last executing test programs: 25m51.849483226s ago: executing program 3 (id=110): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x23041, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x802) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000002300)={0x23, 0x4, 0x5, 0x2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) unshare(0x2a060c00) get_robust_list(r1, &(0x7f0000001c40)=&(0x7f0000001c00)={&(0x7f00000002c0), 0x0, &(0x7f0000001bc0)={&(0x7f0000001b80)={&(0x7f0000001b40)}}}, &(0x7f0000001c80)=0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040034}, 0xc802) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f089021bffffff00004000632f77fbac14140be934a0a662079f4b4d2f87e50aca6aab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0xfe, 0x60000000}, 0x50) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000e00)="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", 0x412}], 0x1}, 0x4000000) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) mprotect(&(0x7f0000521000/0x800000)=nil, 0x800000, 0x0) 25m42.676719212s ago: executing program 3 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r3, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) mknod$loop(0x0, 0x8fff, 0x0) execve(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = syz_open_dev$dri(0x0, 0xabd7, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000140)={0x9}) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000780), 0x0, 0x20e8086) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x80040, 0x0) ioctl$TIOCSIG(r6, 0x40045436, 0x14) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 25m38.322842101s ago: executing program 3 (id=124): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gre0\x00'}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r3) syz_genetlink_get_family_id$ethtool(0x0, r3) bind$bt_l2cap(r2, 0x0, 0x0) listen(r2, 0x90004) syz_emit_vhci(0x0, 0x16) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 25m33.954216244s ago: executing program 3 (id=130): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) r3 = socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in=@dev}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) lstat(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000008000000050000000000001102000000ff"], 0x0, 0x3c, 0x0, 0x1}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, 0xfffffffffffffffd) 25m30.19450573s ago: executing program 3 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x3, r6, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x3, 0xfffffffffffffffa, [0x5, 0x0]}}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') readv(r8, &(0x7f0000001440)=[{0x0}], 0x1) syz_open_dev$sndpcmp(0x0, 0xc, 0x20040) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r1}) 25m19.77763611s ago: executing program 3 (id=141): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newspdinfo={0x1c, 0x24, 0x801, 0x70bd2d, 0x25dfdbfa, 0xc, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x40050) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x3, 0x40005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf3, 0x0, 0x0, 0x7, 0xfc, 0x6, 0x0, [0x0, 0x71]}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9401e8ff19001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00000000000000000000000000001b6109a235e9ac6193f33250db798566a9e2ed3d6a814f95d5f5fb719a40ea86a9a58d4f4c846fcc6389284c03eb8aa2ad96d685f9301610425ecdfb491684c8899a42baead56b10272aa1706c9eb1b137a3354013fa81637032bc8184494a88a0ab23e3af31ce51e3304b4201c698c9f543a095e736d3b3193c63668451d814213f934919f9a73b9b1f212901c40680bb704055ba", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6401010000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000060000000200000000000000000000000a0002006000000000000000a400010073686131000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00200008ad957b65964f40189"], 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) 25m2.888769774s ago: executing program 32 (id=141): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newspdinfo={0x1c, 0x24, 0x801, 0x70bd2d, 0x25dfdbfa, 0xc, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x40050) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x3, 0x40005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf3, 0x0, 0x0, 0x7, 0xfc, 0x6, 0x0, [0x0, 0x71]}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9401e8ff19001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00000000000000000000000000001b6109a235e9ac6193f33250db798566a9e2ed3d6a814f95d5f5fb719a40ea86a9a58d4f4c846fcc6389284c03eb8aa2ad96d685f9301610425ecdfb491684c8899a42baead56b10272aa1706c9eb1b137a3354013fa81637032bc8184494a88a0ab23e3af31ce51e3304b4201c698c9f543a095e736d3b3193c63668451d814213f934919f9a73b9b1f212901c40680bb704055ba", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6401010000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000060000000200000000000000000000000a0002006000000000000000a400010073686131000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00200008ad957b65964f40189"], 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) 23m57.968346402s ago: executing program 1 (id=226): socketpair(0x27, 0x8000f, 0x2, &(0x7f00000000c0)) 23m56.083196728s ago: executing program 1 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240000d0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x407, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) 23m54.19604519s ago: executing program 1 (id=230): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001cc0)={&(0x7f0000001ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x3, 0x1, 0x0, 0x5, 0x0, 0x8, [{0x1, 0x2, 0x8}]}]}, {0x0, [0x2e, 0x5f, 0x5f]}}, 0x0, 0x35, 0x0, 0x1, 0x9}, 0x28) 23m50.623323294s ago: executing program 1 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) fcntl$setownex(r4, 0xf, 0x0) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x240408c1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x1, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0xe464, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e4, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x2, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x200000, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x7fffffff, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x9, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sched_setscheduler(0x0, 0x1, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000003700)=ANY=[], 0x11b0}, 0x1, 0x0, 0x0, 0x48080}, 0x4000040) r9 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}, 0x20) 23m49.300110719s ago: executing program 1 (id=239): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0d0}, 0x4044800) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x3c78, 0x4000, 0xb, 0x10c}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bdde00fcff2fd803000900"], 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000300)={{0x101}, 0x100, './file0\x00'}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000900)={0x1a, 0xa6, &(0x7f0000000840)="87be909102c518aad6413c4b9e59fe19900fdeb4c77af66608e02e3e58397fb26e179a78a26006ea7750b98f2576fd84249c2c2ec216e641031691fb07f70646ef6395228616c7d4b5b2dc1638df13b20d473f64bda628023e1f1946df978a190c9d01b782cdeb040df24e5e9026140ca7902a7a738e4b1d58d650752c16101cebc26e31584103a4e7d9459155a5d29bf442d273d26184c39aa06026841d390be24b8fb64294"}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0xffffffffffffffa8, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r10, &(0x7f00000002c0)=[{0x0, 0x1}], 0xdeadbeef, 0x8, 0x2000007f}) 23m45.880454284s ago: executing program 1 (id=247): madvise(&(0x7f00006b8000/0x3000)=nil, 0x3000, 0x12) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002f8d7b02b3098804989c7ec91d9f2fa010a54028ee83801ec153a24744312bd1eabcb5f8de7179ff98ae10f1f2f69994f79af6d9695e2759e1112450769097eb4375d494e7d3fa278cd0ff79de79ff", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$kcm(0x10, 0x2, 