last executing test programs: 11m7.505289263s ago: executing program 1 (id=111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11m6.041195586s ago: executing program 1 (id=114): unshare(0x20040600) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x6, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffd35, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800085, 0x8, 0x0, 0x0}}, 0x10) 11m5.63733389s ago: executing program 1 (id=116): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee01}}]}, 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x1}], 0x1000, 0x0, &(0x7f0000000580)="34c7174811834a2c93fe3fc6121598c7ae1304954532316b4cf0892c3a6536f53ca763c46d8ce2bd01b52a641316d441e816b6834f0bddc1d75527351de9bb6f6f8c33bc918ee3f3f11527020be2b6c8cc60da6776c2ea2a84effe8641787573c0e7464697afbcba6cdf155af6cf579c660706b003d10c89662b6c3f0ba8713b3bbcc336fceafc7e566d94252b9e0a91995167cffe1adccbf95172ed82502b0ba86720507fb2d51f83456f3d1a9ffc6bf59a8bf9c5d0b796bbbb0b6e556c1c119be109ab6d8ce70eaccd4836143946c73d099d4b69c9618a1af9d773982580109e776e569826923600d36a1d75f8b29159cba7925c2654937e065bb0ea831faa4e098babc467b930260b2aacd20254642b6a211880cbcc1c9663164299ad6b3b6994e2c2c7edf1c457ab5d3136da7347db54f8fe15ed09bb4f6fe773d5b97a2d07f5f657b380dc34c890b0b8d8a909080eece99b3382a976798ebfd007acb691f75515ab4bc7502d8f8310e36ebdbd19ad2081a8becbc19751e3c9322a8380bd601fef53bac4a82f391922ab5b330a6efe51627bccdbd7db30b55f41421a65ce7dab876be3c46faaaf70b193392d389c82ad257bc4a1356facb8875f02d02a953fd68336e4af54bf211058587552b037f93553b3e4efc5b8c8c466f71774cbb5556937ab9caf1e752ee62b29c4f946a5fe7f12545ac1760d048e41a2aeff30433a3665c466c6ebb9fadd69486b5bd5321e3106f5febfa9b44c75c4e83b24c3d6e95779882ed3ca4105d7209f2956eea634f7b562ec6b912126259a1cfd9b893de36d23398b1bb3f72b05e72c552070d6f262472f28d1c4799171c949dda7ef3dcf2635fb1f7eae3c75b855d2e5a07364a4fbea5ade7c339d1e18b04a49a4b3fac010e5ef35a088c24d7b47dd49ffc468d416a33f5f97857f84604e409416a37afa320ef309b0cec9f058b86a24f9e3312e5713fd2eceeff39aadf6f30caea0f983c9f3bd2a815ca14ec2137e2e5a6c909c45868707f039bbeb8d4f6401e78debf3bc6c4f9de16e1b255ce9919621056507bc3936c6797a17c6a0d4ad7aef05ef0d1ecf910730e0f95373cc5c41ab6b25ddc62f2b951e5ca775054bbfb4886d711427dd7381e6ce558295abd82182ec01df87a2e252905de43bdc4ab8c5aa668c1da24e4e887fa192f490420f14af2ce3098a007f5fdfae31fe87b5d1b074cabfe07d0d0c97e201ea85bc1e9b4c320c1aa7f13fb5c7eb9a459f8cfbee8051dcddf887beb147d0418a487c49e624bcec8e4fb90efadd3e5cd83134ef1d96c32dcc5dca6d57bf3ccc4e0f351926ea9e1eb167e4cd4175b2264858b028c016da8ada8643035ec57ffc7e77aa9065b0c9c84e190571b288eb18ad8418f43e01ae17ccb08c98404caf2072d50e38aa980c558c3d5538382a75bc9fd1859e2cacfbf082108f281dfa35232a8878340ddab28c889c329993333c9f8db2dbd2ce2c6c40aafb61fc13daeadd7db8cd5ec11165c066a767dbc163469f9619e98dc24ded37416b17333f9270058bca66060fb20b4f640c30f7a90ffe8da5203632f10f45f267196f4f66464a99a90f67cf212d86a7e9f1e6730ccb40974e5f49a459c01008f67121796d88912d9f1dc02b24456ef810d4aee9ab1dd9f267afe3984782aef9cffc73f29a16903588dd1861453e079a202fa5fa962883b55ec0d97ff7ced9dbeed89ce0edbf24ef9c00ad820d608a3f2fd6719de2dbf91c1a9627f4da0963c4895efef4a75311ad6629ccf53e3ec617ebe353cbf7d8d12fa5d3244ecdc13b8650be4b4842e8f93eadf789efc2258f2d1eda238d56ebea29bdd77e6b40bb7bab0f5190efc31490deee4fc559012898fcddef82e8040314a5c90b083260a99f51b32313b679a3d162c5f2037b23e452523ffda44df9b80d88cc2c9e1380ffb7fb5c83dcc2ffd9f0f8e019ed92749c7a6ad02d489ae485a2f20eaf5a2684aa9af7bc11ce5af4f39a961ae40a22c5dbac11e77d1403ccfee676687c6878f0ceacfb16b323fd722abf6be6f7f2f2adf6ae910359fcf3527ac5c2330f93e911b909c67a9e3db292792a6d3b1ade75cb29dbf383df1752a7d95a6a8f28fc9c025f3d6738b79423e5b21c846596df0e1996f5f214426df9d1e5afe9de9a19ea8b016b9375b650aa8a33a4203fdaec4b386bdfedee358c8dbef40f41965d1f49069db06ab461dd8253d5e768a16768e41c0a83c9c514c24278af2d3e620644045ab04065ad6987c334b423867bd744b3ca6cfe2b8e095b4be1ee5f71344a912f271fd4d563ce25c1472fdb37104561acee338b3f978f1d70f53c797daabbebbcbfe0dd2466312a5b75ce6320aadc0d1c38e96a009e23ed90bd3b9330b00371cd6fb213ee7cfeb053963c047241ce83772afc1e110746aacc0d71b7648c1d2ae402f2e915aa72a863399d136ed19bdfb5169761f2b861114a7ed31179cc84be3836db31d165a45985db3906f9874f5421e171574d3ce7a13f41bea48434482f2690c790c5ee8735070f621b37c7f7fb5e28939c8bc21bb0e7d30de903e11859e41a1147cec58a15794de2e4ac4244df2daa90dce04026febf5d4cf202fec95c42ed80cf0c28c3096995895c93672ffc824220c72b4800357f9b06e3c9599f25127406f34fe9da529d34da2d0c68bd3a5355b74cf2af875b7cad3158990f8fb1a26769df9a90277fe185861a67cd7014ede557ddba14e8192f5f89742c2cb20e6ec5d83b1e23b1da66338f9e5823b37e94b1c20453eb214baa0ba3c4d19fdfe20476e1f87b94e408aaa6fd69987d79b09f817c5dba43f20c8ce8dc8f211e2cc1645fb18e1e0486bb063e18692b5dd7a78314e2ed184f7aa82584c1af6e76efc845f08d6c6d0060e4136a00298b7c263bdc1d3f58931eeb7a8782d5244e475be10c183159172900cd4260fe7b241dc08d250ef505cbaeddddbc52a74c74d43ee0e28de7f81497d449e4727ad05799ded875d9e373e34f96bdda4f45733b2e80198884aeb33ce199abbfb3402722a346ea5e7d54f3e18475681092441cc369880740f0052101548d09ae52949afa017773ceadeb33a4af536af790b2c47d6e12746f9d25bd8a249bab4de38310ef037065d9dac303c9277efdbc549200d2a3b4e2a6b48697682111e293d9e7dad516008cd03701218f0bb154fee61f7b145369366f805ea1c3eb6e4e815b4bfd3afd2c48fa4ecab12d42f1177941d1481a2ecfa4173628d16a1700cd3e628834f03df966f3410f9e74b4ab2cf1842265b5a8a70b3dcf07540305c74eb4259544f6ea2710f8a4792411783b4a4b15717748a9dbf9c3013fc76b700763b8f658a1d3c42860c153e53434fc38148ba216fe059fc805683d69a8616b859ecc3d6a7d3b3329df421b203a765792807ecd9c43083bfd2b046fc522b96c9aefb5f377f05e0849b6b1d0cde56127534d67fb449799c45dba614e7df85c68b8bd0081ec462cac6a94b78f6451068b591b4754c74c6a8e2982dadfcd13eda47a1c3296829f698fdd07375d007847ef7d8e90c43281e964c7a3f33a169cb1b78a93d9850186488568561bc75d19b5ab059dad0bcf7829ed0c9a0dd289e8d5df1c574a08df296ccdad6356d93b7bbd8b62aad9e12659d3d01ffdddd53a8b3358bd55d3efeebae22f58468cba2cc198f512543791b4b76222ac8b70a933972998344188637f9dd51f505f0da6ee5816e5182de77aa5c717c38d6e504fc0523594e04c7e8bcca17b2bdba523a796fcc74de60d20a261b9c5961436f7747538647625d5e17d48c161c8c82239f97590d0964957415c3febc59de82b4398c8e17d367137bfe2cc9b30779cd39344c26048f225930c45f52874adc6f3196543a1339f3619ce887be9f0b17987002ed2ae98630c8bae77b34609f1961df83d7f02cdd5f92ce0245f2c8261d79650df6ebb4b042281238c497ef55bf9d7f44184e83d51575380301bbe7b9a53e574d1d6531054dcd9acdd09b1cc20b05317dc71a39dce6ef584c0bcfc70d45cf035def6ca96e5adbc3cf26a020e4c65c8c6ea5bf0ad064494af838eefb58e6aa6da3b5b60d91aafad8259ac99cba4c467953677596f17b2578f6fae9604112a80af60ee3407e0c1d2d0a1f0814a223719742bfc99028e9c9b32b5e658a3eca60cda709887b09fc170eb53f5906a3cc18c2378c1e000d8f9024d9afe13afeefdaa7e28cdfdddb64afcd9d6e0d13bf87d0411fded24cccd90f2d077c2305b9e8c080f3aa0baf9c620b5e66bcc8324eddc7df7c6508c1b3252c27e2668114e52a748eec523e0292022602824bcf8f1e01c38e5ced8ca2304c1220310d3752b60f0b16759928a73976c9fa7477c864da41d2dc542e4c4f88b700f702e7d7241a928e8b01855b8931b5dfebab641a6603877502a4c7ba881207886413d79b38776a3808f2403119cb2a3f19f7ffbb8dcc12877796423303ff672fab66283186778081b41d0b134e4d1c28c39b6c98267240f0756eaeb218dc43694c1bf5bd3b1a368c3d3a1ec948f14e3d32ce76d497a4f7817b60d08c21fe4e049d36bf0cab0bb9bcf3312d1d8c61905e17df36215d73c5c4efa3e7b0391be02c987a5775cfd169da1aca7f9b471b2dab094323088c670d5837c847204301e9b01322e2c2d4ced1015776c562122648a941fbe112daf367debe0b6a7a1169a57e242f4c0ec708db3b07da72f20bc4997ce67f8384723f1530917aafbc62aaab03b2722316d37c62c1d5b98f17d2705161f8623748664d8c720262f1a228d8c473d2319e3c40738cec8309907c6aca3a29b138bbb6e0e814e97c2130c4162f3052321bb3e77522fa79d494fb734851ccf1fd8bf144f3817cc20f7b2744f0353c7464cf5b23956c31444e54cb481063a8173872cc16a1f166b2fae2f91999ad3a89257bad622d7e4f65252116ee2dccf9263a37f04bc6e75223105aa6b40ef797094502c89672601bd0cafe87382e45290d36a7727c27e342f12cca841fc430d4e0c667b8ad3746d7db0f4150b23a3f28f875428bf966a0d7a348e384d57f91c67d72f1dd2c11bade1fc14aeb48557619731b823c6fce5ed91c5ad6bcbfbee4d3b68452a2894e6affa6243b765f48c4a5f96a6f4a6565a144323e3ac240cb07ac79545ee34c3d80c20b5e649104443b0ec6f62df12d4a42371b39608632bcb6ec6a6abe601e7ceff32b5f1549e7fd8cf92ad6b9e428b1b6f5d6cdf2e14afbff52b3f4e553255f961007c394d6b076a615282fd8e9b1271ce143f9060f436a27ec1c2b000df49e0c397fa53b1402d4c3ec448125273b2e3005c6fb67642aed84fca48c526976c3577906402b7df5012b205a94b1aaef08b350813f69a0901471ae75192c54bd965e7f703b3b83dd01126e07af3d3c40523ed8433befdd72b07843b62f245f26f5106ddad4660111371fefde4ca9132a9fe78fbdb3b8fb14543592a1ed7307fc313828e3e6ca7203caec8fdd09a75b2ef04bb3377e7b6bb9613284b92c5d321f2446b29bb8f3acd47703a0fe653571ce3fa56f7016c8dea27df9a922f6423cc826158d4ef5ac5292074623c2d9ee42e24d822084a60ec1bc829880bbacf9c0c7952488db804d1ab3bb4d615b262c3db962ec08226ac5470f893b29e759be052a34b3f9745d89727a1da451ad44d6c6feeca2f5b590e5ff3a3205162e60450cac5e28b9da5bf6eaac7caa86ea207d976d084019788167606e3a3daf8529ffd5304b4a07aed60aa1c103bc88e6e7d532f6aefd016a6334452d7a4b9"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) sendmmsg$alg(r3, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1b6cb7a30579e80f15ff9978", 0xc}], 0x1, 0x0, 0x0, 0x24044001}, {0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="57f9c0254a2ebbe7ec56fb7d9fb7c6b9261f16a710650fee37114163d47086e7a489f950999632236d8b214953742dd25e9512a582fb0fc9c6469b4980bf7529e3d51b4edff206b887177804887537bd1b0baef3a25121643603fd1f97b3bf62dbdf597b07952000aac6f70fab81d7b17565802d06ec3df7795ea9f3a957", 0x7e}, {&(0x7f00000002c0)="4f17f502fd10f1c1c17641974f5e2660c0da548d780889d4d4873f5b3bc150d2b463190da7d6d0a9bd95c2a6d7d24f0560ced743872d879ba3ff6544182bf84a01f9f08855dff6c334e3b2678fa1539be49c96a382ae6da495b9a3ff447d89a8b1b33acc1f462bab4f11d4a9aaa506f4ba3949ed5ef8f39a9d7a0fe4025ceefb1ddb085162977e40f1f81dd05d86e58762e4f0838db1af1adc361e7a1c751e383e3cc4ca23e379ea329f710b0d4e92e17c7e32c31e33f814471f1641ed7b4972ab07d724d9dece12eb103fdba21ea4ec19d3b64b581c03bf45d714bdb9a7cc1e8515954e2361100370a39cfa3666", 0xee}, {&(0x7f00000003c0)="842aafa76e9fa0ebf5c1a289c7287ed59c1a1036f63ff1991c54198d22852bcba7e10ef39aef4eed00482354f4dd866be32c5fc605eceef8a84d5d28d927ee466f73fec678eaf9f24e0e7fe5cc8be76b5da763b1af226b42fb5600790bfe9eef95d379aa4db39a7c25a85396690fc3d592a361005e530574ee7cf42193901b7dae08f8ef5bdfb787f194fc99de858cd0625dcfa4559a90dca4ee04", 0x9b}], 0x3, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}], 0x48, 0x1}], 0x2, 0x4008800) 11m2.72794744s ago: executing program 1 (id=120): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xad41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000004c0)={0x50, 0x0, 0x9, {0x7, 0x29, 0x1, 0x10089080, 0xdd6, 0xb, 0x9, 0x20000c00, 0x0, 0x0, 0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x0, 0xffffffff, 0x0, {0x5, 0x0, 0x84ff, 0x80000001, 0x26, 0xffffffffffffff0c, 0x2, 0x35741060, 0x209, 0xa000, 0x9ea, 0xffffffffffffffff, 0xee01, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x4, 0x3b}, {0x7f, 0x3}]}, 0x18, 0x3) 11m0.983975006s ago: executing program 1 (id=124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11m0.222040826s ago: executing program 1 (id=130): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x2) r0 = mq_open(&(0x7f00000000c0)='!\x00', 0x800, 0x34, &(0x7f0000000100)={0xfffffffffffffe25, 0x3, 0x4, 0x1}) preadv2(r0, 0x0, 0x0, 0xfff, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xad, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 10m44.037058338s ago: executing program 32 (id=130): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x2) r0 = mq_open(&(0x7f00000000c0)='!\x00', 0x800, 0x34, &(0x7f0000000100)={0xfffffffffffffe25, 0x3, 0x4, 0x1}) preadv2(r0, 0x0, 0x0, 0xfff, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xad, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 6m44.398092837s ago: executing program 5 (id=551): r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x200) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000180)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000240)={r1}) socket$netlink(0x10, 0x3, 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x2581) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550d, 0x0) setresuid(0xee00, 0xee00, 0xee01) 6m40.019453499s ago: executing program 5 (id=556): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) io_setup(0x4, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) io_submit(r0, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="ff07000000000000", 0x400000}]) 6m38.417562804s ago: executing program 5 (id=560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x3}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r5, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) 6m35.127000009s ago: executing program 5 (id=564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x7, 0x2003) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = dup(0xffffffffffffffff) ioctl$KDGKBDIACR(r4, 0x4b4a, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x1) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00009af000/0x1000)=nil, 0x400000, 0x2, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r7, @ANYRES32, @ANYBLOB="1400040000000000000000000000ffff7f00000108000400070000003c0001"], 0xf0}, 0x1, 0x0, 0x0, 0x20000080}, 0x804) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) syz_pidfd_open(r1, 0x0) 6m33.639209973s ago: executing program 5 (id=567): ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000)) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200070008d90467a000000000000109022400010000a02009040106010300020009210000000122080009058103000400", @ANYRES8=0x0], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000f8ffffff000000000300000085000000aa00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)={0xa000000a}) finit_module(r3, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\b\x00'], 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) syz_usb_connect(0x1, 0x53, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x29, 0xc9, 0x74, 0x40, 0x12d1, 0xaed5, 0xfc72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x8, 0x29, 0xa0, 0xff, [{{0x9, 0x4, 0x34, 0x6, 0x0, 0xff, 0x3, 0x63, 0x11, [@hid_hid={0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0x87}}, @uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x4, 0x7f, "068f66dcbe"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x40, 0x9, "90e110fe"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x1, "f01aa0"}]}]}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x3378fa50fa03151b, 0x5, 0x8, 0x5, 0x10, 0x7f}, 0xfe, &(0x7f0000000b40)=ANY=[@ANYBLOB="050ffe000618100a54c3d8000000f0000400ff00003f000000c000000014100a1082450d000f0f01f20f00ff00f000000003100b0b10010c02000b500900ab03100bbc1004b62ce3d0ef3aa04e3d424169d6f1f315676b83879b252fb70c8f96512ae0e98e2e5f3396ba3fddec7eb7d13dc05a796cc0ee97f39309cc8edf5aefdfba9b38d8dfb1368880f604456d13e3f05df97d4dd764a3f64595a0bf49b9c365aa35725b6101845c411089121395cc53dd7330c3c84dc5ecf856d093e786c02c060250550a2d141f2fccec6973dc37dfcaa8483ef223e7083f81bfc493ecc4e4c79fe748e1d048d504598a405b59b68b8828a40400bcc1b58e8ede356415765b2610f8e76414bd71200e1f5cdab1efa3f8cc0218732530f9d54edfc1044c3a523e9f45781389957f37cc8a9533dbf24bd1995c797d5a45b56aec0393c202ee027abc4b87bf232b0cd53654150bce8daa1f79178ad0a42e0206e79e579000fd511f87a3f4287f3128"], 0xa, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x843}}, {0x71, &(0x7f0000000600)=@string={0x71, 0x3, "7b440e48561cb3cf172856420389d1223f92a5ac1c545d40374cd4051f487e5644fe013c9fc56a5b207c37f3361a08a6f0fed293a6c964a7819ce343d15d49a3a4183cd5265f7c02a6c41180ae37136b9953641a02f76dac4a7f96bdddd8ff819ece93d8f66191d781907b158bd55c"}}, {0xb9, &(0x7f0000000680)=@string={0xb9, 0x3, "66710d7477774191ffb5590d2cb3c4bb3e68458df40bf95df0ad3d4f5d19e011f652ee015129982582cf486fa99e2aeb04fb9e329adad57fbc3df4fa1650036f057f36f3bfdc12f7d119bcaf8aa03a75d1e87f7e3a95b730ab920c79755bf404c604d138bb38977dcf7a603f9bfaca0dec3da39a605da8c57135d0444cc3924f9d3c3a41ecaf91fb102e46481e5df942dd467ef4f5b3d51806cc429b98a62728a7f0822bef723bc81e26e0917e3850b0e96cd8216eada8"}}, {0x59, &(0x7f0000000740)=@string={0x59, 0x3, "b6c0c5aca0aa2ae17362bbdc2f6d54e6b64153313290959e0058cb2e6286dc7bfa3eac8ce21a2f8a9bc9441cb0d47fd985636fc3b9c40a2b5eac7da8a9b4db108214b258d9b4a0a33febaf93d49c9f16d1fd569e4a99d5"}}, {0x86, &(0x7f0000000880)=@string={0x86, 0x3, "7c78828ef430fe0c726a4b167c2eab489b33eea7264f0df67962d6769d76584f31116599998988b81a632e35eddab7c2fe730e32bb70ca6f30f3172a87c8a9a0d62c089b6a25d91254821e07ff309afc9dbf75fcd76ed841db2aa8c77d51d856c7883ec5e9d16d256fedc100db70e7bbd807022322c0f35518eb02273a428025e296ee72"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x441}}, {0x8a, &(0x7f0000000940)=@string={0x8a, 0x3, "3f8ce204216641ef661bcbd78a6a7032ff5c0bebc4591d209892bab5ae25c838e9a8d33d0c12de64caad5c6be06f0241f1405bd5ca85ef4ae3a6a753a1af7794f172d04157bf098603a896ea46b3f20c48a681f6bf6c2a108b171704427732b29df0270a1f0f8350511e430fc11f77dfe6aedc428f15a391fc68ae415653d5bf0836c51c26a73106"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x43, &(0x7f0000000a00)=@string={0x43, 0x3, "9e87fb8a6a0feee70e20f533343628319304682d627e19ab3bb0c568ef43975a689221360031e03d688ea1c85aa8562f3a354f2ee1177a99101313f98e8ba9db0f"}}]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0xc048aec8, &(0x7f00000000c0)={0x5, 0xffffffffffffffff, 0x4}) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x1f}, 0x94) 6m27.751832509s ago: executing program 5 (id=576): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) getsockopt$inet_tcp_int(r3, 0x6, 0x8, 0x0, &(0x7f0000000280)) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r11, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r12, 0x1, 0x70bd2a, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r12, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000800}, 0x800) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x8, 0x4) 6m9.693962363s ago: executing program 33 (id=576): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) getsockopt$inet_tcp_int(r3, 0x6, 0x8, 0x0, &(0x7f0000000280)) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r11, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r12, 0x1, 0x70bd2a, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r12, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000800}, 0x800) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x8, 0x4) 5m25.929867084s ago: executing program 3 (id=681): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000008000000e27f"], 0x50) 5m25.793348882s ago: executing program 3 (id=682): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) prctl$PR_CAPBSET_READ(0x59616d61, 0xfffffffb) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40010002, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000080)={0x0, 