last executing test programs: 5m27.810305499s ago: executing program 2 (id=676): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x881) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000040)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000100)='/dev/nbd#\x00') r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/73, 0x49, 0x0, &(0x7f00000001c0)=""/180, 0xb4}, &(0x7f00000002c0)=0x40) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000300)='-@\x00') r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)=0x0) write$cgroup_pid(r4, &(0x7f00000003c0)=r5, 0x12) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, &(0x7f0000000400)={r4, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x6, 0x7}) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000440)={&(0x7f0000ffd000/0x3000)=nil, 0x10001, 0x5, 0x4}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f0000000480)={0x100000000}) syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@broadcast, @remote, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "5c3d1dce2b2651daeb243f0c8b402c14ad347f21b111cf2a1c14578fde0b7da53fabd0576c84b1bb2127309ebb6f68cfbdd497c669ecd0e67cfb0306eedf167c"}}}}, &(0x7f0000000540)={0x0, 0x1, [0xaa8, 0x162, 0x9cc, 0xcd]}) r8 = semget$private(0x0, 0x4, 0x143) semctl$IPC_RMID(r8, 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000580)=0x14) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f00000005c0)={0x1, 0x2, 0x4, 0x3, 0x7, 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01864c2, &(0x7f0000000600)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000640)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r4, 0xc01064c4, &(0x7f00000006c0)={&(0x7f0000000680)=[r9, r10], 0x2}) sendmsg$NFT_BATCH(r4, &(0x7f0000000c00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x1b4, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x174, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa4a4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8a3}]}]}, @NFT_MSG_DELCHAIN={0x78, 0x5, 0xa, 0xa00, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x70}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELSET={0x1d8, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x102}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_EXPRESSIONS={0xc4, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7ff}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3ff}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_HASH_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_EXPRESSIONS={0xf0, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x196a}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x100000001}]}}}, {0x64, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x70}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x40}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x470}, 0x1, 0x0, 0x0, 0x40044}, 0x400c800) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000001080)={&(0x7f0000000c40)=0x9, 0x4, &(0x7f0000000c80)=[{}, {}, {}, {}, {}], &(0x7f0000001040)}) socket$netlink(0x10, 0x3, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f00000010c0)={0x0, @aes128, 0x0, @desc2}) 5m27.73415468s ago: executing program 2 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}], 0x58}, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x4fd, 0x8001}, 0x0, 0x0, 0x0, 0x0) 5m27.543859014s ago: executing program 2 (id=680): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, 0x0) getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x18, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 5m27.292093991s ago: executing program 2 (id=681): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe0000000069107c000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x80, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x2200890, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'pcmad\x00', [0x3, 0x5, 0xff, 0x27c, 0x32e8, 0x1, 0x3, 0x101, 0x200, 0x3, 0x3, 0x1, 0x1d59c2be, 0x1c000, 0x10000, 0x9, 0x0, 0xfff, 0xf, 0x3, 0x3, 0x7, 0xd, 0x80000000, 0x6, 0x3, 0x8, 0xfffffffa, 0xffffffff, 0xfffffffc, 0x4, 0x400]}) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x8, 0x101}, {0x8, 0xff}]}, 0x14, 0x0) 5m27.163871304s ago: executing program 2 (id=682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}], 0x58}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 5m24.859444134s ago: executing program 2 (id=693): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x395e000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = memfd_create(&(0x7f0000000080)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x300000c, 0x4004012, r1, 0x0) ftruncate(r1, 0x200000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ftruncate(r1, 0xa8) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xc, 0xa00, 0x6, 0x40, 0x100, 0x3}}) 5m24.502917566s ago: executing program 32 (id=693): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x395e000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = memfd_create(&(0x7f0000000080)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x300000c, 0x4004012, r1, 0x0) ftruncate(r1, 0x200000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ftruncate(r1, 0xa8) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xc, 0xa00, 0x6, 0x40, 0x100, 0x3}}) 7.914873425s ago: executing program 0 (id=2125): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0x1, {0x80}}, 0x4a2d82) 7.419533819s ago: executing program 4 (id=2129): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private2, 0xfffffffb}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket(0xa, 0x5, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001bc0)) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000084000000000008000300000a0700060020000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7.419312267s ago: executing program 0 (id=2130): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) epoll_create(0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c0400001000010400000000000000000048", @ANYRES32=r1, @ANYBLOB="10100000000000000800002005000000e4031680a40001800c0007"], 0x40c}}, 0x0) 7.304388722s ago: executing program 4 (id=2132): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@multiplanar_fd={0x3, 0xa, 0x4, 0x66f030fe06d20361, 0x80000001, {0x0, 0xea60}, {0x4, 0x8, 0x8, 0x4, 0x2, 0x91, "0056c368"}, 0xc, 0x4, {0x0}}) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x1}, 0x4004000) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x2000000004, 0x100000001, 0x0, 0x6, 0x7, 0x6, 0xfffffffffffffffc, 0x100ffc}) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000100)="f5066fc11f0b372ab9d23f0154b7465d859ffedd21c573a13c78453bb1c11067d44104e91b410f7b1cd4acdb943b60a81f0f246ecd23b1dec4a2f614f12ae4f467c2ccbb91d735a88d44015b2af4ac22b83414f4916e97968c1181abab55255b88551993ace271948b6bdeaae55190a928", 0x71}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@broadcast, @loopback, 0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@multiplanar_fd={0x3, 0xa, 0x4, 0x66f030fe06d20361, 0x80000001, {0x0, 0xea60}, {0x4, 0x8, 0x8, 0x4, 0x2, 0x91, "0056c368"}, 0xc, 0x4, {0x0}}) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x1}, 0x4004000) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x2000000004, 0x100000001, 0x0, 0x6, 0x7, 0x6, 0xfffffffffffffffc, 0x100ffc}) (async) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000100)="f5066fc11f0b372ab9d23f0154b7465d859ffedd21c573a13c78453bb1c11067d44104e91b410f7b1cd4acdb943b60a81f0f246ecd23b1dec4a2f614f12ae4f467c2ccbb91d735a88d44015b2af4ac22b83414f4916e97968c1181abab55255b88551993ace271948b6bdeaae55190a928", 0x71}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@broadcast, @loopback, 0x1}, 0x10) (async) 7.23606487s ago: executing program 0 (id=2133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x84, 0x7f, 0x80000001, 0x1, 0x0, 0x4, 0x1000, 0x3ff, 0x8, 0x8, 0x8001], 0x54000, 0x100a04}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x0, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x3, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.082897855s ago: executing program 3 (id=2136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000840)={{r1, &(0x7f0000000440)='!.\x00', 0x80100, &(0x7f0000000600)={@_ha_fsid={[0x2, 0x8]}, {0xb6, 0x200, 0x2, 0xf}}, 0x61, &(0x7f0000000640), &(0x7f0000000680)=0x5}, {[0xfffffffd, 0x2a2, 0xfff, 0x2]}, 0xfffffffe, 0xf2, &(0x7f0000000740)=""/242}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={0x0, 0xffffffffffffffff, 0x0, 0x2f}, 0x18) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f00000018c0)=""/4108, 0x100c}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}], 0x11, 0x2000, 0x0) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x16) mknodat(r8, &(0x7f0000001580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0xca) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) utimensat(r8, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={{r9, r10/1000+10000}}, 0x100) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000006800)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000a40)=0xe8) r15 = getgid() mount$fuseblk(&(0x7f0000000400), &(0x7f00000057c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000067c0), 0x80080, &(0x7f0000006940)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r14}, 0x2c, {'group_id', 0x3d, r15}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x97f}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions}, {@default_permissions}, {@allow_other}], [{@subj_role}, {@measure}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, 0x0) setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f00000009c0)=0x2, 0x4) sendmmsg$inet6(r12, &(0x7f0000000cc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0xd6}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}}}}], 0x40}}], 0x1, 0x0) sendmmsg$inet6(r11, &(0x7f0000005700)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000003a00)=[{&(0x7f00000001c0)="864f636ec3d2706c2d523ded0c276fc3412fb97facb8432741fc1f1874ce2803271056e8ad7e6548cb0cc78768e5d76cf24f421ba9ac08d5767e0e64720905741815478d7262db4eabf0d3ac21fef97db10ed7a83ffdc2cecb29b36bf75761a4f58d57a53b3ba4f5371d1a8398f0aca8fd40fb41b2b88507779ac031ff32bb2f28c2d7f6d10056bd506a4072f71baf4c8111cd47dda2ea28440a9b6da69841fb2560e3d6a922a9399a650540e2f29ae34a81f1810bf43bf664f448879685bcc47e2fe963dad904e60b6b0168047e0c83909307216b5303d9636cb9a60d9b40a2c8d904dbe2", 0xe5}, {&(0x7f0000000340)="b5fc32aa52733872baa99b7cf8636961175719c0ad97962193032afb3779c131089bf27fd6e1cce5ee9c14463cfa28e19d3ec3b0fcbcb6ae5144247c1095bf14deb41ca4c78ea011dbd8a5fd29f1d42e4f45f0961dbbe449a2ada24548a7deb4f5a02ce8f33a283ac8eee939224c81083f6ffe4c3c87e1267de482ab89467f1b", 0x80}, {&(0x7f0000000500)="4f89e2ee1b0feb9add812171d848a25f273a603111af647ba928d2faf1981a30d4d19d7aed7d090e1de2c1011cca26d80cb9807a60466948442d22421c8bfad77b2ac8e4a8e4025e2646792471689ba77af9541bcefdbb9303787e63be94030a77caaf55f7ddf6f25403ef0834f714c139a585196fd2871dec1f3009d16b758ca7c1091b099258a4a663bacc918f4a68797cd8004a148099a6e42658144611643b7859a89cbec09f8f3741a906c36f20bd1cc2d08c2741081b233a7de4aa0cc2c313d7e6513c0af5ff5ef198561680", 0xcf}, {&(0x7f0000002900)="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", 0x1000}, {&(0x7f0000003900)="32a53b72c8e1487db2293b9be0549c2483ca11b6fd7d8de99bab89858babc7215caa2bf38df8d245e33cb2e348d0a5588f740adf8429c71a78a693d33a8f9f34f852b78b6c78c45e1fa9be7f0afc06cf73658d8a12d230612fcc08e3906570fded0aa823527b97715a8f487c30ea4ff15803d94822e2b722ba6ba4d76d", 0x7d}, {&(0x7f0000003980)="07de7eed641a67df19e8e600ed2df7a627180e483bed4d0536632ed2fadf8df52a83724893cb3edc026377635177cd946082b7c5fb20fe1b3d3c5ae879c2bc88df58d44995027e58f3c7dcc4fd7fb8258976981a0a51d30f6379a2119c2a38586ea2921a751d", 0x66}], 0x6, &(0x7f0000003a80)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x5c, 0x0, '\x00', [@pad1]}}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x6, 0x6, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x10000}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x101}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x33, 0x4, 0x1, 0x3, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0xa8}}, {{&(0x7f0000003b40)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, &(0x7f0000004e00)=[{&(0x7f0000003b80)="1c9e891ec4fbea07c5a9c9c28ec26cdc4c31c81adff48828b02e4ea6a3a5a2b9791276f0ba64c7bc41d4b94595bcf58ea3aa455ea6e05eac5ce188260ca6c3e5dad412cf308189d5d9573bfe76e401c08cbb7d38db0ae0f7f97fceb05e42198dfcddbbd678000d7427fa479665ef3accfe19c056528d637940edb6ac39a9db242511501f86c4", 0x86}, {&(0x7f0000003c40)="bb151056df33a15717f9934382fb7ed7feeb9368d4ea5efc4f481cbeebeba06c4a57aa762d75b3dedb83f1ecdf01f9de40606529d10d2a3b75c45fe80d6bd88374491093d34e39d793538d9231775cd0bf84db88cdccedd9c831a0564a416f2711086ea5770668e38a3825d3ee4bebfe8e421be198471b2bec5d6dffd8bbaeec1adac98ff3aa4caa9f689ad4c27877f061545248196e33fda8dbf30d6ded5b6e946b018aec754812088680cf3e8e8ed7b97a4d18cf4c94c29cfcfde91258220b7c8b46a617a3c9b54e3aa05a4354ba36092444e2074a71be7ac5265b2d857768540f172c8f2c697f55e1941e9be3c496e266ec6ed211063206f73e44b6a8ca585ad69dac26d6d2ca4c295f68c1b2bc255d1f43e250bfc096829b6bdbd74e3a5ada6162f6ba4bb7f25dd1ffe1b90beabca986b293f0f0323cbd33583a81e27f51d1073d2a2750c650c5eb5d7af35f3ee7e7eeeb212ffe87924535e5a8074f5024b59a8c2d0ebdbeb5d201df0622c87372c0e55e19e0fb12d6194c2ab1b96c1dbb229734656281107e65981c03564fc8d2d9a92e72d4025ecf3a888d5dcbdc5744a2a32d14a7c323b50698c58e5a02f6575a535b6e3ae133bf9d628c8067f1d76d578c8c07b17d054df5280cd64f80c0d398709d9c569dbf673e6cff9b444a196300cbb3074ee497a28794a51be45636a6b7fbb2bccf48a67bf6459bf9e65724995027fca86361b5b177649d1fa36305ace181e2436f0cb1a6dc1b5ae1f2978c14615c9627e3114c7b14ba7676bbce48ba298ac0a410484895ae334a00ee2e33e40340eca1cdbcef4bfc1486e69efa236c087e40e6054b75d7a0e57222e91386fafcf744cb54d0569f8cd97968a486274e0f480261186cba0dfeeebfcaf2c334bdca6b5c8c8e94d9ee5a0a380ab2b24a5d1b88c105738dbc8643c4812a6e2ed23d1ce93c02c10ddaf122c81bbed528ac16c97e2bfbe1959cebe7a6ee10cfc9290760c8f8d274a2c5bef7c3367bcc53ef65b0736e244ecca8f1aa6228e592fd6cdbae62009047a2485ed0d941c114bc3b7ab85213cd7582e1407d7aa213093fc4ca11b9869f31185bae027715da88752fde139e3fccf5f72452ad744eb078c56e81372727fae639c100e17d769e35adce9538a53e9e7154cfc6413b16a4fb33379dc940b74fd179c79e774352e5e4b3c5154bf0aebfb3d3eef5433b583d8e68537d42a52a67bdd815c201004e33d4a538e41940da958b1567d83af7b451b6dfe101b0713fbcadd05f18dffdd079d6dc7fde447cfe4d7cc1d09722b244baec31041c6558b3e85639dd8272a03f7489ad16ba2b080a6b0049a01f270771220e254c61b056ab39b99f4a6fecc6ad11d9423ceaedbee1d9ce8779de0a2274efe7e90e12fde4d9d1a55f4a0e8ac7667e345ad04584dcd4d493a57283e75d370d9d6b00de1de666bb909837e8d84309fc1500971e1d6c28c08064d8f8108ef77dcb5fe3866ba0a5f049fa44197bba4b9e30399907f1d5c47e97a6a0006ce018bbe94f10ce61ebac8d8208f6565be656fafa32daef987cfc879877f5bde4123d383d084c153c479911206884665ae15afba0931535ff25e99a736f7ff2de5ce140ca61b99940b067bda6d7907b92b16d701fff9a0a8c71164f04f5650e4c29febfa709c1831e301ecb096c0dcdaba898e2b50f9d0d9ba63eb833cc107e68e4c2288710a713b170d45f3c57e82cf8a17016a935745caab3b7c3a673ac485eac919fd40d0006554a4a706da875d3e9432c26a23247299bbee94c5e62e58dd30bf2d5ad0798ed2ec0df96e26d97944c021c0c354a82c95d49e148512d841e8ec753d9c63e08f7e7163f9c624623d0bc4709c4d0bbc493fad9c5f3bdf2ecef7ca39fdd9c9d144769f2650c21e00571daaea22c7725c9c92075b8210f644874d1fdfa603abffceba91e1c2e9ff326f734faecc5ae6ce660b37c138e0945ba32dba991d2c10f144c5c261fd0d3356f606f54fa16ed98f7f23f7f4ed812759ed2b7a85569a4579c644b43c0e7c9cc94dc519e0fe2736c1f0c74cdefd19ef862500803e5264b098de0b2c60dfc90498e127eb61797cec0f5c1538b055f74a32f2324adf227f58a3724cde9706494068c8b462e25677c54ec44825397c7323d3f97852dfd1857a74fad814ea63f853ce5572e12807c82c4c1c4f5392ce0df838dbf9cbd242a3282ab331f08839be79c9c71e53cd82d1c0229f5b5c9ef0d24dc242df23037f1addecdc277d3aa6b52070076b7e221d4386de399243ec6f9b19363eccf11bc40987703e7af873148ba474c21b8daf90f60d1de1a58d1de9d9377ec37862c77b82491f35100596d5d894e5e35ec2747c20b5a16062121a4b7767436dc40880fe366fe6658ddeb0cd1e109cbf9b90ea3509b7e4634e148ca595fbf8a78ef8fd74cebbf825c530dde1039235fbc3262ff86b9603e8c059c60816c0f3b6c6e5ff6e2f888593672ba49ab36051fc2d4921e12269094c396e339755af914d8b545edcd713dd80b75a11fa1343f0aea401e10b228f5b5ea53c007da0b96ba4d3bf03a088d2ad77334ca986837c8b086600dd3ce60a6de56e6d7cc290f93e5fa1d77dbad3a1c087e40003a5cb599af0d711e56d924f5086980611f08cd3895d382aab8cfdbd15a115a03d5a8674928b0eeeb1ef28a1a41613091cf82763e66dbe80cb4bf4e69c8c630976e41e3b648a87e90f04773e924ed2bc54c2a4f753edbd88c05e45f20a180f8872dc5977be5108be2b486082fc787cd960d1b352a7e9cf7b36edd10986aef52fd766a4c85b6be72dc5485b9d21f36d8679be755f4553b66c335c095cead9ab3246c33b7db70abc06976e47bef7a98b5c1935c20d4d7d66b2afcc369c2f4e00656cb0341eed66676c428603a91494cd86472be9a969012ee25455cbbb6d567b061bd98239aa83903538809c882ec2bff39290c0c67ebd4345334c95897cbac40573b61309b1f2c2943df570127618bd2d7c86c9af431353b6e37ae8173a289b727a1a545b38fc3e502273a939d95504b86e4b52cf508c46d13165074364d616ab32cb61e12af4b17c039d0c2775e7e8f1fa4921d08e33ad9b5829e2541ab9cc1d5309f314fecf5befa603e5142b9c6bfbf81df59fb68b52247224cfe0c17760efedfc763824b3777f1c3cfaeeeb2c2c0319b09e239bc3debea957917ac23208f45c52436b4294262ad85411aacd4cebc58dbe3a8edb8b033d04cdce2e2485884c2927565ecce90e40f7a9842aff6d628d1af2ac2cb67c6f54e111420bced9c59b774ace1f952c275edacfebdf943db0411e329a85f061798fa36819122b85fe548e45f112c2ac06753655a59ec5a61907acc965a4473d47217105094da33d62cf179fcaca4df71544c2160a4375ef64abf01ad3bff00cbb4200ab4656a10ca1ae3ef1b7ddc7b69d141e176f7538c343837dd3b4a040dcdc2f36d74edcaf69e7eca7b5a2bcd1655592f8fa6932dab2cfee1defed7c7236ea076c93b0fab5413c99467e82881ab56a04039ad673f6d4808dd815506c95d34432bb1113877b5e25a2f727fbf2ae23bcddc3108623b9a4fe5dc70149a748f02ce6891e561bc2dcd56ea1e735f8efe4393e856550caa6915ee92ddc79fe489c64353ec8b30ac9f49d49e3bfcb0798adaa34ad3cae640f2c604f59fcaa03734b886abae41cd6a94f7ff70459a05180ac7800fdeb1700cbb6e2079a40534e90295ea6416ce1c4ecc60b85b7d0d8431abea999a784ae2de260c3b9eb013923cb7cd9699a9dc177a9f0f5808572547e438041f3c29d33652950f0343f0fc8369b1b0bc060b390dc200cd8b74980dd76a303610a14b6f9c4e56c9764636154e5c0252c391de111a36b762539f8623b1678a0870c7b15cd8a5fba09aad4993dd31461969b790aee3b4a0d7fc3494a068b61575f47dfc738997f54402fec19087a364bbf04f7a574a0ed85b24157ca264866a4efc2fa6e3281b82ec8cd7c9776ec743208ab635556224217714cd5a414aeb1b00b706229b7ae26f607b6fa71d366db676c438c3eb770a60820cc91ad57eca7a97660cecc8eea139514fdb54ed88bdc93e97cdecc193b8644030b2ef0af20379e7a465fc587e1325f53168853fd9ecf8a038aaae9806cf7a80c3b04b910de5ff2dbb429766d65a55a3203b3100844dfbd1ff55bdbbf5eeb17b58e8a30228ad2918032160652667249047570af3524a3fa24d21f2e049cf2582bbf042e3ba2ece569fe4f28248782d0222554cc222b2333f297b7b16c7e96f16838ac9c770599a185a4a2e880170e9d90ed970dea47683d76962f2e93e8036730f7d58ed5d9ef8beea7ff50e85f53ad63c0213546988f50ac4c66bb68e7d2f4c80f4c0f2f9191ee460c4639c94d06c29559523600aa81f5e2c69185b122fc4c98fedee674718a88452f64026261259455e7cdeb4490ecc49fff8f14e851b6f903b6d4eb37b86005d26ee23f96cfdce53d20e7a8eee7bc9bd3a91f02c051e5df9936d6535b864c79beb0c7595d9f9967f76637aebc9429e85d8698465d16b51551465d637188f157ce1dd072ec7b15cd1f5fceed7ec2b43137d19f07cb4f2c8ddebc4658f24fd35d83dc56bd5be70db60216b03d41f72fc64ef48c109fce787850a797b93a75bb7527b524eb2685df9735974874c302109571e66843b4a023d744da6e74748d4ac9479b4d28e38944aadba4593a7495ff0bc4fc99110453c588e75c325c5bbf49066d27523445b8a1dcafaca889d243f32879bf172475135a7685ee9358b171f1d14dc29dda2f30774c6c8517e760bacd399d3cd4d8b35ff6e7d5bda1e433bb45cc978a6db1a690707fb6705e5bc7bbfa78b135b43851d8d75e3212c4fc47a097c81c45d2c6a0e757ed8683b8a9ba36edb8cd3aff7ed9f397ba2489038f9b643d90592c53272060abca13068535ff4e2cdac49cd9f9be72cf18d83e407e0db6512e87879726e90d9e8fa4571033f7b1d9e6d83ec5e72a439f19f116cfd11ba1f9fb7a787ae9864528aa8c13c7900e1a22cb6a8390d44a119d9515bfd77affa5a3a0c787ecbaaa36f9284cc589a39928876fab56c951c5e5d17059dfd284ed617b68fa0414bd988723f7ae3c2864877ee33b9e14e8cea2dcba0a154c391f8f7be588dd2ca7974b73a0fb642cec8d9019af78777ce121b23297b8344213edb14036bbd19c9dcd2816fd6aa806f2e88cb31be2090e35c6a97985488ef27f7ded699a3074f77f8d8558ab7ca78448d596c9968a9ebddb83e99d33e0ec656a3d2b34bf22e8214d61efff87fda1e27458207828dd9fd8413b78e769af80f7f1ccee6f53ff39b6cc70b98b67fc49bfe73f55ca4234c7969a5788cedd27c67aba7bca343b88979f981376c3ab867028b58c75358a578202cec7f04b6a79e0d9873928ff71f0d94af67d5f5feebce4e4ad463da3d6db72669fb7f9d6c4d7d4931e7be37c760b4c02141538c3abe3871a1d248c0d27ca6d7624b48c010f74af45f562da32e41af0c3001f548263efa16dc10c219001676f35605c476f4af5d5d2a1611aeae2f713c495c4ab06dd735c8d8c9873b04bfba87aad9210fdafe4b6ea535ea7c5c979196b328b8f4b5624e5378c51b1e08203ff8c2be4a0efdf315b4aecfa4788aad44d2c87fab460d9a075f44cdae7e86e4c6fbd0a00b1d6d76dbb53d6a8136634c057fd99e7cbf957102fdf43c978d8d81534fdff2e5990d99a0f1eac2edfed826e7a9a5d3b4ed0bc63bb7f2464a2b7fcf8c3971e62071e7dd01", 