0x0) memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f00000002c0)="f20f2a5cb4ae23530c0c000066b9800000c00f320f30ba4100b057ee660f38804adb260fc76e0a0f01cf0fe3720c0f4dee", 0x31}], 0x1, 0x0, 0x0, 0x5a) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000b) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x401, @remote, 0xbcad}], 0x1c) ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, 0xfffffffffffffffe) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r6, &(0x7f0000000280)=ANY=[], 0xff2e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902"], 0x0) 23m30.598049332s ago: executing program 33 (id=247): madvise(&(0x7f00006b8000/0x3000)=nil, 0x3000, 0x12) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002f8d7b02b3098804989c7ec91d9f2fa010a54028ee83801ec153a24744312bd1eabcb5f8de7179ff98ae10f1f2f69994f79af6d9695e2759e1112450769097eb4375d494e7d3fa278cd0ff79de79ff", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$kcm(0x10, 0x2, 0x0) memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f00000002c0)="f20f2a5cb4ae23530c0c000066b9800000c00f320f30ba4100b057ee660f38804adb260fc76e0a0f01cf0fe3720c0f4dee", 0x31}], 0x1, 0x0, 0x0, 0x5a) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000b) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x401, @remote, 0xbcad}], 0x1c) ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, 0xfffffffffffffffe) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r6, &(0x7f0000000280)=ANY=[], 0xff2e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902"], 0x0) 15m44.97350514s ago: executing program 4 (id=3209): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 15m44.341788522s ago: executing program 4 (id=3212): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000440)={0x2, 0x0, {&(0x7f0000000180)=""/123, 0x7b, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000200)={0x2, 0x0, {0x0, 0xd, 0x0, 0x0, 0x3}}, 0x48) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 15m42.562529354s ago: executing program 4 (id=3215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000080), 0x40002df, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, 0x0, &(0x7f00000002c0)) r4 = socket(0x2b, 0x1, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000540)) accept4$packet(r4, 0x0, 0x0, 0x800) 15m40.929279092s ago: executing program 4 (id=3217): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x2, 0x80805, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15m40.752912704s ago: executing program 4 (id=3221): add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) socket$inet(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r0 = socket(0x22, 0x6, 0x9) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) getpid() 15m35.176046532s ago: executing program 4 (id=3229): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x22020600) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f00000058c0)={0x2020}, 0x2020) 15m18.672255622s ago: executing program 34 (id=3229): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x22020600) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f00000058c0)={0x2020}, 0x2020) 13m7.352255253s ago: executing program 6 (id=4289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x5000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r4, 0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x57}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000540)={0x28, 0x2, r4, 0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000, 0xbd}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000140)={0x28, 0x4, r4, r4, 0x7, 0x7f, 0x3ff}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000100)={0x18, r6, 0x40, 0xffffffff7fffffff}) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/126, 0x7e}], 0x1, 0x111, 0x0) ioctl$DVB_DEMUX_DMX_QBUF(r5, 0xc0186f3f, &(0x7f0000000000)={0x1ff, 0x3ff, 0xce, 0x8, 0x14, 0x7fffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r10, 0x0, 0xd, 0xfffffffffffffffe) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000400)={0x28, 0x4, r4, 0x0, &(0x7f0000000340)='?', 0x44, 