last executing test programs: 37m31.467284619s ago: executing program 4 (id=82): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e24, 0x8, @local, 0x8}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0xfe, 0x0, 0x0, 0x0, @in6=@private2, @in6=@private1}}, @sadb_lifetime={0x4, 0x3, 0x0, 0xe32}]}, 0xc0}}, 0x0) 37m31.085515873s ago: executing program 4 (id=84): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x1, 0x401, 0x7fffffff, 0x0, [{0x7, 0x10, 0x1, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x9, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x9}, {0x6, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x89, '\x00', 0x83}, {0x6, 0x8, 0xa0, '\x00', 0x3}, {0x1, 0x1, 0x1, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x4}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x3}, {0x8, 0x3, 0xf6, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x40, 0xfa, '\x00', 0x5}, {0x1, 0x4, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x89, 0x4, '\x00', 0xff}]}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x12, 0x4, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 37m30.570220482s ago: executing program 4 (id=86): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000300)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x1000, 0xc000000, 0xfffffffb, 0xaaf, 0x0, [{0x4, 0x6, 0x2, '\x00', 0xfe}, {0x4, 0xe7, 0x9, '\x00', 0x7}, {0xf7, 0x8, 0x0, '\x00', 0x1}, {0x1, 0x5, 0x6, '\x00', 0x1}, {0xd2, 0x2, 0x5, '\x00', 0x6}, {0xe, 0x50, 0x0, '\x00', 0x9}, {0x7, 0x6, 0x7c, '\x00', 0x3}, {0x81, 0x8, 0x8, '\x00', 0x2}, {0xb, 0x80, 0xa, '\x00', 0x7}, {0x2, 0x9, 0x8, '\x00', 0x7}, {0x10, 0x80, 0x0, '\x00', 0x3}, {0x6, 0x40, 0x3, '\x00', 0x5}, {0x81, 0x81, 0x6, '\x00', 0x6}, {0x3, 0x2, 0x6, '\x00', 0x8}, {0x4, 0x2, 0x81}, {0x5, 0x0, 0x9, '\x00', 0x4}, {0x2, 0x9, 0xc1, '\x00', 0x3}, {0x5, 0x7, 0x5, '\x00', 0x9}, {0x23, 0x6, 0xb6, '\x00', 0x2}, {0x88, 0x3, 0x3f, '\x00', 0x4}, {0x8, 0xc, 0x3, '\x00', 0x3}, {0x0, 0x8, 0x6, '\x00', 0x5}, {0x6, 0x0, 0x8, '\x00', 0x10}, {0x40, 0x5, 0x81, '\x00', 0x5}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x8, 0x0, 0xbd9], 0x1, 0x1c4292}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 37m29.677236492s ago: executing program 4 (id=93): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0xfff3}}}, 0x24}}, 0xc000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 37m29.12867871s ago: executing program 4 (id=95): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9b) 37m29.010304879s ago: executing program 4 (id=96): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000300), 0x105, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r0}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000"], 0x24, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x301, 0x5, 0xa, 0x110c}}) 37m13.709246201s ago: executing program 32 (id=96): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000300), 0x105, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r0}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000"], 0x24, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x301, 0x5, 0xa, 0x110c}}) 6m50.942845582s ago: executing program 1 (id=8812): r0 = socket(0x10, 0x80003, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000002140)='./file0\x00', &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r5, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x20, 0x7b, 0x20000, {r5}}, 0x20) read$FUSE(r5, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2075) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0xd18e, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004180)={0xb0, 0x0, 0xfffffffffffffff7, [{{0x1, 0x1, 0x400, 0x86, 0x9, 0x2, {0x3, 0x0, 0x7f, 0xa, 0x8, 0xa, 0xfffff1be, 0x2, 0x4, 0xe000, 0x6679aa80, r7, r8, 0x8, 0x8}}, {0x0, 0x1, 0x8, 0x3, 'rootmode'}}]}, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000040, &(0x7f0000002200)={'trans=virtio,', {[{@loose}, {@access_uid={'access', 0x3d, r2}}, {@dfltuid={'dfltuid', 0x3d, r3}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_measure}, {@appraise}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@euid_eq={'euid', 0x3d, r7}}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 6m49.84570383s ago: executing program 1 (id=8815): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0xffff}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r2, 0x2}}, 0x18) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) listen(r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x11, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x58}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 6m49.499252708s ago: executing program 1 (id=8817): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) (fail_nth: 12) 6m49.481158198s ago: executing program 1 (id=8818): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xe}}]}, 0x80}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 6m47.88343879s ago: executing program 1 (id=8821): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd) unshare(0x4000400) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000000380)) 6m46.638959676s ago: executing program 1 (id=8825): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x8, 0x2, 0x2, 0x2, 0x7, 0x1, 0xfffffffb, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x9, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0x0, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x20000007, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0xfffffffc, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a"], 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6m46.153190556s ago: executing program 33 (id=8825): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x8, 0x2, 0x2, 0x2, 0x7, 0x1, 0xfffffffb, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x9, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0x0, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x20000007, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0xfffffffc, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a"], 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m32.03565191s ago: executing program 2 (id=9175): syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 4m30.562972077s ago: executing program 2 (id=9178): socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x960, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/time_for_children\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x808840, 0x11e) socket$inet6_sctp(0xa, 0x1, 0x84) userfaultfd(0x80001) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xfe, 0x2dcb6, 0xfffffffffffffffe}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 4m30.077385786s ago: executing program 2 (id=9183): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000000440)=""/159, 0x9f, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) 4m29.915065866s ago: executing program 2 (id=9185): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x7) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) 4m27.56745376s ago: executing program 2 (id=9188): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r5) socket$kcm(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000206010100000000000000000a000001f0ff01"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8800) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="000100"}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000a80)={0x2020}, 0x2020) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r1, 0x0, 0x1, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r9, &(0x7f0000000140)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) listen(r9, 0x5010040) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) write$binfmt_script(r8, &(0x7f0000000240)={'#! ', './file0'}, 0xb) 4m23.143191535s ago: executing program 2 (id=9197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20048084) setresuid(0x0, 0xee00, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0xc1086201, &(0x7f0000002780)={0x2e, 0x1, 0x40, 0x3, 0x300}) 4m22.748960604s ago: executing program 34 (id=9197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20048084) setresuid(0x0, 0xee00, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0xc1086201, &(0x7f0000002780)={0x2e, 0x1, 0x40, 0x3, 0x300}) 24.405576143s ago: executing program 3 (id=10205): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f00)=""/50, 0x32}, {&(0x7f0000001f80)=""/132, 0x84}], 0x2}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 23.295047808s ago: executing program 3 (id=10214): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={r1, 0x9}, &(0x7f0000000300)=0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) 22.457739499s ago: executing program 3 (id=10226): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 20.74299303s ago: executing program 6 (id=10243): syz_extract_tcp_res(&(0x7f0000000500), 0x6, 0xfffe) syz_extract_tcp_res(&(0x7f0000000040), 0x0, 0x9) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x5) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="3bfd5e52f3514acca3e4c514bcf8df8ff2bd4ee95793d790ac6718c2494c23", 0x1f}], 0x1}, 0xc880) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 20.464477623s ago: executing program 6 (id=10246): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 20.379656804s ago: executing program 0 (id=10248): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @private0, 0x10}, 0x1c, 0x0}, 0x440e0) 20.224554822s ago: executing program 5 (id=10249): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @private0, 0x672}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000400)={r1}, 0x8) 20.151765144s ago: executing program 0 (id=10251): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002480)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x400c2, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x7]}, {0x6, 0x8, 0x7, 0x7c8}}, 0x400, 0x0, &(0x7f00000000c0)=0x7f}, 0x5, &(0x7f00000023c0)=[{0x3, 0x2, &(0x7f0000000100)='+-+--\x00', &(0x7f0000000140)="0090a52d73635ba68cde0405f3cd48d2fc6abfb65551fb71531ebe", 0x1b, 0x20}, {0x1, 0xe20, 0x0, &(0x7f0000000240)="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", 0xf3f, 0x28}, {0x3, 0x8a9a, &(0x7f00000025c0)='+\x99/\'\x00U\xc3\xc9\xb7\x8a{4\xe1\xfa\x19.\xca\xd9:@\xf6bE\x92\xb8\xbd\xc0@L}\xb8\xc407\xee{0\t\x93\x92g\x80\xd9\xe0\x19?\xa0[\x87\x16\x1c%\xd2\x10\xc4\x1fC\"\x84\xd6\xc8\xf6v 2\a\xdd\xd1sG\x91!\x87\xe2? \xf9\xfd\xc9\xbem\x01\xe7b\xaaT\x18\n\xbbe\x1e\xec\xa1\r\xdb\xc0\x99\x82~\xefH7', 0x0, 0x0, 0x20}, {0x1, 0x0, &(0x7f0000002280)='./!\x00', &(0x7f00000022c0)="fedcfeca050f41648335a6866ea5b17e2315e45a0f14a7342cda65de25566e8850", 0x21, 0x40}, {0x2, 0x1, &(0x7f0000002300)='(\xe3\x00', &(0x7f0000002340), 0x0, 0x20}]}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40811) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) listen(r3, 0x5) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) 19.942414697s ago: executing program 5 (id=10253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 19.930881508s ago: executing program 0 (id=10254): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r3, @ANYBLOB="48002f8008000100070000000c0002000200aaaaaaaaaaaa100003800c000380060001000000000020000380080001000300000005"], 0x64}, 0x1, 0x0, 0x0, 0x811}, 0x0) 19.884975877s ago: executing program 6 (id=10255): write(0xffffffffffffffff, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(0xffffffffffffffff) 19.736862325s ago: executing program 5 (id=10257): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x1f, &(0x7f00000002c0), &(0x7f0000001000)=""/31, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.643423287s ago: executing program 6 (id=10258): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x11, 0xffffffffffffffff, 0xfffff000) 19.526501438s ago: executing program 5 (id=10260): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x80, 0x31, 0x3f, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x6c, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}, @m_mpls={0x38, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}]}, {0x4}, {0xffffff22, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 19.502965179s ago: executing program 3 (id=10261): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @private0, 0x10}, 0x1c, 0x0}, 0x440e0) 19.44743296s ago: executing program 0 (id=10262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.33253998s ago: executing program 3 (id=10264): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x18, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@map_fd={0x18, 0xa, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xacb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0xb, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 19.279428714s ago: executing program 5 (id=10265): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x32080, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40400208}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, r1, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x7f}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x7}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 19.278981562s ago: executing program 0 (id=10266): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x20004000) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8", 0x1}], 0x1}], 0x1, 0x40800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, 0x0, &(0x7f0000000100)) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) 19.159135386s ago: executing program 3 (id=10268): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) 19.054769341s ago: executing program 0 (id=10269): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x104}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r3, &(0x7f0000002380), 0x12) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@local, @empty, 0x0}, &(0x7f0000000340)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x2, 0x6, {{0x27, 0x4, 0x3, 0x2, 0x9c, 0x68, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3e, 0x3, [{0x3, 0xc, "50d3ff9b9aed171f592d"}, {0x0, 0xe, "7c78fb93cdf986f31b9407e6"}, {0x5, 0x2}, {0x5, 0x10, "1d8713c1c900f9bf50e92701a041"}, {0x5, 0xc, "9bf5435d669af8cac120"}]}, @timestamp_prespec={0x44, 0x1c, 0xf6, 0x3, 0x4, [{@loopback, 0x1}, {@loopback, 0x80000000}, {@empty, 0x898}]}, @rr={0x7, 0x23, 0x78, [@multicast1, @loopback, @multicast2, @broadcast, @local, @empty, @multicast1, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x7, 0x4, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0x12, 0x1, 0x2, [{@empty, 0x4}, {@multicast2, 0xe}, {@private=0xa010102, 0xfffffffd}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0xfd, 0x9, 0x41, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7, 0x7}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f0000000e00)={0x528, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20000000}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r13}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40000}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x101, 0xdf, 0x3a, 0xc2}, {0x860, 0x3, 0x0, 0x2}, {0x1, 0x3, 0x8, 0x8001}, {0x800, 0xb, 0xd, 0x9}, {0x3, 0xff, 0x4, 0x2}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x528}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r18 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r18, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x4001, 0x3, 0x468, 0x3d0, 0xb, 0x148, 0x0, 0x148, 0x3d0, 0x230, 0x242, 0x3d0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0xff, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {0xff}, 0x73, 0x2, 0xa}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x0, 0x3, 0x0, 0xe}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x7fc, 0x6}, 0x0, 0x1}}}, {{@uncond, 0xec010000, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x6, 0x4, 0x5, 0x8, 0x4], 0x0, 0x5}, {0x0, [0x1, 0x0, 0x2, 0x0, 0x3, 0x2], 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 18.799399163s ago: executing program 5 (id=10271): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 18.702358249s ago: executing program 7 (id=10272): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x9, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="0800101d89b5", 0x6}], 0x1}, 0x2400c880) 18.302340014s ago: executing program 7 (id=10273): r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 17.848015336s ago: executing program 7 (id=10274): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000100), 0x1}}], 0x4000253, 0x44) 17.678943576s ago: executing program 6 (id=10275): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @private0, 0x10}, 0x1c, 0x0, 0x0, &(0x7f0000000140)}, 0x440e0) 17.594878918s ago: executing program 7 (id=10276): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000400)={r2, @in6={{0xa, 0x3, 0x4, @mcast1, 0x4}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) 17.510384119s ago: executing program 6 (id=10277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000640)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf254f00001408000300", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4008840}, 0x800) 17.351049683s ago: executing program 7 (id=10278): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @private0, 0x672}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={r2}, 0x8) 17.260796569s ago: executing program 7 (id=10279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x12611a2a5a8b0c55}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 2.612487601s ago: executing program 35 (id=10269): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x104}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r3, &(0x7f0000002380), 0x12) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@local, @empty, 0x0}, &(0x7f0000000340)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x2, 0x6, {{0x27, 0x4, 0x3, 0x2, 0x9c, 0x68, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3e, 0x3, [{0x3, 0xc, "50d3ff9b9aed171f592d"}, {0x0, 0xe, "7c78fb93cdf986f31b9407e6"}, {0x5, 0x2}, {0x5, 0x10, "1d8713c1c900f9bf50e92701a041"}, {0x5, 0xc, "9bf5435d669af8cac120"}]}, @timestamp_prespec={0x44, 0x1c, 0xf6, 0x3, 0x4, [{@loopback, 0x1}, {@loopback, 0x80000000}, {@empty, 0x898}]}, @rr={0x7, 0x23, 0x78, [@multicast1, @loopback, @multicast2, @broadcast, @local, @empty, @multicast1, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x7, 