0x0, 0x800}, 0xc) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x8, r3, 0x0, r4}, 0x10) recvmmsg(r4, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r8, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x100, @loopback, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x41, 0xfffffffc}}], 0x18}, 0x24000005) 5m23.169571171s ago: executing program 3 (id=685): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdffffff"], 0xfc}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e23f8ffffff03000000060000000000000000040000090000000800000009", @ANYRES32=0x0, @ANYBLOB="010000000000004c600000000b0000000d000100f102dcf29effaefacc"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 5m22.800229907s ago: executing program 3 (id=687): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0xf, 0x62d0, 0x6, 0x223, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x7800, 0x40, 0x101, 0x45, {{0xf, 0x4, 0x0, 0x9, 0x3c, 0x66, 0x0, 0x2, 0x4, 0x0, @empty, @rand_addr=0x64010101, {[@rr={0x7, 0xf, 0x62, [@private=0xa010100, @local, @multicast2]}, @ssrr={0x89, 0x7, 0x54, [@local]}, @noop, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0xee, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x5, 0x3234, 0xe, 0x40a10, r0, 0x5, '\x00', r1, r2, 0x3, 0x3, 0x0, 0xf}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d0000009500000000000000e3b749b4f3da4ee3d589d00d85fd8bbb283f9439e6d0a11a0b675a9c888f63f99bf48613f23c666fb82f4365413f93ce885eb9ef8fe0702bf3c05d17f20131add72b6e163c088f2c5cb442abee9980b9564387ba576d524d3aed2cb81196ec30f2e9ed3cb0f915b200933d85f6e07a4f54d4ec6241440dfd38c1ec8d7e57f6f38a5ef6031fe01014c42928ba466302ab95cbf13b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40080) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r9, 0x84, 0x9, &(0x7f0000001200)=""/4129, &(0x7f0000000000)=0x1021) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xb516baf7c90ea24d) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0x2, 0xfffffffd, 0x1, 'queue0\x00'}) write$sndseq(r10, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {0x0, 0x73}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r12}, 0x90) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000540)=0x1) open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./bus\x00', &(0x7f0000000080), 0x800) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000210001002cbd7000f7dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x408c0}, 0x8014) syz_clone(0x80001280, 0x0, 0x0, 0x0, 0x0, 0x0) 5m21.184131334s ago: executing program 3 (id=691): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000008000000e27f"], 0x50) 5m20.828078763s ago: executing program 3 (id=692): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x6408}, {r0, 0xa010}, {0xffffffffffffffff, 0x200}, {}, {0xffffffffffffffff, 0x90}, {r0, 0x100}], 0x6, 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x7, 0x80, 0x6f0, 0x3, {{0x15, 0x4, 0x1, 0x2, 0x54, 0x68, 0x0, 0x2, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@timestamp={0x44, 0x20, 0xf3, 0x0, 0xc, [0x8, 0x7, 0x6ef5, 0x6, 0x1771, 0x1, 0x0]}, @ssrr={0x89, 0x1b, 0x3f, [@empty, @multicast2, @multicast1, @multicast2, @rand_addr=0x64010101, @rand_addr=0x64010101]}, @ra={0x94, 0x4}]}}}}}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r4, @multicast2, @broadcast}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 5m5.682532924s ago: executing program 34 (id=692): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x6408}, {r0, 0xa010}, {0xffffffffffffffff, 0x200}, {}, {0xffffffffffffffff, 0x90}, {r0, 0x100}], 0x6, 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x7, 0x80, 0x6f0, 0x3, {{0x15, 0x4, 0x1, 0x2, 0x54, 0x68, 0x0, 0x2, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@timestamp={0x44, 0x20, 0xf3, 0x0, 0xc, [0x8, 0x7, 0x6ef5, 0x6, 0x1771, 0x1, 0x0]}, @ssrr={0x89, 0x1b, 0x3f, [@empty, @multicast2, @multicast1, @multicast2, @rand_addr=0x64010101, @rand_addr=0x64010101]}, @ra={0x94, 0x4}]}}}}}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r4, @multicast2, @broadcast}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 4m18.069351812s ago: executing program 2 (id=789): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x7, 0x2003) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = dup(0xffffffffffffffff) ioctl$KDGKBDIACR(r4, 0x4b4a, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x1) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00009af000/0x1000)=nil, 0x400000, 0x2, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="f0000000", @ANYBLOB="01002dbd7000ffdbdf250b000000080002000000000030000680060005004e23000008", @ANYRES32, @ANYBLOB="1400040000000000000000000000ffff7f00000108000400070000003c0001"], 0xf0}, 0x1, 0x0, 0x0, 0x20000080}, 0x804) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) syz_pidfd_open(r1, 0x0) 4m16.80426129s ago: executing program 2 (id=790): openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xa0000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0x5) close(0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) close(0x5) close(0x4) (fail_nth: 2) 4m16.3445846s ago: executing program 2 (id=792): r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x198) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={@remote, 0x0, 0x0, 0x10, 0x0, [{@dev}]}}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xd0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) syz_open_procfs(0x0, &(0x7f0000002280)='net/l2cap\x00') syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r2, &(0x7f0000000380)="0024247456b0577f4d4864c7576f9ba3a7c980ef3e8d1ac722e1c2079b8e0000000000000033a1f181ffe028e046e3ebdf5f53e2e1f8fdf779b1e180555360ca2424feea9d85b47791d212fff0110c9270670aacdc79b5f110a74dbc", 0x5c, 0x8810, &(0x7f000005ffe4)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_usb_connect(0x3, 0x24, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000)='omfs\x00', 0x8004, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xbe) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$packet_int(r6, 0x107, 0x10, &(0x7f0000001000), &(0x7f0000001040)=0x4) 4m15.72549206s ago: executing program 2 (id=797): r0 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b06c2, [{{0x9, 0x2, 0xffffffffffffffe8}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="a0bd410eb14f93266921d020f701816e28b4d3a20b75807a6ec0b7ba0a3a4d1cd88f1b4301ab30ac5421c65702b3e42df2bcc702b4df51d69bfe75111f275239f9f061e726fd5aef7916e6ba4e9f1614d8fdacb12da894d21c188722a178a6767cba"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 4m11.021762326s ago: executing program 2 (id=805): r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x198) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={@remote, 0x0, 0x0, 0x10, 0x0, [{@dev}]}}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xd0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) syz_open_procfs(0x0, &(0x7f0000002280)='net/l2cap\x00') syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r2, &(0x7f0000000380)="0024247456b0577f4d4864c7576f9ba3a7c980ef3e8d1ac722e1c2079b8e0000000000000033a1f181ffe028e046e3ebdf5f53e2e1f8fdf779b1e180555360ca2424feea9d85b47791d212fff0110c9270670aacdc79b5f110a74dbc", 0x5c, 0x8810, &(0x7f000005ffe4)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_usb_connect(0x3, 0x24, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000)='omfs\x00', 0x8004, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xbe) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$packet_int(r6, 0x107, 0x10, &(0x7f0000001000), &(0x7f0000001040)=0x4) 4m8.662105612s ago: executing program 2 (id=809): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x40, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xb0}, 0x4008804) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000400)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @code={0xa, 0x54, {"66ba2000b096eeb9290200000f32b8010000000f01d9660f3800d5440f20c20f4a4800c4a259071b460f0966baf80cb8684e4b8eef66bafc0c66b8ee0066ef450f01d1"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control16, 0x6, 0x3, 0x8}}, @cpuid={0x64, 0x18, {0x9, 0x4}}, @set_irq_handler={0xc8, 0x20, {0xed, 0x2}}, @rdmsr={0x66, 0x18, {0x332}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xa465}}, @wr_drn={0x68, 0x20, {0x4, 0xb1}}, @rdmsr={0x66, 0x18, {0xa81}}, @wr_crn={0x67, 0x20, {0xc, 0x7fffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}, @nested_load_code={0x12e, 0x59, {0x0, "c403110e5178060f38033767f3410fc7b7ea4a59cac4c17c2e7fe0c4e1c1d22a660f546c74190f08f30f70c8b4c44248f22443b9800000c00f3235000800000f30"}}, @out_dx={0x6a, 0x28, {0x3ee0}}, @code={0xa, 0x53, {"c4217a6f3ac7442400b3000000c744240207000000ff2c242e0fc771000fc72c230fc72866b8ab008ed8440f380b0766ba2100b800000000ef430f01c4c4e20dbe32"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host64=0x2c04, 0x4, 0xfffffffffffff800, 0x80000001}}, @enable_nested={0x12c, 0x18}, @code={0xa, 0x69, {"0f212448b800900000000000000f23d00f21f835200000020f23f8b8010000000f01c1c421cd72d18465c6f800c4c1bf2ab46ede560000650f6460e9360f01c4c4e28da7fec744240059000000c7442402af000000ff1c24"}}], 0x329}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, 0xfffffffffffffffd, 0x0, 0x9, &(0x7f0000000440)=[@efer={0x2, 0xe000}, @cstype0], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8a, 0x8, 0x1ff, 0x80040001}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r4, 0x0, &(0x7f0000000000), 0x800) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f00000005c0)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4000000) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) 3m52.452761472s ago: executing program 35 (id=809): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x40, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="ac0000000000000000000000070000000146d59bb000fc000000000fff000000080000001200001000000000090000007f00000fff536f4967ac1e0001000000076401010000000008440c5a037f000001000000058654ffe2f7fe0011cc6ad1ebd86d291289fbe64406bc60270f1beb6cec333452329ace5206039a050c73f8ca4ebd039db791af07094e39e8fe9a950e010f44909f3ccef573784552ae0006ffa9122c000000000000009200da189590a17cdf85684b231a6bdb5e8629e084c856f6d87453be4aad4385858b30080c2040e56f75bacf5226aae4d9762def6eccb179d5a8b82bd86bc42cbf534766b4e9ec9586935437f44a1011"], 0xb0}, 0x4008804) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000400)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @code={0xa, 0x54, {"66ba2000b096eeb9290200000f32b8010000000f01d9660f3800d5440f20c20f4a4800c4a259071b460f0966baf80cb8684e4b8eef66bafc0c66b8ee0066ef450f01d1"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control16, 0x6, 0x3, 0x8}}, @cpuid={0x64, 0x18, {0x9, 0x4}}, @set_irq_handler={0xc8, 0x20, {0xed, 0x2}}, @rdmsr={0x66, 0x18, {0x332}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xa465}}, @wr_drn={0x68, 0x20, {0x4, 0xb1}}, @rdmsr={0x66, 0x18, {0xa81}}, @wr_crn={0x67, 0x20, {0xc, 0x7fffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}, @nested_load_code={0x12e, 0x59, {0x0, "c403110e5178060f38033767f3410fc7b7ea4a59cac4c17c2e7fe0c4e1c1d22a660f546c74190f08f30f70c8b4c44248f22443b9800000c00f3235000800000f30"}}, @out_dx={0x6a, 0x28, {0x3ee0}}, @code={0xa, 0x53, {"c4217a6f3ac7442400b3000000c744240207000000ff2c242e0fc771000fc72c230fc72866b8ab008ed8440f380b0766ba2100b800000000ef430f01c4c4e20dbe32"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host64=0x2c04, 0x4, 0xfffffffffffff800, 0x80000001}}, @enable_nested={0x12c, 0x18}, @code={0xa, 0x69, {"0f212448b800900000000000000f23d00f21f835200000020f23f8b8010000000f01c1c421cd72d18465c6f800c4c1bf2ab46ede560000650f6460e9360f01c4c4e28da7fec744240059000000c7442402af000000ff1c24"}}], 0x329}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, 0xfffffffffffffffd, 0x0, 0x9, &(0x7f0000000440)=[@efer={0x2, 0xe000}, @cstype0], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8a, 0x8, 0x1ff, 0x80040001}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r4, 0x0, &(0x7f0000000000), 0x800) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f00000005c0)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4000000) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) 1.983021752s ago: executing program 4 (id=1213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x3f, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc020) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.606837139s ago: executing program 4 (id=1215): syz_emit_ethernet(0x86, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48) 1.090941593s ago: executing program 4 (id=1217): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 1.027278347s ago: executing program 0 (id=1218): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) 965.693301ms ago: executing program 4 (id=1219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003180)=ANY=[@ANYBLOB='D\f\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0xc44}, 0x1, 0x0, 0x0, 0x20d0}, 0x44040) 929.322108ms ago: executing program 4 (id=1220): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) setresuid(0xee01, 0xee01, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, 0x0) 855.798826ms ago: executing program 4 (id=1221): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x98}}, 0x0) 524.614307ms ago: executing program 0 (id=1222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x3f, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 451.120065ms ago: executing program 0 (id=1223): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 390.640467ms ago: executing program 0 (id=1224): getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = socket(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x1, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000380)="c9", 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000240), 0x4) r4 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4}) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280), 0x0, &(0x7f00000007c0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0xa3}}, @authinfo={0x18, 0x84, 0x6, {0xb}}], 0x30, 0x4008000}, 0x28008841) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) 162.949694ms ago: executing program 0 (id=1225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 0s ago: executing program 0 (id=1226): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000007c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd\x8ed\xad\x1f^:Y\x89\xdd\x96\x80\xe0z\xd3.\x96\xfe\xa5.l\x9e\xed4:\x14V.\xa7c2\x19\x10\xed\xf7\x94\xb8\x02J\xf9\x17\xe6\xe4}\xce\xb0f1\xa5k\xe4\x83\x03\xba}^\x7f=*R\x86L\x92E\xea\xc2W\x81D5\x84Cg\x10\xeb;d\r\xc5\xa2\x01\xed\xf0\x00\x00\x00\x00\x00\x00\x00\b\xf6\x80\xc6mE\xca\x94x\xbe\xde\xac$#\xf4uo\xa5\x80u*C\xf4Wp\xd3\xa7\xa3\x00r(\x9c\xac\x90\x9eq\x19x\xf4\xe2\xb9>\x01\xba/m\x89\xea\xcf\xd6\x8b\xe7\xaff\xac\xf5k\xe3\x8d\xcd\xdaE\x18\xd0\xc7Zrps\x18\xc1\xb3`%\xef\xa2\xed\xb5\xb1\xb5\xebK\'\x99\x03\xd7p$\xed+\xe8\x06\xfe\xeb)') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) kernel console output (not intermixed with test programs): ] ? lockdep_hardirqs_on+0x7b/0x110 [ 629.450101][ T9718] ? __alloc_skb+0x198/0x3a0 [ 629.450115][ T9718] __alloc_skb+0x1dc/0x3a0 [ 629.450131][ T9718] netlink_sendmsg+0x5c6/0xb30 [ 629.450155][ T9718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.450177][ T9718] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 629.450193][ T9718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.450211][ T9718] __sock_sendmsg+0x21c/0x270 [ 629.450233][ T9718] ____sys_sendmsg+0x508/0x810 [ 629.450253][ T9718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.450274][ T9718] ? import_iovec+0x74/0xa0 [ 629.450289][ T9718] ___sys_sendmsg+0x21f/0x2a0 [ 629.450306][ T9718] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.450351][ T9718] ? __fget_files+0x2a/0x420 [ 629.450364][ T9718] ? __fget_files+0x3a6/0x420 [ 629.450383][ T9718] __x64_sys_sendmsg+0x1a1/0x260 [ 629.450401][ T9718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 629.450423][ T9718] ? __pfx_ksys_write+0x10/0x10 [ 629.450446][ T9718] do_syscall_64+0xec/0xf80 [ 629.450459][ T9718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.450471][ T9718] ? trace_irq_disable+0x37/0x100 [ 629.450484][ T9718] ? clear_bhb_loop+0x60/0xb0 [ 629.450499][ T9718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.450511][ T9718] RIP: 0033:0x7f40b229f749 [ 629.450523][ T9718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.450535][ T9718] RSP: 002b:00007f40b04fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.450550][ T9718] RAX: ffffffffffffffda RBX: 00007f40b24f5fa0 RCX: 00007f40b229f749 [ 629.450559][ T9718] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 629.450567][ T9718] RBP: 00007f40b04fe090 R08: 0000000000000000 R09: 0000000000000000 [ 629.450575][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.450582][ T9718] R13: 00007f40b24f6038 R14: 00007f40b24f5fa0 R15: 00007ffc48dbd008 [ 629.450601][ T9718] [ 629.519256][ T8347] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 629.669249][ T8347] usb 1-1: Using ep0 maxpacket: 32 [ 629.671587][ T8347] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.671620][ T8347] usb 1-1: config 0 interface 0 has no altsetting 0 [ 629.671653][ T8347] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 629.671676][ T8347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.677062][ T8347] usb 1-1: config 0 descriptor?? [ 629.784921][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.784992][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.849211][ T7571] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 629.944292][ T1159] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.012817][ T7571] usb 5-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 630.012850][ T7571] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 630.017191][ T7571] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 630.017214][ T7571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 630.017227][ T7571] usb 5-1: SerialNumber: syz [ 630.150046][ T8347] usbhid 1-1:0.0: can't add hid device: -71 [ 630.150280][ T8347] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 630.188327][ T8347] usb 1-1: USB disconnect, device number 22 [ 630.453155][ T1159] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.635582][ T9720] macsec1: entered allmulticast mode [ 630.635608][ T9720] macvlan0: entered allmulticast mode [ 630.635622][ T9720] veth1_vlan: entered allmulticast mode [ 630.684401][ T9720] macvlan0: left allmulticast mode [ 630.684423][ T9720] veth1_vlan: left allmulticast mode [ 631.067463][ T7571] usb 5-1: 0:2 : does not exist [ 