0x3}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000240)={0x18, r4, 0x4358, 0x100000001}) 13m3.851497317s ago: executing program 6 (id=4326): openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008001) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}}], 0x1, 0x2400a040) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208"], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m3.669412787s ago: executing program 6 (id=4328): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) fsopen(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x2000, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x4e20, 0x54, 0x0, @opaque="043363e8167e675a7b4957478df830e8a1119af97f00c52cbb8f7fd1377cd2000e0c80d6e462c2127c6c2c14047dc92952ac30b04e7d643cde279479771da0ecaa5cc73f4a32c8bc0cc26104"}}}}}, 0x0) 13m3.42760601s ago: executing program 6 (id=4331): bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x225451, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x60400) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getgroups(0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 13m3.178776842s ago: executing program 6 (id=4334): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(r0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 13m1.16878745s ago: executing program 6 (id=4349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x5000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r4, 0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x57}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000540)={0x28, 0x2, r4, 0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000, 0xbd}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000140)={0x28, 0x4, r4, r4, 0x7, 0x7f, 0x3ff}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000100)={0x18, r6, 0x40, 0xffffffff7fffffff}) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/126, 0x7e}], 0x1, 0x111, 0x0) ioctl$DVB_DEMUX_DMX_QBUF(r5, 0xc0186f3f, &(0x7f0000000000)={0x1ff, 0x3ff, 0xce, 0x8, 0x14, 0x7fffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r10, 0x0, 0xd, 0xfffffffffffffffe) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000400)={0x28, 0x4, r4, 0x0, &(0x7f0000000340)='?', 0x44, 0x3}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000240)={0x18, r4, 0x4358, 0x100000001}) 13m0.545037821s ago: executing program 35 (id=4349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x5000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r4, 0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x57}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000540)={0x28, 0x2, r4, 0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000, 0xbd}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000140)={0x28, 0x4, r4, r4, 0x7, 0x7f, 0x3ff}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000100)={0x18, r6, 0x40, 0xffffffff7fffffff}) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/126, 0x7e}], 0x1, 0x111, 0x0) ioctl$DVB_DEMUX_DMX_QBUF(r5, 0xc0186f3f, &(0x7f0000000000)={0x1ff, 0x3ff, 0xce, 0x8, 0x14, 0x7fffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r10, 0x0, 0xd, 0xfffffffffffffffe) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000400)={0x28, 0x4, r4, 0x0, &(0x7f0000000340)='?', 0x44, 0x3}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000240)={0x18, r4, 0x4358, 0x100000001}) 10m34.662371235s ago: executing program 7 (id=4842): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) 10m34.330885515s ago: executing program 7 (id=4843): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r3 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m33.091875159s ago: executing program 7 (id=4848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)) close(r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r7, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0xffe, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x6, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x20, 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x0, 