0x1000}, {&(0x7f0000004c40)="0e0b2d5d373d539ff38ac157d70660f768745ca468db334a4f01e78b6eb3552aafc9ec25e63099d78c59856793ef4c7063dcd535e4a01f93e68d7dd9cfa56fb28c686089242e86fbaf9a4ab8b9866e5f38d0d0e5e9e81974a20f21789af78d8b0b1c530d8ef5bf00a93408797bb5f763a99925a9e4ddd165bba8c7737433f1279f9ff294", 0x84}], 0x3, &(0x7f0000000e80)=[@hopopts_2292={{0x60, 0x29, 0x36, {0x2b, 0x8, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x42}}, @hao={0xc9, 0x10, @remote}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}}}, @dstopts={{0xb8, 0x29, 0x37, {0x73, 0x13, '\x00', [@generic={0xcf, 0x98, "6cc3481b43728b994941642192db1a5f22a8e018e67cc2906c9322a78abdf0ed89490f36ad6a347b115ffb8d367f6ee14e6e6f30940facf759b8f1255be571a4cba769f9b2fb793f879c80ce429149861b8f119439eb776271d9ef11f21b51708d938a92c64462658cc0b424bcba34ab54da440d2b7a233378d15f09437f7ae4a822401aad5490cc773993bef3efdd9d86345acdcbc3db27"}, @enc_lim={0x4, 0x1, 0x6}]}}}, @hopopts_2292={{0x90, 0x29, 0x36, {0x2c, 0xe, '\x00', [@generic={0xe, 0x49, "607bd3e244228afe6f4066b9c184e034937521981fc342c9e7fe47dd17e00b4133414517fef00e90c0bc19ef274962764bd357baace29ff0512c69a21c0f7cba536e703bcdcf7c9822"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0xff, [0x800, 0x5, 0x6, 0x3]}}]}}}, @hopopts_2292={{0x100, 0x29, 0x36, {0x2c, 0x1c, '\x00', [@jumbo={0xc2, 0x4, 0xd}, @generic={0x9, 0xca, "7fe2484ab96ab5e4af3009c3a4275b2853bf1fd42ad85c83212b4bdf90c44d7ad2a19e2bcc8d01505b4e7b8b2ca7f2a7c2663e2e6718ce412e745749abec68b14579ffc90017e5f89849084885632ccc59bd39bee6e3ed0b025b16f240bb2dc3787481c56295a16c87175bffc871e974ba87637890e2dfe13d51ad2ea5ebeeffb0d2e9d70ff728c7b0071c545f9aafe28d98442990132a88cef814857d775240c8c1a8afaa5bbaaafa6f1ad56c9cd93b9c0168091d78b57a2371125626c02a9c122d5decc5a571fd52d6"}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @hopopts={{0x70, 0x29, 0x36, {0x21, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0xfffffff7}, @jumbo={0xc2, 0x4, 0x800}, @hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x18, {0x0, 0x4, 0x9, 0x0, [0x8a69, 0x1]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private2}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x62, 0x9, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x40, {0x2, 0xe, 0xf, 0x2, [0x313a6ee6, 0x7, 0x100000001, 0xd, 0x542, 0x598e, 0x2]}}, @enc_lim={0x4, 0x1, 0x2}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x6c, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xc142}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x3b, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x8001}, @enc_lim={0x4, 0x1, 0x5}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1d31}}], 0x400}}, {{&(0x7f0000005240)={0xa, 0x4e20, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000005440)=[{&(0x7f0000005280)="8f4998f7b17b5941531640bf20c13c5e8d435c7b9e545a8e5471bb401119ce5a3767dc51550a365d01a0571dc9fdf137e9ea02c25cfeec87213302d9c95c7a77c1d15b36d4e054dc327e04cd14919f323d31f5e5c4b544949a6306dcb0f74d796f52e39cdda3372add0dd6ed4dc61c", 0x6f}, {&(0x7f0000005300)="7fdcaa81263e32c373afcc02b7f63aa482f1887f1a116719df7c30db9f38fae67f391bd8508a99d851d2a5d9e4bf24cc474f1f0a4cffb2b57acd52d0bbffad1cf2e5f637ef7703bbffc12911fd22acd853e16ffc695dba523d4f8f7fc9c69a0687ca7e1bd938e8a7e1c5c3b2335d3884d941a02c", 0x74}, {&(0x7f0000005380)="13bce9bdda2d26cd3a9d5842af79b010b09add009aa0fe732d4baa0779ae692f6fafc4d134027dd6cd77ff1080bd88b6aa60ecab897382d88d0d5d92834df2d75cb941a43ee628187126c335421539b9179298d9f6c16aac6aaf6558fd6b739f7d32cb4ab2d034fe244aec19b3c2912de0adaab802915004260904dcec7df49bb6b865775fdada12b37c73af082b0523f1", 0x91}], 0x3, &(0x7f0000005480)=[@hopopts_2292={{0x118, 0x29, 0x36, {0x36, 0x1f, '\x00', [@generic={0x6, 0xf7, "a2ada0693df93d827970063c5b77b26657d244de8dd5a261633fe9a44b66f27f36aa7b47e32f9852becead737aa10fbb48fe8c0ced8d9b0aa746cd37da34a3b48fd1123e67735bf3d40dcc1c70c0036234320fef9f13957a3d92673c119b32d50b0bc1118c69f5575ed41bfede0ec07fac7e6478820ce1e7403663dfe18086945de7b9e920144806e20ccdcd9486cce71e248ce4ebe06b4a4ea9345589dfae1060c484c8dee357ea1cf23845774c00f046db78b9c5277af40552dfbe06c8508a8be527c266df5f9837a774260522607e971cfc6773f515a76e9fce6bf5611f9361a1a758367ad16557f6c97f46ba1142ee05d17de6662d"}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x76, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xc7}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xf}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @hopopts={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @hopopts={{0x18, 0x29, 0x36, {0x73}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0xc, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x84, 0xa, 0x1, 0x2f, 0x0, [@remote, @local, @rand_addr=' \x01\x00', @local, @loopback]}}}], 0x260}}], 0x3, 0x40011) 7.082403554s ago: executing program 4 (id=2137): r0 = syz_io_uring_setup(0x2b90, &(0x7f0000000b40)={0x0, 0xffff9391, 0x100, 0x2, 0x1ef}, 0x0, &(0x7f0000000c00), &(0x7f0000000c40)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000c80)={0x9, 0xffffffffffffffff, 0x37, {0x40, 0x68cd20d4}, 0xce}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x1, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) 6.823681007s ago: executing program 5 (id=2138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r3 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x70000000, 0x71, 0x10, 0x19}, [], {0x95, 0x0, 0x300}}, &(0x7f0000000480)='GPL\x00'}, 0x80) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000200)={0x2, r5, 0x3, 0x80000001, 0x3, 0x3, 0x3, 0x2, 0x81}) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980901, 0x3b5, @name="11abc7e28be938b3edc1e219b5a877772f244cd52aa9cd0fe51a5a6692a31fa7"}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) write$P9_RAUTH(r4, &(0x7f0000000280)={0x14, 0x67, 0x1, {0x2, 0x0, 0x6}}, 0x14) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x58, r2, 0x1, 0x7fffffff, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x20000054) 6.820431997s ago: executing program 0 (id=2139): socket$inet6_udplite(0xa, 0x2, 0x88) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) open(&(0x7f0000000040)='./file0\x00', 0x943, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 6.620210349s ago: executing program 3 (id=2140): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$rfkill(r0, 0x0, 0x0) (fail_nth: 1) 6.339373517s ago: executing program 3 (id=2141): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010118"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 6.060535766s ago: executing program 4 (id=2142): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000000000fcfcff000020030005000000000002000000041414aa00000000000000000a000800"], 0xb0}, 0x1, 0x7}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0500070100000071106a00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$packet(0x11, 0x3, 0x300) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4"]}, 0xe2) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d6559eb7a8197c0479df99720c9f9d0a8093c947d", 0x21, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f0000001800)=""/80, 0x50, 0x0) 5.324198993s ago: executing program 0 (id=2143): r0 = syz_io_uring_setup(0x2b90, 0x0, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000c80)={0x9, 0xffffffffffffffff, 0x37, {0x40, 0x68cd20d4}, 0xce}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x1, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) 5.323592776s ago: executing program 5 (id=2144): socket$inet6_udplite(0xa, 0x2, 0x88) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) open(&(0x7f0000000040)='./file0\x00', 0x943, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.95937027s ago: executing program 5 (id=2147): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x7) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000040)={0x0, "0db242d89cce40a99e6d3f509b54b42a"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001040)={0x0, 0x0, {}, {0x0, @struct, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001440)={0x0, 0x6, 0x8dd6}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001840)={0x3, 0x1, {0x2, @struct={0x400, 0x9}, r1, 0x3, 0x81f, 0x2, 0x5, 0x10000, 0x4, @usage=0x9, 0x8, 0xf6, [0x1, 0x8, 0xe418, 0x3, 0x5, 0x5]}, {0x80, @struct={0x4, 0xd}, r2, 0x9, 0x101, 0x400, 0x2, 0x7ff, 0x434, @usage=0x5c, 0xe4, 0x3ff, [0xffff, 0x7, 0x1, 0x10000, 0x0, 0x2]}, {0x4, @usage=0x1, r3, 0x100000000, 0x6, 0x65fad1c, 0x6, 0x100000001, 0x412, @struct={0xe, 0x8}, 0x4, 0x3, [0x4, 0x9, 0x9, 0x2, 0x6, 0x7]}, {0xb, 0x100000001, 0x1}}) r4 = add_key$keyring(&(0x7f0000001c80), &(0x7f0000001cc0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, 0x0, &(0x7f0000001c40)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '', 0x20, 0x1}, 0x2a, r4) r5 = socket$inet6_sctp(0xa, 0x3, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001d00)={0x0, 0xf7, "7d8dc1722950ae367e921b63261e33497d6a9cc774fc5c6dd8c133f060c2e29b1a14bdf7f3ca55f84553a21d1a04541112ee82fe44dc1c7464d7ed9cb7221a461bebd3170e0b0182d3d7cd5ef5b4d221586ce5603d257737c712c3c2ce01a901d4676efc1c7e9b6b70dd87cf177eb63111c1d3537e19f487567707ec89ec531fc0a40d503cef61dbca9eda5e8dab465327a603fe9066faa79d764f39015ff0192acd8e0df7aa7a7485a436c96666b71797f0d427f375b01ebc70d218691e637f02371e2a3462c5f975d160d71cdecbc78d8020d36d8b8eb4781f13f15cae63aad83ac60ed4be94ee2ca7ab6741ea7479cdb8f136228915"}, &(0x7f0000001e00)=0xff) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000001e40)={r6, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000001e80), &(0x7f0000001ec0)=0x4) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f00)={0x2, 0x9, 0x6, 0x9, 0xc, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in=@local, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x5, 0x4, 0x4}, @sadb_x_filter={0x5, 0x1a, @in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x29, 0x14, 0x14}]}, 0x60}}, 0x40004) add_key$fscrypt_provisioning(&(0x7f0000002000), &(0x7f0000002040)={'syz', 0x0}, &(0x7f0000002080)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000002100), 0x800, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r8, 0xc0044dff, &(0x7f0000002140)=0x20a6) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000002200)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000021c0)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0xc080}, 0x20008090) add_key$user(&(0x7f0000002240), &(0x7f0000002280)={'syz', 0x1}, &(0x7f00000022c0)="e7d43f28cca716c8d62d0d148e8fe5fd", 0x10, 0xfffffffffffffff8) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r9, &(0x7f0000002300)={0x1a, 0x334, 0x2, 0x3, 0x4, 0xfd, @remote}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x30, r11, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x24044090) ioctl$F2FS_IOC_DECOMPRESS_FILE(r5, 0xf517, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000002480)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f00000026c0)={0x0, 0x1, &(0x7f00000024c0)=[r12], &(0x7f0000002500)=[0x0], &(0x7f0000002640)=[0x0], &(0x7f0000002680)=[0x1, 0x101, 0x2, 0x7], 0x0, 0x6}) 4.622760467s ago: executing program 5 (id=2148): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 3.449671193s ago: executing program 1 (id=2149): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="0800260094094e000800b7"], 0x2c}}, 0x0) (fail_nth: 1) 3.335424741s ago: executing program 1 (id=2150): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x874, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x840, 0x2, [@TCA_MATCHALL_ACT={0x83c, 0x2, [@m_police={0x838, 0x1, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0xa8, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x101, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7ffffffe, 0x0, 0xa, 0x6, 0xffffbfff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x7fff, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x2]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x40, 0x6, 0x3, 0x3, 0x800, 0x10d2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x10, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x3, 0xb9a6, 0x522, 0x0, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x7fffffff, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x874}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) 3.333350514s ago: executing program 5 (id=2151): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) (fail_nth: 1) 3.250875874s ago: executing program 3 (id=2152): r0 = syz_io_uring_setup(0x2b90, &(0x7f0000000b40)={0x0, 0xffff9391, 0x100, 0x2, 0x1ef}, 0x0, &(0x7f0000000c00), &(0x7f0000000c40)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000c80)={0x9, 0xffffffffffffffff, 0x37, {0x40, 0x68cd20d4}, 0xce}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x1, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) 3.021222904s ago: executing program 5 (id=2153): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000000000fcfcff000020030005000000000002000000041414aa00000000000000000a000800"], 0xb0}, 0x1, 0x7}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) clock_gettime(0x7, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0500070100000071106a00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0xfffff000) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) unshare(0x2040600) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$getownex(r5, 0x11, &(0x7f0000000000)) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d6559eb7a8197c0479df99720c9f9d0a8093c947d", 0x21, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f0000001800)=""/80, 0x50, 0x0) 3.008414946s ago: executing program 1 (id=2154): socket$inet6_udplite(0xa, 0x2, 0x88) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) open(&(0x7f0000000040)='./file0\x00', 0x943, 0x20) creat(&(0x7f0000000100)='./file0\x00', 0x100) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.391932677s ago: executing program 4 (id=2155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (fail_nth: 1) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x113, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 1.906837223s ago: executing program 3 (id=2156): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x2, 0xfffffffc, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x8000006332, 0x7, 0x4, 0x5, 0x0, 0x2], 0xe000, 0x180a00}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a", 0x42}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x3, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x2c}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x6, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x4, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x7, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x796, 0x5, 0x931, 0x1000101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6a7, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x10001, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0xb, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0xe, 0x4, 0x8, 0x7, 0x8, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0xfffffffffffffffd, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x1]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 1.515365062s ago: executing program 1 (id=2157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x113, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 927.406127ms ago: executing program 4 (id=2158): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001800010025bd7000fbdbdf251d0100000c000b000200000001000040"], 0x20}, 0x1, 0x0, 0x0, 0x44010}, 0x4000) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0xc000003, 0x56, &(0x7f0000000080), 0x0, 0x4000004}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8000, 0x10, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x3, 0x20, 0x0, 0x3, 0x7, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x48, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}]}}}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000afb3850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r6, &(0x7f00000010c0)=""/4096, 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 131.08ms ago: executing program 1 (id=2159): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000b40)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000140)=0x8) 128.331084ms ago: executing program 3 (id=2160): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2b, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0xffffffffffffff23) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000001e00010027bd7000fbdbdf25ff020000000000000000000000000001000004d20a003300e000000100000000000000000000000001000100fc34000024000900020000000000000002000000000000008a2d0000000000009e06000000100000235f7a2b72ece5b0370af9be4e998a13ddf005febb2348cfdfd09505fb72115e550feb90ec4ce8936f019dff4a69a0a736f51cc7c3c1a30e5e39bd8cc0913e207f6de3"], 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x80) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28", @ANYRESHEX], 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x800002) 24.507242ms ago: executing program 1 (id=2161): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) 0s ago: executing program 0 (id=2162): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000000d1400042dbd7000fcdbdf250800000008003e060000000008000000080003000200010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20000085) (async) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvmsg(0xffffffffffffffff, 0x0, 0x40002023) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x20000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) shmget$private(0x0, 0x2000, 