631.095377][ T7571] usb 5-1: USB disconnect, device number 29 [ 631.159408][ T6245] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 631.183025][ T1159] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.197466][ T9701] udevd[9701]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 631.319390][ T6245] usb 1-1: Using ep0 maxpacket: 8 [ 631.324195][ T6245] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 631.326600][ T6245] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 631.326631][ T6245] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 631.326645][ T6245] usb 1-1: Product: syz [ 631.326654][ T6245] usb 1-1: Manufacturer: syz [ 631.326663][ T6245] usb 1-1: SerialNumber: syz [ 631.598596][ T6245] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 631.598626][ T6245] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 631.598647][ T6245] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 631.598677][ T6245] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 631.802423][ T6245] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 631.803956][ T6245] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 631.838249][ T6245] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 631.871159][ T6245] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 631.888392][ T6245] usb 1-1: USB disconnect, device number 23 [ 631.948464][ T6245] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 631.971550][ T6245] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 631.973629][ T6245] visor 1-1:1.0: device disconnected [ 632.355771][ T9741] FAULT_INJECTION: forcing a failure. [ 632.355771][ T9741] name failslab, interval 1, probability 0, space 0, times 0 [ 632.355810][ T9741] CPU: 0 UID: 0 PID: 9741 Comm: syz.4.884 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 632.355835][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 632.355847][ T9741] Call Trace: [ 632.355856][ T9741] [ 632.355865][ T9741] dump_stack_lvl+0xe8/0x150 [ 632.355913][ T9741] should_fail_ex+0x46c/0x600 [ 632.355950][ T9741] should_failslab+0xa8/0x100 [ 632.355973][ T9741] __kmalloc_cache_node_noprof+0x8b/0x700 [ 632.356007][ T9741] ? __get_vm_area_node+0x172/0x350 [ 632.356042][ T9741] __get_vm_area_node+0x172/0x350 [ 632.356078][ T9741] __vmalloc_node_range_noprof+0x371/0x16a0 [ 632.356111][ T9741] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 632.356159][ T9741] ? is_bpf_text_address+0x26/0x2b0 [ 632.356190][ T9741] ? kernel_text_address+0xa5/0xe0 [ 632.356227][ T9741] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 632.356282][ T9741] ? __lock_acquire+0x6b6/0x2cf0 [ 632.356319][ T9741] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 632.356343][ T9741] __vmalloc_noprof+0xd2/0x120 [ 632.356372][ T9741] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 632.356400][ T9741] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 632.356430][ T9741] bpf_prog_alloc+0x3c/0x1a0 [ 632.356457][ T9741] bpf_prog_load+0x735/0x1a10 [ 632.356487][ T9741] ? get_pid_task+0x20/0x1f0 [ 632.356516][ T9741] ? __pfx_bpf_prog_load+0x10/0x10 [ 632.356541][ T9741] ? __might_fault+0xb0/0x130 [ 632.356598][ T9741] ? bpf_lsm_bpf+0x9/0x20 [ 632.356615][ T9741] ? security_bpf+0x7e/0x300 [ 632.356651][ T9741] __sys_bpf+0x507/0x860 [ 632.356677][ T9741] ? __pfx___sys_bpf+0x10/0x10 [ 632.356704][ T9741] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 632.356752][ T9741] ? ksys_write+0x230/0x260 [ 632.356784][ T9741] ? __pfx_ksys_write+0x10/0x10 [ 632.356821][ T9741] __x64_sys_bpf+0x7c/0x90 [ 632.356843][ T9741] do_syscall_64+0xec/0xf80 [ 632.356865][ T9741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.356886][ T9741] ? trace_irq_disable+0x37/0x100 [ 632.356908][ T9741] ? clear_bhb_loop+0x60/0xb0 [ 632.356934][ T9741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.356955][ T9741] RIP: 0033:0x7f40b229f749 [ 632.356974][ T9741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.356993][ T9741] RSP: 002b:00007f40b04fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 632.357017][ T9741] RAX: ffffffffffffffda RBX: 00007f40b24f5fa0 RCX: 00007f40b229f749 [ 632.357033][ T9741] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 0000000000000005 [ 632.357046][ T9741] RBP: 00007f40b04fe090 R08: 0000000000000000 R09: 0000000000000000 [ 632.357068][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.357082][ T9741] R13: 00007f40b24f6038 R14: 00007f40b24f5fa0 R15: 00007ffc48dbd008 [ 632.357116][ T9741] [ 632.379255][ T9741] syz.4.884: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 632.379341][ T9741] CPU: 1 UID: 0 PID: 9741 Comm: syz.4.884 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 632.379364][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 632.379376][ T9741] Call Trace: [ 632.379384][ T9741] [ 632.379392][ T9741] dump_stack_lvl+0xe8/0x150 [ 632.379424][ T9741] warn_alloc+0x22e/0x3b0 [ 632.379452][ T9741] ? should_fail_ex+0x344/0x600 [ 632.379485][ T9741] ? __pfx_warn_alloc+0x10/0x10 [ 632.379511][ T9741] ? __kmalloc_cache_node_noprof+0x2aa/0x700 [ 632.379540][ T9741] ? __get_vm_area_node+0x172/0x350 [ 632.379569][ T9741] ? __get_vm_area_node+0x2e2/0x350 [ 632.379601][ T9741] __vmalloc_node_range_noprof+0x396/0x16a0 [ 632.379647][ T9741] ? is_bpf_text_address+0x26/0x2b0 [ 632.379676][ T9741] ? kernel_text_address+0xa5/0xe0 [ 632.379708][ T9741] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 632.379739][ T9741] ? __lock_acquire+0x6b6/0x2cf0 [ 632.379772][ T9741] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 632.379793][ T9741] __vmalloc_noprof+0xd2/0x120 [ 632.379819][ T9741] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 632.379845][ T9741] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 632.379873][ T9741] bpf_prog_alloc+0x3c/0x1a0 [ 632.379897][ T9741] bpf_prog_load+0x735/0x1a10 [ 632.379926][ T9741] ? get_pid_task+0x20/0x1f0 [ 632.379953][ T9741] ? __pfx_bpf_prog_load+0x10/0x10 [ 632.379976][ T9741] ? __might_fault+0xb0/0x130 [ 632.380021][ T9741] ? bpf_lsm_bpf+0x9/0x20 [ 632.380037][ T9741] ? security_bpf+0x7e/0x300 [ 632.380067][ T9741] __sys_bpf+0x507/0x860 [ 632.380091][ T9741] ? __pfx___sys_bpf+0x10/0x10 [ 632.380109][ T9741] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 632.380152][ T9741] ? ksys_write+0x230/0x260 [ 632.380180][ T9741] ? __pfx_ksys_write+0x10/0x10 [ 632.380214][ T9741] __x64_sys_bpf+0x7c/0x90 [ 632.380234][ T9741] do_syscall_64+0xec/0xf80 [ 632.380254][ T9741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.380273][ T9741] ? trace_irq_disable+0x37/0x100 [ 632.380292][ T9741] ? clear_bhb_loop+0x60/0xb0 [ 632.380322][ T9741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.380341][ T9741] RIP: 0033:0x7f40b229f749 [ 632.380360][ T9741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.380377][ T9741] RSP: 002b:00007f40b04fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 632.380397][ T9741] RAX: ffffffffffffffda RBX: 00007f40b24f5fa0 RCX: 00007f40b229f749 [ 632.380411][ T9741] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 0000000000000005 [ 632.380423][ T9741] RBP: 00007f40b04fe090 R08: 0000000000000000 R09: 0000000000000000 [ 632.380435][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.380447][ T9741] R13: 00007f40b24f6038 R14: 00007f40b24f5fa0 R15: 00007ffc48dbd008 [ 632.380477][ T9741] [ 632.380484][ T9741] Mem-Info: [ 632.380493][ T9741] active_anon:275 inactive_anon:6538 isolated_anon:0 [ 632.380493][ T9741] active_file:24486 inactive_file:37014 isolated_file:0 [ 632.380493][ T9741] unevictable:768 dirty:253 writeback:0 [ 632.380493][ T9741] slab_reclaimable:12232 slab_unreclaimable:105797 [ 632.380493][ T9741] mapped:30579 shmem:1372 pagetables:1352 [ 632.380493][ T9741] sec_pagetables:0 bounce:0 [ 632.380493][ T9741] kernel_misc_reclaimable:0 [ 632.380493][ T9741] free:1305411 free_pcp:7133 free_cma:0 [ 632.380547][ T9741] Node 0 active_anon:1100kB inactive_anon:26152kB active_file:97740kB inactive_file:148056kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122316kB dirty:1012kB writeback:0kB shmem:3952kB kernel_stack:13888kB pagetables:5252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 632.380593][ T9741] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 632.380635][ T9741] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.380692][ T9741] lowmem_reserve[]: 0 2514 2515 2515 2515 [ 632.380726][ T9741] Node 0 DMA32 free:1311872kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1100kB inactive_anon:26152kB active_file:97740kB inactive_file:148056kB unevictable:1536kB writepending:1012kB zspages:0kB present:3129332kB managed:2574680kB mlocked:0kB bounce:0kB free_pcp:28532kB local_pcp:12912kB free_cma:0kB [ 632.380787][ T9741] lowmem_reserve[]: 0 0 1 1 1 [ 632.380818][ T9741] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.380872][ T9741] lowmem_reserve[]: 0 0 0 0 0 [ 632.380903][ T9741] Node 1 Normal free:3894412kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.380960][ T9741] lowmem_reserve[]: 0 0 0 0 0 [ 632.380992][ T9741] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 632.381106][ T9741] Node 0 DMA32: 922*4kB (UM) 697*8kB (UME) 771*16kB (UME) 59*32kB (UME) 472*64kB (UME) 391*128kB (UME) 249*256kB (UME) 157*512kB (UM) 99*1024kB (UM) 46*2048kB (UME) 212*4096kB (UM) = 1311808kB [ 632.381258][ T9741] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 632.381361][ T9741] Node 1 Normal: 201*4kB (UE) 57*8kB (UME) 38*16kB (UME) 238*32kB (UME) 110*64kB (UME) 34*128kB (UME) 17*256kB (UME) 5*512kB (UME) 4*1024kB (UME) 0*2048kB 943*4096kB (UM) = 3894412kB [ 632.381510][ T9741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 632.381526][ T9741] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 632.381542][ T9741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 632.381556][ T9741] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 632.381572][ T9741] 62868 total pagecache pages [ 632.381579][ T9741] 0 pages in swap cache [ 632.381586][ T9741] Free swap = 124996kB [ 632.381592][ T9741] Total swap = 124996kB [ 632.381600][ T9741] 2097051 pages RAM [ 632.381607][ T9741] 0 pages HighMem/MovableOnly [ 632.381613][ T9741] 421355 pages reserved [ 632.381620][ T9741] 0 pages cma reserved [ 632.564742][ T9744] FAULT_INJECTION: forcing a failure. [ 632.564742][ T9744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.564780][ T9744] CPU: 1 UID: 0 PID: 9744 Comm: syz.0.885 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 632.564803][ T9744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 632.564815][ T9744] Call Trace: [ 632.564823][ T9744] [ 632.564831][ T9744] dump_stack_lvl+0xe8/0x150 [ 632.564863][ T9744] should_fail_ex+0x46c/0x600 [ 632.564894][ T9744] _copy_from_user+0x2d/0xb0 [ 632.564914][ T9744] memdup_user+0x5e/0xd0 [ 632.564937][ T9744] strndup_user+0x68/0xd0 [ 632.564959][ T9744] __se_sys_mount+0x9d/0x410 [ 632.564980][ T9744] ? ksys_write+0x230/0x260 [ 632.565009][ T9744] ? __pfx___se_sys_mount+0x10/0x10 [ 632.565035][ T9744] ? __x64_sys_mount+0x20/0xc0 [ 632.565057][ T9744] do_syscall_64+0xec/0xf80 [ 632.565078][ T9744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.565096][ T9744] ? trace_irq_disable+0x37/0x100 [ 632.565116][ T9744] ? clear_bhb_loop+0x60/0xb0 [ 632.565139][ T9744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.565157][ T9744] RIP: 0033:0x7ffb06dbf749 [ 632.565176][ T9744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.565192][ T9744] RSP: 002b:00007ffb0501e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 632.565214][ T9744] RAX: ffffffffffffffda RBX: 00007ffb07015fa0 RCX: 00007ffb06dbf749 [ 632.565228][ T9744] RDX: 0000200000000280 RSI: 0000200000000440 RDI: 0000000000000000 [ 632.565241][ T9744] RBP: 00007ffb0501e090 R08: 0000200000000040 R09: 0000000000000000 [ 632.565254][ T9744] R10: 000000000201000c R11: 0000000000000246 R12: 0000000000000001 [ 632.565266][ T9744] R13: 00007ffb07016038 R14: 00007ffb07015fa0 R15: 00007ffe95f27a48 [ 632.565297][ T9744] [ 634.697071][ T1159] bridge_slave_1: left allmulticast mode [ 634.697105][ T1159] bridge_slave_1: left promiscuous mode [ 634.697454][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.924473][ T1159] bridge_slave_0: left allmulticast mode [ 634.924497][ T1159] bridge_slave_0: left promiscuous mode [ 634.924707][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.086401][ T1159] bridge_slave_1: left allmulticast mode [ 635.086425][ T1159] bridge_slave_1: left promiscuous mode [ 635.086589][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.420148][ T1159] bridge_slave_0: left allmulticast mode [ 635.420171][ T1159] bridge_slave_0: left promiscuous mode [ 635.420355][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.502834][ T1159] bridge_slave_1: left allmulticast mode [ 635.502858][ T1159] bridge_slave_1: left promiscuous mode [ 635.503016][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.580059][ T1159] bridge_slave_0: left allmulticast mode [ 635.580082][ T1159] bridge_slave_0: left promiscuous mode [ 635.580277][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.571372][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.690873][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.028741][ T1159] bond0 (unregistering): Released all slaves [ 638.370733][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.506241][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.563663][ T1159] bond0 (unregistering): Released all slaves [ 638.714158][ T9796] FAULT_INJECTION: forcing a failure. [ 638.714158][ T9796] name failslab, interval 1, probability 0, space 0, times 0 [ 638.714185][ T9796] CPU: 1 UID: 0 PID: 9796 Comm: syz.0.895 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 638.714201][ T9796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 638.714209][ T9796] Call Trace: [ 638.714214][ T9796] [ 638.714220][ T9796] dump_stack_lvl+0xe8/0x150 [ 638.714242][ T9796] should_fail_ex+0x46c/0x600 [ 638.714265][ T9796] should_failslab+0xa8/0x100 [ 638.714279][ T9796] __kmalloc_noprof+0xe0/0x7e0 [ 638.714298][ T9796] ? bpf_test_init+0x9f/0x150 [ 638.714318][ T9796] bpf_test_init+0x9f/0x150 [ 638.714337][ T9796] bpf_prog_test_run_xdp+0x503/0x10e0 [ 638.714364][ T9796] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 638.714384][ T9796] ? __fget_files+0x2a/0x420 [ 638.714400][ T9796] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 638.714418][ T9796] bpf_prog_test_run+0x2cd/0x340 [ 638.714436][ T9796] __sys_bpf+0x562/0x860 [ 638.714451][ T9796] ? __pfx___sys_bpf+0x10/0x10 [ 638.714463][ T9796] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 638.714490][ T9796] ? ksys_write+0x230/0x260 [ 638.714509][ T9796] ? __pfx_ksys_write+0x10/0x10 [ 638.714530][ T9796] __x64_sys_bpf+0x7c/0x90 [ 638.714543][ T9796] do_syscall_64+0xec/0xf80 [ 638.714563][ T9796] ? rcu_is_watching+0x15/0xb0 [ 638.714574][ T9796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.714586][ T9796] ? clear_bhb_loop+0x60/0xb0 [ 638.714602][ T9796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.714614][ T9796] RIP: 0033:0x7ffb06dbf749 [ 638.714626][ T9796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.714637][ T9796] RSP: 002b:00007ffb0501e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 638.714651][ T9796] RAX: ffffffffffffffda RBX: 00007ffb07015fa0 RCX: 00007ffb06dbf749 [ 638.714661][ T9796] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 638.714669][ T9796] RBP: 00007ffb0501e090 R08: 0000000000000000 R09: 0000000000000000 [ 638.714677][ T9796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.714684][ T9796] R13: 00007ffb07016038 R14: 00007ffb07015fa0 R15: 00007ffe95f27a48 [ 638.714704][ T9796] [ 639.819610][ T9801] hub 2-0:1.0: USB hub found [ 639.820281][ T9801] hub 2-0:1.0: 1 port detected [ 639.920308][ T1159] erspan0 (unregistering): left promiscuous mode [ 640.179268][ T1159] gretap0 (unregistering): left promiscuous mode [ 640.787007][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.897'. [ 641.695686][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.770179][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.791453][ T1159] bond0 (unregistering): Released all slaves [ 643.927498][ T9504] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 644.102119][ T9504] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 645.820509][ T9504] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 645.937365][ T9504] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 650.973317][ T9877] FAULT_INJECTION: forcing a failure. [ 650.973317][ T9877] name failslab, interval 1, probability 0, space 0, times 0 [ 650.973356][ T9877] CPU: 0 UID: 0 PID: 9877 Comm: syz.0.907 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 650.973382][ T9877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 650.973395][ T9877] Call Trace: [ 650.973403][ T9877] [ 650.973413][ T9877] dump_stack_lvl+0xe8/0x150 [ 650.973450][ T9877] should_fail_ex+0x46c/0x600 [ 650.973481][ T9877] ? getname_flags+0xb8/0x540 [ 650.973502][ T9877] should_failslab+0xa8/0x100 [ 650.973524][ T9877] ? getname_flags+0xb8/0x540 [ 650.973543][ T9877] kmem_cache_alloc_noprof+0x84/0x6c0 [ 650.973587][ T9877] getname_flags+0xb8/0x540 [ 650.973628][ T9877] path_removexattrat+0x151/0x690 [ 650.973660][ T9877] ? __pfx_path_removexattrat+0x10/0x10 [ 650.973688][ T9877] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 650.973739][ T9877] ? __pfx_ksys_write+0x10/0x10 [ 650.973774][ T9877] __x64_sys_lremovexattr+0x65/0x80 [ 650.973803][ T9877] do_syscall_64+0xec/0xf80 [ 650.973826][ T9877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.973847][ T9877] ? trace_irq_disable+0x37/0x100 [ 650.973868][ T9877] ? clear_bhb_loop+0x60/0xb0 [ 650.973895][ T9877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.973916][ T9877] RIP: 0033:0x7ffb06dbf749 [ 650.973935][ T9877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.973954][ T9877] RSP: 002b:00007ffb0501e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 650.973978][ T9877] RAX: ffffffffffffffda RBX: 00007ffb07015fa0 RCX: 00007ffb06dbf749 [ 650.973994][ T9877] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140 [ 650.974008][ T9877] RBP: 00007ffb0501e090 R08: 0000000000000000 R09: 0000000000000000 [ 650.974022][ T9877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.974035][ T9877] R13: 00007ffb07016038 R14: 00007ffb07015fa0 R15: 00007ffe95f27a48 [ 650.974070][ T9877] [ 651.464600][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 652.014259][ T9888] tmpfs: Unknown parameter 'Wz<¼' [ 652.051832][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 