last executing test programs: 12.143017675s ago: executing program 4 (id=4172): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r2 = syz_open_dev$video(&(0x7f0000000440), 0x37ad5285, 0x12b043) ioctl$VIDIOC_S_FMT(r2, 0xc0d05640, &(0x7f0000000340)={0x9, @vbi={0x7, 0x5, 0x33565348, 0x34363248, [0x7fffffff, 0xfffd], [0xa, 0x3], 0x1}}) sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_mark(0xffffffffffffffff, 0x80, 0x68000020, 0xffffffffffffffff, 0x0) (async) fanotify_mark(0xffffffffffffffff, 0x80, 0x68000020, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000200081dc000001000300000002000000000000031f0000000500160004000000080018004e054e24"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x31b1147df207d541}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x1, 0xa, 0x3, 0x0, 0x0, {0x8, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x15, 0x6, "2322d4843385f2f3954f15eeb8bde64d6d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) (async) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x31b1147df207d541}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x1, 0xa, 0x3, 0x0, 0x0, {0x8, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x15, 0x6, "2322d4843385f2f3954f15eeb8bde64d6d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="3c00000010003904ffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="01980000131300001c0012800900010069706970000000000c00028008000300ac"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="3c00000010003904ffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="01980000131300001c0012800900010069706970000000000c00028008000300ac"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x0, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_HANDLE={0x0, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x0, 0x7, 0x1, 0x0, 0x1f}, @NFTA_SET_TIMEOUT={0x0, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0x0, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT, @NFTA_SET_POLICY={0x0, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x0, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x0, 0xc, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x0, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x0, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x48c0}, 0x8000) 10.739852745s ago: executing program 4 (id=4180): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002400)={0x2020}, 0x2020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa, 0x10}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x48800}, 0x80004) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0xee}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0xfff}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x6c2b}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 10.457998649s ago: executing program 4 (id=4185): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents64(r0, &(0x7f00000005c0)=""/38, 0x26) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x66, 0x2}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x2}) 10.021889985s ago: executing program 4 (id=4191): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)="d1", 0x1}], 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0xa4}}, 0x20050800) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800) preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000200)=""/75, 0x4b}], 0x1, 0x0, 0x6) syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 9.377674068s ago: executing program 4 (id=4199): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_io_uring_setup(0x29c, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x5}, 0x2) syz_open_dev$radio(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r5, 0x0, 0x7}, 0x38) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0xfffff73d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}]}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x9}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x3, 0xd, 0xff, 0x0, 0x2, 0x7}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4c, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xa}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x1}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x7}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x9}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x7}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x3}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x4}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x14c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4880}, 0x4) 8.569842974s ago: executing program 2 (id=4205): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x3) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0xfffffffd) r4 = socket(0xa, 0x5, 0x0) listen(r4, 0x100) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x100}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004) listen(0xffffffffffffffff, 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0xfff) r7 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) 6.12989771s ago: executing program 4 (id=4218): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="e6e0", 0x2}], 0x1}}], 0x1, 0x810) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) 5.483390397s ago: executing program 32 (id=4218): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="e6e0", 0x2}], 0x1}}], 0x1, 0x810) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) 5.449435752s ago: executing program 2 (id=4221): sendmsg(0xffffffffffffffff, 0x0, 0x4000000) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x0, 0x1}, @fda={0x66646185, 0x4, 0x10000000000, 0x40}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x38}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 5.23788263s ago: executing program 2 (id=4223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x40, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x51, 0x0, 0x0}, &(0x7f0000000100)=0x3e) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x2, 0x121040) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021207c109050c04400006030f07059acb"], 0x0) 5.231890081s ago: executing program 1 (id=4225): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x1b0, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x78, 0x1, [@m_simple={0x74, 0x18, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '\t\x00\x00\x00\x00'}]}, {0x39, 0x6, "c92acebef543cf5eac95ff99fd6f0f8ca3945cf1e27303fef4d7edee9dc07b8c204234f1518f815a1e6f9900be2053c30ee7852384"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x124, 0x1, [@m_simple={0xf4, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_DATA={0xa, 0x3, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @TCA_DEF_DATA={0xd, 0x3, 'trans=fd,'}]}, {0x9d, 0x6, "3ac47d8f66b9ada606aa60a7fc99c95c9fbb58402dd443e92602f7994c557e40094500a136bb53cc323abe8e9a032feb3b1811b3f9149f6f05ff436ae121782b9f13ed2deb3fee8a17863c1d88b38005a4604a93ebbc213530b8e07f71d1175d1580cb57e68478f9edf7f8e766c01a7ba01dde9f5efc04e3eb55e8d86d594f207de74400f37d97ac2edd9679a28a6d5d37c8f9ba5b04948e64"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x2c, 0x17, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) socket(0x10, 0x803, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4a23, @local}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) epoll_create(0x5) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r1, &(0x7f00000007c0)={0x1, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000c40)={0x2, 0x0, {&(0x7f0000000340)=""/85, 0x55, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 5.001713024s ago: executing program 1 (id=4227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a0000000000000001000006"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x1, 0x8}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000020800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000050006407d0000001400000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @match={{}, @void}}]}]}]}, 0xffffffffffffff04}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000010a0101000000000000000005000005090001007300200000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x400c080}, 0x20004080) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@local, @in=@multicast2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}}, [@sec_ctx={0xc, 0x8, {0x1}}, @mark={0xc, 0x15, {0x0, 0xfffffffd}}]}, 0xd8}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00300000088006afb0a0002000a0ada1b40d805001100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) r7 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x43, 0x0, 0x29) 4.574397051s ago: executing program 1 (id=4230): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2020) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x2a0, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x51}}}}, [@NL80211_ATTR_IE={0x265, 0x2a, [@cf={0x4, 0x6, {0x3, 0x0, 0x8, 0x1000}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0xb, @device_b, 0xb17, @value=@device_b, 0x3, 0xf9, @device_b, 0x400}}, @sec_chan_ofs={0x3e, 0x1}, @peer_mgmt={0x75, 0x14, {0x0, 0x3, @void, @void, @val="3f65342555d25586ccf233c85c3c8500"}}, @ht={0x2d, 0x1a, {0x1000, 0x3, 0x0, 0x0, {0x4d5, 0x3, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x80000000, 0x8}}, @measure_req={0x26, 0x65, {0x4, 0x0, 0x7, "fce3ece85d03d5834b99209121ef879f578a0ed3adeccdb067bc3f9de963380254bb560a87e8c7adb6a0c4001dd62f7d8425c86bc1d37509f3bb77c3a6c8db2d2918a20e25e2fa31c9afe68f1e90da2b0fdd1d6824947788ac1cf244aeaa91f5f59e"}}, @fast_bss_trans={0x37, 0x83, {0x1, 0x2, "33a67b2c3c3ce3b1b8cf35b90cd2f24f", "da09cbf34b011dae9ece33f94940e3cc6f6d1e2183e3213d09fee5983d688e45", "6255eaa87892184921f53f7a65a9efb83b7bec947e151b5a27b842ce028e6326", [{0x2, 0x1b, "adf0802668b2e0fa189f1742438bd17afdae1c7e35a417e87ff8c3"}, {0x1, 0x12, "4891fd40ed8330594ad7033b76b2946bbfd0"}]}}, @supported_rates={0x1, 0x7, [{0x6c}, {0x12, 0x1}, {0x12, 0x1}, {0x6c}, {0x30}, {0x12, 0x1}, {0x30, 0x1}]}, @channel_switch={0x25, 0x3, {0x0, 0x74, 0xf}}, @measure_req={0x26, 0x101, {0x9, 0xd, 0xef, "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"}}]}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x8000}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r2, 0x215eb000) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$XFS_IOC_FREE_EOFBLOCKS(r4, 0x8080583a, &(0x7f0000000180)={0xffffffff, 0x8000, 0x524, 0x5, 0x8001, 0x0, 0x4}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0xffff}]}) ioctl$SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f0000000080)) socket(0x14, 0x2, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001400030532bd7000fedbdf25021f00ff", @ANYRES32=r7, @ANYBLOB="08000200e0000002080008"], 0x3c}, 0x1, 0x0, 0x0, 0x2000e081}, 0x40400c2) 3.581650108s ago: executing program 2 (id=4238): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f0", 0x44}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb", 0x61}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135", 0x21}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3c", 0x28}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/75, 0x4b}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x0, 0x4, 0x2c, 0x4e1, 0x4, 0x8}) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd0, &(0x7f0000000000)=0xa4, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.115835723s ago: executing program 2 (id=4242): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x3) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0xfffffffd) r4 = socket(0xa, 0x5, 0x0) listen(r4, 0x100) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x100}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004) listen(0xffffffffffffffff, 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0xfff) r7 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca", 0x24}], 0x1) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) 2.781962174s ago: executing program 1 (id=4245): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) r3 = socket(0x1, 0x5, 0x0) close(r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x2385, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) utimensat(r5, 0x0, &(0x7f0000000100)={{0x0, 0x3fffffff}}, 0x0) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) epoll_create1(0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x2, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xdff9, 0xf, 0x2, 0x80, 0x2, 0x3, 0x80000000, 0x20000007, 0x4b, 0x6, 0x5d, 0x9, 0x5, 0x2, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x1, 0x7, 0x0, 0xfffffffe, 0x24, 0xfffffff7, 0x5, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x8000, 0x80000000, 0x242, 0x3, 0xe, 0x8, 0x80008071, 0x0, 0x17, 0x7, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x0, 0x4, 0x2, 0x403, 0x7d, 0x0, 0x8, 0x6, 0x4000008, 0x7, 0x1, 0x40], [0x5, 0x9, 0x8000012f, 0x2008006, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x12c0, 0x6c7, 0x9, 0xfffffffb, 0x3, 0x1, 0x0, 0x5, 0x2, 0xe, 0x10, 0x78, 0xea4, 0x0, 0x7, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xc, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x5, 0xf8, 0xa, 0x6, 0x47, 0x7ffc, 0x1, 0xfe000000, 0xfffd, 0x7, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x0, 0x3, 0x3, 0x81, 0x737, 0x42, 0x7], [0x7, 0x408, 0x5, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x12e, 0x1ef, 0x5, 0x8, 0x86, 0x800, 0x303f, 0x7fffffff, 0x8000, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x0, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x5ff, 0x12b, 0x7f, 0x1, 0x8, 0x4, 0x5, 0x1c, 0x120000, 0x4, 0xa006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x3d, 0x2, 0x5f, 0x5, 0x3, 0x0, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x4, 0x8001, 0x5, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x2, 0x5, 0x5, 0x8, 0x30b1d692, 0xa1f, 0xf40, 0xe59b, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x10000, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x956, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 2.325408216s ago: executing program 0 (id=4251): ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x5) r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffff0000000}) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000040)=0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000080)={0x0, 0x100, 0x3318}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000004c0)={0x5, &(0x7f0000000480)=[{0x2, 0x7b, 0x2, 0x7}, {0x918, 0x3, 0x9, 0x9}, {0x8, 0x2, 0x4, 0xaf6b952}, {0x10, 0x5, 0xfa, 0x2b80000}, {0x9, 0x8, 0x8, 0x6}]}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e21, 0x755, @loopback, 0xc4}, 0x1c) r4 = syz_open_dev$vcsn(&(0x7f0000000540), 0x5, 0xf5aa486963e727c9) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000580)={0x4, [0x0, 0x0, 0x0, 0x0]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000600)={0x7, &(0x7f00000005c0)=[{0x81, 0x1b, 0x7f, 0x7}, {0x200, 0xc8, 0x2, 0x1}, {0x0, 0x1, 0x1, 0x2}, {0x0, 0x81, 0x2, 0x1}, {0x1, 0xf7, 0x5a}, {0x8001, 0xfb, 0x8, 0x100}, {0x1, 0x4, 0x0, 0x589a}]}) r6 = fcntl$dupfd(r5, 0x406, r4) write$6lowpan_enable(r6, &(0x7f0000000640)='1', 0x1) ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000680)=0x1) ioctl$FIBMAP(r2, 0x1, &(0x7f00000006c0)=0x8a66) r7 = syz_open_dev$ndb(&(0x7f0000000700), 0x0, 0x311580) fgetxattr(r7, &(0x7f0000000740)=@random={'btrfs.', '\x00'}, &(0x7f0000000780)=""/49, 0x31) read$alg(r4, &(0x7f00000007c0)=""/18, 0x12) connect$pppl2tp(r6, &(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x8, 0x0}}, 0x2, 0x4, 0x3, 0x4}}, 0x2e) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000840)={@private=0xa010102, 0x0, 0x0, 0x10, 0x0, [{@initdev}]}}) r8 = syz_open_dev$ndb(&(0x7f00000008c0), 0x0, 0x103000) ioctl$BLKFRAGET(r8, 0x1265, &(0x7f0000000900)) read(r7, &(0x7f0000000940)=""/191, 0xbf) sendmmsg$alg(r6, &(0x7f0000005e40)=[{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000a00)="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", 0x1000}], 0x1, &(0x7f0000001a40)=[@iv={0x30, 0x117, 0x2, 0x17, "43c116954545b75e47817f7e1a7907324b24fce45f1b52"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x60, 0x1}, {0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)="36d6c52fedfbb22361f36fa71d998ae0262488ddb3e782188b7635bfd3fe910c56bed1db9dd0f29b49acf884e1d390a8b0d36728b7380233d13b065ce9ce3c9723999243b01922991daadcae4da6e8db5daa8dcf4f5336f1e9464464608b8efd37e4f3c8145bda82e3ad4e5b319898b6ef7fec267d5adea598a48d38d03e82ee5ed9519d13366a752b56ac2c1c1354a8b7702bfe72ed97d50321dcfaafe4a8e0699b6c4b0fe15e3e6f56a1b68385ae5c8ac1dccbb0c09a867cb7de7926be6e4aec96", 0xc2}], 0x1, &(0x7f0000001c00)=[@op={0x18}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0xd0, 0x117, 0x2, 0xb5, "082ccd1b1f8e62d99a33eb3b325dd4aa6af6f8803fb35f2b964d009238d787710657ea9b87f24ab830fa145d04f4aaf57979632f28989dd101ba0391dec395e5b1843b3d270157d2b7cbb792e650d9bfb1c449c95c03c50de802a11cf8d5c326d4d5f0f1ac2381872531c339d0b5f406232755f459428560564fd2549e3ab2ab2dc1d43a21506d732c7bb3235b7523d297aba84734989155f106d4481609f86e7eb9e70b5d282825325064d4d88d6ef7a92307f18d"}], 0x118, 0x8000}, {0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001d40)="4853206a84ada29fd9498bc492f4bbff0e1c96b6cab4a8c76f0a020a75c66fec1f516d786d7669e2528e8865e056c1", 0x2f}, {&(0x7f0000001d80)="630ad0d202b32840bd5ef6da7838aa87eed7e8028a9a8fd2a9de24895fe07d8c89f16da5803de739298e5791a4d396d7", 0x30}], 0x2, 0x0, 0x0, 0x10008000}, {0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000001e00)="b28101d706b9c53dd9495a80608b978cf4189d8a4414535b1b56981f925fcfd5a7666e05f77ba711de824328620ad4671cd1a786f028318cf15a0d", 0x3b}, {&(0x7f0000001e40)="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", 0x1000}, {&(0x7f0000002e40)="7c765e7c9f83d40ba7d09ed84735c859e0e49674e3ac5d619b78b065607d3d665116dd61356fef6657ce87acea41a90a0a78edf16bd00c993a657980ebef74a884f581a69a396b1b82e9964a60eb591af2999dd4ec8eaa6da2db7adc80026adc8242582afa3e58733096d1fc802be25371f5da39fa90fd0b77096db0bfb8bf89d508ec17ea0e20a1bc0ba6d6c6ec3474f57a1cfd216fc38bab9b76bc9766900429997744b493504d1be3b785e9ac0af116b14bfd1fc7ec9a52cddf0f5d8704e0902b08dbdfca26823dc1f8ae8ecf3a71a850f4", 0xd3}, {&(0x7f0000002f40)="5a52ae", 0x3}], 0x4, &(0x7f0000002fc0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xb8, 0x117, 0x2, 0xa1, "0c3e72ebaae48a708b5f4b8d80ffb7334239a82e3bcf977408b33e14abe000227f1d14d1efbb65300598446cf84a3d9d50d4e79ab695618249186ba7f7c845eb3e8909e933026773744af822cdcc841c7d26b9ef7286b2ee5dd2d5ef6fb4731421ff27d833f8e447d43e82c1ffa33527be3f48cde91ca263594673e5a153d452f33eacd7823bb0f1a1642140fd9e5623c3c659cc16e8002b4a9cf6d2cc695ed0f4"}, @assoc={0x18, 0x117, 0x4, 0x1000}, @iv={0x68, 0x117, 0x2, 0x4e, "8b928a9764770fde5a341917300ad149afc4e4a99b802536acf21f031bba1f30594bbbbc1bd7bc78eef3b4f1101ab5f458228c4c4eafd21729d519851d52981cf1a0c76f9b741c77c3eda2e5d7a3"}, @assoc={0x18, 0x117, 0x4, 0x83}], 0x168, 