0x4, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0x12, 0x1, 0x2, [{@empty, 0x4}, {@multicast2, 0xe}, {@private=0xa010102, 0xfffffffd}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0xfd, 0x9, 0x41, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7, 0x7}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f0000000e00)={0x528, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20000000}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r13}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40000}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x101, 0xdf, 0x3a, 0xc2}, {0x860, 0x3, 0x0, 0x2}, {0x1, 0x3, 0x8, 0x8001}, {0x800, 0xb, 0xd, 0x9}, {0x3, 0xff, 0x4, 0x2}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x528}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r18 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r18, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x4001, 0x3, 0x468, 0x3d0, 0xb, 0x148, 0x0, 0x148, 0x3d0, 0x230, 0x242, 0x3d0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0xff, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {0xff}, 0x73, 0x2, 0xa}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x0, 0x3, 0x0, 0xe}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x7fc, 0x6}, 0x0, 0x1}}}, {{@uncond, 0xec010000, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x6, 0x4, 0x5, 0x8, 0x4], 0x0, 0x5}, {0x0, [0x1, 0x0, 0x2, 0x0, 0x3, 0x2], 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 2.508187905s ago: executing program 36 (id=10268): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) 2.312188709s ago: executing program 37 (id=10271): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 123.809041ms ago: executing program 38 (id=10277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000640)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf254f00001408000300", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4008840}, 0x800) 0s ago: executing program 39 (id=10279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x12611a2a5a8b0c55}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) kernel console output (not intermixed with test programs): 5][T21855] gp8psk: usb in 137 operation failed. [ 2204.586337][T21855] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2204.586375][T21855] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2204.616663][T21855] usb 1-1: USB disconnect, device number 111 [ 2205.879744][T21855] usb 7-1: USB disconnect, device number 14 [ 2205.898833][T21855] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 2205.995906][ T1831] netlink: 'syz.7.9474': attribute type 8 has an invalid length. [ 2205.999389][ T36] audit: type=1400 audit(1777190525.933:776): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=1832 comm="syz.5.9475" daddr=::ffff:172.20.20.170 [ 2207.358530][ T1839] openvswitch: netlink: Key type 30 is not supported [ 2207.400744][ T1839] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 2208.551991][ T5729] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2208.711499][ T5729] usb 1-1: Using ep0 maxpacket: 16 [ 2208.713867][ T5729] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2208.713898][ T5729] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2208.713922][ T5729] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2208.713954][ T5729] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2208.713978][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2208.733665][ T5729] usb 1-1: config 0 descriptor?? [ 2209.172051][ T5729] hid (null): invalid report_size 24940 [ 2209.188356][ T5729] hid (null): unknown global tag 0xc [ 2210.289210][ T5729] hid (null): unknown global tag 0xc [ 2210.550370][ T5729] usb 1-1: USB disconnect, device number 112 [ 2211.105855][T15909] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 2211.267811][T15909] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2211.267913][T15909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.299827][T15909] usb 1-1: config 0 descriptor?? [ 2211.316564][T15909] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2211.517206][T15909] gp8psk: usb in 128 operation failed. [ 2212.053540][T15909] gp8psk: usb in 137 operation failed. [ 2212.053558][T15909] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2212.053585][T15909] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2212.085053][T15909] usb 1-1: USB disconnect, device number 113 [ 2212.163344][ T5729] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2212.270785][ T1899] binder_alloc: 1898: binder_alloc_buf size -208 failed, no address space [ 2212.271052][ T1899] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2212.284380][ T1899] ieee802154 phy1 wpan1: encryption failed: -22 [ 2212.336617][ T1899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9493'. [ 2212.359576][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2212.359609][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2212.359633][ T5729] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2212.359675][ T5729] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2212.359698][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.392282][ T5729] usb 4-1: config 0 descriptor?? [ 2212.414087][ T5729] hub 4-1:0.0: USB hub found [ 2212.660033][ T5729] hub 4-1:0.0: 9 ports detected [ 2212.660578][ T5729] hub 4-1:0.0: insufficient power available to use all downstream ports [ 2212.948394][ T1902] netlink: 'syz.6.9494': attribute type 4 has an invalid length. [ 2213.012409][ T1902] usb usb8: check_ctrlrecip: process 1902 (syz.6.9494) requesting ep 01 but needs 81 [ 2213.012440][ T1902] usb usb8: usbfs: process 1902 (syz.6.9494) did not claim interface 0 before use [ 2213.037775][ T1899] macvlan2: entered allmulticast mode [ 2213.037797][ T1899] dummy0: entered allmulticast mode [ 2213.308879][ T1899] dummy0: entered promiscuous mode [ 2213.867518][ T5729] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 2213.867545][ T5729] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 2214.236269][ T1924] netlink: 'syz.0.9500': attribute type 8 has an invalid length. [ 2214.268950][ T5729] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2214.431204][ T5729] usb 6-1: Using ep0 maxpacket: 16 [ 2214.433744][ T5729] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2214.433776][ T5729] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2214.433799][ T5729] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2214.433832][ T5729] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2214.433856][ T5729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2214.458360][ T5729] usb 6-1: config 0 descriptor?? [ 2214.879122][T26203] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2215.680584][T26203] usb 7-1: Using ep0 maxpacket: 32 [ 2215.684441][T26203] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 2215.684467][T26203] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2215.684486][T26203] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2215.684504][T26203] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2215.684525][T26203] usb 7-1: config 1 has no interface number 0 [ 2215.684560][T26203] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 2215.684599][T26203] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2215.684621][T26203] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2215.798753][T26203] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 2215.916056][ T5729] hid (null): invalid report_size 24940 [ 2215.936634][ T5729] hid (null): unknown global tag 0xc [ 2215.945248][ T5729] hid (null): unknown global tag 0xc [ 2216.005478][T26203] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values [ 2216.005892][T26203] snd_usb_pod 7-1:1.1: invalid control EP [ 2216.005906][T26203] snd_usb_pod 7-1:1.1: cannot start listening: -22 [ 2216.006197][T26203] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 2216.006736][T26203] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2216.156092][T31623] usb 6-1: USB disconnect, device number 26 [ 2216.231090][ T5729] usb 7-1: USB disconnect, device number 15 [ 2216.416982][ T693] usb 4-1: USB disconnect, device number 70 [ 2216.528268][ T1936] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 2216.528295][ T1936] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2216.530769][ T1936] vhci_hcd vhci_hcd.0: Device attached [ 2216.590472][ T1940] kvm: kvm [1937]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x170700000021 [ 2216.591100][ T1940] kvm: kvm [1937]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x9b8600000002 [ 2216.593134][ T1940] kvm: kvm [1937]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffffdf71000005e7 [ 2216.593250][ T1940] kvm: kvm [1937]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa43f00000a50 [ 2216.593546][ T1940] kvm: kvm [1937]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x1f8b000031c2 [ 2216.779476][ T693] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 2216.823771][ T5729] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2217.057482][ T1957] netlink: 'syz.5.9508': attribute type 10 has an invalid length. [ 2217.231628][ T5729] usb 1-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 2217.231660][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2217.231681][ T5729] usb 1-1: Product: à°„ [ 2217.231695][ T5729] usb 1-1: Manufacturer: 㱇 [ 2217.231710][ T5729] usb 1-1: SerialNumber: syz [ 2217.838432][ T1957] veth0_vlan: left promiscuous mode [ 2217.845277][ T1957] veth0_vlan: entered promiscuous mode [ 2218.073372][ T1943] vhci_hcd: connection reset by peer [ 2218.073787][ T499] vhci_hcd vhci_hcd.0: stop threads [ 2218.073807][ T499] vhci_hcd vhci_hcd.0: release socket [ 2218.073870][ T499] vhci_hcd vhci_hcd.0: disconnect device [ 2218.099926][ T1957] team0: Device veth0_vlan failed to register rx_handler [ 2218.109256][ T5729] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 2218.210970][T24379] tipc: Subscription rejected, illegal request [ 2218.366177][ T5729] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2218.412953][ T5729] usb 1-1: USB disconnect, device number 114 [ 2218.692714][ T1977] netlink: 'syz.6.9516': attribute type 21 has an invalid length. [ 2218.692736][ T1977] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9516'. [ 2218.692814][ T1977] netlink: 'syz.6.9516': attribute type 4 has an invalid length. [ 2218.692828][ T1977] netlink: 'syz.6.9516': attribute type 5 has an invalid length. [ 2218.692841][ T1977] netlink: 3 bytes leftover after parsing attributes in process `syz.6.9516'. [ 2219.121095][ T1982] kvm: kvm [1981]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x170700000021 [ 2219.208529][ T1982] kvm: kvm [1981]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x9b8600000002 [ 2219.210600][ T1982] kvm: kvm [1981]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffffdf71000005e7 [ 2219.210717][ T1982] kvm: kvm [1981]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa43f00000a50 [ 2219.211013][ T1982] kvm: kvm [1981]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x1f8b000031c2 [ 2219.333539][T31623] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2219.344187][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 2219.493634][T31623] usb 4-1: Using ep0 maxpacket: 16 [ 2219.495976][T31623] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2219.496007][T31623] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2219.496030][T31623] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2219.496063][T31623] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2219.496086][T31623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2219.556841][T31623] usb 4-1: config 0 descriptor?? [ 2219.621922][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 2219.636480][ T9] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 2219.636509][ T9] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2219.636530][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2219.636551][ T9] usb 8-1: config 1 has no interface number 0 [ 2219.636598][ T9] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2219.636621][ T9] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2219.636663][ T9] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2219.636686][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2219.700331][ T9] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 2220.435700][ T9] snd_usb_pod 8-1:1.1: invalid control EP [ 2220.435722][ T9] snd_usb_pod 8-1:1.1: cannot start listening: -22 [ 2220.436006][ T9] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 2220.436538][ T9] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2220.628972][ T5608] usb 8-1: USB disconnect, device number 4 [ 2220.819101][ T2004] erspan0: entered promiscuous mode [ 2220.821200][ T2004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9525'. [ 2220.821528][ T2004] erspan0: left promiscuous mode [ 2220.852255][ T2004] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9525'. [ 2220.852275][ T2004] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9525'. [ 2220.852588][ T2004] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9525'. [ 2220.929194][ T2007] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9525'. [ 2220.962340][T31623] usbhid 4-1:0.0: can't add hid device: -71 [ 2220.962459][T31623] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2220.988043][T31623] usb 4-1: USB disconnect, device number 71 [ 2222.215542][ T693] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 2222.423105][ T2025] FAULT_INJECTION: forcing a failure. [ 2222.423105][ T2025] name failslab, interval 1, probability 0, space 0, times 0 [ 2222.423148][ T2025] CPU: 1 UID: 0 PID: 2025 Comm: syz.5.9529 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2222.423178][ T2025] Tainted: [L]=SOFTLOCKUP [ 2222.423186][ T2025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2222.423197][ T2025] Call Trace: [ 2222.423204][ T2025] [ 2222.423212][ T2025] dump_stack_lvl+0xe8/0x150 [ 2222.423238][ T2025] should_fail_ex+0x46b/0x600 [ 2222.423272][ T2025] should_failslab+0xa8/0x100 [ 2222.423296][ T2025] kmem_cache_alloc_noprof+0x87/0x680 [ 2222.423317][ T2025] ? anon_vma_clone+0x3e5/0x9f0 [ 2222.423343][ T2025] anon_vma_clone+0x3e5/0x9f0 [ 2222.423374][ T2025] copy_vma+0x6ae/0x9e0 [ 2222.423407][ T2025] ? __pfx_copy_vma+0x10/0x10 [ 2222.423442][ T2025] ? __vma_start_exclude_readers+0x667/0x940 [ 2222.423485][ T2025] ? move_vma+0x6e6/0x1900 [ 2222.423518][ T2025] move_vma+0x89a/0x1900 [ 2222.423561][ T2025] ? arch_get_unmapped_area_topdown+0x264/0xb70 [ 2222.423585][ T2025] ? __pfx_move_vma+0x10/0x10 [ 2222.423616][ T2025] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 2222.423638][ T2025] ? mtree_load+0x12a/0x780 [ 2222.423674][ T2025] ? cap_mmap_addr+0xaf/0x100 [ 2222.423699][ T2025] ? bpf_lsm_mmap_addr+0x9/0x50 [ 2222.423730][ T2025] mremap_to+0x7b7/0x880 [ 2222.423761][ T2025] ? mtree_range_walk+0x6fc/0x8b0 [ 2222.423781][ T2025] ? __pfx_mremap_to+0x10/0x10 [ 2222.423815][ T2025] ? check_prep_vma+0x726/0xb00 [ 2222.423851][ T2025] __se_sys_mremap+0xbaa/0x11d0 [ 2222.423900][ T2025] ? __pfx___se_sys_mremap+0x10/0x10 [ 2222.423936][ T2025] ? ksys_write+0x248/0x270 [ 2222.423959][ T2025] ? __pfx_ksys_write+0x10/0x10 [ 2222.423986][ T2025] ? __x64_sys_mremap+0x20/0xc0 [ 2222.424010][ T2025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2222.424030][ T2025] do_syscall_64+0x15f/0xf80 [ 2222.424046][ T2025] ? trace_irq_disable+0x3b/0x140 [ 2222.424067][ T2025] ? clear_bhb_loop+0x40/0x90 [ 2222.424090][ T2025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2222.424108][ T2025] RIP: 0033:0x7f9b4e70cdd9 [ 2222.424133][ T2025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2222.424149][ T2025] RSP: 002b:00007f9b4c966028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 2222.424168][ T2025] RAX: ffffffffffffffda RBX: 00007f9b4e985fa0 RCX: 00007f9b4e70cdd9 [ 2222.424182][ T2025] RDX: 0000000000600002 RSI: 0000000000600002 RDI: 0000200000000000 [ 2222.424195][ T2025] RBP: 00007f9b4c966090 R08: 0000200000a00000 R09: 0000000000000000 [ 2222.424208][ T2025] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 2222.424220][ T2025] R13: 00007f9b4e986038 R14: 00007f9b4e985fa0 R15: 00007fff3b5bc5c8 [ 2222.424251][ T2025] [ 2222.593559][ T5727] kernel read not supported for file /vga_arbiter (pid: 5727 comm: kworker/0:5) [ 2222.807724][ T36] audit: type=1400 audit(1777190541.664:777): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=2029 comm="syz.3.9532" daddr=::ffff:172.20.20.170 [ 2222.928477][ T2032] binder_alloc: 2031: binder_alloc_buf size -208 failed, no address space [ 2222.928491][ T2032] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2222.947533][ T2032] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.000316][ T2032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9533'. [ 2223.094213][ T2032] macvlan3: entered allmulticast mode [ 2223.231880][ T5727] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 2223.265816][ T36] audit: type=1400 audit(1777190542.075:778): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=2043 comm="syz.7.9537" daddr=fc01::1 dest=20004 [ 2223.473922][ T5727] usb 1-1: Using ep0 maxpacket: 32 [ 2223.476747][ T2050] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2223.476917][ T2050] syzkaller1: linktype set to 769 [ 2223.477452][ T5727] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 2223.477476][ T5727] usb 1-1: config 0 has no interface number 0 [ 2223.477496][ T2050] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 2223.477521][ T5727] usb 1-1: config 0 interface 85 has no altsetting 0 [ 2223.477728][ T2050] syzkaller1: tun_chr_ioctl cmd 1076910120 [ 2223.496653][ T5727] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2223.496680][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.496700][ T5727] usb 1-1: Product: syz [ 2223.496714][ T5727] usb 1-1: Manufacturer: syz [ 2223.496727][ T5727] usb 1-1: SerialNumber: syz [ 2223.525466][ T5727] usb 1-1: config 0 descriptor?? [ 2224.306438][ T5727] appletouch 1-1:0.85: Geyser mode initialized. [ 2224.315475][ T5727] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input113 [ 2224.766784][ T5727] usb 1-1: USB