0x78000800, &(0x7f0000875000/0x2000)=nil) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r2, &(0x7f00000004c0)=[{}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="180000000c1401002cbd70e4fedbdf2508000120038c2230bdfd4ea704cf868f0000008c27b7e21575252a52de4ad5bf84fc5208b09b00943e2f3f25d23e673f7b0302a8c057f39f4fec60d37d0fe37e52de4b7f4f8c960bfc865001000000d8ead1bfb836aa5d8364951e91805a8a66c7241b3b586c60a645ccddce7f3c080d57ab2de6be37618a34d0fb9d8ac61432faa53ece9ec732fbc4518c3feb3a293bf2541ab2411feb60f747d2ef29b1858b7d028fb468cd9e1800b4ac0a951712533f71bff7629ea8c064e6c53465d5f1c97a5b54794e9437836ef68ff02070b18a6fac26a945c4bde90e600909f3340929c18da87e63493c603b28aa3a6f3121246dda"], 0x18}, 0x1, 0x0, 0x0, 0x24044041}, 0x4080) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x123840, 0x107) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv6_getanyicast={0x14, 0x3e, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24004040) (async) file_getattr(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x18, 0x100) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1283, 0x0) ioctl$TIOCSTI(r7, 0x80045440, &(0x7f0000000080)=0x3) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000180)={0x18, r9, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r12, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x97}, 0x1, 0x0, 0x0, 0x200080d0}, 0x40010) kernel console output (not intermixed with test programs): id=0 ses=4294967295 subj=_ pid=7710 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9722a8c819 code=0x7ffc0000 [ 208.555857][ T37] audit: type=1326 audit(1775736937.424:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7710 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9722a8c819 code=0x7ffc0000 [ 210.451287][ T7733] qnx4: unable to read the superblock [ 210.499135][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'. [ 211.292183][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 212.306930][ T7721] Bluetooth: hci2: command 0x0406 tx timeout [ 212.307236][ T7721] Bluetooth: hci0: command 0x0406 tx timeout [ 212.307335][ T7721] Bluetooth: hci1: command 0x0406 tx timeout [ 212.307433][ T7721] Bluetooth: hci3: command 0x0406 tx timeout [ 214.394870][ T7825] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 214.461786][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 214.461809][ T37] audit: type=1326 audit(1775736943.324:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9722a8c819 code=0x7ffc0000 [ 214.461861][ T37] audit: type=1326 audit(1775736943.324:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9722a8c819 code=0x7ffc0000 [ 214.461927][ T37] audit: type=1326 audit(1775736943.324:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9722a8c819 code=0x7ffc0000 [ 214.461975][ T37] audit: type=1326 audit(1775736943.324:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9722a8c819 code=0x7ffc0000 [ 214.462045][ T37] audit: type=1326 audit(1775736943.334:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9722a8c819 code=0x7ffc0000 [ 214.462092][ T37] audit: type=1326 audit(1775736943.334:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9722a8c819 code=0x7ffc0000 [ 214.462139][ T37] audit: type=1326 audit(1775736943.334:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9722a8c819 code=0x7ffc0000 [ 214.462186][ T37] audit: type=1326 audit(1775736943.334:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9722a8c819 code=0x7ffc0000 [ 214.462230][ T37] audit: type=1326 audit(1775736943.334:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9722a8c819 code=0x7ffc0000 [ 214.462275][ T37] audit: type=1326 audit(1775736943.334:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9722a8c819 code=0x7ffc0000 [ 214.735345][ T5806] Bluetooth: hci0: unknown advertising packet type: 0x82 [ 214.735382][ T5806] Bluetooth: hci0: Dropping invalid advertising data [ 214.735400][ T5806] Bluetooth: hci0: Malformed LE Event: 0x02 [ 216.632860][ T7866] fuse: blksize only supported for fuseblk [ 216.738637][ T7870] comedi comedi4: comedi_config --init_data is deprecated [ 216.877064][ T812] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 217.050947][ T812] usb 2-1: Using ep0 maxpacket: 8 [ 217.161987][ T812] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.162079][ T812] usb 2-1: no configurations [ 217.162092][ T812] usb 2-1: can't read configurations, error -22 [ 217.681444][ T812] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 217.822881][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.685'. [ 217.827571][ T812] usb 2-1: Using ep0 maxpacket: 8 [ 217.841534][ T812] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.841623][ T812] usb 2-1: no configurations [ 217.841635][ T812] usb 2-1: can't read configurations, error -22 [ 217.851753][ T812] usb usb2-port1: attempt power cycle [ 218.206983][ T812] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 218.228313][ T812] usb 2-1: Using ep0 maxpacket: 8 [ 218.234060][ T812] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.234146][ T812] usb 2-1: no configurations [ 218.234154][ T812] usb 2-1: can't read configurations, error -22 [ 218.358144][ T812] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 218.377761][ T812] usb 2-1: Using ep0 maxpacket: 8 [ 218.382521][ T812] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.382617][ T812] usb 2-1: no configurations [ 218.382630][ T812] usb 2-1: can't read configurations, error -22 [ 218.383209][ T812] usb usb2-port1: unable to enumerate USB device [ 218.580329][ T1609] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.993670][ T1609] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.058514][ T7899] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 219.500936][ T1609] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.745646][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.762875][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.782697][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.784393][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.785234][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.838062][ T7913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.691'. [ 219.851726][ T5857] IPVS: starting estimator thread 0... [ 219.870024][ T7912] netlink: 256 bytes leftover after parsing attributes in process `syz.1.697'. [ 219.947256][ T7914] IPVS: using max 7 ests per chain, 16800 per kthread [ 220.032741][ T1609] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.063484][ T5806] Bluetooth: hci3: command tx timeout [ 223.878804][ T7909] chnl_net:caif_netlink_parms(): no params data found [ 224.136926][ T5806] Bluetooth: hci3: command tx timeout [ 224.300747][ T7909] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.300854][ T7909] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.301200][ T7909] bridge_slave_0: entered allmulticast mode [ 224.302769][ T7909] bridge_slave_0: entered promiscuous mode [ 224.305035][ T7909] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.305114][ T7909] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.305228][ T7909] bridge_slave_1: entered allmulticast mode [ 224.317026][ T7909] bridge_slave_1: entered promiscuous mode [ 224.487245][ T7909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.507940][ T7909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.567435][ T7909] team0: Port device team_slave_0 added [ 224.571629][ T7909] team0: Port device team_slave_1 added [ 225.626493][ T7987] binder: 7984:7987 ioctl c0285840 0 returned -22 [ 226.216916][ T5806] Bluetooth: hci3: command tx timeout [ 227.031618][ T1609] bridge_slave_1: left allmulticast mode [ 227.034329][ T1609] bridge_slave_1: left promiscuous mode [ 227.254588][ T1609] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.296924][ T5806] Bluetooth: hci3: command tx timeout [ 228.819031][ T1609] bridge_slave_0: left allmulticast mode [ 228.819069][ T1609] bridge_slave_0: left promiscuous mode [ 228.819364][ T1609] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.291939][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 230.527908][ T1609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.607605][ T1609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.652161][ T1609] bond0 (unregistering): Released all slaves [ 230.728318][ T7909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.728337][ T7909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.728364][ T7909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.922638][ T7909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.922656][ T7909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.922686][ T7909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.247989][ T7909] hsr_slave_0: entered promiscuous mode [ 231.249602][ T7909] hsr_slave_1: entered promiscuous mode [ 231.250717][ T7909] debugfs: 'hsr0' already exists in 'hsr' [ 231.250744][ T7909] Cannot create hsr debugfs directory [ 231.360148][ T5871] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 231.519539][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.519579][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.519621][ T5871] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 231.519648][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.619437][ T5871] usb 2-1: config 0 descriptor?? [ 232.860337][ T5871] petalynx 0003:18B1:0037.0005: unknown main item tag 0x0 [ 232.860377][ T5871] petalynx 0003:18B1:0037.0005: unknown main item tag 0x0 [ 232.860412][ T5871] petalynx 0003:18B1:0037.0005: unknown main item tag 0x0 [ 232.860441][ T5871] petalynx 0003:18B1:0037.0005: unknown main item tag 0x0 [ 232.860469][ T5871] petalynx 0003:18B1:0037.0005: unknown main item tag 0x0 [ 232.860497][ T5871] petalynx 0003:18B1:0037.0005: unknown main item tag 0x0 [ 232.860524][ T5871] petalynx 0003:18B1:0037.0005: unknown main item tag 0x0 [ 232.860552][ T5871] petalynx 0003:18B1:0037.0005: unknown main item tag 0x0 [ 232.860579][ T5871] petalynx 0003:18B1:0037.0005: unknown main item tag 0x0 [ 232.860606][ T5871] petalynx 0003:18B1:0037.0005: unknown main item tag 0x0 [ 232.972533][ T5871] petalynx 0003:18B1:0037.0005: hidraw0: USB HID v7f.fd Device [HID 18b1:0037] on usb-dummy_hcd.1-1/input0 [ 233.064389][ T5871] usb 2-1: USB disconnect, device number 20 [ 233.272651][ T8054] fido_id[8054]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 234.805450][ T8097] FAULT_INJECTION: forcing a failure. [ 234.805450][ T8097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.805493][ T8097] CPU: 0 UID: 0 PID: 8097 Comm: syz.1.738 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 234.805524][ T8097] Tainted: [L]=SOFTLOCKUP [ 234.805532][ T8097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 234.805545][ T8097] Call Trace: [ 234.805553][ T8097] [ 234.805563][ T8097] dump_stack_lvl+0xe8/0x150 [ 234.805604][ T8097] should_fail_ex+0x46b/0x600 [ 234.805652][ T8097] _copy_from_user+0x2d/0xb0 [ 234.805674][ T8097] rfcomm_dev_ioctl+0x1b4/0x21e0 [ 234.805718][ T8097] ? kasan_quarantine_put+0xbb/0x1f0 [ 234.805751][ T8097] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 234.805792][ T8097] ? tomoyo_path_number_perm+0x219/0x630 [ 234.805825][ T8097] ? do_vfs_ioctl+0x117b/0x1540 [ 234.805851][ T8097] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 234.805879][ T8097] sock_do_ioctl+0x101/0x320 [ 234.805913][ T8097] ? __pfx_sock_do_ioctl+0x10/0x10 [ 234.805952][ T8097] ? smack_file_ioctl+0x263/0x360 [ 234.805994][ T8097] sock_ioctl+0x5c9/0x7f0 [ 234.806024][ T8097] ? __pfx_sock_ioctl+0x10/0x10 [ 234.806054][ T8097] ? __fget_files+0x2a/0x420 [ 234.806082][ T8097] ? __fget_files+0x3a6/0x420 [ 234.806109][ T8097] ? __fget_files+0x2a/0x420 [ 234.806141][ T8097] ? bpf_lsm_file_ioctl+0x9/0x20 [ 234.806165][ T8097] ? __pfx_sock_ioctl+0x10/0x10 [ 234.806194][ T8097] __se_sys_ioctl+0xff/0x170 [ 234.806220][ T8097] do_syscall_64+0x14d/0xf80 [ 234.806244][ T8097] ? trace_irq_disable+0x3b/0x150 [ 234.806270][ T8097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.806302][ T8097] ? clear_bhb_loop+0x40/0x90 [ 234.806330][ T8097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.806352][ T8097] RIP: 0033:0x7f7f7c11c819 [ 234.806374][ T8097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.806392][ T8097] RSP: 002b:00007f7f7a376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.806417][ T8097] RAX: ffffffffffffffda RBX: 00007f7f7c395fa0 RCX: 00007f7f7c11c819 [ 234.806433][ T8097] RDX: 0000200000000100 RSI: 00000000400452c9 RDI: 0000000000000004 [ 234.806448][ T8097] RBP: 00007f7f7a376090 R08: 0000000000000000 R09: 0000000000000000 [ 234.806462][ T8097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.806474][ T8097] R13: 00007f7f7c396038 R14: 00007f7f7c395fa0 R15: 00007ffde839d9a8 [ 234.806511][ T8097] [ 236.284977][ T5806] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 236.497089][ T1609] hsr_slave_0: left promiscuous mode [ 236.551774][ T1609] hsr_slave_1: left promiscuous mode [ 236.553319][ T1609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.553415][ T1609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.655409][ T1609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.655443][ T1609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.012275][ T1609] veth1_macvtap: left promiscuous mode [ 237.012796][ T1609] veth0_macvtap: left promiscuous mode [ 237.018933][ T1609] veth1_vlan: left promiscuous mode [ 237.019415][ T1609] veth0_vlan: left promiscuous mode [ 238.471130][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'. [ 238.688084][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 238.858564][ T1609] team0 (unregistering): Port device team_slave_1 removed [ 238.937735][ T1609] team0 (unregistering): Port device team_slave_0 removed [ 239.266430][ T7909] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 239.345673][ T7909] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 239.474870][ T7909] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 239.537192][ T7909] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 239.910001][ T8011] udevd[8011]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 240.300722][ T5806] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 240.300884][ T5806] Bluetooth: hci0: Injecting HCI hardware error event [ 240.304901][ T5806] Bluetooth: hci0: hardware error 0x00 [ 240.624687][ T8225] netlink: 20 bytes leftover after parsing attributes in process `syz.4.763'. [ 240.944326][ T7909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.061631][ T7909] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.126024][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.126281][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.216309][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.216461][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.275126][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 241.275141][ T37] audit: type=1326 audit(1775736970.144:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 241.276172][ T37] audit: type=1326 audit(1775736970.144:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 241.276539][ T37] audit: type=1326 audit(1775736970.144:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 241.279861][ T37] audit: type=1326 audit(1775736970.154:314): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 241.280880][ T37] audit: type=1326 audit(1775736970.154:315): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 241.345097][ T37] audit: type=1326 audit(1775736970.154:316): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 241.345875][ T37] audit: type=1326 audit(1775736970.214:317): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f7c0dd04e code=0x7ffc0000 [ 241.349656][ T37] audit: type=1326 audit(1775736970.224:318): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7f7c11db17 code=0x7ffc0000 [ 241.349946][ T37] audit: type=1326 audit(1775736970.224:319): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 241.351940][ T37] audit: type=1326 audit(1775736970.224:320): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7f7c11db17 code=0x7ffc0000 [ 241.839848][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.706304][ T5806] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 243.598559][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.780'. [ 244.004319][ T7909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.042221][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 245.252473][ T8011] udevd[8011]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 246.828081][ T5985] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 246.955883][ T7909] veth0_vlan: entered promiscuous mode [ 246.979875][ T7909] veth1_vlan: entered promiscuous mode [ 247.003805][ T5985] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.003846][ T5985] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 247.003861][ T5985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.038749][ T5985] usb 2-1: config 0 descriptor?? [ 247.139566][ T7909] veth0_macvtap: entered promiscuous mode [ 247.157568][ T7909] veth1_macvtap: entered promiscuous mode [ 247.183998][ T7909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.253721][ T7909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.283299][ T155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.283353][ T155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.283653][ T155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.292699][ T155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.774696][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'. [ 248.073409][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.797'. [ 250.100538][ T5985] usb 2-1: string descriptor 0 read error: -71 [ 250.106384][ T5985] cypress_m8 2-1:0.0: DeLorme Earthmate USB converter detected [ 250.118787][ T5985] earthmate ttyUSB0: required endpoint is missing [ 250.134767][ T5985] usb 2-1: USB disconnect, device number 21 [ 250.181456][ T5985] cypress_m8 2-1:0.0: device disconnected [ 250.546346][ T8056] udevd[8056]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 250.564782][ T8011] udevd[8011]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 250.636016][ T1820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.636039][ T1820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.745562][ T8046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.745586][ T8046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.178915][ T8406] netlink: 'syz.4.812': attribute type 39 has an invalid length. [ 254.250009][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 254.615517][ T8420] netlink: 7 bytes leftover after parsing attributes in process `syz.5.817'. [ 254.662680][ T8420] netlink: 7 bytes leftover after parsing attributes in process `syz.5.817'. [ 254.760798][ T8409] batman_adv: batadv0: Adding interface: macvtap1 [ 254.760819][ T8409] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.760850][ T8409] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 256.009086][ T8453] netlink: 136 bytes leftover after parsing attributes in process `syz.5.825'. [ 256.063826][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.063903][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.786375][ T8483] FAULT_INJECTION: forcing a failure. [ 257.786375][ T8483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.786416][ T8483] CPU: 0 UID: 0 PID: 8483 Comm: syz.5.832 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 257.786446][ T8483] Tainted: [L]=SOFTLOCKUP [ 257.786454][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 257.786468][ T8483] Call Trace: [ 257.786477][ T8483] [ 257.786486][ T8483] dump_stack_lvl+0xe8/0x150 [ 257.786524][ T8483] should_fail_ex+0x46b/0x600 [ 257.786560][ T8483] _copy_from_user+0x2d/0xb0 [ 257.786584][ T8483] bpf_test_init+0xd8/0x150 [ 257.786620][ T8483] bpf_prog_test_run_xdp+0x529/0x1160 [ 257.786678][ T8483] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 257.786719][ T8483] ? __fget_files+0x2a/0x420 [ 257.786752][ T8483] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 257.786783][ T8483] bpf_prog_test_run+0x2cd/0x340 [ 257.786816][ T8483] __sys_bpf+0x643/0x950 [ 257.786845][ T8483] ? __pfx___sys_bpf+0x10/0x10 [ 257.786869][ T8483] ? rt_mutex_slowunlock+0x1cb/0x300 [ 257.786915][ T8483] ? ksys_write+0x248/0x270 [ 257.786948][ T8483] ? __pfx_ksys_write+0x10/0x10 [ 257.786986][ T8483] __x64_sys_bpf+0x7c/0x90 [ 257.787011][ T8483] do_syscall_64+0x14d/0xf80 [ 257.787034][ T8483] ? trace_irq_disable+0x3b/0x150 [ 257.787058][ T8483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.787079][ T8483] ? clear_bhb_loop+0x40/0x90 [ 257.787106][ T8483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.787128][ T8483] RIP: 0033:0x7fae45aac819 [ 257.787150][ T8483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.787169][ T8483] RSP: 002b:00007fae43d06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 257.787194][ T8483] RAX: ffffffffffffffda RBX: 00007fae45d25fa0 RCX: 00007fae45aac819 [ 257.787210][ T8483] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 257.787224][ T8483] RBP: 00007fae43d06090 R08: 0000000000000000 R09: 0000000000000000 [ 257.787237][ T8483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.787250][ T8483] R13: 00007fae45d26038 R14: 00007fae45d25fa0 R15: 00007ffe8df32f08 [ 257.787281][ T8483] [ 258.645765][ T8501] gfs2: not a GFS2 filesystem [ 258.686319][ T8505] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 259.097890][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 259.097910][ T37] audit: type=1326 audit(1775737497.962:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 259.100980][ T37] audit: type=1326 audit(1775737497.972:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 259.101019][ T37] audit: type=1326 audit(1775737497.972:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 259.101425][ T37] audit: type=1326 audit(1775737497.972:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 259.101458][ T37] audit: type=1326 audit(1775737497.972:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 259.101483][ T37] audit: type=1326 audit(1775737497.972:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 259.101758][ T37] audit: type=1326 audit(1775737497.972:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 259.101787][ T37] audit: type=1326 audit(1775737497.972:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 259.102219][ T37] audit: type=1326 audit(1775737497.972:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 259.102557][ T37] audit: type=1326 audit(1775737497.972:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 260.098188][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.851'. [ 260.244429][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.851'. [ 260.359678][ T5864] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 260.514836][ T5864] usb 6-1: config 9 has an invalid interface number: 181 but max is 0 [ 260.514869][ T5864] usb 6-1: config 9 has no interface number 0 [ 260.514920][ T5864] usb 6-1: config 9 interface 181 altsetting 44 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 260.514949][ T5864] usb 6-1: config 9 interface 181 altsetting 44 endpoint 0x8D has invalid maxpacket 34998, setting to 1024 [ 260.514978][ T5864] usb 6-1: config 9 interface 181 altsetting 44 bulk endpoint 0x8D has invalid maxpacket 1024 [ 260.515003][ T5864] usb 6-1: config 9 interface 181 altsetting 44 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 260.515033][ T5864] usb 6-1: config 9 interface 181 has no altsetting 0 [ 260.593576][ T5864] usb 6-1: New USB device found, idVendor=eb1a, idProduct=e310, bcdDevice=34.b6 [ 260.593612][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.593634][ T5864] usb 6-1: Product: syz [ 260.593649][ T5864] usb 6-1: Manufacturer: syz [ 260.593663][ T5864] usb 6-1: SerialNumber: syz [ 261.594716][ T8533] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 263.236104][ T5864] usb 6-1: USB disconnect, device number 2 [ 263.314567][ T8011] udevd[8011]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 264.589905][ T8565] syz.0.856 (8565) used greatest stack depth: 17600 bytes left [ 264.646093][ T8584] netlink: 48 bytes leftover after parsing attributes in process `syz.4.863'. [ 264.649147][ T8584] netlink: 32 bytes leftover after parsing attributes in process `syz.4.863'. [ 264.683592][ T8588] fuse: Unknown parameter '017777777777777777777770x0000000000000004' [ 267.842860][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.869'. [ 267.975996][ T8612] netlink: 136 bytes leftover after parsing attributes in process `syz.5.870'. [ 268.012130][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 269.966076][ T8619] udevd[8619]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 270.115263][ T8619] udevd[8619]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 270.934991][ T8655] netlink: 'syz.1.880': attribute type 10 has an invalid length. [ 270.935743][ T8655] hsr0: entered promiscuous mode [ 271.020973][ T8655] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 271.026750][ T8655] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 271.026811][ T8655] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 271.651718][ T8657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.882'. [ 271.662040][ T8648] 8021q: VLANs not supported on nlmon0 [ 273.927124][ T8697] netlink: 136 bytes leftover after parsing attributes in process `syz.1.895'. [ 276.673861][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 279.497560][ T5789] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 279.549402][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'. [ 279.646930][ T5789] usb 6-1: Using ep0 maxpacket: 8 [ 279.656509][ T5789] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 279.656576][ T5789] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 279.656605][ T5789] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 279.656630][ T5789] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 279.656657][ T5789] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 279.714035][ T5789] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.714101][ T5789] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 279.714126][ T5789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.953855][ T5789] usb 6-1: usb_control_msg returned -32 [ 279.953913][ T5789] usbtmc 6-1:16.0: can't read capabilities [ 280.288454][ T8793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.928'. [ 280.313879][ T8796] FAULT_INJECTION: forcing a failure. [ 280.313879][ T8796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.313906][ T8796] CPU: 1 UID: 0 PID: 8796 Comm: syz.5.915 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 280.313925][ T8796] Tainted: [L]=SOFTLOCKUP [ 280.313930][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 280.313937][ T8796] Call Trace: [ 280.313942][ T8796] [ 280.313947][ T8796] dump_stack_lvl+0xe8/0x150 [ 280.313972][ T8796] should_fail_ex+0x46b/0x600 [ 280.313993][ T8796] _copy_to_user+0x31/0xb0 [ 280.314006][ T8796] simple_read_from_buffer+0xe1/0x170 [ 280.314026][ T8796] proc_fail_nth_read+0x1be/0x230 [ 280.314044][ T8796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.314061][ T8796] ? rw_verify_area+0x2ac/0x4e0 [ 280.314078][ T8796] ? lockdep_unlock+0x5d/0xd0 [ 280.314095][ T8796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.314111][ T8796] vfs_read+0x212/0xa80 [ 280.314134][ T8796] ? __pfx_vfs_read+0x10/0x10 [ 280.314153][ T8796] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 280.314168][ T8796] ? lockdep_hardirqs_on+0x7a/0x110 [ 280.314182][ T8796] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 280.314196][ T8796] ? mutex_lock_nested+0x152/0x1d0 [ 280.314212][ T8796] ? fdget_pos+0x252/0x320 [ 280.314233][ T8796] ksys_read+0x156/0x270 [ 280.314253][ T8796] ? __pfx_ksys_read+0x10/0x10 [ 280.314270][ T8796] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 280.314291][ T8796] do_syscall_64+0x14d/0xf80 [ 280.314308][ T8796] ? trace_irq_disable+0x3b/0x150 [ 280.314323][ T8796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.314336][ T8796] ? clear_bhb_loop+0x40/0x90 [ 280.314351][ T8796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.314363][ T8796] RIP: 0033:0x7fae45a6d04e [ 280.314375][ T8796] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 280.314386][ T8796] RSP: 002b:00007fae43ce4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 280.314401][ T8796] RAX: ffffffffffffffda RBX: 00007fae43ce56c0 RCX: 00007fae45a6d04e [ 280.314410][ T8796] RDX: 000000000000000f RSI: 00007fae43ce50a0 RDI: 0000000000000005 [ 280.314417][ T8796] RBP: 00007fae43ce5090 R08: 0000000000000000 R09: 0000000000000000 [ 280.314425][ T8796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.314432][ T8796] R13: 00007fae45d26128 R14: 00007fae45d26090 R15: 00007ffe8df32f08 [ 280.314451][ T8796] [ 280.356083][ T8798] netlink: 40 bytes leftover after parsing attributes in process `syz.1.928'. [ 280.367798][ T5871] usb 6-1: USB disconnect, device number 3 [ 282.324204][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 283.553872][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 283.609375][ T8839] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 283.809039][ T8844] 9p: Bad value for 'rfdno' [ 283.819620][ T8841] netlink: 'syz.3.942': attribute type 10 has an invalid length. [ 283.819642][ T8841] netlink: 132 bytes leftover after parsing attributes in process `syz.3.942'. [ 283.856886][ T5789] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 284.008281][ T5789] usb 6-1: Using ep0 maxpacket: 16 [ 284.011562][ T5789] usb 6-1: unable to get BOS descriptor or descriptor too short [ 284.013496][ T5789] usb 6-1: config 1 has an invalid interface number: 244 but max is 1 [ 284.013525][ T5789] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.013546][ T5789] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 284.013568][ T5789] usb 6-1: config 1 has no interface number 2 [ 284.013646][ T5789] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.013691][ T5789] usb 6-1: config 1 interface 244 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 284.013720][ T5789] usb 6-1: config 1 interface 244 has no altsetting 0 [ 284.107833][ T5789] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.107868][ T5789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.107890][ T5789] usb 6-1: Product:  [ 284.107905][ T5789] usb 6-1: Manufacturer: ❸Ღͅ஻㑵뇱᳥ꦖ햚킝묻䐡䂭拳 [ 284.107923][ T5789] usb 6-1: SerialNumber: Ѝ [ 284.416063][ T5789] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 284.416120][ T5789] cdc_ncm 6-1:1.0: bind() failure [ 284.442860][ T5789] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 284.442915][ T5789] cdc_ncm 6-1:1.1: bind() failure [ 284.495079][ T5789] cdc_mbim 6-1:1.244: probe with driver cdc_mbim failed with error -71 [ 284.531980][ T5789] usb 6-1: USB disconnect, device number 4 [ 286.339718][ T8881] netlink: 112 bytes leftover after parsing attributes in process `syz.4.955'. [ 286.595133][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.961'. [ 286.741075][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'. [ 287.513946][ T8864] udevd[8864]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 288.835813][ T8924] netlink: 'syz.4.968': attribute type 4 has an invalid length. [ 292.093200][ T8967] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 292.129935][ T8972] netlink: 'syz.3.982': attribute type 39 has an invalid length. [ 292.159292][ T8967] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 292.172289][ T8968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.981'. [ 292.182774][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 292.363428][ T8977] qnx4: unable to read the superblock [ 293.115552][ T8982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.984'. [ 293.115573][ T8982] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 293.153040][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.984'. [ 293.153065][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.984'. [ 293.207799][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 293.207817][ T37] audit: type=1326 audit(1775737787.086:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.4.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 293.208331][ T37] audit: type=1326 audit(1775737787.086:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.4.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 293.208655][ T37] audit: type=1326 audit(1775737787.086:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.4.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 293.208919][ T37] audit: type=1326 audit(1775737787.086:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.4.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 293.209266][ T37] audit: type=1326 audit(1775737787.086:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.4.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 293.209511][ T37] audit: type=1326 audit(1775737787.086:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.4.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 293.209635][ T37] audit: type=1326 audit(1775737787.086:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.4.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 293.209869][ T37] audit: type=1326 audit(1775737787.086:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.4.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 293.210034][ T37] audit: type=1326 audit(1775737787.086:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.4.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 293.210253][ T37] audit: type=1326 audit(1775737787.086:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8981 comm="syz.4.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 293.451234][ T8982] bridge1: entered promiscuous mode [ 293.451265][ T8982] bridge1: entered allmulticast mode [ 293.973487][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.991'. [ 295.588847][ T9021] netlink: 'syz.5.999': attribute type 39 has an invalid length. [ 295.641086][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.999'. [ 296.202276][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1006'. [ 296.339572][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 297.054648][ T9065] No control pipe specified [ 297.145832][ T8753] udevd[8753]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 297.186987][ T8864] udevd[8864]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 297.961156][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'. [ 297.965135][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1022'. [ 299.690928][ T9100] FAULT_INJECTION: forcing a failure. [ 299.690928][ T9100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.690969][ T9100] CPU: 1 UID: 0 PID: 9100 Comm: syz.5.1026 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 299.691000][ T9100] Tainted: [L]=SOFTLOCKUP [ 299.691008][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 299.691021][ T9100] Call Trace: [ 299.691029][ T9100] [ 299.691038][ T9100] dump_stack_lvl+0xe8/0x150 [ 299.691076][ T9100] should_fail_ex+0x46b/0x600 [ 299.691121][ T9100] _copy_from_user+0x2d/0xb0 [ 299.691154][ T9100] iommufd_fops_ioctl+0x461/0x5d0 [ 299.691190][ T9100] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 299.691238][ T9100] ? __fget_files+0x2a/0x420 [ 299.691272][ T9100] ? bpf_lsm_file_ioctl+0x9/0x20 [ 299.691302][ T9100] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 299.691334][ T9100] __se_sys_ioctl+0xff/0x170 [ 299.691359][ T9100] do_syscall_64+0x14d/0xf80 [ 299.691392][ T9100] ? trace_irq_disable+0x3b/0x150 [ 299.691418][ T9100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.691440][ T9100] ? clear_bhb_loop+0x40/0x90 [ 299.691466][ T9100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.691487][ T9100] RIP: 0033:0x7fae45aac819 [ 299.691508][ T9100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.691527][ T9100] RSP: 002b:00007fae43d06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.691553][ T9100] RAX: ffffffffffffffda RBX: 00007fae45d25fa0 RCX: 00007fae45aac819 [ 299.691569][ T9100] RDX: 0000200000000040 RSI: 0000000000003b86 RDI: 0000000000000003 [ 299.691584][ T9100] RBP: 00007fae43d06090 R08: 0000000000000000 R09: 0000000000000000 [ 299.691598][ T9100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.691611][ T9100] R13: 00007fae45d26038 R14: 00007fae45d25fa0 R15: 00007ffe8df32f08 [ 299.691645][ T9100] [ 300.095246][ T60] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 303.286855][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 303.442025][ T9] usb 6-1: config 9 has an invalid interface number: 181 but max is 0 [ 303.442060][ T9] usb 6-1: config 9 has no interface number 0 [ 303.442112][ T9] usb 6-1: config 9 interface 181 altsetting 44 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 303.442141][ T9] usb 6-1: config 9 interface 181 altsetting 44 endpoint 0x8D has invalid maxpacket 34998, setting to 1024 [ 303.442170][ T9] usb 6-1: config 9 interface 181 altsetting 44 bulk endpoint 0x8D has invalid maxpacket 1024 [ 303.442196][ T9] usb 6-1: config 9 interface 181 altsetting 44 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 303.442224][ T9] usb 6-1: config 9 interface 181 has no altsetting 0 [ 303.624942][ T9151] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1045'. [ 303.674678][ T9] usb 6-1: New USB device found, idVendor=eb1a, idProduct=e310, bcdDevice=34.b6 [ 303.674714][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.674735][ T9] usb 6-1: Product: syz [ 303.674750][ T9] usb 6-1: Manufacturer: syz [ 303.674766][ T9] usb 6-1: SerialNumber: syz [ 304.749964][ T9139] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 304.917259][ T9164] bridge2: entered allmulticast mode [ 305.934327][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 306.416442][ T9] usb 6-1: USB disconnect, device number 5 [ 308.824126][ T9209] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1065'. [ 309.086865][ T9221] bond1: option lp_interval: invalid value (18446744072984624427) [ 309.086885][ T9221] bond1: option lp_interval: allowed values 1 - 2147483647 [ 309.732665][ T9221] bond1 (unregistering): Released all slaves [ 310.218002][ T9241] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1069'. [ 310.787583][ T9262] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1080'. [ 313.009386][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 