0x56}, 0x28) bind$inet(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) 10m31.398471721s ago: executing program 7 (id=4851): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654", 0x48}, {&(0x7f00000000c0)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m30.216554739s ago: executing program 7 (id=4858): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb0}, 0x1, 0x7}, 0x0) 10m29.716655491s ago: executing program 7 (id=4860): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80) 10m13.451744636s ago: executing program 36 (id=4860): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80) 5.656680554s ago: executing program 9 (id=8351): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0, 0xfffffffffffffdcf}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 5.540696386s ago: executing program 9 (id=8354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000600)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [{{0x254, 0x1, {{0x0, 0x40}, 0x7, 0x2, 0xfffd, 0xfff4, 0x7, 'syz1\x00', "bddd8b9969778b3b94514fec9d9c1aa98ab561908d0ed23714e599bfbadbc18b", "e49a7bb051b2ca0daf8003ad56aa3fb68dd1031ac62b12b08f6ac19049824a6c", [{0x3, 0x9, {0x0, 0xfffffff7}}, {0x1ff, 0x3, {0x3, 0x9}}, {0x4, 0x5, {0x1, 0x7}}, {0x80, 0x6, {0x3, 0x3}}, {0x5, 0x24, {0x1, 0x2}}, {0x5, 0x4, {0x3, 0x3}}, {0x4, 0x7ff, {0x0, 0x2}}, {0x1, 0x5, {0x1, 0x4}}, {0xfffe, 0x7f, {0x0, 0xfffff212}}, {0xe3c4, 0x4, {0x0, 0x7}}, {0x9, 0x4, {0x3, 0x5}}, {0x1ff, 0xf7b0}, {0x4, 0x9, {0x2, 0x10}}, {0x0, 0x4, {0x3, 0x8}}, {0x4, 0x2, {0x2}}, {0xb, 0x909f, {0x2, 0xa}}, {0x5, 0x4, {0x2, 0x5}}, {0x8, 0x4, {0x3, 0x80}}, {0xb6, 0x2, {0x2}}, {0x7f, 0x400, {0x0, 0x2b}}, {0x9, 0x8, {0x1, 0x5}}, {0x94a, 0x0, {0x2, 0x1ff}}, {0x4, 0x94, {0x2, 0xe}}, {0x9, 0x6, {0x3, 0x7fc95920}}, {0x8, 0x1, {0x0, 0x2}}, {0x1, 0x7, {0x2, 0x2}}, {0x9, 0xfff1}, {0x7, 0x2, {0x3, 0x8}}, {0x2, 0x4, {0x0, 0x7}}, {0x12, 0x3, {0x1, 0x1ab}}, {0xfff0, 0xffff, {0x1, 0x8000}}, {0x6, 0xe, {0x2, 0x6}}, {0x8000, 0x8, {0x0, 0x9}}, {0x7, 0xc, {0x0, 0x7}}, {0x2, 0x9, {0x3, 0x401}}, {0xfffa, 0x0, {0x3, 0x5}}, {0x6, 0x3, {0x2, 0x41}}, {0x1c00, 0x7d3a, {0x1, 0x6}}, {0xb0bc, 0x9, {0x1, 0x2}}, {0xfffc, 0x200, {0x3, 0xa}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24000044}, 0x4000000) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffdfffffff86dd6000fcff00180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c2"], 0x0) 5.340312666s ago: executing program 9 (id=8356): getuid() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0800000000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="180000000100000000000000000000000000000007ff000000000000"], 0x50) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x44000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0xe18ef399487104c6, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) memfd_create(&(0x7f0000000040)='\xac#]/-\xc0\x00', 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffff55}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0xe1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x100b, &(0x7f0000002cc0)=""/4107, 0x40f00, 0x5, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1085, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0xffffffffffffff29) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'macvlan1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 4.076540648s ago: executing program 9 (id=8364): bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0xffff, 0x2, 0x6, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10004, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.034419561s ago: executing program 2 (id=8365): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf={0xe0ff, 0xffffffffffffffff}) io_uring_enter(0xffffffffffffffff, 0x6145, 0x9e35, 0x40, 0x0, 0x0) 3.873138735s ago: executing program 2 (id=8367): io_uring_setup(0xdac, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe80900fffcff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 3.849390229s ago: executing program 9 (id=8368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x600100, 0xa) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x9, 0x21, 0x42, 0xfffff027}, {0x6, 0x6, 0x9, 0x80000009}]}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000001280)={0x5, 0x6}) pipe2(&(0x7f00000012c0)={0xffffffffffffffff}, 0x1000) r5 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001300)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000001400)=0xe8) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setresgid(0x0, 0xffffffffffffffff, r8) sendmsg$unix(r1, &(0x7f0000001500)={&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000600)="46abe41faa8134952bbee73f69c6c2263e97a08a27099a2e4681778d5804ad51ba3379a75babb0a5065d13ebebb12acef51a4ad382db46a3b50e9b4925fdc9ff96749900b572ce7d0b3ea9dcbfaeaabc544d6ae1dfc01ce5ca04b40918257134dd19099377a7ca0c7c7d6fdcb625e03fa0a91b0db20ad68e9aaa314b5fe6d49bc98c57ad69138f4a1cac7cbd9ab8a8a544d41e0bcc1ed5c90821ecbd5815b0cd787e861f0af11bd752f3cb0d665e6d08c3db4daca8abeb19d684341bbb71df07b4acbbe07f81925294436a330e054367e6369d76a5ab8308198426530faacd3f27cfe16bbcb8b0b0", 0xe8}, {&(0x7f0000000700)="b62e78b743a967c07e75902e1ee4450f54c18f8b75e61aa08b7c08eca4fd374e262935b910d88535e5d62350440df1f23425832e30f44faeac7fcc5c3835f511bb3deecb9439c74d2a6aa93fb3cdde2c6cba199b6f286c26248bd7fc797ca7d1583cf2aa2bde352e9350a74ebe6d777d71773a4a6dd4299a6bd44a16f2b55691f3e02b4c96f46f3ed552008a84db39cebf664bf9b132bb5da39e92ca2fa85662276debdc87102d5cabc439124241e4e963a8e526fde09511", 0xb8}, {&(0x7f00000007c0)="e038a72b2e6ebff6985ab537b830daee9a7936cba4e0f10af4e66491865e", 0x1e}, {&(0x7f0000000800)="11ce4062ceb11ddc93a83588579c1ab1d934", 0x12}, {&(0x7f0000000840)="38da29eae55c06f8780c458d5a411b1cef4f9dfcc3bcdb2025a51c182bf5dff7186328d82571700e7bbfc8963d57a2b18368075af0c629f19dcf05c00b63cde2f278da469af27608f2cc9ad1d2ab966df5e4b8b29098c9e5fc0d4e", 0x5b}, {&(0x7f00000008c0)="cf8cd99937690eb090143349d03edfaf7304530ae93c74da567a75c81dcfeca747e0cb9bdaf1d6c355d815853c7a7d54b6e6373a60880474b3c2756f795d742de4e9f78d7c07c96e17998002a691e2ef25b9719119efcb7d8edf7fe535803d439f872437ea73fca92d111d93b71e80eac1a91153a17a4b4a76f0cacb03aa3d5c354693302a7573becb30d7a4fb16f6a5a85a05d14a948f809f3969a6aeac", 0x9e}, {&(0x7f0000000980)="c2b486b9a620ffe2f26a2c64cd85b030bb13e1806ebf0467d2174ed54dae47ff7432a01d167b49dbe512407c6e0bf7034555866bebb4731d18ba67d89e1b71735d226370bc06aba6a87330229a037597dce835e0c07d38681cb375d5b355f9ffa618c224df827203859eacbe67903554fd0490dde0d1ce2f06a46268b483ee033593de7fd0571565d28362", 0x8b}, {&(0x7f0000000a40)="3bcd711684ac", 0x6}, {&(0x7f0000000a80)="a82cfc65ca496b6f89dc6a65", 0xc}, {&(0x7f0000000b40)="b320338ed2a7ae5385e921d8c322b5ce17988143bfb6736f0e5cdfd30c00415bf2a21ab77b5fb2270f9bdb7acf62c9a82a3d7eb96c512595fe5b38e35bc175a3e6b64b3ae1bdb901ce4f1571e0c61fe5b1931d316129d650c5650ea5fe827d50ec243dcc34d656021e26f9ad910ec9d37caaa72c7d6ea6b26f14d9a039df6003d00d16f1f7867d79dcb5be6bcafad24e347ab5d4acb9b33aafd7f4504a6cd07d3ad2ee38cc79a6df7e40257bfff618f18f0343c32409560d24d0cfb71120c61c8330e128f9022ff57115eef6b5bfe79b5e92292abac5e95c", 0xd8}], 0xa, &(0x7f0000001440)=[@rights={{0x2c, 0x1, 0x1, [r0, r3, r1, r1, r0, 0xffffffffffffffff, r1]}}, @rights={{0x1c, 0x1, 0x1, [r4, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01, r5}}}, @cred={{0x1c, 0x1, 0x2, {r2, r6, r8}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xa8, 0x8c4}, 0x1) setpgid(r2, r2) wait4(r2, 0x0, 0x0, 0x0) waitid(0x2, r2, 0x0, 0x8, 0x0) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r9, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r9, &(0x7f0000000140), 0x2) preadv(r9, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000100)=""/24, 0x18}], 0x2, 0x5, 0x3) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r11, 0x29, 0x16, &(0x7f0000fcb000), 0x4) socket$inet6(0xa, 0x3, 0xff) close(0x4) setsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f0000000000)=0x1, 0x4) r12 = socket(0x2b, 0x1, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r12, 0x0, 0x485, 0x0, 