last executing test programs: 5m1.732776799s ago: executing program 2 (id=733): timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000440), 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsync(0xffffffffffffffff) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create(0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a1", 0xa6}, {&(0x7f0000000e00)="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", 0x179}, {&(0x7f0000001440)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6145520dbf60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef797196270c000000000000002fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784fd024f453df2d7e9f7ba6440da1de8ac20000a8e1da8150f1a103000000006eee7086f09a92a65bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f00a3d0b32e9992768500000000", 0x9c}, {&(0x7f0000000a80)}, {&(0x7f00000006c0)="0b41dae71fdbfbd927fcefd552617a65c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853c708b2605ada", 0x3b}], 0x6}}], 0x2, 0x2404c044) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x8, 0x2}}}}}}, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000840)="924a4a", 0x3}], 0x1) r2 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x400, 0x4, 0x2}, 0x18) r3 = io_uring_setup(0x1d48, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(0xffffffffffffffff, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) mknodat$loop(r2, 0x0, 0x6000, 0x1) 4m59.289815961s ago: executing program 2 (id=738): syz_usb_connect$uac1(0x0, 0x82, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100100000008d118042d4000010203010902700003010920060904000000010100000a240116000a0002010209040100000102000009040101010102000009240201100f0507090724018c0f021009050109ff030b090b072501040107000904020000010200000904020100"], 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000002c0)={"4497acf4", 0xb, 0x6, 0x0, 0x4, 0x1000002, "550000000100", "5922b1fa", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "00000000000000deff00", "fa0700f62b42b0023be516d1", "000000eaff01001b00800001"]}) 4m57.44547192s ago: executing program 2 (id=748): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x5, 0x1, 0x40000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0xadcf3000) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x300}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x78}}, 0x0) 4m55.200366274s ago: executing program 2 (id=754): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) (fail_nth: 3) 4m55.106153159s ago: executing program 2 (id=758): syz_usb_connect$uac1(0x0, 0x82, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100100000008d118042d4000010203010902700003010920060904000000010100000a240116000a0002010209040100000102000009040101010102000009240201100f0507090724018c0f021009050109ff030b090b072501040107000904020000010200000904020100"], 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000002c0)={"4497acf4", 0xb, 0x6, 0x0, 0x4, 0x1000002, "550000000100", "5922b1fa", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "00000000000000deff00", "fa0700f62b42b0023be516d1", "000000eaff01001b00800001"]}) 4m53.311562732s ago: executing program 2 (id=764): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4d, 0x6, 0xf, 0x7, 0x80, 0x0, 0xfa, 0x7, 0x46, 0x1e, [0x8, 0x3, 0xb3b, 0x6, 0x0, 0x5, 0x6, 0x9dc]}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="d6e988f134d14738165c8be01c7b68d2b753d0ddabbe240207c75965a8659d18a434dbdf67e645b3dede89f3769a", 0x2e}], 0x1}, 0x24000080) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a40000000060a0b0400000000000000000200000014000480100001800a000100726564697200000009000173797a30000000000900ce020073797a32000000001400000011000100"/104], 0x68}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000009c0)=ANY=[@ANYRES8=r5, @ANYRES16=r2, @ANYBLOB="a931d3a1f6c802fbc2062733204d482981e1db85cc942bc071eb6b172b5dd76cb507b5d8e81ac618e0b6d19c6a72fe84da36ebc264795142f8d40f7110753ff0943bd689078a927a3f5392ffe56a08a8055de67726c5a019a1cfb4d6e486e951697e8998e068acea7b9204b3e54524493511ac1a7bd3793a92a476b399840c26c53429fa46b127a1993a7c4b8fc2de6bd5349a5524f710bfea43f451d4e6fe547f9bb211d479262d235ce73f2e2db96fb492522444878495450226460abda14435a89b89bc43104b1a03269c688fde3efa63b75b7b16d2239dad9d602e53cfccedb9fb9980", @ANYBLOB="7a4a93c71bb223449cf6d2ae58b590613a11bcefa22c03d3c5cf468dba340f1bbe6e1236f208cd484b604df8b8c83532f3a7a6f0a81df4798d973c2180046d52f8bb10723063da1c87884b64dfc139c9066d707d7d91a25febfcca903901a8c4f5af3a23eaaa2eb801bd366947da08e3c9c9", @ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="2fb659b9002e1a62c9f17072f1db8d6ce93733354171cfbc484512236800919e", @ANYRES32=r5], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x70}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000001000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r8 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESDEC=r10]) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f00000001c0)={0x20000001}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = socket$inet_udp(0x2, 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000100)={0x0, 0x80000001}) sendmsg$nl_route(r13, &(0x7f0000000680)={0x0, 0xf, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES8=r4, @ANYRES64, @ANYRESDEC=r7, @ANYRES64=r12], 0x38}, 0x1, 0x0, 0x0, 0x4048005}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) 4m36.741461352s ago: executing program 32 (id=764): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4d, 0x6, 0xf, 0x7, 0x80, 0x0, 0xfa, 0x7, 0x46, 0x1e, [0x8, 0x3, 0xb3b, 0x6, 0x0, 0x5, 0x6, 0x9dc]}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="d6e988f134d14738165c8be01c7b68d2b753d0ddabbe240207c75965a8659d18a434dbdf67e645b3dede89f3769a", 0x2e}], 0x1}, 0x24000080) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a40000000060a0b0400000000000000000200000014000480100001800a000100726564697200000009000173797a30000000000900ce020073797a32000000001400000011000100"/104], 0x68}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000009c0)=ANY=[@ANYRES8=r5, @ANYRES16=r2, @ANYBLOB="a931d3a1f6c802fbc2062733204d482981e1db85cc942bc071eb6b172b5dd76cb507b5d8e81ac618e0b6d19c6a72fe84da36ebc264795142f8d40f7110753ff0943bd689078a927a3f5392ffe56a08a8055de67726c5a019a1cfb4d6e486e951697e8998e068acea7b9204b3e54524493511ac1a7bd3793a92a476b399840c26c53429fa46b127a1993a7c4b8fc2de6bd5349a5524f710bfea43f451d4e6fe547f9bb211d479262d235ce73f2e2db96fb492522444878495450226460abda14435a89b89bc43104b1a03269c688fde3efa63b75b7b16d2239dad9d602e53cfccedb9fb9980", @ANYBLOB="7a4a93c71bb223449cf6d2ae58b590613a11bcefa22c03d3c5cf468dba340f1bbe6e1236f208cd484b604df8b8c83532f3a7a6f0a81df4798d973c2180046d52f8bb10723063da1c87884b64dfc139c9066d707d7d91a25febfcca903901a8c4f5af3a23eaaa2eb801bd366947da08e3c9c9", @ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="2fb659b9002e1a62c9f17072f1db8d6ce93733354171cfbc484512236800919e", @ANYRES32=r5], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x70}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000001000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r8 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESDEC=r10]) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f00000001c0)={0x20000001}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = socket$inet_udp(0x2, 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000100)={0x0, 0x80000001}) sendmsg$nl_route(r13, &(0x7f0000000680)={0x0, 0xf, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES8=r4, @ANYRES64, @ANYRESDEC=r7, @ANYRES64=r12], 0x38}, 0x1, 0x0, 0x0, 0x4048005}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) 16.872753842s ago: executing program 4 (id=2322): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x70000000, 0x71, 0x10, 0x19}, [], {0x95, 0x0, 0x300}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, r1, 0xfe12482fe0801d67, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x17bfffc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040811}, 0x4000) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x202, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x50) 16.491767954s ago: executing program 4 (id=2325): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x6c8842, 0x0) fcntl$dupfd(r0, 0x406, r0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x40000) getsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r4 = dup(r3) syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x42200) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtaction={0x1644, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x4}, {0x1628, 0x1, [@m_connmark={0x148, 0x9, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x6, 0x4, 0x9}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc2, 0x6, 0x10000000, 0x3, 0xffff91c4}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x100, 0xdef7, 0x20000000, 0xe, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x10000000, 0x8, 0x5}, 0xa338}}]}, {0xa5, 0x6, "3732b9967ad3e0cafcac0efd8859d15f1a644023fa6c8ea1800c88cf5d83f26aa9d150af12856f483a88806b6c19bcf7f2d2141c7bcd807e98e92868dccd8080844f52c33effab793c13cfc211c300b0898403b6de7649883a8759fbf22b89a84e3df15c3d14859f1a1f5004f9b8454dc09b83f93c66e325ebd973f1982648906a6080b2d361098b25bb35bd159eab98cf0f7eb48489288d55f1342ef67b2bcd38"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0x150, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xfff1}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfff, 0x5, 0x7, 0x1b1, 0x7}}]}, {0xfb, 0x6, "002a1121a6d9464e37de47eded7f7bc9a475f4f8a477922f384306b2e0a0df7d9ceb1c6f000578960f67d76d309b5a4767b90724f3519da769a936d37522e7e11c2e6f08e8d2dc598c5f40bbc379a674efda1ad2a1ff4d5347dd83b160a6f5dbf1092eb51db41a526dd77faa5d3dc4992b1fa97b672ba673ce628c5d04a87eedc61990dbfa73548db14a9ab71e429417ce95cf92bcc01587aa435b3a720a0f8056042fee45b8fa6db0d5e037978ad88ca482d09b167cc59376cbe7821d9fca98d5251a36517ac88c4a1cd058841a4431d74ea25acba1c4913ef0de1de8d99f9db5aa0fa126168207943fdfe0fbd752470713855269f972"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x353d1f0ae1ad8ed5}}}}, @m_csum={0xc4, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x96, 0x6, "308df92fa1ad75d609e8bfd6eecbfaee69fa3d90b37eb34bdf880df15617a041ec3aef1bb64a6e062fb962b5fdf86bb4f6cf64b35dbf5a1f039ca0e17d7b9ade2acfabd639472c83b05608616051693d9d1f866b29ce717d715a4067ab9e4265909483404ee311ac576cbdec7192cdeeca356551b1fb233b21f9738e181d091915bc07b333eba97764664c94dca4490e96bd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x1b8, 0x14, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x24410a47, 0x10000000, 0x5, 0x800}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x0, 0x0, 0x7}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6f747d3, 0x3, 0x7, 0x4, 0x4}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7d4f, 0xffffffe2, 0x7, 0x2, 0x6}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x20000005, 0x1, 0xa3ef}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x0, 0x1, 0x2d}, 0x3ff8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x0, 0xc0, 0x9}, 0xe42}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x20000000, 0x1, 0x7f}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0xf, 0x2, 0x6, 0x75c6}, 0x8a4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x0, 0xffffffffffffffff, 0x4, 0xa}, 0x7}}]}, {0x6f, 0x6, "51615ee130dbc8600c74806e7493579dab570395261c21dc1ef01d0005023ea1209f062416a9eba09432241f68b50851a06b89a99c52c332b42204e1bf77bfbb69f3c5e26cf6e2de95e5aa18110f107ecef254b377e52888ecf6ee86e3c72e716f2fd71f84ec8cc2398277"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0xb0, 0x17, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xa, 0x1, 0x4, 0x0, 0x8}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x4, 0xffffffffffffffff, 0xfc, 0xffff}}]}, {0x41, 0x6, "86f381a12c28504cda10e76a6e05051e9d110b5a651fef62fa8eaaf221b45607cf27aede47b79452bd7d73b056bcbfb37fa958ef12866655b2c008aab0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x1060, 0x1, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xe}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x4}]}, 0x1644}, 0x1, 0x0, 0x0, 0x64044001}, 0x80) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf250100df0ea5d1a8f2", @ANYRES32=r8, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040006000000"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002180)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c783, 0x70bd2c, 0x6, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0x0, 0x2}}}}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r12, 0x104, 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 15.927706559s ago: executing program 4 (id=2330): syz_emit_ethernet(0x3e, 0x0, 0x0) r0 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x7, 0x1f05}, {}, {}, @queue={0x40, {0x5, 0x3}}}], 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="090000000000000000000000000000040000000076a12c5e454a11fced1dded7ab6fc48ec01ec665dd3091ee7a10e3e4c6786573d11456e8186cdc8d7c473695195a0904d2bd06d966a44658429acd2a445a7b74a251f7bb5979797063dd4a78bf342d8640e8d4b0e747177fdc964af7d935d76dd448a4fa3ee9fa3e753f0b1dfd75957f40c68ca4aef1720d52bc98ec9158d7b405c96ee1fc662a606d61855b68cb838fb20870edb00d021d393e471327c8bbcd38", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, &(0x7f00000002c0)="0de8d163c80c16ade5b40b0f5cabe1bb1581ed3df5fb8575949298f025f40c9ddb09ee80c2b1776f694a50ecf27849ad95941a08238ea5fe12c174f7907b7adc50b26efa69562786a06be9e58b25832720dfc3a572b8b93e6f17abf25d3ce3cd28c0a96601695e9e3e6d966a70ff97da06ae6d7bb66839e64d4b60575e723ae76885555410fa331a432a59ea49", &(0x7f0000000580)=""/80}, 0x20) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan1\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/12, 0xc}, {&(0x7f0000000600)=""/193, 0xc1}], 0x2}, 0x80) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000040)={0x20002015}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000a80)={0x1, @pix={0xc2, 0x80000001, 0x38415262, 0x7, 0xff, 0x200008, 0x6, 0x0, 0x0, 0x8, 0x1, 0x1}}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 15.196240194s ago: executing program 4 (id=2331): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "6c06002004dc17a8"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x6) memfd_create(&(0x7f0000000d80)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_mempolicy(0x0, 0x0, 0x20000200, &(0x7f0000ffd000/0x2000)=nil, 0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e1f, 0x9, @mcast2, 0x9}, 0x1c) io_setup(0x101, &(0x7f0000000340)) 14.460383852s ago: executing program 3 (id=2336): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "71f700000000009b41000000000000000600000000000500", [0x9, 0xa]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f00000003c0)=@framed={{}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1012, &(0x7f0000001980)=""/4114, 0x40f00, 0x68}, 0x94) 14.145977902s ago: executing program 3 (id=2338): unshare(0x2a020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000500)=0x1, 0x4) (async, rerun: 64) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe0}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x26, &(0x7f0000000140)=""/38, 0x40f00, 0x55, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000200)=[{0x2, 0x2, 0xf, 0x7}, {0x2, 0x2, 0x7, 0xc}, {0x4, 0x1, 0x4, 0x7}, {0x0, 0x4, 0x7, 0x8}, {0x4, 0x1, 0xb, 0x9}, {0x1, 0x4, 0xc, 0x7}, {0x1, 0x4, 0xe, 0xb}, {0x3, 0x1, 0x5, 0x3}, {0x3, 0x1, 0x3, 0x5}, {0x1, 0x5, 0xd, 0x1}], 0x10, 0x70c}, 0x94) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000000), &(0x7f0000000380)=r2}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000480)={0x200, 0x6, 0xffff, 0x4}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000400)={0x80000, 0x0, {[0x100000000, 0x2, 0x1ff, 0xfff, 0x1, 0xfff, 0x8eae, 0x70d]}}) listen(r3, 0x4) 13.895437228s ago: executing program 1 (id=2340): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000600}, 0x800, 0x0, 0x1, 0x1}, 0x20) 13.600049067s ago: executing program 1 (id=2342): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (fail_nth: 6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20010840) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) 11.428046817s ago: executing program 3 (id=2346): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000100)="40c8598b54fbf55934c90e7096b00bb30091d1ad140315ab48781d7678163195b50c34aca888ec080000000000000095988ebbd664a3ddf0ad152a443b2ff26ea3faa302b6b752607dbdb47f8117c149d788231421cb541313febf3e94824fe870", 0x61}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}, {&(0x7f00000004c0)="017dab6c2f1f17e000fa4cc94b83fcb4ded7d36827d5a05dff8b8159b9d321f23092156573e3140e371ebe8ed8f60b2b8cd0bb4744d430f2013bfa13fdb8b15dcc8f87c1fbed31da4cd0e8d47689f733511566b90ce593b5cf5d0163b58b943fc19efc369c55cbe0b4f9e97aebf1fed6b46d4c81fc52d3baa7acc46511d45a4b5f7df8d9ab62c722d4a1a3608fa40301b91c807774d992427a6ee11606b994889b83c51a06031d26b741eca0c0cbf6b51b457601484b", 0xb6}], 0x6}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}], 0x3, 0x4000040) 11.187403952s ago: executing program 3 (id=2348): r0 = syz_open_dev$dvb_frontend(&(0x7f00000005c0), 0x0, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x4f5d, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x33, 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000380)={0x33, &(0x7f00000003c0)=[{0x42, '\x00', @st={0x4, [{0x2, @svalue=0x2}, {0x0, @uvalue=0xf1}, {0x1, @uvalue=0xdc4}, {0x3, @svalue=0x5}]}}]}) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r7, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/user\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r8, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}]}, 0x24}}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) r11 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) pwrite64(r11, &(0x7f0000000780)="b52e2e2b6c122f62640fc6", 0xb, 0x6) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) 10.204199903s ago: executing program 1 (id=2349): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6046}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000340)=r2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x4e0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) 9.741470579s ago: executing program 3 (id=2350): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x200000000000011, 0x2, 0x3c644) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000d40)=[@nested_vmresume={0x130, 0x18, 0x3}], 0x18}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @sk_skb=0x4}, 0x94) syz_emit_ethernet(0x5e, &(0x7f0000000400)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x4c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "263292fb99d5157ac6a6ec526f6518c7"}, @md5sig={0x13, 0x12, "a7e8ec95aa6295ea40a52b32e98fdeef"}]}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6c000000060a0104000000000000000002000000400004803c0001800c0001007061796c6f6164002c000280080004400000000008000540000000000800034000000057080002400000030208000740000000080900010073797a30000000000900020073797a32"], 0x94}}, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 8.747747633s ago: executing program 1 (id=2351): r0 = socket(0x840000000002, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peeksig(0x4209, r1, &(0x7f00000001c0)={0x2, 0x27d6379a04b9b226, 0x8}, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}, {}, {}]) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000f9c4d587e", @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf254400000008000300", @ANYRES32=r6, @ANYBLOB="0a00180003030303030300000c0070000500060000000000"], 0x34}}, 0x44004) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) rt_tgsigqueueinfo(r1, r1, 0x1f, &(0x7f00000002c0)={0xd, 0x10001, 0xfffffffd}) mkdir(0x0, 0x5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) syz_emit_vhci(0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x40440c4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'vlan0\x00'}, 