313.009589][ T9282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.199485][ T9282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.738325][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 313.799483][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1089'. [ 313.836892][ T9295] hsr_slave_0: left promiscuous mode [ 313.856982][ T9295] hsr_slave_1: left promiscuous mode [ 313.877774][ T9227] Process accounting resumed [ 314.317678][ T9303] lo: entered allmulticast mode [ 314.623513][ T5806] Bluetooth: hci1: command tx timeout [ 314.790808][ T5806] Bluetooth: hci4: command 0x0405 tx timeout [ 315.909118][ T9329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1101'. [ 316.143824][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1101'. [ 317.681552][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.681632][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.225776][ T9320] udevd[9320]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 320.254446][ T9330] udevd[9330]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 321.422380][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'. [ 321.427692][ T9364] netlink: 'syz.5.1107': attribute type 9 has an invalid length. [ 321.427720][ T9364] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1107'. [ 322.728848][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880382c0800: rx timeout, send abort [ 322.732063][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880382c0400: rx timeout, send abort [ 323.671130][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880382c0800: abort rx timeout. Force session deactivation [ 323.671451][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880382c0400: abort rx timeout. Force session deactivation [ 324.520307][ T9390] xt_socket: unknown flags 0xe4 [ 327.340788][ T5806] Bluetooth: hci4: command 0x0405 tx timeout [ 329.145232][ T9439] netlink: 'syz.4.1136': attribute type 1 has an invalid length. [ 329.375410][ T9438] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1137'. [ 329.598811][ T9439] 8021q: adding VLAN 0 to HW filter on device bond2 [ 331.474082][ T9505] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1160'. [ 332.128528][ T9520] fuse: Unknown parameter '01777777777777777777777' [ 332.667662][ T9531] overlay: ./file0 is not a directory [ 334.323870][ T9507] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1163'. [ 335.260054][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1182'. [ 335.514684][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1182'. [ 338.511226][ T9576] udevd[9576]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 340.387480][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1200'. [ 340.480956][ T9617] FAULT_INJECTION: forcing a failure. [ 340.480956][ T9617] name failslab, interval 1, probability 0, space 0, times 0 [ 340.481009][ T9617] CPU: 0 UID: 0 PID: 9617 Comm: syz.5.1202 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 340.481039][ T9617] Tainted: [L]=SOFTLOCKUP [ 340.481046][ T9617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 340.481058][ T9617] Call Trace: [ 340.481066][ T9617] [ 340.481075][ T9617] dump_stack_lvl+0xe8/0x150 [ 340.481112][ T9617] should_fail_ex+0x46b/0x600 [ 340.481147][ T9617] should_failslab+0xa8/0x100 [ 340.481173][ T9617] __kmalloc_noprof+0xdf/0x7b0 [ 340.481194][ T9617] ? tomoyo_encode+0x28b/0x550 [ 340.481226][ T9617] tomoyo_encode+0x28b/0x550 [ 340.481260][ T9617] tomoyo_realpath_from_path+0x58d/0x5d0 [ 340.481301][ T9617] ? tomoyo_path_number_perm+0x219/0x630 [ 340.481323][ T9617] tomoyo_path_number_perm+0x246/0x630 [ 340.481347][ T9617] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 340.481373][ T9617] ? __lock_acquire+0x6b5/0x2cf0 [ 340.481429][ T9617] ? __fget_files+0x2a/0x420 [ 340.481460][ T9617] ? __fget_files+0x2a/0x420 [ 340.481485][ T9617] ? __fget_files+0x3a6/0x420 [ 340.481510][ T9617] ? __fget_files+0x2a/0x420 [ 340.481542][ T9617] security_file_ioctl+0xc3/0x2a0 [ 340.481568][ T9617] __se_sys_ioctl+0x47/0x170 [ 340.481593][ T9617] do_syscall_64+0x14d/0xf80 [ 340.481618][ T9617] ? trace_irq_disable+0x3b/0x150 [ 340.481643][ T9617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.481666][ T9617] ? clear_bhb_loop+0x40/0x90 [ 340.481692][ T9617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.481713][ T9617] RIP: 0033:0x7fae45aac819 [ 340.481732][ T9617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.481749][ T9617] RSP: 002b:00007fae43d06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.481772][ T9617] RAX: ffffffffffffffda RBX: 00007fae45d25fa0 RCX: 00007fae45aac819 [ 340.481788][ T9617] RDX: 0000200000000480 RSI: 000000004048aecb RDI: 0000000000000005 [ 340.481801][ T9617] RBP: 00007fae43d06090 R08: 0000000000000000 R09: 0000000000000000 [ 340.481813][ T9617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.481826][ T9617] R13: 00007fae45d26038 R14: 00007fae45d25fa0 R15: 00007ffe8df32f08 [ 340.481859][ T9617] [ 340.481880][ T9617] ERROR: Out of memory at tomoyo_realpath_from_path. [ 340.528308][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 343.236853][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 343.389883][ T9] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 343.389915][ T9] usb 6-1: config 1 has no interface number 0 [ 343.389964][ T9] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 343.400153][ T9] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 343.400213][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.400232][ T9] usb 6-1: Product: syz [ 343.400245][ T9] usb 6-1: Manufacturer: syz [ 343.400257][ T9] usb 6-1: SerialNumber: syz [ 343.559769][ T9661] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1217'. [ 343.645475][ T9] usb 6-1: No status endpoint found [ 343.819646][ T9667] process 'syz.3.1220' launched './file1' with NULL argv: empty string added [ 343.856210][ T9] usb 6-1: USB disconnect, device number 6 [ 344.311576][ T9684] overlayfs: failed to clone lowerpath [ 345.186333][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 346.066634][ T9713] netlink: 'syz.0.1234': attribute type 1 has an invalid length. [ 346.066931][ T9713] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1234'. [ 346.066961][ T9713] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1234'. [ 346.066977][ T9713] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1234'. [ 347.775340][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 347.775361][ T37] audit: type=1326 audit(1775737841.646:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae45aac819 code=0x7ffc0000 [ 347.775413][ T37] audit: type=1326 audit(1775737841.646:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae45aac819 code=0x7ffc0000 [ 347.775701][ T37] audit: type=1326 audit(1775737841.646:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae45aac819 code=0x7ffc0000 [ 347.776504][ T37] audit: type=1326 audit(1775737841.646:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae45aac819 code=0x7ffc0000 [ 347.937339][ T37] audit: type=1326 audit(1775737841.706:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fae45aac819 code=0x7ffc0000 [ 347.937411][ T37] audit: type=1326 audit(1775737841.706:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae45aac819 code=0x7ffc0000 [ 347.937460][ T37] audit: type=1326 audit(1775737841.706:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae45aac819 code=0x7ffc0000 [ 347.937508][ T37] audit: type=1326 audit(1775737841.706:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae45aac819 code=0x7ffc0000 [ 347.937557][ T37] audit: type=1326 audit(1775737841.706:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae45aac819 code=0x7ffc0000 [ 347.937606][ T37] audit: type=1326 audit(1775737841.706:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fae45aac819 code=0x7ffc0000 [ 348.292276][ T9754] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1246'. [ 350.938648][ T9795] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1259'. [ 353.289759][ T37] kauditd_printk_skb: 122 callbacks suppressed [ 353.289782][ T37] audit: type=1800 audit(1775737847.166:514): pid=9838 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1272" name="file1" dev="tmpfs" ino=1132 res=0 errno=0 [ 358.542646][ T9873] netlink: 'syz.1.1281': attribute type 1 has an invalid length. [ 358.542663][ T9873] netlink: 'syz.1.1281': attribute type 2 has an invalid length. [ 358.734013][ T9881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1287'. [ 358.735711][ T9881] 9p: Bad value for 'wfdno' [ 359.939818][ T37] audit: type=1326 audit(1775737853.816:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9893 comm="syz.3.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9722a8c819 code=0x7ffc0000 [ 359.940170][ T37] audit: type=1326 audit(1775737853.816:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9893 comm="syz.3.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9722a8c819 code=0x7ffc0000 [ 362.497263][ T9923] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1301'. [ 362.886875][ T5864] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 363.038270][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 363.041023][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.041049][ T5864] usb 6-1: config 0 has no interfaces? [ 363.042478][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.042502][ T5864] usb 6-1: config 0 has no interfaces? [ 363.044404][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.044426][ T5864] usb 6-1: config 0 has no interfaces? [ 363.051768][ T5864] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 363.051806][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.051824][ T5864] usb 6-1: Product: syz [ 363.051837][ T5864] usb 6-1: Manufacturer: 嫉樚㮴緦腏눛ﻵɳ摬딊谋⚆贖扵Ⳉ௸狔旯뼇⮌ﲆ앓鿇팄檶릾ꇯ鱽㎶죣럷蔘掙᭺➒㭨営흘泘缍㯫跿獛᭐큇ベዻ䊐찭 [ 363.051859][ T5864] usb 6-1: SerialNumber: syz [ 363.071111][ T5864] usb 6-1: config 0 descriptor?? [ 363.625893][ T9954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1309'. [ 363.625934][ T9954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1309'. [ 365.648107][ T37] audit: type=1326 audit(1775737859.526:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 365.648401][ T37] audit: type=1326 audit(1775737859.526:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 365.653077][ T37] audit: type=1326 audit(1775737859.526:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 365.653900][ T37] audit: type=1326 audit(1775737859.526:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 365.707728][ T37] audit: type=1326 audit(1775737859.586:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 365.707781][ T37] audit: type=1326 audit(1775737859.586:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 365.707821][ T37] audit: type=1326 audit(1775737859.586:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 365.714806][ T37] audit: type=1326 audit(1775737859.586:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 365.714854][ T37] audit: type=1326 audit(1775737859.586:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 365.714895][ T37] audit: type=1326 audit(1775737859.586:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1616c819 code=0x7ffc0000 [ 367.745054][T10012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.745623][T10012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.100336][T10040] netlink: 'syz.0.1338': attribute type 10 has an invalid length. [ 369.378845][T10053] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 370.141511][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1347'. [ 370.141656][T10065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.266243][T10065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.767906][ T812] usb 6-1: USB disconnect, device number 7 [ 371.818751][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'. [ 372.720732][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1361'. [ 372.721478][T10105] netlink: 'syz.0.1361': attribute type 10 has an invalid length. [ 372.736992][ T812] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 373.093679][ T812] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 373.093716][ T812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 113, changing to 10 [ 373.093745][ T812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59372, setting to 1024 [ 373.093775][ T812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.093819][ T812] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.093844][ T812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.185149][ T812] usb 6-1: config 0 descriptor?? [ 373.185918][T10096] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 373.624915][ T812] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 373.700988][ T812] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 375.296987][T10127] fuse: Unknown parameter '' [ 377.107200][ T9] usb 6-1: USB disconnect, device number 8 [ 377.225284][T10155] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1377'. [ 378.960254][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.960338][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.966957][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 381.966978][ T37] audit: type=1326 audit(1775738131.815:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10211 comm="syz.0.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff00c819 code=0x7ffc0000 [ 381.967029][ T37] audit: type=1326 audit(1775738131.815:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10211 comm="syz.0.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff00c819 code=0x7ffc0000 [ 381.967076][ T37] audit: type=1326 audit(1775738131.815:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10211 comm="syz.0.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff00c819 code=0x7ffc0000 [ 381.967118][ T37] audit: type=1326 audit(1775738131.815:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10211 comm="syz.0.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff00c819 code=0x7ffc0000 [ 381.967164][ T37] audit: type=1326 audit(1775738131.815:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10211 comm="syz.0.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdeff00c819 code=0x7ffc0000 [ 381.967210][ T37] audit: type=1326 audit(1775738131.815:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10211 comm="syz.0.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff00c819 code=0x7ffc0000 [ 381.967271][ T37] audit: type=1326 audit(1775738131.815:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10211 comm="syz.0.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff00c819 code=0x7ffc0000 [ 381.967315][ T37] audit: type=1326 audit(1775738131.815:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10211 comm="syz.0.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff00c819 code=0x7ffc0000 [ 381.967359][ T37] audit: type=1326 audit(1775738131.815:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10211 comm="syz.0.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff00c819 code=0x7ffc0000 [ 381.967409][ T37] audit: type=1326 audit(1775738131.815:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10211 comm="syz.0.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fdeff00c819 code=0x7ffc0000 [ 382.028800][T10218] FAULT_INJECTION: forcing a failure. [ 382.028800][T10218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.028838][T10218] CPU: 0 UID: 0 PID: 10218 Comm: syz.5.1398 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 382.028865][T10218] Tainted: [L]=SOFTLOCKUP [ 382.028872][T10218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 382.028883][T10218] Call Trace: [ 382.028891][T10218] [ 382.028898][T10218] dump_stack_lvl+0xe8/0x150 [ 382.028932][T10218] should_fail_ex+0x46b/0x600 [ 382.028963][T10218] strncpy_from_user+0x36/0x2b0 [ 382.028991][T10218] do_getname+0x77/0x250 [ 382.029017][T10218] path_removexattrat+0x1ad/0x750 [ 382.029039][T10218] ? __pfx_path_removexattrat+0x10/0x10 [ 382.029059][T10218] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 382.029109][T10218] ? __pfx_ksys_write+0x10/0x10 [ 382.029146][T10218] __x64_sys_lremovexattr+0x65/0x80 [ 382.029175][T10218] do_syscall_64+0x14d/0xf80 [ 382.029196][T10218] ? trace_irq_disable+0x3b/0x150 [ 382.029219][T10218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.029239][T10218] ? clear_bhb_loop+0x40/0x90 [ 382.029262][T10218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.029280][T10218] RIP: 0033:0x7fae45aac819 [ 382.029299][T10218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.029314][T10218] RSP: 002b:00007fae43d06028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 382.029336][T10218] RAX: ffffffffffffffda RBX: 00007fae45d25fa0 RCX: 00007fae45aac819 [ 382.029350][T10218] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180 [ 382.029363][T10218] RBP: 00007fae43d06090 R08: 0000000000000000 R09: 0000000000000000 [ 382.029383][T10218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.029394][T10218] R13: 00007fae45d26038 R14: 00007fae45d25fa0 R15: 00007ffe8df32f08 [ 382.029424][T10218] [ 382.964908][T10238] FAULT_INJECTION: forcing a failure. [ 382.964908][T10238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.964946][T10238] CPU: 0 UID: 0 PID: 10238 Comm: syz.5.1409 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 382.964976][T10238] Tainted: [L]=SOFTLOCKUP [ 382.964984][T10238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 382.964997][T10238] Call Trace: [ 382.965006][T10238] [ 382.965015][T10238] dump_stack_lvl+0xe8/0x150 [ 382.965052][T10238] should_fail_ex+0x46b/0x600 [ 382.965086][T10238] _copy_to_user+0x31/0xb0 [ 382.965111][T10238] simple_read_from_buffer+0xe1/0x170 [ 382.965144][T10238] proc_fail_nth_read+0x1be/0x230 [ 382.965175][T10238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.965204][T10238] ? rw_verify_area+0x2ac/0x4e0 [ 382.965236][T10238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.965264][T10238] vfs_read+0x212/0xa80 [ 382.965305][T10238] ? __pfx_vfs_read+0x10/0x10 [ 382.965335][T10238] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 382.965362][T10238] ? lockdep_hardirqs_on+0x7a/0x110 [ 382.965387][T10238] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 382.965411][T10238] ? mutex_lock_nested+0x152/0x1d0 [ 382.965440][T10238] ? fdget_pos+0x252/0x320 [ 382.965476][T10238] ksys_read+0x156/0x270 [ 382.965512][T10238] ? __pfx_ksys_read+0x10/0x10 [ 382.965556][T10238] do_syscall_64+0x14d/0xf80 [ 382.965588][T10238] ? trace_irq_disable+0x3b/0x150 [ 382.965611][T10238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.965634][T10238] ? clear_bhb_loop+0x40/0x90 [ 382.965661][T10238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.965682][T10238] RIP: 0033:0x7fae45a6d04e [ 382.965702][T10238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 382.965720][T10238] RSP: 002b:00007fae43d05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 382.965742][T10238] RAX: ffffffffffffffda RBX: 00007fae43d066c0 RCX: 00007fae45a6d04e [ 382.965758][T10238] RDX: 000000000000000f RSI: 00007fae43d060a0 RDI: 0000000000000005 [ 382.965771][T10238] RBP: 00007fae43d06090 R08: 