652.099427][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 652.100972][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 652.101905][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 652.548487][ T1159] hsr_slave_0: left promiscuous mode [ 652.599221][ T1159] hsr_slave_1: left promiscuous mode [ 652.600380][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.918291][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.788144][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 653.837246][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 653.851269][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 653.867984][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 653.868954][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 653.920355][ T1159] hsr_slave_0: left promiscuous mode [ 653.959323][ T1159] hsr_slave_1: left promiscuous mode [ 653.960498][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.993144][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.120373][ T9907] serio: Serial port ttyS3 [ 654.141944][ T37] audit: type=1326 audit(1768385622.325:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 654.142229][ T37] audit: type=1326 audit(1768385622.325:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 654.142538][ T37] audit: type=1326 audit(1768385622.325:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 654.142859][ T37] audit: type=1326 audit(1768385622.325:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 654.143052][ T37] audit: type=1326 audit(1768385622.325:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 654.143250][ T37] audit: type=1326 audit(1768385622.325:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 654.144094][ T37] audit: type=1326 audit(1768385622.325:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 654.144295][ T37] audit: type=1326 audit(1768385622.325:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 654.144613][ T37] audit: type=1326 audit(1768385622.325:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 654.144823][ T37] audit: type=1326 audit(1768385622.325:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 654.179628][ T5823] Bluetooth: hci0: command tx timeout [ 654.392790][ T1159] hsr_slave_0: left promiscuous mode [ 654.429917][ T1159] hsr_slave_1: left promiscuous mode [ 654.431209][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.431238][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.491746][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.491770][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.597800][ T1159] team_slave_0: left promiscuous mode [ 654.597916][ T1159] team_slave_1: left promiscuous mode [ 654.617378][ T1159] veth1_macvtap: left promiscuous mode [ 654.617499][ T1159] veth0_macvtap: left promiscuous mode [ 654.617846][ T1159] veth1_vlan: left promiscuous mode [ 654.618044][ T1159] veth0_vlan: left promiscuous mode [ 656.324292][ T61] Bluetooth: hci0: command tx timeout [ 656.324428][ T5823] Bluetooth: hci1: command tx timeout [ 656.879371][ T7702] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 657.049787][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 657.099271][ T7702] usb 1-1: Using ep0 maxpacket: 32 [ 657.147996][ T7702] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 657.148029][ T7702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.148049][ T7702] usb 1-1: config 0 has no interface number 0 [ 657.148106][ T7702] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 657.148130][ T7702] usb 1-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 657.148154][ T7702] usb 1-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 657.232603][ T7702] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 657.232636][ T7702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.232656][ T7702] usb 1-1: Product: syz [ 657.232665][ T7702] usb 1-1: Manufacturer: syz [ 657.232675][ T7702] usb 1-1: SerialNumber: syz [ 657.280038][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 657.281042][ T7702] usb 1-1: config 0 descriptor?? [ 658.338909][ T61] Bluetooth: hci0: command tx timeout [ 658.341249][ T5823] Bluetooth: hci1: command tx timeout [ 658.567020][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 658.770164][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 659.191499][ T9923] FAULT_INJECTION: forcing a failure. [ 659.191499][ T9923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.191540][ T9923] CPU: 0 UID: 0 PID: 9923 Comm: syz.0.915 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 659.191567][ T9923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 659.191580][ T9923] Call Trace: [ 659.191589][ T9923] [ 659.191599][ T9923] dump_stack_lvl+0xe8/0x150 [ 659.191635][ T9923] should_fail_ex+0x46c/0x600 [ 659.191672][ T9923] strncpy_from_user+0x36/0x2c0 [ 659.191704][ T9923] getname_flags+0xf3/0x540 [ 659.191732][ T9923] __x64_sys_rename+0x5d/0x90 [ 659.191755][ T9923] do_syscall_64+0xec/0xf80 [ 659.191776][ T9923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.191797][ T9923] ? trace_irq_disable+0x37/0x100 [ 659.191820][ T9923] ? clear_bhb_loop+0x60/0xb0 [ 659.191847][ T9923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.191868][ T9923] RIP: 0033:0x7ffb06dbf749 [ 659.191889][ T9923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.191908][ T9923] RSP: 002b:00007ffb04ffd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 659.191933][ T9923] RAX: ffffffffffffffda RBX: 00007ffb07016090 RCX: 00007ffb06dbf749 [ 659.191949][ T9923] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 00002000000001c0 [ 659.191963][ T9923] RBP: 00007ffb04ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 659.191978][ T9923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.191998][ T9923] R13: 00007ffb07016128 R14: 00007ffb07016090 R15: 00007ffe95f27a48 [ 659.192034][ T9923] [ 660.419163][ T61] Bluetooth: hci1: command tx timeout [ 660.444174][ T61] Bluetooth: hci0: command tx timeout [ 661.676514][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.678097][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.489726][ T61] Bluetooth: hci1: command tx timeout [ 662.489738][ T7702] usb 1-1: probing VID:PID(0424:012C) [ 662.552244][ T7702] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0B [ 662.552276][ T7702] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 662.552397][ T7702] vub300 1-1:0.133: probe with driver vub300 failed with error -22 [ 663.188827][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 663.582011][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 664.262117][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 664.276134][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 664.277737][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 664.281412][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 664.282239][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 664.478611][ T6245] usb 1-1: USB disconnect, device number 24 [ 664.959441][ T9942] serio: Serial port ttyS3 [ 666.329240][ T5823] Bluetooth: hci6: command tx timeout [ 666.805059][ T9955] bond_slave_0: entered promiscuous mode [ 666.805155][ T9955] bond_slave_1: entered promiscuous mode [ 666.805602][ T9955] macvtap1: entered allmulticast mode [ 666.805616][ T9955] bond0: entered allmulticast mode [ 666.805630][ T9955] bond_slave_0: entered allmulticast mode [ 666.805649][ T9955] bond_slave_1: entered allmulticast mode [ 666.807642][ T9955] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 666.935855][ T9955] bond0: left allmulticast mode [ 666.935883][ T9955] bond_slave_0: left allmulticast mode [ 666.935901][ T9955] bond_slave_1: left allmulticast mode [ 666.936061][ T9955] bond_slave_0: left promiscuous mode [ 666.936142][ T9955] bond_slave_1: left promiscuous mode [ 667.406755][ T9955] bond_slave_0: entered promiscuous mode [ 667.406816][ T9955] bond_slave_1: entered promiscuous mode [ 667.407115][ T9955] macvtap1: entered allmulticast mode [ 667.407129][ T9955] bond0: entered allmulticast mode [ 667.407142][ T9955] bond_slave_0: entered allmulticast mode [ 667.407162][ T9955] bond_slave_1: entered allmulticast mode [ 667.422030][ T9955] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 667.498303][ T9955] bond0: left allmulticast mode [ 667.498323][ T9955] bond_slave_0: left allmulticast mode [ 667.498337][ T9955] bond_slave_1: left allmulticast mode [ 667.498389][ T9955] bond_slave_0: left promiscuous mode [ 667.498430][ T9955] bond_slave_1: left promiscuous mode [ 668.220110][ T9969] overlayfs: failed to resolve './file0/file1': -2 [ 668.372901][ T7702] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 668.409553][ T5823] Bluetooth: hci6: command tx timeout [ 668.529209][ T7702] usb 5-1: Using ep0 maxpacket: 16 [ 668.531430][ T7702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.531466][ T7702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.531509][ T7702] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 668.531535][ T7702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.537357][ T7702] usb 5-1: config 0 descriptor?? [ 668.770840][ T9974] trusted_key: encrypted_key: insufficient parameters specified [ 668.792559][ T7702] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 668.792598][ T7702] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 668.792625][ T7702] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 668.792653][ T7702] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 668.792680][ T7702] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 668.792706][ T7702] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 668.792733][ T7702] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 668.792760][ T7702] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 668.792788][ T7702] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 668.792815][ T7702] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 668.879341][ T7702] hid-picolcd 0003:04D8:F002.0018: No report with id 0xf3 found [ 668.879369][ T7702] hid-picolcd 0003:04D8:F002.0018: No report with id 0xf4 found [ 669.030582][ T6039] usb 5-1: USB disconnect, device number 30 [ 669.219229][ T7702] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 669.444448][ T7702] usb 1-1: unable to get BOS descriptor or descriptor too short [ 669.446129][ T7702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 669.446158][ T7702] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 669.481081][ T7702] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 669.481118][ T7702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.481142][ T7702] usb 1-1: Product: syz [ 669.481159][ T7702] usb 1-1: Manufacturer: syz [ 669.481174][ T7702] usb 1-1: SerialNumber: syz [ 669.497227][ T7702] smsusb:smsusb_probe: board id=8, interface number 0 [ 669.497319][ T7702] smsusb:smsusb_probe: Device initialized with return code -19 [ 669.905730][ T6039] usb 1-1: USB disconnect, device number 25 [ 670.489374][ T5823] Bluetooth: hci6: command tx timeout [ 672.889417][ T61] Bluetooth: hci6: command tx timeout [ 673.223804][T10011] ALSA: mixer_oss: invalid OSS volume '' [ 673.223833][T10011] ALSA: mixer_oss: invalid index 1374389 [ 675.311053][ T975] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 675.355563][ T9902] chnl_net:caif_netlink_parms(): no params data found [ 675.381775][ T9880] chnl_net:caif_netlink_parms(): no params data found [ 675.471294][ T975] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 675.471374][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 675.471408][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 675.471439][ T975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 675.471488][ T975] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 675.471514][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.562896][ T975] usb 1-1: config 0 descriptor?? [ 675.609635][T10024] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 675.669465][T10033] bridge1: entered promiscuous mode [ 675.911937][ T9938] chnl_net:caif_netlink_parms(): no params data found [ 676.030360][ T975] plantronics 0003:047F:FFFF.0019: unbalanced collection at end of report description [ 676.035235][ T975] plantronics 0003:047F:FFFF.0019: parse failed [ 676.035367][ T975] plantronics 0003:047F:FFFF.0019: probe with driver plantronics failed with error -22 [ 676.711574][ T6039] usb 1-1: USB disconnect, device number 26 [ 677.214524][ T9902] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.215036][ T9902] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.215288][ T9902] bridge_slave_0: entered allmulticast mode [ 677.218474][ T9902] bridge_slave_0: entered promiscuous mode [ 677.221620][ T9880] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.221749][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.221926][ T9880] bridge_slave_0: entered allmulticast mode [ 677.224800][ T9880] bridge_slave_0: entered promiscuous mode [ 677.281938][ T9902] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.282116][ T9902] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.282381][ T9902] bridge_slave_1: entered allmulticast mode [ 677.285468][ T9902] bridge_slave_1: entered promiscuous mode [ 677.302728][ T9880] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.302856][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.303048][ T9880] bridge_slave_1: entered allmulticast mode [ 677.316964][ T9880] bridge_slave_1: entered promiscuous mode [ 680.047227][ T9938] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.047553][ T9938] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.047791][ T9938] bridge_slave_0: entered allmulticast mode [ 680.053989][ T9938] bridge_slave_0: entered promiscuous mode [ 680.074585][ T9902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.091011][ T9880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.094616][ T9938] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.100186][ T9938] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.100436][ T9938] bridge_slave_1: entered allmulticast mode [ 680.109285][ T9938] bridge_slave_1: entered promiscuous mode [ 680.196206][ T9880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.201081][ T9902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.869497][ T7571] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 680.946353][ T9938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.959202][ T9880] team0: Port device team_slave_0 added [ 681.029401][ T7571] usb 1-1: device descriptor read/64, error -71 [ 681.115522][ T9938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.118857][ T9880] team0: Port device team_slave_1 added [ 681.123035][ T9902] team0: Port device team_slave_0 added [ 681.270908][ T7571] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 681.351571][ T9902] team0: Port device team_slave_1 added [ 681.404000][ T7571] usb 1-1: device descriptor read/64, error -71 [ 681.511292][ T7571] usb usb1-port1: attempt power cycle [ 681.848276][ T9938] team0: Port device team_slave_0 added [ 681.849352][ T7571] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 681.870283][ T7571] usb 1-1: device descriptor read/8, error -71 [ 681.942140][ T9880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.942157][ T9880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.942175][ T9880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.949894][ T9938] team0: Port device team_slave_1 added [ 681.950875][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.950890][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.950916][ T9902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.956298][ T9880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.956315][ T9880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.956362][ T9880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.109354][ T7571] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 682.135954][ T7571] usb 1-1: device descriptor read/8, error -71 [ 682.239538][ T7571] usb usb1-port1: unable to enumerate USB device [ 682.289923][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.289944][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.289975][ T9902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.531840][ T9938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.531859][ T9938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.531886][ T9938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.537661][ T9938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.537674][ T9938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.537693][ T9938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.659326][ T6039] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 682.789183][ T6039] usb 5-1: device descriptor read/64, error -71 [ 682.878301][ T9880] hsr_slave_0: entered promiscuous mode [ 682.880192][ T9880] hsr_slave_1: entered promiscuous mode [ 682.983283][ T9902] hsr_slave_0: entered promiscuous mode [ 682.984271][ T9902] hsr_slave_1: entered promiscuous mode [ 682.985302][ T9902] debugfs: 'hsr0' already exists in 'hsr' [ 682.985334][ T9902] Cannot create hsr debugfs directory [ 683.039266][ T6039] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 683.169497][ T6039] usb 5-1: device descriptor read/64, error -71 [ 683.280394][ T6039] usb usb5-port1: attempt power cycle [ 683.281244][ T9938] hsr_slave_0: entered promiscuous mode [ 683.284280][ T9938] hsr_slave_1: entered promiscuous mode [ 683.285433][ T9938] debugfs: 'hsr0' already exists in 'hsr' [ 683.285451][ T9938] Cannot create hsr debugfs directory [ 683.629317][ T6039] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 683.651664][ T6039] usb 5-1: device descriptor read/8, error -71 [ 683.919864][ T6039] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 683.950076][ T6039] usb 5-1: device descriptor read/8, error -71 [ 684.061955][ T6039] usb usb5-port1: unable to enumerate USB device [ 684.259217][ T7702] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 684.417064][ T7702] usb 1-1: Using ep0 maxpacket: 8 [ 684.513940][ T7702] usb 1-1: unable to get BOS descriptor or descriptor too short [ 684.519435][ T7702] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 684.519476][ T7702] usb 1-1: can't read configurations, error -71 [ 685.142901][T10130] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.949'. [ 688.840109][ T7702] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 688.969207][ T7702] usb 1-1: device descriptor read/64, error -71 [ 689.230060][ T7702] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 689.359185][ T7702] usb 1-1: device descriptor read/64, error -71 [ 689.469629][ T7702] usb usb1-port1: attempt power cycle [ 689.809434][ T7702] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 689.829902][ T7702] usb 1-1: device descriptor read/8, error -71 [ 689.851159][T10170] serio: Serial port ttyS3 [ 690.069192][ T7702] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 690.091376][ T7702] usb 1-1: device descriptor read/8, error -71 [ 690.201842][ T7702] usb usb1-port1: unable to enumerate USB device [ 690.309355][ T5983] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 690.459401][ T5983] usb 5-1: Using ep0 maxpacket: 8 [ 690.538771][ T5983] usb 5-1: unable to get BOS descriptor or descriptor too short [ 690.542836][ T5983] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 690.542876][ T5983] usb 5-1: can't read configurations, error -71 [ 690.605028][ T1159] bridge_slave_1: left allmulticast mode [ 690.605063][ T1159] bridge_slave_1: left promiscuous mode [ 690.605370][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.695180][ T1159] bridge_slave_0: left allmulticast mode [ 690.695213][ T1159] bridge_slave_0: left promiscuous mode [ 690.695504][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.774241][ T1159] bridge_slave_1: left allmulticast mode [ 690.774275][ T1159] bridge_slave_1: left promiscuous mode [ 690.774557][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.840940][ T1159] bridge_slave_0: left allmulticast mode [ 690.840972][ T1159] bridge_slave_0: left promiscuous mode [ 690.841425][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.942364][ T1159] bridge_slave_1: left allmulticast mode [ 690.942388][ T1159] bridge_slave_1: left promiscuous mode [ 690.942551][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.022763][ T1159] bridge_slave_0: left allmulticast mode [ 691.022789][ T1159] bridge_slave_0: left promiscuous mode [ 691.023614][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.216576][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.216658][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.340003][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.370389][ T5983] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 691.421400][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.491307][ T1159] bond0 (unregistering): Released all slaves [ 691.499299][ T5983] usb 5-1: device descriptor read/64, error -71 [ 691.610169][ T5983] usb usb5-port1: attempt power cycle [ 691.784284][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.949361][ T5983] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 691.950234][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.969778][ T5983] usb 5-1: device descriptor read/8, error -71 [ 692.022774][ T1159] bond0 (unregistering): Released all slaves [ 693.129379][ T5983] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 693.152071][ T5983] usb 5-1: device descriptor read/8, error -71 [ 693.259806][ T5983] usb usb5-port1: unable to enumerate USB device [ 693.344386][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.476679][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.694489][ T1159] bond0 (unregistering): Released all slaves [ 694.734381][T10216] serio: Serial port ttyS3 [ 694.917017][ T1159] hsr_slave_0: left promiscuous mode [ 694.929178][ T1159] hsr_slave_1: left promiscuous mode [ 694.930317][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.960278][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.119135][ T5884] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 695.137167][ T1159] hsr_slave_0: left promiscuous mode [ 695.174305][ T1159] hsr_slave_1: left promiscuous mode [ 695.175616][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.250283][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.269167][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 695.356866][ T5884] usb 5-1: unable to get BOS descriptor or descriptor too short [ 695.358010][ T5884] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 695.358050][ T5884] usb 5-1: can't read configurations, error -71 [ 695.399248][ T1159] hsr_slave_0: left promiscuous mode [ 695.439185][ T1159] hsr_slave_1: left promiscuous mode [ 695.440395][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.469987][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.829179][ T5884] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 696.930905][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 697.013927][ T5884] usb 5-1: device descriptor read/64, error -71 [ 697.119544][ T5884] usb usb5-port1: attempt power cycle [ 697.161434][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 698.594060][ T5884] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 698.610283][ T5884] usb 5-1: device descriptor read/8, error -71 [ 698.849207][ T5884] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 698.869939][ T5884] usb 5-1: device descriptor read/8, error -71 [ 698.980489][ T5884] usb usb5-port1: unable to enumerate USB device [ 699.089745][ T8347] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 699.231471][ T8347] usb 1-1: device descriptor read/64, error -71 [ 699.499168][ T8347] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 699.609767][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 699.650270][ T8347] usb 1-1: device descriptor read/64, error -71 [ 699.760259][ T8347] usb usb1-port1: attempt power cycle [ 699.783834][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 700.018060][T10240] serio: Serial port ttyS3 [ 700.130253][ T8347] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 700.150036][ T8347] usb 1-1: device descriptor read/8, error -71 [ 700.449704][ T8347] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 700.662784][ T8347] usb 1-1: device descriptor read/8, error -71 [ 701.244346][ T8347] usb usb1-port1: unable to enumerate USB device [ 703.621311][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 703.860267][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 704.069267][ T5884] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 704.370270][ T5884] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 704.370311][ T5884] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 704.370359][ T5884] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 704.370384][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.376984][T10264] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 704.378210][T10264] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 704.401445][ T5884] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 704.785071][ T5884] usb 5-1: USB disconnect, device number 43 [ 705.006625][T10265] 9p: Bad value for 'rfdno' [ 705.092914][T10255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.974'. [ 705.092942][T10255] netlink: 32 bytes leftover after parsing attributes in process `syz.0.974'. [ 705.092953][T10255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.974'. [ 708.188665][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 708.188687][ T37] audit: type=1326 audit(1768385676.365:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb06dbf749 code=0x7ffc0000 [ 708.229340][ T37] audit: type=1326 audit(1768385676.405:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7ffb06dbf749 code=0x7ffc0000 [ 708.229677][ T37] audit: type=1326 audit(1768385676.415:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb06dbf749 code=0x7ffc0000 [ 708.283137][ T37] audit: type=1326 audit(1768385676.415:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ffb06dbf749 code=0x7ffc0000 [ 708.315959][ T37] audit: type=1326 audit(1768385676.495:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb06dbf749 code=0x7ffc0000 [ 708.316114][ T37] audit: type=1326 audit(1768385676.495:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb06dbf749 code=0x7ffc0000 [ 708.860973][T10300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.986'. [ 708.861004][T10300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.986'. [ 708.865092][T10300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.986'. [ 709.272664][ T9880] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 711.081398][ T9880] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 711.279298][ T7635] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 711.431128][ T7635] usb 1-1: Using ep0 maxpacket: 32 [ 711.438507][ T7635] usb 1-1: config 0 has an invalid interface number: 221 but max is 0 [ 711.438539][ T7635] usb 1-1: config 0 has no interface number 0 [ 711.487824][ T7635] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 711.487858][ T7635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.487880][ T7635] usb 1-1: Product: syz [ 711.487894][ T7635] usb 1-1: Manufacturer: syz [ 711.487906][ T7635] usb 1-1: SerialNumber: syz [ 711.571368][ T7635] usb 1-1: config 0 descriptor?? [ 711.908335][ T9902] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 711.966485][ T5901] usb 1-1: USB disconnect, device number 41 [ 712.013766][ T9902] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 712.133280][ T6083] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 712.151487][ T9902] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 712.271280][ T9902] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 712.289546][ T6083] usb 5-1: device descriptor read/64, error -71 [ 712.327842][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 712.355232][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 712.361259][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 712.362463][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 712.369408][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 712.548128][ T6083] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 712.725746][ T6083] usb 5-1: device descriptor read/64, error -71 [ 712.829711][ T6083] usb usb5-port1: attempt power cycle [ 712.894346][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 712.913632][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 712.969465][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 713.005911][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 713.007098][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 713.209410][ T6083] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 713.242792][ T6083] usb 5-1: device descriptor read/8, error -71 [ 713.522086][ T6083] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 713.541713][ T6083] usb 5-1: device descriptor read/8, error -71 [ 714.168014][ T6083] usb usb5-port1: unable to enumerate USB device [ 714.489560][ T61] Bluetooth: hci3: command tx timeout [ 715.049290][ T61] Bluetooth: hci0: command tx timeout [ 715.055430][ T9938] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 715.475407][T10338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.994'. [ 715.475436][T10338] netlink: 32 bytes leftover after parsing attributes in process `syz.4.994'. [ 715.475447][T10338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.994'. [ 715.475706][ T9938] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 715.624860][ T9938] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 715.690130][ T9938] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 717.435698][ T5823] Bluetooth: hci0: command tx timeout [ 717.435815][ T61] Bluetooth: hci3: command tx timeout [ 717.739190][ T7635] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 717.891641][ T7635] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 717.891716][ T7635] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 717.891763][ T7635] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 717.891787][ T7635] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.898817][T10347] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 717.902531][T10347] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 717.924131][ T7635] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 718.232794][ T5897] usb 5-1: USB disconnect, device number 48 [ 718.739191][ T7635] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 718.909132][ T7635] usb 1-1: Using ep0 maxpacket: 16 [ 718.914220][ T7635] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.914286][ T7635] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 718.914406][ T7635] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 718.914430][ T7635] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 718.914455][ T7635] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 718.915840][ T7635] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 718.915870][ T7635] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 718.915892][ T7635] usb 1-1: Manufacturer: syz [ 719.015562][ T7635] usb 1-1: config 0 descriptor?? [ 719.679246][ T61] Bluetooth: hci3: command tx timeout [ 719.682191][ T61] Bluetooth: hci0: command tx timeout [ 721.158812][T10373] netlink: 'syz.0.999': attribute type 4 has an invalid length. [ 721.163050][T10380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1002'. [ 721.163075][T10380] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1002'. [ 721.163092][T10380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1002'. [ 721.166330][T10316] chnl_net:caif_netlink_parms(): no params data found [ 721.290818][T10323] chnl_net:caif_netlink_parms(): no params data found [ 721.383696][ T7635] rc_core: IR keymap rc-hauppauge not found [ 721.383720][ T7635] Registered IR keymap rc-empty [ 721.384454][ T7635] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.399385][ T7635] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.423520][ T7635] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 721.425569][ T7635] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 721.460698][ T7635] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.482726][ T7635] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.499470][ T7635] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.521105][ T7635] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.547621][ T7635] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.559245][ T7635] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.583382][ T7635] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.599218][ T7635] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.619386][ T7635] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.647601][ T7635] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.663097][ T7635] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 721.663125][ T7635] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 721.674223][ T7635] usb 1-1: USB disconnect, device number 42 [ 721.840958][ T5983] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 721.849366][ T61] Bluetooth: hci0: command tx timeout [ 721.929565][ T5823] Bluetooth: hci3: command tx timeout [ 721.989388][ T5983] usb 5-1: Using ep0 maxpacket: 8 [ 722.063238][ T5983] usb 5-1: unable to get BOS descriptor or descriptor too short [ 722.064505][ T5983] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 722.064549][ T5983] usb 5-1: can't read configurations, error -71 [ 722.255634][T10316] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.255852][T10316] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.256082][T10316] bridge_slave_0: entered allmulticast mode [ 722.269373][ T7635] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 722.275987][T10316] bridge_slave_0: entered promiscuous mode [ 722.355168][T10316] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.355323][T10316] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.355525][T10316] bridge_slave_1: entered allmulticast mode [ 722.363820][T10316] bridge_slave_1: entered promiscuous mode [ 722.419313][ T7635] usb 1-1: Using ep0 maxpacket: 16 [ 722.421217][ T7635] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.421246][ T7635] usb 1-1: config 0 interface 0 has no altsetting 0 [ 722.421268][ T7635] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 722.421283][ T7635] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.424616][ T7635] usb 1-1: config 0 descriptor?? [ 722.543376][T10323] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.543612][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.543840][T10323] bridge_slave_0: entered allmulticast mode [ 722.546770][T10323] bridge_slave_0: entered promiscuous mode [ 722.632850][T10400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.633522][T10400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.689933][T10323] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.698747][T10323] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.699222][T10323] bridge_slave_1: entered allmulticast mode [ 722.702187][T10323] bridge_slave_1: entered promiscuous mode [ 722.785175][T10316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.864710][ T7635] usbhid 1-1:0.0: can't add hid device: -71 [ 722.864843][ T7635] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 722.878683][ T7635] usb 1-1: USB disconnect, device number 43 [ 722.996916][T10316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.137843][T10323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.312267][T10323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.316445][T10316] team0: Port device team_slave_0 added [ 723.553227][T10316] team0: Port device team_slave_1 added [ 725.500447][T10417] trusted_key: encrypted_key: insufficient parameters specified [ 725.618712][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 725.650061][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 725.657403][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 725.658587][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 725.662232][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 725.769297][ T5897] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 725.838113][T10323] team0: Port device team_slave_0 added [ 725.941762][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 725.943035][ T5897] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.943062][ T5897] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 725.945573][ T5897] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 725.945602][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.945623][ T5897] usb 1-1: Product: syz [ 725.945640][ T5897] usb 1-1: Manufacturer: syz [ 725.945656][ T5897] usb 1-1: SerialNumber: syz [ 725.993910][T10323] team0: Port device team_slave_1 added [ 726.056018][ T5897] smsusb:smsusb_probe: board id=8, interface number 0 [ 726.056122][ T5897] smsusb:smsusb_probe: Device initialized with return code -19 [ 726.278951][ T7635] usb 1-1: USB disconnect, device number 44 [ 726.438703][T10316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.438723][T10316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.438754][T10316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.787649][T10316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.787668][T10316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.787699][T10316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.148257][T10323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.148278][T10323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.148308][T10323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.160848][T10323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.160867][T10323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.160893][T10323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.359170][ T8347] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 727.689430][ T8347] usb 5-1: Using ep0 maxpacket: 8 [ 727.767195][T10316] hsr_slave_0: entered promiscuous mode [ 727.768805][T10316] hsr_slave_1: entered promiscuous mode [ 727.769662][ T61] Bluetooth: hci1: command tx timeout [ 727.773102][T10316] debugfs: 'hsr0' already exists in 'hsr' [ 727.773129][T10316] Cannot create hsr debugfs directory [ 727.817615][ T8347] usb 5-1: unable to get BOS descriptor or descriptor too short [ 727.818732][ T8347] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 727.818822][ T8347] usb 5-1: can't read configurations, error -71 [ 728.014637][T10441] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1020'. [ 728.156878][T10323] hsr_slave_0: entered promiscuous mode [ 728.157876][T10323] hsr_slave_1: entered promiscuous mode [ 728.158782][T10323] debugfs: 'hsr0' already exists in 'hsr' [ 728.158802][T10323] Cannot create hsr debugfs directory [ 728.519366][ T5884] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 728.711704][ T5884] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 728.711739][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.711761][ T5884] usb 1-1: Product: syz [ 728.711777][ T5884] usb 1-1: Manufacturer: syz [ 728.711792][ T5884] usb 1-1: SerialNumber: syz [ 728.733544][ T5884] usb 1-1: config 0 descriptor?? [ 729.296596][ T1159] bridge_slave_1: left allmulticast mode [ 729.296628][ T1159] bridge_slave_1: left promiscuous mode [ 729.296911][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.380874][ T1159] bridge_slave_0: left allmulticast mode [ 729.380908][ T1159] bridge_slave_0: left promiscuous mode [ 729.381229][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.475615][ T1159] bridge_slave_1: left allmulticast mode [ 729.475651][ T1159] bridge_slave_1: left promiscuous mode [ 729.475922][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.551107][ T1159] bridge_slave_0: left allmulticast mode [ 729.551142][ T1159] bridge_slave_0: left promiscuous mode [ 729.551443][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.849867][ T61] Bluetooth: hci1: command tx timeout [ 729.910761][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.991544][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.055662][ T1159] bond0 (unregistering): Released all slaves [ 730.290758][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.369869][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.431228][ T1159] bond0 (unregistering): Released all slaves [ 731.067582][ T37] audit: type=1326 audit(1768385699.245:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10474 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 731.093735][ T37] audit: type=1326 audit(1768385699.245:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10474 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 731.093791][ T37] audit: type=1326 audit(1768385699.245:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10474 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 731.093818][ T37] audit: type=1326 audit(1768385699.245:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10474 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 731.093844][ T37] audit: type=1326 audit(1768385699.245:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10474 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 731.093869][ T37] audit: type=1326 audit(1768385699.245:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10474 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 731.093902][ T37] audit: type=1326 audit(1768385699.245:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10474 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 731.093928][ T37] audit: type=1326 audit(1768385699.245:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10474 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 731.093955][ T37] audit: type=1326 audit(1768385699.245:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10474 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 731.093980][ T37] audit: type=1326 audit(1768385699.245:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10474 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 731.338074][ T5983] usb 1-1: USB disconnect, device number 45 [ 731.679119][ T5983] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 731.769281][ T1159] hsr_slave_0: left promiscuous mode [ 731.819443][ T1159] hsr_slave_1: left promiscuous mode [ 731.820538][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.842000][ T5983] usb 1-1: Using ep0 maxpacket: 8 [ 731.871327][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.929759][ T61] Bluetooth: hci1: command tx timeout [ 731.975838][ T5983] usb 1-1: unable to get BOS descriptor or descriptor too short [ 731.976705][ T5983] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 731.976747][ T5983] usb 1-1: can't read configurations, error -71 [ 732.032785][ T1159] hsr_slave_0: left promiscuous mode [ 732.069218][ T1159] hsr_slave_1: left promiscuous mode [ 732.070386][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.120499][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.781907][ T8347] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 735.176723][ T61] Bluetooth: hci1: command tx timeout [ 735.477960][ T8347] usb 5-1: device descriptor read/all, error -71 [ 735.543487][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 735.719828][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 739.169727][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 739.340678][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 740.111010][T10418] chnl_net:caif_netlink_parms(): no params data found [ 740.329073][ T6083] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 740.479199][ T6083] usb 5-1: Using ep0 maxpacket: 32 [ 740.481513][ T6083] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 740.481540][ T6083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.486303][ T6083] usb 5-1: config 0 descriptor?? [ 740.496536][ T6083] as10x_usb: device has been detected [ 740.497618][ T6083] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 740.575579][ T6083] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 740.720332][ T5884] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 740.783968][ T6083] as10x_usb: error during firmware upload part1 [ 740.784785][ T6083] Registered device nBox DVB-T Dongle [ 740.791280][ T6083] usb 5-1: USB disconnect, device number 55 [ 740.855118][ T6083] Unregistered device nBox DVB-T Dongle [ 740.856856][ T6083] as10x_usb: device has been disconnected [ 740.869201][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 741.075259][ T5884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 741.076420][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 741.076460][ T5884] usb 1-1: can't read configurations, error -71 [ 741.205365][T10418] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.205636][T10418] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.205874][T10418] bridge_slave_0: entered allmulticast mode [ 741.208515][T10418] bridge_slave_0: entered promiscuous mode [ 741.471651][T10418] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.471777][T10418] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.472011][T10418] bridge_slave_1: entered allmulticast mode [ 741.474357][T10418] bridge_slave_1: entered promiscuous mode [ 741.996818][T10418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.075353][T10418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.434758][T10418] team0: Port device team_slave_0 added [ 743.561151][T10418] team0: Port device team_slave_1 added [ 745.581386][T10418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.581407][T10418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.581436][T10418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.644147][T10418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.644168][T10418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.644199][T10418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.212677][T10418] hsr_slave_0: entered promiscuous mode [ 746.219697][T10418] hsr_slave_1: entered promiscuous mode [ 750.461921][T10567] FAULT_INJECTION: forcing a failure. [ 750.461921][T10567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.461961][T10567] CPU: 0 UID: 0 PID: 10567 Comm: syz.0.1054 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 750.461987][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 750.462000][T10567] Call Trace: [ 750.462009][T10567] [ 750.462018][T10567] dump_stack_lvl+0xe8/0x150 [ 750.462053][T10567] should_fail_ex+0x46c/0x600 [ 750.462090][T10567] _copy_from_user+0x2d/0xb0 [ 750.462113][T10567] ___sys_sendmsg+0x158/0x2a0 [ 750.462145][T10567] ? __pfx____sys_sendmsg+0x10/0x10 [ 750.462212][T10567] ? __fget_files+0x2a/0x420 [ 750.462234][T10567] ? __fget_files+0x3a6/0x420 [ 750.462268][T10567] __x64_sys_sendmsg+0x1a1/0x260 [ 750.462300][T10567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 750.462339][T10567] ? __pfx_ksys_write+0x10/0x10 [ 750.462381][T10567] do_syscall_64+0xec/0xf80 [ 750.462405][T10567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.462426][T10567] ? trace_irq_disable+0x37/0x100 [ 750.462448][T10567] ? clear_bhb_loop+0x60/0xb0 [ 750.462475][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.462496][T10567] RIP: 0033:0x7ffb06dbf749 [ 750.462515][T10567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.462534][T10567] RSP: 002b:00007ffb0501e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.462567][T10567] RAX: ffffffffffffffda RBX: 00007ffb07015fa0 RCX: 00007ffb06dbf749 [ 750.462584][T10567] RDX: 00000000040440c4 RSI: 0000200000000040 RDI: 0000000000000004 [ 750.462598][T10567] RBP: 00007ffb0501e090 R08: 0000000000000000 R09: 0000000000000000 [ 750.462611][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.462624][T10567] R13: 00007ffb07016038 R14: 00007ffb07015fa0 R15: 00007ffe95f27a48 [ 750.462659][T10567] [ 752.665908][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.665992][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.724105][T10316] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 753.223648][T10316] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 753.310661][T10316] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 753.409201][ T5884] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 753.479562][T10316] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 753.569085][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 753.572440][ T5884] usb 1-1: config 0 has no interfaces? [ 753.572484][ T5884] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 753.572510][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.616074][ T5884] usb 1-1: config 0 descriptor?? [ 753.901403][T10592] FAULT_INJECTION: forcing a failure. [ 753.901403][T10592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.901440][T10592] CPU: 0 UID: 0 PID: 10592 Comm: syz.4.1057 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 753.901463][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 753.901476][T10592] Call Trace: [ 753.901484][T10592] [ 753.901494][T10592] dump_stack_lvl+0xe8/0x150 [ 753.901529][T10592] should_fail_ex+0x46c/0x600 [ 753.901562][T10592] _copy_from_iter+0x1cd/0x1630 [ 753.901594][T10592] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 753.901630][T10592] ? __pfx__copy_from_iter+0x10/0x10 [ 753.901669][T10592] ? set_page_refcounted+0xa0/0x1e0 [ 753.901692][T10592] ? page_copy_sane+0x4e/0x280 [ 753.901727][T10592] copy_page_from_iter+0xdd/0x170 [ 753.901764][T10592] tun_get_user+0x1d40/0x3de0 [ 753.901797][T10592] ? tun_get_user+0x6fc/0x3de0 [ 753.901851][T10592] ? __pfx_tun_get_user+0x10/0x10 [ 753.901882][T10592] ? __lock_acquire+0x6b6/0x2cf0 [ 753.901915][T10592] ? kstrtoull+0x12f/0x1d0 [ 753.901951][T10592] ? ref_tracker_alloc+0x2fe/0x450 [ 753.901979][T10592] ? get_pid_task+0x20/0x1f0 [ 753.902011][T10592] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 753.902043][T10592] ? tun_get+0x1c/0x2f0 [ 753.902071][T10592] ? tun_get+0x1c/0x2f0 [ 753.902105][T10592] ? tun_get+0x1c/0x2f0 [ 753.902131][T10592] ? tun_get+0x1c/0x2f0 [ 753.902160][T10592] tun_chr_write_iter+0x119/0x200 [ 753.902188][T10592] vfs_write+0x5d5/0xb40 [ 753.902221][T10592] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 753.902250][T10592] ? __pfx_vfs_write+0x10/0x10 [ 753.902299][T10592] ? __fget_files+0x2a/0x420 [ 753.902332][T10592] ksys_write+0x14b/0x260 [ 753.902365][T10592] ? __pfx_ksys_write+0x10/0x10 [ 753.902408][T10592] do_syscall_64+0xec/0xf80 [ 753.902431][T10592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.902451][T10592] ? trace_irq_disable+0x37/0x100 [ 753.902475][T10592] ? clear_bhb_loop+0x60/0xb0 [ 753.902501][T10592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.902530][T10592] RIP: 0033:0x7f40b229e1ff [ 753.902550][T10592] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 753.902569][T10592] RSP: 002b:00007f40b04fe000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 753.902594][T10592] RAX: ffffffffffffffda RBX: 00007f40b24f5fa0 RCX: 00007f40b229e1ff [ 753.902611][T10592] RDX: 0000000000000036 RSI: 0000200000000040 RDI: 00000000000000c8 [ 753.902626][T10592] RBP: 00007f40b04fe090 R08: 0000000000000000 R09: 0000000000000000 [ 753.902640][T10592] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 753.902655][T10592] R13: 00007f40b24f6038 R14: 00007f40b24f5fa0 R15: 00007ffc48dbd008 [ 753.902690][T10592] [ 754.142710][T10596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.172278][T10596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.971617][T10323] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 756.082500][T10323] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 756.171904][T10323] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 756.285449][T10602] trusted_key: encrypted_key: insufficient parameters specified [ 756.307717][T10323] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 756.496070][ T1159] bridge_slave_1: left allmulticast mode [ 756.496093][ T1159] bridge_slave_1: left promiscuous mode [ 756.496296][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.549168][ T7702] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 756.582900][ T1159] bridge_slave_0: left allmulticast mode [ 756.582923][ T1159] bridge_slave_0: left promiscuous mode [ 756.584236][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.703700][ T7702] usb 5-1: unable to get BOS descriptor or descriptor too short [ 756.704900][ T7702] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.704916][ T7702] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 756.712781][ T7702] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 756.712811][ T7702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.712831][ T7702] usb 5-1: Product: syz [ 756.712845][ T7702] usb 5-1: Manufacturer: syz [ 756.712859][ T7702] usb 5-1: SerialNumber: syz [ 756.763170][ T7702] smsusb:smsusb_probe: board id=8, interface number 0 [ 756.763261][ T7702] smsusb:smsusb_probe: Device initialized with return code -19 [ 756.975598][ T7702] usb 5-1: USB disconnect, device number 56 [ 757.173707][ T7571] usb 1-1: USB disconnect, device number 50 [ 759.289982][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.399911][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.453888][ T1159] bond0 (unregistering): Released all slaves [ 763.802613][ T1159] hsr_slave_0: left promiscuous mode [ 763.849324][ T1159] hsr_slave_1: left promiscuous mode [ 763.850413][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.880196][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.116500][T10633] FAULT_INJECTION: forcing a failure. [ 764.116500][T10633] name failslab, interval 1, probability 0, space 0, times 0 [ 764.116539][T10633] CPU: 0 UID: 0 PID: 10633 Comm: syz.0.1068 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 764.116565][T10633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 764.116579][T10633] Call Trace: [ 764.116587][T10633] [ 764.116595][T10633] dump_stack_lvl+0xe8/0x150 [ 764.116633][T10633] should_fail_ex+0x46c/0x600 [ 764.116670][T10633] should_failslab+0xa8/0x100 [ 764.116693][T10633] __kmalloc_noprof+0xe0/0x7e0 [ 764.116725][T10633] ? kernfs_fop_write_iter+0x159/0x540 [ 764.116756][T10633] kernfs_fop_write_iter+0x159/0x540 [ 764.116788][T10633] do_iter_readv_writev+0x635/0x8d0 [ 764.116829][T10633] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 764.116881][T10633] vfs_writev+0x323/0x970 [ 764.116915][T10633] ? __pfx_vfs_writev+0x10/0x10 [ 764.116955][T10633] ? __fget_files+0x2a/0x420 [ 764.116984][T10633] ? __fget_files+0x3a6/0x420 [ 764.117005][T10633] ? __fget_files+0x2a/0x420 [ 764.117038][T10633] __x64_sys_pwritev+0x19a/0x2a0 [ 764.117075][T10633] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 764.117122][T10633] do_syscall_64+0xec/0xf80 [ 764.117146][T10633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.117167][T10633] ? trace_irq_disable+0x37/0x100 [ 764.117189][T10633] ? clear_bhb_loop+0x60/0xb0 [ 764.117216][T10633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.117238][T10633] RIP: 0033:0x7ffb06dbf749 [ 764.117258][T10633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.117277][T10633] RSP: 002b:00007ffb0501e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 764.117309][T10633] RAX: ffffffffffffffda RBX: 00007ffb07015fa0 RCX: 00007ffb06dbf749 [ 764.117325][T10633] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 [ 764.117348][T10633] RBP: 00007ffb0501e090 R08: 0000000000000002 R09: 