0x18) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r8, 0xc0046209, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000f80)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000700)="97452a307eb403000b000000e0004a9b8f52ac8e5c7f00003326491f", 0x1c}], 0x18, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x400c804) 8.102159475s ago: executing program 1 (id=2352): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) keyctl$instantiate(0xc, r4, &(0x7f00000000c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', '/dev/ptmx\x00'}, 0x23, 0xfffffffffffffffb) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x10000000) syz_open_dev$usbmon(0x0, 0x8b8, 0x30000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) 7.089826341s ago: executing program 4 (id=2355): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, 0xffffffffffffffff, 0x0) unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = fcntl$getown(r1, 0x9) sched_setscheduler(r4, 0x6, &(0x7f0000000200)=0x200) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d3000009dff8e0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20018015}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r7 = socket(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x65, 0x64, 0x0, 0x0) r8 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r6, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r8], 0x28}}, 0x0) 5.756200593s ago: executing program 5 (id=2360): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x10) prlimit64(0x0, 0xc, &(0x7f00000000c0)={0x1, 0xffffffff}, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_HDRSIZE={0x0, 0x4, 0x1, 0x0, 0x29}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xfffffffffffffd61, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000100000000000", @ANYRES32, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94) r1 = socket(0xb, 0x1, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x6}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0x2, 0xfffffffffffffff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @mcast2, 0x1ff}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 4.539792356s ago: executing program 5 (id=2361): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6046}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000340)=r2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x4e0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) 3.04033415s ago: executing program 5 (id=2363): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x568, 0x0, 0x1c8, 0x2d0, 0x0, 0x3e0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@set={{0x40}, {{0x0, [0x7, 0x2, 0x3, 0x1, 0x5, 0x2], 0x5, 0x2}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x81, 0x8, @rand_addr=0x64010102, 0x4e20}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x32, 0x240, 0x1}}, @common=@icmp={{0x28}, {0x10, "1d19", 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@mcast1, 0x4e20}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010101, 0xffffffff, 0xffffff00, 'macvlan0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x4, 0x3, 0x6}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xa, 0x2, 0x1}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x4}}, @common=@ah={{0x30}, {[0x5, 0x3], 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x3e}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_aout(r1, &(0x7f0000000600)={{0x1c4, 0xb3, 0x4, 0x41, 0x20b, 0xf, 0x47, 0x100}}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], 0x0, 0x0, 0x2}}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) creat(&(0x7f0000000040)='./file0\x00', 0x9) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x568, 0x0, 0x1c8, 0x2d0, 0x0, 0x3e0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@set={{0x40}, {{0x0, [0x7, 0x2, 0x3, 0x1, 0x5, 0x2], 0x5, 0x2}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x81, 0x8, @rand_addr=0x64010102, 0x4e20}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x32, 0x240, 0x1}}, @common=@icmp={{0x28}, {0x10, "1d19", 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@mcast1, 0x4e20}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010101, 0xffffffff, 0xffffff00, 'macvlan0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x4, 0x3, 0x6}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xa, 0x2, 0x1}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x4}}, @common=@ah={{0x30}, {[0x5, 0x3], 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x3e}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$binfmt_aout(r1, &(0x7f0000000600)={{0x1c4, 0xb3, 0x4, 0x41, 0x20b, 0xf, 0x47, 0x100}}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], 0x0, 0x0, 0x2}}, 0x40) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) 2.867486394s ago: executing program 1 (id=2365): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) keyctl$instantiate(0xc, r4, &(0x7f00000000c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', '/dev/ptmx\x00'}, 0x23, 0xfffffffffffffffb) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x10000000) syz_open_dev$usbmon(0x0, 0x8b8, 0x30000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) 2.827315545s ago: executing program 3 (id=2366): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 2.628450311s ago: executing program 0 (id=2367): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, 0x0) 2.541129084s ago: executing program 5 (id=2368): r0 = socket(0x10, 0x80002, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000100)) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0xb, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xfffd7fff, 0x50323234, 0x0, 0xa, [{0x42, 0x5}, {0xc00, 0x5000000}, {0x21, 0x5de3}, {0x14, 0x4af}, {0x1009, 0x4000069a}, {0x7, 0x3}, {0x80081, 0x5}, {0x200, 0x2000017}], 0x7b, 0x2, 0x3, 0x2, 0x4}}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES16=r0, @ANYRES16=r1], 0x48}}, 0x20004810) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r12, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r13, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, 0x0) statx(0xffffffffffffff9c, &(0x7f0000003640)='./file0\x00', 0x1000, 0x1, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r6, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000200)="eef5285e43539353be6daeea1caf27e3abf88f28cc379aeea3cb43ea44b5e59bd4500d0dc527741fd99600c290ed80a0dc1ad2b8bdfdadd90de84f", 0x3b}, {&(0x7f0000000340)="27166a647c36a2dd7b12587ae024f96e5a1d11167e9bfe37c17c44633827b64d5de9acd6e1628c0775a5745a20c47231b9ddc0d62456c2f03d134abfdd6a74817bbcff0d3c6028d5a77b03524691f6f910aee0baadfcac7111e3c2c3367068348703ed185c2274c46632a20c2d6400f759b4a0729d3a926bcb2272d3fd27504c8f6f901c948eaeacb78ac3d7f5dcce387a86f6601fc7f7e6", 0x98}, {&(0x7f0000000600)="a3dbabb4600b22407dbbf3d15ddef366ccb28ad0a7b89c5b467c9097ef77beaba1137ce9eea2e49905fb8a2978ee4b969457fda3dcd0db51971e3fc31aed1061b22c3d415bc294fab55e48db94fe6bb905f23f035edc9a74bc6ccf08af8dc1841645a20d9d211130e8cd525dce76e86d00e6b0eb210791b9d4e093fa4086b52b9977e56e2132f7747bd2ad47ccb6a939d1eaee4010b19bba340b661769a483126656008677fa573e6483f8d55a4a63e55579a80e3fd20d3b6dcad12946da93ffffe5099f4b8f3274fb67d0026f459912114175121320f8710d25271b8fa2f15431d5f825730274d241a30bddd30aad69ceb5", 0xf2}, {&(0x7f0000000700)="5712dd70a571eb3f3f519608a31bf0287c684a086af98bf5166ad7f1170f16bd9f567b257d053f1682845f013aea17a9ddf0141266c28be1c1769fb1bb684c0b4676021ef348c0dbf01a4b28201a0bcbb70a60069064c3fa09daaca4db183e83521bed80baf8c81842c42af734ffc93402e93e126ceff4ffcaaa6c959714eca3407643c5aecc25a8ce9101e3880dc7725cf586e23323e68d934523da8494959505ddef03a39fe4e2ba5a757cbb2fa426ab86ecc841d08e8b89", 0xb9}], 0x4, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r10, r12, r11, r3, r12, r11, r4, r7, r9]}}], 0x58, 0xc091}}, {{&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b40)="bf24368f27ceef6dc0457eccaae6ef476a209eb1c4ebeafb142126bb4189e539e4a4334a588bc80887af37ebeb6f8475936495329a94fe63816c969d5665858cafe4e630bf06bc2acc38046d020067edc50cef5847380798e133c9fdbc945cf616cfef9cb6d579597d612abaec96", 0x6e}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r10, r6]}}, @rights={{0x18, 0x1, 0x1, [r9, r11]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r15}}}], 0x90, 0x2000045}}, {{&(0x7f0000000f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002280)=[{&(0x7f0000000f80)="09aa2ba13ce7c9bf062ff7613c628884758cfc86402bb23f443e7ecf31951aa0c3313793393e687511b50ca9bcc71b683f11bef250bf4f85ae02ad1a2238b57ca34aae69cb407dee11f4862bed67d33e249133e13233e61609ea250a1bd6ec047b8903a8333a8804de06f7d4ca6ef41e96", 0x71}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)="7d68fa1da03e9a8d60d6f27160e6e77614eda49acf38b3979b587b620cd6fb1ace00c1cd4f1907ec25c532e614b19d4e69fb63833b23670db2f0dada941a21bad15c247219eae5e54a", 0x49}, {&(0x7f0000002080)="ebc15ae64efeaf67d8926a89450807d92cad2ddc07d7e1d2c6472994d1157e93e7709d0460df2869ca3f85baef7cec0353ab4eaf2cca4f43f98996a6d8cecd4489f8b225557f15bdeba90b5a47e8809f2a602f645d4c3d324a7871f7a7b0d1e9939a3b5083566e97fe8fd850424a56df43e9f73f83aa89bc1e01386c0efbf4999b547df8fda5208295a167af2cd0540de499797ed58ed91483fb800e47fd1efcbacb77ed6590ddae89494a28370a613a8c4462bc4310f7fd4fcfce7c0e82cd01155deaa591e8d1dd74d7f67f250a4e4588ba", 0xd2}, {&(0x7f0000002180)="a79ebdc075db32d7711b3d7eb7bfa7d1c96aa2be96f857175b473bdf1f9fbc03d352421d20e3c37bd4c0ffc5b8ab605c95d88572cfce206977b7c2eac2a4e0e5491b3b24356a5c6d51bf5d6613a9dbc837d66b70388f1b01c82300e09d17bb0c1a30a63ef8733a640a756240cbf9125502057c0b86903394bdf692a4d30d36b1b181979f09590de31a09b5abc657f47c41ad4a02df3838732cb60cfe201e821d646428a7eb73d3803276dfdadcca397f5c554829adfe32f1debf8e4d2323cf3f0a65169a26c942ac1349d5398ca4f9b4f3a44519b920e12df2312a67c22c855e1f869911ddbe3cfc71c641ca5c046e0b5cfb2aa049cd3a9c", 0xf8}], 0x5, &(0x7f0000002400)=[@rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, r3, r12, r8, r4, r6]}}, @rights={{0x20, 0x1, 0x1, [r10, r8, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x70, 0x1}}, {{&(0x7f0000002480)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002500)="7c6285ca6e79741f66", 0x9}, {&(0x7f0000002540)}], 0x2, &(0x7f0000002780)=[@rights={{0x1c, 0x1, 0x1, [r10, r13, r13]}}, @rights={{0x24, 0x1, 0x1, [r6, r8, r8, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14}}}], 0x68, 0x40}}, {{0xfffffffffffffffe, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002e80)="035b054393366d80450f804c3873daf5d321ee436de19bdd780d48951fb8ecae1cfe5c5d9d1fbc29d3e2db07006387ca055ba744efcdb9e676eb17949d1cae7079778c8ccea25966df202bf4cfe2649865fa03eb72f3ccccd024d22ee43b803ef60dff3321cb16d785e9b1c081d660a3de9cba751443aa50", 0x78}, {&(0x7f0000002f40)}, {&(0x7f0000002fc0)="7c81721aee7e22139284237ac258dc4ebea37dbeb98bfc432ab9430f2d127f097158a46eea52fed60e74ea045d8fd5e0b965ddce9341f7d0cd5f146887433455b4c8832c0e0d8443bf7700d46ca7d1aab0b1704e1d3542196a", 0x59}, {&(0x7f0000003040)="32864b3920ebf418c71217bd968aae986c74338914f8dba5f49b4f59a3e2aaddbd7b5b61c886c6e2c0673b965df46633172b5559f71f2e2492b62c3f55e5926e8a0c7327ab30b302", 0x48}, {&(0x7f0000003100)="6907d365e656aadc29f1bea130b13602735c1c2fbc0d007001c1f20a38311786ceca0308224cc408d467fb5c59a4d821b77206d14658522123b1b278d65df794abe1c6774f9054dae19259162079ad2ebb8d2bdda09ec80029cc71b66a01ae2a46baabc1354ebc3dab7c4e5e7002d6ee44e7dece6244c3", 0x77}, {0x0}], 0x6}}], 0x5, 0x4000000) ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0x1) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.279533785s ago: executing program 0 (id=2369): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000100)="40c8598b54fbf55934c90e7096b00bb30091d1ad140315ab48781d7678163195b50c34aca888ec080000000000000095988ebbd664a3ddf0ad152a443b2ff26ea3faa302b6b752607dbdb47f8117c149d788231421cb541313febf3e94824fe870", 0x61}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}, {&(0x7f00000004c0)="017dab6c2f1f17e000fa4cc94b83fcb4ded7d36827d5a05dff8b8159b9d321f23092156573e3140e371ebe8ed8f60b2b8cd0bb4744d430f2013bfa13fdb8b15dcc8f87c1fbed31da4cd0e8d47689f733511566b90ce593b5cf5d0163b58b943fc19efc369c55cbe0b4f9e97aebf1fed6b46d4c81fc52d3baa7acc46511d45a4b5f7df8d9ab62c722d4a1a3608fa40301b91c807774d992427a6ee11606b994889b83c51a06031d26b741eca0c0cbf6b51b457601484b", 0xb6}], 0x6}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}], 0x3, 0x4000040) 2.107051794s ago: executing program 5 (id=2370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000100)) 1.70355648s ago: executing program 0 (id=2371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b92003600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 1.301250228s ago: executing program 4 (id=2372): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609093a140006"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 577.84506ms ago: executing program 0 (id=2373): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x4e0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) 569.837991ms ago: executing program 5 (id=2374): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xfff, 0x8, 0x9, 0x6}]}) syz_usb_disconnect(r1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x9, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) ioctl$DVB_DVR_DMX_EXPBUF(r2, 0xc00c6f3e, &(0x7f0000000140)={0x6644, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x78, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtclass={0x504, 0x28, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff1, 0x8}, {0x1}, {0x9, 0xa}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @TCA_RATE={0x6, 0x5, {0xf0, 0x8}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x4a4, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x7f, 0x1, 0xfff7, 0x1, 0x3, 0x100}, {0x6, 0x1, 0x4, 0xa, 0x0, 0x3}, 0x5f0, 0x4ac, 0x8, 0x34f2b507, 0x4}}, @TCA_HTB_CEIL64={0xc, 0x7, 0xa}, @TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x2, 0xe, 0xe98f, 0x7f, 0x8000}, {0x4, 0x0, 0x1, 0x8000, 0xcab5, 0x3}, 0x56, 0xfffffffe, 0x3, 0x5, 0x1}}, @TCA_HTB_CTAB={0x404, 0x3, [0x5, 0x1dadef40, 0x8, 0x3, 0x10001, 0x8, 0x7fff, 0xf23, 0x40, 0x2, 0x6, 0x16, 0x7fff, 0x1, 0x401, 0x6, 0xf, 0x30, 0xe3, 0x81, 0x80000000, 0x56, 0x7, 0x5, 0x3, 0x0, 0x3, 0xfffffd7a, 0x3, 0x86, 0xfffffffc, 0x9, 0xffffffc0, 0x9, 0xfff, 0x9, 0x4, 0x7f, 0x7, 0x81, 0x5, 0x5, 0x6, 0x0, 0x11, 0x4, 0x101, 0x9, 0x3, 0x8, 0x271, 0x4, 0x3, 0xffffffb3, 0x80000001, 0x3, 0xfffffffa, 0x4, 0x7, 0x9766, 0x80000001, 0x3, 0xc, 0x9, 0x4, 0xb, 0x3, 0x8, 0x15bd, 0x80000, 0x4, 0x3, 0x6, 0x1, 0x3, 0x2, 0x6, 0x800, 0xfffffffb, 0x4, 0x8, 0x6, 0x101, 0x9, 0x3, 0x9, 0x0, 0x9, 0xf, 0x6, 0x2c, 0x5, 0x7, 0x7, 0xd8, 0x400, 0xfffffffd, 0x5d, 0x5, 0x9, 0x10, 0x9, 0x81, 0x2, 0x502c, 0x7, 0x7, 0x3ff, 0x6, 0xd, 0x4, 0x2, 0xfffffff7, 0x1b, 0xd42, 0x9, 0x4, 0xfffffffe, 0x73, 0x0, 0xfffffff8, 0xfffffff2, 0x5, 0x3, 0x4c6, 0xfffffff8, 0x9, 0x4034, 0x3, 0xd, 0x8, 0x10001, 0x100, 0x8, 0x2, 0x3b0, 0x1000, 0x7dae, 0xfffffff8, 0x6, 0x7, 0x1, 0x76a4, 0x7, 0xfffff78e, 0xbc1, 0xf3, 0x3, 0x0, 0x1, 0xfff, 0x2, 0x4, 0x47e, 0x401, 0x5, 0x89b6, 0x0, 0x6, 0x0, 0xfffffff7, 0x3, 0x5, 0xe30, 0x8, 0x0, 0x8, 0x1, 0x9, 0x1124, 0x4, 0x8, 0x6, 0x5, 0x688, 0x3, 0x9bf2, 0x3, 0x4, 0xffffff68, 0x0, 0x7, 0xb, 0x9, 0xf3, 0xb55, 0x6, 0x9, 0x80000000, 0x2, 0x4, 0xc, 0x4, 0x1b, 0x85, 0x7ff, 0xfd57, 0x8, 0x2ecd, 0x5, 0xdf33, 0xa, 0x7, 0xe20, 0x10000, 0x8, 0x8000000, 0x39d, 0x7fff, 0x0, 0x5, 0x6, 0x4f810180, 0x32322184, 0x6, 0x7, 0x302a, 0x2, 0x9, 0x2, 0x8, 0x2, 0x0, 0xb948, 0x1, 0x80, 0x80, 0x2, 0x4, 0x45, 0x0, 0x1, 0x9d, 0xfffffffc, 0x8001, 0xfffffffa, 0x6, 0x9, 0x400, 0x7, 0x10001, 0x1, 0x735e, 0x1, 0x448e, 0x7ff, 0x3, 0x1, 0x80, 0x5, 0x1, 0x3, 0x9, 0x6, 0x7, 0x8]}, @TCA_HTB_PARMS={0x30, 0x1, {{0xf, 0x0, 0x3, 0xfff, 0x3c0f, 0x3}, {0x40, 0x2, 0x6, 0xfff6, 0x8a55, 0x5}, 0x3, 0x9, 0xcbca, 0x3, 0x6}}]}}, @TCA_RATE={0x6, 0x5, {0x18}}, @TCA_RATE={0x6, 0x5, {0x1, 0xff}}]}, 0x504}}, 0x0) r9 = socket(0xa, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r11 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRES32=0x0], 0x0}, 0x0) bind$can_raw(r11, &(0x7f0000000200)={0x1d, r10}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x19, 0x7, 0x7, 0x59, @mcast1, @loopback, 0x20, 0x1, 0x1, 0x2}}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003c0], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="300000000000000001000000", @ANYRES32=r9, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32, @ANYRES32=r2, @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r3], 0x30}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 302.527277ms ago: executing program 0 (id=2375): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4814) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000200)={0x4, 0x3ff, 0x7f, 0x10000, 0x6, "4e7717867f7e0496e09a78fcf177b8da5431f5"}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x4000050) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = socket$alg(0x26, 0x5, 0x0) close(r2) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r3}, 0x38) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e22, 0x4, @mcast1, 0x8}}, {{0xa, 0x4e08, 0xffff8001, @private2={0xfc, 0x2, '\x00', 0x4}, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="03000000000000000a004e220000000cff010000000000000000200000000001080400000000310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1b30e498, 0x8001) socket$tipc(0x1e, 0x5, 0x0) unshare(0x4040600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) pselect6(0x40, &(0x7f0000000100)={0x1e, 0x2f, 0x6, 0x801, 0x1ffffffffffffffe, 0x0, 0x7ffd, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x8, 0x9, 0x5}) r6 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="82", 0x1}], 0x1}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=2376): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x3c644) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x23) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000d40)=[@nested_vmresume={0x130, 0x18, 0x3}], 0x18}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@delqdisc={0x58, 0x25, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1, 0xfff3}, {0xffff, 0xfff1}, {0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xff, 0x0, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x2, 0xf4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7f}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0xc0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @sk_skb=0x4}, 0x94) syz_emit_ethernet(0x5e, &(0x7f0000000400)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x4c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "263292fb99d5157ac6a6ec526f6518c7"}, @md5sig={0x13, 0x12, "a7e8ec95aa6295ea40a52b32e98fdeef"}]}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6c000000060a0104000000000000000002000000400004803c0001800c0001007061796c6f6164002c000280080004400000000008000540000000000800034000000057080002400000030208000740000000080900010073797a30000000000900020073797a32"], 0x94}}, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) kernel console output (not intermixed with test programs): 20] R13: 00007ff511766038 R14: 00007ff511765fa0 R15: 00007ffc86fedb78 [ 439.904717][T10620] [ 440.104033][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 440.364704][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 440.501023][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.915532][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 440.918412][ T5900] usb 5-1: USB disconnect, device number 33 [ 440.958420][ T5886] input: failed to attach handler mousedev to device input17, error: -5 [ 441.083851][ T5900] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 441.141517][ T5900] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 441.157158][ T5900] quatech2 5-1:0.51: device disconnected [ 441.199745][ T5823] Bluetooth: hci0: unexpected cc 0x0c14 length: 96 < 249 [ 441.199784][ T5823] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 441.302471][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 441.448503][ T10] usb 6-1: device descriptor read/64, error -71 [ 441.577998][T10453] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.578244][T10453] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.578502][T10453] bridge_slave_0: entered allmulticast mode [ 441.585048][T10453] bridge_slave_0: entered promiscuous mode [ 441.601284][T10453] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.601513][T10453] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.601701][T10453] bridge_slave_1: entered allmulticast mode [ 441.605026][T10453] bridge_slave_1: entered promiscuous mode [ 441.703211][T10453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.710123][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 441.730503][T10453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.739072][ T5900] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 441.816091][ T31] usb 2-1: USB disconnect, device number 39 [ 441.850397][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 441.905211][ T5900] usb 5-1: config 1 has an invalid descriptor of length 178, skipping remainder of the config [ 441.905259][ T5900] usb 5-1: too many endpoints for config 1 interface 0 altsetting 136: 101, using maximum allowed: 30 [ 441.905312][ T5900] usb 5-1: config 1 interface 0 altsetting 136 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 441.905341][ T5900] usb 5-1: config 1 interface 0 has no altsetting 0 [ 441.906812][ T5900] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 441.906843][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 441.906866][ T5900] usb 5-1: SerialNumber: syz [ 441.929330][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 441.929452][ T10] usb 6-1: device descriptor read/64, error -71 [ 442.047680][ T10] usb usb6-port1: attempt power cycle [ 442.096652][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 442.204426][T10453] team0: Port device team_slave_0 added [ 442.208700][T10453] team0: Port device team_slave_1 added [ 442.368155][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 442.551959][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 442.558678][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 442.574670][ T10] usb 6-1: device descriptor read/8, error -71 [ 442.630418][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 442.810900][ T5900] usb-storage 5-1:1.0: USB Mass Storage device detected [ 442.834280][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 442.863635][ T10] usb 6-1: device descriptor read/8, error -71 [ 442.981059][ T10] usb usb6-port1: unable to enumerate USB device [ 443.059798][T10453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.059819][T10453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.059851][T10453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.084618][ T5900] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 443.133650][T10453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.133671][T10453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.133703][T10453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.355369][ T5900] usb 5-1: USB disconnect, device number 34 [ 443.792108][T10453] hsr_slave_0: entered promiscuous mode [ 443.796547][T10453] hsr_slave_1: entered promiscuous mode [ 443.810613][T10453] debugfs: 'hsr0' already exists in 'hsr' [ 443.810645][T10453] Cannot create hsr debugfs directory [ 444.318455][ T5983] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 444.480940][ T5983] usb 2-1: Using ep0 maxpacket: 16 [ 444.484017][ T5983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 444.489870][ T5983] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 444.489907][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.489932][ T5983] usb 2-1: Product: syz [ 444.489949][ T5983] usb 2-1: Manufacturer: syz [ 444.489965][ T5983] usb 2-1: SerialNumber: syz [ 444.560927][ T5983] usb 2-1: config 0 descriptor?? [ 444.625321][ T5983] hub 2-1:0.0: bad descriptor, ignoring hub [ 444.625365][ T5983] hub 2-1:0.0: probe with driver hub failed with error -5 [ 444.649533][ T5983] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 445.010038][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 446.734486][T10714] FAULT_INJECTION: forcing a failure. [ 446.734486][T10714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.734529][T10714] CPU: 1 UID: 0 PID: 10714 Comm: syz.3.1829 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 446.734562][T10714] Tainted: [L]=SOFTLOCKUP [ 446.734571][T10714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 446.734585][T10714] Call Trace: [ 446.734595][T10714] [ 446.734605][T10714] dump_stack_lvl+0xe8/0x150 [ 446.734648][T10714] should_fail_ex+0x46b/0x600 [ 446.734680][T10714] _copy_from_user+0x2d/0xb0 [ 446.734708][T10714] ___sys_sendmsg+0x1c6/0x360 [ 446.734733][T10714] ? __lock_acquire+0x6b5/0x2cf0 [ 446.734765][T10714] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.734829][T10714] ? __fget_files+0x2a/0x420 [ 446.734858][T10714] ? __fget_files+0x3a6/0x420 [ 446.734898][T10714] __x64_sys_sendmsg+0x1c3/0x2a0 [ 446.734933][T10714] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.734970][T10714] ? __pfx_ksys_write+0x10/0x10 [ 446.735014][T10714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.735038][T10714] do_syscall_64+0x15f/0xf80 [ 446.735064][T10714] ? trace_irq_disable+0x3b/0x140 [ 446.735087][T10714] ? clear_bhb_loop+0x40/0x90 [ 446.735114][T10714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.735138][T10714] RIP: 0033:0x7fc4942ec819 [ 446.735159][T10714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.735179][T10714] RSP: 002b:00007fc49253e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.735214][T10714] RAX: ffffffffffffffda RBX: 00007fc494565fa0 RCX: 00007fc4942ec819 [ 446.735232][T10714] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 446.735247][T10714] RBP: 00007fc49253e090 R08: 0000000000000000 R09: 0000000000000000 [ 446.735260][T10714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.735272][T10714] R13: 00007fc494566038 R14: 00007fc494565fa0 R15: 00007fff7db0f598 [ 446.735304][T10714] [ 447.082220][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1830'. [ 447.622179][ T148] bridge_slave_1: left allmulticast mode [ 447.622212][ T148] bridge_slave_1: left promiscuous mode [ 447.622490][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.781636][ T148] bridge_slave_0: left allmulticast mode [ 447.781670][ T148] bridge_slave_0: left promiscuous mode [ 447.823763][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.428140][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'. [ 449.340917][T10792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1858'. [ 449.352893][ T31] usb 2-1: USB disconnect, device number 40 [ 449.879400][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.966122][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.033803][ T148] bond0 (unregistering): Released all slaves [ 450.353579][ T5471] 8021q: adding VLAN 0 to HW filter on device eth1 [ 450.420857][T10749] tipc: Started in network mode [ 450.420881][T10749] tipc: Node identity ce376720cc0c, cluster identity 4711 [ 450.444652][T10749] tipc: Enabled bearer , priority 0 [ 450.451046][T10755] syzkaller0: entered promiscuous mode [ 450.451064][T10755] syzkaller0: entered allmulticast mode [ 450.790788][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1873'. [ 450.855278][ T148] hsr_slave_0: left promiscuous mode [ 450.897106][ T148] hsr_slave_1: left promiscuous mode [ 450.909292][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.909322][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.955874][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.955907][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.372856][ T148] veth1_macvtap: left promiscuous mode [ 451.372979][ T148] veth0_macvtap: left promiscuous mode [ 451.386277][ T148] veth1_vlan: left promiscuous mode [ 451.386492][ T148] veth0_vlan: left promiscuous mode [ 452.520004][T10867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1892'. [ 453.999105][ T148] team0 (unregistering): Port device team_slave_1 removed [ 454.064486][ T148] team0 (unregistering): Port device team_slave_0 removed [ 454.489395][T10768] tipc: Resetting bearer [ 454.686704][T10768] tipc: Disabling bearer [ 454.845432][ T5900] tipc: Node number set to 37447456 [ 454.923128][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1891'. [ 454.961398][T10940] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1926'. [ 454.961428][T10940] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1926'. [ 455.184872][T10948] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 455.629065][T10963] FAULT_INJECTION: forcing a failure. [ 455.629065][T10963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.629111][T10963] CPU: 0 UID: 0 PID: 10963 Comm: syz.4.1931 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 455.629145][T10963] Tainted: [L]=SOFTLOCKUP [ 455.629155][T10963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 455.629168][T10963] Call Trace: [ 455.629178][T10963] [ 455.629190][T10963] dump_stack_lvl+0xe8/0x150 [ 455.629234][T10963] should_fail_ex+0x46b/0x600 [ 455.629266][T10963] _copy_to_user+0x31/0xb0 [ 455.629298][T10963] simple_read_from_buffer+0xe1/0x170 [ 455.629334][T10963] proc_fail_nth_read+0x1be/0x230 [ 455.629367][T10963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.629396][T10963] ? rw_verify_area+0x2ac/0x4e0 [ 455.629428][T10963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.629457][T10963] vfs_read+0x212/0xa80 [ 455.629505][T10963] ? __pfx_vfs_read+0x10/0x10 [ 455.629534][T10963] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 455.629558][T10963] ? lockdep_hardirqs_on+0x7a/0x110 [ 455.629580][T10963] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 455.629602][T10963] ? mutex_lock_nested+0x152/0x1d0 [ 455.629630][T10963] ? fdget_pos+0x252/0x320 [ 455.629661][T10963] ksys_read+0x156/0x270 [ 455.629690][T10963] ? __pfx_ksys_read+0x10/0x10 [ 455.629724][T10963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.629745][T10963] do_syscall_64+0x15f/0xf80 [ 455.629768][T10963] ? trace_irq_disable+0x3b/0x140 [ 455.629787][T10963] ? clear_bhb_loop+0x40/0x90 [ 455.629810][T10963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.629829][T10963] RIP: 0033:0x7fc3d405d04e [ 455.629849][T10963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 455.629867][T10963] RSP: 002b:00007fc3d22d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 455.629889][T10963] RAX: ffffffffffffffda RBX: 00007fc3d22d56c0 RCX: 00007fc3d405d04e [ 455.629903][T10963] RDX: 000000000000000f RSI: 00007fc3d22d50a0 RDI: 0000000000000004 [ 455.629916][T10963] RBP: 00007fc3d22d5090 R08: 0000000000000000 R09: 0000000000000000 [ 455.629928][T10963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.629939][T10963] R13: 00007fc3d4316128 R14: 00007fc3d4316090 R15: 00007fff76e5be38 [ 455.629969][T10963] [ 457.970096][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.970175][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.675454][T10998] FAULT_INJECTION: forcing a failure. [ 458.675454][T10998] name failslab, interval 1, probability 0, space 0, times 0 [ 458.675497][T10998] CPU: 1 UID: 0 PID: 10998 Comm: syz.1.1941 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 458.675530][T10998] Tainted: [L]=SOFTLOCKUP [ 458.675539][T10998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 458.675552][T10998] Call Trace: [ 458.675562][T10998] [ 458.675572][T10998] dump_stack_lvl+0xe8/0x150 [ 458.675615][T10998] should_fail_ex+0x46b/0x600 [ 458.675648][T10998] should_failslab+0xa8/0x100 [ 458.675675][T10998] __kmalloc_cache_noprof+0x84/0x690 [ 458.675711][T10998] ? sctp_add_bind_addr+0x8c/0x370 [ 458.675740][T10998] sctp_add_bind_addr+0x8c/0x370 [ 458.675767][T10998] sctp_bind_addr_copy+0x189/0x3c0 [ 458.675798][T10998] sctp_connect_new_asoc+0x2ff/0x6b0 [ 458.675838][T10998] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 458.675872][T10998] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 458.675901][T10998] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 458.675930][T10998] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 458.675960][T10998] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 458.675992][T10998] ? security_sctp_bind_connect+0x7e/0x2c0 [ 458.676026][T10998] sctp_sendmsg+0x14c0/0x2990 [ 458.676073][T10998] ? __pfx_sctp_sendmsg+0x10/0x10 [ 458.676101][T10998] ? __lock_acquire+0x6b5/0x2cf0 [ 458.676131][T10998] ? __lock_acquire+0x6b5/0x2cf0 [ 458.676169][T10998] ? sock_rps_record_flow+0x19/0x350 [ 458.676204][T10998] ? inet_sendmsg+0x2f4/0x370 [ 458.676232][T10998] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 458.676266][T10998] ____sys_sendmsg+0x7da/0x9c0 [ 458.676298][T10998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.676332][T10998] ? import_iovec+0x73/0xa0 [ 458.676364][T10998] ___sys_sendmsg+0x2a5/0x360 [ 458.676387][T10998] ? __lock_acquire+0x6b5/0x2cf0 [ 458.676419][T10998] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.676449][T10998] ? kstrtouint+0x6e/0xe0 [ 458.676511][T10998] ? __fget_files+0x2a/0x420 [ 458.676540][T10998] ? __fget_files+0x3a6/0x420 [ 458.676581][T10998] __sys_sendmmsg+0x282/0x4e0 [ 458.676613][T10998] ? __pfx___sys_sendmmsg+0x10/0x10 [ 458.676650][T10998] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 458.676692][T10998] ? ksys_write+0x248/0x270 [ 458.676731][T10998] ? __pfx_ksys_write+0x10/0x10 [ 458.676774][T10998] __x64_sys_sendmmsg+0xa0/0xc0 [ 458.676801][T10998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.676827][T10998] do_syscall_64+0x15f/0xf80 [ 458.676857][T10998] ? trace_irq_disable+0x3b/0x140 [ 458.676880][T10998] ? clear_bhb_loop+0x40/0x90 [ 458.676910][T10998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.676934][T10998] RIP: 0033:0x7f66492ac819 [ 458.676958][T10998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.676990][T10998] RSP: 002b:00007f66474fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 458.677017][T10998] RAX: ffffffffffffffda RBX: 00007f6649525fa0 RCX: 00007f66492ac819 [ 458.677035][T10998] RDX: 0000000000000001 RSI: 0000200000001d80 RDI: 0000000000000003 [ 458.677050][T10998] RBP: 00007f66474fe090 R08: 0000000000000000 R09: 0000000000000000 [ 458.677064][T10998] R10: 00000000000005dc R11: 0000000000000246 R12: 0000000000000001 [ 458.677079][T10998] R13: 00007f6649526038 R14: 00007f6649525fa0 R15: 00007fffff14b898 [ 458.677116][T10998] [ 459.080841][T11005] FAULT_INJECTION: forcing a failure. [ 459.080841][T11005] name failslab, interval 1, probability 0, space 0, times 0 [ 459.080886][T11005] CPU: 1 UID: 0 PID: 11005 Comm: syz.1.1943 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 459.080919][T11005] Tainted: [L]=SOFTLOCKUP [ 459.080928][T11005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 459.080942][T11005] Call Trace: [ 459.080952][T11005] [ 459.080962][T11005] dump_stack_lvl+0xe8/0x150 [ 459.081022][T11005] should_fail_ex+0x46b/0x600 [ 459.081055][T11005] should_failslab+0xa8/0x100 [ 459.081079][T11005] kmem_cache_alloc_noprof+0x87/0x680 [ 459.081114][T11005] ? skb_clone+0x212/0x3a0 [ 459.081144][T11005] skb_clone+0x212/0x3a0 [ 459.081168][T11005] ? nfnetlink_rcv+0x4b0/0x27b0 [ 459.081214][T11005] nfnetlink_rcv+0x4e2/0x27b0 [ 459.081248][T11005] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 459.081284][T11005] ? lockdep_hardirqs_on+0x7a/0x110 [ 459.081320][T11005] ? __dev_queue_xmit+0x1eaf/0x3900 [ 459.081346][T11005] ? __netlink_deliver_tap+0x404/0x850 [ 459.081381][T11005] ? netlink_unicast+0x754/0x920 [ 459.081421][T11005] ? __dev_queue_xmit+0x2b3/0x3900 [ 459.081454][T11005] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 459.081504][T11005] ? ref_tracker_free+0x673/0x820 [ 459.081535][T11005] ? __pfx_ref_tracker_free+0x10/0x10 [ 459.081560][T11005] ? __asan_memcpy+0x40/0x70 [ 459.081588][T11005] ? __skb_clone+0x63/0x7a0 [ 459.081626][T11005] ? __skb_clone+0x483/0x7a0 [ 459.081660][T11005] ? skb_clone+0x246/0x3a0 [ 459.081690][T11005] ? __netlink_deliver_tap+0x807/0x850 [ 459.081724][T11005] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.081765][T11005] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.081800][T11005] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.081841][T11005] netlink_unicast+0x780/0x920 [ 459.081884][T11005] netlink_sendmsg+0x813/0xb40 [ 459.081917][T11005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.081942][T11005] ? unwind_get_return_address+0x4d/0x90 [ 459.082088][T11005] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.082127][T11005] ____sys_sendmsg+0x94c/0x9c0 [ 459.082160][T11005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.082196][T11005] ? import_iovec+0x73/0xa0 [ 459.082227][T11005] ___sys_sendmsg+0x2a5/0x360 [ 459.082249][T11005] ? __lock_acquire+0x6b5/0x2cf0 [ 459.082281][T11005] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.082341][T11005] ? __fget_files+0x2a/0x420 [ 459.082370][T11005] ? __fget_files+0x3a6/0x420 [ 459.082409][T11005] __x64_sys_sendmsg+0x1c3/0x2a0 [ 459.082440][T11005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.082476][T11005] ? __pfx_ksys_write+0x10/0x10 [ 459.082520][T11005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.082547][T11005] do_syscall_64+0x15f/0xf80 [ 459.082577][T11005] ? trace_irq_disable+0x3b/0x140 [ 459.082601][T11005] ? clear_bhb_loop+0x40/0x90 [ 459.082630][T11005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.082654][T11005] RIP: 0033:0x7f66492ac819 [ 459.082678][T11005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.082698][T11005] RSP: 002b:00007f66474fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.082725][T11005] RAX: ffffffffffffffda RBX: 00007f6649525fa0 RCX: 00007f66492ac819 [ 459.082743][T11005] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 459.082757][T11005] RBP: 00007f66474fe090 R08: 0000000000000000 R09: 0000000000000000 [ 459.082772][T11005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.082786][T11005] R13: 00007f6649526038 R14: 00007f6649525fa0 R15: 00007fffff14b898 [ 459.082821][T11005] [ 459.984967][T11017] FAULT_INJECTION: forcing a failure. [ 459.984967][T11017] name failslab, interval 1, probability 0, space 0, times 0 [ 459.985010][T11017] CPU: 1 UID: 0 PID: 11017 Comm: syz.1.1946 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 459.985044][T11017] Tainted: [L]=SOFTLOCKUP [ 459.985062][T11017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 459.985076][T11017] Call Trace: [ 459.985086][T11017] [ 459.985096][T11017] dump_stack_lvl+0xe8/0x150 [ 459.985139][T11017] should_fail_ex+0x46b/0x600 [ 459.985170][T11017] should_failslab+0xa8/0x100 [ 459.985202][T11017] kmem_cache_alloc_noprof+0x87/0x680 [ 459.985235][T11017] ? alloc_empty_file+0x5b/0x1d0 [ 459.985267][T11017] alloc_empty_file+0x5b/0x1d0 [ 459.985296][T11017] path_openat+0x11b/0x38a0 [ 459.985338][T11017] ? try_to_take_rt_mutex+0x840/0xb00 [ 459.985362][T11017] ? arch_stack_walk+0xfb/0x150 [ 459.985401][T11017] ? __lock_acquire+0x6b5/0x2cf0 [ 459.985435][T11017] ? __pfx_path_openat+0x10/0x10 [ 459.985473][T11017] ? kasan_save_track+0x4f/0x80 [ 459.985502][T11017] ? kasan_save_track+0x3e/0x80 [ 459.985532][T11017] ? __kasan_slab_alloc+0x6c/0x80 [ 459.985563][T11017] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 459.985604][T11017] ? do_raw_spin_lock+0x12b/0x2f0 [ 459.985638][T11017] do_file_open+0x23e/0x4a0 [ 459.985671][T11017] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 459.985705][T11017] ? __pfx_do_file_open+0x10/0x10 [ 