][ T38] 1 lock held by syz.1.170/6626: [ 342.829449][ T38] #0: ffffffff8d20c0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x743/0x2310 [ 342.829504][ T38] 2 locks held by vhost-6623/6624: [ 342.829517][ T38] 1 lock held by syz.2.172/6620: [ 342.829528][ T38] #0: ffffffff8d20c0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x743/0x2310 [ 342.829583][ T38] 1 lock held by dhcpcd-run-hook/6622: [ 342.829594][ T38] #0: ffffffff8d20c0a8 (tasklist_lock){++++}-{3:3}, at: __do_wait+0xe1/0x740 [ 342.829649][ T38] 4 locks held by kworker/0:11/6629: [ 342.829660][ T38] #0: ffff88813ff56138 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 342.829711][ T38] #1: ffffc90004cafb80 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 342.829762][ T38] #2: ffffffff8e8a3578 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa1/0xf00 [ 342.829813][ T38] #3: ffff88805f1c08b8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x156/0xf00 [ 342.829866][ T38] [ 342.829872][ T38] ============================================= [ 342.829872][ T38] [ 342.829880][ T38] NMI backtrace for cpu 1 [ 342.829897][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 342.829924][ T38] Tainted: [L]=SOFTLOCKUP [ 342.829931][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 342.829942][ T38] Call Trace: [ 342.829950][ T38] [ 342.829958][ T38] dump_stack_lvl+0x189/0x250 [ 342.829989][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.830016][ T38] ? __pfx__printk+0x10/0x10 [ 342.830050][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 342.830076][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 342.830102][ T38] ? __pfx__printk+0x10/0x10 [ 342.830127][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 342.830152][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 342.830179][ T38] sys_info+0x135/0x170 [ 342.830198][ T38] watchdog+0xf95/0xfe0 [ 342.830227][ T38] ? watchdog+0x20a/0xfe0 [ 342.830258][ T38] kthread+0x711/0x8a0 [ 342.830289][ T38] ? __pfx_watchdog+0x10/0x10 [ 342.830311][ T38] ? __pfx_kthread+0x10/0x10 [ 342.830336][ T38] ? rt_spin_unlock+0x150/0x200 [ 342.830363][ T38] ? rt_spin_unlock+0x161/0x200 [ 342.830384][ T38] ? __pfx_kthread+0x10/0x10 [ 342.830411][ T38] ret_from_fork+0x599/0xb30 [ 342.830444][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 342.830478][ T38] ? __switch_to_asm+0x39/0x70 [ 342.830505][ T38] ? __switch_to_asm+0x33/0x70 [ 342.830531][ T38] ? __pfx_kthread+0x10/0x10 [ 342.830561][ T38] ret_from_fork_asm+0x1a/0x30 [ 342.830606][ T38] [ 342.830614][ T38] Sending NMI from CPU 1 to CPUs 0: [ 342.830642][ C0] NMI backtrace for cpu 0 [ 342.830659][ C0] CPU: 0 UID: 0 PID: 6624 Comm: vhost-6623 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 342.830688][ C0] Tainted: [L]=SOFTLOCKUP [ 342.830694][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 342.830703][ C0] RIP: 0010:__lock_acquire+0x30d/0x2cf0 [ 342.830726][ C0] Code: 10 31 f6 85 d2 40 0f 95 c6 31 d2 41 83 be 74 0b 00 00 00 0f 95 c2 c1 e2 0d c1 e6 0e 09 d6 8b 54 24 20 c1 e2 0f 0f b7 d2 09 f2 <41> 83 e5 03 41 c1 e5 10 41 09 d5 8b 54 24 10 83 e2 01 c1 e2 12 44 [ 342.830739][ C0] RSP: 0018:ffffc90004a5f778 EFLAGS: 00000046 [ 342.830754][ C0] RAX: 0000000000000014 RBX: 0000000000000000 RCX: 0000000000000039 [ 342.830764][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.830774][ C0] RBP: 0000000000000004 R08: ffffffff8ad584fa R09: ffff88805f9f9708 [ 342.830785][ C0] R10: dffffc0000000000 R11: fffffbfff1db618f R12: 0000000000000000 [ 342.830796][ C0] R13: 0000000000000000 R14: ffff8880346e0000 R15: ffff8880346e0b90 [ 342.830806][ C0] FS: 00007f3ec73f56c0(0000) GS:ffff888126d06000(0000) knlGS:0000000000000000 [ 342.830820][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.830831][ C0] CR2: 0000000000000002 