0000000000000000 R09: 0000000000000000 [ 382.965784][T10238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.965796][T10238] R13: 00007fae45d26038 R14: 00007fae45d25fa0 R15: 00007ffe8df32f08 [ 382.965831][T10238] [ 386.722591][T10279] tmpfs: Bad value for 'mpol' [ 386.739077][T10289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1424'. [ 386.880893][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1424'. [ 387.640940][T10304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1428'. [ 387.644321][T10304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1428'. [ 388.412147][ T9930] udevd[9930]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 389.851991][T10319] netlink: 'syz.4.1431': attribute type 10 has an invalid length. [ 392.455340][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1437'. [ 392.455368][T10367] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1437'. [ 393.331406][T10392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1442'. [ 393.332085][T10392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1442'. [ 393.660187][T10391] FAULT_INJECTION: forcing a failure. [ 393.660187][T10391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.660228][T10391] CPU: 1 UID: 0 PID: 10391 Comm: syz.5.1446 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 393.660258][T10391] Tainted: [L]=SOFTLOCKUP [ 393.660266][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 393.660278][T10391] Call Trace: [ 393.660287][T10391] [ 393.660296][T10391] dump_stack_lvl+0xe8/0x150 [ 393.660337][T10391] should_fail_ex+0x46b/0x600 [ 393.660375][T10391] _copy_from_user+0x2d/0xb0 [ 393.660418][T10391] kstrtouint_from_user+0xd6/0x180 [ 393.660453][T10391] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 393.660505][T10391] ? __lock_acquire+0x6b5/0x2cf0 [ 393.660539][T10391] proc_fail_nth_write+0x8e/0x210 [ 393.660569][T10391] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 393.660604][T10391] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 393.660643][T10391] vfs_write+0x2a3/0xba0 [ 393.660688][T10391] ? __pfx_vfs_write+0x10/0x10 [ 393.660724][T10391] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 393.660751][T10391] ? lockdep_hardirqs_on+0x7a/0x110 [ 393.660777][T10391] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 393.660803][T10391] ? mutex_lock_nested+0x152/0x1d0 [ 393.660834][T10391] ? fdget_pos+0x252/0x320 [ 393.660874][T10391] ksys_write+0x156/0x270 [ 393.660911][T10391] ? __pfx_ksys_write+0x10/0x10 [ 393.660959][T10391] do_syscall_64+0x14d/0xf80 [ 393.660985][T10391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.661008][T10391] ? clear_bhb_loop+0x40/0x90 [ 393.661037][T10391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.661064][T10391] RIP: 0033:0x7fae45a6d04e [ 393.661086][T10391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 393.661105][T10391] RSP: 002b:00007fae43d05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 393.661129][T10391] RAX: ffffffffffffffda RBX: 00007fae43d066c0 RCX: 00007fae45a6d04e [ 393.661146][T10391] RDX: 0000000000000001 RSI: 00007fae43d060a0 RDI: 0000000000000004 [ 393.661160][T10391] RBP: 00007fae43d06090 R08: 0000000000000000 R09: 0000000000000000 [ 393.661174][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.661187][T10391] R13: 00007fae45d26038 R14: 00007fae45d25fa0 R15: 00007ffe8df32f08 [ 393.661223][T10391] [ 394.437236][T10403] FAULT_INJECTION: forcing a failure. [ 394.437236][T10403] name failslab, interval 1, probability 0, space 0, times 0 [ 394.437276][T10403] CPU: 1 UID: 0 PID: 10403 Comm: syz.5.1450 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 394.437306][T10403] Tainted: [L]=SOFTLOCKUP [ 394.437313][T10403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 394.437326][T10403] Call Trace: [ 394.437334][T10403] [ 394.437342][T10403] dump_stack_lvl+0xe8/0x150 [ 394.437382][T10403] should_fail_ex+0x46b/0x600 [ 394.437419][T10403] should_failslab+0xa8/0x100 [ 394.437453][T10403] __kmalloc_noprof+0xdf/0x7b0 [ 394.437474][T10403] ? kfree+0x4d/0x6c0 [ 394.437502][T10403] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 394.437530][T10403] ? __asan_memcpy+0x40/0x70 [ 394.437564][T10403] tomoyo_realpath_from_path+0xe3/0x5d0 [ 394.437607][T10403] tomoyo_path_perm+0x283/0x560 [ 394.437630][T10403] ? tomoyo_path_perm+0x251/0x560 [ 394.437654][T10403] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 394.437731][T10403] security_inode_getattr+0x12b/0x310 [ 394.437767][T10403] vfs_getattr+0x23/0x70 [ 394.437795][T10403] vfs_statx_path+0x2b/0x230 [ 394.437821][T10403] ? vfs_statx+0x107/0x200 [ 394.437847][T10403] vfs_statx+0x12e/0x200 [ 394.437874][T10403] ? __pfx_vfs_statx+0x10/0x10 [ 394.437911][T10403] __se_sys_statx+0x1e9/0x2a0 [ 394.437937][T10403] ? lockdep_hardirqs_on+0x7a/0x110 [ 394.437966][T10403] ? __pfx___se_sys_statx+0x10/0x10 [ 394.438013][T10403] ? __pfx_ksys_write+0x10/0x10 [ 394.438051][T10403] ? __x64_sys_statx+0x20/0xc0 [ 394.438081][T10403] do_syscall_64+0x14d/0xf80 [ 394.438103][T10403] ? trace_irq_disable+0x3b/0x150 [ 394.438129][T10403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.438150][T10403] ? clear_bhb_loop+0x40/0x90 [ 394.438175][T10403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.438196][T10403] RIP: 0033:0x7fae45aac819 [ 394.438216][T10403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.438234][T10403] RSP: 002b:00007fae43d06028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 394.438257][T10403] RAX: ffffffffffffffda RBX: 00007fae45d25fa0 RCX: 00007fae45aac819 [ 394.438273][T10403] RDX: 0000000000002000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 394.438288][T10403] RBP: 00007fae43d06090 R08: 0000000000000000 R09: 0000000000000000 [ 394.438301][T10403] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 394.438314][T10403] R13: 00007fae45d26038 R14: 00007fae45d25fa0 R15: 00007ffe8df32f08 [ 394.438350][T10403] [ 394.438358][T10403] ERROR: Out of memory at tomoyo_realpath_from_path. [ 396.575977][T10440] FAULT_INJECTION: forcing a failure. [ 396.575977][T10440] name failslab, interval 1, probability 0, space 0, times 0 [ 396.576018][T10440] CPU: 0 UID: 60929 PID: 10440 Comm: syz.5.1463 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 396.576047][T10440] Tainted: [L]=SOFTLOCKUP [ 396.576054][T10440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 396.576067][T10440] Call Trace: [ 396.576075][T10440] [ 396.576084][T10440] dump_stack_lvl+0xe8/0x150 [ 396.576120][T10440] should_fail_ex+0x46b/0x600 [ 396.576157][T10440] should_failslab+0xa8/0x100 [ 396.576183][T10440] kmem_cache_alloc_noprof+0x87/0x680 [ 396.576227][T10440] ? alloc_empty_file+0x55/0x1d0 [ 396.576260][T10440] alloc_empty_file+0x55/0x1d0 [ 396.576288][T10440] path_openat+0x11b/0x38a0 [ 396.576331][T10440] ? try_to_take_rt_mutex+0x840/0xb00 [ 396.576364][T10440] ? arch_stack_walk+0xfb/0x150 [ 396.576397][T10440] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 396.576440][T10440] ? __pfx_path_openat+0x10/0x10 [ 396.576472][T10440] ? __lock_acquire+0x6b5/0x2cf0 [ 396.576497][T10440] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 396.576536][T10440] ? do_raw_spin_lock+0x12b/0x2f0 [ 396.576578][T10440] do_file_open+0x23e/0x4a0 [ 396.576611][T10440] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 396.576644][T10440] ? __pfx_do_file_open+0x10/0x10 [ 396.576671][T10440] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 396.576724][T10440] ? alloc_fd+0x64e/0x6c0 [ 396.576761][T10440] do_sys_openat2+0x113/0x200 [ 396.576792][T10440] ? __pfx_do_sys_openat2+0x10/0x10 [ 396.576820][T10440] ? ksys_write+0x248/0x270 [ 396.576852][T10440] ? __pfx_ksys_write+0x10/0x10 [ 396.576886][T10440] __x64_sys_openat+0x138/0x170 [ 396.576917][T10440] do_syscall_64+0x14d/0xf80 [ 396.576940][T10440] ? trace_irq_disable+0x3b/0x150 [ 396.576966][T10440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.576988][T10440] ? clear_bhb_loop+0x40/0x90 [ 396.577011][T10440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.577031][T10440] RIP: 0033:0x7fae45aac819 [ 396.577051][T10440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.577069][T10440] RSP: 002b:00007fae43d06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 396.577092][T10440] RAX: ffffffffffffffda RBX: 00007fae45d25fa0 RCX: 00007fae45aac819 [ 396.577107][T10440] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 396.577121][T10440] RBP: 00007fae43d06090 R08: 0000000000000000 R09: 0000000000000000 [ 396.577134][T10440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.577145][T10440] R13: 00007fae45d26038 R14: 00007fae45d25fa0 R15: 00007ffe8df32f08 [ 396.577177][T10440] [ 397.568737][T10456] IPVS: length: 118 != 8 [ 398.384445][T10464] netlink: 'syz.3.1471': attribute type 21 has an invalid length. [ 398.384470][T10464] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1471'. [ 398.439241][T10466] netlink: 'syz.3.1471': attribute type 21 has an invalid length. [ 398.439277][T10466] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1471'. [ 398.470993][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 398.471021][T10460] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1471'. [ 398.471048][T10460] tc_dump_action: action bad kind [ 398.471271][T10464] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1471'. [ 398.487426][T10466] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1471'. [ 399.360087][T10480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1474'. [ 399.360235][T10480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1474'. [ 400.853015][T10500] IPVS: length: 118 != 8 [ 401.840297][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1486'. [ 402.077987][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'. [ 404.061233][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1495'. [ 404.064501][T10540] udevd[10540]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 404.157873][T10510] udevd[10510]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 404.193148][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 404.623431][T10556] IPVS: length: 118 != 8 [ 404.958188][T10510] udevd[10510]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 405.004366][T10568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1501'. [ 405.107365][ T5864] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 405.121214][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1503'. [ 405.147641][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 405.261267][ T5864] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 405.261290][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 113, changing to 10 [ 405.261306][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59372, setting to 1024 [ 405.261323][ T5864] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 405.261349][ T5864] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 405.261363][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.265019][ T5864] usb 6-1: config 0 descriptor?? [ 405.267760][T10560] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 405.696835][T10510] udevd[10510]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 405.701746][ T5864] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 405.765626][ T5864] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 406.186104][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1505'. [ 407.181105][T10595] IPVS: length: 118 != 8 [ 407.236521][T10597] IPVS: set_ctl: invalid protocol: 41 172.30.0.5:20003 [ 407.831382][ T5789] usb 6-1: USB disconnect, device number 9 [ 408.192417][T10621] IPVS: length: 118 != 8 [ 408.307590][T10625] netlink: 'syz.0.1522': attribute type 11 has an invalid length. [ 408.556613][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1527'. [ 408.591404][T10633] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 408.844453][T10641] FAULT_INJECTION: forcing a failure. [ 408.844453][T10641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.844495][T10641] CPU: 0 UID: 0 PID: 10641 Comm: syz.5.1529 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 408.844526][T10641] Tainted: [L]=SOFTLOCKUP [ 408.844534][T10641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 408.844547][T10641] Call Trace: [ 408.844556][T10641] [ 408.844565][T10641] dump_stack_lvl+0xe8/0x150 [ 408.844605][T10641] should_fail_ex+0x46b/0x600 [ 408.844641][T10641] _copy_to_user+0x31/0xb0 [ 408.844665][T10641] simple_read_from_buffer+0xe1/0x170 [ 408.844698][T10641] proc_fail_nth_read+0x1be/0x230 [ 408.844731][T10641] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.844763][T10641] ? rw_verify_area+0x2ac/0x4e0 [ 408.844793][T10641] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.844821][T10641] vfs_read+0x212/0xa80 [ 408.844859][T10641] ? __pfx_vfs_read+0x10/0x10 [ 408.844893][T10641] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 408.844918][T10641] ? lockdep_hardirqs_on+0x7a/0x110 [ 408.844942][T10641] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 408.844967][T10641] ? mutex_lock_nested+0x152/0x1d0 [ 408.844996][T10641] ? fdget_pos+0x252/0x320 [ 408.845035][T10641] ksys_read+0x156/0x270 [ 408.845068][T10641] ? __pfx_ksys_read+0x10/0x10 [ 408.845114][T10641] do_syscall_64+0x14d/0xf80 [ 408.845137][T10641] ? trace_irq_disable+0x3b/0x150 [ 408.845162][T10641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.845183][T10641] ? clear_bhb_loop+0x40/0x90 [ 408.845207][T10641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.845228][T10641] RIP: 0033:0x7fae45a6d04e [ 408.845247][T10641] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 408.845265][T10641] RSP: 002b:00007fae43d05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.845288][T10641] RAX: ffffffffffffffda RBX: 00007fae43d066c0 RCX: 00007fae45a6d04e [ 408.845314][T10641] RDX: 000000000000000f RSI: 00007fae43d060a0 RDI: 0000000000000004 [ 408.845328][T10641] RBP: 00007fae43d06090 R08: 0000000000000000 R09: 0000000000000000 [ 408.845342][T10641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.845355][T10641] R13: 00007fae45d26038 R14: 00007fae45d25fa0 R15: 00007ffe8df32f08 [ 408.845389][T10641] [ 409.543180][T10661] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1536'. [ 409.753131][T10665] IPVS: length: 118 != 8 [ 411.279621][ T5789] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 412.144206][ T5789] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.144243][ T5789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 113, changing to 10 [ 412.144270][ T5789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59372, setting to 1024 [ 412.144298][ T5789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 412.144345][ T5789] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 412.144369][ T5789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.267327][ T5789] usb 6-1: config 0 descriptor?? [ 412.435799][ T5789] usb 6-1: can't set config #0, error -71 [ 412.460421][ T5789] usb 6-1: USB disconnect, device number 10 [ 413.169973][T10722] IPVS: length: 118 != 8 [ 414.675230][T10740] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1562'. [ 415.339936][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1562'. [ 416.087496][T10757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1567'. [ 416.328622][T10761] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1567'. [ 420.531756][T10540] udevd[10540]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 420.541877][T10510] udevd[10510]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 420.806775][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 422.069751][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 422.071353][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 422.074467][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 422.074499][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.074521][ T9] usb 6-1: Product: 䐆ಟ阳둝嗭郟擁㳂⊊괧㤾阳駯㸽㈦쌵ឩ鎌㗔焵䌕亐뫥化褑꓁䀀⊝冄ᅻ圳䡖݈앲ﶷ鋫㮰瞗㕶숋ᶄ愠ぴ衙蒴扑쌾ធ⭛ᖜ䘌啹컴됎헪໽⪇胴덋ꓶ땑軦閡栄׉葛消䒸뭊Ü︴僝挆ᆧ砅㊋ภ怙葂훖壣⍣鉒쏿軏⑐앢둽️ꦧ鱽籞୮Ҭ [ 422.074555][ T9] usb 6-1: Manufacturer: ᠊ [ 422.074570][ T9] usb 6-1: SerialNumber: syz [ 422.669368][ T9] usb 6-1: USB disconnect, device number 11 [ 422.681572][T10807] bond3 (unregistering): Released all slaves [ 423.022701][T10817] overlayfs: failed to clone upperpath [ 424.592500][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 424.866761][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 424.876141][ T9] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 424.896138][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 424.896171][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.896193][ T9] usb 6-1: Product: syz [ 424.896209][ T9] usb 6-1: Manufacturer: syz [ 424.896224][ T9] usb 6-1: SerialNumber: syz [ 424.938908][ T9] r8152-cfgselector 6-1: Unknown version 0x0000 [ 424.938992][ T9] r8152-cfgselector 6-1: config 0 descriptor?? [ 426.031764][ T9] r8152-cfgselector 6-1: Needed 1 retries to read version [ 426.031802][ T9] r8152-cfgselector 6-1: Unknown version 0x2c50 [ 426.032233][ T9] r8152-cfgselector 6-1: bad CDC descriptors [ 426.526474][T10862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1601'. [ 426.526602][T10862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1601'. [ 428.445748][ T5789] r8152-cfgselector 6-1: USB disconnect, device number 12 [ 428.690153][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1607'. [ 431.875612][T10915] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1618'. [ 431.875738][T10915] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1618'. [ 435.069653][T10950] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1630'. [ 435.645541][T10962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1631'. [ 435.645667][T10962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1631'. [ 438.283889][T10993] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 440.383612][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.383694][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.456544][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1658'. [ 441.522293][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1658'. [ 441.698514][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1660'. [ 442.499208][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 442.499239][ T37] audit: type=1326 audit(1775738448.365:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11044 comm="syz.1.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 442.505459][ T37] audit: type=1326 audit(1775738448.375:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11044 comm="syz.1.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 442.569825][ T37] audit: type=1326 audit(1775738448.435:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11044 comm="syz.1.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 442.577054][ T37] audit: type=1326 audit(1775738448.445:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11044 comm="syz.1.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 442.577115][ T37] audit: type=1326 audit(1775738448.445:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11044 comm="syz.1.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 442.649181][ T37] audit: type=1326 audit(1775738448.525:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11044 comm="syz.1.