459.985737][T11017] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 459.985785][T11017] ? alloc_fd+0x64e/0x6c0 [ 459.985825][T11017] do_sys_openat2+0x113/0x200 [ 459.985858][T11017] ? __pfx_do_sys_openat2+0x10/0x10 [ 459.985887][T11017] ? exc_page_fault+0x6a/0xc0 [ 459.985919][T11017] ? do_user_addr_fault+0xc6f/0x1340 [ 459.985954][T11017] __x64_sys_openat+0x138/0x170 [ 459.985984][T11017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.986008][T11017] do_syscall_64+0x15f/0xf80 [ 459.986033][T11017] ? trace_irq_disable+0x3b/0x140 [ 459.986066][T11017] ? clear_bhb_loop+0x40/0x90 [ 459.986094][T11017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.986117][T11017] RIP: 0033:0x7f664926d04e [ 459.986138][T11017] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 459.986158][T11017] RSP: 002b:00007f66474fdb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 459.986182][T11017] RAX: ffffffffffffffda RBX: 00007f66474fe6c0 RCX: 00007f664926d04e [ 459.986198][T11017] RDX: 0000000000000000 RSI: 00007f66474fdc00 RDI: ffffffffffffff9c [ 459.986213][T11017] RBP: 00007f66474fdc00 R08: 0000000000000000 R09: 0000000000000000 [ 459.986228][T11017] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 459.986242][T11017] R13: 00007f6649526038 R14: 00007f6649525fa0 R15: 00007fffff14b898 [ 459.986275][T11017] [ 462.280448][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1950'. [ 462.872748][ T5899] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 463.471753][T11047] fuse: Unknown parameter 'use0000000000000000000000000000000000000000' [ 463.874836][ T5899] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 463.874873][ T5899] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 463.874896][ T5899] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 463.874920][ T5899] usb 5-1: config 220 has no interface number 2 [ 463.875007][ T5899] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 463.875039][ T5899] usb 5-1: config 220 interface 0 has no altsetting 0 [ 463.875061][ T5899] usb 5-1: config 220 interface 76 has no altsetting 0 [ 463.875083][ T5899] usb 5-1: config 220 interface 1 has no altsetting 0 [ 463.878324][ T5899] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 463.878359][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.878384][ T5899] usb 5-1: Product: syz [ 463.878401][ T5899] usb 5-1: Manufacturer: syz [ 463.878420][ T5899] usb 5-1: SerialNumber: syz [ 464.561819][T11062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1959'. [ 465.029655][T11067] unsupported nla_type 65316 [ 465.092447][ T5899] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 465.092491][ T5899] uvcvideo 5-1:220.0: No valid video chain found. [ 465.092563][ T5899] usb 5-1: selecting invalid altsetting 0 [ 465.215722][ T5899] usb 5-1: selecting invalid altsetting 0 [ 465.215767][ T5899] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 465.225346][ T5899] usb 5-1: USB disconnect, device number 35 [ 466.554050][T11104] FAULT_INJECTION: forcing a failure. [ 466.554050][T11104] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 466.554095][T11104] CPU: 1 UID: 0 PID: 11104 Comm: syz.3.1973 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 466.554128][T11104] Tainted: [L]=SOFTLOCKUP [ 466.554138][T11104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 466.554153][T11104] Call Trace: [ 466.554162][T11104] [ 466.554173][T11104] dump_stack_lvl+0xe8/0x150 [ 466.554215][T11104] should_fail_ex+0x46b/0x600 [ 466.554247][T11104] prepare_alloc_pages+0x22a/0x6b0 [ 466.554286][T11104] __alloc_frozen_pages_noprof+0x12f/0x380 [ 466.554318][T11104] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 466.554349][T11104] ? __pfx_policy_nodemask+0x10/0x10 [ 466.554377][T11104] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 466.554408][T11104] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.554442][T11104] alloc_pages_mpol+0xd1/0x380 [ 466.554471][T11104] alloc_pages_noprof+0xd2/0x2f0 [ 466.554498][T11104] get_free_pages_noprof+0xf/0x80 [ 466.554524][T11104] __pollwait+0x263/0x430 [ 466.554551][T11104] ? __pfx___pollwait+0x10/0x10 [ 466.554577][T11104] snd_pcm_poll+0x192/0x6d0 [ 466.554613][T11104] ? __pfx_snd_pcm_poll+0x10/0x10 [ 466.554644][T11104] do_select+0x101e/0x15c0 [ 466.554680][T11104] ? do_select+0x7f1/0x15c0 [ 466.554724][T11104] ? __pfx_do_select+0x10/0x10 [ 466.554747][T11104] ? unwind_next_frame+0xa6/0x2550 [ 466.554780][T11104] ? __pfx___pollwait+0x10/0x10 [ 466.554811][T11104] ? __pfx_pollwake+0x10/0x10 [ 466.554841][T11104] ? __pfx_pollwake+0x10/0x10 [ 466.554872][T11104] ? __pfx_pollwake+0x10/0x10 [ 466.554902][T11104] ? __pfx_pollwake+0x10/0x10 [ 466.554932][T11104] ? __pfx_pollwake+0x10/0x10 [ 466.554971][T11104] ? __pfx_pollwake+0x10/0x10 [ 466.555001][T11104] ? __pfx_pollwake+0x10/0x10 [ 466.555030][T11104] ? __pfx_pollwake+0x10/0x10 [ 466.555061][T11104] ? __pfx_pollwake+0x10/0x10 [ 466.555111][T11104] core_sys_select+0x898/0xc30 [ 466.555155][T11104] ? __pfx_core_sys_select+0x10/0x10 [ 466.555206][T11104] ? __pfx_set_user_sigmask+0x10/0x10 [ 466.555240][T11104] ? rt_mutex_slowunlock+0x1cb/0x300 [ 466.555263][T11104] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 466.555295][T11104] __se_sys_pselect6+0x267/0x320 [ 466.555327][T11104] ? __pfx___se_sys_pselect6+0x10/0x10 [ 466.555355][T11104] ? __pfx_ksys_write+0x10/0x10 [ 466.555396][T11104] ? __x64_sys_pselect6+0x21/0xf0 [ 466.555423][T11104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.555449][T11104] do_syscall_64+0x15f/0xf80 [ 466.555477][T11104] ? trace_irq_disable+0x3b/0x140 [ 466.555501][T11104] ? clear_bhb_loop+0x40/0x90 [ 466.555530][T11104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.555554][T11104] RIP: 0033:0x7fc4942ec819 [ 466.555577][T11104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.555598][T11104] RSP: 002b:00007fc49253e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 466.555623][T11104] RAX: ffffffffffffffda RBX: 00007fc494565fa0 RCX: 00007fc4942ec819 [ 466.555641][T11104] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 466.555656][T11104] RBP: 00007fc49253e090 R08: 0000000000000000 R09: 0000000000000000 [ 466.555671][T11104] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 466.555685][T11104] R13: 00007fc494566038 R14: 00007fc494565fa0 R15: 00007fff7db0f598 [ 466.555721][T11104] [ 468.040485][T11121] syzkaller1: entered promiscuous mode [ 468.040518][T11121] syzkaller1: entered allmulticast mode [ 468.115026][ T37] kauditd_printk_skb: 50 callbacks suppressed [ 468.115076][ T37] audit: type=1326 audit(1776587402.625:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11109 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66492ac819 code=0x7ffc0000 [ 468.115335][ T37] audit: type=1326 audit(1776587402.625:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11109 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66492ac819 code=0x7ffc0000 [ 468.116680][ T37] audit: type=1326 audit(1776587402.625:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11109 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66492ac819 code=0x7ffc0000 [ 468.116924][ T37] audit: type=1326 audit(1776587402.625:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11109 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66492ac819 code=0x7ffc0000 [ 468.117121][ T37] audit: type=1326 audit(1776587402.625:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11109 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f66492ac819 code=0x7ffc0000 [ 468.117357][ T37] audit: type=1326 audit(1776587402.625:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11109 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66492ac819 code=0x7ffc0000 [ 468.119129][ T37] audit: type=1326 audit(1776587402.625:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11109 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66492ac819 code=0x7ffc0000 [ 468.119385][ T37] audit: type=1326 audit(1776587402.625:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11109 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66492ac819 code=0x7ffc0000 [ 468.119599][ T37] audit: type=1326 audit(1776587402.625:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11109 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66492ac819 code=0x7ffc0000 [ 468.121638][ T37] audit: type=1326 audit(1776587402.625:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11109 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f66492ac819 code=0x7ffc0000 [ 468.977417][T11133] FAULT_INJECTION: forcing a failure. [ 468.977417][T11133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.977458][T11133] CPU: 1 UID: 0 PID: 11133 Comm: syz.3.1984 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 468.977489][T11133] Tainted: [L]=SOFTLOCKUP [ 468.977498][T11133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 468.977513][T11133] Call Trace: [ 468.977522][T11133] [ 468.977531][T11133] dump_stack_lvl+0xe8/0x150 [ 468.977572][T11133] should_fail_ex+0x46b/0x600 [ 468.977604][T11133] _copy_from_user+0x2d/0xb0 [ 468.977635][T11133] core_sys_select+0x6ff/0xc30 [ 468.977682][T11133] ? __pfx_core_sys_select+0x10/0x10 [ 468.977706][T11133] ? __might_fault+0xaf/0x130 [ 468.977774][T11133] ? __pfx_set_user_sigmask+0x10/0x10 [ 468.977807][T11133] ? kmem_cache_free+0x187/0x6c0 [ 468.977830][T11133] ? do_sys_openat2+0x14c/0x200 [ 468.977868][T11133] __se_sys_pselect6+0x267/0x320 [ 468.977901][T11133] ? __pfx___se_sys_pselect6+0x10/0x10 [ 468.977940][T11133] ? __pfx_ksys_write+0x10/0x10 [ 468.977980][T11133] ? __x64_sys_pselect6+0x21/0xf0 [ 468.978007][T11133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.978033][T11133] do_syscall_64+0x15f/0xf80 [ 468.978061][T11133] ? trace_irq_disable+0x3b/0x140 [ 468.978084][T11133] ? clear_bhb_loop+0x40/0x90 [ 468.978113][T11133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.978136][T11133] RIP: 0033:0x7fc4942ec819 [ 468.978159][T11133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.978178][T11133] RSP: 002b:00007fc49253e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 468.978204][T11133] RAX: ffffffffffffffda RBX: 00007fc494565fa0 RCX: 00007fc4942ec819 [ 468.978222][T11133] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000040 [ 468.978238][T11133] RBP: 00007fc49253e090 R08: 00002000000002c0 R09: 0000000000000000 [ 468.978254][T11133] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 468.978270][T11133] R13: 00007fc494566038 R14: 00007fc494565fa0 R15: 00007fff7db0f598 [ 468.978307][T11133] [ 469.010562][T10453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 469.529600][T10453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.592177][T10453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 469.872159][T10453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.897974][T11148] FAULT_INJECTION: forcing a failure. [ 469.897974][T11148] name failslab, interval 1, probability 0, space 0, times 0 [ 469.898017][T11148] CPU: 1 UID: 0 PID: 11148 Comm: syz.1.1988 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 469.898051][T11148] Tainted: [L]=SOFTLOCKUP [ 469.898060][T11148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 469.898073][T11148] Call Trace: [ 469.898082][T11148] [ 469.898092][T11148] dump_stack_lvl+0xe8/0x150 [ 469.898140][T11148] should_fail_ex+0x46b/0x600 [ 469.898172][T11148] should_failslab+0xa8/0x100 [ 469.898197][T11148] kmem_cache_alloc_noprof+0x87/0x680 [ 469.898230][T11148] ? skb_clone+0x212/0x3a0 [ 469.898261][T11148] skb_clone+0x212/0x3a0 [ 469.898291][T11148] __netlink_deliver_tap+0x404/0x850 [ 469.898339][T11148] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.898373][T11148] netlink_deliver_tap+0x19c/0x1b0 [ 469.898408][T11148] netlink_dump+0x8ed/0xe10 [ 469.898453][T11148] ? __pfx_netlink_dump+0x10/0x10 [ 469.898498][T11148] ? netlink_recvmsg+0x5d6/0xa50 [ 469.898518][T11148] ? kmem_cache_free+0x187/0x6c0 [ 469.898539][T11148] ? netlink_recvmsg+0x5d6/0xa50 [ 469.898567][T11148] netlink_recvmsg+0x690/0xa50 [ 469.898598][T11148] ? __pfx_netlink_recvmsg+0x10/0x10 [ 469.898625][T11148] ? __lock_acquire+0x6b5/0x2cf0 [ 469.898656][T11148] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 469.898688][T11148] ? security_socket_recvmsg+0x7e/0x2c0 [ 469.898718][T11148] ? __pfx_netlink_recvmsg+0x10/0x10 [ 469.898740][T11148] sock_recvmsg+0x172/0x1b0 [ 469.898776][T11148] ____sys_recvmsg+0x1f2/0x4b0 [ 469.898814][T11148] ? __pfx_____sys_recvmsg+0x10/0x10 [ 469.898858][T11148] ? import_iovec+0x73/0xa0 [ 469.898901][T11148] ___sys_recvmsg+0x215/0x590 [ 469.898936][T11148] ? __pfx____sys_recvmsg+0x10/0x10 [ 469.898968][T11148] ? __fget_files+0x2a/0x420 [ 469.899018][T11148] ? __fget_files+0x3a6/0x420 [ 469.899058][T11148] do_recvmmsg+0x33a/0x800 [ 469.899097][T11148] ? __pfx_do_recvmmsg+0x10/0x10 [ 469.899137][T11148] ? rt_mutex_slowunlock+0x1cb/0x300 [ 469.899178][T11148] __x64_sys_recvmmsg+0x198/0x250 [ 469.899209][T11148] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 469.899243][T11148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.899267][T10453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 469.899268][T11148] do_syscall_64+0x15f/0xf80 [ 469.899296][T11148] ? trace_irq_disable+0x3b/0x140 [ 469.899318][T11148] ? clear_bhb_loop+0x40/0x90 [ 469.899344][T11148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.899367][T11148] RIP: 0033:0x7f66492ac819 [ 469.899390][T11148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.899411][T11148] RSP: 002b:00007f66474dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 469.899439][T11148] RAX: ffffffffffffffda RBX: 00007f6649526090 RCX: 00007f66492ac819 [ 469.899457][T11148] RDX: 0000000000000009 RSI: 0000200000005d00 RDI: 0000000000000003 [ 469.899472][T11148] RBP: 00007f66474dd090 R08: 0000000000000000 R09: 0000000000000000 [ 469.899486][T11148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.899501][T11148] R13: 00007f6649526128 R14: 00007f6649526090 R15: 00007fffff14b898 [ 469.899538][T11148] [ 470.325586][T10453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.369403][T10453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 470.372476][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 470.418825][T10453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.565994][ T10] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 470.609584][ T10] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 470.609620][ T10] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 470.609646][ T10] usb 6-1: Manufacturer: syz [ 470.609664][ T10] usb 6-1: SerialNumber: syz [ 471.131696][ T10] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 471.198645][ T10] usb 6-1: USB disconnect, device number 11 [ 471.405775][T11188] Illegal XDP return value 11188 on prog (id 135) dev N/A, expect packet loss! [ 471.480511][T10453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.544949][T11191] 9p: Bad value for 'rfdno' [ 472.372648][T10453] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.475845][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.476006][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.679241][T11197] netlink: 4864 bytes leftover after parsing attributes in process `syz.4.1999'. [ 472.703593][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.707241][ T1395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.822511][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 473.822541][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 475.674913][T11247] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.2015'. [ 475.691602][T10453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.884451][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 475.884476][T11252] FAULT_INJECTION: forcing a failure. [ 475.884476][T11252] name failslab, interval 1, probability 0, space 0, times 0 [ 475.884510][T11252] CPU: 1 UID: 0 PID: 11252 Comm: syz.1.2019 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 475.884543][T11252] Tainted: [L]=SOFTLOCKUP [ 475.884552][T11252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 475.884566][T11252] Call Trace: [ 475.884576][T11252] [ 475.884587][T11252] dump_stack_lvl+0xe8/0x150 [ 475.884653][T11252] should_fail_ex+0x46b/0x600 [ 475.884685][T11252] should_failslab+0xa8/0x100 [ 475.884711][T11252] __kmalloc_noprof+0xdf/0x7b0 [ 475.884747][T11252] ? fib_nl2rule+0x2e9/0x1a00 [ 475.884777][T11252] fib_nl2rule+0x2e9/0x1a00 [ 475.884805][T11252] ? __pfx_fib_nl2rule+0x10/0x10 [ 475.884831][T11252] ? __nla_parse+0x40/0x60 [ 475.884862][T11252] fib_newrule+0x321/0x1030 [ 475.884895][T11252] ? __pfx_fib_newrule+0x10/0x10 [ 475.884957][T11252] ? __pfx_fib_nl_newrule+0x10/0x10 [ 475.884983][T11252] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 475.885037][T11252] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 475.885070][T11252] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 475.885101][T11252] ? ref_tracker_free+0x673/0x820 [ 475.885131][T11252] ? __pfx_ref_tracker_free+0x10/0x10 [ 475.885156][T11252] ? __asan_memcpy+0x40/0x70 [ 475.885185][T11252] ? __skb_clone+0x63/0x7a0 [ 475.885219][T11252] netlink_rcv_skb+0x232/0x4b0 [ 475.885255][T11252] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 475.885291][T11252] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 475.885340][T11252] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.885373][T11252] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.885414][T11252] netlink_unicast+0x780/0x920 [ 475.885456][T11252] netlink_sendmsg+0x813/0xb40 [ 475.885487][T11252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.885511][T11252] ? unwind_get_return_address+0x4d/0x90 [ 475.885541][T11252] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 475.885578][T11252] ____sys_sendmsg+0x94c/0x9c0 [ 475.885609][T11252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.885643][T11252] ? import_iovec+0x73/0xa0 [ 475.885674][T11252] ___sys_sendmsg+0x2a5/0x360 [ 475.885698][T11252] ? __lock_acquire+0x6b5/0x2cf0 [ 475.885728][T11252] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.885787][T11252] ? __fget_files+0x2a/0x420 [ 475.885818][T11252] ? __fget_files+0x3a6/0x420 [ 475.885854][T11252] __x64_sys_sendmsg+0x1c3/0x2a0 [ 475.885882][T11252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 475.885917][T11252] ? __pfx_ksys_write+0x10/0x10 [ 475.885958][T11252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.885984][T11252] do_syscall_64+0x15f/0xf80 [ 475.886021][T11252] ? trace_irq_disable+0x3b/0x140 [ 475.886044][T11252] ? clear_bhb_loop+0x40/0x90 [ 475.886073][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.886094][T11252] RIP: 0033:0x7f66492ac819 [ 475.886116][T11252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.886136][T11252] RSP: 002b:00007f66474fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.886162][T11252] RAX: ffffffffffffffda RBX: 00007f6649525fa0 RCX: 00007f66492ac819 [ 475.886179][T11252] RDX: 0000000004040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 475.886194][T11252] RBP: 00007f66474fe090 R08: 0000000000000000 R09: 0000000000000000 [ 475.886209][T11252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.886224][T11252] R13: 00007f6649526038 R14: 00007f6649525fa0 R15: 00007fffff14b898 [ 475.886259][T11252] [ 476.122786][T11258] netlink: 'syz.4.2021': attribute type 10 has an invalid length. [ 476.365414][T11258] team0: Device vxcan1 is of different type [ 476.767687][ T5899] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 476.782747][T10453] veth0_vlan: entered promiscuous mode [ 476.917214][T10453] veth1_vlan: entered promiscuous mode [ 476.935672][ T5899] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 476.935706][ T5899] usb 6-1: config 0 has no interface number 0 [ 476.935758][ T5899] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 476.935789][ T5899] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.935815][ T5899] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.935854][ T5899] usb 6-1: config 0 interface 1 has no altsetting 0 [ 476.935890][ T5899] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 476.935918][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.022768][ T5899] usb 6-1: config 0 descriptor?? [ 477.207434][T10453] veth0_macvtap: entered promiscuous mode [ 477.251646][T10453] veth1_macvtap: entered promiscuous mode [ 477.447187][T10453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.665470][T10453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.941149][ T1127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.981062][ T3400] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.985118][ T3400] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.989674][ T3400] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.259939][ T5899] usbhid 6-1:0.1: can't add hid device: -71 [ 479.260079][ T5899] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 479.305677][T11299] binder: BINDER_SET_CONTEXT_MGR already set [ 479.305697][T11299] binder: 11298:11299 ioctl 4018620d 200000004a80 returned -16 [ 479.308274][ T5899] usb 6-1: USB disconnect, device number 12 [ 480.428229][T11309] gfs2: gfs2 mount does not exist [ 480.826177][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.826203][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.833211][ T5983] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 480.984690][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.984714][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.031018][ T5983] usb 5-1: Using ep0 maxpacket: 16 [ 481.052255][ T5983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.052312][ T5983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 481.052342][ T5983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 481.052364][ T5983] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 481.052389][ T5983] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.053735][ T5983] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 481.053761][ T5983] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 481.053781][ T5983] usb 5-1: Manufacturer: syz [ 481.249234][ T5983] usb 5-1: config 0 descriptor?? [ 481.709630][ T5983] rc_core: IR keymap rc-hauppauge not found [ 481.709655][ T5983] Registered IR keymap rc-empty [ 481.709832][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.730475][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.757017][ T5983] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 481.771106][ T5983] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 481.961297][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.983301][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 482.001477][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 482.912356][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 483.082248][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 483.098220][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 483.130200][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 483.150112][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 483.171796][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 483.195188][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 483.233229][ T5983] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 483.233259][ T5983] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 483.272931][ T5983] usb 5-1: USB disconnect, device number 36 [ 483.802570][T11350] gfs2: gfs2 mount does not exist [ 484.038392][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 484.111911][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 484.213275][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 484.240079][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 484.241473][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 484.461176][T11356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2054'. [ 486.048678][T11369] FAULT_INJECTION: forcing a failure. [ 486.048678][T11369] name failslab, interval 1, probability 0, space 0, times 0 [ 486.048722][T11369] CPU: 1 UID: 0 PID: 11369 Comm: syz.0.2057 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 486.048755][T11369] Tainted: [L]=SOFTLOCKUP [ 486.048764][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 486.048778][T11369] Call Trace: [ 486.048787][T11369] [ 486.048798][T11369] dump_stack_lvl+0xe8/0x150 [ 486.048840][T11369] should_fail_ex+0x46b/0x600 [ 486.048871][T11369] should_failslab+0xa8/0x100 [ 486.048898][T11369] __kmalloc_noprof+0xdf/0x7b0 [ 486.048934][T11369] ? io_cache_alloc_new+0x40/0x100 [ 486.048971][T11369] io_cache_alloc_new+0x40/0x100 [ 486.049002][T11369] io_rsrc_node_alloc+0x172/0x280 [ 486.049034][T11369] io_sqe_files_register+0x313/0x7d0 [ 486.049073][T11369] ? __pfx_io_sqe_files_register+0x10/0x10 [ 486.049116][T11369] io_register_rsrc+0x26e/0x280 [ 486.049144][T11369] ? __pfx_io_register_rsrc+0x10/0x10 [ 486.049175][T11369] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 486.049203][T11369] ? mutex_lock_nested+0x152/0x1d0 [ 486.049238][T11369] ? __se_sys_io_uring_register+0x221/0x1a20 [ 486.049268][T11369] __se_sys_io_uring_register+0x89a/0x1a20 [ 486.049303][T11369] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 486.049333][T11369] ? ksys_write+0x248/0x270 [ 486.049371][T11369] ? __pfx_ksys_write+0x10/0x10 [ 486.049416][T11369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.049442][T11369] do_syscall_64+0x15f/0xf80 [ 486.049471][T11369] ? trace_irq_disable+0x3b/0x140 [ 486.049496][T11369] ? clear_bhb_loop+0x40/0x90 [ 486.049526][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.049550][T11369] RIP: 0033:0x7ff72c58c819 [ 486.049573][T11369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.049595][T11369] RSP: 002b:00007ff72a7de028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 486.049631][T11369] RAX: ffffffffffffffda RBX: 00007ff72c805fa0 RCX: 00007ff72c58c819 [ 486.049649][T11369] RDX: 00002000000000c0 RSI: 000000000000000d RDI: 0000000000000003 [ 486.049666][T11369] RBP: 00007ff72a7de090 R08: 0000000000000000 R09: 0000000000000000 [ 486.049681][T11369] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 486.049695][T11369] R13: 00007ff72c806038 R14: 00007ff72c805fa0 R15: 00007ffed7e2e618 [ 486.049732][T11369] [ 486.661656][ T5826] Bluetooth: hci6: command tx timeout [ 486.903514][ T5899] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 487.013382][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2062'. [ 487.081061][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 487.084456][ T5899] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 487.084517][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.191133][ T5899] usb 5-1: config 0 descriptor?? [ 487.228506][ T5899] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 487.565269][T11388] gfs2: gfs2 mount does not exist [ 487.664007][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2060'. [ 487.664048][T11376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2060'. [ 487.897242][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 488.049021][ T31] usb 1-1: device descriptor read/64, error -71 [ 488.243149][ T193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.270763][ T5899] gspca_nw80x: reg_w err -110 [ 488.270867][ T5899] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 488.374137][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 488.399960][ T5983] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 488.418630][ T5886] usb 5-1: USB disconnect, device number 37 [ 488.547349][ T31] usb 1-1: device descriptor read/64, error -71 [ 488.573695][ T5983] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 488.573728][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.573752][ T5983] usb 6-1: Product: syz [ 488.573768][ T5983] usb 6-1: Manufacturer: syz [ 488.573784][ T5983] usb 6-1: SerialNumber: syz [ 488.618614][ T5983] usb 6-1: config 0 descriptor?? [ 488.668267][ T31] usb usb1-port1: attempt power cycle [ 488.844747][ T5983] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 488.931901][ T5826] Bluetooth: hci6: command tx timeout [ 489.056746][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 489.081758][ T31] usb 1-1: device descriptor read/8, error -71 [ 489.201702][ T193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.339087][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 489.361331][ T31] usb 1-1: device descriptor read/8, error -71 [ 489.484011][ T31] usb usb1-port1: unable to enumerate USB device [ 489.845534][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2073'. [ 489.957859][ T31] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 490.060942][ T193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.133005][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 490.133831][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 490.135798][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 490.135834][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 490.135877][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 490.158824][ T31] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 490.158860][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.158884][ T31] usb 2-1: Product: syz [ 490.158910][ T31] usb 2-1: Manufacturer: syz [ 490.158925][ T31] usb 2-1: SerialNumber: syz [ 491.194313][ T5826] Bluetooth: hci6: command tx timeout [ 491.217325][ T5983] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 491.277344][ T5983] usb 6-1: USB disconnect, device number 13 [ 491.491671][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'. [ 491.494578][ T193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.200208][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2083'. [ 493.254582][T11440] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2083'. [ 493.398564][ T31] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 493.425570][ T5826] Bluetooth: hci6: command tx timeout [ 493.769274][ T31] usb 2-1: USB disconnect, device number 41 [ 494.832610][ T6577] udevd[6577]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.575734][T11463] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2091'. [ 495.752479][T11351] chnl_net:caif_netlink_parms(): no params data found [ 498.215647][ T193] veth0_to_hsr: left allmulticast mode [ 498.215679][ T193] veth0_to_hsr: left promiscuous mode [ 498.216044][ T193] bridge0: port 3(veth0_to_hsr) entered disabled state [ 498.396104][ T193] bridge_slave_1: left allmulticast mode [ 498.396138][ T193] bridge_slave_1: left promiscuous mode [ 498.396438][ T193] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.468110][ T193] bridge_slave_0: left allmulticast mode [ 498.468145][ T193] bridge_slave_0: left promiscuous mode [ 498.471488][ T193] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.556636][T11517] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.2103'. [ 502.029519][ T5886] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 502.195389][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 502.195449][ T5886] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 502.195478][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.252266][ T5886] usb 5-1: config 0 descriptor?? [ 502.285262][T11545] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 502.301310][ T193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.421549][ T193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.459473][ T193] bond0 (unregistering): Released all slaves [ 502.581668][T11505] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2099'. [ 502.728528][ T5471] 8021q: adding VLAN 0 to HW filter on device eth1 [ 502.785919][ T5886] hid (null): unknown global tag 0xd [ 502.923955][T11351] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.924066][T11351] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.924314][T11351] bridge_slave_0: entered allmulticast mode [ 502.964723][T11351] bridge_slave_0: entered promiscuous mode [ 503.026469][ T5886] hid_parser_main: 28 callbacks suppressed [ 503.026501][ T5886] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 503.026539][ T5886] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 503.026569][ T5886] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 503.026597][ T5886] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 503.026625][ T5886] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 503.026661][ T5886] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 503.026688][ T5886] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 503.026713][ T5886] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 503.026740][ T5886] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 503.026767][ T5886] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 503.029397][ T5886] asus 0003:0B05:1ABE.0007: reserved main item tag 0xe [ 503.029445][ T5886] asus 0003:0B05:1ABE.0007: ignoring exceeding usage max [ 503.030967][ T5886] asus 0003:0B05:1ABE.0007: unknown global tag 0xd [ 503.030987][ T5886] asus 0003:0B05:1ABE.0007: item 0 4 1 13 parsing failed [ 503.031918][ T5886] asus 0003:0B05:1ABE.0007: Asus hid parse failed: -22 [ 503.032038][ T5886] asus 0003:0B05:1ABE.0007: probe with driver asus failed with error -22 [ 503.091164][T11351] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.091297][T11351] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.094970][T11351] bridge_slave_1: entered allmulticast mode [ 503.118589][T11351] bridge_slave_1: entered promiscuous mode [ 503.427547][ T9] usb 5-1: USB disconnect, device number 38 [ 503.492512][ T5900] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 503.730958][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 503.734461][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 503.739704][ T5900] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 503.739788][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.739805][ T5900] usb 2-1: Product: syz [ 503.739823][ T5900] usb 2-1: Manufacturer: syz [ 503.739834][ T5900] usb 2-1: SerialNumber: syz [ 503.750597][ T5900] usb 2-1: config 0 descriptor?? [ 503.760941][ T5900] hub 2-1:0.0: bad descriptor, ignoring hub [ 503.761000][ T5900] hub 2-1:0.0: probe with driver hub failed with error -5 [ 503.768508][ T5900] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20 [ 503.839473][ T6032] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 504.019175][ T6032] usb 6-1: Using ep0 maxpacket: 32 [ 504.022588][ T6032] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 504.022619][ T6032] usb 6-1: config 0 has no interface number 0 [ 504.022671][ T6032] usb 6-1: config 0 interface 184 has no altsetting 0 [ 504.054005][ T6032] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 504.054040][ T6032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.054062][ T6032] usb 6-1: Product: syz [ 504.054079][ T6032] usb 6-1: Manufacturer: syz [ 504.054096][ T6032] usb 6-1: SerialNumber: syz [ 504.120045][ T6032] usb 6-1: config 0 descriptor?? [ 504.807829][T11351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.917882][T11351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.007436][ T6032] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 505.007460][ T6032] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 505.007474][ T6032] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 505.007672][ T6032] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 505.104614][ T6032] usb 6-1: USB disconnect, device number 14 [ 505.213127][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2120'. [ 505.249483][T11569] siw: device registration error -23 [ 505.523509][T11351] team0: Port device team_slave_0 added [ 505.527853][T11351] team0: Port device team_slave_1 added [ 505.852064][T11579] loop8: detected capacity change from 0 to 7 [ 505.858369][ T5900] usb 2-1: USB disconnect, device number 42 [ 506.166194][T11590] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2125'. [ 506.183551][T11579] Dev loop8: unable to read RDB block 7 [ 506.183599][T11579] loop8: unable to read partition table [ 506.183829][T11579] loop8: partition table beyond EOD, truncated [ 506.186262][T11591] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2124'. [ 506.186773][T11579] loop_reread_partitions: partition scan of loop8 (ўшЂЋxќ^>бр– ) failed (rc=-5) [ 506.321399][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 506.488027][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 506.488069][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1808, setting to 1024 [ 506.488101][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 506.488146][ T9] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 506.488171][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.559022][ T9] usb 1-1: config 0 descriptor?? [ 506.566844][T11586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 507.036292][T11351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.037858][T11351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.037893][T11351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.223517][T11351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.223541][T11351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.223573][T11351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.787093][T11611] FAULT_INJECTION: forcing a failure. [ 507.787093][T11611] name failslab, interval 1, probability 0, space 0, times 0 [ 507.787137][T11611] CPU: 1 UID: 0 PID: 11611 Comm: syz.4.2128 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 507.787170][T11611] Tainted: [L]=SOFTLOCKUP [ 507.787179][T11611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 507.787194][T11611] Call Trace: [ 507.787204][T11611] [ 507.787214][T11611] dump_stack_lvl+0xe8/0x150 [ 507.787258][T11611] should_fail_ex+0x46b/0x600 [ 507.787289][T11611] should_failslab+0xa8/0x100 [ 507.787315][T11611] __kmalloc_noprof+0xdf/0x7b0 [ 507.787349][T11611] ? tomoyo_encode+0x28b/0x550 [ 507.787473][T11611] tomoyo_encode+0x28b/0x550 [ 507.787505][T11611] tomoyo_realpath_from_path+0x58d/0x5d0 [ 507.787547][T11611] ? tomoyo_path_number_perm+0x219/0x630 [ 507.787580][T11611] tomoyo_path_number_perm+0x246/0x630 [ 507.787616][T11611] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 507.787646][T11611] ? __lock_acquire+0x6b5/0x2cf0 [ 507.787677][T11611] ? do_raw_spin_lock+0x12b/0x2f0 [ 507.787735][T11611] ? __fget_files+0x2a/0x420 [ 507.787769][T11611] ? __fget_files+0x2a/0x420 [ 507.787794][T11611] ? __fget_files+0x3a6/0x420 [ 507.787818][T11611] ? __fget_files+0x2a/0x420 [ 507.787851][T11611] security_file_ioctl+0xc3/0x2a0 [ 507.787886][T11611] __se_sys_ioctl+0x47/0x170 [ 507.787922][T11611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.787949][T11611] do_syscall_64+0x15f/0xf80 [ 507.787977][T11611] ? trace_irq_disable+0x3b/0x140 [ 507.788000][T11611] ? clear_bhb_loop+0x40/0x90 [ 507.788028][T11611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.788051][T11611] RIP: 0033:0x7fc3d409c819 [ 507.788074][T11611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.788095][T11611] RSP: 002b:00007fc3d22f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.788120][T11611] RAX: ffffffffffffffda RBX: 00007fc3d4315fa0 RCX: 00007fc3d409c819 [ 507.788137][T11611] RDX: 0000200000000200 RSI: 0000000080044dfb RDI: 0000000000000003 [ 507.788153][T11611] RBP: 00007fc3d22f6090 R08: 0000000000000000 R09: 0000000000000000 [ 507.788168][T11611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.788181][T11611] R13: 00007fc3d4316038 R14: 00007fc3d4315fa0 R15: 00007fff76e5be38 [ 507.788215][T11611] [ 