0000000000000000 [ 764.117363][T10633] R10: 00000000ffffff01 R11: 0000000000000246 R12: 0000000000000001 [ 764.117376][T10633] R13: 00007ffb07016038 R14: 00007ffb07015fa0 R15: 00007ffe95f27a48 [ 764.117411][T10633] [ 766.289122][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 768.179867][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 768.509068][ T5799] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 768.718382][ T5799] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 768.718424][ T5799] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 768.718473][ T5799] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 768.718499][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.789383][T10657] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 768.789550][T10657] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 768.796611][ T5799] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 769.164695][ T8426] usb 5-1: USB disconnect, device number 57 [ 769.366008][T10667] 9p: Bad value for 'rfdno' [ 769.659222][ T8426] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 769.799437][ T8426] usb 1-1: device descriptor read/64, error -71 [ 769.977166][T10316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.079153][ T8426] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 770.163890][T10316] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.218238][ T8426] usb 1-1: device descriptor read/64, error -71 [ 770.218924][ T1384] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.224538][ T1384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.329885][ T8426] usb usb1-port1: attempt power cycle [ 770.356556][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.356722][ T6311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.438335][T10323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.576827][T10323] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.702104][ T8426] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 770.720293][ T8426] usb 1-1: device descriptor read/8, error -71 [ 770.737351][ T1384] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.737441][ T1384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.989583][ T8426] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 771.031495][ T8426] usb 1-1: device descriptor read/8, error -71 [ 771.160768][ T8426] usb usb1-port1: unable to enumerate USB device [ 771.901744][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.901927][ T3702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.124885][T10418] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 772.207217][T10418] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 772.273717][T10418] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 772.382288][T10418] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 772.760902][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 772.794300][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 772.795971][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 772.802546][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 772.803323][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 774.656576][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 774.682743][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 774.705046][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 774.719585][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 774.736870][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 775.839153][ T61] Bluetooth: hci5: command tx timeout [ 777.875026][ T5823] Bluetooth: hci3: command tx timeout [ 777.875401][ T5823] Bluetooth: hci5: command tx timeout [ 781.348386][ T61] Bluetooth: hci5: command tx timeout [ 781.348518][ T8989] Bluetooth: hci3: command tx timeout [ 782.200691][T10765] trusted_key: encrypted_key: insufficient parameters specified [ 782.441750][ T6083] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 782.591753][ T6083] usb 5-1: unable to get BOS descriptor or descriptor too short [ 782.593052][ T6083] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 782.593078][ T6083] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 782.596215][ T6083] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 782.596240][ T6083] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.596254][ T6083] usb 5-1: Product: syz [ 782.596263][ T6083] usb 5-1: Manufacturer: syz [ 782.596294][ T6083] usb 5-1: SerialNumber: syz [ 782.652941][ T6083] smsusb:smsusb_probe: board id=8, interface number 0 [ 782.653027][ T6083] smsusb:smsusb_probe: Device initialized with return code -19 [ 782.889615][ T8347] usb 5-1: USB disconnect, device number 58 [ 782.958163][T10418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.379102][ T61] Bluetooth: hci5: command tx timeout [ 783.379159][ T8989] Bluetooth: hci3: command tx timeout [ 783.562356][T10418] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.851821][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.852024][ T6550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.860425][T10704] chnl_net:caif_netlink_parms(): no params data found [ 785.054362][ T1384] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.054621][ T1384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.323023][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 785.372538][T10724] chnl_net:caif_netlink_parms(): no params data found [ 785.378608][ T43] bridge_slave_1: left allmulticast mode [ 785.378629][ T43] bridge_slave_1: left promiscuous mode [ 785.386500][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.449669][ T8989] Bluetooth: hci3: command tx timeout [ 785.467181][ T43] bridge_slave_0: left allmulticast mode [ 785.467204][ T43] bridge_slave_0: left promiscuous mode [ 785.468650][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.531210][T10815] FAULT_INJECTION: forcing a failure. [ 786.531210][T10815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.531250][T10815] CPU: 0 UID: 0 PID: 10815 Comm: syz.0.1096 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 786.531288][T10815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 786.531301][T10815] Call Trace: [ 786.531310][T10815] [ 786.531319][T10815] dump_stack_lvl+0xe8/0x150 [ 786.531355][T10815] should_fail_ex+0x46c/0x600 [ 786.531392][T10815] _copy_from_user+0x2d/0xb0 [ 786.531415][T10815] sk_getsockopt+0x1ac/0x2460 [ 786.531439][T10815] ? get_pid_task+0x20/0x1f0 [ 786.531479][T10815] ? __pfx_sk_getsockopt+0x10/0x10 [ 786.531520][T10815] ? __lock_acquire+0x6b6/0x2cf0 [ 786.531556][T10815] ? __might_fault+0xb0/0x130 [ 786.531589][T10815] ? __might_fault+0xb0/0x130 [ 786.531643][T10815] do_sock_getsockopt+0x20a/0x3d0 [ 786.531678][T10815] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 786.531707][T10815] ? __fget_files+0x3a6/0x420 [ 786.531730][T10815] ? __fget_files+0x2a/0x420 [ 786.531767][T10815] __x64_sys_getsockopt+0x1ab/0x250 [ 786.531806][T10815] do_syscall_64+0xec/0xf80 [ 786.531828][T10815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.531849][T10815] ? trace_irq_disable+0x37/0x100 [ 786.531871][T10815] ? clear_bhb_loop+0x60/0xb0 [ 786.531898][T10815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.531919][T10815] RIP: 0033:0x7ffb06dbf749 [ 786.531939][T10815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.531958][T10815] RSP: 002b:00007ffb0501e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 786.531982][T10815] RAX: ffffffffffffffda RBX: 00007ffb07015fa0 RCX: 00007ffb06dbf749 [ 786.531998][T10815] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000003 [ 786.532011][T10815] RBP: 00007ffb0501e090 R08: 0000200000003080 R09: 0000000000000000 [ 786.532025][T10815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.532039][T10815] R13: 00007ffb07016038 R14: 00007ffb07015fa0 R15: 00007ffe95f27a48 [ 786.532085][T10815] [ 786.680981][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 786.698722][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 786.701347][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 786.703024][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 786.704170][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 788.729122][ T61] Bluetooth: hci0: command tx timeout [ 789.369185][ T6083] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 789.526067][ T6083] usb 1-1: not running at top speed; connect to a high speed hub [ 789.527966][ T6083] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.528034][ T6083] usb 1-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 789.528063][ T6083] usb 1-1: config 1 interface 0 has no altsetting 0 [ 789.574692][ T6083] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 789.574726][ T6083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.574748][ T6083] usb 1-1: Product: syz [ 789.574763][ T6083] usb 1-1: Manufacturer: syz [ 789.574778][ T6083] usb 1-1: SerialNumber: syz [ 789.842466][ T6083] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 789.853987][ T6083] usb 1-1: USB disconnect, device number 55 [ 790.210067][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.270112][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.291757][ T43] bond0 (unregistering): Released all slaves [ 790.810026][ T61] Bluetooth: hci0: command tx timeout [ 792.851011][ T43] hsr_slave_0: left promiscuous mode [ 792.869401][ T43] hsr_slave_1: left promiscuous mode [ 792.870519][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.889179][ T61] Bluetooth: hci0: command tx timeout [ 792.917197][ T8426] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 792.959677][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.049144][ T8426] usb 1-1: device descriptor read/64, error -71 [ 793.199169][ T37] kauditd_printk_skb: 343 callbacks suppressed [ 793.199192][ T37] audit: type=1326 audit(1768385761.375:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 793.199246][ T37] audit: type=1326 audit(1768385761.375:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 793.201178][ T37] audit: type=1326 audit(1768385761.385:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 793.201628][ T37] audit: type=1326 audit(1768385761.385:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 793.202037][ T37] audit: type=1326 audit(1768385761.385:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 793.202799][ T37] audit: type=1326 audit(1768385761.385:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 793.309327][ T8426] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 793.449146][ T8426] usb 1-1: device descriptor read/64, error -71 [ 793.559733][ T8426] usb usb1-port1: attempt power cycle [ 793.919191][ T8426] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 793.968128][ T8426] usb 1-1: device descriptor read/8, error -71 [ 794.451417][ T43] team0 (unregistering): Port device team_slave_1 removed [ 794.830167][ T43] team0 (unregistering): Port device team_slave_0 removed [ 794.987588][ T61] Bluetooth: hci0: command tx timeout [ 795.219673][ T8426] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 795.240125][ T8426] usb 1-1: Using ep0 maxpacket: 8 [ 795.250814][ T8426] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 795.250844][ T8426] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.250863][ T8426] usb 1-1: config 0 has no interface number 0 [ 795.250913][ T8426] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 795.250935][ T8426] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 795.250961][ T8426] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 795.251002][ T8426] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 795.251028][ T8426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.255134][ T8426] usb 1-1: config 0 descriptor?? [ 795.306140][ T8426] ldusb 1-1:0.55: Interrupt in endpoint not found [ 795.512643][T10866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.513257][T10866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.430489][T10704] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.430760][T10704] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.431027][T10704] bridge_slave_0: entered allmulticast mode [ 797.432817][T10704] bridge_slave_0: entered promiscuous mode [ 797.686224][T10704] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.686374][T10704] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.686617][T10704] bridge_slave_1: entered allmulticast mode [ 797.712495][T10704] bridge_slave_1: entered promiscuous mode [ 797.791852][ T8426] usb 1-1: USB disconnect, device number 59 [ 798.251877][T10878] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 798.300564][T10724] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.300785][T10724] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.300988][T10724] bridge_slave_0: entered allmulticast mode [ 798.305107][T10724] bridge_slave_0: entered promiscuous mode [ 798.403858][T10704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.404152][T10724] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.404318][T10724] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.404531][T10724] bridge_slave_1: entered allmulticast mode [ 798.407848][T10724] bridge_slave_1: entered promiscuous mode [ 798.472337][T10704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.110191][T10724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.133498][T10704] team0: Port device team_slave_0 added [ 799.162685][T10724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.194014][T10704] team0: Port device team_slave_1 added [ 799.838663][ T37] audit: type=1326 audit(1768385768.015:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10900 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 799.839752][ T37] audit: type=1326 audit(1768385768.025:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10900 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 799.840325][ T37] audit: type=1326 audit(1768385768.025:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10900 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 799.840707][ T37] audit: type=1326 audit(1768385768.025:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10900 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 799.843062][ T37] audit: type=1326 audit(1768385768.025:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10900 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 799.843569][ T37] audit: type=1326 audit(1768385768.025:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10900 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 799.844102][ T37] audit: type=1326 audit(1768385768.025:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10900 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 799.844497][ T37] audit: type=1326 audit(1768385768.025:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10900 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 799.845346][ T37] audit: type=1326 audit(1768385768.025:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10900 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 799.845795][ T37] audit: type=1326 audit(1768385768.025:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10900 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 800.132884][T10724] team0: Port device team_slave_0 added [ 800.145893][T10704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.145913][T10704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.145946][T10704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.218274][T10724] team0: Port device team_slave_1 added [ 800.256097][T10704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.256119][T10704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.256151][T10704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.296574][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'. [ 800.719628][T10724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.719648][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.719675][T10724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.795523][T10724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.795543][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.795583][T10724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.266101][T10704] hsr_slave_0: entered promiscuous mode [ 801.267217][T10704] hsr_slave_1: entered promiscuous mode [ 801.267902][T10704] debugfs: 'hsr0' already exists in 'hsr' [ 801.267921][T10704] Cannot create hsr debugfs directory [ 801.652589][T10956] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 801.952685][T10724] hsr_slave_0: entered promiscuous mode [ 801.954335][T10724] hsr_slave_1: entered promiscuous mode [ 801.955432][T10724] debugfs: 'hsr0' already exists in 'hsr' [ 801.955461][T10724] Cannot create hsr debugfs directory [ 804.461258][T10816] chnl_net:caif_netlink_parms(): no params data found [ 805.642760][T10816] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.650023][T10816] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.650294][T10816] bridge_slave_0: entered allmulticast mode [ 805.658320][T10816] bridge_slave_0: entered promiscuous mode [ 805.695046][T10816] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.695197][T10816] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.695443][T10816] bridge_slave_1: entered allmulticast mode [ 805.709580][T10816] bridge_slave_1: entered promiscuous mode [ 806.465203][T10816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.598283][T10816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.382765][T10816] team0: Port device team_slave_0 added [ 808.293899][T10816] team0: Port device team_slave_1 added [ 809.632820][T10816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.632842][T10816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.632873][T10816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.064354][T10816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.064375][T10816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.064407][T10816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.354810][T10816] hsr_slave_0: entered promiscuous mode [ 810.356691][T10816] hsr_slave_1: entered promiscuous mode [ 810.357957][T10816] debugfs: 'hsr0' already exists in 'hsr' [ 810.357984][T10816] Cannot create hsr debugfs directory [ 811.207613][T11032] netlink: 'syz.0.1137': attribute type 6 has an invalid length. [ 811.569819][ T43] bridge_slave_1: left allmulticast mode [ 811.569856][ T43] bridge_slave_1: left promiscuous mode [ 811.570161][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.651505][ T43] bridge_slave_0: left allmulticast