disconnect, device number 115 [ 2224.768159][ C1] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 2224.819500][ T2064] overlay: ./file1 is not a directory [ 2224.874388][ T5727] appletouch 1-1:0.85: input: appletouch disconnected [ 2224.933104][ T5729] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2225.093425][ T5729] usb 6-1: Using ep0 maxpacket: 32 [ 2225.095919][ T5729] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 2225.095945][ T5729] usb 6-1: config 0 has an invalid descriptor of length 145, skipping remainder of the config [ 2225.095966][ T5729] usb 6-1: config 0 has no interface number 0 [ 2225.095997][ T5729] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 2225.098223][ T5729] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2225.098250][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.098271][ T5729] usb 6-1: Product: syz [ 2225.098286][ T5729] usb 6-1: Manufacturer: syz [ 2225.098300][ T5729] usb 6-1: SerialNumber: syz [ 2225.111364][ T5729] usb 6-1: config 0 descriptor?? [ 2225.242851][ T693] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 2225.403041][ T693] usb 8-1: Using ep0 maxpacket: 8 [ 2225.409269][ T693] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2225.409297][ T693] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.409382][ T693] usb 8-1: Product: syz [ 2225.409397][ T693] usb 8-1: Manufacturer: syz [ 2225.409411][ T693] usb 8-1: SerialNumber: syz [ 2225.454493][ T693] usb 8-1: config 0 descriptor?? [ 2225.700356][ T693] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2226.859597][ T693] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2226.888460][ T5727] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2227.101527][ T5727] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2227.103351][ T5727] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2227.103375][ T5727] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2227.103396][ T5727] usb 1-1: config 1 has no interface number 0 [ 2227.106700][ T5727] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 2227.108833][ T5727] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 2227.186644][ T5727] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2227.186674][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2227.186695][ T5727] usb 1-1: Product: syz [ 2227.186709][ T5727] usb 1-1: Manufacturer: syz [ 2227.190322][ T5727] usb 1-1: SerialNumber: syz [ 2227.837137][ T2075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9549'. [ 2227.870333][ T2075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9549'. [ 2227.870356][ T2075] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9549'. [ 2227.873554][ T5727] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2227.951822][ T5727] usb 1-1: USB disconnect, device number 116 [ 2229.186128][ T2105] Can't find ip_set type hash:ip, [ 2229.692889][ T5608] usb 8-1: USB disconnect, device number 5 [ 2229.748510][ T2110] netlink: 'syz.0.9558': attribute type 8 has an invalid length. [ 2229.804620][ T2112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2229.814647][ T2112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2232.222923][ T2123] FAULT_INJECTION: forcing a failure. [ 2232.222923][ T2123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2232.222959][ T2123] CPU: 1 UID: 0 PID: 2123 Comm: syz.7.9561 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2232.222986][ T2123] Tainted: [L]=SOFTLOCKUP [ 2232.222993][ T2123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2232.223005][ T2123] Call Trace: [ 2232.223013][ T2123] [ 2232.223022][ T2123] dump_stack_lvl+0xe8/0x150 [ 2232.223050][ T2123] should_fail_ex+0x46b/0x600 [ 2232.223083][ T2123] prepare_alloc_pages+0x22a/0x6b0 [ 2232.223115][ T2123] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2232.223143][ T2123] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2232.223171][ T2123] ? __pfx_policy_nodemask+0x10/0x10 [ 2232.223197][ T2123] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2232.223224][ T2123] ? lockdep_hardirqs_on+0x7a/0x110 [ 2232.223254][ T2123] alloc_pages_mpol+0xd1/0x380 [ 2232.223280][ T2123] alloc_pages_noprof+0xd2/0x2f0 [ 2232.223305][ T2123] get_free_pages_noprof+0xf/0x80 [ 2232.223329][ T2123] __kasan_populate_vmalloc+0x38/0x1d0 [ 2232.223357][ T2123] ? rt_spin_unlock+0x160/0x200 [ 2232.223383][ T2123] alloc_vmap_area+0xd47/0x1480 [ 2232.223416][ T2123] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2232.223438][ T2123] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 2232.223460][ T2123] ? __get_vm_area_node+0x171/0x350 [ 2232.223478][ T2123] ? bpf_check+0x180/0x49f0 [ 2232.223567][ T2123] __get_vm_area_node+0x226/0x350 [ 2232.223593][ T2123] __vmalloc_node_range_noprof+0x36a/0x1750 [ 2232.223614][ T2123] ? bpf_check+0x180/0x49f0 [ 2232.223633][ T2123] ? mod_memcg_lruvec_state+0xe3/0x220 [ 2232.223709][ T2123] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 2232.223742][ T2123] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 2232.223773][ T2123] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2232.223793][ T2123] ? rcu_is_watching+0x15/0xb0 [ 2232.223820][ T2123] ? trace_kmalloc+0x2a/0xf0 [ 2232.223843][ T2123] ? __kvmalloc_node_noprof+0x3df/0x8e0 [ 2232.223892][ T2123] ? bpf_check+0x180/0x49f0 [ 2232.223920][ T2123] vzalloc_noprof+0xb2/0xe0 [ 2232.223939][ T2123] ? bpf_check+0x180/0x49f0 [ 2232.223961][ T2123] bpf_check+0x180/0x49f0 [ 2232.223981][ T2123] ? pcpu_memcg_post_alloc_hook+0x2a4/0x630 [ 2232.224010][ T2123] ? pcpu_memcg_post_alloc_hook+0x2a4/0x630 [ 2232.224040][ T2123] ? ktime_get_with_offset+0x93/0x2d0 [ 2232.224069][ T2123] ? ktime_get_with_offset+0x93/0x2d0 [ 2232.224092][ T2123] ? __pfx_bpf_check+0x10/0x10 [ 2232.224116][ T2123] ? __asan_memset+0x22/0x50 [ 2232.224141][ T2123] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 2232.224162][ T2123] ? security_bpf_prog_load+0x125/0x3c0 [ 2232.224192][ T2123] bpf_prog_load+0x1406/0x1a10 [ 2232.224226][ T2123] ? __pfx_bpf_prog_load+0x10/0x10 [ 2232.224248][ T2123] ? __might_fault+0xaf/0x130 [ 2232.224282][ T2123] ? bpf_lsm_bpf+0x9/0x20 [ 2232.224301][ T2123] ? security_bpf+0x7e/0x2d0 [ 2232.224328][ T2123] __sys_bpf+0x618/0x950 [ 2232.224352][ T2123] ? __pfx___sys_bpf+0x10/0x10 [ 2232.224371][ T2123] ? rt_mutex_slowunlock+0x1cb/0x300 [ 2232.224408][ T2123] ? ksys_write+0x248/0x270 [ 2232.224430][ T2123] ? __pfx_ksys_write+0x10/0x10 [ 2232.224455][ T2123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2232.224476][ T2123] __x64_sys_bpf+0x7c/0x90 [ 2232.224497][ T2123] do_syscall_64+0x15f/0xf80 [ 2232.224516][ T2123] ? clear_bhb_loop+0x40/0x90 [ 2232.224539][ T2123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2232.224557][ T2123] RIP: 0033:0x7f8685fdcdd9 [ 2232.224575][ T2123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2232.224591][ T2123] RSP: 002b:00007f86841ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2232.224611][ T2123] RAX: ffffffffffffffda RBX: 00007f8686256180 RCX: 00007f8685fdcdd9 [ 2232.224624][ T2123] RDX: 0000000000000090 RSI: 0000200000002c40 RDI: 0000000000000005 [ 2232.224637][ T2123] RBP: 00007f86841ec090 R08: 0000000000000000 R09: 0000000000000000 [ 2232.224648][ T2123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2232.224660][ T2123] R13: 00007f8686256218 R14: 00007f8686256180 R15: 00007fff8ef61f88 [ 2232.224696][ T2123] [ 2232.224731][ T2123] syz.7.9561: vmalloc error: size 3128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2232.224789][ T2123] CPU: 1 UID: 0 PID: 2123 Comm: syz.7.9561 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2232.224815][ T2123] Tainted: [L]=SOFTLOCKUP [ 2232.224822][ T2123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2232.224832][ T2123] Call Trace: [ 2232.224839][ T2123] [ 2232.224847][ T2123] dump_stack_lvl+0xe8/0x150 [ 2232.224870][ T2123] warn_alloc+0x263/0x3e0 [ 2232.224894][ T2123] ? kasan_quarantine_put+0xbb/0x1f0 [ 2232.224916][ T2123] ? __pfx_warn_alloc+0x10/0x10 [ 2232.224939][ T2123] ? __get_vm_area_node+0x23f/0x350 [ 2232.224956][ T2123] ? __get_vm_area_node+0x171/0x350 [ 2232.224976][ T2123] ? bpf_check+0x180/0x49f0 [ 2232.224997][ T2123] ? __get_vm_area_node+0x23f/0x350 [ 2232.225023][ T2123] __vmalloc_node_range_noprof+0x38f/0x1750 [ 2232.225042][ T2123] ? mod_memcg_lruvec_state+0xe3/0x220 [ 2232.225074][ T2123] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 2232.225106][ T2123] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 2232.225137][ T2123] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2232.225156][ T2123] ? rcu_is_watching+0x15/0xb0 [ 2232.225182][ T2123] ? trace_kmalloc+0x2a/0xf0 [ 2232.225205][ T2123] ? __kvmalloc_node_noprof+0x3df/0x8e0 [ 2232.225226][ T2123] ? bpf_check+0x180/0x49f0 [ 2232.225246][ T2123] vzalloc_noprof+0xb2/0xe0 [ 2232.225266][ T2123] ? bpf_check+0x180/0x49f0 [ 2232.225288][ T2123] bpf_check+0x180/0x49f0 [ 2232.225308][ T2123] ? pcpu_memcg_post_alloc_hook+0x2a4/0x630 [ 2232.225337][ T2123] ? pcpu_memcg_post_alloc_hook+0x2a4/0x630 [ 2232.225367][ T2123] ? ktime_get_with_offset+0x93/0x2d0 [ 2232.225396][ T2123] ? ktime_get_with_offset+0x93/0x2d0 [ 2232.225419][ T2123] ? __pfx_bpf_check+0x10/0x10 [ 2232.225442][ T2123] ? __asan_memset+0x22/0x50 [ 2232.225467][ T2123] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 2232.225489][ T2123] ? security_bpf_prog_load+0x125/0x3c0 [ 2232.225518][ T2123] bpf_prog_load+0x1406/0x1a10 [ 2232.225551][ T2123] ? __pfx_bpf_prog_load+0x10/0x10 [ 2232.225575][ T2123] ? __might_fault+0xaf/0x130 [ 2232.225610][ T2123] ? bpf_lsm_bpf+0x9/0x20 [ 2232.225631][ T2123] ? security_bpf+0x7e/0x2d0 [ 2232.225657][ T2123] __sys_bpf+0x618/0x950 [ 2232.225680][ T2123] ? __pfx___sys_bpf+0x10/0x10 [ 2232.225710][ T2123] ? rt_mutex_slowunlock+0x1cb/0x300 [ 2232.225748][ T2123] ? ksys_write+0x248/0x270 [ 2232.225771][ T2123] ? __pfx_ksys_write+0x10/0x10 [ 2232.225796][ T2123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2232.225816][ T2123] __x64_sys_bpf+0x7c/0x90 [ 2232.225837][ T2123] do_syscall_64+0x15f/0xf80 [ 2232.225856][ T2123] ? clear_bhb_loop+0x40/0x90 [ 2232.225879][ T2123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2232.225897][ T2123] RIP: 0033:0x7f8685fdcdd9 [ 2232.225914][ T2123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2232.225929][ T2123] RSP: 002b:00007f86841ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2232.225947][ T2123] RAX: ffffffffffffffda RBX: 00007f8686256180 RCX: 00007f8685fdcdd9 [ 2232.225961][ T2123] RDX: 0000000000000090 RSI: 0000200000002c40 RDI: 0000000000000005 [ 2232.225973][ T2123] RBP: 00007f86841ec090 R08: 0000000000000000 R09: 0000000000000000 [ 2232.225986][ T2123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2232.225997][ T2123] R13: 00007f8686256218 R14: 00007f8686256180 R15: 00007fff8ef61f88 [ 2232.226028][ T2123] [ 2232.226036][ T2123] Mem-Info: [ 2232.226044][ T2123] active_anon:200 inactive_anon:6701 isolated_anon:0 [ 2232.226044][ T2123] active_file:20089 inactive_file:39745 isolated_file:0 [ 2232.226044][ T2123] unevictable:768 dirty:142 writeback:11 [ 2232.226044][ T2123] slab_reclaimable:15544 slab_unreclaimable:109124 [ 2232.226044][ T2123] mapped:31022 shmem:1314 pagetables:1579 [ 2232.226044][ T2123] sec_pagetables:0 bounce:0 [ 2232.226044][ T2123] kernel_misc_reclaimable:0 [ 2232.226044][ T2123] free:1285218 free_pcp:6359 free_cma:0 [ 2232.226097][ T2123] Node 0 active_anon:800kB inactive_anon:26804kB active_file:80016kB inactive_file:158980kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123896kB dirty:564kB writeback:48kB shmem:3720kB kernel_stack:14160kB pagetables:6184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2232.226146][ T2123] Node 1 active_anon:0kB inactive_anon:0kB active_file:340kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:192kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2232.226192][ T2123] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2232.226247][ T2123] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 2232.226280][ T2123] Node 0 DMA32 free:1202068kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:800kB inactive_anon:26804kB active_file:80016kB inactive_file:158980kB unevictable:1536kB writepending:612kB zspages:0kB present:3129332kB managed:2566640kB mlocked:0kB bounce:0kB free_pcp:25436kB local_pcp:6636kB free_cma:0kB [ 2232.226338][ T2123] lowmem_reserve[]: 0 0 0 0 0 [ 2232.226368][ T2123] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:216kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2232.226422][ T2123] lowmem_reserve[]: 0 0 0 0 0 [ 2232.226452][ T2123] Node 1 Normal free:3923444kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:340kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2232.226508][ T2123] lowmem_reserve[]: 0 0 0 0 0 [ 2232.226539][ T2123] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2232.226646][ T2123] Node 0 DMA32: 4826*4kB (UME) 5392*8kB (UME) 4027*16kB (UME) 420*32kB (UME) 448*64kB (UME) 595*128kB (UME) 460*256kB (UME) 305*512kB (UME) 147*1024kB (UME) 20*2048kB (UM) 120*4096kB (UM) = 1202072kB [ 2232.226796][ T2123] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2232.226887][ T2123] Node 1 Normal: 11*4kB (UM) 11*8kB (UM) 11*16kB (UM) 12*32kB (UM) 15*64kB (UM) 3*128kB (UM) 6*256kB (UM) 2*512kB (UM) 1*1024kB (M) 3*2048kB (UM) 955*4096kB (UM) = 3923444kB [ 2232.227029][ T2123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2232.227046][ T2123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2232.227062][ T2123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2232.227077][ T2123] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2232.227093][ T2123] 61144 total pagecache pages [ 2232.227100][ T2123] 0 pages in swap cache [ 2232.227107][ T2123] Free swap = 124996kB [ 2232.227114][ T2123] Total swap = 124996kB [ 2232.227122][ T2123] 2097051 pages RAM [ 2232.227129][ T2123] 0 pages HighMem/MovableOnly [ 2232.227136][ T2123] 423722 pages reserved [ 2232.227143][ T2123] 0 pages cma reserved [ 2235.559175][ T2145] netlink: 'syz.6.9568': attribute type 8 has an invalid length. [ 2236.737293][T19478] Bluetooth: hci3: command 0x0406 tx timeout [ 2237.030726][ T2156] netlink: 'syz.3.9571': attribute type 3 has an invalid length. [ 2237.153126][ T2160] batadv_slave_0: entered promiscuous mode [ 2237.220484][ T2159] batadv_slave_0: left promiscuous mode [ 2237.308113][ T2168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9575'. [ 2237.408402][ T2168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9575'. [ 2237.411375][ T2168] netlink: 'syz.5.9575': attribute type 1 has an invalid length. [ 2237.471611][ T2170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2237.472206][ T2170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2237.815037][ T2176] FAULT_INJECTION: forcing a failure. [ 2237.815037][ T2176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2237.815072][ T2176] CPU: 0 UID: 0 PID: 2176 Comm: syz.3.9577 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2237.815099][ T2176] Tainted: [L]=SOFTLOCKUP [ 2237.815105][ T2176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2237.815116][ T2176] Call Trace: [ 2237.815124][ T2176] [ 2237.815132][ T2176] dump_stack_lvl+0xe8/0x150 [ 2237.815162][ T2176] should_fail_ex+0x46b/0x600 [ 2237.815196][ T2176] _copy_from_user+0x2d/0xb0 [ 2237.815219][ T2176] snd_seq_write+0x314/0x830 [ 2237.815257][ T2176] ? __pfx_snd_seq_write+0x10/0x10 [ 2237.815290][ T2176] ? rw_verify_area+0x25b/0x4e0 [ 2237.815321][ T2176] vfs_writev+0x4c6/0x9a0 [ 2237.815347][ T2176] ? __pfx_snd_seq_write+0x10/0x10 [ 2237.815376][ T2176] ? __pfx_vfs_writev+0x10/0x10 [ 2237.815415][ T2176] ? __fget_files+0x2a/0x420 [ 2237.815447][ T2176] ? __fget_files+0x3a6/0x420 [ 2237.815471][ T2176] ? __fget_files+0x2a/0x420 [ 2237.815504][ T2176] do_writev+0x15a/0x2e0 [ 2237.815530][ T2176] ? __pfx_do_writev+0x10/0x10 [ 2237.815563][ T2176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2237.815583][ T2176] do_syscall_64+0x15f/0xf80 [ 2237.815601][ T2176] ? trace_irq_disable+0x3b/0x140 [ 2237.815622][ T2176] ? clear_bhb_loop+0x40/0x90 [ 2237.815646][ T2176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2237.815664][ T2176] RIP: 0033:0x7f02f480cdd9 [ 2237.815682][ T2176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2237.815698][ T2176] RSP: 002b:00007f02f2a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2237.815718][ T2176] RAX: ffffffffffffffda RBX: 00007f02f4a85fa0 RCX: 00007f02f480cdd9 [ 2237.815732][ T2176] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 2237.815744][ T2176] RBP: 00007f02f2a66090 R08: 0000000000000000 R09: 0000000000000000 [ 2237.815756][ T2176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2237.815767][ T2176] R13: 00007f02f4a86038 R14: 00007f02f4a85fa0 R15: 00007ffc799fbfc8 [ 2237.815795][ T2176] [ 2238.512478][ T2190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9582'. [ 2238.561251][ T2190] netlink: 'syz.3.9582': attribute type 1 has an invalid length. [ 2238.561272][ T2190] netlink: 'syz.3.9582': attribute type 2 has an invalid length. [ 2238.563180][ T2193] netlink: 'syz.0.9586': attribute type 14 has an invalid length. [ 2238.803796][T31623] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 2238.824760][T26203] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2238.966893][T31623] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2238.966955][T31623] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2238.966997][T31623] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2238.967020][T31623] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2238.978411][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 2239.003517][T26203] usb 4-1: Using ep0 maxpacket: 8 [ 2239.019641][T31623] usb 8-1: config 0 descriptor?? [ 2239.020409][T26203] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2239.020434][T26203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2239.020454][T26203] usb 4-1: Product: syz [ 2239.020476][T26203] usb 4-1: Manufacturer: syz [ 2239.020490][T26203] usb 4-1: SerialNumber: syz [ 2239.056456][T31623] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 2239.060287][T26203] usb 4-1: config 0 descriptor?? [ 2239.107962][T26203] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2239.499645][T27706] Bluetooth: hci4: unexpected event for opcode 0x041b [ 2240.414979][T26203] gspca_sq930x: reg_r 001f failed -110 [ 2240.415086][T26203] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 2240.441301][ T2220] nfs: Unknown parameter 'c¿ª¹*–â²úûÿÿÿÿÿÿÿÂö' [ 2240.445617][ T2190] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2240.693737][ T2225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9595'. [ 2240.693758][ T2225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9595'. [ 2241.253381][ T5608] IPVS: starting estimator thread 0... [ 2241.378829][ T2227] IPVS: using max 16 ests per chain, 38400 per kthread [ 2241.836073][T26203] usb 8-1: USB disconnect, device number 6 [ 2242.154269][T26203] usb 4-1: USB disconnect, device number 72 [ 2242.224344][ T36] audit: type=1400 audit(1777190559.827:779): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=2241 comm="syz.7.9603" daddr=::ffff:255.255.255.255 dest=20004 [ 2243.346087][ T2258] Invalid argument reading file caps for ./file0 [ 2244.104052][ T2256] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2244.104140][ T2256] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2244.276506][ T2256] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2244.276601][ T2256] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2244.452034][ T2256] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2244.469975][ T2256] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2244.570682][ T2280] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9614'. [ 2244.571983][ T2280] batadv_slave_1: entered promiscuous mode [ 2244.573378][ T2280] batadv_slave_1: left promiscuous mode [ 2244.708272][ T2256] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2244.708402][ T2256] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2244.829561][ T2256] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2245.439567][ T36] audit: type=1400 audit(1777190562.831:780): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=2297 comm="syz.3.9621" daddr=::ffff:172.20.20.170 [ 2245.644251][ T2303] binder_alloc: 2299: binder_alloc_buf size -208 failed, no address space [ 2245.644273][ T2303] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2245.672638][ T2303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2245.730654][ T2304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9620'. [ 2245.886824][T27706] Bluetooth: hci3: unexpected event for opcode 0x080c [ 2246.021509][ T2304] macvlan2: entered allmulticast mode [ 2246.021535][ T2304] dummy0: entered allmulticast mode [ 2246.098188][ T2304] dummy0: entered promiscuous mode [ 2246.337129][T27706] Bluetooth: hci4: command 0x0406 tx timeout [ 2246.476238][T26203] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2246.502710][T27706] Bluetooth: hci0: command 0x0406 tx timeout [ 2246.657672][T26203] usb 4-1: Using ep0 maxpacket: 8 [ 2246.682164][T26203] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 2246.682193][T26203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.682213][T26203] usb 4-1: Product: syz [ 2246.682227][T26203] usb 4-1: Manufacturer: syz [ 2246.682240][T26203] usb 4-1: SerialNumber: syz [ 2246.731022][T26203] usb 4-1: config 0 descriptor?? [ 2246.750017][T26203] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 2246.925059][T27706] Bluetooth: hci5: command 0x0c1a tx timeout [ 2247.790657][ T2330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.791315][ T2330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2248.170674][ T2335] binder_alloc: 2333: binder_alloc_buf size -208 failed, no address space [ 2248.170696][ T2335] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2248.214331][ T2335] ieee802154 phy1 wpan1: encryption failed: -22 [ 2248.240032][T26203] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 2248.240590][T26203] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2248.244177][T26203] usb 4-1: USB disconnect, device number 73 [ 2248.349049][T27706] Bluetooth: hci4: unexpected event for opcode 0x080c [ 2248.721940][T27706] Bluetooth: hci0: command 0x0406 tx timeout [ 2248.985138][ T36] audit: type=1400 audit(1777190566.153:781): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=2345 comm="syz.3.9636" daddr=::ffff:172.20.20.170 [ 2249.009481][ T2347] sch_fq: defrate 1024 ignored. [ 2249.028627][T27706] Bluetooth: hci4: unexpected event for opcode 0x201c [ 2249.149962][T27706] Bluetooth: hci5: command 0x0c1a tx timeout [ 2249.392473][ T2325] syz.6.9631 (2325) used greatest stack depth: 18496 bytes left [ 2249.799446][ T5608] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 2249.970416][ T5608] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2249.970443][ T5608] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2249.970798][ T5608] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2249.970832][ T5608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.042878][ T5608] usb 4-1: config 0 descriptor?? [ 2250.056125][ T5608] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2250.056170][ T5608] dvb-usb: bulk message failed: -22 (3/0) [ 2250.094646][ T5608] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2250.110241][ T5608] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2250.110296][ T5608] usb 4-1: media controller created [ 2250.112552][ T5608] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2250.163038][ T5608] dvb-usb: bulk message failed: -22 (6/0) [ 2250.163121][ T5608] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2250.191498][ T5608] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input114 [ 2250.207400][ T5608] dvb-usb: schedule remote query interval to 150 msecs. [ 2250.207414][ T5608] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2250.369639][ T5608] usb 4-1: USB disconnect, device number 74 [ 2250.784853][ T5608] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2250.983455][ T2380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2251.017219][ T2380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2251.194150][ T2390] FAULT_INJECTION: forcing a failure. [ 2251.194150][ T2390] name failslab, interval 1, probability 0, space 0, times 0 [ 2251.194185][ T2390] CPU: 1 UID: 0 PID: 2390 Comm: syz.0.9648 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2251.194212][ T2390] Tainted: [L]=SOFTLOCKUP [ 2251.194219][ T2390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2251.194228][ T2390] Call Trace: [ 2251.194236][ T2390] [ 2251.194244][ T2390] dump_stack_lvl+0xe8/0x150 [ 2251.194271][ T2390] should_fail_ex+0x46b/0x600 [ 2251.194304][ T2390] should_failslab+0xa8/0x100 [ 2251.194328][ T2390] kmem_cache_alloc_noprof+0x87/0x680 [ 2251.194348][ T2390] ? do_getname+0x2e/0x250 [ 2251.194376][ T2390] do_getname+0x2e/0x250 [ 2251.194403][ T2390] __se_sys_renameat2+0x43/0x2c0 [ 2251.194428][ T2390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2251.194448][ T2390] do_syscall_64+0x15f/0xf80 [ 2251.194467][ T2390] ? trace_irq_disable+0x3b/0x140 [ 2251.194489][ T2390] ? clear_bhb_loop+0x40/0x90 [ 2251.194512][ T2390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2251.194530][ T2390] RIP: 0033:0x7fc16b48cdd9 [ 2251.194548][ T2390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2251.194565][ T2390] RSP: 002b:00007fc1696e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 2251.194585][ T2390] RAX: ffffffffffffffda RBX: 00007fc16b705fa0 RCX: 00007fc16b48cdd9 [ 2251.194599][ T2390] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000007 [ 2251.194612][ T2390] RBP: 00007fc1696e6090 R08: 0000000000000002 R09: 0000000000000000 [ 2251.194625][ T2390] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 2251.194637][ T2390] R13: 00007fc16b706038 R14: 00007fc16b705fa0 R15: 00007ffe80be7888 [ 2251.194672][ T2390] [ 2251.370181][T27706] Bluetooth: hci5: command 0x0c1a tx timeout [ 2254.167083][ T693] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2254.353097][ T693] usb 7-1: device descriptor read/64, error -71 [ 2254.831976][ T693] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2254.913521][ T2419] FAULT_INJECTION: forcing a failure. [ 2254.913521][ T2419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2254.913556][ T2419] CPU: 1 UID: 0 PID: 2419 Comm: syz.5.9660 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2254.913582][ T2419] Tainted: [L]=SOFTLOCKUP [ 2254.913590][ T2419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2254.913602][ T2419] Call Trace: [ 2254.913609][ T2419] [ 2254.913618][ T2419] dump_stack_lvl+0xe8/0x150 [ 2254.913645][ T2419] should_fail_ex+0x46b/0x600 [ 2254.913678][ T2419] _copy_to_user+0x31/0xb0 [ 2254.913701][ T2419] simple_read_from_buffer+0xe1/0x170 [ 2254.913734][ T2419] proc_fail_nth_read+0x1be/0x230 [ 2254.913766][ T2419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2254.913796][ T2419] ? rw_verify_area+0x2ac/0x4e0 [ 2254.913817][ T2419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2254.913845][ T2419] vfs_read+0x212/0xa80 [ 2254.913874][ T2419] ? __pfx_vfs_read+0x10/0x10 [ 2254.913898][ T2419] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2254.913924][ T2419] ? lockdep_hardirqs_on+0x7a/0x110 [ 2254.913952][ T2419] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2254.913978][ T2419] ? mutex_lock_nested+0x152/0x1d0 [ 2254.913998][ T2419] ? fdget_pos+0x252/0x320 [ 2254.914025][ T2419] ksys_read+0x156/0x270 [ 2254.914047][ T2419] ? __pfx_ksys_read+0x10/0x10 [ 2254.914068][ T2419] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2254.914097][ T2419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2254.914118][ T2419] do_syscall_64+0x15f/0xf80 [ 2254.914136][ T2419] ? trace_irq_disable+0x3b/0x140 [ 2254.914158][ T2419] ? clear_bhb_loop+0x40/0x90 [ 2254.914181][ T2419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2254.914200][ T2419] RIP: 0033:0x7f9b4e6cd60e [ 2254.914218][ T2419] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2254.914234][ T2419] RSP: 002b:00007f9b4c965fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2254.914261][ T2419] RAX: ffffffffffffffda RBX: 00007f9b4c9666c0 RCX: 00007f9b4e6cd60e [ 2254.914275][ T2419] RDX: 000000000000000f RSI: 00007f9b4c9660a0 RDI: 0000000000000004 [ 2254.914288][ T2419] RBP: 00007f9b4c966090 R08: 0000000000000000 R09: 0000000000000000 [ 2254.914301][ T2419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2254.914313][ T2419] R13: 00007f9b4e986038 R14: 00007f9b4e985fa0 R15: 00007fff3b5bc5c8 [ 2254.914347][ T2419] [ 2256.783304][ T2428] netlink: 'syz.6.9663': attribute type 8 has an invalid length. [ 2258.018577][T21855] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 2258.050411][ T2431] 9p: Could not find request transport: f [ 2258.209037][T21855] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2258.209064][T21855] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2258.209878][T21855] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2258.209903][T21855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.237440][T21855] usb 1-1: config 0 descriptor?? [ 2258.282258][T21855] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2258.282306][T21855] dvb-usb: bulk message failed: -22 (3/0) [ 2258.310612][T27706] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 2258.316431][T21855] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2258.320778][T21855] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2258.320833][T21855] usb 1-1: media controller created [ 2258.353460][T21855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2258.374983][T21855] dvb-usb: bulk message failed: -22 (6/0) [ 2258.375064][T21855] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2258.394594][T21855] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input115 [ 2258.404054][T21855] dvb-usb: schedule remote query interval to 150 msecs. [ 2258.404075][T21855] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2258.404689][ T2448] binder_alloc: 2447: binder_alloc_buf size -208 failed, no address space [ 2258.404707][ T2448] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2258.424078][ T2448] ieee802154 phy1 wpan1: encryption failed: -22 [ 2258.449010][ T5608] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 2258.487693][T27706] Bluetooth: hci0: unexpected event for opcode 0x080c [ 2258.572572][T31623] dvb-usb: bulk message failed: -22 (1/0) [ 2258.572604][T31623] dvb-usb: error while querying for an remote control event. [ 2258.623427][ T5608] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2258.623455][ T5608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.660847][ T5608] usb 4-1: config 0 descriptor?? [ 2258.697377][ T5608] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2258.756836][T21855] dvb-usb: bulk message failed: -22 (1/0) [ 2258.756967][T21855] dvb-usb: error while querying for an remote control event. [ 2258.875559][ T5729] usb 1-1: USB disconnect, device number 117 [ 2258.899278][ T5608] gp8psk: usb in 128 operation failed. [ 2259.111595][ T36] audit: type=1326 audit(1777190575.633:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2458 comm="syz.7.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8685fdcdd9 code=0x7ffc0000 [ 2259.111809][ T36] audit: type=1326 audit(1777190575.633:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2458 comm="syz.7.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8685fdcdd9 code=0x7ffc0000 [ 2259.111930][ T36] audit: type=1326 audit(1777190575.633:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2458 comm="syz.7.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8685fdcdd9 code=0x7ffc0000 [ 2259.120774][ T36] audit: type=1326 audit(1777190575.633:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2458 comm="syz.7.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8685fdcdd9 code=0x7ffc0000 [ 2259.129081][ T36] audit: type=1326 audit(1777190575.652:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2458 comm="syz.7.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8685fdcdd9 code=0x7ffc0000 [ 2259.134042][ T36] audit: type=1326 audit(1777190575.652:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2458 comm="syz.7.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8685fdcdd9 code=0x7ffc0000 [ 2259.134720][ T36] audit: type=1326 audit(1777190575.652:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2458 comm="syz.7.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8685fdcdd9 code=0x7ffc0000 [ 2259.140268][ T36] audit: type=1326 audit(1777190575.652:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2458 comm="syz.7.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8685fdcdd9 code=0x7ffc0000 [ 2259.140859][ T36] audit: type=1326 audit(1777190575.661:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2458 comm="syz.7.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8685fdcdd9 code=0x7ffc0000 [ 2259.158135][ T36] audit: type=1326 audit(1777190575.670:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2458 comm="syz.7.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8685fdcdd9 code=0x7ffc0000 [ 2259.246763][ T2460] 9p: Bad value for 'wfdno' [ 2259.354878][ T5608] gp8psk: usb in 137 operation failed. [ 2259.354898][ T5608] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2259.354934][ T5608] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2259.448897][ T5608] usb 4-1: USB disconnect, device number 75 [ 2259.473261][ T5729] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2260.196116][ T2472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2260.209363][ T2472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2262.246410][ T1370] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2262.329522][ T1370] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2262.831174][ T2500] 9p: Bad value for 'rfdno' [ 2263.615647][T21855] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 2263.856938][T21855] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2263.856974][T21855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2263.881286][T21855] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2263.881315][T21855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.881335][T21855] usb 8-1: Product: syz [ 2263.881348][T21855] usb 8-1: Manufacturer: syz [ 2263.881362][T21855] usb 8-1: SerialNumber: syz [ 2263.940260][T21855] usb 8-1: config 0 descriptor?? [ 2263.946738][ T2507] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2264.314341][ T5729] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 2264.430277][ T2521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9688'. [ 2264.538693][ T5729] usb 1-1: Using ep0 maxpacket: 16 [ 2264.550568][T21855] rc_core: IR keymap rc-streamzap not found [ 2264.550587][T21855] Registered IR keymap rc-empty [ 2264.552247][T21855] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 2264.579090][T21855] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input116 [ 2264.583993][ T2516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2264.584309][ T2522] fuse: Unknown parameter '›koup_id' [ 2264.622715][ T2522] loop5: detected capacity change from 0 to 7 [ 2264.629388][ T5729] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2264.629419][ T5729] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 26183, setting to 1024 [ 2264.629433][ T2516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2264.629446][ T5729] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2264.629470][ T5729] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2264.636667][ T2522] Dev loop5: unable to read RDB block 7 [ 2264.636709][ T2522] loop5: AHDI p1 p2 p3 [ 2264.636738][ T2522] loop5: partition table partially beyond EOD, truncated [ 2264.636997][ T2522] loop5: p1 start 1818582900 is beyond EOD, truncated [ 2264.637015][ T2522] loop5: p3 start 335544320 is beyond EOD, truncated [ 2264.786285][ T5729] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 2264.786315][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2264.786335][ T5729] usb 1-1: Product: syz [ 2264.786349][ T5729] usb 1-1: Manufacturer: syz [ 2264.786363][ T5729] usb 1-1: SerialNumber: syz [ 2264.863054][ T2514] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2265.364523][T21855] usb 8-1: USB disconnect, device number 7 [ 2266.058415][ T2540] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 2266.170413][ T2543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2266.211679][ T2546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2266.212430][ T2546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2267.246284][ T2573] netlink: 'syz.6.9701': attribute type 1 has an invalid length. [ 2267.753081][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 2267.753101][ T36] audit: type=1400 audit(1777190583.269:828): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=2570 comm="syz.6.9701" daddr=2001::1 dest=20004 [ 2267.753147][ T36] audit: type=1400 audit(1777190583.325:829): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=2570 comm="syz.6.9701" daddr=2001::2 [ 2267.936644][ T5729] usbhid 1-1:1.0: can't add hid device: -71 [ 2267.936758][ T5729] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2267.941051][ T5729] usb 1-1: USB disconnect, device number 118 [ 2268.055392][ T2574] lo speed is unknown, defaulting to 1000 [ 2268.055506][ T2574] lo speed is unknown, defaulting to 1000 [ 2268.065239][ T2574] lo speed is unknown, defaulting to 1000 [ 2268.068136][ T2574] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 2268.068172][ T2574] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 2268.068213][ T2574] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 2268.075888][ T2574] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 2268.090441][ T2574] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2268.148258][ T2574] lo speed is unknown, defaulting to 1000 [ 2268.150814][ T2574] lo speed is unknown, defaulting to 1000 [ 2268.154237][ T2574] lo speed is unknown, defaulting to 1000 [ 2268.161740][ T2574] lo speed is unknown, defaulting to 1000 [ 2268.164451][ T2574] lo speed is unknown, defaulting to 1000 [ 2268.167043][ T2574] lo speed is unknown, defaulting to 1000 [ 2268.621362][ T36] audit: type=1400 audit(1777190584.532:830): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=2586 comm="syz.3.9705" dest=20004 [ 2269.220367][ T2585] binder_alloc: 2579: binder_alloc_buf, no vma [ 2269.732506][ T2601] netlink: 'syz.3.9709': attribute type 5 has an invalid length. [ 2269.732530][ T2601] netlink: 340 bytes leftover after parsing attributes in process `syz.3.9709'. [ 2269.805573][ T2601] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9709'. [ 2270.979163][ T1370] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 2271.148027][ T1370] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2271.148861][ T1370] usb 4-1: not running at top speed; connect to a high speed hub [ 2271.151833][ T1370] usb 4-1: config 1 has an invalid interface number: 85 but max is 0 [ 2271.151856][ T1370] usb 4-1: config 1 has no interface number 0 [ 2271.151886][ T1370] usb 4-1: config 1 interface 85 has no altsetting 0 [ 2271.158696][ T1370] usb 4-1: New USB device found, idVendor=093a, idProduct=2471, bcdDevice=1e.62 [ 2271.158722][ T1370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2271.158741][ T1370] usb 4-1: Product: syz [ 2271.158754][ T1370] usb 4-1: Manufacturer: syz [ 2271.158768][ T1370] usb 4-1: SerialNumber: syz [ 2271.348483][ T36] audit: type=1326 audit(1777190587.078:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2620 comm="syz.6.9714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca2e6cdd9 code=0x7ffc0000 [ 2271.349644][ T36] audit: type=1326 audit(1777190587.078:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2620 comm="syz.6.9714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca2e6cdd9 code=0x7ffc0000 [ 2271.366160][ T36] audit: type=1326 audit(1777190587.097:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2620 comm="syz.6.9714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca2e6cdd9 code=0x7ffc0000 [ 2271.366204][ T36] audit: type=1326 audit(1777190587.097:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2620 comm="syz.6.9714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3ca2e6cdd9 code=0x7ffc0000 [ 2271.366241][ T36] audit: type=1326 audit(1777190587.097:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2620 comm="syz.6.9714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca2e6cdd9 code=0x7ffc0000 [ 2271.372524][ T36] audit: type=1326 audit(1777190587.097:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2620 comm="syz.6.9714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca2e6cdd9 code=0x7ffc0000 [ 2271.373184][ T36] audit: type=1326 audit(1777190587.097:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2620 comm="syz.6.9714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca2e6cdd9 code=0x7ffc0000 [ 2271.652059][ T2624] netlink: 'syz.7.9715': attribute type 14 has an invalid length. [ 2272.099058][ T2635] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9719'. [ 2272.358321][ T2638] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9719'. [ 2273.069831][ T2593] syz.5.9703 (2593): drop_caches: 2 [ 2273.173752][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 2273.173770][ T36] audit: type=1326 audit(1777190588.790:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2610 comm="syz.3.9712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f480cdd9 code=0x7ffc0000 [ 2273.173822][ T36] audit: type=1326 audit(1777190588.790:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2610 comm="syz.3.9712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f480cdd9 code=0x7ffc0000 [ 2273.173861][ T36] audit: type=1326 audit(1777190588.790:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2610 comm="syz.3.9712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02f47ae159 code=0x7ffc0000 [ 2273.322569][ T36] audit: type=1326 audit(1777190588.931:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2610 comm="syz.3.9712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f480cdd9 code=0x7ffc0000 [ 2273.322866][ T36] audit: type=1326 audit(1777190588.931:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2610 comm="syz.3.9712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f480cdd9 code=0x7ffc0000 [ 2273.323455][ T36] audit: type=1326 audit(1777190588.931:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2610 comm="syz.3.9712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f480cdd9 code=0x7ffc0000 [ 2273.324239][ T36] audit: type=1326 audit(1777190588.931:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2610 comm="syz.3.9712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02f47ae159 code=0x7ffc0000 [ 2273.328406][ T36] audit: type=1326 audit(1777190588.931:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2610 comm="syz.3.9712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f480cdd9 code=0x7ffc0000 [ 2273.463885][ T36] audit: type=1326 audit(1777190588.940:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2610 comm="syz.3.9712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f480cdd9 code=0x7ffc0000 [ 2273.463934][ T36] audit: type=1326 audit(1777190588.940:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2610 comm="syz.3.9712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f480cdd9 code=0x7ffc0000 [ 2273.551560][ T1370] gspca_main: pac207-2.14.0 probing 093a:2471 [ 2273.552113][ T1370] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 2273.563001][ T1370] usb 4-1: USB disconnect, device number 76 [ 2273.882636][ T2653] fuse: Bad value for 'fd' [ 2274.088732][T31623] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 2274.259745][T31623] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2274.259803][T31623] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 2274.259827][T31623] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2274.397055][T31623] usb 8-1: config 0 descriptor?? [ 2274.415220][T31623] pwc: Askey VC010 type 2 USB webcam detected. [ 2275.242814][ T5729] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 2275.272643][T31623] pwc: recv_control_msg error -71 req 02 val 2b00 [ 2275.273209][T31623] pwc: recv_control_msg error -71 req 02 val 2700 [ 2275.273676][T31623] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2275.301153][T31623] pwc: recv_control_msg error -71 req 04 val 1000 [ 2275.301638][T31623] pwc: recv_control_msg error -71 req 04 val 1300 [ 2275.302108][T31623] pwc: recv_control_msg error -71 req 04 val 1400 [ 2275.302559][T31623] pwc: recv_control_msg error -71 req 02 val 2000 [ 2275.304217][T31623] pwc: recv_control_msg error -71 req 02 val 2100 [ 2275.339226][T31623] pwc: recv_control_msg error -71 req 04 val 1500 [ 2275.339738][T31623] pwc: recv_control_msg error -71 req 02 val 2500 [ 2275.340777][T31623] pwc: recv_control_msg error -71 req 02 val 2400 [ 2275.342866][T31623] pwc: recv_control_msg error -71 req 02 val 2600 [ 2275.344029][T31623] pwc: recv_control_msg error -71 req 02 val 2900 [ 2275.344486][T31623] pwc: recv_control_msg error -71 req 02 val 2800 [ 2275.346364][T31623] pwc: recv_control_msg error -71 req 04 val 1100 [ 2275.399165][T31623] pwc: recv_control_msg error -71 req 04 val 1200 [ 2275.409308][ T5729] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2275.409336][ T5729] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2275.433492][ T5729] usb 7-1: config 0 descriptor?? [ 2275.464277][T31623] pwc: Registered as video103. [ 2275.479777][T31623] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input117 [ 2275.482726][ T5729] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2275.523230][T31623] usb 8-1: USB disconnect, device number 8 [ 2275.666793][ T5729] gp8psk: usb in 128 operation failed. [ 2276.413944][ T5729] gp8psk: usb in 137 operation failed. [ 2276.413966][ T5729] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2276.414005][ T5729] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2276.420773][ T5729] usb 7-1: USB disconnect, device number 19 [ 2276.567950][ T693] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 2276.730325][ T693] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2276.730361][ T693] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2276.730407][ T693] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 2276.730430][ T693] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.753490][ T693] usb 8-1: config 0 descriptor?? [ 2277.664427][ T693] usbhid 8-1:0.0: can't add hid device: -71 [ 2277.664557][ T693] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2277.687874][ T693] usb 8-1: USB disconnect, device number 9 [ 2278.569601][ T36] kauditd_printk_skb: 189 callbacks suppressed [ 2278.569620][ T36] audit: type=1326 audit(1777190593.825:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2706 comm="syz.0.9739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16b48cdd9 code=0x7ffc0000 [ 2278.569664][ T36] audit: type=1326 audit(1777190593.825:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2706 comm="syz.0.9739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16b48cdd9 code=0x7ffc0000 [ 2278.577585][ T36] audit: type=1326 audit(1777190593.844:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2706 comm="syz.0.9739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16b48cdd9 code=0x7ffc0000 [ 2278.577629][ T36] audit: type=1326 audit(1777190593.844:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2706 comm="syz.0.9739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc16b48cdd9 code=0x7ffc0000 [ 2278.577667][ T36] audit: type=1326 audit(1777190593.844:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2706 comm="syz.0.9739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16b48cdd9 code=0x7ffc0000 [ 2278.577705][ T36] audit: type=1326 audit(1777190593.844:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2706 comm="syz.0.9739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16b48cdd9 code=0x7ffc0000 [ 2278.577743][ T36] audit: type=1326 audit(1777190593.844:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2706 comm="syz.0.9739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16b48cdd9 code=0x7ffc0000 [ 2278.578931][ T36] audit: type=1326 audit(1777190593.844:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2706 comm="syz.0.9739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16b48cdd9 code=0x7ffc0000 [ 2278.586139][ T36] audit: type=1326 audit(1777190593.853:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2706 comm="syz.0.9739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc16b48cdd9 code=0x7ffc0000 [ 2278.598720][ T36] audit: type=1326 audit(1777190593.853:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2706 comm="syz.0.9739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16b48cdd9 code=0x7ffc0000 [ 2279.643619][ T2733] netlink: 337 bytes leftover after parsing attributes in process `syz.7.9746'. [ 2279.677499][T31623] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 2280.304824][T31623] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2280.305792][T31623] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2280.580652][T31623] usb 7-1: config 0 descriptor?? [ 2280.715601][T31623] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2280.879745][ T2749] binder_alloc: 2748: binder_alloc_buf size -208 failed, no address space [ 2280.879768][ T2749] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2280.883810][ T2749] ieee802154 phy1 wpan1: encryption failed: -22 [ 2280.921588][T31623] gp8psk: usb in 128 operation failed. [ 2280.939513][ T2749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9750'. [ 2280.967867][ T2753] FAULT_INJECTION: forcing a failure. [ 2280.967867][ T2753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2280.967899][ T2753] CPU: 0 UID: 0 PID: 2753 Comm: syz.7.9753 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2280.967926][ T2753] Tainted: [L]=SOFTLOCKUP [ 2280.967932][ T2753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2280.967945][ T2753] Call Trace: [ 2280.967953][ T2753] [ 2280.967961][ T2753] dump_stack_lvl+0xe8/0x150 [ 2280.967988][ T2753] should_fail_ex+0x46b/0x600 [ 2280.968021][ T2753] _copy_to_user+0x31/0xb0 [ 2280.968044][ T2753] simple_read_from_buffer+0xe1/0x170 [ 2280.968074][ T2753] proc_fail_nth_read+0x1be/0x230 [ 2280.968113][ T2753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2280.968143][ T2753] ? rw_verify_area+0x2ac/0x4e0 [ 2280.968164][ T2753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2280.968192][ T2753] vfs_read+0x212/0xa80 [ 2280.968220][ T2753] ? __pfx_vfs_read+0x10/0x10 [ 2280.968243][ T2753] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2280.968271][ T2753] ? lockdep_hardirqs_on+0x7a/0x110 [ 2280.968297][ T2753] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2280.968323][ T2753] ? mutex_lock_nested+0x152/0x1d0 [ 2280.968344][ T2753] ? fdget_pos+0x252/0x320 [ 2280.968370][ T2753] ksys_read+0x156/0x270 [ 2280.968392][ T2753] ? __pfx_ksys_read+0x10/0x10 [ 2280.968420][ T2753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2280.968441][ T2753] do_syscall_64+0x15f/0xf80 [ 2280.968458][ T2753] ? trace_irq_disable+0x3b/0x140 [ 2280.968480][ T2753] ? clear_bhb_loop+0x40/0x90 [ 2280.968504][ T2753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2280.968523][ T2753] RIP: 0033:0x7f8685f9d60e [ 2280.968540][ T2753] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2280.968557][ T2753] RSP: 002b:00007f868422dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2280.968577][ T2753] RAX: ffffffffffffffda RBX: 00007f868422e6c0 RCX: 00007f8685f9d60e [ 2280.968592][ T2753] RDX: 000000000000000f RSI: 00007f868422e0a0 RDI: 0000000000000004 [ 2280.968605][ T2753] RBP: 00007f868422e090 R08: 0000000000000000 R09: 0000000000000000 [ 2280.968617][ T2753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2280.968629][ T2753] R13: 00007f8686256038 R14: 00007f8686255fa0 R15: 00007fff8ef61f88 [ 2280.968664][ T2753] [ 2281.128803][ T2749] macvlan2: entered allmulticast mode [ 2281.128837][ T2749] dummy0: entered allmulticast mode [ 2281.128932][ T2749] dummy0: entered promiscuous mode [ 2281.340459][ T2760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9754'. [ 2281.576171][T31623] gp8psk: usb in 137 operation failed. [ 2281.576193][T31623] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2281.576236][T31623] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2281.611496][T31623] usb 7-1: USB disconnect, device number 20 [ 2282.646868][ T2772] syz.3.9756 (2772) used greatest stack depth: 17032 bytes left [ 2283.612752][ T2793] fuse: Bad value for 'user_id' [ 2283.612776][ T2793] fuse: Bad value for 'user_id' [ 2283.781485][ T693] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 2284.015614][T27706] Bluetooth: hci4: unexpected event for opcode 0x080c [ 2284.048373][ T693] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2284.048408][ T693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2284.051670][ T693] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2284.051698][ T693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2284.051718][ T693] usb 4-1: Product: syz [ 2284.051740][ T693] usb 4-1: Manufacturer: syz [ 2284.051754][ T693] usb 4-1: SerialNumber: syz [ 2284.073521][ T2808] binder_alloc: 2804: binder_alloc_buf size -208 failed, no address space [ 2284.073540][ T2808] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2284.076003][ T2808] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.132014][ T2810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9766'. [ 2284.156585][ T693] usb 4-1: config 0 descriptor?? [ 2284.158112][ T2787] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2284.189736][ T2810] macvlan3: entered allmulticast mode [ 2284.222839][T27706] Bluetooth: hci3: unexpected event for opcode 0x080c [ 2284.273439][ T693] rc_core: IR keymap rc-streamzap not found [ 2284.273458][ T693] Registered IR keymap rc-empty [ 2284.314444][ T693] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2284.330485][ T693] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input118 [ 2284.455699][ T693] usb 4-1: USB disconnect, device number 77 [ 2284.590884][ T2820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9767'. [ 2284.590908][ T2820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9767'. [ 2284.590936][ T2820] netlink: 'syz.0.9767': attribute type 11 has an invalid length. [ 2285.033359][ T5729] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2285.107479][ T2827] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20000 [ 2285.305655][ T2834] FAULT_INJECTION: forcing a failure. [ 2285.305655][ T2834] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2285.305691][ T2834] CPU: 1 UID: 0 PID: 2834 Comm: syz.3.9773 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2285.305720][ T2834] Tainted: [L]=SOFTLOCKUP [ 2285.305728][ T2834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2285.305739][ T2834] Call Trace: [ 2285.305747][ T2834] [ 2285.305755][ T2834] dump_stack_lvl+0xe8/0x150 [ 2285.305783][ T2834] should_fail_ex+0x46b/0x600 [ 2285.305816][ T2834] prepare_alloc_pages+0x22a/0x6b0 [ 2285.305848][ T2834] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2285.305876][ T2834] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2285.305904][ T2834] ? __pfx_policy_nodemask+0x10/0x10 [ 2285.305928][ T2834] ? trace_kmalloc+0x2a/0xf0 [ 2285.305949][ T2834] ? __pfx__copy_from_iter+0x10/0x10 [ 2285.305980][ T2834] alloc_pages_mpol+0xd1/0x380 [ 2285.306006][ T2834] alloc_pages_noprof+0xd2/0x2f0 [ 2285.306032][ T2834] af_alg_sendmsg+0x144c/0x2660 [ 2285.306052][ T2834] ? __lock_acquire+0x6b5/0x2cf0 [ 2285.306096][ T2834] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 2285.306119][ T2834] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 2285.306157][ T2834] ? skcipher_sendmsg+0x26/0xf0 [ 2285.306183][ T2834] ____sys_sendmsg+0x94c/0x9c0 [ 2285.306212][ T2834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2285.306243][ T2834] ? import_iovec+0x73/0xa0 [ 2285.306267][ T2834] ___sys_sendmsg+0x2a5/0x360 [ 2285.306288][ T2834] ? __lock_acquire+0x6b5/0x2cf0 [ 2285.306316][ T2834] ? __pfx____sys_sendmsg+0x10/0x10 [ 2285.306342][ T2834] ? kstrtouint+0x6e/0xe0 [ 2285.306393][ T2834] ? __fget_files+0x2a/0x420 [ 2285.306418][ T2834] ? __fget_files+0x3a6/0x420 [ 2285.306454][ T2834] __sys_sendmmsg+0x282/0x4e0 [ 2285.306481][ T2834] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2285.306511][ T2834] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2285.306550][ T2834] ? ksys_write+0x248/0x270 [ 2285.306574][ T2834] ? __pfx_ksys_write+0x10/0x10 [ 2285.306606][ T2834] __x64_sys_sendmmsg+0xa0/0xc0 [ 2285.306628][ T2834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2285.306648][ T2834] do_syscall_64+0x15f/0xf80 [ 2285.306666][ T2834] ? trace_irq_disable+0x3b/0x140 [ 2285.306688][ T2834] ? clear_bhb_loop+0x40/0x90 [ 2285.306710][ T2834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2285.306729][ T2834] RIP: 0033:0x7f02f480cdd9 [ 2285.306747][ T2834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2285.306764][ T2834] RSP: 002b:00007f02f2a45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2285.306785][ T2834] RAX: ffffffffffffffda RBX: 00007f02f4a86090 RCX: 00007f02f480cdd9 [ 2285.306799][ T2834] RDX: 04924924924924b9 RSI: 0000200000000400 RDI: 0000000000000006 [ 2285.306812][ T2834] RBP: 00007f02f2a45090 R08: 0000000000000000 R09: 0000000000000000 [ 2285.306824][ T2834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2285.306836][ T2834] R13: 00007f02f4a86128 R14: 00007f02f4a86090 R15: 00007ffc799fbfc8 [ 2285.306867][ T2834] [ 2285.378283][ T5729] usb 7-1: too many configurations: 168, using maximum allowed: 8 [ 2285.439848][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 2285.439864][ T36] audit: type=1400 audit(1777190600.273:1169): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=2837 comm="syz.0.9774" dest=20004 [ 2285.447014][ T2839] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9774'. [ 2285.449504][ T2839] sctp: [Deprecated]: syz.0.9774 (pid 2839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2285.449504][ T2839] Use struct sctp_sack_info instead [ 2285.807067][ T5729] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2285.807098][ T5729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2285.807120][ T5729] usb 7-1: Product: syz [ 2285.807135][ T5729] usb 7-1: Manufacturer: syz [ 2285.807150][ T5729] usb 7-1: SerialNumber: syz [ 2286.161893][T27706] Bluetooth: hci4: unexpected event for opcode 0x080c [ 2286.402603][ T5729] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2286.402655][ T5729] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2286.732063][ T2861] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9779'. [ 2286.732085][ T2861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9779'. [ 2286.880160][ T2825] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9770'. [ 2287.879597][ T5729] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 2287.879711][ T5729] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2287.880657][ T5729] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2287.934910][ T5729] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 2288.295113][ T2825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2288.297562][ T2825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2288.311904][ T693] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 2288.476365][ T693] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2288.476400][ T693] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2288.506489][ T693] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2288.506519][ T693] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2288.506540][ T693] usb 8-1: Product: syz [ 2288.506554][ T693] usb 8-1: Manufacturer: syz [ 2288.506569][ T693] usb 8-1: SerialNumber: syz [ 2288.551477][ T693] usb 8-1: config 0 descriptor?? [ 2288.552653][ T2875] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 2288.739342][ T693] rc_core: IR keymap rc-streamzap not found [ 2288.739361][ T693] Registered IR keymap rc-empty [ 2288.749264][ T693] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 2288.780291][ T693] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input119 [ 2288.819724][ T693] usb 8-1: USB disconnect, device number 10 [ 2288.860011][ T2896] FAULT_INJECTION: forcing a failure. [ 2288.860011][ T2896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2288.860045][ T2896] CPU: 1 UID: 0 PID: 2896 Comm: syz.3.9785 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2288.860072][ T2896] Tainted: [L]=SOFTLOCKUP [ 2288.860080][ T2896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2288.860092][ T2896] Call Trace: [ 2288.860100][ T2896] [ 2288.860109][ T2896] dump_stack_lvl+0xe8/0x150 [ 2288.860137][ T2896] should_fail_ex+0x46b/0x600 [ 2288.860171][ T2896] prepare_alloc_pages+0x22a/0x6b0 [ 2288.860210][ T2896] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2288.860239][ T2896] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2288.860268][ T2896] ? __pfx_policy_nodemask+0x10/0x10 [ 2288.860291][ T2896] ? finish_task_switch+0x41f/0xbe0 [ 2288.860319][ T2896] ? rcu_is_watching+0x15/0xb0 [ 2288.860349][ T2896] alloc_pages_mpol+0xd1/0x380 [ 2288.860376][ T2896] alloc_pages_noprof+0xd2/0x2f0 [ 2288.860401][ T2896] pte_alloc_one+0x22/0x380 [ 2288.860428][ T2896] __do_fault+0xd1/0x2a0 [ 2288.860454][ T2896] do_pte_missing+0x65b/0x2950 [ 2288.860484][ T2896] ? mt_find+0x481/0x630 [ 2288.860510][ T2896] handle_mm_fault+0xd0a/0x13c0 [ 2288.860538][ T2896] ? handle_mm_fault+0xe7/0x13c0 [ 2288.860562][ T2896] ? __pfx_handle_mm_fault+0x10/0x10 [ 2288.860603][ T2896] ? lock_mm_and_find_vma+0xa7/0x340 [ 2288.860630][ T2896] do_user_addr_fault+0x75b/0x1340 [ 2288.860666][ T2896] exc_page_fault+0x6a/0xc0 [ 2288.860695][ T2896] asm_exc_page_fault+0x26/0x30 [ 2288.860714][ T2896] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 2288.860738][ T2896] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 2288.860755][ T2896] RSP: 0018:ffffc9000758fe80 EFLAGS: 00050206 [ 2288.860772][ T2896] RAX: ffffffff84a14601 RBX: 0000000000000068 RCX: 0000000000000068 [ 2288.860786][ T2896] RDX: 0000000000000000 RSI: ffff88809ac76000 RDI: 0000200000001180 [ 2288.860799][ T2896] RBP: ffff88809ac76000 R08: ffff88809ac76067 R09: 1ffff1101358ec0c [ 2288.860813][ T2896] R10: dffffc0000000000 R11: ffffed101358ec0d R12: 00002000000011e8 [ 2288.860827][ T2896] R13: 00007ffffffff000 R14: ffff88809ac76000 R15: 0000200000001180 [ 2288.860849][ T2896] ? _copy_to_user+0x21/0xb0 [ 2288.860876][ T2896] _copy_to_user+0x8a/0xb0 [ 2288.860898][ T2896] __se_sys_modify_ldt+0x15d/0x310 [ 2288.860924][ T2896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2288.860944][ T2896] do_syscall_64+0x15f/0xf80 [ 2288.860961][ T2896] ? trace_irq_disable+0x3b/0x140 [ 2288.860983][ T2896] ? clear_bhb_loop+0x40/0x90 [ 2288.861006][ T2896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2288.861025][ T2896] RIP: 0033:0x7f02f480cdd9 [ 2288.861042][ T2896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2288.861058][ T2896] RSP: 002b:00007f02f2a66028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 2288.861077][ T2896] RAX: ffffffffffffffda RBX: 00007f02f4a85fa0 RCX: 00007f02f480cdd9 [ 2288.861091][ T2896] RDX: 0000000000001002 RSI: 0000200000001180 RDI: 0000000000000000 [ 2288.861103][ T2896] RBP: 00007f02f2a66090 R08: 0000000000000000 R09: 0000000000000000 [ 2288.861115][ T2896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2288.861127][ T2896] R13: 00007f02f4a86038 R14: 00007f02f4a85fa0 R15: 00007ffc799fbfc8 [ 2288.861159][ T2896] [ 2289.272658][ T2901] netlink: 'syz.5.9787': attribute type 14 has an invalid length. [ 2289.338488][ T2786] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2289.389131][ T2908] Bluetooth: hci0: unsupported parameter 255 [ 2289.389152][ T2908] Bluetooth: hci0: unsupported parameter 255 [ 2289.487441][T26203] usb 7-1: USB disconnect, device number 21 [ 2289.498769][ T2786] usb 4-1: Using ep0 maxpacket: 8 [ 2289.501475][ T2786] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2289.502799][ T2786] usb 4-1: config 129 interface 0 has no altsetting 0 [ 2289.532841][ T2786] usb 4-1: New USB device found, idVendor=1c73, idProduct=861f, bcdDevice=a1.3b [ 2289.532869][ T2786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2289.532889][ T2786] usb 4-1: Product: syz [ 2289.532904][ T2786] usb 4-1: Manufacturer: syz [ 2289.532918][ T2786] usb 4-1: SerialNumber: syz [ 2289.593431][ T36] audit: type=1326 audit(1777190604.147:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2912 comm="syz.7.9790" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8685fdcdd9 code=0x0 [ 2289.647244][ T36] audit: type=1326 audit(1777190604.203:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2912 comm="syz.7.9790" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8685fdcdd9 code=0x0 [ 2290.216497][ T2919] tmpfs: Cannot disable swap on remount [ 2290.737916][ T2786] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state [ 2290.737958][ T2786] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2290.738043][ T2786] dvb_usb_anysee 4-1:129.0: probe with driver dvb_usb_anysee failed with error -22 [ 2290.742184][ T2918] netlink: 'syz.5.9792': attribute type 8 has an invalid length. [ 2290.995690][ T2786] usb 4-1: USB disconnect, device number 78 [ 2292.235394][ T2923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9793'. [ 2293.347741][ T2936] kAFS: unable to lookup cell '/,' [ 2293.484986][ T36] audit: type=1326 audit(1777190607.787:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2937 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4e70cdd9 code=0x7ffc0000 [ 2293.485035][ T36] audit: type=1326 audit(1777190607.796:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2937 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4e70cdd9 code=0x7ffc0000 [ 2293.488962][ T36] audit: type=1326 audit(1777190607.796:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2937 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4e70cdd9 code=0x7ffc0000 [ 2293.489438][ T36] audit: type=1326 audit(1777190607.796:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2937 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4e70cdd9 code=0x7ffc0000 [ 2293.489483][ T36] audit: type=1326 audit(1777190607.796:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2937 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b4e70cdd9 code=0x7ffc0000 [ 2293.489522][ T36] audit: type=1326 audit(1777190607.796:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2937 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4e70cdd9 code=0x7ffc0000 [ 2293.489561][ T36] audit: type=1326 audit(1777190607.796:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2937 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4e70cdd9 code=0x7ffc0000 [ 2293.492111][ T36] audit: type=1326 audit(1777190607.796:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2937 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4e70cdd9 code=0x7ffc0000 [ 2293.492155][ T36] audit: type=1326 audit(1777190607.796:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2937 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4e70cdd9 code=0x7ffc0000 [ 2293.492197][ T36] audit: type=1326 audit(1777190607.796:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2937 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b4e70cdd9 code=0x7ffc0000 [ 2293.731746][ T2942] netlink: 'syz.3.9800': attribute type 1 has an invalid length. [ 2293.784821][ T2942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2294.007150][ T2942] bond1: (slave erspan0): making interface the new active one [ 2294.143982][ T2942] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 2294.398298][ T2957] fuse: Bad value for 'group_id' [ 2294.398340][ T2957] fuse: Bad value for 'group_id' [ 2295.599761][ T2968] netlink: 'syz.6.9807': attribute type 2 has an invalid length. [ 2295.599782][ T2968] netlink: 'syz.6.9807': attribute type 1 has an invalid length. [ 2295.600344][ T2968] netlink: 'syz.6.9807': attribute type 1 has an invalid length. [ 2295.691346][ T2968] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9807'. [ 2295.755225][ T2977] netlink: 'syz.7.9810': attribute type 13 has an invalid length. [ 2295.802941][ T2786] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2296.126972][ T2786] usb 4-1: Using ep0 maxpacket: 32 [ 2297.471539][ T2786] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2297.471572][ T2786] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2297.471604][ T2786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2297.519426][ T2786] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 2297.519456][ T2786] usb 4-1: New USB device strings: Mfr=12, Product=0, SerialNumber=0 [ 2297.519475][ T2786] usb 4-1: Manufacturer: syz [ 2297.622246][ T2786] usb 4-1: config 0 descriptor?? [ 2297.650170][ T2786] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 2297.650183][ T2786] usbhid 4-1:0.0: can't add hid device: -22 [ 2297.650247][ T2786] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 2297.679110][ T2992] 8021q: VLANs not supported on wg2 [ 2298.115143][ T2999] fuse: Bad value for 'group_id' [ 2298.115164][ T2999] fuse: Bad value for 'group_id' [ 2299.223432][ T3010] netlink: 840 bytes leftover after parsing attributes in process `syz.0.9818'. [ 2299.561403][ T3009] FAULT_INJECTION: forcing a failure. [ 2299.561403][ T3009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2299.561439][ T3009] CPU: 1 UID: 0 PID: 3009 Comm: syz.7.9819 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2299.561465][ T3009] Tainted: [L]=SOFTLOCKUP [ 2299.561472][ T3009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2299.561483][ T3009] Call Trace: [ 2299.561491][ T3009] [ 2299.561500][ T3009] dump_stack_lvl+0xe8/0x150 [ 2299.561525][ T3009] should_fail_ex+0x46b/0x600 [ 2299.561559][ T3009] _copy_from_user+0x2d/0xb0 [ 2299.561581][ T3009] kstrtouint_from_user+0xd6/0x180 [ 2299.561610][ T3009] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2299.561668][ T3009] proc_fail_nth_write+0x8e/0x210 [ 2299.561697][ T3009] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2299.561730][ T3009] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2299.561759][ T3009] vfs_write+0x2a3/0xba0 [ 2299.561790][ T3009] ? __pfx_vfs_write+0x10/0x10 [ 2299.561817][ T3009] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2299.561845][ T3009] ? lockdep_hardirqs_on+0x7a/0x110 [ 2299.561871][ T3009] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2299.561903][ T3009] ? mutex_lock_nested+0x152/0x1d0 [ 2299.561925][ T3009] ? fdget_pos+0x252/0x320 [ 2299.561952][ T3009] ksys_write+0x156/0x270 [ 2299.561976][ T3009] ? __pfx_ksys_write+0x10/0x10 [ 2299.562006][ T3009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2299.562027][ T3009] do_syscall_64+0x15f/0xf80 [ 2299.562045][ T3009] ? trace_irq_disable+0x3b/0x140 [ 2299.562068][ T3009] ? clear_bhb_loop+0x40/0x90 [ 2299.562092][ T3009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2299.562111][ T3009] RIP: 0033:0x7f8685f9d60e [ 2299.562129][ T3009] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2299.562146][ T3009] RSP: 002b:00007f868422dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2299.562166][ T3009] RAX: ffffffffffffffda RBX: 00007f868422e6c0 RCX: 00007f8685f9d60e [ 2299.562180][ T3009] RDX: 0000000000000001 RSI: 00007f868422e0a0 RDI: 0000000000000005 [ 2299.562193][ T3009] RBP: 00007f868422e090 R08: 0000000000000000 R09: 0000000000000000 [ 2299.562204][ T3009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2299.562216][ T3009] R13: 00007f8686256038 R14: 00007f8686255fa0 R15: 00007fff8ef61f88 [ 2299.562249][ T3009] [ 2299.901724][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 2299.901785][ T36] audit: type=1326 audit(1777190613.776:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2964 comm="syz.3.9806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02f480cdd9 code=0x0 [ 2300.541573][ T3022] fuse: Bad value for 'fd' [ 2300.601409][ T3023] netlink: 'syz.6.9821': attribute type 13 has an invalid length. [ 2300.629842][ T3028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9823'. [ 2300.629892][ T3028] FAULT_INJECTION: forcing a failure. [ 2300.629892][ T3028] name failslab, interval 1, probability 0, space 0, times 0 [ 2300.629921][ T3028] CPU: 1 UID: 0 PID: 3028 Comm: syz.0.9823 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2300.629948][ T3028] Tainted: [L]=SOFTLOCKUP [ 2300.629955][ T3028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2300.629966][ T3028] Call Trace: [ 2300.629973][ T3028] [ 2300.629982][ T3028] dump_stack_lvl+0xe8/0x150 [ 2300.630009][ T3028] should_fail_ex+0x46b/0x600 [ 2300.630043][ T3028] should_failslab+0xa8/0x100 [ 2300.630065][ T3028] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 2300.630086][ T3028] ? __alloc_skb+0x1d0/0x7d0 [ 2300.630104][ T3028] ? lockdep_hardirqs_on+0x7a/0x110 [ 2300.630135][ T3028] __alloc_skb+0x1d0/0x7d0 [ 2300.630158][ T3028] netlink_dump+0x1d8/0xe10 [ 2300.630190][ T3028] ? __pfx_netlink_dump+0x10/0x10 [ 2300.630220][ T3028] ? nla_strdup+0xb8/0x140 [ 2300.630242][ T3028] ? nf_tables_dump_rules_start+0x171/0x1f0 [ 2300.630265][ T3028] __netlink_dump_start+0x5cb/0x7e0 [ 2300.630290][ T3028] ? nft_netlink_dump_start_rcu+0xb6/0x1a0 [ 2300.630317][ T3028] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 2300.630361][ T3028] nf_tables_getrule+0x1f5/0xb90 [ 2300.630398][ T3028] ? __pfx_nf_tables_getrule+0x10/0x10 [ 2300.630421][ T3028] ? nfnl_pernet+0x23/0x240 [ 2300.630448][ T3028] ? __pfx_nf_tables_dump_rules_start+0x10/0x10 [ 2300.630466][ T3028] ? __pfx_nf_tables_dump_rules+0x10/0x10 [ 2300.630483][ T3028] ? __pfx_nf_tables_dump_rules_done+0x10/0x10 [ 2300.630507][ T3028] ? __nla_parse+0x40/0x60 [ 2300.630526][ T3028] ? __pfx_nf_tables_getrule+0x10/0x10 [ 2300.630552][ T3028] nfnetlink_rcv_msg+0x8a6/0x1260 [ 2300.630570][ T3028] ? arch_stack_walk+0xfb/0x150 [ 2300.630592][ T3028] ? nfnetlink_rcv_msg+0x230/0x1260 [ 2300.630631][ T3028] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2300.630699][ T3028] netlink_rcv_skb+0x232/0x4b0 [ 2300.630719][ T3028] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2300.630740][ T3028] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2300.630758][ T3028] ? rcu_is_watching+0x15/0xb0 [ 2300.630801][ T3028] ? bpf_lsm_capable+0x9/0x20 [ 2300.630824][ T3028] ? security_capable+0x7e/0x2c0 [ 2300.630857][ T3028] nfnetlink_rcv+0x2c0/0x27b0 [ 2300.630887][ T3028] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 2300.630908][ T3028] ? lockdep_hardirqs_on+0x7a/0x110 [ 2300.630934][ T3028] ? __dev_queue_xmit+0x2b3/0x3900 [ 2300.630958][ T3028] ? __dev_queue_xmit+0x1eaf/0x3900 [ 2300.630979][ T3028] ? __netlink_deliver_tap+0x404/0x850 [ 2300.630998][ T3028] ? netlink_deliver_tap+0x19c/0x1b0 [ 2300.631015][ T3028] ? netlink_unicast+0x754/0x920 [ 2300.631049][ T3028] ? __dev_queue_xmit+0x2b3/0x3900 [ 2300.631077][ T3028] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2300.631110][ T3028] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2300.631140][ T3028] ? ref_tracker_free+0x673/0x820 [ 2300.631164][ T3028] ? __pfx_ref_tracker_free+0x10/0x10 [ 2300.631181][ T3028] ? __asan_memcpy+0x40/0x70 [ 2300.631205][ T3028] ? __skb_clone+0x63/0x7a0 [ 2300.631231][ T3028] ? __skb_clone+0x483/0x7a0 [ 2300.631259][ T3028] ? skb_clone+0x246/0x3a0 [ 2300.631281][ T3028] ? __netlink_deliver_tap+0x807/0x850 [ 2300.631300][ T3028] ? netlink_deliver_tap+0x2e/0x1b0 [ 2300.631324][ T3028] ? netlink_deliver_tap+0x2e/0x1b0 [ 2300.631342][ T3028] ? netlink_deliver_tap+0x2e/0x1b0 [ 2300.631366][ T3028] netlink_unicast+0x780/0x920 [ 2300.631402][ T3028] netlink_sendmsg+0x813/0xb40 [ 2300.631431][ T3028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2300.631453][ T3028] ? unwind_get_return_address+0x4d/0x90 [ 2300.631480][ T3028] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2300.631505][ T3028] ____sys_sendmsg+0x94c/0x9c0 [ 2300.631532][ T3028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2300.631562][ T3028] ? import_iovec+0x73/0xa0 [ 2300.631586][ T3028] ___sys_sendmsg+0x2a5/0x360 [ 2300.631606][ T3028] ? __lock_acquire+0x6b5/0x2cf0 [ 2300.631635][ T3028] ? __pfx____sys_sendmsg+0x10/0x10 [ 2300.631691][ T3028] ? __fget_files+0x2a/0x420 [ 2300.631717][ T3028] ? __fget_files+0x3a6/0x420 [ 2300.631752][ T3028] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2300.631783][ T3028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2300.631814][ T3028] ? __pfx_ksys_write+0x10/0x10 [ 2300.631844][ T3028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2300.631865][ T3028] do_syscall_64+0x15f/0xf80 [ 2300.631881][ T3028] ? trace_irq_disable+0x3b/0x140 [ 2300.631903][ T3028] ? clear_bhb_loop+0x40/0x90 [ 2300.631927][ T3028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2300.631945][ T3028] RIP: 0033:0x7fc16b48cdd9 [ 2300.631964][ T3028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2300.631980][ T3028] RSP: 002b:00007fc1696e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2300.632001][ T3028] RAX: ffffffffffffffda RBX: 00007fc16b705fa0 RCX: 00007fc16b48cdd9 [ 2300.632015][ T3028] RDX: 0000000000044054 RSI: 0000200000000000 RDI: 0000000000000003 [ 2300.632028][ T3028] RBP: 00007fc1696e6090 R08: 0000000000000000 R09: 0000000000000000 [ 2300.632041][ T3028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2300.632053][ T3028] R13: 00007fc16b706038 R14: 00007fc16b705fa0 R15: 00007ffe80be7888 [ 2300.632086][ T3028] [ 2301.632015][ T3033] lo speed is unknown, defaulting to 1000 [ 2301.662853][ T36] audit: type=1326 audit(1777190615.451:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3032 comm="syz.6.9824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ca2e6cdd9 code=0x0 [ 2301.863804][T26203] usb 4-1: USB disconnect, device number 79 [ 2301.867940][ T3035] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 2301.994156][ T3038] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9827'. [ 2303.069338][ T693] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 2303.233539][ T693] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 2303.233569][ T693] usb 1-1: config 0 has no interface number 0 [ 2303.233616][ T693] usb 1-1: config 0 interface 41 has no altsetting 0 [ 2303.236695][ T693] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2303.236803][ T693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2303.236825][ T693] usb 1-1: Product: syz [ 2303.236841][ T693] usb 1-1: Manufacturer: syz [ 2303.236855][ T693] usb 1-1: SerialNumber: syz [ 2303.314194][ T693] usb 1-1: config 0 descriptor?? [ 2304.002798][ T3063] netlink: 'syz.5.9834': attribute type 13 has an invalid length. [ 2304.286243][ T3067] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 2304.286271][ T3067] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2304.596953][ T5729] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 2305.115793][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 2305.144558][ T3067] vhci_hcd vhci_hcd.0: Device attached [ 2305.250959][ T3076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2305.283522][ T693] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 2305.291735][ T3076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2305.302707][ T5729] usb 8-1: Using ep0 maxpacket: 32 [ 2305.305954][ T5729] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2305.305992][ T5729] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2305.306030][ T5729] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2305.306051][ T5729] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2305.379948][ T5729] usb 8-1: config 0 descriptor?? [ 2305.396012][ T693] usb 1-1: USB disconnect, device number 119 [ 2305.409864][T26203] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 2305.414456][ T5729] hub 8-1:0.0: USB hub found [ 2305.704249][ T5729] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 2305.725482][ T5729] usbhid 8-1:0.0: can't add hid device: -71 [ 2305.725597][ T5729] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2305.764363][ T5729] usb 8-1: USB disconnect, device number 11 [ 2306.050716][ T5701] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2307.290912][ T5701] usb 1-1: Using ep0 maxpacket: 32 [ 2307.750130][ T5701] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2307.750163][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2307.762783][ T5701] usb 1-1: config 0 descriptor?? [ 2307.786628][ T3071] vhci_hcd: connection reset by peer [ 2307.811347][ T1014] vhci_hcd vhci_hcd.7: stop threads [ 2307.811370][ T1014] vhci_hcd vhci_hcd.7: release socket [ 2307.811431][ T1014] vhci_hcd vhci_hcd.7: disconnect device [ 2308.071273][ T5701] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2308.083095][ T5701] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2308.091091][ T5701] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2308.091142][ T5701] usb 1-1: media controller created [ 2308.282272][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2308.462470][ T3108] netlink: 'syz.5.9846': attribute type 14 has an invalid length. [ 2308.604434][ T3112] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9847'. [ 2309.189330][ T5701] az6027: usb out operation failed. (-71) [ 2309.189350][ T5701] stb0899_attach: Driver disabled by Kconfig [ 2309.189360][ T5701] az6027: no front-end attached [ 2309.189360][ T5701] [ 2309.189825][ T5701] az6027: usb out operation failed. (-71) [ 2309.189835][ T5701] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2309.191884][ T5701] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input120 [ 2309.247941][ T5701] dvb-usb: schedule remote query interval to 400 msecs. [ 2309.247964][ T5701] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2309.276244][ T5701] usb 1-1: USB disconnect, device number 120 [ 2309.356857][ T3125] FAULT_INJECTION: forcing a failure. [ 2309.356857][ T3125] name failslab, interval 1, probability 0, space 0, times 0 [ 2309.356880][ T3125] CPU: 0 UID: 0 PID: 3125 Comm: syz.6.9850 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2309.356896][ T3125] Tainted: [L]=SOFTLOCKUP [ 2309.356900][ T3125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2309.356906][ T3125] Call Trace: [ 2309.356911][ T3125] [ 2309.356916][ T3125] dump_stack_lvl+0xe8/0x150 [ 2309.356932][ T3125] should_fail_ex+0x46b/0x600 [ 2309.356952][ T3125] should_failslab+0xa8/0x100 [ 2309.356966][ T3125] __kmalloc_noprof+0xdf/0x7b0 [ 2309.356978][ T3125] ? sock_kmalloc+0xd6/0x160 [ 2309.356994][ T3125] sock_kmalloc+0xd6/0x160 [ 2309.357007][ T3125] skcipher_recvmsg+0x517/0x1140 [ 2309.357031][ T3125] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2309.357043][ T3125] ? __lock_acquire+0x6b5/0x2cf0 [ 2309.357063][ T3125] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2309.357083][ T3125] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 2309.357102][ T3125] ? security_socket_recvmsg+0x7e/0x2c0 [ 2309.357116][ T3125] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2309.357129][ T3125] sock_recvmsg+0x172/0x1b0 [ 2309.357145][ T3125] ____sys_recvmsg+0x1f2/0x4b0 [ 2309.357162][ T3125] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2309.357182][ T3125] ? import_iovec+0x73/0xa0 [ 2309.357195][ T3125] ___sys_recvmsg+0x215/0x590 [ 2309.357206][ T3125] ? get_pid_task+0x20/0x1f0 [ 2309.357222][ T3125] ? __pfx____sys_recvmsg+0x10/0x10 [ 2309.357240][ T3125] ? __fget_files+0x2a/0x420 [ 2309.357282][ T3125] ? __fget_files+0x3a6/0x420 [ 2309.357305][ T3125] __x64_sys_recvmsg+0x1c0/0x2a0 [ 2309.357319][ T3125] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 2309.357336][ T3125] ? __pfx_ksys_write+0x10/0x10 [ 2309.357352][ T3125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2309.357363][ T3125] do_syscall_64+0x15f/0xf80 [ 2309.357373][ T3125] ? trace_irq_disable+0x3b/0x140 [ 2309.357386][ T3125] ? clear_bhb_loop+0x40/0x90 [ 2309.357399][ T3125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2309.357409][ T3125] RIP: 0033:0x7f3ca2e6cdd9 [ 2309.357420][ T3125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2309.357429][ T3125] RSP: 002b:00007f3ca10c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2309.357441][ T3125] RAX: ffffffffffffffda RBX: 00007f3ca30e5fa0 RCX: 00007f3ca2e6cdd9 [ 2309.357449][ T3125] RDX: 0000000000000101 RSI: 0000200000000100 RDI: 0000000000000005 [ 2309.357456][ T3125] RBP: 00007f3ca10c6090 R08: 0000000000000000 R09: 0000000000000000 [ 2309.357463][ T3125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2309.357469][ T3125] R13: 00007f3ca30e6038 R14: 00007f3ca30e5fa0 R15: 00007ffc469a5bf8 [ 2309.357485][ T3125] [ 2309.362260][ T3114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9848'. [ 2309.734595][ T5701] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2310.880401][T26203] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 2311.130973][ T3134] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9852'. [ 2311.436940][ T3135] syzkaller0: entered promiscuous mode [ 2311.436957][ T3135] syzkaller0: entered allmulticast mode [ 2311.607925][ T3142] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9856'. [ 2311.709612][ T3137] simple: basic_2 [ 2311.709699][ T3137] simple: basic_4 [ 2311.709713][ T3137] simple: basic_6 [ 2311.709725][ T3137] simple: basic_8 [ 2311.709738][ T3137] simple: basic_10 [ 2311.709751][ T3137] simple: basic_12 [ 2311.709764][ T3137] simple: basic_14 [ 2311.709776][ T3137] simple: basic_16 [ 2311.709789][ T3137] simple: basic_18 [ 2311.709802][ T3137] simple: basic_20 [ 2311.709815][ T3137] simple: basic_22 [ 2311.709828][ T3137] simple: basic_24 [ 2311.709840][ T3137] simple: basic_26 [ 2311.709853][ T3137] simple: basic_28 [ 2311.709865][ T3137] simple: basic_30 [ 2311.709878][ T3137] simple: basic_32 [ 2311.709890][ T3137] simple: basic_34 [ 2311.709903][ T3137] 0: reclassify loop, rule prio 0, protocol 800 [ 2312.981068][ T3147] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2313.232346][ T36] audit: type=1400 audit(1777190626.260:1225): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=3170 comm="syz.0.9864" daddr=fc00:: dest=20001 [ 2313.488293][ T3180] netlink: 'syz.0.9866': attribute type 1 has an invalid length. [ 2313.488314][ T3180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9866'. [ 2313.693205][ T3180] bridge0: port 2(bridge_slave_1) entered disabled state [ 2313.698301][ T3180] bridge0: port 1(bridge_slave_0) entered disabled state [ 2314.596190][ T3204] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9876'. [ 2314.772010][ T3204] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 2314.775150][ T3206] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9873'. [ 2316.240743][ T3222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9881'. [ 2317.524315][ T3271] netlink: 17 bytes leftover after parsing attributes in process `syz.3.9893'. [ 2317.822630][ T3275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9893'. [ 2318.003234][ T3277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9893'. [ 2318.945104][ T36] audit: type=1400 audit(1777190631.613:1226): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=3283 comm="syz.3.9898" daddr=fc01::1 dest=20003 [ 2320.193411][ T3322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9911'. [ 2321.652863][ T3372] RDS: rds_bind could not find a transport for ::a00:0:0:0, load rds_tcp or rds_rdma? [ 2322.037704][ T3370] lo speed is unknown, defaulting to 1000 [ 2324.885550][ T3451] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.9957'. [ 2325.003256][ T3453] lo speed is unknown, defaulting to 1000 [ 2326.265754][ T36] audit: type=1400 audit(1777190638.472:1227): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=3479 comm="syz.0.9968" daddr=::ffff:172.20.20.170 [ 2326.310408][ T3478] tipc: Can't bind to reserved service type 2 [ 2326.569334][ T3485] netlink: 'syz.7.9955': attribute type 3 has an invalid length. [ 2326.608542][ T3454] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2328.786933][ T3550] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9998'. [ 2329.583303][ T36] audit: type=1400 audit(1777190641.579:1228): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=3565 comm="syz.6.10004" daddr=::ffff:172.20.20.170 [ 2329.914144][ T3576] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10009'. [ 2329.951986][ T3580] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.10011'. [ 2330.677930][ T36] audit: type=1400 audit(1777190642.599:1229): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=3600 comm="syz.7.10018" daddr=::ffff:172.20.20.170 [ 2331.184689][ T3621] netlink: 'syz.3.10026': attribute type 9 has an invalid length. [ 2331.184711][ T3621] netlink: 212396 bytes leftover after parsing attributes in process `syz.3.10026'. [ 2331.936331][ T3659] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10045'. [ 2333.000898][ T3683] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.10055'. [ 2333.223240][ T36] audit: type=1400 audit(1777190644.976:1230): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=3690 comm="syz.5.10060" daddr=::ffff:172.20.20.170 [ 2333.748946][ T36] audit: type=1400 audit(1777190645.472:1231): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=3713 comm="syz.5.10070" daddr=fc00:: dest=20000 [ 2334.599051][ T3736] netlink: 120 bytes leftover after parsing attributes in process `syz.6.10079'. [ 2334.640036][ T3739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10080'. [ 2334.642308][ T3739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10080'. [ 2335.060756][ T3758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10089'. [ 2335.194058][ T3762] netlink: 'syz.0.10091': attribute type 9 has an invalid length. [ 2335.194082][ T3762] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10091'. [ 2337.012043][ T3807] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10113'. [ 2337.936975][ T3846] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10131'. [ 2338.609139][ T36] audit: type=1400 audit(1777190650.020:1232): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=3869 comm="syz.3.10143" daddr=fc00:: dest=20000 [ 2338.673763][ T3874] openvswitch: netlink: EtherType 0 is less than min 600 [ 2338.713521][ T3874] netlink: 120 bytes leftover after parsing attributes in process `syz.5.10146'. [ 2338.713544][ T3874] netlink: 'syz.5.10146': attribute type 1 has an invalid length. [ 2338.713557][ T3874] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10146'. [ 2338.796066][ T3881] netlink: 120 bytes leftover after parsing attributes in process `syz.3.10148'. [ 2340.641605][ T3950] __nla_validate_parse: 1 callbacks suppressed [ 2340.641625][ T3950] netlink: 120 bytes leftover after parsing attributes in process `syz.3.10180'. [ 2340.839562][ T3955] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10183'. [ 2341.035731][ T3967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10188'. [ 2341.089742][ T3969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10188'. [ 2341.208396][ T3975] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10188'. [ 2341.209380][ T36] audit: type=1400 audit(1777190652.462:1233): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=3971 comm="syz.0.10190" daddr=fc00:: dest=20000 [ 2341.786796][ T3988] netlink: 120 bytes leftover after parsing attributes in process `syz.3.10196'. [ 2342.332995][ T4000] netlink: 'syz.6.10202': attribute type 9 has an invalid length. [ 2342.333017][ T4000] netlink: 'syz.6.10202': attribute type 11 has an invalid length. [ 2342.333031][ T4000] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.10202'. [ 2342.334064][ T36] audit: type=1400 audit(1777190653.510:1234): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=4001 comm="syz.3.10203" daddr=fc00:: dest=20000 [ 2342.730190][ T4010] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10207'. [ 2343.353832][ T4024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10212'. [ 2343.902468][ T4041] netlink: 'syz.7.10217': attribute type 9 has an invalid length. [ 2343.902491][ T4041] netlink: 'syz.7.10217': attribute type 11 has an invalid length. [ 2343.902505][ T4041] netlink: 190972 bytes leftover after parsing attributes in process `syz.7.10217'. [ 2344.635156][ T4067] netlink: 'syz.6.10229': attribute type 3 has an invalid length. [ 2346.606580][ T36] audit: type=1400 audit(1777190657.497:1235): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=4107 comm="syz.0.10248" daddr=fc00:: dest=20001 [ 2347.423709][ T36] audit: type=1400 audit(1777190658.273:1236): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=4136 comm="syz.3.10261" daddr=fc00:: dest=20001 [ 2348.795920][ T4174] netlink: 'syz.7.10273': attribute type 9 has an invalid length. [ 2348.795946][ T4174] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.10273'. [ 2349.426334][ T4182] netlink: 56 bytes leftover after parsing attributes in process `syz.6.10277'. [ 2349.438034][ T36] audit: type=1400 audit(1777190659.958:1237): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=4177 comm="syz.6.10275" daddr=fc00:: dest=20001 [ 2349.506590][ T36] audit: type=1400 audit(1777190660.220:1238): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=4183 comm="syz.7.10278" daddr=fc00:: dest=20000 [ 2364.789218][ T5727] usb 6-1: USB disconnect, device number 27 [ 2365.471851][ T2151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2365.607551][ T2151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2365.618543][ T2151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2365.622560][ T2151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2365.624980][ T2151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2365.813585][T27706] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2365.875863][T27706] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2365.877667][T27706] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2365.918547][T27706] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2365.929565][T27706] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2366.229922][ T2151] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2366.334218][ T2151] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2366.338126][ T2151] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2366.347757][ T2151] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2366.359757][ T2151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2367.896873][ T2151] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2367.968795][ T2151] Bluetooth: hci1: command tx timeout [ 2367.995850][ T2151] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2368.032141][ T2151] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2368.151424][T31921] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2368.152625][T31921] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2368.239908][T31921] Bluetooth: hci6: command tx timeout [ 2368.579824][T31921] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2368.663844][ T2151] Bluetooth: hci7: command tx timeout [ 2368.688040][T31921] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2368.704661][T31921] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2368.744607][T31921] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2368.745280][T31921] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2370.290436][T27706] Bluetooth: hci1: command tx timeout [ 2370.434557][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 2370.455750][T27706] Bluetooth: hci6: command tx timeout [ 2370.542140][T27706] Bluetooth: hci8: command tx timeout [ 2370.883460][T27706] Bluetooth: hci7: command tx timeout [ 2371.141094][T27706] Bluetooth: hci9: command tx timeout [ 2372.507805][T27706] Bluetooth: hci1: command tx timeout [ 2372.678632][T27706] Bluetooth: hci6: command tx timeout [ 2372.763853][T27706] Bluetooth: hci8: command tx timeout [ 2373.110975][T27706] Bluetooth: hci7: command tx timeout [ 2373.362390][T27706] Bluetooth: hci9: command tx timeout [ 2374.730222][T27706] Bluetooth: hci1: command tx timeout [ 2374.901447][T27706] Bluetooth: hci6: command tx timeout [ 2374.987761][T27706] Bluetooth: hci8: command tx timeout [ 2375.328525][T27706] Bluetooth: hci7: command tx timeout [ 2375.584966][T27706] Bluetooth: hci9: command tx timeout [ 2377.209532][T27706] Bluetooth: hci8: command tx timeout [ 2377.807855][T27706] Bluetooth: hci9: command tx timeout [ 2412.868639][ T693] page_pool_release_retry() stalled pool shutdown: id 223, 50 inflight 60 sec [ 2429.459246][T27706] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2429.532757][T27706] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2429.537210][T27706] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2429.555665][T27706] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2429.556430][T27706] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2429.979841][T27706] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2430.036446][T27706] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2430.038259][T27706] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2430.092043][T27706] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2430.108694][T27706] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2430.232674][T27706] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2430.346609][T27706] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2430.389023][T27706] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2430.391666][T27706] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2430.392344][T27706] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2432.243681][T31921] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2432.321078][T31921] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2432.322937][T31921] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2432.324662][T31921] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2432.325543][T31921] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2432.861029][T31921] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2432.949849][T31921] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2432.984151][T31921] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2433.025172][T31921] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2433.032049][T31921] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2433.134524][T27706] Bluetooth: hci10: command tx timeout [ 2433.210584][ T2151] Bluetooth: hci11: command tx timeout [ 2433.211246][ T2151] Bluetooth: hci12: command tx timeout [ 2435.257037][T31921] Bluetooth: hci13: command tx timeout [ 2435.341274][T31921] Bluetooth: hci10: command tx timeout [ 2435.427023][T27706] Bluetooth: hci12: command tx timeout [ 2435.427054][T27706] Bluetooth: hci11: command tx timeout [ 2435.427255][T31921] Bluetooth: hci14: command tx timeout [ 2435.943603][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 2441.447378][T31921] Bluetooth: hci13: command tx timeout [ 2441.447413][T31921] Bluetooth: hci10: command tx timeout [ 2441.447435][T31921] Bluetooth: hci14: command tx timeout [ 2441.447456][T31921] Bluetooth: hci11: command tx timeout [ 2441.447476][T31921] Bluetooth: hci12: command tx timeout [ 2443.719451][ T2151] Bluetooth: hci11: command tx timeout [ 2443.719501][T27706] Bluetooth: hci12: command tx timeout [ 2443.804627][ T2151] Bluetooth: hci10: command tx timeout [ 2443.804658][ T2151] Bluetooth: hci13: command tx timeout [ 2443.804762][T27706] Bluetooth: hci14: command tx timeout [ 2446.027542][T31921] Bluetooth: hci13: command tx timeout [ 2446.027593][T27706] Bluetooth: hci14: command tx timeout [ 2460.955575][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2460.955594][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P30/2:b..l [ 2460.955621][ C0] rcu: (detected by 0, t=10502 jiffies, g=203029, q=599775 ncpus=2) [ 2460.955642][ C0] task:ksoftirqd/1 state:R running task stack:23752 pid:30 tgid:30 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 2460.955691][ C0] Call Trace: [ 2460.955697][ C0] [ 2460.955710][ C0] __schedule+0x1681/0x54c0 [ 2460.955756][ C0] ? finish_task_switch+0x41f/0xbe0 [ 2460.955785][ C0] ? rcu_is_watching+0x15/0xb0 [ 2460.955810][ C0] ? trace_sched_exit_tp+0x3a/0x130 [ 2460.955849][ C0] ? __pfx___schedule+0x10/0x10 [ 2460.955875][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 2460.955910][ C0] preempt_schedule_irq+0x4d/0xa0 [ 2460.955935][ C0] irqentry_exit+0x14f/0x730 [ 2460.955952][ C0] ? trace_irq_disable+0x3b/0x140 [ 2460.955979][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2460.955999][ C0] RIP: 0010:arp_process+0x60a/0x18a0 [ 2460.956089][ C0] Code: 0f 48 8b 7c 24 10 e8 75 bd 8f f8 48 8b 44 24 10 41 bf 08 01 00 00 4c 03 38 e8 d2 35 80 01 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 ff e8 4c bd 8f f8 41 bc 50 09 00 00 4d 03 27 4c 89 e0 [ 2460.956104][ C0] RSP: 0018:ffffc90000a4f180 EFLAGS: 00000246 [ 2460.956120][ C0] RAX: 1ffff11005074021 RBX: 1ffff92000149e3c RCX: ffff88801daa1ec0 [ 2460.956134][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 00000000000000e0 [ 2460.956145][ C0] RBP: ffffc90000a4f270 R08: 0000000000000000 R09: 0000000000000100 [ 2460.956156][ C0] R10: dffffc0000000000 R11: fffff52000149e42 R12: dffffc0000000000 [ 2460.956170][ C0] R13: ffff8880283a0000 R14: ffff888038ac3456 R15: ffff8880283a0108 [ 2460.956211][ C0] ? __pfx_arp_process+0x10/0x10 [ 2460.956229][ C0] ? __pfx_arp_process+0x10/0x10 [ 2460.956248][ C0] ? NF_HOOK+0x323/0x3c0 [ 2460.956274][ C0] NF_HOOK+0x33a/0x3c0 [ 2460.956292][ C0] ? __pfx_arp_process+0x10/0x10 [ 2460.956310][ C0] ? NF_HOOK+0xa2/0x3c0 [ 2460.956327][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 2460.956350][ C0] ? __asan_memset+0x22/0x50 [ 2460.956375][ C0] ? arp_rcv+0x2f8/0x500 [ 2460.956397][ C0] ? __pfx_arp_rcv+0x10/0x10 [ 2460.956415][ C0] __netif_receive_skb_list_core+0x765/0x810 [ 2460.956487][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 2460.956523][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 2460.956553][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 2460.956584][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 2460.956624][ C0] gro_receive_skb+0x5ae/0xbf0 [ 2460.956703][ C0] ? vring_unmap_one_split+0x1de/0x2d0 [ 2460.956785][ C0] receive_buf+0x1010/0x1c80 [ 2460.956841][ C0] ? detach_buf_split_in_order+0x6a5/0x840 [ 2460.956876][ C0] ? virtqueue_get_buf_ctx+0xea2/0x21c0 [ 2460.956896][ C0] ? __pfx_receive_buf+0x10/0x10 [ 2460.956921][ C0] ? rt_spin_unlock+0x14f/0x200 [ 2460.956952][ C0] virtnet_poll+0x2201/0x3060 [ 2460.956976][ C0] ? napi_skb_cache_put+0x7c/0x380 [ 2460.956999][ C0] ? ret_from_fork+0x514/0xb70 [ 2460.957031][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 2460.957062][ C0] ? __pfx_virtnet_poll+0x10/0x10 [ 2460.957085][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2460.957110][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 2460.957136][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 2460.957155][ C0] ? reacquire_held_locks+0x104/0x190 [ 2460.957180][ C0] ? rt_spin_lock+0x1e0/0x400 [ 2460.957208][ C0] ? rt_spin_unlock+0x14f/0x200 [ 2460.957234][ C0] ? rt_spin_unlock+0x160/0x200 [ 2460.957258][ C0] __napi_poll+0xab/0x550 [ 2460.957284][ C0] net_rx_action+0x696/0xe00 [ 2460.957324][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 2460.957346][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 2460.957379][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2460.957420][ C0] handle_softirqs+0x1de/0x6d0 [ 2460.957450][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 2460.957470][ C0] run_ksoftirqd+0x52/0x180 [ 2460.957492][ C0] smpboot_thread_fn+0x541/0xa50 [ 2460.957514][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 2460.957542][ C0] kthread+0x388/0x470 [ 2460.957571][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2460.957590][ C0] ? __pfx_kthread+0x10/0x10 [ 2460.957614][ C0] ret_from_fork+0x514/0xb70 [ 2460.957637][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2460.957657][ C0] ? __switch_to+0xc79/0x1410 [ 2460.957685][ C0] ? __pfx_kthread+0x10/0x10 [ 2460.957708][ C0] ret_from_fork_asm+0x1a/0x30 [ 2460.957746][ C0] [ 2460.957754][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 252 jiffies! g203029 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 2460.957774][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=137266 [ 2460.957784][ C0] rcu: rcu_preempt kthread starved for 253 jiffies! g203029 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 2460.957803][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2460.957813][ C0] rcu: RCU grace-period kthread stack dump: [ 2460.957819][ C0] task:rcu_preempt state:I stack:24504 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2460.957861][ C0] Call Trace: [ 2460.957867][ C0] [ 2460.957879][ C0] __schedule+0x1681/0x54c0 [ 2460.957901][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 2460.957951][ C0] ? __pfx___schedule+0x10/0x10 [ 2460.957984][ C0] ? schedule+0x90/0x360 [ 2460.958011][ C0] schedule+0x164/0x360 [ 2460.958036][ C0] schedule_timeout+0x158/0x2c0 [ 2460.958062][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2460.958086][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2460.958111][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2460.958136][ C0] ? prepare_to_swait_event+0x340/0x370 [ 2460.958163][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 2460.958198][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 2460.958222][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2460.958250][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2460.958280][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 2460.958305][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2460.958324][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2460.958351][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 2460.958372][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 2460.958399][ C0] kthread+0x388/0x470 [ 2460.958421][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2460.958441][ C0] ? __pfx_kthread+0x10/0x10 [ 2460.958463][ C0] ret_from_fork+0x514/0xb70 [ 2460.958486][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2460.958505][ C0] ? __switch_to+0xc79/0x1410 [ 2460.958533][ C0] ? __pfx_kthread+0x10/0x10 [ 2460.958556][ C0] ret_from_fork_asm+0x1a/0x30 [ 2460.958598][ C0] [ 2460.958605][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2460.958625][ C0] CPU: 0 UID: 0 PID: 4963 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2460.958649][ C0] Tainted: [L]=SOFTLOCKUP [ 2460.958656][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2460.958665][ C0] RIP: 0010:seqcount_lockdep_reader_access+0xec/0x100 [ 2460.958692][ C0] Code: 00 75 11 e8 36 6e 85 ff 4d 85 ff 75 16 e8 2c 6e 85 ff eb 15 e8 25 6e 85 ff e8 90 ea dc 08 4d 85 ff 74 ea e8 16 6e 85 ff fb 5b <41> 5e 41 5f c3 cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 2460.958706][ C0] RSP: 0018:ffffc90003a37d38 EFLAGS: 00000293 [ 2460.958721][ C0] RAX: ffffffff823efaaa RBX: ffffc90003a37e40 RCX: ffff888038a5bd80 [ 2460.958733][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2460.958744][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2460.958756][ C0] R10: dffffc0000000000 R11: fffffbfff1f11a1f R12: ffff8880339aa528 [ 2460.958768][ C0] R13: ffffffff81000130 R14: ffffffff823f986f R15: 0000000000000200 [ 2460.958780][ C0] FS: 00007fb82dec5880(0000) GS:ffff88812617d000(0000) knlGS:0000000000000000 [ 2460.958796][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2460.958808][ C0] CR2: 00007f1741cd4488 CR3: 0000000039222000 CR4: 00000000003526f0 [ 2460.958823][ C0] Call Trace: [ 2460.958830][ C0] [ 2460.958838][ C0] d_lookup+0x1f/0xc0 [ 2460.958857][ C0] lookup_one_qstr_excl+0x30/0x360 [ 2460.958876][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2460.958895][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2460.958914][ C0] filename_unlinkat+0x2c0/0x610 [ 2460.958942][ C0] ? __pfx_filename_unlinkat+0x10/0x10 [ 2460.958970][ C0] ? do_getname+0x151/0x250 [ 2460.958993][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2460.959011][ C0] __se_sys_unlink+0x2e/0x140 [ 2460.959033][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2460.959052][ C0] do_syscall_64+0x15f/0xf80 [ 2460.959070][ C0] ? clear_bhb_loop+0x40/0x90 [ 2460.959092][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2460.959109][ C0] RIP: 0033:0x7fb82e021937 [ 2460.959126][ C0] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 2460.959140][ C0] RSP: 002b:00007fffe5d3e5f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 2460.959157][ C0] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007fb82e021937 [ 2460.959169][ C0] RDX: 0000000000000000 RSI: 000000009113e480 RDI: 000055c6f934202e [ 2460.959181][ C0] RBP: 0000000000000000 R08: 000000009119d7b5 R09: 3fffffffffffffff [ 2460.959193][ C0] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2460.959205][ C0] R13: 000055c6f935d100 R14: 0000000000000001 R15: 0000000000000000 [ 2460.959234][ C0]