507.804620][T11611] ERROR: Out of memory at tomoyo_realpath_from_path. [ 508.301061][T11620] FAULT_INJECTION: forcing a failure. [ 508.301061][T11620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.301107][T11620] CPU: 1 UID: 0 PID: 11620 Comm: syz.4.2131 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 508.301139][T11620] Tainted: [L]=SOFTLOCKUP [ 508.301148][T11620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 508.301162][T11620] Call Trace: [ 508.301172][T11620] [ 508.301182][T11620] dump_stack_lvl+0xe8/0x150 [ 508.301224][T11620] should_fail_ex+0x46b/0x600 [ 508.301257][T11620] _copy_from_iter+0x1d3/0x1670 [ 508.301291][T11620] ? trace_kmem_cache_alloc+0x29/0xe0 [ 508.301325][T11620] ? __alloc_skb+0x27d/0x7d0 [ 508.301479][T11620] ? __pfx__copy_from_iter+0x10/0x10 [ 508.301502][T11620] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 508.301533][T11620] ? __alloc_skb+0x27d/0x7d0 [ 508.301573][T11620] ? netlink_sendmsg+0x650/0xb40 [ 508.301594][T11620] ? skb_put+0x11b/0x210 [ 508.301619][T11620] netlink_sendmsg+0x6c0/0xb40 [ 508.301658][T11620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.301684][T11620] ? unwind_get_return_address+0x4d/0x90 [ 508.301714][T11620] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 508.301752][T11620] ____sys_sendmsg+0x94c/0x9c0 [ 508.301784][T11620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.301821][T11620] ? import_iovec+0x73/0xa0 [ 508.301854][T11620] ___sys_sendmsg+0x2a5/0x360 [ 508.301878][T11620] ? __lock_acquire+0x6b5/0x2cf0 [ 508.301908][T11620] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.301971][T11620] ? __fget_files+0x2a/0x420 [ 508.302002][T11620] ? __fget_files+0x3a6/0x420 [ 508.302042][T11620] __x64_sys_sendmsg+0x1c3/0x2a0 [ 508.302070][T11620] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 508.302105][T11620] ? __pfx_ksys_write+0x10/0x10 [ 508.302149][T11620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.302175][T11620] do_syscall_64+0x15f/0xf80 [ 508.302205][T11620] ? trace_irq_disable+0x3b/0x140 [ 508.302229][T11620] ? clear_bhb_loop+0x40/0x90 [ 508.302257][T11620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.302281][T11620] RIP: 0033:0x7fc3d409c819 [ 508.302304][T11620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.302325][T11620] RSP: 002b:00007fc3d22f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.302361][T11620] RAX: ffffffffffffffda RBX: 00007fc3d4315fa0 RCX: 00007fc3d409c819 [ 508.302379][T11620] RDX: 0000000000004054 RSI: 0000200000000ac0 RDI: 0000000000000005 [ 508.302395][T11620] RBP: 00007fc3d22f6090 R08: 0000000000000000 R09: 0000000000000000 [ 508.302410][T11620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.302424][T11620] R13: 00007fc3d4316038 R14: 00007fc3d4315fa0 R15: 00007fff76e5be38 [ 508.302458][T11620] [ 508.451000][T11623] netlink: 'syz.4.2131': attribute type 10 has an invalid length. [ 508.540705][ T193] hsr_slave_0: left promiscuous mode [ 508.624126][ T193] hsr_slave_1: left promiscuous mode [ 508.625245][ T193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.625266][ T193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.666562][ T193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.666593][ T193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.051402][ T193] veth1_macvtap: left promiscuous mode [ 509.051521][ T193] veth0_macvtap: left promiscuous mode [ 509.080392][ T193] veth1_vlan: left promiscuous mode [ 509.080604][ T193] veth0_vlan: left promiscuous mode [ 509.556192][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 509.592216][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 509.653721][ T9] usb 1-1: USB disconnect, device number 17 [ 510.765204][ T5823] Bluetooth: hci6: command 0x0405 tx timeout [ 510.828990][T11638] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2136'. [ 511.046078][T11642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2138'. [ 511.459662][ T193] team0 (unregistering): Port device team_slave_1 removed [ 511.526478][ T193] team0 (unregistering): Port device team_slave_0 removed [ 512.029472][T11351] hsr_slave_0: entered promiscuous mode [ 512.053107][T11351] hsr_slave_1: entered promiscuous mode [ 512.064529][ T5471] 8021q: adding VLAN 0 to HW filter on device eth2 [ 512.235877][T11623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.254230][T11623] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 512.699619][T11654] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 512.699619][T11654] program syz.0.2140 not setting count and/or reply_len properly [ 512.704327][T11654] sg_write: data in/out 1818846731/65018 bytes for SCSI command 0x61-- guessing data in; [ 512.704327][T11654] program syz.0.2140 not setting count and/or reply_len properly [ 512.863370][T11655] binder: 11653:11655 ioctl 9362 0 returned -22 [ 513.098973][T11665] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2145'. [ 513.592780][T11671] gfs2: gfs2 mount does not exist [ 514.079574][T11686] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2149'. [ 514.256672][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2151'. [ 515.664450][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2159'. [ 516.888567][T11743] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2166'. [ 517.479679][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2171'. [ 518.369914][T11771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2174'. [ 519.792529][ T5878] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 519.797908][T11804] FAULT_INJECTION: forcing a failure. [ 519.797908][T11804] name failslab, interval 1, probability 0, space 0, times 0 [ 519.797950][T11804] CPU: 0 UID: 0 PID: 11804 Comm: syz.5.2181 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 519.797983][T11804] Tainted: [L]=SOFTLOCKUP [ 519.797993][T11804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 519.798006][T11804] Call Trace: [ 519.798016][T11804] [ 519.798025][T11804] dump_stack_lvl+0xe8/0x150 [ 519.798068][T11804] should_fail_ex+0x46b/0x600 [ 519.798100][T11804] should_failslab+0xa8/0x100 [ 519.798126][T11804] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 519.798165][T11804] ? kasprintf+0xe2/0x140 [ 519.798211][T11804] kvasprintf+0xeb/0x1a0 [ 519.798243][T11804] ? __pfx_kvasprintf+0x10/0x10 [ 519.798286][T11804] kasprintf+0xe2/0x140 [ 519.798323][T11804] ? __pfx_kasprintf+0x10/0x10 [ 519.798353][T11804] ? __kasan_kmalloc+0x93/0xb0 [ 519.798391][T11804] ? alloc_bprm+0x7d/0x5c0 [ 519.798429][T11804] alloc_bprm+0x1ce/0x5c0 [ 519.798466][T11804] do_execveat_common+0x175/0x690 [ 519.798504][T11804] ? do_getname+0x151/0x250 [ 519.798532][T11804] __x64_sys_execveat+0xc7/0xf0 [ 519.798565][T11804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.798597][T11804] do_syscall_64+0x15f/0xf80 [ 519.798625][T11804] ? trace_irq_disable+0x3b/0x140 [ 519.798646][T11804] ? clear_bhb_loop+0x40/0x90 [ 519.798674][T11804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.798698][T11804] RIP: 0033:0x7ff5114ec819 [ 519.798721][T11804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.798743][T11804] RSP: 002b:00007ff50f746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 519.798769][T11804] RAX: ffffffffffffffda RBX: 00007ff511765fa0 RCX: 00007ff5114ec819 [ 519.798788][T11804] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 519.798802][T11804] RBP: 00007ff50f746090 R08: 0000000000001000 R09: 0000000000000000 [ 519.798818][T11804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.798832][T11804] R13: 00007ff511766038 R14: 00007ff511765fa0 R15: 00007ffc86fedb78 [ 519.798865][T11804] [ 520.029697][ T5878] usb 5-1: config 0 has no interfaces? [ 520.058007][ T5878] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 520.058041][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 520.058065][ T5878] usb 5-1: Product: syz [ 520.058082][ T5878] usb 5-1: Manufacturer: syz [ 520.058098][ T5878] usb 5-1: SerialNumber: syz [ 520.098289][ T5878] usb 5-1: config 0 descriptor?? [ 520.149788][T11808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2182'. [ 520.364521][ T5878] usb 5-1: USB disconnect, device number 39 [ 521.169528][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 521.169640][T11785] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 522.116172][T11832] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2185'. [ 522.719296][T11841] binder_alloc: 11840: pid 11840 spamming oneway? 1 buffers allocated for a total size of 4096 [ 522.956835][T11351] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 523.039051][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2192'. [ 523.187516][T11351] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.370692][T11351] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 523.423293][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 523.451069][T11351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.459473][T11351] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 523.585690][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 523.589503][ T9] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 523.589536][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.626550][T11351] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.627958][T11351] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 523.894040][T11351] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.925623][ T9] usb 2-1: selecting invalid altsetting 3 [ 523.925653][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 523.925674][ T9] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 524.002648][ T9] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -22 [ 524.039016][ T9] usb 2-1: USB disconnect, device number 43 [ 524.267864][T11881] FAULT_INJECTION: forcing a failure. [ 524.267864][T11881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.267903][T11881] CPU: 0 UID: 0 PID: 11881 Comm: syz.5.2198 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 524.267935][T11881] Tainted: [L]=SOFTLOCKUP [ 524.267944][T11881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 524.267956][T11881] Call Trace: [ 524.267965][T11881] [ 524.267974][T11881] dump_stack_lvl+0xe8/0x150 [ 524.268015][T11881] should_fail_ex+0x46b/0x600 [ 524.268046][T11881] _copy_to_user+0x31/0xb0 [ 524.268077][T11881] simple_read_from_buffer+0xe1/0x170 [ 524.268111][T11881] proc_fail_nth_read+0x1be/0x230 [ 524.268144][T11881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 524.268177][T11881] ? rw_verify_area+0x2ac/0x4e0 [ 524.268207][T11881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 524.268236][T11881] vfs_read+0x212/0xa80 [ 524.268284][T11881] ? __pfx_vfs_read+0x10/0x10 [ 524.268317][T11881] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 524.268347][T11881] ? lockdep_hardirqs_on+0x7a/0x110 [ 524.268374][T11881] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 524.268402][T11881] ? mutex_lock_nested+0x152/0x1d0 [ 524.268435][T11881] ? fdget_pos+0x252/0x320 [ 524.268483][T11881] ksys_read+0x156/0x270 [ 524.268518][T11881] ? __pfx_ksys_read+0x10/0x10 [ 524.268558][T11881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.268584][T11881] do_syscall_64+0x15f/0xf80 [ 524.268611][T11881] ? trace_irq_disable+0x3b/0x140 [ 524.268633][T11881] ? clear_bhb_loop+0x40/0x90 [ 524.268660][T11881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.268680][T11881] RIP: 0033:0x7ff5114ad04e [ 524.268702][T11881] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 524.268723][T11881] RSP: 002b:00007ff50f745fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 524.268749][T11881] RAX: ffffffffffffffda RBX: 00007ff50f7466c0 RCX: 00007ff5114ad04e [ 524.268766][T11881] RDX: 000000000000000f RSI: 00007ff50f7460a0 RDI: 0000000000000004 [ 524.268782][T11881] RBP: 00007ff50f746090 R08: 0000000000000000 R09: 0000000000000000 [ 524.268795][T11881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.268811][T11881] R13: 00007ff511766038 R14: 00007ff511765fa0 R15: 00007ffc86fedb78 [ 524.268847][T11881] [ 524.469801][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 524.469881][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 524.622975][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2201'. [ 524.880500][T11896] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2202'. [ 525.225768][T11351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.272624][T11351] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.292618][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.293118][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.388103][ T2161] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.388288][ T2161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.522979][T11927] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2213'. [ 527.527655][T11917] kexec: Could not allocate control_code_buffer [ 527.936470][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2217'. [ 527.950071][T11938] siw: device registration error -23 [ 528.076497][T11351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.131806][T11943] FAULT_INJECTION: forcing a failure. [ 528.131806][T11943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.131850][T11943] CPU: 1 UID: 0 PID: 11943 Comm: syz.4.2218 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 528.131884][T11943] Tainted: [L]=SOFTLOCKUP [ 528.131893][T11943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 528.131907][T11943] Call Trace: [ 528.131916][T11943] [ 528.131927][T11943] dump_stack_lvl+0xe8/0x150 [ 528.131969][T11943] should_fail_ex+0x46b/0x600 [ 528.132007][T11943] _copy_from_user+0x2d/0xb0 [ 528.132038][T11943] ___sys_recvmsg+0x175/0x590 [ 528.132080][T11943] ? __pfx____sys_recvmsg+0x10/0x10 [ 528.132110][T11943] ? __fget_files+0x2a/0x420 [ 528.132173][T11943] do_recvmmsg+0x33a/0x800 [ 528.132208][T11943] ? __pfx_do_recvmmsg+0x10/0x10 [ 528.132248][T11943] ? rt_mutex_slowunlock+0x1cb/0x300 [ 528.132289][T11943] __x64_sys_recvmmsg+0x198/0x250 [ 528.132319][T11943] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 528.132351][T11943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.132376][T11943] do_syscall_64+0x15f/0xf80 [ 528.132404][T11943] ? trace_irq_disable+0x3b/0x140 [ 528.132427][T11943] ? clear_bhb_loop+0x40/0x90 [ 528.132456][T11943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.132480][T11943] RIP: 0033:0x7fc3d409c819 [ 528.132500][T11943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.132518][T11943] RSP: 002b:00007fc3d22d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 528.132544][T11943] RAX: ffffffffffffffda RBX: 00007fc3d4316090 RCX: 00007fc3d409c819 [ 528.132561][T11943] RDX: 000000000291962b RSI: 0000200000000040 RDI: 0000000000000003 [ 528.132576][T11943] RBP: 00007fc3d22d5090 R08: 0000000000000000 R09: 0000000000000000 [ 528.132591][T11943] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 528.132607][T11943] R13: 00007fc3d4316128 R14: 00007fc3d4316090 R15: 00007fff76e5be38 [ 528.132643][T11943] [ 528.471010][T11351] veth0_vlan: entered promiscuous mode [ 528.514829][T11351] veth1_vlan: entered promiscuous mode [ 528.734635][T11950] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2220'. [ 528.754953][T11351] veth0_macvtap: entered promiscuous mode [ 528.764130][T11351] veth1_macvtap: entered promiscuous mode [ 528.825745][T11351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.886983][T11351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.944426][ T9616] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.949766][ T9616] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.949820][ T9616] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.949862][ T9616] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.767412][T11978] FAULT_INJECTION: forcing a failure. [ 530.767412][T11978] name failslab, interval 1, probability 0, space 0, times 0 [ 530.767456][T11978] CPU: 1 UID: 0 PID: 11978 Comm: syz.1.2229 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 530.767490][T11978] Tainted: [L]=SOFTLOCKUP [ 530.767499][T11978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 530.767513][T11978] Call Trace: [ 530.767523][T11978] [ 530.767534][T11978] dump_stack_lvl+0xe8/0x150 [ 530.767578][T11978] should_fail_ex+0x46b/0x600 [ 530.767610][T11978] should_failslab+0xa8/0x100 [ 530.767636][T11978] kmem_cache_alloc_noprof+0x87/0x680 [ 530.767668][T11978] ? skb_clone+0x212/0x3a0 [ 530.767699][T11978] skb_clone+0x212/0x3a0 [ 530.767721][T11978] ? nfnetlink_rcv+0x4b0/0x27b0 [ 530.767756][T11978] nfnetlink_rcv+0x4e2/0x27b0 [ 530.767792][T11978] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 530.767828][T11978] ? lockdep_hardirqs_on+0x7a/0x110 [ 530.767862][T11978] ? __dev_queue_xmit+0x1eaf/0x3900 [ 530.767889][T11978] ? __netlink_deliver_tap+0x404/0x850 [ 530.767923][T11978] ? netlink_unicast+0x754/0x920 [ 530.767962][T11978] ? __dev_queue_xmit+0x2b3/0x3900 [ 530.767995][T11978] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 530.768045][T11978] ? ref_tracker_free+0x673/0x820 [ 530.768084][T11978] ? __pfx_ref_tracker_free+0x10/0x10 [ 530.768110][T11978] ? __asan_memcpy+0x40/0x70 [ 530.768137][T11978] ? __skb_clone+0x63/0x7a0 [ 530.768168][T11978] ? __skb_clone+0x483/0x7a0 [ 530.768200][T11978] ? skb_clone+0x246/0x3a0 [ 530.768229][T11978] ? __netlink_deliver_tap+0x807/0x850 [ 530.768274][T11978] ? netlink_deliver_tap+0x2e/0x1b0 [ 530.768315][T11978] ? netlink_deliver_tap+0x2e/0x1b0 [ 530.768350][T11978] ? netlink_deliver_tap+0x2e/0x1b0 [ 530.768391][T11978] netlink_unicast+0x780/0x920 [ 530.768433][T11978] netlink_sendmsg+0x813/0xb40 [ 530.768467][T11978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.768490][T11978] ? unwind_get_return_address+0x4d/0x90 [ 530.768521][T11978] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 530.768559][T11978] ____sys_sendmsg+0x94c/0x9c0 [ 530.768591][T11978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.768626][T11978] ? import_iovec+0x73/0xa0 [ 530.768658][T11978] ___sys_sendmsg+0x2a5/0x360 [ 530.768680][T11978] ? __lock_acquire+0x6b5/0x2cf0 [ 530.768715][T11978] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.768773][T11978] ? __fget_files+0x2a/0x420 [ 530.768797][T11978] ? __fget_files+0x3a6/0x420 [ 530.768830][T11978] __x64_sys_sendmsg+0x1c3/0x2a0 [ 530.768854][T11978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 530.768883][T11978] ? __pfx_ksys_write+0x10/0x10 [ 530.768920][T11978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.768941][T11978] do_syscall_64+0x15f/0xf80 [ 530.768963][T11978] ? trace_irq_disable+0x3b/0x140 [ 530.768982][T11978] ? clear_bhb_loop+0x40/0x90 [ 530.769006][T11978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.769025][T11978] RIP: 0033:0x7f66492ac819 [ 530.769044][T11978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.769070][T11978] RSP: 002b:00007f66474fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.769092][T11978] RAX: ffffffffffffffda RBX: 00007f6649525fa0 RCX: 00007f66492ac819 [ 530.769107][T11978] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 530.769119][T11978] RBP: 00007f66474fe090 R08: 0000000000000000 R09: 0000000000000000 [ 530.769131][T11978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.769142][T11978] R13: 00007f6649526038 R14: 00007f6649525fa0 R15: 00007fffff14b898 [ 530.769172][T11978] [ 530.971431][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.971456][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.240407][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2231'. [ 531.268125][T11983] siw: device registration error -23 [ 531.280142][T11985] FAULT_INJECTION: forcing a failure. [ 531.280142][T11985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.280179][T11985] CPU: 0 UID: 0 PID: 11985 Comm: syz.0.2232 