mode [ 811.651548][ T43] bridge_slave_0: left promiscuous mode [ 811.651844][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.731879][ T43] bridge_slave_1: left allmulticast mode [ 811.731901][ T43] bridge_slave_1: left promiscuous mode [ 811.732067][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.800338][ T43] bridge_slave_0: left allmulticast mode [ 811.800369][ T43] bridge_slave_0: left promiscuous mode [ 811.800542][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.789786][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.869791][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.935211][ T43] bond0 (unregistering): Released all slaves [ 814.098006][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.098113][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.823066][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.879800][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.908057][ T43] bond0 (unregistering): Released all slaves [ 816.679530][ T43] hsr_slave_0: left promiscuous mode [ 816.719436][ T43] hsr_slave_1: left promiscuous mode [ 816.720840][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.747577][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.899296][ T43] hsr_slave_0: left promiscuous mode [ 816.919321][ T43] hsr_slave_1: left promiscuous mode [ 816.920734][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.961090][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.829941][ T43] team0 (unregistering): Port device team_slave_1 removed [ 817.990624][ T43] team0 (unregistering): Port device team_slave_0 removed [ 821.159718][ T43] team0 (unregistering): Port device team_slave_1 removed [ 821.429744][ T43] team0 (unregistering): Port device team_slave_0 removed [ 824.378054][T11053] netlink: 'syz.0.1142': attribute type 30 has an invalid length. [ 824.565957][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 824.565977][ T37] audit: type=1326 audit(1768385792.745:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 824.614884][ T37] audit: type=1326 audit(1768385792.745:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 824.614943][ T37] audit: type=1326 audit(1768385792.745:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 824.614986][ T37] audit: type=1326 audit(1768385792.745:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 824.615028][ T37] audit: type=1326 audit(1768385792.755:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 824.615071][ T37] audit: type=1326 audit(1768385792.755:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 824.615114][ T37] audit: type=1326 audit(1768385792.755:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 824.615155][ T37] audit: type=1326 audit(1768385792.755:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 824.615197][ T37] audit: type=1326 audit(1768385792.755:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 824.615238][ T37] audit: type=1326 audit(1768385792.785:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b229f749 code=0x7ffc0000 [ 825.442647][T11061] syz.0.1145 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 825.801593][T10704] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 825.897334][T10704] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 825.947320][T10704] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 826.035515][T10704] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 826.808724][T11094] Falling back ldisc for ttyS3. [ 827.248016][T11102] pim6reg: entered allmulticast mode [ 827.256375][T11103] pim6reg: left allmulticast mode [ 827.912945][T10724] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 827.997720][T10724] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 828.088044][T10724] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 828.225973][T11126] Bluetooth: MGMT ver 1.23 [ 828.226010][T11126] Bluetooth: hci0: unsupported parameter 255 [ 828.226020][T11126] Bluetooth: hci0: unsupported parameter 255 [ 828.232973][T10724] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 828.247659][T11128] netlink: 'syz.4.1172': attribute type 1 has an invalid length. [ 828.362969][T11128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 828.418127][T11130] ip6erspan0: entered promiscuous mode [ 828.433539][T11130] bond1: (slave ip6erspan0): making interface the new active one [ 828.437845][T11130] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 828.456718][T10704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.669369][T10816] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 828.707424][T10816] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 828.757674][T10704] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.761219][T10816] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 828.816775][T10816] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 828.826353][T11149] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1178'. [ 828.826372][T11149] ksmbd: Unknown IPC event: 3, ignore. [ 828.866383][ T4070] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.866592][ T4070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.935145][ T4070] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.935428][ T4070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.221935][T11165] pim6reg: entered allmulticast mode [ 829.247686][T11165] pim6reg: left allmulticast mode [ 829.588268][T10724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.714282][T10724] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.788346][ T809] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.788596][ T809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.860929][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.861091][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.875047][T10816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.047729][T10816] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.107961][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.124953][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.173812][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.173920][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.178326][T10704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.736321][T11199] pim6reg: entered allmulticast mode [ 830.748199][T11200] pim6reg: left allmulticast mode [ 830.798234][T11204] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1196'. [ 831.494362][T10724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.761576][T10704] veth0_vlan: entered promiscuous mode [ 831.818183][T10704] veth1_vlan: entered promiscuous mode [ 831.932050][T10816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.062731][T10704] veth0_macvtap: entered promiscuous mode [ 832.092327][T10704] veth1_macvtap: entered promiscuous mode [ 832.118561][T11242] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1204'. [ 832.197607][T10704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.292622][T10704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.382941][ T809] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.384424][ T809] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.384472][ T809] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.384511][ T809] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.021620][T10724] veth0_vlan: entered promiscuous mode [ 833.108311][T10724] veth1_vlan: entered promiscuous mode [ 833.119970][T10816] veth0_vlan: entered promiscuous mode [ 833.177148][T10816] veth1_vlan: entered promiscuous mode [ 833.315316][T10724] veth0_macvtap: entered promiscuous mode [ 833.337268][T10724] veth1_macvtap: entered promiscuous mode [ 833.415052][T10816] veth0_macvtap: entered promiscuous mode [ 833.453600][T10816] veth1_macvtap: entered promiscuous mode [ 833.546085][T10816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.668089][T10816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.687911][ T6311] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.697252][ T6311] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.697316][ T6311] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.697352][ T6311] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.975949][ T8989] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 833.992445][ T8989] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 833.996746][ T8989] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 834.002597][ T8989] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 834.005254][ T8989] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 834.798727][ T8989] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 834.822037][ T8989] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 834.836188][ T8989] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 834.840649][ T8989] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 834.841494][ T8989] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 834.993665][T11300] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1214'. [ 835.624045][ T3496] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.848611][ T809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.848637][ T809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.065975][ T3496] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.170761][ T61] Bluetooth: hci1: command tx timeout [ 836.434228][T11325] ------------[ cut here ]------------ [ 836.434240][T11325] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 836.434270][T11325] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x201/0xc30, CPU#0: wÞ£ÿ/11325 [ 836.434301][T11325] Modules linked in: [ 836.434315][T11325] CPU: 0 UID: 0 PID: 11325 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 836.434331][T11325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 836.434339][T11325] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 836.434365][T11325] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 836.434377][T11325] RSP: 0018:ffffc900051c6ed0 EFLAGS: 00010246 [ 836.434389][T11325] RAX: dffffc0000000000 RBX: 1ffff1100710384a RCX: 00000000ffffdfcd [ 836.434399][T11325] RDX: ffffffff8af1d3e0 RSI: ffffffff8af25be0 RDI: ffffffff8edf0610 [ 836.434408][T11325] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 836.434417][T11325] R10: ffff88803881c358 R11: 1ffff11007103850 R12: ffff88803881c250 [ 836.434427][T11325] R13: 00000000ffffdfcd R14: 1ffff11007103849 R15: 00000000ffffdfcc [ 836.434436][T11325] FS: 00007ffb0501e6c0(0000) GS:ffff888126cee000(0000) knlGS:0000000000000000 [ 836.434449][T11325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 836.434458][T11325] CR2: 00007ffb0501df98 CR3: 00000000665b0000 CR4: 00000000003526f0 [ 836.434471][T11325] Call Trace: [ 836.434477][T11325] [ 836.434498][T11325] reg_set_min_max+0x264/0x340 [ 836.434522][T11325] check_cond_jmp_op+0x19c6/0x2e20 [ 836.434548][T11325] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 836.434564][T11325] ? lockdep_hardirqs_on+0x7b/0x110 [ 836.434579][T11325] ? do_check+0x5c3d/0xeba0 [ 836.434594][T11325] ? do_check+0x5c3d/0xeba0 [ 836.434607][T11325] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 836.434630][T11325] do_check+0x58f5/0xeba0 [ 836.434646][T11325] ? __pfx_stack_trace_save+0x10/0x10 [ 836.434693][T11325] ? __pfx_do_check+0x10/0x10 [ 836.434707][T11325] ? init_func_state+0x1ab2/0x28d0 [ 836.434727][T11325] do_check_common+0x19cc/0x25b0 [ 836.434750][T11325] bpf_check+0x5e87/0x1c300 [ 836.434775][T11325] ? __lock_acquire+0x6b6/0x2cf0 [ 836.434802][T11325] ? __lock_acquire+0x6b6/0x2cf0 [ 836.434820][T11325] ? do_raw_spin_lock+0x121/0x290 [ 836.434835][T11325] ? css_rstat_updated+0x239/0x520 [ 836.434858][T11325] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 836.434883][T11325] ? __pfx_bpf_check+0x10/0x10 [ 836.434897][T11325] ? ktime_get_with_offset+0x93/0x2a0 [ 836.434918][T11325] ? ktime_get_with_offset+0x93/0x2a0 [ 836.434935][T11325] ? __asan_memset+0x22/0x50 [ 836.434951][T11325] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 836.434963][T11325] ? security_bpf_prog_load+0x125/0x3f0 [ 836.434977][T11325] bpf_prog_load+0x13ba/0x1a10 [ 836.434998][T11325] ? __pfx_bpf_prog_load+0x10/0x10 [ 836.435013][T11325] ? __might_fault+0xb0/0x130 [ 836.435042][T11325] ? bpf_lsm_bpf+0x9/0x20 [ 836.435052][T11325] ? security_bpf+0x7e/0x300 [ 836.435072][T11325] __sys_bpf+0x507/0x860 [ 836.435088][T11325] ? __pfx___sys_bpf+0x10/0x10 [ 836.435110][T11325] ? __se_sys_prctl+0xe07/0x1830 [ 836.435129][T11325] ? __pfx___se_sys_futex+0x10/0x10 [ 836.435147][T11325] ? __pfx___se_sys_prctl+0x10/0x10 [ 836.435170][T11325] __x64_sys_bpf+0x7c/0x90 [ 836.435183][T11325] do_syscall_64+0xec/0xf80 [ 836.435197][T11325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.435209][T11325] ? trace_irq_disable+0x37/0x100 [ 836.435223][T11325] ? clear_bhb_loop+0x60/0xb0 [ 836.435238][T11325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.435250][T11325] RIP: 0033:0x7ffb06dbf749 [ 836.435262][T11325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.435273][T11325] RSP: 002b:00007ffb0501e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 836.435286][T11325] RAX: ffffffffffffffda RBX: 00007ffb07015fa0 RCX: 00007ffb06dbf749 [ 836.435295][T11325] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 836.435304][T11325] RBP: 00007ffb06e43f91 R08: 0000000000000000 R09: 0000000000000000 [ 836.435312][T11325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.435320][T11325] R13: 00007ffb07016038 R14: 00007ffb07015fa0 R15: 00007ffe95f27a48 [ 836.435338][T11325] [ 836.435345][T11325] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 836.435362][T11325] CPU: 0 UID: 0 PID: 11325 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 836.435377][T11325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 836.435385][T11325] Call Trace: [ 836.435391][T11325] [ 836.435396][T11325] vpanic+0x1e0/0x670 [ 836.435416][T11325] panic+0xb9/0xc0 [ 836.435433][T11325] ? __pfx_panic+0x10/0x10 [ 836.435459][T11325] __warn+0x317/0x4b0 [ 836.435475][T11325] ? reg_bounds_sanity_check+0x201/0xc30 [ 836.435495][T11325] ? reg_bounds_sanity_check+0x201/0xc30 [ 836.435513][T11325] __report_bug+0x288/0x500 [ 836.435526][T11325] ? __pfx_stack_trace_save+0x10/0x10 [ 836.435541][T11325] ? reg_bounds_sanity_check+0x201/0xc30 [ 836.435562][T11325] ? __pfx___report_bug+0x10/0x10 [ 836.435577][T11325] ? check_cond_jmp_op+0x1840/0x2e20 [ 836.435593][T11325] ? do_check+0x58f5/0xeba0 [ 836.435607][T11325] ? do_check_common+0x19cc/0x25b0 [ 836.435621][T11325] ? bpf_check+0x5e87/0x1c300 [ 836.435631][T11325] ? bpf_prog_load+0x13ba/0x1a10 [ 836.435644][T11325] ? __sys_bpf+0x507/0x860 [ 836.435656][T11325] ? __x64_sys_bpf+0x7c/0x90 [ 836.435667][T11325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.435682][T11325] report_bug_entry+0x19a/0x290 [ 836.435695][T11325] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 836.435712][T11325] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 836.435729][T11325] handle_bug+0xca/0x200 [ 836.435745][T11325] exc_invalid_op+0x1a/0x50 [ 836.435760][T11325] asm_exc_invalid_op+0x1a/0x20 [ 836.435771][T11325] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 836.435790][T11325] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 836.435800][T11325] RSP: 0018:ffffc900051c6ed0 EFLAGS: 00010246 [ 836.435811][T11325] RAX: dffffc0000000000 RBX: 1ffff1100710384a RCX: 00000000ffffdfcd [ 836.435820][T11325] RDX: ffffffff8af1d3e0 RSI: ffffffff8af25be0 RDI: ffffffff8edf0610 [ 836.435829][T11325] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 836.435838][T11325] R10: ffff88803881c358 R11: 1ffff11007103850 R12: ffff88803881c250 [ 836.435847][T11325] R13: 00000000ffffdfcd R14: 1ffff11007103849 R15: 00000000ffffdfcc [ 836.435878][T11325] reg_set_min_max+0x264/0x340 [ 836.435900][T11325] check_cond_jmp_op+0x19c6/0x2e20 [ 836.435925][T11325] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 836.435941][T11325] ? lockdep_hardirqs_on+0x7b/0x110 [ 836.435955][T11325] ? do_check+0x5c3d/0xeba0 [ 836.435970][T11325] ? do_check+0x5c3d/0xeba0 [ 836.435983][T11325] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 836.436005][T11325] do_check+0x58f5/0xeba0 [ 836.436019][T11325] ? __pfx_stack_trace_save+0x10/0x10 [ 836.436066][T11325] ? __pfx_do_check+0x10/0x10 [ 836.436080][T11325] ? init_func_state+0x1ab2/0x28d0 [ 836.436100][T11325] do_check_common+0x19cc/0x25b0 [ 836.436123][T11325] bpf_check+0x5e87/0x1c300 [ 836.436148][T11325] ? __lock_acquire+0x6b6/0x2cf0 [ 836.436173][T11325] ? __lock_acquire+0x6b6/0x2cf0 [ 836.436191][T11325] ? do_raw_spin_lock+0x121/0x290 [ 836.436206][T11325] ? css_rstat_updated+0x239/0x520 [ 836.436228][T11325] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 836.436252][T11325] ? __pfx_bpf_check+0x10/0x10 [ 836.436266][T11325] ? ktime_get_with_offset+0x93/0x2a0 [ 836.436306][T11325] ? ktime_get_with_offset+0x93/0x2a0 [ 836.436323][T11325] ? __asan_memset+0x22/0x50 [ 836.436339][T11325] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 836.436350][T11325] ? security_bpf_prog_load+0x125/0x3f0 [ 836.436370][T11325] bpf_prog_load+0x13ba/0x1a10 [ 836.436392][T11325] ? __pfx_bpf_prog_load+0x10/0x10 [ 836.436406][T11325] ? __might_fault+0xb0/0x130 [ 836.436434][T11325] ? bpf_lsm_bpf+0x9/0x20 [ 836.436445][T11325] ? security_bpf+0x7e/0x300 [ 836.436464][T11325] __sys_bpf+0x507/0x860 [ 836.436480][T11325] ? __pfx___sys_bpf+0x10/0x10 [ 836.436501][T11325] ? __se_sys_prctl+0xe07/0x1830 [ 836.436520][T11325] ? __pfx___se_sys_futex+0x10/0x10 [ 836.436538][T11325] ? __pfx___se_sys_prctl+0x10/0x10 [ 836.436561][T11325] __x64_sys_bpf+0x7c/0x90 [ 836.436574][T11325] do_syscall_64+0xec/0xf80 [ 836.436586][T11325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.436598][T11325] ? trace_irq_disable+0x37/0x100 [ 836.436611][T11325] ? clear_bhb_loop+0x60/0xb0 [ 836.436626][T11325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.436638][T11325] RIP: 0033:0x7ffb06dbf749 [ 836.436649][T11325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.436659][T11325] RSP: 002b:00007ffb0501e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 836.436671][T11325] RAX: ffffffffffffffda RBX: 00007ffb07015fa0 RCX: 00007ffb06dbf749 [ 836.436680][T11325] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 836.436688][T11325] RBP: 00007ffb06e43f91 R08: 0000000000000000 R09: 0000000000000000 [ 836.436696][T11325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.436704][T11325] R13: 00007ffb07016038 R14: 00007ffb07015fa0 R15: 00007ffe95f27a48 [ 836.436722][T11325] [ 836.437154][T11325] Kernel Offset: disabled