0x4dae3437a90b13ab}, {0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000003140)="682ccd714d8c156cd8471569a25d65f0b14a4117ee897e38e1fd3ccc484ed10482f165f5a0ed34eda6e83a764a27dd2c80bdd369876c3a189b96b61cee7e2998a012dac31bf50a023d4cd0d26e5098d49c68657041462883a9c6da60745db684229a428d145462dd56735e102f3f31074fc412fe375d1fd4ab934af09d88f5e998219f53c938c7b7fe509f484f32a0116fdfca7356db008c93b22db19a9d94ea6cf3a6004bba5bcaa10167a62073c81c130d54d3811431329ee22a6143cb63771c64eb3b4861b895292b92d9886cfb841e24fbb39ba4e6b75a3030a985c4b0723cfc09664efdc546dfadde8e3242ca44d61221f2fa8cde59aa94be34cf9478abc4d8319b939f16c3b14fc23fb3c32869b0f930f70bc5d0c9ff2895314d59e34f9cbb3b57c939869dffcd978e9a285d2e8c87d1f521a9c913b8cc6b783843d66bfbba2f7bb97c0c1f1bf5e96469c0dddeba4ad85b7eef971640af377ab6f8c02434e7f5e66ff9796abc51f5162f0cd2bf3760afed6d1577e1fb6a454dcc947037a094310b4875fb70a8922d0085fe0a3e0204c8971c0f240641073ad24ab7a6145b6801983fdbf77db24da2a0374d8cf1bc41e216b4bece7ccac8d99b9e04ba9d5b95ce5376b63cef71e6af147de52ebdbe8f4a8d8f1cb4acd3d6021414395e9de83f65f952f2c7a97eb3fc469185effa0e32cfd6cfadcdba154a68d7d7646663f0259db47d92f1556988eef34de6c5837d0e87f57f3c3b96e8e8fcb45eb7dee289e1527bb2c8e0a886781788e53f6afd0490145ee31587356f17f76da71f45afc6a87871bc91443d303090581a1d1a7a28a1d3b2945cbe9857ae0d36d03b09460a88bc26e8935b6f5e5619d9d81ce9726e75ffe36fed315a67f81e3d64001154b09d564fdaa2031dca35e19075a9c0f0f474fdb977838d96065faf1c7faf97aa50dcc7e48d2611615211daa823e38c437cc1d843de675fa0448dad17fdeed1ae8cfecff76b169c25f029d909dbd00c0a616e9406b1968be782bbd74d9c72cfc6de5de314c557d4b3fc731e5247b44acd7cb3b2bbd5527e5b5cab6497e426705ceeb4321b902a786ebb7cf1884aa080797044f81ec9aec48f3894e931beb15ee1e8684acf5738d265c27bc185215a3bfc078594ed1f997f3bd9b6219c4d96b1a6fa0df7635ba95c67e24da62ab072631bc1e89b72fe9bebeed2ee655fed93c9df525a3d6752ab1f70e81aedc0f9f8a5b93f3a7fc7ebb95c5b98f3876733bb6b852eaacdc81df58a3128ff87b865c12e9ddb819278f9a3b5bbea35ad19d34c15bbab24efb73584a2a98cefc319dc5d8d51f5293845d3243d51118a8c90a1e407c02a72a8473c58d21bf23aa3dc23cfad090f3beb3d0de2f897903576a69d4b07ac9e9279dd7bac06347ab0bc5d4ba6b1d2caa7f40023e95d16bb37466909edc9a6357e4bf297cccf31a8fe4c9ce470182c9ed1cbe7d95fa7433795178f8d053ddc0f3f986fd5059e3576e7a86617ec6e1c7132f5d9ec0be4a63bc490d6be7ff7233c6c7fe6e0e742feeed6fcb3223d91bfd9c9e3c711286371b14a257d8e16d554405f9c1804eff05477c1e1b346b21646edd950bda38d420858e5cf4c77d8db2f9b91b63290cc61e3d3af7c6da69eb96f164309b0dda52bfa48206d2fd7aa71f44653f34f093ee1e5ec7a8ec737eec63e5d7fd78413f31cfa5899269454e5a398d9b15020d92f949ba72a6464ad8a5676352a5518346db33a14107707dc34245ea6668bc6df10ffc2cc71c5eb505e3bfc209c4bf16009430d9329cc3c0ce35102ae928c8226344ab02895e0694c953046680dc12a5af66d14be5615498bb61fa42b6dc836fe7684986c119ef26099109e4aa3454a0560ec20f14d3545d9e6b34d7a5546bb30c1bfe1195916d78b094d74d7ef2854395e439eaa536de0d992997f740be474f189971feea2d3701d0e904699397d66c7c97e28e860f29f65a494ffaf37a9a8f576f204841a6bf0a7b2d5e2b42f7fd6cb10073b99f44cc9035744b37d0da6645a3a0c0d47ee4a1da13bc632dce1c6f1eaf52db3d451da7b5a01cd19989be6293033640514465a1f8dfa9fe2d259793bd9368b2c8f2f9198201810842102f2730ebf9fdb399bc9ddc90ad2ffdf38de846a95cceaf77a8b9938651ae7211054817503b2d0fd5642a8999a35462be7d760a664855b3ab425814d54565bb81054fd822c12604e6132381939bf2fdf17abd619f60d14cee3b73c3d6846ae31c480c1f60c9466d1aeaa80eb8bb87ef56f5569a58ed77a1860c220c554af82f222e2bf210990ec9df6f05251f2bf37503ff3bed399cdcfb5053261765aeb9f8531a8536b65fef51090c70a8cd3c10531a51196b4d91c2dc814f129709fd6124e33165fbe0e0ef61196a86f0794171e7c61d4b88dbeabbe586d6cd833768f079179f9cae1db49a474b504212d7147bbf3e9588ab6723cbdebe392d2f768293a73898b09083b195fdc0c9c3836d98827c72ab3d01839b9e7fba6cba0873aff1853d388e8c34b7ab8648641c387ffa37866f895687492fd0a6a23eb978e3c320ef77b07b18f3bff2d869f19d30ca4ca8c850e28896b35662771c6690f6d3d9765956bdd8be619b8da8694cf079b7965674b7db5e1ca3a19278f9eeab7643d8d671081f17c9def3eff0ff8c90fb6f69b178fb44c3cb68f1d4e42b23f7b087097eba51976f134573239e054f893fb86f93543ca7badb45786f04345d6a1f13f213b5b7761415773bb3587dfec7c32bd13ad01768750be01adb8497e778101a0138b2a61d5c64225de99602cde89e7c3bc29400fdfc1945f033205675569c6c271f7f39d914d00a876c0d756d43a84cd4ade6af36056190f76b25329d5a0907b8c06356e8f0e0a244701d646c46cdc4e6ddcf919c572def0fe4f0a3f019cc455183c134c21c59bd9981150c44278922d1e056871b7e1e71b678f5d18373aec1d29ec8e788236490a11a0c33aa332193f3c769e74ef4820b203b054122d076db66086779ffe2be47c0b167ed24683529983b94fe8e198e0234b79b4357a17630c515428e4b2cf68c9ef6caf74eb59b4c7a0770251f08fe7426c001c979136fb41352bf9c38c72b948be579eeec6c22ca9bd17abb0e106cf2fedd3954a00b1d1e24006d0e336a9594eed4aae39d1c874c1d864cb1d1fa8600ff4939f938d54e4d263415ae8634b26925514c2cc71e23d87c7a29c043345271cd63fd5c88045d95bdf991281521e6527058749fc98dd34a79909670a261cccb6e29f6f431ef7e26c55ff56f2e4a64e279573050e612f0e0c110c256bd6d737d89683f5e3963ae0bc67928ef37ac01c007a449bfa506e137444f01642499a6f03f20d478edb2b6d1957904a265db2939b6b683696d5b506102ec67e0c0773bee187753a6a6ad4c084a87b35569971d3e051d219cd0887bc2e98d762506e1d04cef06133198458964b2c36e2e0dcd6a99f1cf395ec9f2cb060a881a8afa456add3704ef588a52bffba11ce999c2c7ff60e2ffccc5f59b6a76cfad0bb1d1fec38779c2ffceeb4da390bac7e7e410e54009249d4e8982788dbdd07a60cd69617a3ad83985a996d62215fc3221afe468bb9e2525d1fc145b303ed09e10f99d1112012e04f06c07d9a7d4833c36a3cd06941aa5043cc4dcc06bb9f95950e35b3780651599ada5a7827f17f0304a9b7b9d780ae996edac91d1b082b9ad285ef4a94cf93b3ce6d719ae1e9a07b795fa55054beb604c9530bfab879daf550a90f993ba392ea75a738329a0b1f4c41139fd2a34c56f3d83a7ce2fc02df8a10eced38818d3b6fafea5007f4a4e51b274fe487b728156eb39cd64c9d97d3c2cbaad228fc89ac507005c3f30ce310e72020a7db89d3b9eaef203c0cf8c4827461b67b350ca24187e3324777bdc3f8c022b56dec88b528e34ca4e74769a1d983aecf6ed1f5966d93666c79ce22ca1108016a9849506061042186215b9a0cdf776fd3fb0416bba6b6e7a71f72169543f4d9c546422a5f0e5c8e89d788f25b56adffe08ae43178363ef0d659a2b1d81fe1f07e7181da0b5b661c674c3cb6aeb922a008ddfce1f357ed6e375a0ff777e7c4ac53d80dafbcd51afcca054ecf8983a9e28386c21c0aa156740c7202dd24cfda4b438eb5e7633905ef84086841a61c2b72adea77097be3dae9bbd1b7c3b86a72190467ad5581077f0ba93bbf1b69e9d6316a997ff6ba1a23b5417801b9b7ef630cf10884bc97f5148707db78f91c11d7652c281b996b5a2e24598a11cc7c6cfdaab750ed08ecf413a0b13ace33ec5cd02373238bf056a68916652940deb4ce0f658fab457a95b26028520ba67f837292b1b00feff723d1affaaa2c4c5a551ead100c007bfa24eaa3834701d61a829013aff7e5327ba1fc3e597d3db2c1fe07d42c41efdee5c3c20a2689fee27e8ee0c6edc6158924878ef3c1b5d5af5e1672dc3c9e4e69b5c345b40c2f7c0d12e480c8d44625e92ec19c2521bc48a0cc18bd46141e54ef04c75be422c2d978be7cba64e881f707bb39bdd3e049fd305ac0a920d52967c1f8b81451b5b3d9edbfef523cf7084efb7de835d6ed7c441ca9bbe46335d7baed3dadbfe376c03b307b94ac3f0d1c8a44284e816abcbf3a7584186953eb05ffcc68f05e3369a13c8613ac067dea98f0d17a435ca3fef1b92f731907842008fadbb306c55926edb2c6d8b17799ba37b7a7ce27e52366eb451789906a92b3598b99c2b00ec0cf37b72410dcca7f648b410d1d3caccdd5cabebf9a1343b2c81de36de8a38549e241c4a7539b81b6a39a12e474525728769f5721ac8f97e231861065e9858cb07ae2106fbb3e8de1b038a265245c7a2d5c2ca292a356d95a8d1a894f493c1e2baef9453afb22c6bc279f0385683a054cbb7c648a51dd5daae35a02d212179fda3a2c86b3de14e24a29b22648b54fa582880fc2d164a7b4ff90d016fdb7530332a0f2cb14a62c65c6e7bc99d7f7de0434f0e9c319554a6ef7839cd171a8615470eec5287b1ba044db01d67c08474bca47ef3b58003f7e1e20815146455382c3674c39b1d4985def39eeb987f196ce2a7b9a9eef6b7ec715848bc2bc733fc43b6d2a41643f349a67d0bfdb7425041ddf321a5a4984a17dda7537b47949fa12504d7e1098f2abf6e36626eca8d4c48e2c9caf0b82a35c22abe7454edf8d7a27b37f7a8245d7a41f21489241750789ba34875ba62e6bc5daec9dedb0b39d890efffd755e02bc15336a8951734d04f1467a78a8ecab073903f6f2fd167de8492a452bd5b95ee31832a44b71f8e42659a10b609010dce5ca51f01fe8781bdb0cfa04b2b2041dd5b6e5708946b5b944bf547824efe893972d637379e53bab9e9f53c326f6c96182950faf57797ba38daa653534baebf5833cc5c11905689775c05c9c80fac82818ef92ba1528cf4cc32d8858b0e491565a907dc02510a9a6c59e56b2a13cd6cf6a002a0723a01507e5c2c12ef72c64b7e8589eee53d5bea7dc15625048d356e15c30a8fac40d2785f38d56b54e3f373f0c0bb37b036e20c75cdb89e8528961d25a55d3bc651ffdf6aeb4604b196ac09ace670fb1d4a21eda38b7977a04be12cb3e48905a50292ebdd1da36dbd5c7341d9dcf58e632a634e036a7768f5db96d93ffa3bbb99a8c10fbf23ba052bccb2dda0b72b014d5d2815ecdace6528543a18098245732a1588bdd3f38862861df5597c12b8f3ffea4d0050380de80261d34238ebaf31f9b18e8c114d8a49f7ea35b53b360f3ba93b2", 0x1000}, {&(0x7f0000004140)="a44a3f6f61419fd4971f0feacb2bb04cc566df248fbd9a8cbfa3914be63ecd041630bbf8a3afa5fd87f544a7e1aa819ea4a28aa28a00ef24b56e228abf7187af4616311dbd55e0d2899d79ef2952c7ef28e0aa3f832c5720db4ec87b16536dd87551be0288f00cd869fbec69bdf5115e2a050582f179cd50216b574828db713672f0cd765bce00ce69cfdf71b01644de5596ca955f07966cbc22059105a278b7e32a835ae56026c894b3be0d1f4f09a5c4d4133e693b", 0xb6}, {&(0x7f0000004200)="4ea2ffe96c9e751aee20cd3e10047f2a94f9a7164888e887e16dae2c710c457210f5", 0x22}, {&(0x7f0000004240)="29674e38849dbfe112acf4", 0xb}, {&(0x7f0000004280)="71f1d4f649fb562813c83c5d91b0e51db196d00b3e1dd07438023e6ce5043f2b8b96a2a657afabcf7f3d276925883ef863e706bc47c9199129ad925072302dd8009f838d598f55aae13646d360fa6f29e38c4920f267c9816bec82853464c69b0563ff32147b4bec09b2d81c984bb67e58c1c7884bc460a508ab4546b29664f04b63179a61ce01a293df4a9c562920fd13", 0x91}, {&(0x7f0000004340)="b4dca74159c0e3cd7b298ef75d2fc034f7a1e8fadb12b7596c5822b52f58f35941a5de9dec4064c714b6e713b98b96060e9979c392256c327b0fb72c2de7ace42fac279da03c9666c3deb3c1fde01b53d566078a8ed8df6b8fdc699bc5f080407f02e62cc0f7b054d6cc611f4f0fdd039e290d4bd1dd7fe204dbc8bfc651287c6dd8581096a6c8df184b4a722dad890bac91da9ba2120db11cf9da12acea634f8caa35ee70ffd64bc15829968440273f", 0xb0}, {&(0x7f0000004400)="f8e7c06ebddfb12ed1a806a2036bd9b672df05c501c680958811a5a121c491e66cdcbe9fe279eef7781653", 0x2b}], 0x7, &(0x7f00000044c0)=[@iv={0xc0, 0x117, 0x2, 0xac, "2ea886703ca73582aa080e8cee2ae9f063a23805ea44e14a2f18682ecb1cc6a55139dcd1919ad101a894025e523f7f314149e5993b9db44e69e5df074a29bea54fbbe540f6e6474c07f6471c3aece562ca43613f15dc32fe6626640c57cc9b02b39efed62d687974223e45d7ea342f19166d8db8d11b26dc9d6e168e43a2dc63598fa7493a6e4d19b20acfd6d64a98453457636c76db5e67c1c8c6c12e2184f3acf8a51395c3e8e70ecff7ed"}, @iv={0x30, 0x117, 0x2, 0x17, "c14ca796ea2dbb4b34dfcc22a4facc5f18aba692374616"}, @op={0x18, 0x117, 0x3, 0x65ccad5b1941332b}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x98, 0x117, 0x2, 0x7d, "45485cb6797ba2ada87577c70eeadafa6c6353f8439fc27dfcebffc202c93b1b6256b1ab9d471ee2b0df3f95061e6e1b2b85e7b91a830eb9f9715328246bea5512acf87aa09969b0c5565607bc129df5f2aa35171de2eab2a6c1bd20c7a8db980c3dcc00c3b48ef1b4f4c61cc0ea1ec4cf1afd0138bab16918f3839515"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x200, 0x4000010}, {0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f00000046c0)="fe3a54004e658cd9ddeef9b4917689d9fa3a08e16013840c5ea20d302c9cb87510e814a15d247c71a663107cb5e78486991e78225eee17f258ced45aa7e41619192b21224df016cebab42699791eb8fee20d59c9e17d4814fb1ff80a0257eef18b112113afb166e1dc7552ed1626195810d11b15bed5c88a80b1469f8513e0c859dc713f1bb709f1eafa6ac457d2986f04fb7ba2fc1ecbf5a8ee5c701a30a9317ccd477ec1cbc76e7208861b8917956bc0a1d405221124da90f008c681ffa3d30cb3d25c63e8c5e88cb6129a7393a6aea099d3be6288d5592f137986ac899da9be", 0xe1}], 0x1, &(0x7f0000004800)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0xf8, 0x117, 0x2, 0xde, "981425c12f0fa81b5b6dbcca8bf58f46147459b7c4fb96c9ac8de2a1fec069bed0cceed14f0e20db3b413833c3b7d3bf9376a695ae7d6aeb66ed37eed1ec745b51dffae8a92b73b8c29dfc6117b1c7e7d93454555c553e566425a1f5a998b517ef598a9bc2125513929e5ac99234258b9adf74f0be1bb72a89629ae665b07d98d44c9061c86470b0b24c9c855b5b71bc7c48f7732597905141df682379bfd96e6c72352802c6d8e8d84bebdc191f3f06ee2836ed30fd97174ce929d032dc4fc3b3135e1fb227fc415e388173ea7712b109fe8b7e9db4d2820667d0d56cda"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x158}, {0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f0000004980)="caf7b9d4438e0222798909063c61be6dda2d99838a918fc55b99c06d72b17578dd28ea82f1498c7699aeae3d8a69adaa4ada5976fc9cccb286ddffd4d0015ef91de17ca3d99077df4f60e682dfe9834cb629144cd9dd8c6088b7faf24ba3388e4f25c052fbafae21d2bdd3001c3f7f0f258b96f06befa7ef279bef440d4630d0536c2e60937c3f8775ca795a38", 0x8d}, {&(0x7f0000004a40)="9edbc166ac76a9b4dd3a0ad4c12f01840ae1f48f349fa6e58b18f05f259b864d3a92d8048f8fbf253ed1818c0e71c5099417014d5fb70a", 0x37}], 0x2, &(0x7f0000004ac0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x24, "6761e5c7c20f85930372934b4fa88d4387e3cd1ebc6046273483c9a5ece3b534337ab1af"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x98, 0x40}, {0x0, 0x0, &(0x7f0000005bc0)=[{&(0x7f0000004b80)="36fc74861cc24fcee9e8fb128d58ead50245ee3a578fb3a1e93529b0763933751cb0359e554eac753c813b644f25dd4151f87af249bafe5588e00d134d57ad", 0x3f}, {&(0x7f0000004bc0)="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", 0x1000}], 0x2, &(0x7f0000005c00)=[@assoc={0x18, 0x117, 0x4, 0x2d}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xe0, 0x117, 0x2, 0xc6, "1f3bed9a1038d02add51509c170012822b3415e345e19b3b47346d33de4a357b377924b5abf3e088b2433785573908c2e67d581bd3f5ca49f804d282c9431f88eb5a70a27d3735bf79ce4795121cde4c4a94c15154e7aaa04bbb26f12d3993404dcebab3f4bb82a22d31709da88758ac8656899b504a22fa7589d59b6545819b7558836d0734411c6c34e9df09bfb4c0097cb7a6a569413e4f64e7e8b38ef62729b384adfb0f1a1fe34db113bd85577243919d9ff1d22478d7aa39246e68998c021e32917cf9"}, @assoc={0x18, 0x117, 0x4, 0x1000}, @op={0x18}, @op={0x18}, @iv={0x78, 0x117, 0x2, 0x5f, "aff8ecf5b6e2a7971c8976755e7b62d447cbdd95f7228e6e754cb493894207614152503a022f54dea03cf12aed70acdc266f4cbc0513f88695416b2a3ef11dd3d36c47177b82322d2a5d3ba4881af2129865f12ab7e8becb4b099849b7e7e5"}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x40, 0x117, 0x2, 0x27, "50563b34fc43d053369e5e49720681f5e597489f3806b4520abf27eadb9539a8dd7e7044d3c53a"}], 0x228, 0x4008800}], 0x8, 0x4000002) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000006000)) bind$rds(r4, &(0x7f0000006040)={0x2, 0x4e20, @local}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000006080)=0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f00000060c0)={r1, 0x0, 0x0, [0x6, 0x2, 0x5, 0x3], [0x0, 0x9, 0x1, 0x5, 0xc09, 0xffff, 0x7, 0x7, 0x55, 0x2, 0x7, 0x88, 0x4, 0x3, 0x8001, 0x9, 0x80, 0x5, 0x4, 0x7ff, 0x10, 0x8000000000000001, 0x7b01, 0x1, 0x5, 0x8, 0x0, 0x2, 0xc, 0x5, 0x4ba9, 0x0, 0x5, 0x4, 0x6, 0xf, 0x1, 0xf6d, 0x0, 0x0, 0x3, 0x4d676e8c, 0x1, 0x10001, 0x5, 0xfffffffffffffffd, 0x5, 0x6, 0x100, 0x2, 0xf61b, 0x5, 0xc36, 0x7, 0x0, 0x8693, 0x6, 0x7, 0x7, 0x2, 0x1, 0x1, 0x80000000, 0x3, 0xe00000000000000, 0x3fd, 0xe4f0, 0x86b, 0x9, 0xffffffffffffffff, 0x7, 0x7, 0xf, 0x3, 0x9, 0x4, 0x40, 0x4, 0xffffffffffffffff, 0x437b, 0x1, 0x3, 0x6, 0x0, 0x9, 0x4, 0x0, 0x1400000000, 0x2, 0x4, 0xffffffffffffff00, 0xfffffffffffffff8, 0x8, 0x6, 0x401, 0x4, 0x3, 0x6, 0x2, 0x2, 0xc1b, 0xf7c9, 0x3, 0xfffffffffffffff7, 0x5200000000000000, 0x1d, 0x3, 0x96, 0x100000001, 0x58b, 0x0, 0x40, 0x9, 0x7, 0x6, 0x3, 0x3, 0x40, 0x7, 0x433, 0x80]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000006500)={{r8}, r9, 0x12, @unused=[0x1125, 0x8a00, 0x1000, 0x8], @devid=r10}) sendmsg$rds(r6, &(0x7f0000008e80)={&(0x7f0000007500)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000008ac0)=[{&(0x7f0000007540)=""/243, 0xf3}, {&(0x7f0000007640)=""/47, 0x2f}, {&(0x7f0000007680)=""/252, 0xfc}, {&(0x7f0000007780)=""/4096, 0x1000}, {&(0x7f0000008780)=""/9, 0x9}, {&(0x7f00000087c0)=""/119, 0x77}, {&(0x7f0000008840)=""/198, 0xc6}, {&(0x7f0000008940)}, {&(0x7f0000008980)=""/224, 0xe0}, {&(0x7f0000008a80)=""/26, 0x1a}], 0xa, &(0x7f0000008d80)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000008b80)=""/169, 0xa9}, &(0x7f0000008c40), 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1, 0xfc78}, &(0x7f0000008c80)=0x6, &(0x7f0000008cc0)=0x6, 0x3, 0x30, 0x100, 0x0, 0x4, 0xc8}}, @mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x4}, &(0x7f0000008d00)=0x4, &(0x7f0000008d40)=0x7, 0x9, 0x634a, 0xf66, 0x9, 0xa, 0x8001}}], 0xe0, 0x20000000}, 0x4004890) getsockopt$MRT6(r4, 0x29, 0xd0, &(0x7f0000008ec0), &(0x7f0000008f00)=0x4) 2.171088501s ago: executing program 0 (id=4254): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0xd) landlock_restrict_self(r0, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x6, 0x200, &(0x7f0000000080)="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"}) landlock_restrict_self(r0, 0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000000000000000000a50000dc8ce3ebac360000000200000a28000480240001800b000100736f636b65740000140002800800014000000003080002400070031d25f3b548fc0db497a189a04000000b0900010073737a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0xc) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000094) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030007002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="94ff00d30785320a00000000010000000a0000000600ca8005000b809a000000"], 0x20}}, 0x0) fcntl$notify(r3, 0x402, 0x27) r7 = syz_open_dev$MSR(&(0x7f0000000000), 0x7, 0x0) read$msr(r7, &(0x7f0000000480)=""/39, 0x27) 1.862128886s ago: executing program 1 (id=4256): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f00000007c0)={0x1, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000c40)={0x2, 0x0, {&(0x7f0000000340)=""/85, 0x55, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 1.833691729s ago: executing program 3 (id=4257): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff0000010003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.698269023s ago: executing program 0 (id=4258): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents64(r0, &(0x7f00000005c0)=""/38, 0x26) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 1.042951992s ago: executing program 1 (id=4259): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000500)={0x14, &(0x7f0000000440)={0x40, 0x22, 0x2a, {0x2a, 0x11, "70a32b68eb6305fe44ee367b510db6495ee28e1d95545a370e3eba4d52f296ce67a570f820f18a5a"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000580)={0x40, 0x16, 0x44, "e2240c226215cbdbfba7d096422bf4021eaa71e8ce696062c0bfccccfe7319882b09a2e16e220eb244b3d0172193e804db07e0be38b55e42dfa55c4c5abee21a9d49992e"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x80}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0xc07, 0xffffffff, 0x7ff, 0x21048, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x6a, &(0x7f00000003c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x12, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xfc}, @multicast2, {[@ssrr={0x89, 0xf, 0x4c, [@empty, @broadcast, @rand_addr=0x64010101]}, @generic={0x7, 0xe, "f060b1e3b0f4ac78f2fae137"}, @timestamp_addr={0x44, 0xc, 0xc9, 0x1, 0x1, [{@private=0xa010102, 0x2}]}]}}}}}}}, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x0, 0x6, 0x6c, {0x6c, 0xc, "9049565bc7f37f23e4e008ad10cccd76c00ef80f622db688044f911e5abf6e9b6faba29a6e6b3aa5240fb47ac603b5e689b69aa021853282e23b3e579fde2aa28617eae1d07e8f700598df9a9d00c7a886fa6acbf2170bfa92498e7f71c14e3ee6ef5d538112475537d6"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, &(0x7f00000000c0)={0x0, 0x22, 0x11, {[@global=@item_4={0x3, 0x1, 0x1, "fc257803"}, @local=@item_012={0x1, 0x2, 0x4, "d8"}, @global=@item_012={0x0, 0x1, 0xb}, @local=@item_012={0x2, 0x2, 0x1, "7286"}, @main=@item_4={0x3, 0x0, 0xc, "5111d3ab"}, @local]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x5, 0x1, {0x22, 0xbed}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x20, 0x5, 0xf0, "4a362d4ba42402401d93a726fdf2b7063f5f12886207b0e2ab02bb53f584e1e4519c12e46e6bc4958517187f5722f33afdfe731f9b5688de6a05dfe698d2b06a62a4b026f044ffa39bc58cc5c90740acf4889023eaef6d9cbb8de08b99927e05eb61b81bf1cb00b71173d7ddaca10226f62c779a92de90b86039693d0691e46e48c24d3711a7e9fa84d0806c6fcb4d12f1d3b3314e7363b5fe3c5b87960561b20665f0085a335fe5534d4cf4cc9fb6c42455a229e2f4b143a99d169a6d958a9c4e8bf4696e85586493e694ca75385f76d3570a6cfa60b70a90be77626e853b9c830c04ff376109c15b78290229dec248"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000300)={0x20, 0x1, 0xb5, "db4b7c6a8cb4cfd3dd2d7780dfa009d9b4577f9d5be3ae04a62ff8e9e1a424371935f6ddc0c2e339a4c089f4b2dfa76ab212e51bcd9d472812e8982622013e9e48f410820970a8f7482c759d6c1250b3689133ad9f08f4e98e40025fae0c2427aaa86bcfec8319c90773511525d8e9d6946c78ebc6979a64a5fa45b756d183e38c7f09bbe84e811c32c0ce50e740363c41701bf2af960a519ef72d7ec45d741f893b369d04810fbeabf7f742a8fb21729f952c6ae7"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x9}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.041722186s ago: executing program 3 (id=4260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x210, 0x202, 0x225, 0x210, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff], [0xff], 'veth1_vlan\x00', 'team_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x31, 'syz1\x00', {0x9}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) tkill(r6, 0xb) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$isdn(0x22, 0x2, 0x26) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) 934.920143ms ago: executing program 0 (id=4261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x10003) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x40002001}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) r2 = syz_io_uring_setup(0x1711, &(0x7f0000000400)={0x0, 0xe7ac, 0x2, 0x0, 0x402252}, &(0x7f0000000640), &(0x7f0000000100), &(0x7f0000000000)) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20049848}, 0x20000044) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000003c0)="2f090ab1426b51c36a640cba645d51b85830df2de3504d167da381a24a8c016fac516f616a965f93eeefec447ea5f6011e5cec2e8e18bb78", 0x38}], 0x1, 0x0, 0x1120}, 0x20000800) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xcb, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f3201"], 0x138) io_uring_enter(r2, 0x627, 0x8166, 0x49, 0x0, 0x0) readv(r4, &(0x7f0000000780)=[{&(0x7f0000000040)=""/154, 0x9a}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/222, 0xde}, {&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000500)=""/137, 0x89}, {&(0x7f0000000680)=""/152, 0x98}, {&(0x7f0000000740)=""/46, 0x2e}], 0x8) 845.869774ms ago: executing program 3 (id=4262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0xf0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (fail_nth: 2) 645.903069ms ago: executing program 3 (id=4263): recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0xffffffffffffff78, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000000010000800000000000000000000000005ef100000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000005000000000000000c0900000000000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d33c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x2, 0x2, 0x2}}, 0x26) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x3, 0xf9, {0xf9, 