CR3: 000000005dc5c000 CR4: 00000000003526f0 [ 342.830847][ C0] Call Trace: [ 342.830853][ C0] [ 342.830861][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 342.830883][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 342.830905][ C0] ? rt_spin_lock+0x14a/0x3e0 [ 342.830921][ C0] lock_acquire+0x117/0x340 [ 342.830940][ C0] ? rt_spin_lock+0x14a/0x3e0 [ 342.830961][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 342.830982][ C0] ? rt_spin_lock+0x14a/0x3e0 [ 342.830997][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 342.831017][ C0] ? rcu_is_watching+0x15/0xb0 [ 342.831033][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 342.831053][ C0] ? vhost_transport_do_send_pkt+0x131/0x1470 [ 342.831075][ C0] rt_spin_lock+0x14a/0x3e0 [ 342.831093][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 342.831110][ C0] ? vhost_update_used_flags+0x19d/0x290 [ 342.831129][ C0] ? vhost_transport_do_send_pkt+0x131/0x1470 [ 342.831150][ C0] ? vhost_transport_do_send_pkt+0x131/0x1470 [ 342.831171][ C0] ? vhost_transport_do_send_pkt+0x131/0x1470 [ 342.831192][ C0] vhost_transport_do_send_pkt+0x21c/0x1470 [ 342.831215][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 342.831235][ C0] ? vhost_transport_do_send_pkt+0x131/0x1470 [ 342.831256][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 342.831278][ C0] ? __pfx_vhost_transport_do_send_pkt+0x10/0x10 [ 342.831300][ C0] ? rt_spin_unlock+0x150/0x200 [ 342.831318][ C0] ? rt_spin_unlock+0x161/0x200 [ 342.831335][ C0] ? preempt_count_add+0x91/0x190 [ 342.831351][ C0] ? kcov_remote_start+0x57b/0x710 [ 342.831368][ C0] vhost_run_work_list+0x14e/0x1e0 [ 342.831389][ C0] ? __pfx_vhost_run_work_list+0x10/0x10 [ 342.831409][ C0] vhost_task_fn+0x27c/0x430 [ 342.831432][ C0] ? __pfx_vhost_task_fn+0x10/0x10 [ 342.831453][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 342.831471][ C0] ? rt_spin_unlock+0x150/0x200 [ 342.831489][ C0] ? rt_spin_unlock+0x161/0x200 [ 342.831504][ C0] ? __pfx_vhost_task_fn+0x10/0x10 [ 342.831525][ C0] ret_from_fork+0x599/0xb30 [ 342.831542][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 342.831561][ C0] ? __switch_to_asm+0x39/0x70 [ 342.831581][ C0] ? __switch_to_asm+0x33/0x70 [ 342.831601][ C0] ? __pfx_vhost_task_fn+0x10/0x10 [ 342.831621][ C0] ret_from_fork_asm+0x1a/0x30 [ 342.831648][ C0] [ 342.832639][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 342.832656][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 342.832681][ T38] Tainted: [L]=SOFTLOCKUP [ 342.832688][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 342.832699][ T38] Call Trace: [ 342.832706][ T38] [ 342.832714][ T38] dump_stack_lvl+0x99/0x250 [ 342.832741][ T38] ? __asan_memcpy+0x40/0x70 [ 342.832768][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.832794][ T38] ? __pfx__printk+0x10/0x10 [ 342.832828][ T38] vpanic+0x237/0x6d0 [ 342.832856][ T38] ? __pfx_vpanic+0x10/0x10 [ 342.832894][ T38] panic+0xb9/0xc0 [ 342.832921][ T38] ? __pfx_panic+0x10/0x10 [ 342.832959][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 342.832987][ T38] watchdog+0xfdf/0xfe0 [ 342.833015][ T38] ? watchdog+0x20a/0xfe0 [ 342.833045][ T38] kthread+0x711/0x8a0 [ 342.833077][ T38] ? __pfx_watchdog+0x10/0x10 [ 342.833099][ T38] ? __pfx_kthread+0x10/0x10 [ 342.833124][ T38] ? rt_spin_unlock+0x150/0x200 [ 342.833151][ T38] ? rt_spin_unlock+0x161/0x200 [ 342.833172][ T38] ? __pfx_kthread+0x10/0x10 [ 342.833201][ T38] ret_from_fork+0x599/0xb30 [ 342.833226][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 342.833260][ T38] ? __switch_to_asm+0x39/0x70 [ 342.833287][ T38] ? __switch_to_asm+0x33/0x70 [ 342.833313][ T38] ? __pfx_kthread+0x10/0x10 [ 342.833343][ T38] ret_from_fork_asm+0x1a/0x30 [ 342.833389][ T38] [ 342.833885][ T38] Kernel Offset: disabled