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 531.280210][T11985] Tainted: [L]=SOFTLOCKUP [ 531.280218][T11985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 531.280232][T11985] Call Trace: [ 531.280242][T11985] [ 531.280252][T11985] dump_stack_lvl+0xe8/0x150 [ 531.280294][T11985] should_fail_ex+0x46b/0x600 [ 531.280341][T11985] _copy_to_user+0x31/0xb0 [ 531.280370][T11985] simple_read_from_buffer+0xe1/0x170 [ 531.280402][T11985] proc_fail_nth_read+0x1be/0x230 [ 531.280434][T11985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.280466][T11985] ? rw_verify_area+0x2ac/0x4e0 [ 531.280498][T11985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.280528][T11985] vfs_read+0x212/0xa80 [ 531.280569][T11985] ? __pfx_vfs_read+0x10/0x10 [ 531.280605][T11985] ? do_sys_openat2+0x14c/0x200 [ 531.280631][T11985] ? raw_setsockopt+0x183/0x12f0 [ 531.280675][T11985] ksys_read+0x156/0x270 [ 531.280711][T11985] ? __pfx_ksys_read+0x10/0x10 [ 531.280751][T11985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.280776][T11985] do_syscall_64+0x15f/0xf80 [ 531.280806][T11985] ? trace_irq_disable+0x3b/0x140 [ 531.280828][T11985] ? clear_bhb_loop+0x40/0x90 [ 531.280858][T11985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.280883][T11985] RIP: 0033:0x7ff72c54d04e [ 531.280905][T11985] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 531.280926][T11985] RSP: 002b:00007ff72a7ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 531.280952][T11985] RAX: ffffffffffffffda RBX: 00007ff72a7de6c0 RCX: 00007ff72c54d04e [ 531.280970][T11985] RDX: 000000000000000f RSI: 00007ff72a7de0a0 RDI: 0000000000000004 [ 531.280985][T11985] RBP: 00007ff72a7de090 R08: 0000000000000000 R09: 0000000000000000 [ 531.281000][T11985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.281014][T11985] R13: 00007ff72c806038 R14: 00007ff72c805fa0 R15: 00007ffed7e2e618 [ 531.281049][T11985] [ 532.259772][T12001] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2236'. [ 532.262987][T11342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.263012][T11342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.404757][T12015] FAULT_INJECTION: forcing a failure. [ 534.404757][T12015] name failslab, interval 1, probability 0, space 0, times 0 [ 534.404800][T12015] CPU: 1 UID: 0 PID: 12015 Comm: syz.4.2241 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 534.404833][T12015] Tainted: [L]=SOFTLOCKUP [ 534.404842][T12015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 534.404857][T12015] Call Trace: [ 534.404867][T12015] [ 534.404877][T12015] dump_stack_lvl+0xe8/0x150 [ 534.404920][T12015] should_fail_ex+0x46b/0x600 [ 534.404952][T12015] should_failslab+0xa8/0x100 [ 534.404978][T12015] kmem_cache_alloc_noprof+0x87/0x680 [ 534.405025][T12015] ? alloc_empty_file+0x5b/0x1d0 [ 534.405060][T12015] alloc_empty_file+0x5b/0x1d0 [ 534.405087][T12015] path_openat+0x11b/0x38a0 [ 534.405132][T12015] ? try_to_take_rt_mutex+0x840/0xb00 [ 534.405156][T12015] ? arch_stack_walk+0xfb/0x150 [ 534.405196][T12015] ? __lock_acquire+0x6b5/0x2cf0 [ 534.405230][T12015] ? __pfx_path_openat+0x10/0x10 [ 534.405265][T12015] ? kasan_save_track+0x4f/0x80 [ 534.405296][T12015] ? kasan_save_track+0x3e/0x80 [ 534.405325][T12015] ? __kasan_slab_alloc+0x6c/0x80 [ 534.405356][T12015] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 534.405398][T12015] ? do_raw_spin_lock+0x12b/0x2f0 [ 534.405431][T12015] do_file_open+0x23e/0x4a0 [ 534.405464][T12015] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 534.405498][T12015] ? __pfx_do_file_open+0x10/0x10 [ 534.405529][T12015] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 534.405577][T12015] ? alloc_fd+0x64e/0x6c0 [ 534.405618][T12015] do_sys_openat2+0x113/0x200 [ 534.405650][T12015] ? __pfx_do_sys_openat2+0x10/0x10 [ 534.405693][T12015] __se_sys_openat2+0x223/0x2d0 [ 534.405732][T12015] ? __pfx___se_sys_openat2+0x10/0x10 [ 534.405774][T12015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.405800][T12015] do_syscall_64+0x15f/0xf80 [ 534.405829][T12015] ? trace_irq_disable+0x3b/0x140 [ 534.405853][T12015] ? clear_bhb_loop+0x40/0x90 [ 534.405882][T12015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.405905][T12015] RIP: 0033:0x7fc3d409c819 [ 534.405928][T12015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.405948][T12015] RSP: 002b:00007fc3d22f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 534.405973][T12015] RAX: ffffffffffffffda RBX: 00007fc3d4315fa0 RCX: 00007fc3d409c819 [ 534.405990][T12015] RDX: 0000200000000240 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 534.406014][T12015] RBP: 00007fc3d22f6090 R08: 0000000000000000 R09: 0000000000000000 [ 534.406030][T12015] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 534.406045][T12015] R13: 00007fc3d4316038 R14: 00007fc3d4315fa0 R15: 00007fff76e5be38 [ 534.406081][T12015] [ 534.927788][ T37] kauditd_printk_skb: 58 callbacks suppressed [ 534.927809][ T37] audit: type=1326 audit(1776587464.335:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.0.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c58c819 code=0x7ffc0000 [ 534.930666][ T37] audit: type=1326 audit(1776587464.335:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.0.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c58c819 code=0x7ffc0000 [ 534.930830][ T37] audit: type=1326 audit(1776587464.335:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.0.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c58c819 code=0x7ffc0000 [ 534.931002][ T37] audit: type=1326 audit(1776587464.335:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.0.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff72c58c582 code=0x7ffc0000 [ 534.931306][ T37] audit: type=1326 audit(1776587464.335:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.0.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff72c58c617 code=0x7ffc0000 [ 534.931959][ T37] audit: type=1326 audit(1776587464.335:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.0.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff72c549511 code=0x7ffc0000 [ 534.966468][ T5886] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 535.000914][ T37] audit: type=1326 audit(1776587464.409:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.0.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7ff72c58c819 code=0x7ffc0000 [ 535.000968][ T37] audit: type=1326 audit(1776587464.409:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.0.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c58c819 code=0x7ffc0000 [ 535.001010][ T37] audit: type=1326 audit(1776587464.409:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.0.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c58c819 code=0x7ffc0000 [ 535.001050][ T37] audit: type=1326 audit(1776587464.335:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.0.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff72c58d609 code=0x7ffc0000 [ 535.148930][ T5886] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 535.148964][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 535.148984][ T5886] usb 6-1: Product: syz [ 535.148999][ T5886] usb 6-1: SerialNumber: syz [ 535.196539][ T5886] usb 6-1: config 0 descriptor?? [ 535.439584][ T5886] usb 6-1: USB disconnect, device number 15 [ 535.485396][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2247'. [ 535.526681][T12040] siw: device registration error -23 [ 535.595112][T12041] bridge1: entered promiscuous mode [ 537.102347][T12065] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2254'. [ 538.781757][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2262'. [ 539.002117][T12086] overlayfs: overlapping lowerdir path [ 539.279834][ T5983] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 539.422388][ T5983] usb 5-1: device descriptor read/64, error -71 [ 539.674121][T12096] overlay: Bad value for 'redirect_dir' [ 539.690644][ T5983] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 539.831829][ T5983] usb 5-1: device descriptor read/64, error -71 [ 539.952904][ T5983] usb usb5-port1: attempt power cycle [ 540.062804][T12108] FAULT_INJECTION: forcing a failure. [ 540.062804][T12108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.062833][T12108] CPU: 1 UID: 0 PID: 12108 Comm: syz.1.2272 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 540.062852][T12108] Tainted: [L]=SOFTLOCKUP [ 540.062858][T12108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 540.062866][T12108] Call Trace: [ 540.062872][T12108] [ 540.062878][T12108] dump_stack_lvl+0xe8/0x150 [ 540.062904][T12108] should_fail_ex+0x46b/0x600 [ 540.062926][T12108] _copy_to_user+0x31/0xb0 [ 540.062944][T12108] simple_read_from_buffer+0xe1/0x170 [ 540.062965][T12108] proc_fail_nth_read+0x1be/0x230 [ 540.062984][T12108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.063003][T12108] ? rw_verify_area+0x2ac/0x4e0 [ 540.063022][T12108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.063040][T12108] vfs_read+0x212/0xa80 [ 540.063063][T12108] ? __pfx_vfs_read+0x10/0x10 [ 540.063084][T12108] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 540.063102][T12108] ? lockdep_hardirqs_on+0x7a/0x110 [ 540.063118][T12108] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 540.063135][T12108] ? mutex_lock_nested+0x152/0x1d0 [ 540.063154][T12108] ? fdget_pos+0x252/0x320 [ 540.063185][T12108] ksys_read+0x156/0x270 [ 540.063205][T12108] ? __pfx_ksys_read+0x10/0x10 [ 540.063229][T12108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.063244][T12108] do_syscall_64+0x15f/0xf80 [ 540.063260][T12108] ? trace_irq_disable+0x3b/0x140 [ 540.063273][T12108] ? clear_bhb_loop+0x40/0x90 [ 540.063289][T12108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.063302][T12108] RIP: 0033:0x7f664926d04e [ 540.063316][T12108] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 540.063328][T12108] RSP: 002b:00007f66474fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.063343][T12108] RAX: ffffffffffffffda RBX: 00007f66474fe6c0 RCX: 00007f664926d04e [ 540.063353][T12108] RDX: 000000000000000f RSI: 00007f66474fe0a0 RDI: 0000000000000005 [ 540.063361][T12108] RBP: 00007f66474fe090 R08: 0000000000000000 R09: 0000000000000000 [ 540.063369][T12108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.063377][T12108] R13: 00007f6649526038 R14: 00007f6649525fa0 R15: 00007fffff14b898 [ 540.063396][T12108] [ 540.084391][T12109] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2270'. [ 540.135127][ T5900] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 540.405978][ T5983] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 540.406817][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 540.409639][ T5900] usb 6-1: config index 0 descriptor too short (expected 117, got 27) [ 540.409671][ T5900] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.409694][ T5900] usb 6-1: config 0 has no interfaces? [ 540.424331][ T5900] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 540.424363][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.424384][ T5900] usb 6-1: Product: syz [ 540.424398][ T5900] usb 6-1: Manufacturer: syz [ 540.424413][ T5900] usb 6-1: SerialNumber: syz [ 540.483629][ T5900] usb 6-1: config 0 descriptor?? [ 540.505362][ T5983] usb 5-1: device descriptor read/8, error -71 [ 540.980392][ T5983] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 541.013778][ T5983] usb 5-1: device descriptor read/8, error -71 [ 541.133898][ T5983] usb usb5-port1: unable to enumerate USB device [ 541.422986][T12137] overlay: Unknown parameter '/file0' [ 541.597440][T12139] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2283'. [ 541.896940][ T5878] usb 6-1: USB disconnect, device number 16 [ 541.970494][ T5886] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 542.134023][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 542.138790][ T5886] usb 4-1: config index 0 descriptor too short (expected 26, got 18) [ 542.138822][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.138840][ T5886] usb 4-1: config 0 has no interfaces? [ 542.174160][ T5886] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 542.174199][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.174224][ T5886] usb 4-1: Product: syz [ 542.174241][ T5886] usb 4-1: Manufacturer: syz [ 542.174258][ T5886] usb 4-1: SerialNumber: syz [ 542.228417][ T5886] usb 4-1: config 0 descriptor?? [ 542.687510][T12158] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2290'. [ 542.992043][T12164] syz.5.2293 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 543.041663][T12166] openvswitch: netlink: Duplicate or invalid key (type 0). [ 543.041708][T12166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.238553][ T5886] usb 4-1: USB disconnect, device number 23 [ 543.424409][T12174] gfs2: gfs2 mount does not exist [ 543.593414][ T860] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 543.917319][ T860] usb 1-1: Using ep0 maxpacket: 16 [ 543.921821][ T860] usb 1-1: config index 0 descriptor too short (expected 117, got 27) [ 543.921853][ T860] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.921875][ T860] usb 1-1: config 0 has no interfaces? [ 543.965975][ T860] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 543.966010][ T860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.966034][ T860] usb 1-1: Product: syz [ 543.966051][ T860] usb 1-1: Manufacturer: syz [ 543.966068][ T860] usb 1-1: SerialNumber: syz [ 544.016471][ T860] usb 1-1: config 0 descriptor?? [ 544.021015][ T1172] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.207414][ T1172] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.207475][ T1172] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.207518][ T1172] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.212450][T12187] FAULT_INJECTION: forcing a failure. [ 544.212450][T12187] name failslab, interval 1, probability 0, space 0, times 0 [ 544.212488][T12187] CPU: 1 UID: 0 PID: 12187 Comm: syz.3.2302 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 544.212518][T12187] Tainted: [L]=SOFTLOCKUP [ 544.212526][T12187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 544.212539][T12187] Call Trace: [ 544.212547][T12187] [ 544.212556][T12187] dump_stack_lvl+0xe8/0x150 [ 544.212594][T12187] should_fail_ex+0x46b/0x600 [ 544.212623][T12187] should_failslab+0xa8/0x100 [ 544.212645][T12187] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 544.212677][T12187] ? trace_kmalloc+0x2a/0xf0 [ 544.212705][T12187] ? page_pool_create_percpu+0x76/0xba0 [ 544.212735][T12187] page_pool_create_percpu+0x76/0xba0 [ 544.212759][T12187] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 544.212796][T12187] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 544.212828][T12187] ? do_raw_spin_lock+0x12b/0x2f0 [ 544.212871][T12187] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 544.212898][T12187] ? lockdep_hardirqs_on+0x7a/0x110 [ 544.212923][T12187] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 544.212948][T12187] ? rt_mutex_slowunlock+0x1cb/0x300 [ 544.212968][T12187] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 544.212992][T12187] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 544.213043][T12187] ? 0xffffffffa02019cc [ 544.213088][T12187] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 544.213119][T12187] ? _copy_from_user+0x94/0xb0 [ 544.213145][T12187] ? bpf_test_init+0x113/0x150 [ 544.213172][T12187] ? xdp_convert_md_to_buff+0x5b/0x330 [ 544.213205][T12187] bpf_prog_test_run_xdp+0x81c/0x1160 [ 544.213251][T12187] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 544.213286][T12187] ? __fget_files+0x2a/0x420 [ 544.213316][T12187] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 544.213347][T12187] bpf_prog_test_run+0x2cd/0x340 [ 544.213374][T12187] __sys_bpf+0x643/0x950 [ 544.213398][T12187] ? __pfx___sys_bpf+0x10/0x10 [ 544.213416][T12187] ? rt_mutex_slowunlock+0x1cb/0x300 [ 544.213452][T12187] ? ksys_write+0x248/0x270 [ 544.213483][T12187] ? __pfx_ksys_write+0x10/0x10 [ 544.213516][T12187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.213539][T12187] __x64_sys_bpf+0x7c/0x90 [ 544.213568][T12187] do_syscall_64+0x15f/0xf80 [ 544.213593][T12187] ? trace_irq_disable+0x3b/0x140 [ 544.213614][T12187] ? clear_bhb_loop+0x40/0x90 [ 544.213640][T12187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.213661][T12187] RIP: 0033:0x7f2b1f00c819 [ 544.213681][T12187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.213700][T12187] RSP: 002b:00007f2b1d25e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 544.213723][T12187] RAX: ffffffffffffffda RBX: 00007f2b1f285fa0 RCX: 00007f2b1f00c819 [ 544.213737][T12187] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 544.213750][T12187] RBP: 00007f2b1d25e090 R08: 0000000000000000 R09: 0000000000000000 [ 544.213763][T12187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.213776][T12187] R13: 00007f2b1f286038 R14: 00007f2b1f285fa0 R15: 00007ffde9f90ed8 [ 544.213807][T12187] [ 544.470554][T12195] FAULT_INJECTION: forcing a failure. [ 544.470554][T12195] name failslab, interval 1, probability 0, space 0, times 0 [ 544.470592][T12195] CPU: 1 UID: 0 PID: 12195 Comm: syz.1.2305 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 544.470621][T12195] Tainted: [L]=SOFTLOCKUP [ 544.470628][T12195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 544.470641][T12195] Call Trace: [ 544.470649][T12195] [ 544.470658][T12195] dump_stack_lvl+0xe8/0x150 [ 544.470695][T12195] should_fail_ex+0x46b/0x600 [ 544.470724][T12195] should_failslab+0xa8/0x100 [ 544.470746][T12195] __kmalloc_noprof+0xdf/0x7b0 [ 544.470776][T12195] ? vb2_core_create_bufs+0x474/0xe30 [ 544.470813][T12195] vb2_core_create_bufs+0x474/0xe30 [ 544.470840][T12195] ? unwind_get_return_address+0x4d/0x90 [ 544.470884][T12195] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 544.470922][T12195] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 544.470957][T12195] vb2_create_bufs+0x593/0xa70 [ 544.470985][T12195] ? kasan_save_track+0x4f/0x80 [ 544.471011][T12195] ? kasan_save_track+0x3e/0x80 [ 544.471045][T12195] ? __pfx_vb2_create_bufs+0x10/0x10 [ 544.471078][T12195] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 544.471113][T12195] vb2_ioctl_create_bufs+0x288/0x3f0 [ 544.471150][T12195] v4l_create_bufs+0x18c/0x290 [ 544.471188][T12195] __video_do_ioctl+0xade/0xca0 [ 544.471219][T12195] ? __pfx___video_do_ioctl+0x10/0x10 [ 544.471255][T12195] video_usercopy+0x876/0x1450 [ 544.471285][T12195] ? __pfx___video_do_ioctl+0x10/0x10 [ 544.471308][T12195] ? __pfx_video_usercopy+0x10/0x10 [ 544.471327][T12195] ? smack_file_ioctl+0x2c2/0x360 [ 544.471370][T12195] ? __fget_files+0x2a/0x420 [ 544.471395][T12195] ? __fget_files+0x3a6/0x420 [ 544.471423][T12195] v4l2_ioctl+0x190/0x1e0 [ 544.471455][T12195] ? __pfx_v4l2_ioctl+0x10/0x10 [ 544.471485][T12195] __se_sys_ioctl+0xff/0x170 [ 544.471516][T12195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.471539][T12195] do_syscall_64+0x15f/0xf80 [ 544.471564][T12195] ? trace_irq_disable+0x3b/0x140 [ 544.471585][T12195] ? clear_bhb_loop+0x40/0x90 [ 544.471611][T12195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.471631][T12195] RIP: 0033:0x7f66492ac819 [ 544.471651][T12195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.471670][T12195] RSP: 002b:00007f66474fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.471692][T12195] RAX: ffffffffffffffda RBX: 00007f6649525fa0 RCX: 00007f66492ac819 [ 544.471708][T12195] RDX: 0000200000000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 544.471722][T12195] RBP: 00007f66474fe090 R08: 0000000000000000 R09: 0000000000000000 [ 544.471735][T12195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.471748][T12195] R13: 00007f6649526038 R14: 00007f6649525fa0 R15: 00007fffff14b898 [ 544.471782][T12195] [ 544.876622][T12198] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2306'. [ 544.877705][T12198] netlink: 'syz.1.2306': attribute type 2 has an invalid length. [ 544.909449][T12198] !