0x24, "d8aa71bf6642ec8f7d9b02b4317095c45ca86a2a3c88a7d7dab78d988be46784d0d5493d6d90a472a3337e752da4c197f94abd4748206720ec599e7e3b8eeed3a47bb41ee6be57af853f4b0376d84d3bcb0dfabc8b83c079fd8cee6b375c56cbd0b4d759d086363f8f946ed2ba357f9962355c2d859ff20c8a6a3739e915ea15affc18688d4c6dda1c7e83da35708d1f82fa34fa03f394d82bed85a2812bbfbc8605b622589a6e41a10a71e4de92ef7e501498c8332580953cc2800ddbf812a1e3d7248a26485e4d6eecc10402df42eb5a81d0baa10fae8a98ea5be33b0a627efe17b3de117a3e5613a953e6b244011ceef7e7dd534421"}}, &(0x7f0000000140)={0x0, 0x3, 0x15, @string={0x15, 0x3, "c88c43ef9e92017a1a344deafc63f49ffef379"}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0x16, 0x71, "3e5c72a9921224ddea8b48b6b007063001197016d191bff758dfd4e8ae11c35952d7457b2a7410d366696b0eafab014c0c93e06c9d60af1df515f2ad0b64eff330bab24fc8fb55910804a21a628d0f7c4f9f7864e6b236a47242bd9840260b382ffa37d093353bb25c3f043484678b7e2b"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0x20, 0x81, 0x2, "c732"}, &(0x7f0000000300)={0x20, 0x82, 0x1, "b2"}, &(0x7f0000000380)={0x20, 0x83, 0x1, "bc"}, &(0x7f00000003c0)={0x20, 0x84, 0x3, "ea13e6"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "d4f8c0"}}) 533.125387ms ago: executing program 0 (id=4264): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32, @ANYBLOB="000080000000000018"], 0x38}, 0x1, 0x300}, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0xa) close(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x40000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)={0x1}) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 470.364246ms ago: executing program 3 (id=4265): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x40, 0x11, 0x5, "515754d837"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="003501"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x9, 0x77, {0x77, 0x28, "f865d364cfe9d113f0b1b945de2f58ab23d47aa0d71d3fd4f7cf126e66b8d87680137c553cc334930c748dd08cba8e05f904da5895a44194d2380457361a4724e4946c94d04adee502e4e49e09408e643819eda9f3e340b0ce8129f4d359427fc4e55cc8e37a2df6b2ebaad98731f84f41430d1c50"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, &(0x7f0000000580)={0x34, &(0x7f0000000240)={0x0, 0xf, 0xaf, "c79f3f5c1450aa694548f4b4dbe8b7eca93c7073ef591e77962e4ffa20f91571b6eeeeb7814c2fe10aba0ebef5042ed97ed927ca25edb777a4abacf3a3f058871c3c388ecceff61d9f16cb9fd082c5ee94bae794c0e819099be2b6a65c70503d27913f1b7451b50426cbb3f96729703c83589ea0822cbcb9a842af7b60a35c829424c38189025a07e0841f67711138913e6e4b6d3e4a76612fd3ca07532cc8780808a67ab6efd276a03fa25b458e45"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0xc0, 0xa1, 0x4, 0xe2c5}, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0xff}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "a08597db8a6445165e56e213b4674cc45233050a25d3078b3d784526a30ac81a1afcce526f5a0305a19f014c6c4346"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 173.584225ms ago: executing program 3 (id=4266): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) r3 = socket(0x1, 0x5, 0x0) close(r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x2385, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) utimensat(r5, 0x0, &(0x7f0000000100)={{0x0, 0x3fffffff}}, 0x0) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x2, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xdff9, 0xf, 0x2, 0x80, 0x2, 0x3, 0x80000000, 0x20000007, 0x4b, 0x6, 0x5d, 0x9, 0x5, 0x2, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x1, 0x7, 0x0, 0xfffffffe, 0x24, 0xfffffff7, 0x5, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x8000, 0x80000000, 0x242, 0x3, 0xe, 0x8, 0x80008071, 0x0, 0x17, 0x7, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x0, 0x4, 0x2, 0x403, 0x7d, 0x0, 0x8, 0x6, 0x4000008, 0x7, 0x1, 0x40], [0x5, 0x9, 0x8000012f, 0x2008006, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x12c0, 0x6c7, 0x9, 0xfffffffb, 0x3, 0x1, 0x0, 0x5, 0x2, 0xe, 0x10, 0x78, 0xea4, 0x0, 0x7, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xc, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x5, 0xf8, 0xa, 0x6, 0x47, 0x7ffc, 0x1, 0xfe000000, 0xfffd, 0x7, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x0, 0x3, 0x3, 0x81, 0x737, 0x42, 0x7], [0x7, 0x408, 0x5, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x12e, 0x1ef, 0x5, 0x8, 0x86, 0x800, 0x303f, 0x7fffffff, 0x8000, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x0, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x5ff, 0x12b, 0x7f, 0x1, 0x8, 0x4, 0x5, 0x1c, 0x120000, 0x4, 0xa006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x3d, 0x2, 0x5f, 0x5, 0x3, 0x0, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x4, 0x8001, 0x5, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x2, 0x5, 0x5, 0x8, 0x30b1d692, 0xa1f, 0xf40, 0xe59b, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x10000, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x956, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 157.240729ms ago: executing program 0 (id=4267): socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x11, 0x572, 0x8000, 0x29, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x12) r2 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0xfffffff9, 0x2376}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r2, 0x742f, 0x77ae, 0x1, 0x0, 0x0) (fail_nth: 3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) bind$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x100) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0xb, 0x4, 0xa000200000a958, 0x3, 0x3, 0x6a1c000, 0x5e96, 0x800000000000001, 0x5c}) 0s ago: executing program 2 (id=4268): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f00000007c0)={0x1, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) kernel console output (not intermixed with test programs): UID: 0 PID: 16384 Comm: syz.3.3833 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 854.876439][T16384] Tainted: [L]=SOFTLOCKUP [ 854.876447][T16384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 854.876458][T16384] Call Trace: [ 854.876467][T16384] [ 854.876477][T16384] dump_stack_lvl+0xe8/0x150 [ 854.876515][T16384] should_fail_ex+0x46b/0x600 [ 854.876556][T16384] _copy_from_iter+0x1d3/0x1670 [ 854.876595][T16384] ? trace_kmem_cache_alloc+0x29/0xe0 [ 854.876618][T16384] ? __alloc_skb+0x27d/0x7d0 [ 854.876642][T16384] ? __pfx__copy_from_iter+0x10/0x10 [ 854.876671][T16384] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 854.876693][T16384] ? __alloc_skb+0x27d/0x7d0 [ 854.876721][T16384] ? netlink_sendmsg+0x650/0xb40 [ 854.876744][T16384] ? skb_put+0x11b/0x210 [ 854.876771][T16384] netlink_sendmsg+0x6c0/0xb40 [ 854.876795][T16384] ? irqentry_exit+0x218/0x730 [ 854.876832][T16384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.876874][T16384] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 854.876902][T16384] ____sys_sendmsg+0x94c/0x9c0 [ 854.876934][T16384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 854.876971][T16384] ? import_iovec+0x73/0xa0 [ 854.876998][T16384] ___sys_sendmsg+0x2a5/0x360 [ 854.877023][T16384] ? __lock_acquire+0x6b5/0x2cf0 [ 854.877050][T16384] ? __pfx____sys_sendmsg+0x10/0x10 [ 854.877113][T16384] ? __fget_files+0x2a/0x420 [ 854.877135][T16384] ? __fget_files+0x3a6/0x420 [ 854.877168][T16384] __x64_sys_sendmsg+0x1c3/0x2a0 [ 854.877199][T16384] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 854.877237][T16384] ? __pfx_ksys_write+0x10/0x10 [ 854.877273][T16384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.877297][T16384] do_syscall_64+0x15f/0xf80 [ 854.877327][T16384] ? trace_irq_disable+0x3b/0x140 [ 854.877355][T16384] ? clear_bhb_loop+0x40/0x90 [ 854.877383][T16384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.877405][T16384] RIP: 0033:0x7f726f4ac819 [ 854.877427][T16384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.877446][T16384] RSP: 002b:00007f726d6fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.877471][T16384] RAX: ffffffffffffffda RBX: 00007f726f725fa0 RCX: 00007f726f4ac819 [ 854.877488][T16384] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 854.877502][T16384] RBP: 00007f726d6fe090 R08: 0000000000000000 R09: 0000000000000000 [ 854.877516][T16384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.877529][T16384] R13: 00007f726f726038 R14: 00007f726f725fa0 R15: 00007ffe3343c1f8 [ 854.877566][T16384] [ 856.188745][ T6002] net_ratelimit: 157 callbacks suppressed [ 856.188768][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.196107][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.541285][T16396] FAULT_INJECTION: forcing a failure. [ 856.541285][T16396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 856.541326][T16396] CPU: 0 UID: 0 PID: 16396 Comm: syz.1.3836 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 856.541356][T16396] Tainted: [L]=SOFTLOCKUP [ 856.541364][T16396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 856.541378][T16396] Call Trace: [ 856.541387][T16396] [ 856.541397][T16396] dump_stack_lvl+0xe8/0x150 [ 856.541436][T16396] should_fail_ex+0x46b/0x600 [ 856.541475][T16396] _copy_to_user+0x31/0xb0 [ 856.541501][T16396] simple_read_from_buffer+0xe1/0x170 [ 856.541542][T16396] proc_fail_nth_read+0x1be/0x230 [ 856.541580][T16396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 856.541617][T16396] ? rw_verify_area+0x2ac/0x4e0 [ 856.541652][T16396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 856.541687][T16396] vfs_read+0x212/0xa80 [ 856.541723][T16396] ? __pfx_vfs_read+0x10/0x10 [ 856.541751][T16396] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 856.541784][T16396] ? lockdep_hardirqs_on+0x7a/0x110 [ 856.541814][T16396] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 856.541850][T16396] ? mutex_lock_nested+0x152/0x1d0 [ 856.541873][T16396] ? fdget_pos+0x252/0x320 [ 856.541904][T16396] ksys_read+0x156/0x270 [ 856.541932][T16396] ? __pfx_ksys_read+0x10/0x10 [ 856.541956][T16396] ? __pfx_sock_ioctl+0x10/0x10 [ 856.541995][T16396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.542020][T16396] do_syscall_64+0x15f/0xf80 [ 856.542049][T16396] ? trace_irq_disable+0x3b/0x140 [ 856.542077][T16396] ? clear_bhb_loop+0x40/0x90 [ 856.542105][T16396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.542126][T16396] RIP: 0033:0x7f31d9bdd04e [ 856.542148][T16396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 856.542167][T16396] RSP: 002b:00007f31d7e6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 856.542192][T16396] RAX: ffffffffffffffda RBX: 00007f31d7e6e6c0 RCX: 00007f31d9bdd04e [ 856.542208][T16396] RDX: 000000000000000f RSI: 00007f31d7e6e0a0 RDI: 0000000000000003 [ 856.542223][T16396] RBP: 00007f31d7e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 856.542236][T16396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.542250][T16396] R13: 00007f31d9e96038 R14: 00007f31d9e95fa0 R15: 00007ffd1aacef08 [ 856.542287][T16396] [ 857.358701][T16407] vlan2: entered promiscuous mode [ 857.358779][T16407] macvlan1: entered promiscuous mode [ 858.429055][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.573732][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.617777][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.665424][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.754713][T16414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.755456][T16414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.774461][T16414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.775142][T16414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.902494][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 858.971792][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 858.990993][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 859.029209][ T5885] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 859.040807][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 859.068585][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 859.730193][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.967507][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.047269][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.119436][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.889216][T16439] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3855'. [ 860.896760][ T5885] usb 2-1: device descriptor read/64, error -71 [ 861.139935][ T5885] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 861.328466][ T5885] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 861.328499][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.328522][ T5885] usb 2-1: config 0 has no interface number 1 [ 861.328672][ T5885] usb 2-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 861.328713][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 861.328742][ T5885] usb 2-1: config 0 interface 199 has no altsetting 0 [ 861.332972][ T5885] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 861.333005][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 861.333027][ T5885] usb 2-1: SerialNumber: syz [ 861.431085][ T5885] usb 2-1: config 0 descriptor?? [ 861.457740][ T5885] uvcvideo 2-1:0.199: Found UVC 0.00 device (0002:0000) [ 861.457779][ T5885] uvcvideo 2-1:0.199: No valid video chain found. [ 861.524719][ T1833] net_ratelimit: 4 callbacks suppressed [ 861.524743][ T1833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.720396][ T1833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.767756][T14409] syz_tun (unregistering): left allmulticast mode [ 861.767788][T14409] syz_tun (unregistering): left promiscuous mode [ 861.767919][T14409] bridge0: port 3(syz_tun) entered disabled state [ 861.806572][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.857723][ T5809] usb 2-1: USB disconnect, device number 72 [ 861.877645][ T5113] Bluetooth: hci1: command tx timeout [ 862.234058][T16412] chnl_net:caif_netlink_parms(): no params data found [ 862.345113][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.386682][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.414159][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.967060][ T5113] Bluetooth: hci1: command tx timeout [ 863.976845][ T5934] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 864.158966][ T5934] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 864.159002][ T5934] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 864.159040][ T5934] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 864.159055][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.229676][T16504] FAULT_INJECTION: forcing a failure. [ 864.229676][T16504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.229713][T16504] CPU: 1 UID: 0 PID: 16504 Comm: syz.3.3881 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 864.229740][T16504] Tainted: [L]=SOFTLOCKUP [ 864.229752][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 864.229763][T16504] Call Trace: [ 864.229771][T16504] [ 864.229780][T16504] dump_stack_lvl+0xe8/0x150 [ 864.229812][T16504] should_fail_ex+0x46b/0x600 [ 864.229844][T16504] _copy_from_iter+0x1d3/0x1670 [ 864.229878][T16504] ? trace_kmem_cache_alloc+0x29/0xe0 [ 864.229900][T16504] ? __alloc_skb+0x27d/0x7d0 [ 864.229920][T16504] ? __pfx__copy_from_iter+0x10/0x10 [ 864.229944][T16504] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 864.229964][T16504] ? __alloc_skb+0x27d/0x7d0 [ 864.229989][T16504] ? netlink_sendmsg+0x650/0xb40 [ 864.230009][T16504] ? skb_put+0x11b/0x210 [ 864.230034][T16504] netlink_sendmsg+0x6c0/0xb40 [ 864.230063][T16504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.230086][T16504] ? unwind_get_return_address+0x4d/0x90 [ 864.230110][T16504] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 864.230135][T16504] ____sys_sendmsg+0x94c/0x9c0 [ 864.230165][T16504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 864.230197][T16504] ? import_iovec+0x73/0xa0 [ 864.230220][T16504] ___sys_sendmsg+0x2a5/0x360 [ 864.230241][T16504] ? __lock_acquire+0x6b5/0x2cf0 [ 864.230264][T16504] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.230322][T16504] ? __fget_files+0x2a/0x420 [ 864.230339][T16504] ? __fget_files+0x3a6/0x420 [ 864.230366][T16504] __x64_sys_sendmsg+0x1c3/0x2a0 [ 864.230392][T16504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 864.230424][T16504] ? __pfx_ksys_write+0x10/0x10 [ 864.230455][T16504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.230475][T16504] do_syscall_64+0x15f/0xf80 [ 864.230501][T16504] ? trace_irq_disable+0x3b/0x140 [ 864.230525][T16504] ? clear_bhb_loop+0x40/0x90 [ 864.230548][T16504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.230566][T16504] RIP: 0033:0x7f726f4ac819 [ 864.230596][T16504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.230613][T16504] RSP: 002b:00007f726d6fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.230635][T16504] RAX: ffffffffffffffda RBX: 00007f726f725fa0 RCX: 00007f726f4ac819 [ 864.230650][T16504] RDX: 0000000020080800 RSI: 0000200000000040 RDI: 0000000000000003 [ 864.230663][T16504] RBP: 00007f726d6fe090 R08: 0000000000000000 R09: 0000000000000000 [ 864.230675][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.230687][T16504] R13: 00007f726f726038 R14: 00007f726f725fa0 R15: 00007ffe3343c1f8 [ 864.230719][T16504] [ 864.406764][ T6002] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 864.449383][ T5809] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 864.450649][ T9016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.451001][ T9016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.491632][ T5934] usb 2-1: usb_control_msg returned -32 [ 864.491668][ T5934] usbtmc 2-1:16.0: can't read capabilities [ 864.604301][ T1833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.644733][ T6002] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 864.644767][ T6002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.644797][ T6002] usb 5-1: Product: syz [ 864.644812][ T6002] usb 5-1: Manufacturer: syz [ 864.644827][ T6002] usb 5-1: SerialNumber: syz [ 864.686666][ T5809] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 864.686700][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.686722][ T5809] usb 3-1: Product: syz [ 864.686738][ T5809] usb 3-1: Manufacturer: syz [ 864.686753][ T5809] usb 3-1: SerialNumber: syz [ 864.728300][ T6002] usb 5-1: config 0 descriptor?? [ 864.735450][ T5809] usb 3-1: config 0 descriptor?? [ 864.757717][ T1833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.945795][ T5809] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 864.955511][ T6002] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 865.078699][T16507] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3870'. [ 865.081713][ T3504] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.219455][T16412] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.219605][T16412] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.219862][T16412] bridge_slave_0: entered allmulticast mode [ 865.224565][T16412] bridge_slave_0: entered promiscuous mode [ 865.251518][T16412] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.253249][T16412] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.253472][T16412] bridge_slave_1: entered allmulticast mode [ 865.258764][T16412] bridge_slave_1: entered promiscuous mode [ 865.276940][ T5885] usb 2-1: USB disconnect, device number 73 [ 866.061908][T13884] Bluetooth: hci1: command tx timeout [ 866.099097][T16412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.180998][T16412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.199204][ T6002] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 866.229456][ T5809] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 866.680097][ T5809] usb 3-1: USB disconnect, device number 61 [ 866.719817][ T6002] net_ratelimit: 5 callbacks suppressed [ 866.719837][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.760343][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.848219][T13716] usb 5-1: USB disconnect, device number 113 [ 867.100347][ T3504] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.205660][T16412] team0: Port device team_slave_0 added [ 867.213545][T16412] team0: Port device team_slave_1 added [ 867.343274][T16544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.355620][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.380597][T16412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.380613][T16412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.380629][T16412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.395044][T16412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.395062][T16412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.395087][T16412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.559238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.562282][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.563530][T16543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.563875][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.638426][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.727454][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.804461][T16553] overlayfs: overlapping lowerdir path [ 868.009633][ T3504] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.018475][T16568] FAULT_INJECTION: forcing a failure. [ 868.018475][T16568] name failslab, interval 1, probability 0, space 0, times 0 [ 868.018511][T16568] CPU: 0 UID: 0 PID: 16568 Comm: syz.3.3905 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 868.018537][T16568] Tainted: [L]=SOFTLOCKUP [ 868.018545][T16568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 868.018556][T16568] Call Trace: [ 868.018564][T16568] [ 868.018572][T16568] dump_stack_lvl+0xe8/0x150 [ 868.018606][T16568] should_fail_ex+0x46b/0x600 [ 868.018640][T16568] should_failslab+0xa8/0x100 [ 868.018667][T16568] kmem_cache_alloc_noprof+0x87/0x680 [ 868.018690][T16568] ? skb_clone+0x212/0x3a0 [ 868.018712][T16568] ? run_filter+0x23/0x270 [ 868.018742][T16568] skb_clone+0x212/0x3a0 [ 868.018763][T16568] ? packet_rcv+0x567/0x1730 [ 868.018791][T16568] packet_rcv+0x65b/0x1730 [ 868.018828][T16568] __netif_receive_skb_core+0x2797/0x3170 [ 868.018872][T16568] ? __pfx___skb_flow_dissect+0x10/0x10 [ 868.018900][T16568] ? __lock_acquire+0x6b5/0x2cf0 [ 868.018930][T16568] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 868.018956][T16568] ? __lock_acquire+0x6b5/0x2cf0 [ 868.019003][T16568] ? netif_receive_skb+0x102/0xbf0 [ 868.019028][T16568] ? netif_receive_skb+0x102/0xbf0 [ 868.019061][T16568] netif_receive_skb+0x1fe/0xbf0 [ 868.019094][T16568] ? __pfx_netif_receive_skb+0x10/0x10 [ 868.019120][T16568] ? rcu_is_watching+0x15/0xb0 [ 868.019139][T16568] ? __local_bh_disable_ip+0x3c/0x420 [ 868.019167][T16568] ? tun_rx_batched+0x191/0x760 [ 868.019192][T16568] ? tun_rx_batched+0x191/0x760 [ 868.019219][T16568] tun_rx_batched+0x1ee/0x760 [ 868.019252][T16568] ? __pfx_tun_rx_batched+0x10/0x10 [ 868.019288][T16568] ? tun_get_user+0x278d/0x4400 [ 868.019314][T16568] ? tun_get_user+0x278d/0x4400 [ 868.019344][T16568] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 868.019368][T16568] ? lockdep_hardirqs_on+0x7a/0x110 [ 868.019400][T16568] tun_get_user+0x2bd1/0x4400 [ 868.019424][T16568] ? is_bpf_text_address+0x292/0x2b0 [ 868.019460][T16568] ? tun_get_user+0x278d/0x4400 [ 868.019499][T16568] ? __pfx_tun_get_user+0x10/0x10 [ 868.019527][T16568] ? __lock_acquire+0x6b5/0x2cf0 [ 868.019561][T16568] ? ref_tracker_alloc+0x332/0x4a0 [ 868.019586][T16568] ? get_pid_task+0x20/0x1f0 [ 868.019607][T16568] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 868.019636][T16568] ? tun_get+0x1c/0x2f0 [ 868.019661][T16568] ? tun_get+0x1c/0x2f0 [ 868.019692][T16568] ? tun_get+0x1c/0x2f0 [ 868.019716][T16568] ? tun_get+0x1c/0x2f0 [ 868.019747][T16568] tun_chr_write_iter+0x119/0x200 [ 868.019778][T16568] vfs_write+0x629/0xba0 [ 868.019811][T16568] ? __pfx_vfs_write+0x10/0x10 [ 868.019844][T16568] ? __fget_files+0x2a/0x420 [ 868.019881][T16568] ksys_write+0x156/0x270 [ 868.019906][T16568] ? __pfx_ksys_write+0x10/0x10 [ 868.019938][T16568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.019959][T16568] do_syscall_64+0x15f/0xf80 [ 868.019984][T16568] ? trace_irq_disable+0x3b/0x140 [ 868.020008][T16568] ? clear_bhb_loop+0x40/0x90 [ 868.020032][T16568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.020050][T16568] RIP: 0033:0x7f726f46d04e [ 868.020069][T16568] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 868.020085][T16568] RSP: 002b:00007f726d6dcfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 868.020107][T16568] RAX: ffffffffffffffda RBX: 00007f726d6dd6c0 RCX: 00007f726f46d04e [ 868.020121][T16568] RDX: 000000000000006e RSI: 0000200000000a40 RDI: 00000000000000c8 [ 868.020134][T16568] RBP: 00007f726d6dd090 R08: 0000000000000000 R09: 0000000000000000 [ 868.020146][T16568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.020158][T16568] R13: 00007f726f726128 R14: 00007f726f726090 R15: 00007ffe3343c1f8 [ 868.020192][T16568] [ 868.120428][T13884] Bluetooth: hci4: command 0x0406 tx timeout [ 868.120441][ T5802] Bluetooth: hci1: command tx timeout [ 868.156702][ T6002] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 868.450023][ T6002] usb 2-1: Using ep0 maxpacket: 32 [ 868.476759][ T5885] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 868.497082][ T6002] usb 2-1: unable to get BOS descriptor or descriptor too short [ 868.506790][ T6002] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 242, changing to 7 [ 868.506844][ T6002] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 868.564286][ T6002] usb 2-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 868.564320][ T6002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.564341][ T6002] usb 2-1: Product: syz [ 868.564357][ T6002] usb 2-1: Manufacturer: syz [ 868.564371][ T6002] usb 2-1: SerialNumber: syz [ 868.574213][T16572] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 868.632999][ T6002] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 868.639275][T16412] hsr_slave_0: entered promiscuous mode [ 868.651920][T16412] hsr_slave_1: entered promiscuous mode [ 868.652291][ T5885] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 868.652321][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.652344][ T5885] usb 5-1: Product: syz [ 868.652359][ T5885] usb 5-1: Manufacturer: syz [ 868.652375][ T5885] usb 5-1: SerialNumber: syz [ 868.660336][T16412] debugfs: 'hsr0' already exists in 'hsr' [ 868.660365][T16412] Cannot create hsr debugfs directory [ 868.687938][ T5885] usb 5-1: config 0 descriptor?? [ 868.825692][ T6002] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 868.926497][ T5885] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 868.991035][ T6002] usb 2-1: USB disconnect, device number 74 [ 869.119027][ T3504] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.141738][T15275] udevd[15275]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 869.986912][ T5885] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 870.000452][ T5885] usb 5-1: USB disconnect, device number 114 [ 871.948025][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.948105][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.986859][T13716] net_ratelimit: 21 callbacks suppressed [ 871.986878][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.987358][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.990014][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.990552][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.054094][T12067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.055908][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.103713][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.336341][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3924'. [ 872.886726][T16610] netlink: 'syz.1.3921': attribute type 6 has an invalid length. [ 872.886745][T16610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3921'. [ 873.016053][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.016330][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.194972][T16619] FAULT_INJECTION: forcing a failure. [ 873.194972][T16619] name failslab, interval 1, probability 0, space 0, times 0 [ 873.195014][T16619] CPU: 1 UID: 0 PID: 16619 Comm: syz.1.3928 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 873.195044][T16619] Tainted: [L]=SOFTLOCKUP [ 873.195052][T16619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 873.195065][T16619] Call Trace: [ 873.195074][T16619] [ 873.195084][T16619] dump_stack_lvl+0xe8/0x150 [ 873.195127][T16619] should_fail_ex+0x46b/0x600 [ 873.195165][T16619] should_failslab+0xa8/0x100 [ 873.195196][T16619] __kmalloc_noprof+0xdf/0x7b0 [ 873.195223][T16619] ? do_sys_poll+0x30a/0xf50 [ 873.195262][T16619] do_sys_poll+0x30a/0xf50 [ 873.195308][T16619] ? __lock_acquire+0x6b5/0x2cf0 [ 873.195330][T16619] ? __pfx_do_sys_poll+0x10/0x10 [ 873.195365][T16619] ? is_bpf_text_address+0x292/0x2b0 [ 873.195396][T16619] ? is_bpf_text_address+0x26/0x2b0 [ 873.195539][T16619] ? set_user_sigmask+0xcd/0x1c0 [ 873.195569][T16619] ? __pfx_set_user_sigmask+0x10/0x10 [ 873.195596][T16619] ? kmem_cache_free+0x187/0x6c0 [ 873.195623][T16619] ? do_sys_openat2+0x14c/0x200 [ 873.195662][T16619] __se_sys_ppoll+0x209/0x2b0 [ 873.195700][T16619] ? __pfx___se_sys_ppoll+0x10/0x10 [ 873.195731][T16619] ? __pfx_ksys_write+0x10/0x10 [ 873.195772][T16619] ? __x64_sys_ppoll+0x20/0xc0 [ 873.195801][T16619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.195824][T16619] do_syscall_64+0x15f/0xf80 [ 873.195854][T16619] ? trace_irq_disable+0x3b/0x140 [ 873.195882][T16619] ? clear_bhb_loop+0x40/0x90 [ 873.195908][T16619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.195930][T16619] RIP: 0033:0x7f31d9c1c819 [ 873.195951][T16619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.195970][T16619] RSP: 002b:00007f31d7e6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 873.195995][T16619] RAX: ffffffffffffffda RBX: 00007f31d9e95fa0 RCX: 00007f31d9c1c819 [ 873.196011][T16619] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 873.196026][T16619] RBP: 00007f31d7e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 873.196040][T16619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.196053][T16619] R13: 00007f31d9e96038 R14: 00007f31d9e95fa0 R15: 00007ffd1aacef08 [ 873.196090][T16619] [ 873.766708][T13716] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 873.917898][T13716] usb 2-1: Using ep0 maxpacket: 8 [ 873.921850][T13716] usb 2-1: config 6 has an invalid interface number: 220 but max is 0 [ 873.921881][T13716] usb 2-1: config 6 has no interface number 0 [ 873.921916][T13716] usb 2-1: config 6 interface 220 has no altsetting 0 [ 873.942734][T13716] usb 2-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 873.942765][T13716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.942784][T13716] usb 2-1: Product: syz [ 873.942798][T13716] usb 2-1: Manufacturer: syz [ 873.942812][T13716] usb 2-1: SerialNumber: syz [ 874.050904][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.056720][ T5887] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 874.298458][ T5887] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 874.298561][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.298585][ T5887] usb 5-1: Product: syz [ 874.298601][ T5887] usb 5-1: Manufacturer: syz [ 874.298617][ T5887] usb 5-1: SerialNumber: syz [ 874.430910][ T5887] usb 5-1: config 0 descriptor?? [ 874.465211][T13716] uvcvideo 2-1:6.220: Found multiple Units with ID 4 [ 874.467591][T13716] uvcvideo 2-1:6.220: Found Unit with invalid ID 0 [ 874.467653][T13716] uvcvideo 2-1:6.220: Found UVC 7.ff device syz (174f:5212) [ 874.467781][T13716] uvcvideo 2-1:6.220: Entity type for entity Output 4 was not initialized! [ 874.590843][T13716] uvcvideo 2-1:6.220: Failed to create links for entity 4 [ 874.590938][T13716] uvcvideo 2-1:6.220: Failed to register entities (-22). [ 874.655039][ T5887] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 874.887695][T13716] usb 2-1: USB disconnect, device number 75 [ 875.961536][ T5887] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 876.101836][T16656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3937'. [ 876.526762][T15609] usb 5-1: USB disconnect, device number 115 [ 876.684332][ T5458] 8021q: adding VLAN 0 to HW filter on device eth1 [ 877.244592][T15609] net_ratelimit: 7 callbacks suppressed [ 877.244615][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.567491][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.720660][T16685] overlayfs: overlapping lowerdir path [ 878.243089][ T1833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.508138][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.597241][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.687407][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.807158][ T3504] bridge_slave_1: left allmulticast mode [ 878.807481][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.836943][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.856785][ T5887] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 878.893215][ T3504] bridge_slave_0: left allmulticast mode [ 878.893248][ T3504] bridge_slave_0: left promiscuous mode [ 878.896258][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.005915][ T3504] dvmrp0: left allmulticast mode [ 879.017675][ T5887] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 879.017707][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.017728][ T5887] usb 3-1: Product: syz [ 879.017744][ T5887] usb 3-1: Manufacturer: syz [ 879.017760][ T5887] usb 3-1: SerialNumber: syz [ 879.032757][ T5887] usb 3-1: config 0 descriptor?? [ 879.244407][ T5887] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 879.330693][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.577767][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.703159][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.332305][ T5887] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 880.335965][ T5887] usb 3-1: USB disconnect, device number 62 [ 880.817679][ T3504] bond1 (unregistering): (slave gretap1): Releasing active interface [ 880.953190][T16727] syz.2.3952 (16727) used greatest stack depth: 17688 bytes left [ 881.129058][ T3504] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 881.606793][ T5934] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 881.756769][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 881.759355][ T5934] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 881.759385][ T5934] usb 3-1: config 0 has no interface number 0 [ 881.759436][ T5934] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 881.759463][ T5934] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 881.766378][ T5934] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 881.766410][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.766433][ T5934] usb 3-1: Product: syz [ 881.766448][ T5934] usb 3-1: Manufacturer: syz [ 881.766464][ T5934] usb 3-1: SerialNumber: syz [ 881.841157][ T3504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.859184][ T5934] usb 3-1: config 0 descriptor?? [ 881.866268][T16764] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 881.866407][T16764] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 881.948287][ T3504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.999267][ T3504] bond0 (unregistering): Released all slaves [ 882.040491][ T3504] bond1 (unregistering): Released all slaves [ 882.077946][T16764] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 882.078085][T16764] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 882.735148][ T5934] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 882.759680][ T5934] asix 3-1:0.34: probe with driver asix failed with error -32 [ 882.863254][T15609] net_ratelimit: 6 callbacks suppressed [ 882.863332][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.985192][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.022679][T16707] geneve2: entered promiscuous mode [ 883.022708][T16707] geneve2: entered allmulticast mode [ 883.896618][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.907039][ T6002] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 884.048328][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.069960][ T6002] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 884.069992][ T6002] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 884.070034][ T6002] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 884.070059][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.226765][ T9] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 884.285639][ T6002] usb 2-1: usb_control_msg returned -32 [ 884.285712][ T6002] usbtmc 2-1:16.0: can't read capabilities [ 884.365495][ T1833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.387451][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 884.395280][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 884.395312][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.395334][ T9] usb 5-1: Product: syz [ 884.395348][ T9] usb 5-1: Manufacturer: syz [ 884.395362][ T9] usb 5-1: SerialNumber: syz [ 884.458800][ T9] usb 5-1: config 0 descriptor?? [ 884.551788][ T9] gspca_main: spca508-2.14.0 probing 041e:4018 [ 884.595873][T13716] usb 3-1: USB disconnect, device number 63 [ 884.903821][ T9] gspca_spca508: reg_read err -71 [ 884.904231][ T9] gspca_spca508: reg_read err -71 [ 884.904728][ T9] gspca_spca508: reg_read err -71 [ 884.905087][ T9] gspca_spca508: reg_read err -71 [ 884.905395][ T9] gspca_spca508: reg write: error -71 [ 884.905459][ T9] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 884.917013][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.917058][ T1833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.986271][ T9] usb 5-1: USB disconnect, device number 116 [ 885.077500][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.225800][T16798] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4001'. [ 885.273377][ T6002] usb 2-1: USB disconnect, device number 76 [ 885.436771][T13716] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 885.596841][T13716] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 885.596875][T13716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.596896][T13716] usb 3-1: Product: syz [ 885.596911][T13716] usb 3-1: Manufacturer: syz [ 885.596926][T13716] usb 3-1: SerialNumber: syz [ 885.609348][T13716] usb 3-1: config 0 descriptor?? [ 885.654682][T13716] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 885.966947][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.117751][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.123835][T16823] netlink: 'syz.2.4007': attribute type 83 has an invalid length. [ 887.330546][T13716] gspca_stk1135: reg_w 0x200 err -71 [ 887.331591][T13716] gspca_stk1135: serial bus timeout: status=0x00 [ 887.331608][T13716] gspca_stk1135: Sensor write failed [ 887.331636][T13716] gspca_stk1135: serial bus timeout: status=0x00 [ 887.331647][T13716] gspca_stk1135: Sensor write failed [ 887.331675][T13716] gspca_stk1135: serial bus timeout: status=0x00 [ 887.331686][T13716] gspca_stk1135: Sensor read failed [ 887.331715][T13716] gspca_stk1135: serial bus timeout: status=0x00 [ 887.331724][T13716] gspca_stk1135: Sensor read failed [ 887.331731][T13716] gspca_stk1135: Detected sensor type unknown (0x0) [ 887.331763][T13716] gspca_stk1135: serial bus timeout: status=0x00 [ 887.331773][T13716] gspca_stk1135: Sensor read failed [ 887.331800][T13716] gspca_stk1135: serial bus timeout: status=0x00 [ 887.331808][T13716] gspca_stk1135: Sensor read failed [ 887.331835][T13716] gspca_stk1135: serial bus timeout: status=0x00 [ 887.331845][T13716] gspca_stk1135: Sensor write failed [ 887.331871][T13716] gspca_stk1135: serial bus timeout: status=0x00 [ 887.331901][T13716] gspca_stk1135: Sensor write failed [ 887.331998][T13716] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 887.344489][T13716] usb 3-1: USB disconnect, device number 64 [ 887.995114][T13716] net_ratelimit: 20 callbacks suppressed [ 887.995138][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.060247][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.277117][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.312234][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.312282][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.436915][ T3504] hsr_slave_0: left promiscuous mode [ 888.460484][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.461097][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.502173][ T3504] hsr_slave_1: left promiscuous mode [ 888.503427][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.503458][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.574100][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.574134][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.691092][ T3504] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 888.691129][ T3504] batman_adv: batadv0: Removing interface: ipvlan2 [ 888.857164][ T37] kauditd_printk_skb: 74 callbacks suppressed [ 888.857186][ T37] audit: type=1804 audit(1776333734.128:1512): pid=16881 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.4027" name="/newroot/563/file0" dev="tmpfs" ino=2970 res=1 errno=0 [ 888.919132][ T1833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.971703][T16884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4027'. [ 888.998756][T16884] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4027'. [ 889.086946][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.141930][ T3504] veth1_macvtap: left promiscuous mode [ 889.142001][ T3504] veth0_macvtap: left promiscuous mode [ 889.163151][ T3504] veth1_vlan: left promiscuous mode [ 889.183602][ T3504] veth0_vlan: left promiscuous mode [ 889.316920][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.527569][ T3504] team0 (unregistering): Port device team_slave_1 removed [ 891.567449][ T3504] team0 (unregistering): Port device team_slave_0 removed [ 891.950097][T16908] FAULT_INJECTION: forcing a failure. [ 891.950097][T16908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.950137][T16908] CPU: 1 UID: 0 PID: 16908 Comm: syz.3.4040 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 891.950164][T16908] Tainted: [L]=SOFTLOCKUP [ 891.950171][T16908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 891.950184][T16908] Call Trace: [ 891.950194][T16908] [ 891.950204][T16908] dump_stack_lvl+0xe8/0x150 [ 891.950241][T16908] should_fail_ex+0x46b/0x600 [ 891.950276][T16908] _copy_to_user+0x31/0xb0 [ 891.950297][T16908] wext_handle_ioctl+0x145/0x1d0 [ 891.950323][T16908] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 891.950346][T16908] ? __asan_memset+0x22/0x50 [ 891.950367][T16908] ? smack_file_ioctl+0x263/0x360 [ 891.950409][T16908] sock_ioctl+0x15c/0x7f0 [ 891.950442][T16908] ? __pfx_sock_ioctl+0x10/0x10 [ 891.950473][T16908] ? __fget_files+0x2a/0x420 [ 891.950493][T16908] ? __fget_files+0x3a6/0x420 [ 891.950510][T16908] ? __fget_files+0x2a/0x420 [ 891.950535][T16908] ? bpf_lsm_file_ioctl+0x9/0x20 [ 891.950563][T16908] ? __pfx_sock_ioctl+0x10/0x10 [ 891.950591][T16908] __se_sys_ioctl+0xff/0x170 [ 891.950611][T16908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.950628][T16908] do_syscall_64+0x15f/0xf80 [ 891.950652][T16908] ? trace_irq_disable+0x3b/0x140 [ 891.950672][T16908] ? clear_bhb_loop+0x40/0x90 [ 891.950692][T16908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.950708][T16908] RIP: 0033:0x7f726f4ac819 [ 891.950725][T16908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.950740][T16908] RSP: 002b:00007f726d6fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 891.950759][T16908] RAX: ffffffffffffffda RBX: 00007f726f725fa0 RCX: 00007f726f4ac819 [ 891.950771][T16908] RDX: 0000200000000000 RSI: 0000000000008b15 RDI: 0000000000000003 [ 891.950782][T16908] RBP: 00007f726d6fe090 R08: 0000000000000000 R09: 0000000000000000 [ 891.950792][T16908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.950802][T16908] R13: 00007f726f726038 R14: 00007f726f725fa0 R15: 00007ffe3343c1f8 [ 891.950831][T16908] [ 892.935836][T16928] FAULT_INJECTION: forcing a failure. [ 892.935836][T16928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.935879][T16928] CPU: 0 UID: 0 PID: 16928 Comm: syz.4.4046 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 892.935909][T16928] Tainted: [L]=SOFTLOCKUP [ 892.935917][T16928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 892.935930][T16928] Call Trace: [ 892.935939][T16928] [ 892.935949][T16928] dump_stack_lvl+0xe8/0x150 [ 892.935987][T16928] should_fail_ex+0x46b/0x600 [ 892.936026][T16928] _copy_from_iter+0x1d3/0x1670 [ 892.936068][T16928] ? trace_kmem_cache_alloc+0x29/0xe0 [ 892.936092][T16928] ? __alloc_skb+0x27d/0x7d0 [ 892.936114][T16928] ? __pfx__copy_from_iter+0x10/0x10 [ 892.936144][T16928] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 892.936169][T16928] ? __alloc_skb+0x27d/0x7d0 [ 892.936207][T16928] ? netlink_sendmsg+0x650/0xb40 [ 892.936231][T16928] ? skb_put+0x11b/0x210 [ 892.936257][T16928] netlink_sendmsg+0x6c0/0xb40 [ 892.936291][T16928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.936317][T16928] ? unwind_get_return_address+0x4d/0x90 [ 892.936343][T16928] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 892.936372][T16928] ____sys_sendmsg+0x94c/0x9c0 [ 892.936406][T16928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 892.936449][T16928] ? import_iovec+0x73/0xa0 [ 892.936476][T16928] ___sys_sendmsg+0x2a5/0x360 [ 892.936502][T16928] ? __lock_acquire+0x6b5/0x2cf0 [ 892.936531][T16928] ? __pfx____sys_sendmsg+0x10/0x10 [ 892.936593][T16928] ? __fget_files+0x2a/0x420 [ 892.936615][T16928] ? __fget_files+0x3a6/0x420 [ 892.936648][T16928] __x64_sys_sendmsg+0x1c3/0x2a0 [ 892.936678][T16928] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 892.936712][T16928] ? __pfx_ksys_write+0x10/0x10 [ 892.936747][T16928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.936771][T16928] do_syscall_64+0x15f/0xf80 [ 892.936800][T16928] ? trace_irq_disable+0x3b/0x140 [ 892.936827][T16928] ? clear_bhb_loop+0x40/0x90 [ 892.936854][T16928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.936876][T16928] RIP: 0033:0x7f22352fc819 [ 892.936897][T16928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.936918][T16928] RSP: 002b:00007f2233556028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.936942][T16928] RAX: ffffffffffffffda RBX: 00007f2235575fa0 RCX: 00007f22352fc819 [ 892.936959][T16928] RDX: 000000000004c020 RSI: 0000200000000d00 RDI: 0000000000000003 [ 892.936974][T16928] RBP: 00007f2233556090 R08: 0000000000000000 R09: 0000000000000000 [ 892.936988][T16928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.937001][T16928] R13: 00007f2235576038 R14: 00007f2235575fa0 R15: 00007ffce3364748 [ 892.937036][T16928] [ 893.243835][ T1833] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 893.254877][T16938] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4048'. [ 893.364945][T16938] net_ratelimit: 8 callbacks suppressed [ 893.364961][T16938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.365468][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.401515][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.419441][ T1833] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 893.419475][ T1833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.419496][ T1833] usb 3-1: Product: syz [ 893.419511][ T1833] usb 3-1: Manufacturer: syz [ 893.419526][ T1833] usb 3-1: SerialNumber: syz [ 893.464464][ T1833] usb 3-1: config 0 descriptor?? [ 893.794462][ T1833] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 893.963476][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.573324][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.583684][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.635110][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.733906][T16950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.760558][T16950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.787299][ T1833] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 894.837155][ T1833] usb 3-1: USB disconnect, device number 65 [ 894.966754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.318465][T16412] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 895.546696][ T1833] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 895.634245][T16412] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 895.650158][T16412] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 895.741378][ T1833] usb 2-1: Using ep0 maxpacket: 16 [ 895.743843][ T1833] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 895.743872][ T1833] usb 2-1: config 0 has no interface number 0 [ 895.743924][ T1833] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 895.743952][ T1833] usb 2-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 895.747431][ T1833] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 895.747462][ T1833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.747484][ T1833] usb 2-1: Product: syz [ 895.747500][ T1833] usb 2-1: Manufacturer: syz [ 895.747517][ T1833] usb 2-1: SerialNumber: syz [ 895.774243][ T1833] usb 2-1: config 0 descriptor?? [ 895.775558][T16969] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 895.795704][ T1833] asix 2-1:0.34: probe with driver asix failed with error -22 [ 895.919153][T16412] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 895.928423][T16412] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 896.167883][T16412] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 896.344797][T16984] vlan2: entered promiscuous mode [ 896.344847][T16984] macvlan1: entered promiscuous mode [ 897.543013][T17013] FAULT_INJECTION: forcing a failure. [ 897.543013][T17013] name failslab, interval 1, probability 0, space 0, times 0 [ 897.543055][T17013] CPU: 0 UID: 0 PID: 17013 Comm: syz.3.4070 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 897.543085][T17013] Tainted: [L]=SOFTLOCKUP [ 897.543094][T17013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 897.543108][T17013] Call Trace: [ 897.543117][T17013] [ 897.543127][T17013] dump_stack_lvl+0xe8/0x150 [ 897.543166][T17013] should_fail_ex+0x46b/0x600 [ 897.543204][T17013] should_failslab+0xa8/0x100 [ 897.543233][T17013] __kmalloc_noprof+0xdf/0x7b0 [ 897.543258][T17013] ? kfree+0x4d/0x6c0 [ 897.543279][T17013] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 897.543318][T17013] tomoyo_realpath_from_path+0xe3/0x5d0 [ 897.543351][T17013] ? tomoyo_domain+0xd8/0x130 [ 897.543386][T17013] ? tomoyo_path_number_perm+0x219/0x630 [ 897.543412][T17013] tomoyo_path_number_perm+0x246/0x630 [ 897.543442][T17013] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 897.543466][T17013] ? __lock_acquire+0x6b5/0x2cf0 [ 897.543491][T17013] ? do_raw_spin_lock+0x12b/0x2f0 [ 897.543563][T17013] ? __fget_files+0x2a/0x420 [ 897.543588][T17013] ? __fget_files+0x2a/0x420 [ 897.543608][T17013] ? __fget_files+0x3a6/0x420 [ 897.543636][T17013] ? __fget_files+0x2a/0x420 [ 897.543662][T17013] security_file_ioctl+0xc3/0x2a0 [ 897.543691][T17013] __se_sys_ioctl+0x47/0x170 [ 897.543719][T17013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.543744][T17013] do_syscall_64+0x15f/0xf80 [ 897.543774][T17013] ? trace_irq_disable+0x3b/0x140 [ 897.543803][T17013] ? clear_bhb_loop+0x40/0x90 [ 897.543830][T17013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.543854][T17013] RIP: 0033:0x7f726f4ac819 [ 897.543875][T17013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.543893][T17013] RSP: 002b:00007f726d6fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 897.543919][T17013] RAX: ffffffffffffffda RBX: 00007f726f725fa0 RCX: 00007f726f4ac819 [ 897.543935][T17013] RDX: 0000200000000000 RSI: 000000008010640b RDI: 0000000000000003 [ 897.543950][T17013] RBP: 00007f726d6fe090 R08: 0000000000000000 R09: 0000000000000000 [ 897.543963][T17013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.543977][T17013] R13: 00007f726f726038 R14: 00007f726f725fa0 R15: 00007ffe3343c1f8 [ 897.544013][T17013] [ 897.544051][T17013] ERROR: Out of memory at tomoyo_realpath_from_path. [ 897.673398][T17016] genirq: Flags mismatch irq 10. 00202000 (pcl812) vs. 00202080 (virtio2) [ 897.685240][T17016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4062'. [ 898.384054][ T5887] net_ratelimit: 7 callbacks suppressed [ 898.384075][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.384653][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.384860][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.481590][ T1833] usb 2-1: USB disconnect, device number 77 [ 898.516825][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.537877][T16412] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 898.707042][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.833582][T16412] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 898.840792][T17016] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 898.977273][ T37] audit: type=1326 audit(1776333744.198:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17038 comm="syz.4.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22352fc819 code=0x7ffc0000 [ 898.977338][ T37] audit: type=1326 audit(1776333744.198:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17038 comm="syz.4.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22352fc819 code=0x7ffc0000 [ 898.977383][ T37] audit: type=1326 audit(1776333744.208:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17038 comm="syz.4.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22352fc819 code=0x7ffc0000 [ 898.977426][ T37] audit: type=1326 audit(1776333744.208:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17038 comm="syz.4.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22352fc819 code=0x7ffc0000 [ 898.977467][ T37] audit: type=1326 audit(1776333744.208:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17038 comm="syz.4.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f22352fc819 code=0x7ffc0000 [ 898.977507][ T37] audit: type=1326 audit(1776333744.208:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17038 comm="syz.4.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22352fc819 code=0x7ffc0000 [ 898.977551][ T37] audit: type=1326 audit(1776333744.208:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17038 comm="syz.4.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f22352fc819 code=0x7ffc0000 [ 898.977606][ T37] audit: type=1326 audit(1776333744.208:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17038 comm="syz.4.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22352fc819 code=0x7ffc0000 [ 898.977652][ T37] audit: type=1326 audit(1776333744.208:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17038 comm="syz.4.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f22352fc819 code=0x7ffc0000 [ 899.036728][ T1833] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 899.211447][ T1833] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.211504][ T1833] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 899.211530][ T1833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 899.211552][ T1833] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 899.211606][ T1833] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 899.211630][ T1833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.232742][ T1833] usb 2-1: config 0 descriptor?? [ 899.321895][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.734011][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.777443][ T5934] usb 2-1: USB disconnect, device number 78 [ 899.954574][ T3504] IPVS: stop unused estimator thread 0... [ 900.029773][ T37] audit: type=1326 audit(1776333745.288:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17038 comm="syz.4.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22352fc819 code=0x7ffc0000 [ 900.067158][T16412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.121356][T16412] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.184529][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.186313][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.211467][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.226218][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.369492][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.841192][T17080] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 900.841227][T17080] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 900.850966][T17080] vhci_hcd vhci_hcd.0: Device attached [ 901.187312][ T1833] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 901.416181][ T1833] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.416369][ T1833] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 901.416439][ T1833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 901.417085][ T1833] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 901.417180][ T1833] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 901.417241][ T1833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.763119][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.810357][ T5887] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 901.913622][ T1833] usb 3-1: config 0 descriptor?? [ 902.093544][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.299932][T17081] vhci_hcd: connection reset by peer [ 902.303096][T12067] vhci_hcd vhci_hcd.1: stop threads [ 902.303142][T12067] vhci_hcd vhci_hcd.1: release socket [ 902.303217][T12067] vhci_hcd vhci_hcd.1: disconnect device [ 902.548003][ T5809] usb 3-1: USB disconnect, device number 66 [ 902.844853][T16412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.846786][ T5934] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 903.010310][ T5934] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 903.010354][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.010377][ T5934] usb 2-1: Product: syz [ 903.010393][ T5934] usb 2-1: Manufacturer: syz [ 903.010409][ T5934] usb 2-1: SerialNumber: syz [ 903.032745][ T5934] usb 2-1: config 0 descriptor?? [ 903.051804][ T5934] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 903.070718][T16412] veth0_vlan: entered promiscuous mode [ 903.090357][T16412] veth1_vlan: entered promiscuous mode [ 903.170146][T16412] veth0_macvtap: entered promiscuous mode [ 903.218618][T16412] veth1_macvtap: entered promiscuous mode [ 903.488431][T16412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.706428][T16412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.744368][ T5961] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.744980][ T5961] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.745731][ T5961] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.746352][ T5961] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.827496][T17117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4100'. [ 904.197477][ T6002] net_ratelimit: 6 callbacks suppressed [ 904.197499][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.198017][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.235210][T13716] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 904.411044][T13716] usb 3-1: Using ep0 maxpacket: 16 [ 904.413692][T13716] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 904.413833][T13716] usb 3-1: config 0 has no interface number 0 [ 904.413884][T13716] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 904.413911][T13716] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 904.417168][T13716] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 904.417199][T13716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.417219][T13716] usb 3-1: Product: syz [ 904.417234][T13716] usb 3-1: Manufacturer: syz [ 904.417248][T13716] usb 3-1: SerialNumber: syz [ 904.580931][T13716] usb 3-1: config 0 descriptor?? [ 904.614940][T17121] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 904.615162][T17121] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 904.845692][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.949646][T17121] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 904.950279][T17121] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 905.157290][T13716] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 905.157611][T13716] asix 3-1:0.34: probe with driver asix failed with error -61 [ 905.164062][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.256892][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.257710][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.293151][ T5934] gspca_stk1135: reg_w 0x200 err -110 [ 905.294376][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 905.294395][ T5934] gspca_stk1135: Sensor write failed [ 905.294423][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 905.294434][ T5934] gspca_stk1135: Sensor write failed [ 905.294462][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 905.294470][ T5934] gspca_stk1135: Sensor read failed [ 905.294497][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 905.294508][ T5934] gspca_stk1135: Sensor read failed [ 905.294517][ T5934] gspca_stk1135: Detected sensor type unknown (0x0) [ 905.294570][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 905.294580][ T5934] gspca_stk1135: Sensor read failed [ 905.294606][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 905.294615][ T5934] gspca_stk1135: Sensor read failed [ 905.294642][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 905.294651][ T5934] gspca_stk1135: Sensor write failed [ 905.294679][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 905.294690][ T5934] gspca_stk1135: Sensor write failed [ 905.294789][ T5934] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 905.682838][T13716] usb 2-1: USB disconnect, device number 79 [ 905.729010][T12067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.729035][T12067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.798773][T17123] netlink: 'syz.4.4103': attribute type 1 has an invalid length. [ 905.798815][T17123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 905.801382][T17123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.801718][T17123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.802030][T17123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.972242][T12067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.972267][T12067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.740709][ T5934] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 906.757278][ T9] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 906.808713][T13716] libceph: connect (1)[c::]:6789 error -101 [ 906.808961][T13716] libceph: mon0 (1)[c::]:6789 connect error [ 906.811236][T13716] libceph: connect (1)[c::]:6789 error -101 [ 906.811436][T13716] libceph: mon0 (1)[c::]:6789 connect error [ 906.852948][T17170] ceph: No mds server is up or the cluster is laggy [ 906.906640][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 906.907817][ T5887] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 906.911749][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.911782][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.911807][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 906.911855][ T5934] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 906.911880][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.992993][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.993055][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 906.993082][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 906.993106][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 906.993151][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 906.993176][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.061307][ T5935] usb 3-1: USB disconnect, device number 67 [ 907.068896][T17181] FAULT_INJECTION: forcing a failure. [ 907.068896][T17181] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 907.068936][T17181] CPU: 1 UID: 0 PID: 17181 Comm: syz.3.4126 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 907.068969][T17181] Tainted: [L]=SOFTLOCKUP [ 907.068979][T17181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 907.068992][T17181] Call Trace: [ 907.069002][T17181] [ 907.069012][T17181] dump_stack_lvl+0xe8/0x150 [ 907.069050][T17181] should_fail_ex+0x46b/0x600 [ 907.069086][T17181] prepare_alloc_pages+0x22a/0x6b0 [ 907.069121][T17181] __alloc_frozen_pages_noprof+0x12f/0x380 [ 907.069149][T17181] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 907.069172][T17181] ? __alloc_frozen_pages_noprof+0x1de/0x380 [ 907.069200][T17181] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 907.069228][T17181] ? __pfx_policy_nodemask+0x10/0x10 [ 907.069256][T17181] __alloc_pages_noprof+0x10/0x100 [ 907.069282][T17181] alloc_pages_bulk_noprof+0x6c0/0x8c0 [ 907.069400][T17181] ? alloc_pages_noprof+0x161/0x2f0 [ 907.069428][T17181] __kasan_populate_vmalloc+0xc1/0x1d0 [ 907.069451][T17181] ? rt_spin_unlock+0x160/0x200 [ 907.069480][T17181] alloc_vmap_area+0xd47/0x1480 [ 907.069520][T17181] ? __pfx_alloc_vmap_area+0x10/0x10 [ 907.069546][T17181] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 907.069573][T17181] ? __get_vm_area_node+0x171/0x350 [ 907.069596][T17181] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 907.069628][T17181] __get_vm_area_node+0x226/0x350 [ 907.069661][T17181] __vmalloc_node_range_noprof+0x36a/0x1750 [ 907.069688][T17181] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 907.069739][T17181] ? is_bpf_text_address+0x26/0x2b0 [ 907.069773][T17181] ? kernel_text_address+0xa5/0xe0 [ 907.069803][T17181] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 907.069843][T17181] ? __lock_acquire+0x6b5/0x2cf0 [ 907.069871][T17181] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 907.069898][T17181] __vmalloc_noprof+0xd2/0x120 [ 907.069923][T17181] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 907.069956][T17181] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 907.069991][T17181] bpf_prog_alloc+0x3c/0x1a0 [ 907.070021][T17181] bpf_prog_load+0x7ba/0x1ae0 [ 907.070068][T17181] ? __pfx_bpf_prog_load+0x10/0x10 [ 907.070097][T17181] ? __might_fault+0xaf/0x130 [ 907.070145][T17181] ? bpf_lsm_bpf+0x9/0x20 [ 907.070173][T17181] ? security_bpf+0x7e/0x2d0 [ 907.070205][T17181] __sys_bpf+0x618/0x950 [ 907.070235][T17181] ? __pfx___sys_bpf+0x10/0x10 [ 907.070260][T17181] ? rt_mutex_slowunlock+0x1cb/0x300 [ 907.070311][T17181] ? ksys_write+0x248/0x270 [ 907.070336][T17181] ? __pfx_ksys_write+0x10/0x10 [ 907.070365][T17181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.070389][T17181] __x64_sys_bpf+0x7c/0x90 [ 907.070417][T17181] do_syscall_64+0x15f/0xf80 [ 907.070445][T17181] ? trace_irq_disable+0x3b/0x140 [ 907.070474][T17181] ? clear_bhb_loop+0x40/0x90 [ 907.070501][T17181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.070522][T17181] RIP: 0033:0x7f726f4ac819 [ 907.070544][T17181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.070562][T17181] RSP: 002b:00007f726d6fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 907.070584][T17181] RAX: ffffffffffffffda RBX: 00007f726f725fa0 RCX: 00007f726f4ac819 [ 907.070600][T17181] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 907.070614][T17181] RBP: 00007f726d6fe090 R08: 0000000000000000 R09: 0000000000000000 [ 907.070628][T17181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.070641][T17181] R13: 00007f726f726038 R14: 00007f726f725fa0 R15: 00007ffe3343c1f8 [ 907.070672][T17181] [ 907.076216][T17181] warn_alloc: 1 callbacks suppressed [ 907.076232][T17181] syz.3.4126: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 907.076308][T17181] CPU: 1 UID: 0 PID: 17181 Comm: syz.3.4126 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 907.076333][T17181] Tainted: [L]=SOFTLOCKUP [ 907.076340][T17181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 907.076350][T17181] Call Trace: [ 907.076358][T17181] [ 907.076366][T17181] dump_stack_lvl+0xe8/0x150 [ 907.076398][T17181] warn_alloc+0x263/0x3e0 [ 907.076425][T17181] ? kasan_quarantine_put+0xbb/0x1f0 [ 907.076450][T17181] ? __pfx_warn_alloc+0x10/0x10 [ 907.076474][T17181] ? __get_vm_area_node+0x23f/0x350 [ 907.076494][T17181] ? __get_vm_area_node+0x171/0x350 [ 907.076519][T17181] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 907.076548][T17181] ? __get_vm_area_node+0x23f/0x350 [ 907.076579][T17181] __vmalloc_node_range_noprof+0x38f/0x1750 [ 907.076624][T17181] ? is_bpf_text_address+0x26/0x2b0 [ 907.076656][T17181] ? kernel_text_address+0xa5/0xe0 [ 907.076684][T17181] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 907.076717][T17181] ? __lock_acquire+0x6b5/0x2cf0 [ 907.076742][T17181] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 907.076764][T17181] __vmalloc_noprof+0xd2/0x120 [ 907.076786][T17181] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 907.076813][T17181] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 907.076842][T17181] bpf_prog_alloc+0x3c/0x1a0 [ 907.076868][T17181] bpf_prog_load+0x7ba/0x1ae0 [ 907.076908][T17181] ? __pfx_bpf_prog_load+0x10/0x10 [ 907.076932][T17181] ? __might_fault+0xaf/0x130 [ 907.076974][T17181] ? bpf_lsm_bpf+0x9/0x20 [ 907.076997][T17181] ? security_bpf+0x7e/0x2d0 [ 907.077023][T17181] __sys_bpf+0x618/0x950 [ 907.077049][T17181] ? __pfx___sys_bpf+0x10/0x10 [ 907.077070][T17181] ? rt_mutex_slowunlock+0x1cb/0x300 [ 907.077108][T17181] ? ksys_write+0x248/0x270 [ 907.077133][T17181] ? __pfx_ksys_write+0x10/0x10 [ 907.077159][T17181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.077180][T17181] __x64_sys_bpf+0x7c/0x90 [ 907.077203][T17181] do_syscall_64+0x15f/0xf80 [ 907.077227][T17181] ? trace_irq_disable+0x3b/0x140 [ 907.077250][T17181] ? clear_bhb_loop+0x40/0x90 [ 907.077273][T17181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.077291][T17181] RIP: 0033:0x7f726f4ac819 [ 907.077318][T17181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.077333][T17181] RSP: 002b:00007f726d6fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 907.077353][T17181] RAX: ffffffffffffffda RBX: 00007f726f725fa0 RCX: 00007f726f4ac819 [ 907.077367][T17181] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 907.077380][T17181] RBP: 00007f726d6fe090 R08: 0000000000000000 R09: 0000000000000000 [ 907.077392][T17181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.077403][T17181] R13: 00007f726f726038 R14: 00007f726f725fa0 R15: 00007ffe3343c1f8 [ 907.077434][T17181] [ 907.107249][T17181] Mem-Info: [ 907.107266][T17181] active_anon:263 inactive_anon:5839 isolated_anon:0 [ 907.107266][T17181] active_file:27156 inactive_file:35666 isolated_file:0 [ 907.107266][T17181] unevictable:768 dirty:113 writeback:0 [ 907.107266][T17181] slab_reclaimable:12412 slab_unreclaimable:107974 [ 907.107266][T17181] mapped:30958 shmem:1361 pagetables:1378 [ 907.107266][T17181] sec_pagetables:0 bounce:0 [ 907.107266][T17181] kernel_misc_reclaimable:0 [ 907.107266][T17181] free:1299375 free_pcp:2785 free_cma:0 [ 907.107325][T17181] Node 0 active_anon:1052kB inactive_anon:23356kB active_file:108400kB inactive_file:142664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123808kB dirty:452kB writeback:0kB shmem:3908kB kernel_stack:13148kB pagetables:5400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 907.107397][T17181] Node 1 active_anon:0kB inactive_anon:0kB active_file:224kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 907.107440][T17181] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 907.107495][T17181] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 907.107528][T17181] Node 0 DMA32 free:1251424kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1052kB inactive_anon:23356kB active_file:108400kB inactive_file:142664kB unevictable:1536kB writepending:452kB zspages:0kB present:3129332kB managed:2565444kB mlocked:0kB bounce:0kB free_pcp:11140kB local_pcp:8872kB free_cma:0kB [ 907.107586][T17181] lowmem_reserve[]: 0 0 0 0 0 [ 907.107616][T17181] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:148kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 907.107666][T17181] lowmem_reserve[]: 0 0 0 0 0 [ 907.107697][T17181] Node 1 Normal free:3930716kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:224kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 907.107750][T17181] lowmem_reserve[]: 0 0 0 0 0 [ 907.107780][T17181] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 907.107888][T17181] Node 0 DMA32: 1654*4kB (UME) 2858*8kB (UME) 1936*16kB (UME) 649*32kB (UME) 363*64kB (UME) 222*128kB (UME) 111*256kB (UME) 83*512kB (UM) 45*1024kB (UME) 17*2048kB (UM) 236*4096kB (UM) = 1251336kB [ 907.108033][T17181] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 907.108122][T17181] Node 1 Normal: 1*4kB (U) 7*8kB (U) 12*16kB (U) 9*32kB (UM) 7*64kB (UM) 5*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 958*4096kB (M) = 3930716kB [ 907.108266][T17181] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 907.108283][T17181] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 907.108306][T17181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 907.108321][T17181] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 907.108336][T17181] 64179 total pagecache pages [ 907.108344][T17181] 0 pages in swap cache [ 907.108351][T17181] Free swap = 124996kB [ 907.108359][T17181] Total swap = 124996kB [ 907.108366][T17181] 2097051 pages RAM [ 907.108373][T17181] 0 pages HighMem/MovableOnly [ 907.108381][T17181] 424038 pages reserved [ 907.108388][T17181] 0 pages cma reserved [ 907.121485][T13716] libceph: connect (1)[c::]:6789 error -101 [ 907.121714][T13716] libceph: mon0 (1)[c::]:6789 connect error [ 907.456920][ T5809] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 907.457197][ C1] raw-gadget.3 gadget.3: ignoring, device is not running [ 907.586706][ T5809] usb 4-1: device descriptor read/64, error -32 [ 907.630359][T13716] libceph: connect (1)[c::]:6789 error -101 [ 907.630581][T13716] libceph: mon0 (1)[c::]:6789 connect error [ 907.826795][ T5809] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 907.827075][ C1] raw-gadget.3 gadget.3: ignoring, device is not running [ 907.956797][ T5809] usb 4-1: device descriptor read/64, error -32 [ 908.068598][ T5809] usb usb4-port1: attempt power cycle [ 908.324724][ T9] usb 5-1: config 0 descriptor?? [ 908.365725][ T5934] usb 2-1: config 0 descriptor?? [ 908.546761][ T5809] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 908.579404][ T5809] usb 4-1: device descriptor read/8, error -71 [ 908.870298][ T5934] usbhid 2-1:0.0: can't add hid device: -71 [ 908.870432][ T5934] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 908.914403][ T5934] usb 2-1: USB disconnect, device number 80 [ 908.921942][ T5809] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 908.940141][ T5809] usb 4-1: device descriptor read/8, error -71 [ 909.013929][ T6002] usb 5-1: USB disconnect, device number 117 [ 909.057321][ T5809] usb usb4-port1: unable to enumerate USB device [ 909.096715][ T5935] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 909.435148][T17191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4130'. [ 909.905027][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.905093][ T5935] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 909.905118][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.934225][ T5935] usb 3-1: config 0 descriptor?? [ 909.962767][ T5934] net_ratelimit: 12 callbacks suppressed [ 909.962790][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.963147][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.974950][ T5935] pwc: Askey VC010 type 2 USB webcam detected. [ 911.675137][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.675423][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.692447][ T5935] pwc: recv_control_msg error -32 req 02 val 2b00 [ 911.697142][ T5935] pwc: recv_control_msg error -32 req 02 val 2700 [ 911.699153][ T5935] pwc: recv_control_msg error -32 req 02 val 2c00 [ 911.706410][ T5935] pwc: recv_control_msg error -32 req 04 val 1000 [ 911.714364][ T5935] pwc: recv_control_msg error -32 req 04 val 1300 [ 911.721682][ T5935] pwc: recv_control_msg error -32 req 04 val 1400 [ 911.730776][ T5935] pwc: recv_control_msg error -32 req 02 val 2000 [ 911.733923][ T5935] pwc: recv_control_msg error -32 req 02 val 2100 [ 911.734826][ T5935] pwc: recv_control_msg error -32 req 04 val 1500 [ 911.766835][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.767089][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.962056][ T5935] pwc: recv_control_msg error -32 req 02 val 2400 [ 911.967073][ T5935] pwc: recv_control_msg error -32 req 02 val 2600 [ 911.967616][ T5935] pwc: recv_control_msg error -71 req 02 val 2900 [ 911.968123][ T5935] pwc: recv_control_msg error -71 req 02 val 2800 [ 911.968858][ T5935] pwc: recv_control_msg error -71 req 04 val 1100 [ 911.969359][ T5935] pwc: recv_control_msg error -71 req 04 val 1200 [ 912.078145][T17201] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 912.078229][T17201] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 912.087735][T17201] vhci_hcd vhci_hcd.0: Device attached [ 912.576966][T13716] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 912.808867][ T9] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 913.173538][ T9] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 913.173588][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.173656][ T9] usb 1-1: Product: syz [ 913.173714][ T9] usb 1-1: Manufacturer: syz [ 913.173770][ T9] usb 1-1: SerialNumber: syz [ 913.403590][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.406060][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.441270][ T9] usb 1-1: config 0 descriptor?? [ 913.443329][ T5935] pwc: Registered as video103. [ 913.512077][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 913.523140][ T5935] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 913.668294][T17202] vhci_hcd: connection reset by peer [ 913.682095][ T5935] usb 3-1: USB disconnect, device number 68 [ 913.682911][T12067] vhci_hcd vhci_hcd.4: stop threads [ 913.682937][T12067] vhci_hcd vhci_hcd.4: release socket [ 913.683008][T12067] vhci_hcd vhci_hcd.4: disconnect device [ 913.836571][T17211] netlink: 'syz.2.4137': attribute type 1 has an invalid length. [ 914.464394][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.464718][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.766718][ T5935] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 914.933445][ T5935] usb 3-1: Using ep0 maxpacket: 32 [ 914.937022][ T5935] usb 3-1: unable to get BOS descriptor or descriptor too short [ 914.957504][ T5935] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 914.960792][ T5935] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 914.960823][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.960844][ T5935] usb 3-1: Product: syz [ 914.960860][ T5935] usb 3-1: Manufacturer: syz [ 914.960876][ T5935] usb 3-1: SerialNumber: syz [ 915.167541][ T9] gspca_stk1135: reg_w 0x200 err -71 [ 915.168590][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 915.168605][ T9] gspca_stk1135: Sensor write failed [ 915.168635][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 915.168645][ T9] gspca_stk1135: Sensor write failed [ 915.168674][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 915.168684][ T9] gspca_stk1135: Sensor read failed [ 915.168711][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 915.168721][ T9] gspca_stk1135: Sensor read failed [ 915.168727][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 915.168761][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 915.168771][ T9] gspca_stk1135: Sensor read failed [ 915.168799][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 915.168809][ T9] gspca_stk1135: Sensor read failed [ 915.168839][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 915.168849][ T9] gspca_stk1135: Sensor write failed [ 915.168878][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 915.168887][ T9] gspca_stk1135: Sensor write failed [ 915.168979][ T9] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 915.175412][ T9] usb 1-1: USB disconnect, device number 83 [ 915.230213][T17216] netlink: 'syz.2.4140': attribute type 1 has an invalid length. [ 915.230237][T17216] netlink: 'syz.2.4140': attribute type 2 has an invalid length. [ 915.376012][ T5935] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 915.376413][ T5935] usb 3-1: found format II with max.bitrate = 13, frame size=0 [ 915.387397][ T5935] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 915.479454][ T5934] net_ratelimit: 2 callbacks suppressed [ 915.479470][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.479684][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.584695][ T5935] usb 3-1: USB disconnect, device number 69 [ 915.656948][ T5886] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 915.810745][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.810810][ T5886] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 915.810836][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.994993][ T5886] usb 5-1: config 0 descriptor?? [ 916.246912][T17243] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 916.246954][T17243] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 916.247679][T17243] vhci_hcd vhci_hcd.0: Device attached [ 916.779720][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.783412][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.124939][ T5934] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 917.419430][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.469889][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 917.479455][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00 [ 917.480757][ T5886] pwc: recv_control_msg error -32 req 02 val 2700 [ 917.481992][ T5886] pwc: recv_control_msg error -32 req 02 val 2c00 [ 917.482701][T17255] IPVS: set_ctl: invalid protocol: 60 172.20.20.32:7 [ 917.483423][ T5886] pwc: recv_control_msg error -32 req 04 val 1000 [ 917.484475][ T5886] pwc: recv_control_msg error -32 req 04 val 1300 [ 917.488546][ T5886] pwc: recv_control_msg error -32 req 04 val 1400 [ 917.489740][ T5886] pwc: recv_control_msg error -32 req 02 val 2000 [ 917.490741][ T5886] pwc: recv_control_msg error -32 req 02 val 2100 [ 917.491410][ T5886] pwc: recv_control_msg error -32 req 04 val 1500 [ 917.680825][T17245] vhci_hcd: connection reset by peer [ 917.681927][ T5933] vhci_hcd vhci_hcd.0: stop threads [ 917.681956][ T5933] vhci_hcd vhci_hcd.0: release socket [ 917.682235][ T5933] vhci_hcd vhci_hcd.0: disconnect device [ 917.710820][ T5886] pwc: recv_control_msg error -32 req 02 val 2400 [ 917.714928][ T5886] pwc: recv_control_msg error -32 req 02 val 2600 [ 917.715417][ T5886] pwc: recv_control_msg error -71 req 02 val 2900 [ 917.717728][ T5886] pwc: recv_control_msg error -71 req 02 val 2800 [ 917.718249][ T1833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.739873][ T5886] pwc: recv_control_msg error -71 req 04 val 1100 [ 917.743267][ T5886] pwc: recv_control_msg error -71 req 04 val 1200 [ 917.789516][T13716] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 917.851916][ T5886] pwc: Registered as video103. [ 917.860539][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.860839][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.885680][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.885938][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.012332][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 