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 442.684929][ T37] audit: type=1326 audit(1775738448.525:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11044 comm="syz.1.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 442.686557][ T37] audit: type=1326 audit(1775738448.555:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11044 comm="syz.1.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7f7c11c582 code=0x7ffc0000 [ 442.735226][ T37] audit: type=1326 audit(1775738448.555:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11044 comm="syz.1.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 442.769146][ T37] audit: type=1326 audit(1775738448.605:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11044 comm="syz.1.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7f7c11c617 code=0x7ffc0000 [ 443.972434][T11047] udevd[11047]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 444.000199][T11047] udevd[11047]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 445.201361][ T60] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 445.674268][T11071] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.674708][T11071] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.400647][T11071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.522152][T11108] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1679'. [ 447.536922][ T8215] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.566852][ T8215] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.577088][ T8215] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.577144][ T8215] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.163053][T11161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1689'. [ 449.163192][T11161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1689'. [ 454.617857][T11226] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1713'. [ 454.621325][T11227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1713'. [ 458.215707][ T5806] Bluetooth: hci3: command 0x0405 tx timeout [ 458.242341][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'. [ 458.497508][T11253] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1722'. [ 458.696197][T11264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.700351][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.201128][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.372431][T11277] IPVS: length: 118 != 8 [ 460.303124][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.760159][T11305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.761062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.407772][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.535718][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.536175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.661572][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.799448][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1744'. [ 461.799482][T11321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1744'. [ 461.799504][T11321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1744'. [ 462.362062][T11334] qnx4: unable to read the superblock [ 464.039875][T11097] net_ratelimit: 1 callbacks suppressed [ 464.039901][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.057263][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.840355][T11373] IPVS: length: 118 != 8 [ 465.506786][ T8356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.946301][T11383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.966982][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.001088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.097350][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.405394][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.329731][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.417120][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.477057][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.926760][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.553519][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.690541][T11508] IPVS: length: 118 != 8 [ 473.634623][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.657090][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.697386][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.507064][T11532] overlayfs: missing 'lowerdir' [ 475.561743][T11532] : entered promiscuous mode [ 475.577719][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.737593][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.152939][T11543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.153196][T11543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.153676][T11543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.253081][T11543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.253343][T11543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.445997][T11551] FAULT_INJECTION: forcing a failure. [ 476.445997][T11551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.446039][T11551] CPU: 1 UID: 0 PID: 11551 Comm: syz.5.1824 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 476.446070][T11551] Tainted: [L]=SOFTLOCKUP [ 476.446078][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 476.446091][T11551] Call Trace: [ 476.446099][T11551] [ 476.446108][T11551] dump_stack_lvl+0xe8/0x150 [ 476.446148][T11551] should_fail_ex+0x46b/0x600 [ 476.446187][T11551] _copy_from_user+0x2d/0xb0 [ 476.446210][T11551] do_sys_poll+0x2a0/0xfa0 [ 476.446256][T11551] ? __pfx_do_sys_poll+0x10/0x10 [ 476.446281][T11551] ? __lock_acquire+0x6b5/0x2cf0 [ 476.446307][T11551] ? is_bpf_text_address+0x26/0x2b0 [ 476.446452][T11551] ? set_user_sigmask+0xcd/0x1c0 [ 476.446485][T11551] ? __pfx_set_user_sigmask+0x10/0x10 [ 476.446510][T11551] ? rt_mutex_slowunlock+0x1cb/0x300 [ 476.446553][T11551] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 476.446599][T11551] __se_sys_ppoll+0x209/0x2b0 [ 476.446624][T11551] ? fput+0xa0/0xd0 [ 476.446652][T11551] ? __pfx___se_sys_ppoll+0x10/0x10 [ 476.446678][T11551] ? __pfx_ksys_write+0x10/0x10 [ 476.446719][T11551] ? __x64_sys_ppoll+0x20/0xc0 [ 476.446749][T11551] do_syscall_64+0x14d/0xf80 [ 476.446773][T11551] ? trace_irq_disable+0x3b/0x150 [ 476.446798][T11551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.446818][T11551] ? clear_bhb_loop+0x40/0x90 [ 476.446846][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.446868][T11551] RIP: 0033:0x7fae45aac819 [ 476.446889][T11551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.446906][T11551] RSP: 002b:00007fae43d06028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 476.446929][T11551] RAX: ffffffffffffffda RBX: 00007fae45d25fa0 RCX: 00007fae45aac819 [ 476.446945][T11551] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 476.446960][T11551] RBP: 00007fae43d06090 R08: 0000000000000000 R09: 0000000000000000 [ 476.446973][T11551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.446986][T11551] R13: 00007fae45d26038 R14: 00007fae45d25fa0 R15: 00007ffe8df32f08 [ 476.447021][T11551] [ 477.688699][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.599095][ T8356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.156183][T11584] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 480.697835][T11097] net_ratelimit: 1 callbacks suppressed [ 480.697858][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.882572][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.617269][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.791904][T11616] fuse: Unknown parameter '0x0000000000000003' [ 483.032998][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.257104][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.216915][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.422596][T11637] fuse: Unknown parameter 'dont_measure' [ 484.537412][T11639] netlink: 'syz.4.1853': attribute type 2 has an invalid length. [ 484.537441][T11639] tipc: Started in network mode [ 484.537457][T11639] tipc: Node identity 1340008, cluster identity 4711 [ 484.537470][T11639] tipc: Node number set to 20185096 [ 484.716211][T11646] netlink: 'syz.3.1855': attribute type 1 has an invalid length. [ 486.057081][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.057382][ T8356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.835276][T11666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1861'. [ 487.922168][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.826912][ T8356] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 488.936990][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.981378][ T8356] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 488.981408][ T8356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.981420][ T8356] usb 6-1: Product: syz [ 488.981429][ T8356] usb 6-1: Manufacturer: syz [ 488.981441][ T8356] usb 6-1: SerialNumber: syz [ 489.107372][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.212521][ T8356] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.301517][ T8356] usb 6-1: USB disconnect, device number 13 [ 489.560721][T11719] udevd[11719]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.977080][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.117379][T11735] netlink: 'syz.5.1885': attribute type 1 has an invalid length. [ 490.217402][T11735] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1885'. [ 490.245961][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.318235][T11746] netlink: 'syz.1.1886': attribute type 1 has an invalid length. [ 490.560090][T11746] 8021q: adding VLAN 0 to HW filter on device bond3 [ 490.949054][T11765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1895'. [ 490.949072][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1895'. [ 491.017036][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.426254][T11775] overlayfs: failed to resolve './cgroup': -2 [ 492.056938][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.137168][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.781537][T11808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1906'. [ 492.781671][T11808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1906'. [ 493.176345][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.224779][ T8356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.671344][T11812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1912'. [ 493.737914][T11812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.738362][T11812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.994783][T11819] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1913'. [ 493.994805][T11819] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1913'. [ 494.217030][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.365500][T11827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.371755][T11827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.438878][T11827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.956188][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1926'. [ 495.126804][ T37] kauditd_printk_skb: 130 callbacks suppressed [ 495.126827][ T37] audit: type=1326 audit(1775739012.986:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11852 comm="syz.1.1930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0xffff0000 [ 496.026210][T11883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1940'. [ 497.286794][T11119] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 498.277808][T11119] usb 6-1: config index 0 descriptor too short (expected 65230, got 72) [ 498.281859][T11119] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 498.281891][T11119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.281913][T11119] usb 6-1: Product: syz [ 498.281929][T11119] usb 6-1: Manufacturer: syz [ 498.281945][T11119] usb 6-1: SerialNumber: syz [ 498.367636][T11119] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 498.476812][T11116] net_ratelimit: 5 callbacks suppressed [ 498.476837][T11116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.612654][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.730779][T11114] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 498.732093][T11912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.732341][T11912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.732542][T11912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.732720][T11912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.732922][T11912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.736034][T11912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.736278][T11912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.736484][T11912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.316726][T11097] usb 6-1: USB disconnect, device number 14 [ 500.327058][T11114] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 500.327716][T11114] ath9k_htc: Failed to initialize the device [ 500.396535][T11097] usb 6-1: ath9k_htc: USB layer deinitialized [ 501.830673][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.830757][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.136412][T11971] overlayfs: failed to clone upperpath [ 503.819749][T12019] fuse: Bad value for 'user_id' [ 503.819772][T12019] fuse: Bad value for 'user_id' [ 503.977056][ T60] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 503.977402][ T60] Bluetooth: hci2: Injecting HCI hardware error event [ 503.981313][ T60] Bluetooth: hci2: hardware error 0x00 [ 504.047224][T11114] net_ratelimit: 603 callbacks suppressed [ 504.047249][T11114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.197397][ T8356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.949879][ T8356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.012671][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.063257][ T60] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 506.286761][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.047122][T12087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 507.047143][T12087] IPv6: NLM_F_CREATE should be set when creating new route [ 507.047182][T12087] IPv6: NLM_F_CREATE should be set when creating new route [ 507.086808][ T8356] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 507.246769][ T8356] usb 6-1: Using ep0 maxpacket: 16 [ 507.249522][ T8356] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 507.253005][ T8356] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 507.253037][ T8356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.253058][ T8356] usb 6-1: Product: syz [ 507.253074][ T8356] usb 6-1: Manufacturer: syz [ 507.253098][ T8356] usb 6-1: SerialNumber: syz [ 507.407197][T11114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.411477][ T8356] r8152-cfgselector 6-1: Unknown version 0x0000 [ 507.411507][ T8356] r8152-cfgselector 6-1: config 0 descriptor?? [ 508.075643][T12094] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.078418][T12094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.249663][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.282851][T12094] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 508.299403][T12094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.304543][T12094] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 508.305728][T12094] batman_adv: batadv0: Interface activated: macvtap1 [ 508.307861][T12094] bridge2: left allmulticast mode [ 508.313376][T12093] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 508.585181][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.586863][T11114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.612836][ T8356] r8152-cfgselector 6-1: Needed 1 retries to read version [ 508.612892][ T8356] r8152-cfgselector 6-1: Unknown version 0x2c50 [ 508.613447][ T8356] r8152-cfgselector 6-1: bad CDC descriptors [ 508.722860][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.869421][T12108] macvtap2: entered promiscuous mode [ 508.871644][T12108] vlan0: entered promiscuous mode [ 508.903636][T12108] team0: Device macvtap2 failed to register rx_handler [ 508.929097][T12108] vlan0: left promiscuous mode [ 509.280395][ T5985] net_ratelimit: 2 callbacks suppressed [ 509.280412][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.283295][ T8356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.284882][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.291696][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.329223][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.351054][ T8356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.424905][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.425125][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.425367][ T8356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.447647][ T8356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.898611][T11097] r8152-cfgselector 6-1: USB disconnect, device number 15 [ 510.948396][T12149] qnx4: unable to read the superblock [ 512.317294][T12181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2025'. [ 512.317323][T12181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2025'. [ 512.780139][ T5985] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 512.933965][ T5985] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 512.933999][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.934020][ T5985] usb 6-1: Product: ဃ [ 512.934035][ T5985] usb 6-1: Manufacturer: 尐偮委栳괐࠻䱒祲냱븒ႎ竵퍾暰娆蘒蜈౫梇돴푉侖鱙㲑ᝑ右铈ᷩ芺琊ᴃ᎒啯鰡ˠ쌜銄櫮홭ϰ馈莔⌺梨⚸팔稛춽₪仩ḑ斳¡香⎏솋풅쳆䡷뵃顪䚻萿㿧⃛ሒ㟶혠쑊魿ⷖ鎝탻灪Ꜧ຃謗➡顪삠䶇婡퍐魥龞퍞꿈Ⅷᅆ踖砽Ҽ枃괮뜪ꂀ流䬝鏄啦燓 [ 512.934068][ T5985] usb 6-1: SerialNumber: 辙婻㏄࿴ꗭ赺֩ױ䒾맼郃尠싿塍砝쬭퐑ﵧ仄ꨕ刓雺✝͟胼ݓꝢ㹯奪⺕矇셼ꥣ膧룅⣆넸彶᩶伃굺賍꽳ﰝ歐ꕞ忆橃ꊧ伐鴛ꈿ빘덤鴶抵ᬛᓡꊼퟃ둅뻐磜벅숛 [ 514.254942][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'. [ 514.899525][T11117] net_ratelimit: 17 callbacks suppressed [ 514.899548][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.919623][T12206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.920156][T12206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.289712][ T5985] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 515.290175][ T5985] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 515.309092][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2037'. [ 516.177308][ T5985] usb 6-1: USB disconnect, device number 16 [ 516.194655][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.197175][T11114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.214366][T12201] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 516.364757][T12073] udevd[12073]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.755983][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2040'. [ 516.795204][T12226] bond1: entered promiscuous mode [ 516.802389][T12226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.830343][T12226] bridge1: entered promiscuous mode [ 516.831869][T12226] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 517.374091][T12245] IPVS: length: 118 != 8 [ 517.486443][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.175599][T12256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.208112][T12255] netlink: 'syz.5.2050': attribute type 13 has an invalid length. [ 518.240807][T12258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.269212][T12255] gretap0: refused to change device tx_queue_len [ 518.269762][T12255] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 518.297881][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2051'. [ 518.430466][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2051'. [ 518.510632][T12263] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.2052'. [ 518.537370][T11114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.577788][T12274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2055'. [ 519.033357][T12287] IPVS: length: 118 != 8 [ 520.245502][ T8356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.574051][T11118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.592608][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.595845][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.640478][T11118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.643216][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.587890][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.589823][ T8356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.638363][T12073] udevd[12073]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 521.657166][T11118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.303778][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.486243][T11117] libceph: connect (1)[c::]:6789 error -101 [ 522.505976][T11117] libceph: mon0 (1)[c::]:6789 connect error [ 522.521188][T12314] ceph: No mds server is up or the cluster is laggy [ 522.539175][T11117] libceph: connect (1)[c::]:6789 error -101 [ 522.539399][T11117] libceph: mon0 (1)[c::]:6789 connect error [ 522.772370][T12325] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.2067'. [ 522.799480][T11097] libceph: connect (1)[c::]:6789 error -101 [ 522.799689][T11097] libceph: mon0 (1)[c::]:6789 connect error [ 522.916561][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2069'. [ 522.916804][T12331] bond0: Unable to set down delay as MII monitoring is disabled [ 524.656949][T12340] IPVS: length: 118 != 8 [ 525.870395][T11097] net_ratelimit: 4 callbacks suppressed [ 525.870417][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.236819][ T37] audit: type=1326 audit(1775739044.106:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12356 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 526.236881][ T37] audit: type=1326 audit(1775739044.106:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12356 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 526.236928][ T37] audit: type=1326 audit(1775739044.106:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12356 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 526.236974][ T37] audit: type=1326 audit(1775739044.106:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12356 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 526.237023][ T37] audit: type=1326 audit(1775739044.106:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12356 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 526.237068][ T37] audit: type=1326 audit(1775739044.106:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12356 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 526.237115][ T37] audit: type=1326 audit(1775739044.106:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12356 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 526.238356][ T37] audit: type=1326 audit(1775739044.116:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12356 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 526.238407][ T37] audit: type=1326 audit(1775739044.116:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12356 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 526.238454][ T37] audit: type=1326 audit(1775739044.116:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12356 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c11c819 code=0x7ffc0000 [ 526.242979][T12363] syz.1.2077 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 526.728205][T12368] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2080'. [ 526.939437][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.658385][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.981666][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.624800][T12393] IPVS: length: 118 != 8 [ 528.720752][T12395] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.2089'. [ 528.981116][T12402] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2092'. [ 529.031090][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.267470][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.813188][ T8356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.412441][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.648419][T12447] netlink: 'syz.1.2102': attribute type 11 has an invalid length. [ 532.083059][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.095659][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.378252][T12452] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.2103'. [ 532.447182][T12455] IPVS: length: 118 != 8 [ 532.717961][T11118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.725286][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.738884][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.775580][T12477] netlink: 'syz.4.2113': attribute type 63 has an invalid length. [ 534.777156][T11118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.804105][T12477] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2113'. [ 535.100205][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.403697][T12491] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.2117'. [ 536.230670][T11118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.377241][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.658667][T12526] IPVS: set_ctl: invalid protocol: 51 172.20.20.31:20002 [ 536.676070][T12525] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.2130'. [ 536.759071][T12526] netlink: 'syz.1.2128': attribute type 33 has an invalid length. [ 536.759098][T12526] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2128'. [ 536.930992][T12540] netlink: 'syz.1.2135': attribute type 2 has an invalid length. [ 536.931017][T12540] tipc: Started in network mode [ 536.931033][T12540] tipc: Node identity 1340008, cluster identity 4711 [ 536.931046][T12540] tipc: Node number set to 20185096 [ 537.257395][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.357354][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2138'. [ 537.689314][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.297383][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.937210][ T8356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.344358][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.494463][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2148'. [ 540.699551][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.724889][T12587] FAULT_INJECTION: forcing a failure. [ 540.724889][T12587] name failslab, interval 1, probability 0, space 0, times 0 [ 540.724931][T12587] CPU: 1 UID: 0 PID: 12587 Comm: syz.5.2151 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 540.724961][T12587] Tainted: [L]=SOFTLOCKUP [ 540.724969][T12587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 540.724982][T12587] Call Trace: [ 540.725000][T12587] [ 540.725009][T12587] dump_stack_lvl+0xe8/0x150 [ 540.725047][T12587] should_fail_ex+0x46b/0x600 [ 540.725084][T12587] should_failslab+0xa8/0x100 [ 540.725109][T12587] __kmalloc_noprof+0xdf/0x7b0 [ 540.725129][T12587] ? kfree+0x4d/0x6c0 [ 540.725157][T12587] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 540.725194][T12587] tomoyo_realpath_from_path+0xe3/0x5d0 [ 540.725233][T12587] ? tomoyo_path_number_perm+0x219/0x630 [ 540.725256][T12587] tomoyo_path_number_perm+0x246/0x630 [ 540.725283][T12587] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 540.725311][T12587] ? __lock_acquire+0x6b5/0x2cf0 [ 540.725374][T12587] ? __fget_files+0x2a/0x420 [ 540.725403][T12587] ? __fget_files+0x2a/0x420 [ 540.725426][T12587] ? __fget_files+0x3a6/0x420 [ 540.725451][T12587] ? __fget_files+0x2a/0x420 [ 540.725482][T12587] security_file_ioctl+0xc3/0x2a0 [ 540.725507][T12587] __se_sys_ioctl+0x47/0x170 [ 540.725531][T12587] do_syscall_64+0x14d/0xf80 [ 540.725553][T12587] ? trace_irq_disable+0x3b/0x150 [ 540.725576][T12587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.725596][T12587] ? clear_bhb_loop+0x40/0x90 [ 540.725622][T12587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.725641][T12587] RIP: 0033:0x7fae45aac819 [ 540.725661][T12587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.725680][T12587] RSP: 002b:00007fae43d06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.725704][T12587] RAX: ffffffffffffffda RBX: 00007fae45d25fa0 RCX: 00007fae45aac819 [ 540.725721][T12587] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000003 [ 540.725736][T12587] RBP: 00007fae43d06090 R08: 0000000000000000 R09: 0000000000000000 [ 540.725750][T12587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.725763][T12587] R13: 00007fae45d26038 R14: 00007fae45d25fa0 R15: 00007ffe8df32f08 [ 540.725800][T12587] [ 540.725808][T12587] ERROR: Out of memory at tomoyo_realpath_from_path. [ 540.726099][T12587] binder: 12586:12587 ioctl c0306201 200000000640 returned -22 [ 541.794712][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.003570][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.787055][ T8356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.982588][T12618] smc: removing ib device syz1 [ 544.863270][T12618] ------------[ cut here ]------------ [ 544.863282][T12618] !xa_empty(&pool->xa) [ 544.863288][T12618] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x4b/0x60, CPU#0: syz.3.2160/12618 [ 544.863320][T12618] Modules linked in: [ 544.863335][T12618] CPU: 0 UID: 0 PID: 12618 Comm: syz.3.2160 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 544.863353][T12618] Tainted: [L]=SOFTLOCKUP [ 544.863357][T12618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 544.863367][T12618] RIP: 0010:rxe_pool_cleanup+0x4b/0x60 [ 544.863386][T12618] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 7d c4 ed f9 48 83 3b 00 75 0c e8 42 a0 87 f9 5b c3 cc cc cc cc cc e8 36 a0 87 f9 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 544.863397][T12618] RSP: 0018:ffffc9000de0f060 EFLAGS: 00010246 [ 544.863413][T12618] RAX: ffffffff883ce1ba RBX: ffff88805f695698 RCX: 0000000000080000 [ 544.863426][T12618] RDX: ffffc9000f93a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 544.863435][T12618] RBP: ffff88805f695308 R08: 0000000000000000 R09: 0000000000000000 [ 544.863443][T12618] R10: dffffc0000000000 R11: ffffffff883b22c0 R12: ffff88805f694000 [ 544.863452][T12618] R13: dffffc0000000000 R14: ffffffff883b22c0 R15: dffffc0000000000 [ 544.863462][T12618] FS: 00007f9720cde6c0(0000) GS:ffff888126332000(0000) knlGS:0000000000000000 [ 544.863476][T12618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 544.863485][T12618] CR2: 0000001b2f922f20 CR3: 000000004c4b0000 CR4: 00000000003526f0 [ 544.863499][T12618] Call Trace: [ 544.863505][T12618] [ 544.863510][T12618] rxe_dealloc+0x25/0xc0 [ 544.863525][T12618] ib_dealloc_device+0x54/0x200 [ 544.863546][T12618] __ib_unregister_device+0x393/0x3f0 [ 544.863567][T12618] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 544.863590][T12618] ib_unregister_device_and_put+0xb8/0xf0 [ 544.863612][T12618] nldev_dellink+0x288/0x320 [ 544.863633][T12618] ? __pfx_nldev_dellink+0x10/0x10 [ 544.863697][T12618] ? rcu_is_watching+0x15/0xb0 [ 544.863712][T12618] ? cap_capable+0x123/0x490 [ 544.863726][T12618] ? safesetid_security_capable+0xa9/0x1a0 [ 544.863742][T12618] ? bpf_lsm_capable+0x9/0x20 [ 544.863756][T12618] ? security_capable+0x7e/0x2c0 [ 544.863773][T12618] ? __pfx_nldev_dellink+0x10/0x10 [ 544.863791][T12618] rdma_nl_rcv+0x6d7/0xa10 [ 544.863819][T12618] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 544.863837][T12618] ? __netlink_lookup+0x7e4/0x8b0 [ 544.863859][T12618] ? netlink_deliver_tap+0x2e/0x1b0 [ 544.863883][T12618] netlink_unicast+0x831/0x9f0 [ 544.863906][T12618] ? __pfx_netlink_unicast+0x10/0x10 [ 544.863924][T12618] ? netlink_sendmsg+0x650/0xb40 [ 544.863949][T12618] ? skb_put+0x11b/0x210 [ 544.863965][T12618] netlink_sendmsg+0x813/0xb40 [ 544.863990][T12618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.864013][T12618] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 544.864035][T12618] ____sys_sendmsg+0x94c/0x9c0 [ 544.864054][T12618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.864074][T12618] ? import_iovec+0x73/0xa0 [ 544.864089][T12618] ___sys_sendmsg+0x2a5/0x360 [ 544.864107][T12618] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.864126][T12618] ? futex_wait+0x29a/0x380 [ 544.864157][T12618] ? __fget_files+0x2a/0x420 [ 544.864174][T12618] ? __fget_files+0x3a6/0x420 [ 544.864199][T12618] __x64_sys_sendmsg+0x1c3/0x2a0 [ 544.864216][T12618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 544.864236][T12618] ? rcu_is_watching+0x15/0xb0 [ 544.864257][T12618] do_syscall_64+0x14d/0xf80 [ 544.864272][T12618] ? trace_irq_disable+0x3b/0x150 [ 544.864287][T12618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.864301][T12618] ? clear_bhb_loop+0x40/0x90 [ 544.864317][T12618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.864329][T12618] RIP: 0033:0x7f9722a8c819 [ 544.864343][T12618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.864353][T12618] RSP: 002b:00007f9720cde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.864366][T12618] RAX: ffffffffffffffda RBX: 00007f9722d05fa0 RCX: 00007f9722a8c819 [ 544.864375][T12618] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 544.864386][T12618] RBP: 00007f9722b22c91 R08: 0000000000000000 R09: 0000000000000000 [ 544.864396][T12618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.864403][T12618] R13: 00007f9722d06038 R14: 00007f9722d05fa0 R15: 00007ffe9d531ec8 [ 544.864424][T12618] [ 544.864432][T12618] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 544.864443][T12618] CPU: 0 UID: 0 PID: 12618 Comm: syz.3.2160 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 544.864460][T12618] Tainted: [L]=SOFTLOCKUP [ 544.864464][T12618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 544.864472][T12618] Call Trace: [ 544.864477][T12618] [ 544.864481][T12618] vpanic+0x56c/0xa60 [ 544.864501][T12618] ? __pfx__printk+0x10/0x10 [ 544.864515][T12618] ? __pfx_vpanic+0x10/0x10 [ 544.864532][T12618] ? is_bpf_text_address+0x292/0x2b0 [ 544.864551][T12618] ? is_bpf_text_address+0x26/0x2b0 [ 544.864573][T12618] panic+0xc5/0xd0 [ 544.864591][T12618] ? __pfx_panic+0x10/0x10 [ 544.864619][T12618] __warn+0x315/0x4f0 [ 544.864637][T12618] ? rxe_pool_cleanup+0x4b/0x60 [ 544.864654][T12618] ? rxe_pool_cleanup+0x4b/0x60 [ 544.864670][T12618] __report_bug+0x29a/0x540 [ 544.864684][T12618] ? lockdep_hardirqs_on+0x7a/0x110 [ 544.864701][T12618] ? rxe_pool_cleanup+0x4b/0x60 [ 544.864717][T12618] ? __pfx___report_bug+0x10/0x10 [ 544.864735][T12618] ? __flush_workqueue+0x12d3/0x14f0 [ 544.864759][T12618] ? rxe_pool_cleanup+0x4b/0x60 [ 544.864775][T12618] report_bug+0x16a/0x220 [ 544.864788][T12618] ? rxe_pool_cleanup+0x4b/0x60 [ 544.864803][T12618] ? rxe_pool_cleanup+0x4d/0x60 [ 544.864817][T12618] handle_bug+0x9c/0x200 [ 544.864834][T12618] exc_invalid_op+0x1a/0x50 [ 544.864850][T12618] asm_exc_invalid_op+0x1a/0x20 [ 544.864862][T12618] RIP: 0010:rxe_pool_cleanup+0x4b/0x60 [ 544.864878][T12618] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 7d c4 ed f9 48 83 3b 00 75 0c e8 42 a0 87 f9 5b c3 cc cc cc cc cc e8 36 a0 87 f9 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 544.864889][T12618] RSP: 0018:ffffc9000de0f060 EFLAGS: 00010246 [ 544.864899][T12618] RAX: ffffffff883ce1ba RBX: ffff88805f695698 RCX: 0000000000080000 [ 544.864908][T12618] RDX: ffffc9000f93a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 544.864917][T12618] RBP: ffff88805f695308 R08: 0000000000000000 R09: 0000000000000000 [ 544.864925][T12618] R10: dffffc0000000000 R11: ffffffff883b22c0 R12: ffff88805f694000 [ 544.864940][T12618] R13: dffffc0000000000 R14: ffffffff883b22c0 R15: dffffc0000000000 [ 544.864950][T12618] ? __pfx_rxe_dealloc+0x10/0x10 [ 544.864966][T12618] ? __pfx_rxe_dealloc+0x10/0x10 [ 544.864980][T12618] ? rxe_pool_cleanup+0x4a/0x60 [ 544.865000][T12618] rxe_dealloc+0x25/0xc0 [ 544.865014][T12618] ib_dealloc_device+0x54/0x200 [ 544.865033][T12618] __ib_unregister_device+0x393/0x3f0 [ 544.865054][T12618] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 544.865077][T12618] ib_unregister_device_and_put+0xb8/0xf0 [ 544.865098][T12618] nldev_dellink+0x288/0x320 [ 544.865117][T12618] ? __pfx_nldev_dellink+0x10/0x10 [ 544.865178][T12618] ? rcu_is_watching+0x15/0xb0 [ 544.865193][T12618] ? cap_capable+0x123/0x490 [ 544.865206][T12618] ? safesetid_security_capable+0xa9/0x1a0 [ 544.865221][T12618] ? bpf_lsm_capable+0x9/0x20 [ 544.865235][T12618] ? security_capable+0x7e/0x2c0 [ 544.865252][T12618] ? __pfx_nldev_dellink+0x10/0x10 [ 544.865270][T12618] rdma_nl_rcv+0x6d7/0xa10 [ 544.865295][T12618] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 544.865313][T12618] ? __netlink_lookup+0x7e4/0x8b0 [ 544.865335][T12618] ? netlink_deliver_tap+0x2e/0x1b0 [ 544.865358][T12618] netlink_unicast+0x831/0x9f0 [ 544.865380][T12618] ? __pfx_netlink_unicast+0x10/0x10 [ 544.865399][T12618] ? netlink_sendmsg+0x650/0xb40 [ 544.865417][T12618] ? skb_put+0x11b/0x210 [ 544.865432][T12618] netlink_sendmsg+0x813/0xb40 [ 544.865456][T12618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.865480][T12618] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 544.865501][T12618] ____sys_sendmsg+0x94c/0x9c0 [ 544.865519][T12618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.865539][T12618] ? import_iovec+0x73/0xa0 [ 544.865553][T12618] ___sys_sendmsg+0x2a5/0x360 [ 544.865572][T12618] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.865594][T12618] ? futex_wait+0x29a/0x380 [ 544.865624][T12618] ? __fget_files+0x2a/0x420 [ 544.865640][T12618] ? __fget_files+0x3a6/0x420 [ 544.865665][T12618] __x64_sys_sendmsg+0x1c3/0x2a0 [ 544.865681][T12618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 544.865701][T12618] ? rcu_is_watching+0x15/0xb0 [ 544.865725][T12618] do_syscall_64+0x14d/0xf80 [ 544.865739][T12618] ? trace_irq_disable+0x3b/0x150 [ 544.865753][T12618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.865766][T12618] ? clear_bhb_loop+0x40/0x90 [ 544.865784][T12618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.865797][T12618] RIP: 0033:0x7f9722a8c819 [ 544.865808][T12618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.865818][T12618] RSP: 002b:00007f9720cde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.865830][T12618] RAX: ffffffffffffffda RBX: 00007f9722d05fa0 RCX: 00007f9722a8c819 [ 544.865839][T12618] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 544.865847][T12618] RBP: 00007f9722b22c91 R08: 0000000000000000 R09: 0000000000000000 [ 544.865855][T12618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.865862][T12618] R13: 00007f9722d06038 R14: 00007f9722d05fa0 R15: 00007ffe9d531ec8 [ 544.865881][T12618] [ 544.866485][T12618] Kernel Offset: disabled