Мо: entered promiscuous mode [ 544.988472][T12199] netlink: 'syz.1.2306': attribute type 2 has an invalid length. [ 544.988591][T12199] !Мо: left promiscuous mode [ 545.631091][ T5899] usb 1-1: USB disconnect, device number 18 [ 546.389733][ T860] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 546.531070][ T860] usb 4-1: device descriptor read/64, error -71 [ 546.789519][ T860] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 546.899552][ T5886] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 546.930311][ T860] usb 4-1: device descriptor read/64, error -71 [ 547.055144][ T860] usb usb4-port1: attempt power cycle [ 547.098738][ T5886] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 547.098774][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.098796][ T5886] usb 6-1: config 0 has no interface number 0 [ 547.134337][ T5886] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 547.134373][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.134398][ T5886] usb 6-1: Product: syz [ 547.134416][ T5886] usb 6-1: Manufacturer: syz [ 547.134433][ T5886] usb 6-1: SerialNumber: syz [ 547.179047][ T5886] usb 6-1: config 0 descriptor?? [ 547.240284][ T5886] uvcvideo 6-1:0.64: probe with driver uvcvideo failed with error -22 [ 547.417963][ T860] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 547.440527][ T860] usb 4-1: device descriptor read/8, error -71 [ 547.491750][ T5899] usb 6-1: USB disconnect, device number 17 [ 547.699828][ T860] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 547.723739][ T860] usb 4-1: device descriptor read/8, error -71 [ 547.841128][ T860] usb usb4-port1: unable to enumerate USB device [ 547.851545][ T5983] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 548.014026][ T5983] usb 1-1: Using ep0 maxpacket: 16 [ 548.016913][T12253] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2325'. [ 548.017473][ T5983] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.017516][ T5983] usb 1-1: config 0 interface 0 has no altsetting 0 [ 548.023875][ T5983] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 548.023911][ T5983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.023935][ T5983] usb 1-1: Product: syz [ 548.023950][ T5983] usb 1-1: Manufacturer: syz [ 548.023967][ T5983] usb 1-1: SerialNumber: syz [ 548.133323][ T5983] usb 1-1: config 0 descriptor?? [ 548.539486][T12262] FAULT_INJECTION: forcing a failure. [ 548.539486][T12262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.539551][T12262] CPU: 0 UID: 0 PID: 12262 Comm: syz.5.2328 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 548.539584][T12262] Tainted: [L]=SOFTLOCKUP [ 548.539593][T12262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 548.539608][T12262] Call Trace: [ 548.539617][T12262] [ 548.539628][T12262] dump_stack_lvl+0xe8/0x150 [ 548.539671][T12262] should_fail_ex+0x46b/0x600 [ 548.539703][T12262] _copy_from_user+0x2d/0xb0 [ 548.539735][T12262] do_sys_poll+0x2a0/0xf50 [ 548.539777][T12262] ? __lock_acquire+0x6b5/0x2cf0 [ 548.539804][T12262] ? __pfx_do_sys_poll+0x10/0x10 [ 548.539844][T12262] ? is_bpf_text_address+0x292/0x2b0 [ 548.539871][T12262] ? is_bpf_text_address+0x26/0x2b0 [ 548.540002][T12262] ? set_user_sigmask+0xcd/0x1c0 [ 548.540038][T12262] ? __pfx_set_user_sigmask+0x10/0x10 [ 548.540069][T12262] ? rt_mutex_slowunlock+0x1cb/0x300 [ 548.540094][T12262] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 548.540125][T12262] __se_sys_ppoll+0x209/0x2b0 [ 548.540153][T12262] ? fput+0xa0/0xd0 [ 548.540190][T12262] ? __pfx___se_sys_ppoll+0x10/0x10 [ 548.540216][T12262] ? __pfx_ksys_write+0x10/0x10 [ 548.540257][T12262] ? __x64_sys_ppoll+0x20/0xc0 [ 548.540283][T12262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.540310][T12262] do_syscall_64+0x15f/0xf80 [ 548.540339][T12262] ? trace_irq_disable+0x3b/0x140 [ 548.540363][T12262] ? clear_bhb_loop+0x40/0x90 [ 548.540391][T12262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.540415][T12262] RIP: 0033:0x7ff5114ec819 [ 548.540438][T12262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.540459][T12262] RSP: 002b:00007ff50f704028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 548.540485][T12262] RAX: ffffffffffffffda RBX: 00007ff511766180 RCX: 00007ff5114ec819 [ 548.540502][T12262] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 548.540518][T12262] RBP: 00007ff50f704090 R08: 0000000000000000 R09: 0000000000000000 [ 548.540533][T12262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.540547][T12262] R13: 00007ff511766218 R14: 00007ff511766180 R15: 00007ffc86fedb78 [ 548.540583][T12262] [ 549.662663][T12275] FAULT_INJECTION: forcing a failure. [ 549.662663][T12275] name failslab, interval 1, probability 0, space 0, times 0 [ 549.662728][T12275] CPU: 1 UID: 0 PID: 12275 Comm: syz.5.2332 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 549.662762][T12275] Tainted: [L]=SOFTLOCKUP [ 549.662771][T12275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 549.662785][T12275] Call Trace: [ 549.662796][T12275] [ 549.662805][T12275] dump_stack_lvl+0xe8/0x150 [ 549.662847][T12275] should_fail_ex+0x46b/0x600 [ 549.662890][T12275] should_failslab+0xa8/0x100 [ 549.662916][T12275] __kmalloc_noprof+0xdf/0x7b0 [ 549.662950][T12275] ? kfree+0x4d/0x6c0 [ 549.662980][T12275] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 549.663020][T12275] tomoyo_realpath_from_path+0xe3/0x5d0 [ 549.663061][T12275] tomoyo_check_open_permission+0x229/0x470 [ 549.663097][T12275] ? tomoyo_check_open_permission+0x1d3/0x470 [ 549.663130][T12275] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 549.663167][T12275] ? __asan_memset+0x22/0x50 [ 549.663227][T12275] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 549.663257][T12275] ? tomoyo_file_open+0x167/0x220 [ 549.663290][T12275] security_file_open+0xa9/0x240 [ 549.663327][T12275] do_dentry_open+0x4c0/0x13e0 [ 549.663361][T12275] ? vfs_open+0x31/0x350 [ 549.663392][T12275] vfs_open+0x3b/0x350 [ 549.663417][T12275] ? path_openat+0x2e2b/0x38a0 [ 549.663454][T12275] path_openat+0x2e43/0x38a0 [ 549.663522][T12275] ? __pfx_path_openat+0x10/0x10 [ 549.663561][T12275] ? kasan_save_track+0x4f/0x80 [ 549.663590][T12275] ? kasan_save_track+0x3e/0x80 [ 549.663620][T12275] ? __kasan_slab_alloc+0x6c/0x80 [ 549.663673][T12275] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 549.663716][T12275] ? do_raw_spin_lock+0x12b/0x2f0 [ 549.663753][T12275] do_file_open+0x23e/0x4a0 [ 549.663786][T12275] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 549.663821][T12275] ? __pfx_do_file_open+0x10/0x10 [ 549.663852][T12275] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 549.663914][T12275] ? alloc_fd+0x64e/0x6c0 [ 549.663954][T12275] do_sys_openat2+0x113/0x200 [ 549.663987][T12275] ? __pfx_do_sys_openat2+0x10/0x10 [ 549.664031][T12275] __se_sys_openat2+0x223/0x2d0 [ 549.664064][T12275] ? __pfx___se_sys_openat2+0x10/0x10 [ 549.664107][T12275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.664133][T12275] do_syscall_64+0x15f/0xf80 [ 549.664162][T12275] ? trace_irq_disable+0x3b/0x140 [ 549.664186][T12275] ? clear_bhb_loop+0x40/0x90 [ 549.664216][T12275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.664240][T12275] RIP: 0033:0x7ff5114ec819 [ 549.664264][T12275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.664285][T12275] RSP: 002b:00007ff50f746028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 549.664310][T12275] RAX: ffffffffffffffda RBX: 00007ff511765fa0 RCX: 00007ff5114ec819 [ 549.664329][T12275] RDX: 0000200000000080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 549.664346][T12275] RBP: 00007ff50f746090 R08: 0000000000000000 R09: 0000000000000000 [ 549.664361][T12275] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 549.664377][T12275] R13: 00007ff511766038 R14: 00007ff511765fa0 R15: 00007ffc86fedb78 [ 549.664413][T12275] [ 549.674402][T12275] ERROR: Out of memory at tomoyo_realpath_from_path. [ 550.041558][ T5899] usb 1-1: USB disconnect, device number 19 [ 550.292097][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2337'. [ 551.258416][T12299] FAULT_INJECTION: forcing a failure. [ 551.258416][T12299] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 551.258465][T12299] CPU: 0 UID: 0 PID: 12299 Comm: syz.1.2342 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 551.258499][T12299] Tainted: [L]=SOFTLOCKUP [ 551.258508][T12299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 551.258523][T12299] Call Trace: [ 551.258533][T12299] [ 551.258543][T12299] dump_stack_lvl+0xe8/0x150 [ 551.258588][T12299] should_fail_ex+0x46b/0x600 [ 551.258620][T12299] prepare_alloc_pages+0x22a/0x6b0 [ 551.258656][T12299] __alloc_frozen_pages_noprof+0x12f/0x380 [ 551.258687][T12299] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 551.258719][T12299] ? __pfx_policy_nodemask+0x10/0x10 [ 551.258741][T12299] ? filemap_get_entry+0x378/0x3f0 [ 551.258775][T12299] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 551.258801][T12299] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 551.258821][T12299] ? __pfx_filemap_get_entry+0x10/0x10 [ 551.258852][T12299] alloc_pages_mpol+0xd1/0x380 [ 551.258881][T12299] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 551.258908][T12299] shmem_get_folio_gfp+0x644/0x1a80 [ 551.258970][T12299] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 551.259003][T12299] ? __lock_acquire+0x6b5/0x2cf0 [ 551.259049][T12299] shmem_fault+0x170/0x380 [ 551.259078][T12299] ? do_pte_missing+0x12b5/0x2950 [ 551.259105][T12299] __do_fault+0x138/0x2a0 [ 551.259129][T12299] ? do_pte_missing+0x12b5/0x2950 [ 551.259155][T12299] do_pte_missing+0x179c/0x2950 [ 551.259191][T12299] ? handle_mm_fault+0xe7/0x13c0 [ 551.259230][T12299] handle_mm_fault+0xd0a/0x13c0 [ 551.259273][T12299] ? handle_mm_fault+0xe7/0x13c0 [ 551.259311][T12299] ? __pfx_handle_mm_fault+0x10/0x10 [ 551.259346][T12299] ? follow_page_pte+0xbc8/0xe40 [ 551.259391][T12299] ? __pfx_follow_page_pte+0x10/0x10 [ 551.259438][T12299] __get_user_pages+0x168f/0x2570 [ 551.259507][T12299] populate_vma_page_range+0x2be/0x3c0 [ 551.259541][T12299] ? __pfx_populate_vma_page_range+0x10/0x10 [ 551.259569][T12299] ? lockdep_hardirqs_on+0x7a/0x110 [ 551.259599][T12299] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 551.259635][T12299] __mm_populate+0x25f/0x390 [ 551.259669][T12299] ? __pfx___mm_populate+0x10/0x10 [ 551.259701][T12299] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 551.259730][T12299] ? lockdep_hardirqs_on+0x7a/0x110 [ 551.259758][T12299] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 551.259790][T12299] do_mlock+0x646/0x750 [ 551.259832][T12299] ? __pfx_do_mlock+0x10/0x10 [ 551.259862][T12299] ? fput+0xa0/0xd0 [ 551.259890][T12299] ? ksys_write+0x248/0x270 [ 551.259927][T12299] ? __pfx_ksys_write+0x10/0x10 [ 551.259967][T12299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.259993][T12299] __x64_sys_mlock+0x60/0x70 [ 551.260031][T12299] do_syscall_64+0x15f/0xf80 [ 551.260058][T12299] ? trace_irq_disable+0x3b/0x140 [ 551.260081][T12299] ? clear_bhb_loop+0x40/0x90 [ 551.260109][T12299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.260132][T12299] RIP: 0033:0x7f66492ac819 [ 551.260155][T12299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.260174][T12299] RSP: 002b:00007f66474dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 551.260201][T12299] RAX: ffffffffffffffda RBX: 00007f6649526090 RCX: 00007f66492ac819 [ 551.260219][T12299] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 551.260236][T12299] RBP: 00007f66474dd090 R08: 0000000000000000 R09: 0000000000000000 [ 551.260252][T12299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.260267][T12299] R13: 00007f6649526128 R14: 00007f6649526090 R15: 00007fffff14b898 [ 551.260303][T12299] [ 556.007266][T12333] binder: 12332:12333 ioctl c0046209 0 returned -22 [ 557.951217][T12350] FAULT_INJECTION: forcing a failure. [ 557.951217][T12350] name failslab, interval 1, probability 0, space 0, times 0 [ 557.951256][T12350] CPU: 0 UID: 0 PID: 12350 Comm: syz.0.2357 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 557.951296][T12350] Tainted: [L]=SOFTLOCKUP [ 557.951305][T12350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 557.951318][T12350] Call Trace: [ 557.951326][T12350] [ 557.951335][T12350] dump_stack_lvl+0xe8/0x150 [ 557.951369][T12350] should_fail_ex+0x46b/0x600 [ 557.951394][T12350] should_failslab+0xa8/0x100 [ 557.951414][T12350] __kmalloc_noprof+0xdf/0x7b0 [ 557.951440][T12350] ? kfree+0x4d/0x6c0 [ 557.951462][T12350] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 557.951487][T12350] tomoyo_realpath_from_path+0xe3/0x5d0 [ 557.951508][T12350] ? tomoyo_domain+0xd8/0x130 [ 557.951533][T12350] ? tomoyo_path_number_perm+0x219/0x630 [ 557.951559][T12350] tomoyo_path_number_perm+0x246/0x630 [ 557.951589][T12350] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 557.951614][T12350] ? __lock_acquire+0x6b5/0x2cf0 [ 557.951639][T12350] ? do_raw_spin_lock+0x12b/0x2f0 [ 557.951692][T12350] ? __fget_files+0x2a/0x420 [ 557.951721][T12350] ? __fget_files+0x2a/0x420 [ 557.951745][T12350] ? __fget_files+0x3a6/0x420 [ 557.951766][T12350] ? __fget_files+0x2a/0x420 [ 557.951794][T12350] security_file_ioctl+0xc3/0x2a0 [ 557.951824][T12350] __se_sys_ioctl+0x47/0x170 [ 557.951852][T12350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.951877][T12350] do_syscall_64+0x15f/0xf80 [ 557.951901][T12350] ? trace_irq_disable+0x3b/0x140 [ 557.951919][T12350] ? clear_bhb_loop+0x40/0x90 [ 557.951942][T12350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.951960][T12350] RIP: 0033:0x7ff72c58c819 [ 557.951979][T12350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.951996][T12350] RSP: 002b:00007ff72a7de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.952017][T12350] RAX: ffffffffffffffda RBX: 00007ff72c805fa0 RCX: 00007ff72c58c819 [ 557.952040][T12350] RDX: 0000000000000003 RSI: 0000000000006f2d RDI: 0000000000000003 [ 557.952052][T12350] RBP: 00007ff72a7de090 R08: 0000000000000000 R09: 0000000000000000 [ 557.952064][T12350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.952075][T12350] R13: 00007ff72c806038 R14: 00007ff72c805fa0 R15: 00007ffed7e2e618 [ 557.952106][T12350] [ 557.975769][T12350] ERROR: Out of memory at tomoyo_realpath_from_path. [ 558.389728][ T5878] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 558.718442][ T5878] usb 5-1: config 0 has no interfaces? [ 558.749313][ T5878] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 558.749349][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.749371][ T5878] usb 5-1: Product: syz [ 558.749387][ T5878] usb 5-1: Manufacturer: syz [ 558.749404][ T5878] usb 5-1: SerialNumber: syz [ 558.826751][ T5878] usb 5-1: config 0 descriptor?? [ 559.089815][T12348] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2355'. [ 561.178706][ T5886] usb 5-1: USB disconnect, device number 44 [ 562.815407][T12395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2371'. [ 564.428186][T12307] ================================================================== [ 564.428205][T12307] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 564.428241][T12307] Read of size 8 at addr ffffc9000ef21008 by task kworker/u9:0/12307 [ 564.428262][T12307] [ 564.428280][T12307] CPU: 1 UID: 0 PID: 12307 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 564.428314][T12307] Tainted: [L]=SOFTLOCKUP [ 564.428323][T12307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 564.428339][T12307] Workqueue: hci0 hci_rx_work [ 564.428372][T12307] Call Trace: [ 564.428383][T12307] [ 564.428393][T12307] dump_stack_lvl+0xe8/0x150 [ 564.428428][T12307] print_address_description+0x55/0x1e0 [ 564.428462][T12307] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 564.428486][T12307] print_report+0x58/0x70 [ 564.428516][T12307] kasan_report+0x117/0x150 [ 564.428550][T12307] ? rt_spin_lock+0x20e/0x400 [ 564.428574][T12307] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 564.428612][T12307] __list_del_entry_valid_or_report+0xb5/0x190 [ 564.428637][T12307] kcov_remote_start+0x2af/0x710 [ 564.428673][T12307] hci_rx_work+0x10f/0x1040 [ 564.428708][T12307] ? process_scheduled_works+0xa70/0x1860 [ 564.428743][T12307] process_scheduled_works+0xb5d/0x1860 [ 564.428791][T12307] ? __pfx_process_scheduled_works+0x10/0x10 [ 564.428828][T12307] ? assign_work+0x3d5/0x5e0 [ 564.428862][T12307] worker_thread+0xa53/0xfc0 [ 564.428896][T12307] kthread+0x388/0x470 [ 564.428922][T12307] ? __pfx_worker_thread+0x10/0x10 [ 564.428943][T12307] ? __pfx_kthread+0x10/0x10 [ 564.428970][T12307] ret_from_fork+0x514/0xb70 [ 564.429005][T12307] ? __pfx_ret_from_fork+0x10/0x10 [ 564.429040][T12307] ? __switch_to+0xc79/0x1410 [ 564.429072][T12307] ? __pfx_kthread+0x10/0x10 [ 564.429098][T12307] ret_from_fork_asm+0x1a/0x30 [ 564.429130][T12307] [ 564.429140][T12307] [ 564.429146][T12307] The buggy address belongs to a vmalloc virtual mapping [ 564.429167][T12307] Memory state around the buggy address: [ 564.429180][T12307] ffffc9000ef20f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 564.429196][T12307] ffffc9000ef20f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 564.429212][T12307] >ffffc9000ef21000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 564.429223][T12307] ^ [ 564.429236][T12307] ffffc9000ef21080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 564.429251][T12307] ffffc9000ef21100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 564.429264][T12307] ================================================================== [ 564.429279][T12307] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 564.429299][T12307] CPU: 1 UID: 0 PID: 12307 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 564.429329][T12307] Tainted: [L]=SOFTLOCKUP [ 564.429339][T12307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 564.429354][T12307] Workqueue: hci0 hci_rx_work [ 564.429381][T12307] Call Trace: [ 564.429391][T12307] [ 564.429400][T12307] vpanic+0x56c/0xa60 [ 564.429425][T12307] ? __pfx_vpanic+0x10/0x10 [ 564.429453][T12307] panic+0xc5/0xd0 [ 564.429474][T12307] ? __pfx_panic+0x10/0x10 [ 564.429497][T12307] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 564.429525][T12307] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 564.429549][T12307] check_panic_on_warn+0x89/0xb0 [ 564.429577][T12307] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 564.429608][T12307] end_report+0x73/0x170 [ 564.429642][T12307] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 564.429664][T12307] kasan_report+0x128/0x150 [ 564.429697][T12307] ? rt_spin_lock+0x20e/0x400 [ 564.429720][T12307] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 564.429747][T12307] __list_del_entry_valid_or_report+0xb5/0x190 [ 564.429772][T12307] kcov_remote_start+0x2af/0x710 [ 564.429807][T12307] hci_rx_work+0x10f/0x1040 [ 564.429841][T12307] ? process_scheduled_works+0xa70/0x1860 [ 564.429874][T12307] process_scheduled_works+0xb5d/0x1860 [ 564.429922][T12307] ? __pfx_process_scheduled_works+0x10/0x10 [ 564.429959][T12307] ? assign_work+0x3d5/0x5e0 [ 564.429993][T12307] worker_thread+0xa53/0xfc0 [ 564.430026][T12307] kthread+0x388/0x470 [ 564.430051][T12307] ? __pfx_worker_thread+0x10/0x10 [ 564.430072][T12307] ? __pfx_kthread+0x10/0x10 [ 564.430098][T12307] ret_from_fork+0x514/0xb70 [ 564.430134][T12307] ? __pfx_ret_from_fork+0x10/0x10 [ 564.430169][T12307] ? __switch_to+0xc79/0x1410 [ 564.430199][T12307] ? __pfx_kthread+0x10/0x10 [ 564.430226][T12307] ret_from_fork_asm+0x1a/0x30 [ 564.430258][T12307] [ 564.430974][T12307] Kernel Offset: disabled