918.035414][T17261] FAULT_INJECTION: forcing a failure. [ 918.035414][T17261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.035441][T17261] CPU: 0 UID: 0 PID: 17261 Comm: syz.2.4156 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 918.035459][T17261] Tainted: [L]=SOFTLOCKUP [ 918.035464][T17261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 918.035471][T17261] Call Trace: [ 918.035477][T17261] [ 918.035483][T17261] dump_stack_lvl+0xe8/0x150 [ 918.035506][T17261] should_fail_ex+0x46b/0x600 [ 918.035526][T17261] _copy_from_iter+0x1d3/0x1670 [ 918.035548][T17261] ? trace_kmem_cache_alloc+0x29/0xe0 [ 918.035562][T17261] ? __alloc_skb+0x27d/0x7d0 [ 918.035575][T17261] ? __pfx__copy_from_iter+0x10/0x10 [ 918.035599][T17261] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 918.035613][T17261] ? __alloc_skb+0x27d/0x7d0 [ 918.035628][T17261] ? netlink_sendmsg+0x650/0xb40 [ 918.035641][T17261] ? skb_put+0x11b/0x210 [ 918.035656][T17261] netlink_sendmsg+0x6c0/0xb40 [ 918.035674][T17261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 918.035688][T17261] ? unwind_get_return_address+0x4d/0x90 [ 918.035704][T17261] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 918.035719][T17261] ____sys_sendmsg+0x94c/0x9c0 [ 918.035738][T17261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 918.035757][T17261] ? import_iovec+0x73/0xa0 [ 918.035771][T17261] ___sys_sendmsg+0x2a5/0x360 [ 918.035784][T17261] ? __lock_acquire+0x6b5/0x2cf0 [ 918.035799][T17261] ? __pfx____sys_sendmsg+0x10/0x10 [ 918.035839][T17261] ? __fget_files+0x2a/0x420 [ 918.035850][T17261] ? __fget_files+0x3a6/0x420 [ 918.035867][T17261] __x64_sys_sendmsg+0x1c3/0x2a0 [ 918.035884][T17261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 918.035904][T17261] ? __pfx_ksys_write+0x10/0x10 [ 918.035922][T17261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.035936][T17261] do_syscall_64+0x15f/0xf80 [ 918.035952][T17261] ? trace_irq_disable+0x3b/0x140 [ 918.035968][T17261] ? clear_bhb_loop+0x40/0x90 [ 918.035982][T17261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.035994][T17261] RIP: 0033:0x7f24ff68c819 [ 918.036007][T17261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.036018][T17261] RSP: 002b:00007f24fd8de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.036034][T17261] RAX: ffffffffffffffda RBX: 00007f24ff905fa0 RCX: 00007f24ff68c819 [ 918.036043][T17261] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 918.036051][T17261] RBP: 00007f24fd8de090 R08: 0000000000000000 R09: 0000000000000000 [ 918.036059][T17261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.036067][T17261] R13: 00007f24ff906038 R14: 00007f24ff905fa0 R15: 00007ffeb3ebdde8 [ 918.036086][T17261] [ 918.181561][T17263] UHID_CREATE from different security context by process 724 (syz.1.4158), this is not allowed. [ 919.414175][ T5886] usb 5-1: USB disconnect, device number 118 [ 920.196825][ T5887] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 920.385476][ T5887] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 920.385523][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.385544][ T5887] usb 3-1: Product: syz [ 920.385559][ T5887] usb 3-1: Manufacturer: syz [ 920.385575][ T5887] usb 3-1: SerialNumber: syz [ 920.411504][ T5887] usb 3-1: config 0 descriptor?? [ 920.627210][ T5887] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 920.917322][ T1833] net_ratelimit: 4 callbacks suppressed [ 920.917494][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.923681][ T1833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.486555][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.486860][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.877580][ T5887] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 922.336777][ T5934] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 922.380925][ T5887] usb 3-1: USB disconnect, device number 70 [ 922.528483][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.529457][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.645935][T17314] FAULT_INJECTION: forcing a failure. [ 922.645935][T17314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.645978][T17314] CPU: 1 UID: 0 PID: 17314 Comm: syz.0.4175 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 922.646009][T17314] Tainted: [L]=SOFTLOCKUP [ 922.646017][T17314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 922.646031][T17314] Call Trace: [ 922.646040][T17314] [ 922.646050][T17314] dump_stack_lvl+0xe8/0x150 [ 922.646089][T17314] should_fail_ex+0x46b/0x600 [ 922.646127][T17314] _copy_from_iter+0x1d3/0x1670 [ 922.646164][T17314] ? rcu_is_watching+0x15/0xb0 [ 922.646193][T17314] ? __pfx__copy_from_iter+0x10/0x10 [ 922.646234][T17314] ? __kmalloc_node_track_caller_noprof+0x390/0x7e0 [ 922.646272][T17314] ? netlink_sendmsg+0x650/0xb40 [ 922.646295][T17314] ? skb_put+0x11b/0x210 [ 922.646325][T17314] netlink_sendmsg+0x6c0/0xb40 [ 922.646359][T17314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 922.646386][T17314] ? unwind_get_return_address+0x4d/0x90 [ 922.646414][T17314] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 922.646443][T17314] ____sys_sendmsg+0x94c/0x9c0 [ 922.646475][T17314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 922.646517][T17314] ? import_iovec+0x73/0xa0 [ 922.646543][T17314] ___sys_sendmsg+0x2a5/0x360 [ 922.646568][T17314] ? __lock_acquire+0x6b5/0x2cf0 [ 922.646593][T17314] ? __pfx____sys_sendmsg+0x10/0x10 [ 922.646655][T17314] ? __fget_files+0x2a/0x420 [ 922.646677][T17314] ? __fget_files+0x3a6/0x420 [ 922.646707][T17314] __x64_sys_sendmsg+0x1c3/0x2a0 [ 922.646735][T17314] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 922.646771][T17314] ? __pfx_ksys_write+0x10/0x10 [ 922.646804][T17314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.646828][T17314] do_syscall_64+0x15f/0xf80 [ 922.646857][T17314] ? trace_irq_disable+0x3b/0x140 [ 922.646885][T17314] ? clear_bhb_loop+0x40/0x90 [ 922.646912][T17314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.646932][T17314] RIP: 0033:0x7f780d07c819 [ 922.646953][T17314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.646971][T17314] RSP: 002b:00007f780b2ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 922.646996][T17314] RAX: ffffffffffffffda RBX: 00007f780d2f5fa0 RCX: 00007f780d07c819 [ 922.647012][T17314] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 922.647027][T17314] RBP: 00007f780b2ce090 R08: 0000000000000000 R09: 0000000000000000 [ 922.647040][T17314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.647054][T17314] R13: 00007f780d2f6038 R14: 00007f780d2f5fa0 R15: 00007ffd1f94ff38 [ 922.647089][T17314] [ 923.150940][T17326] netlink: 'syz.1.4179': attribute type 1 has an invalid length. [ 923.396281][T17338] FAULT_INJECTION: forcing a failure. [ 923.396281][T17338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.396321][T17338] CPU: 0 UID: 0 PID: 17338 Comm: syz.3.4186 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 923.396352][T17338] Tainted: [L]=SOFTLOCKUP [ 923.396360][T17338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 923.396372][T17338] Call Trace: [ 923.396381][T17338] [ 923.396390][T17338] dump_stack_lvl+0xe8/0x150 [ 923.396426][T17338] should_fail_ex+0x46b/0x600 [ 923.396464][T17338] _copy_from_iter+0x1d3/0x1670 [ 923.396519][T17338] ? trace_kmem_cache_alloc+0x29/0xe0 [ 923.396543][T17338] ? __alloc_skb+0x27d/0x7d0 [ 923.396565][T17338] ? __pfx__copy_from_iter+0x10/0x10 [ 923.396593][T17338] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 923.396617][T17338] ? __alloc_skb+0x27d/0x7d0 [ 923.396645][T17338] ? netlink_sendmsg+0x650/0xb40 [ 923.396667][T17338] ? skb_put+0x11b/0x210 [ 923.396694][T17338] netlink_sendmsg+0x6c0/0xb40 [ 923.396729][T17338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 923.396756][T17338] ? unwind_get_return_address+0x4d/0x90 [ 923.396784][T17338] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 923.396813][T17338] ____sys_sendmsg+0x94c/0x9c0 [ 923.396845][T17338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 923.396881][T17338] ? import_iovec+0x73/0xa0 [ 923.396906][T17338] ___sys_sendmsg+0x2a5/0x360 [ 923.396932][T17338] ? __lock_acquire+0x6b5/0x2cf0 [ 923.396958][T17338] ? __pfx____sys_sendmsg+0x10/0x10 [ 923.397024][T17338] ? __fget_files+0x2a/0x420 [ 923.397043][T17338] ? __fget_files+0x3a6/0x420 [ 923.397075][T17338] __x64_sys_sendmsg+0x1c3/0x2a0 [ 923.397104][T17338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 923.397141][T17338] ? __pfx_ksys_write+0x10/0x10 [ 923.397177][T17338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.397201][T17338] do_syscall_64+0x15f/0xf80 [ 923.397230][T17338] ? trace_irq_disable+0x3b/0x140 [ 923.397259][T17338] ? clear_bhb_loop+0x40/0x90 [ 923.397286][T17338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.397308][T17338] RIP: 0033:0x7f726f4ac819 [ 923.397330][T17338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.397349][T17338] RSP: 002b:00007f726d6fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.397373][T17338] RAX: ffffffffffffffda RBX: 00007f726f725fa0 RCX: 00007f726f4ac819 [ 923.397391][T17338] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000014 [ 923.397406][T17338] RBP: 00007f726d6fe090 R08: 0000000000000000 R09: 0000000000000000 [ 923.397420][T17338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.397435][T17338] R13: 00007f726f726038 R14: 00007f726f725fa0 R15: 00007ffe3343c1f8 [ 923.397471][T17338] [ 923.471146][T17340] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 923.562717][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.563008][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.957668][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.957840][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.170395][T17363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4196'. [ 924.170422][T17363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4196'. [ 924.224367][T17363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4196'. [ 924.224379][ T3609] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.224415][T17363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4196'. [ 924.224684][ T3609] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.225949][ T3609] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.225997][ T3609] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.306080][T17366] FAULT_INJECTION: forcing a failure. [ 924.306080][T17366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.306121][T17366] CPU: 1 UID: 0 PID: 17366 Comm: syz.1.4197 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 924.306152][T17366] Tainted: [L]=SOFTLOCKUP [ 924.306161][T17366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 924.306174][T17366] Call Trace: [ 924.306183][T17366] [ 924.306193][T17366] dump_stack_lvl+0xe8/0x150 [ 924.306231][T17366] should_fail_ex+0x46b/0x600 [ 924.306270][T17366] _copy_from_user+0x2d/0xb0 [ 924.306296][T17366] do_sys_poll+0x2a0/0xf50 [ 924.306342][T17366] ? __lock_acquire+0x6b5/0x2cf0 [ 924.306364][T17366] ? __pfx_do_sys_poll+0x10/0x10 [ 924.306399][T17366] ? is_bpf_text_address+0x292/0x2b0 [ 924.306431][T17366] ? is_bpf_text_address+0x26/0x2b0 [ 924.306580][T17366] ? set_user_sigmask+0xcd/0x1c0 [ 924.306609][T17366] ? __pfx_set_user_sigmask+0x10/0x10 [ 924.306634][T17366] ? rt_mutex_slowunlock+0x1cb/0x300 [ 924.306658][T17366] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 924.306689][T17366] __se_sys_ppoll+0x209/0x2b0 [ 924.306718][T17366] ? fput+0xa0/0xd0 [ 924.306753][T17366] ? __pfx___se_sys_ppoll+0x10/0x10 [ 924.306784][T17366] ? __pfx_ksys_write+0x10/0x10 [ 924.306817][T17366] ? __x64_sys_ppoll+0x20/0xc0 [ 924.306846][T17366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.306872][T17366] do_syscall_64+0x15f/0xf80 [ 924.306901][T17366] ? trace_irq_disable+0x3b/0x140 [ 924.306931][T17366] ? clear_bhb_loop+0x40/0x90 [ 924.306959][T17366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.306981][T17366] RIP: 0033:0x7f31d9c1c819 [ 924.307003][T17366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.307021][T17366] RSP: 002b:00007f31d7e6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 924.307045][T17366] RAX: ffffffffffffffda RBX: 00007f31d9e95fa0 RCX: 00007f31d9c1c819 [ 924.307062][T17366] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 924.307077][T17366] RBP: 00007f31d7e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 924.307091][T17366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.307104][T17366] R13: 00007f31d9e96038 R14: 00007f31d9e95fa0 R15: 00007ffd1aacef08 [ 924.307141][T17366] [ 925.075656][T17377] FAULT_INJECTION: forcing a failure. [ 925.075656][T17377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.075698][T17377] CPU: 0 UID: 0 PID: 17377 Comm: syz.2.4202 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 925.075729][T17377] Tainted: [L]=SOFTLOCKUP [ 925.075737][T17377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 925.075750][T17377] Call Trace: [ 925.075760][T17377] [ 925.075770][T17377] dump_stack_lvl+0xe8/0x150 [ 925.075808][T17377] should_fail_ex+0x46b/0x600 [ 925.075847][T17377] _copy_from_user+0x2d/0xb0 [ 925.075870][T17377] vmci_host_unlocked_ioctl+0x299/0x2850 [ 925.075906][T17377] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 925.075959][T17377] ? kasan_quarantine_put+0xbb/0x1f0 [ 925.075999][T17377] ? tomoyo_path_number_perm+0x219/0x630 [ 925.076025][T17377] ? tomoyo_path_number_perm+0x219/0x630 [ 925.076052][T17377] ? do_vfs_ioctl+0x117b/0x1540 [ 925.076081][T17377] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 925.076128][T17377] ? __asan_memset+0x22/0x50 [ 925.076149][T17377] ? smack_file_ioctl+0x263/0x360 [ 925.076175][T17377] ? __pfx_smack_file_ioctl+0x10/0x10 [ 925.076209][T17377] ? __fget_files+0x2a/0x420 [ 925.076228][T17377] ? __fget_files+0x3a6/0x420 [ 925.076244][T17377] ? __fget_files+0x2a/0x420 [ 925.076264][T17377] ? bpf_lsm_file_ioctl+0x9/0x20 [ 925.076288][T17377] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 925.076316][T17377] __se_sys_ioctl+0xff/0x170 [ 925.076342][T17377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.076366][T17377] do_syscall_64+0x15f/0xf80 [ 925.076395][T17377] ? trace_irq_disable+0x3b/0x140 [ 925.076424][T17377] ? clear_bhb_loop+0x40/0x90 [ 925.076451][T17377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.076472][T17377] RIP: 0033:0x7f24ff68c819 [ 925.076502][T17377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.076520][T17377] RSP: 002b:00007f24fd8de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 925.076543][T17377] RAX: ffffffffffffffda RBX: 00007f24ff905fa0 RCX: 00007f24ff68c819 [ 925.076558][T17377] RDX: 0000200000000000 RSI: 00000000000007a0 RDI: 0000000000000004 [ 925.076572][T17377] RBP: 00007f24fd8de090 R08: 0000000000000000 R09: 0000000000000000 [ 925.076585][T17377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.076597][T17377] R13: 00007f24ff906038 R14: 00007f24ff905fa0 R15: 00007ffeb3ebdde8 [ 925.076630][T17377] [ 925.366948][T17383] FAULT_INJECTION: forcing a failure. [ 925.366948][T17383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.366988][T17383] CPU: 1 UID: 0 PID: 17383 Comm: syz.1.4203 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 925.367016][T17383] Tainted: [L]=SOFTLOCKUP [ 925.367024][T17383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 925.367035][T17383] Call Trace: [ 925.367043][T17383] [ 925.367053][T17383] dump_stack_lvl+0xe8/0x150 [ 925.367092][T17383] should_fail_ex+0x46b/0x600 [ 925.367128][T17383] _copy_to_user+0x31/0xb0 [ 925.367160][T17383] video_usercopy+0xe0a/0x1450 [ 925.367196][T17383] ? __pfx___video_do_ioctl+0x10/0x10 [ 925.367238][T17383] ? __pfx_video_usercopy+0x10/0x10 [ 925.367264][T17383] ? smack_file_ioctl+0x2c2/0x360 [ 925.367306][T17383] ? __fget_files+0x2a/0x420 [ 925.367326][T17383] ? __fget_files+0x3a6/0x420 [ 925.367350][T17383] v4l2_ioctl+0x190/0x1e0 [ 925.367380][T17383] ? __pfx_v4l2_ioctl+0x10/0x10 [ 925.367408][T17383] __se_sys_ioctl+0xff/0x170 [ 925.367432][T17383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.367454][T17383] do_syscall_64+0x15f/0xf80 [ 925.367480][T17383] ? trace_irq_disable+0x3b/0x140 [ 925.367508][T17383] ? clear_bhb_loop+0x40/0x90 [ 925.367534][T17383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.367554][T17383] RIP: 0033:0x7f31d9c1c819 [ 925.367574][T17383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.367592][T17383] RSP: 002b:00007f31d7e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 925.367615][T17383] RAX: ffffffffffffffda RBX: 00007f31d9e95fa0 RCX: 00007f31d9c1c819 [ 925.367632][T17383] RDX: 0000200000000380 RSI: 00000000c0485660 RDI: 0000000000000003 [ 925.367648][T17383] RBP: 00007f31d7e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 925.367662][T17383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.367675][T17383] R13: 00007f31d9e96038 R14: 00007f31d9e95fa0 R15: 00007ffd1aacef08 [ 925.367712][T17383] [ 925.444418][ T1833] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 925.592218][ T1833] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 925.592250][ T1833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.592271][ T1833] usb 3-1: Product: syz [ 925.592293][ T1833] usb 3-1: Manufacturer: syz [ 925.592308][ T1833] usb 3-1: SerialNumber: syz [ 925.602150][ T1833] usb 3-1: config 0 descriptor?? [ 925.823679][ T1833] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 925.826754][T17351] bond1: (slave syz_tun): Releasing active interface [ 925.865777][T17394] FAULT_INJECTION: forcing a failure. [ 925.865777][T17394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.865820][T17394] CPU: 1 UID: 0 PID: 17394 Comm: syz.3.4210 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 925.865855][T17394] Tainted: [L]=SOFTLOCKUP [ 925.865863][T17394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 925.865876][T17394] Call Trace: [ 925.865886][T17394] [ 925.865896][T17394] dump_stack_lvl+0xe8/0x150 [ 925.865935][T17394] should_fail_ex+0x46b/0x600 [ 925.865972][T17394] _copy_from_iter+0x1d3/0x1670 [ 925.866013][T17394] ? trace_kmem_cache_alloc+0x29/0xe0 [ 925.866037][T17394] ? __alloc_skb+0x27d/0x7d0 [ 925.866060][T17394] ? __pfx__copy_from_iter+0x10/0x10 [ 925.866091][T17394] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 925.866116][T17394] ? __alloc_skb+0x27d/0x7d0 [ 925.866146][T17394] ? netlink_sendmsg+0x650/0xb40 [ 925.866169][T17394] ? skb_put+0x11b/0x210 [ 925.866195][T17394] netlink_sendmsg+0x6c0/0xb40 [ 925.866239][T17394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.866266][T17394] ? unwind_get_return_address+0x4d/0x90 [ 925.866296][T17394] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 925.866325][T17394] ____sys_sendmsg+0x94c/0x9c0 [ 925.866358][T17394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 925.866395][T17394] ? import_iovec+0x73/0xa0 [ 925.866423][T17394] ___sys_sendmsg+0x2a5/0x360 [ 925.866449][T17394] ? __lock_acquire+0x6b5/0x2cf0 [ 925.866475][T17394] ? __pfx____sys_sendmsg+0x10/0x10 [ 925.866537][T17394] ? __fget_files+0x2a/0x420 [ 925.866558][T17394] ? __fget_files+0x3a6/0x420 [ 925.866589][T17394] __x64_sys_sendmsg+0x1c3/0x2a0 [ 925.866617][T17394] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 925.866653][T17394] ? __pfx_ksys_write+0x10/0x10 [ 925.866686][T17394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.866709][T17394] do_syscall_64+0x15f/0xf80 [ 925.866738][T17394] ? trace_irq_disable+0x3b/0x140 [ 925.866765][T17394] ? clear_bhb_loop+0x40/0x90 [ 925.866791][T17394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.866810][T17394] RIP: 0033:0x7f726f4ac819 [ 925.866831][T17394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.866850][T17394] RSP: 002b:00007f726d6fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.866873][T17394] RAX: ffffffffffffffda RBX: 00007f726f725fa0 RCX: 00007f726f4ac819 [ 925.866889][T17394] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 925.866902][T17394] RBP: 00007f726d6fe090 R08: 0000000000000000 R09: 0000000000000000 [ 925.866915][T17394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.866928][T17394] R13: 00007f726f726038 R14: 00007f726f725fa0 R15: 00007ffe3343c1f8 [ 925.866962][T17394] [ 926.039980][T13716] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 926.280306][T13716] usb 2-1: unable to get BOS descriptor or descriptor too short [ 926.281684][T13716] usb 2-1: config 179 has an invalid interface number: 156 but max is 0 [ 926.281708][T13716] usb 2-1: config 179 has no interface number 0 [ 926.281729][T13716] usb 2-1: config 179 interface 156 has no altsetting 0 [ 926.285024][T13716] usb 2-1: string descriptor 0 read error: -22 [ 926.285159][T13716] usb 2-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=74.98 [ 926.285175][T13716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.456693][ T5934] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 926.861400][T15609] net_ratelimit: 4 callbacks suppressed [ 926.861422][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.861816][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.927725][T13716] lan78xx 2-1:179.156 (unnamed net_device) (uninitialized): USB bus speed not supported [ 926.928253][T13716] lan78xx 2-1:179.156: probe with driver lan78xx failed with error -5 [ 926.973026][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.987052][T13716] usb 2-1: USB disconnect, device number 81 [ 927.010820][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.010885][ T5934] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 927.010912][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.089304][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.089444][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.123450][ T5934] usb 1-1: config 0 descriptor?? [ 927.145328][ T5934] pwc: Askey VC010 type 2 USB webcam detected. [ 927.157523][ T1833] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 927.320349][ T1833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.320931][T13716] usb 3-1: USB disconnect, device number 71 [ 927.555198][ T5934] pwc: recv_control_msg error -32 req 02 val 2b00 [ 927.556044][ T5934] pwc: recv_control_msg error -32 req 02 val 2700 [ 927.569749][ T5934] pwc: recv_control_msg error -32 req 02 val 2c00 [ 927.571078][ T5934] pwc: recv_control_msg error -32 req 04 val 1000 [ 927.572120][ T5934] pwc: recv_control_msg error -32 req 04 val 1300 [ 927.572869][ T5934] pwc: recv_control_msg error -32 req 04 val 1400 [ 927.573600][ T5934] pwc: recv_control_msg error -32 req 02 val 2000 [ 927.574668][ T5934] pwc: recv_control_msg error -32 req 02 val 2100 [ 927.776716][ T5934] pwc: recv_control_msg error -71 req 02 val 2500 [ 927.777590][ T5934] pwc: recv_control_msg error -71 req 02 val 2400 [ 927.779699][ T5934] pwc: recv_control_msg error -71 req 02 val 2600 [ 927.784942][ T5934] pwc: recv_control_msg error -71 req 02 val 2900 [ 927.837814][ T5934] pwc: recv_control_msg error -71 req 02 val 2800 [ 927.838565][ T5934] pwc: recv_control_msg error -71 req 04 val 1100 [ 927.839036][ T5934] pwc: recv_control_msg error -71 req 04 val 1200 [ 927.890213][ T5934] pwc: Registered as video103. [ 927.892345][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.892535][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.941775][ T5934] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 927.977394][ T5934] usb 1-1: USB disconnect, device number 84 [ 928.599232][T17427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.599768][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.810647][ T5934] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 928.829489][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 928.867295][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 928.870386][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 928.871595][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 928.872668][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 929.032864][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 929.108824][ T5934] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 929.108880][ T5934] usb 3-1: config 0 has no interface number 0 [ 929.108933][ T5934] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 929.108955][ T5934] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 929.108988][ T5934] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 929.109015][ T5934] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 929.109042][ T5934] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 929.109067][ T5934] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 929.214534][ T5934] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 929.214568][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.214589][ T5934] usb 3-1: Product: syz [ 929.214604][ T5934] usb 3-1: Manufacturer: syz [ 929.214620][ T5934] usb 3-1: SerialNumber: syz [ 929.272838][ T5934] usb 3-1: config 0 descriptor?? [ 929.494082][ T5934] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 929.523208][ T5934] usb 3-1: USB disconnect, device number 72 [ 930.262258][T17441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4230'. [ 930.516204][T17428] chnl_net:caif_netlink_parms(): no params data found [ 930.807055][T17467] syz.0.4240 (17467) used greatest stack depth: 17336 bytes left [ 930.812397][T17428] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.818326][T17428] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.818541][T17428] bridge_slave_0: entered allmulticast mode [ 930.821695][T17428] bridge_slave_0: entered promiscuous mode [ 930.831598][T17428] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.831811][T17428] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.831994][T17428] bridge_slave_1: entered allmulticast mode [ 930.834676][T17428] bridge_slave_1: entered promiscuous mode [ 930.955619][T17428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.974470][T17428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.001458][ T36] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 931.004792][ T5113] Bluetooth: hci2: command tx timeout [ 931.067659][T17428] team0: Port device team_slave_0 added [ 931.072333][T17428] team0: Port device team_slave_1 added [ 931.156437][T17428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.156454][T17428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.156483][T17428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.210384][ T36] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 931.210419][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.210439][ T36] usb 3-1: Product: syz [ 931.210453][ T36] usb 3-1: Manufacturer: syz [ 931.210467][ T36] usb 3-1: SerialNumber: syz [ 931.255247][ T36] usb 3-1: config 0 descriptor?? [ 931.255730][T17428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.255745][T17428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.255770][T17428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.536773][ T36] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 931.674082][T17428] hsr_slave_0: entered promiscuous mode [ 931.677436][T17428] hsr_slave_1: entered promiscuous mode [ 931.680763][T17428] debugfs: 'hsr0' already exists in 'hsr' [ 931.680793][T17428] Cannot create hsr debugfs directory [ 932.195065][ T5934] net_ratelimit: 8 callbacks suppressed [ 932.195087][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.507568][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.578679][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.578760][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.757561][ T36] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 932.910140][ T36] usb 3-1: USB disconnect, device number 73 [ 932.994906][T17520] FAULT_INJECTION: forcing a failure. [ 932.994906][T17520] name failslab, interval 1, probability 0, space 0, times 0 [ 932.994947][T17520] CPU: 0 UID: 0 PID: 17520 Comm: syz.3.4262 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 932.994977][T17520] Tainted: [L]=SOFTLOCKUP [ 932.994985][T17520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 932.994998][T17520] Call Trace: [ 932.995007][T17520] [ 932.995017][T17520] dump_stack_lvl+0xe8/0x150 [ 932.995056][T17520] should_fail_ex+0x46b/0x600 [ 932.995093][T17520] should_failslab+0xa8/0x100 [ 932.995122][T17520] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 932.995147][T17520] ? __alloc_skb+0x1d0/0x7d0 [ 932.995170][T17520] ? lockdep_hardirqs_on+0x7a/0x110 [ 932.995206][T17520] __alloc_skb+0x1d0/0x7d0 [ 932.995236][T17520] netlink_sendmsg+0x5d4/0xb40 [ 932.995271][T17520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.995298][T17520] ? unwind_get_return_address+0x4d/0x90 [ 932.995324][T17520] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 932.995360][T17520] ____sys_sendmsg+0x94c/0x9c0 [ 932.995394][T17520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 932.995431][T17520] ? import_iovec+0x73/0xa0 [ 932.995457][T17520] ___sys_sendmsg+0x2a5/0x360 [ 932.995481][T17520] ? __lock_acquire+0x6b5/0x2cf0 [ 932.995504][T17520] ? __pfx____sys_sendmsg+0x10/0x10 [ 932.995567][T17520] ? __fget_files+0x2a/0x420 [ 932.995582][T17520] ? __fget_files+0x3a6/0x420 [ 932.995607][T17520] __x64_sys_sendmsg+0x1c3/0x2a0 [ 932.995630][T17520] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 932.995659][T17520] ? __pfx_ksys_write+0x10/0x10 [ 932.995687][T17520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.995706][T17520] do_syscall_64+0x15f/0xf80 [ 932.995727][T17520] ? trace_irq_disable+0x3b/0x140 [ 932.995749][T17520] ? clear_bhb_loop+0x40/0x90 [ 932.995770][T17520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.995787][T17520] RIP: 0033:0x7f726f4ac819 [ 932.995804][T17520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.995819][T17520] RSP: 002b:00007f726d6fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.995839][T17520] RAX: ffffffffffffffda RBX: 00007f726f725fa0 RCX: 00007f726f4ac819 [ 932.995852][T17520] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 932.995864][T17520] RBP: 00007f726d6fe090 R08: 0000000000000000 R09: 0000000000000000 [ 932.995876][T17520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.995887][T17520] R13: 00007f726f726038 R14: 00007f726f725fa0 R15: 00007ffe3343c1f8 [ 932.995918][T17520] [ 933.058346][T13716] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 933.077832][ T5113] Bluetooth: hci2: command tx timeout [ 933.159106][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.159283][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.218879][T13716] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 933.218909][T13716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.218928][T13716] usb 2-1: Product: syz [ 933.218942][T13716] usb 2-1: Manufacturer: syz [ 933.218956][T13716] usb 2-1: SerialNumber: syz [ 933.224586][T13716] usb 2-1: config 0 descriptor?? [ 933.237358][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.239976][T13716] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 933.557397][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.646277][T17428] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 933.685730][T17428] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 933.696005][T17428] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 933.763377][T17428] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 933.781080][T17428] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 933.884333][T17428] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 933.885367][T17428] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 933.919802][T17533] FAULT_INJECTION: forcing a failure. [ 933.919802][T17533] name failslab, interval 1, probability 0, space 0, times 0 [ 933.919842][T17533] CPU: 1 UID: 0 PID: 17533 Comm: syz.0.4267 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 933.919871][T17533] Tainted: [L]=SOFTLOCKUP [ 933.919879][T17533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 933.919891][T17533] Call Trace: [ 933.919900][T17533] [ 933.919910][T17533] dump_stack_lvl+0xe8/0x150 [ 933.919947][T17533] should_fail_ex+0x46b/0x600 [ 933.919986][T17533] should_failslab+0xa8/0x100 [ 933.920015][T17533] __kmalloc_cache_noprof+0x84/0x690 [ 933.920043][T17533] ? __io_uring_add_tctx_node+0x199/0x5f0 [ 933.920075][T17533] __io_uring_add_tctx_node+0x199/0x5f0 [ 933.920107][T17533] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 933.920130][T17533] ? __fget_files+0x2a/0x420 [ 933.920154][T17533] ? __fget_files+0x2a/0x420 [ 933.920176][T17533] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 933.920205][T17533] __se_sys_io_uring_enter+0x191e/0x1bf0 [ 933.920234][T17533] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 933.920278][T17533] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 933.920306][T17533] ? fput+0xa0/0xd0 [ 933.920337][T17533] ? ksys_write+0x248/0x270 [ 933.920364][T17533] ? __pfx_ksys_write+0x10/0x10 [ 933.920395][T17533] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 933.920431][T17533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.920455][T17533] do_syscall_64+0x15f/0xf80 [ 933.920484][T17533] ? trace_irq_disable+0x3b/0x140 [ 933.920511][T17533] ? clear_bhb_loop+0x40/0x90 [ 933.920537][T17533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.920559][T17533] RIP: 0033:0x7f780d07c819 [ 933.920580][T17533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.920599][T17533] RSP: 002b:00007f780b2ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 933.920623][T17533] RAX: ffffffffffffffda RBX: 00007f780d2f5fa0 RCX: 00007f780d07c819 [ 933.920639][T17533] RDX: 00000000000077ae RSI: 000000000000742f RDI: 0000000000000006 [ 933.920653][T17533] RBP: 00007f780b2ce090 R08: 0000000000000000 R09: 0000000000000000 [ 933.920666][T17533] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 933.920679][T17533] R13: 00007f780d2f6038 R14: 00007f780d2f5fa0 R15: 00007ffd1f94ff38 [ 933.920714][T17533] [ 933.921234][T17533] ------------[ cut here ]------------ [ 933.921243][T17533] !test_bit(IO_WQ_BIT_EXIT, &wq->state) [ 933.921251][T17533] WARNING: io_uring/io-wq.c:1396 at io_wq_put_and_exit+0xa36/0xa70, CPU#1: syz.0.4267/17533 [ 933.921287][T17533] Modules linked in: [ 933.921307][T17533] CPU: 1 UID: 0 PID: 17533 Comm: syz.0.4267 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 933.921335][T17533] Tainted: [L]=SOFTLOCKUP [ 933.921342][T17533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 933.921354][T17533] RIP: 0010:io_wq_put_and_exit+0xa36/0xa70 [ 933.921379][T17533] Code: fd 65 48 8b 05 cb e4 d8 0d 48 3b 44 24 50 75 4d 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 5b d0 2c fd 90 <0f> 0b 90 e9 36 f6 ff ff e8 4d d0 2c fd 4c 89 f7 be 03 00 00 00 e8 [ 933.921397][T17533] RSP: 0018:ffffc90005317b90 EFLAGS: 00010293 [ 933.921424][T17533] RAX: ffffffff8496db75 RBX: 0000000000000000 RCX: ffff8880368b5c40 [ 933.921440][T17533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 933.921453][T17533] RBP: ffffc90005317ce8 R08: 0000000000000000 R09: 0000000000000000 [ 933.921468][T17533] R10: dffffc0000000000 R11: ffffed100c3d1a01 R12: 00000000fffffff4 [ 933.921483][T17533] R13: ffff888061e8d000 R14: ffff8880368b65d0 R15: 1ffff11006d16cba [ 933.921499][T17533] FS: 00007f780b2ce6c0(0000) GS:ffff888126224000(0000) knlGS:0000000000000000 [ 933.921517][T17533] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 933.921531][T17533] CR2: 00007f780b2acff8 CR3: 000000002ad4c000 CR4: 00000000003526f0 [ 933.921553][T17533] Call Trace: [ 933.921562][T17533] [ 933.921570][T17533] ? __kasan_kmalloc+0x22/0xb0 [ 933.921598][T17533] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 933.921650][T17533] ? __io_uring_add_tctx_node+0x199/0x5f0 [ 933.921680][T17533] __io_uring_add_tctx_node+0x402/0x5f0 [ 933.921712][T17533] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 933.921731][T17533] ? __fget_files+0x2a/0x420 [ 933.921754][T17533] ? __fget_files+0x2a/0x420 [ 933.921777][T17533] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 933.921807][T17533] __se_sys_io_uring_enter+0x191e/0x1bf0 [ 933.921834][T17533] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 933.921876][T17533] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 933.921904][T17533] ? fput+0xa0/0xd0 [ 933.921935][T17533] ? ksys_write+0x248/0x270 [ 933.921964][T17533] ? __pfx_ksys_write+0x10/0x10 [ 933.921994][T17533] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 933.922019][T17533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.922043][T17533] do_syscall_64+0x15f/0xf80 [ 933.922073][T17533] ? trace_irq_disable+0x3b/0x140 [ 933.922101][T17533] ? clear_bhb_loop+0x40/0x90 [ 933.922128][T17533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.922149][T17533] RIP: 0033:0x7f780d07c819 [ 933.922167][T17533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.922185][T17533] RSP: 002b:00007f780b2ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 933.922207][T17533] RAX: ffffffffffffffda RBX: 00007f780d2f5fa0 RCX: 00007f780d07c819 [ 933.922222][T17533] RDX: 00000000000077ae RSI: 000000000000742f RDI: 0000000000000006 [ 933.922236][T17533] RBP: 00007f780b2ce090 R08: 0000000000000000 R09: 0000000000000000 [ 933.922250][T17533] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 933.922264][T17533] R13: 00007f780d2f6038 R14: 00007f780d2f5fa0 R15: 00007ffd1f94ff38 [ 933.922298][T17533] [ 933.922310][T17533] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 933.922326][T17533] CPU: 1 UID: 0 PID: 17533 Comm: syz.0.4267 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 933.922353][T17533] Tainted: [L]=SOFTLOCKUP [ 933.922361][T17533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 933.922373][T17533] Call Trace: [ 933.922381][T17533] [ 933.922391][T17533] vpanic+0x56c/0xa60 [ 933.922422][T17533] ? __pfx__printk+0x10/0x10 [ 933.922447][T17533] ? __pfx_vpanic+0x10/0x10 [ 933.922465][T17533] ? is_bpf_text_address+0x292/0x2b0 [ 933.922495][T17533] ? is_bpf_text_address+0x26/0x2b0 [ 933.922534][T17533] panic+0xc5/0xd0 [ 933.922553][T17533] ? __pfx_panic+0x10/0x10 [ 933.922593][T17533] __warn+0x315/0x4c0 [ 933.922612][T17533] ? io_wq_put_and_exit+0xa36/0xa70 [ 933.922639][T17533] ? io_wq_put_and_exit+0xa36/0xa70 [ 933.922664][T17533] __report_bug+0x29a/0x540 [ 933.922700][T17533] ? io_wq_put_and_exit+0xa36/0xa70 [ 933.922726][T17533] ? __pfx___report_bug+0x10/0x10 [ 933.922755][T17533] ? is_bpf_text_address+0x292/0x2b0 [ 933.922785][T17533] ? is_bpf_text_address+0x26/0x2b0 [ 933.922829][T17533] ? io_wq_put_and_exit+0xa36/0xa70 [ 933.922853][T17533] report_bug+0x16a/0x220 [ 933.922883][T17533] ? io_wq_put_and_exit+0xa36/0xa70 [ 933.922906][T17533] ? io_wq_put_and_exit+0xa38/0xa70 [ 933.922930][T17533] handle_bug+0x9c/0x200 [ 933.922953][T17533] exc_invalid_op+0x1a/0x50 [ 933.922975][T17533] asm_exc_invalid_op+0x1a/0x20 [ 933.922994][T17533] RIP: 0010:io_wq_put_and_exit+0xa36/0xa70 [ 933.923019][T17533] Code: fd 65 48 8b 05 cb e4 d8 0d 48 3b 44 24 50 75 4d 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 5b d0 2c fd 90 <0f> 0b 90 e9 36 f6 ff ff e8 4d d0 2c fd 4c 89 f7 be 03 00 00 00 e8 [ 933.923036][T17533] RSP: 0018:ffffc90005317b90 EFLAGS: 00010293 [ 933.923055][T17533] RAX: ffffffff8496db75 RBX: 0000000000000000 RCX: ffff8880368b5c40 [ 933.923070][T17533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 933.923083][T17533] RBP: ffffc90005317ce8 R08: 0000000000000000 R09: 0000000000000000 [ 933.923098][T17533] R10: dffffc0000000000 R11: ffffed100c3d1a01 R12: 00000000fffffff4 [ 933.923114][T17533] R13: ffff888061e8d000 R14: ffff8880368b65d0 R15: 1ffff11006d16cba [ 933.923139][T17533] ? io_wq_put_and_exit+0xa35/0xa70 [ 933.923167][T17533] ? __kasan_kmalloc+0x22/0xb0 [ 933.923193][T17533] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 933.923219][T17533] ? __io_uring_add_tctx_node+0x199/0x5f0 [ 933.923248][T17533] __io_uring_add_tctx_node+0x402/0x5f0 [ 933.923279][T17533] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 933.923303][T17533] ? __fget_files+0x2a/0x420 [ 933.923325][T17533] ? __fget_files+0x2a/0x420 [ 933.923349][T17533] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 933.923378][T17533] __se_sys_io_uring_enter+0x191e/0x1bf0 [ 933.923415][T17533] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 933.923459][T17533] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 933.923484][T17533] ? fput+0xa0/0xd0 [ 933.923515][T17533] ? ksys_write+0x248/0x270 [ 933.923542][T17533] ? __pfx_ksys_write+0x10/0x10 [ 933.923573][T17533] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 933.923600][T17533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.923624][T17533] do_syscall_64+0x15f/0xf80 [ 933.923651][T17533] ? trace_irq_disable+0x3b/0x140 [ 933.923679][T17533] ? clear_bhb_loop+0x40/0x90 [ 933.923706][T17533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.923728][T17533] RIP: 0033:0x7f780d07c819 [ 933.923747][T17533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.923766][T17533] RSP: 002b:00007f780b2ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 933.923788][T17533] RAX: ffffffffffffffda RBX: 00007f780d2f5fa0 RCX: 00007f780d07c819 [ 933.923803][T17533] RDX: 00000000000077ae RSI: 000000000000742f RDI: 0000000000000006 [ 933.923817][T17533] RBP: 00007f780b2ce090 R08: 0000000000000000 R09: 0000000000000000 [ 933.923830][T17533] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 933.923844][T17533] R13: 00007f780d2f6038 R14: 00007f780d2f5fa0 R15: 00007ffd1f94ff38 [ 933.923879][T17533] [ 933.924045][T17533] Kernel Offset: disabled