0x0) accept4$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x800) sendmmsg$inet(r10, &(0x7f0000001cc0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000100)}}], 0x1, 0x2400c040) socket$nl_route(0x10, 0x3, 0x0) 3.648135802s ago: executing program 2 (id=8371): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x97ff, 0x2409c8d5, &(0x7f0000000240)={0xa, 0x4e1c, 0x6, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000380)=0x6, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000340)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ec0)=@newtfilter={0x11ac, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @filter_kind_options=@f_cgroup={{0xb}, {0x116c, 0x2, [@TCA_CGROUP_ACT={0xa4, 0x1, [@m_bpf={0x3c, 0x13, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x64, 0x6, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_MARK={0x8}]}, {0x29, 0x6, "fdfd03eda0d679d16e3eb361827a8e794e7beb9f8a473e8942ea9d4a2810c09fbf75eee06c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0xd8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x800, 0x0, 0x6}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x5}, {0x7, 0x1, 0xfff, 0x3}}}, @TCF_EM_META={0x78, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xffc0, 0x4}, {0x2, 0x5, 0x2}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="e4", @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='t', @TCF_META_TYPE_VAR="0a32727ecef93551"]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x0, 0x1}, {0x7b, 0x7f, 0x1}}}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR='M', @TCF_META_TYPE_VAR="0ab339d1", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="8535305a0c6b9f2b90"]}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x2, 0x2, 0xee62}, {0x7, 0x5, 0x0, "e2cdd229fd"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_CGROUP_ACT={0xfec, 0x1, [@m_ife={0x54, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x29, 0x6, "bcbb50c87c0d0fb2d8cb96bca7395fa7fb3c362812d5b195263a661c562d2063f1b3338c79"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x3ff, 0x3, 0x7fe0, 0xfffffffe}, 0xa}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x60, 0x13, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x5, 0x8, 0x7, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc, 0x7, 0x5, 0x669f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0xee0, 0x2, 0x0, 0x0, {{0xa}, {0xeb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x1, 0x1, 0x5, 0x2800000, 0x7}, 0x0, 0x20, [{0xffffffff, 0x4, 0x3, 0x9, 0x8, 0x1cc00000}, {0x800, 0x8, 0x7, 0x86dd, 0x7, 0x6}, {0x3, 0x3, 0x7, 0x6, 0x8, 0xff}, {0x8991, 0x0, 0x4, 0xe, 0xffffff5f, 0x1851}, {0x8, 0x7, 0x85f6, 0x8, 0x1, 0x6}, {0x0, 0xffff, 0x0, 0xfff, 0x4, 0xf}]}, [{0x8, 0xffffffff, 0x6, 0x7, 0x2, 0x1d80}, {0x8, 0xfa8, 0x0, 0x80, 0x7, 0x6}, {0x2, 0x7, 0x0, 0x9, 0xd34, 0x3ff}, {0x6, 0xe72, 0x6, 0xfc9, 0x1, 0x1}, {0x7fff, 0x0, 0x7, 0xffffc2f1, 0x40b, 0xc}, {0x5, 0xb, 0x0, 0xb312, 0x0, 0x8}, {0x9, 0x7, 0x8001, 0x80000000, 0x3d9b, 0xfffffeff}, {0x3, 0x400, 0x3ff, 0x7, 0xa, 0x192}, {0x7ff, 0x6, 0x3, 0xffff, 0x7, 0x7}, {0x4, 0xb, 0x1, 0x3000, 0x3ff, 0x7}, {0x6, 0x6fe07e5c, 0x6, 0x7ff, 0xfff, 0x745d}, {0x6, 0x80, 0x5, 0x200, 0x200, 0xfff}, {0x4, 0xd219, 0xe21, 0x8001, 0x8, 0x8}, {0x81, 0x0, 0xd, 0x8, 0x7, 0xff}, {0x5, 0xfffffff9, 0x3ff, 0xc9, 0x2, 0x4d3e}, {0x7, 0x3, 0xb, 0x0, 0x7, 0xfffffff3}, {0x2, 0x5, 0x5, 0x41ac8446, 0x2, 0x8ac7}, {0x3, 0x943, 0x4, 0x9, 0x10, 0x44d}, {0x1, 0x4ee, 0x7ff, 0x1, 0x80, 0xfffffff8}, {0xaf, 0x7, 0x8, 0x2, 0x8, 0x4}, {0x4000006, 0x3f6, 0xf4ac, 0x1, 0x7fffffff, 0xf}, {0x9, 0xfffff735, 0x2, 0x80, 0x9, 0x7ff}, {0x0, 0xc48, 0xfffffffa, 0x6, 0x400}, {0x8, 0x7, 0x1, 0x34ff61c7, 0x7, 0x2}, {0x0, 0xf0a2, 0x94, 0xb19c, 0xb, 0xbd9}, {0x1, 0x10000, 0x7fff, 0x3ff, 0x3, 0x9}, {0x2, 0x8001, 0x9, 0x6, 0x69b, 0x7f}, {0x6, 0x80000000, 0x81, 0x5, 0x4, 0x4}, {0x3000, 0x3, 0x81, 0x56a9, 0x2f2, 0x249a}, {0x6, 0xffff, 0x4, 0x8, 0xe5, 0xbd}, {0x800, 0x8, 0x1, 0x4, 0x3, 0x6}, {0x6, 0x0, 0xee, 0x200, 0x3, 0x5}, {0x10001, 0x57, 0x400, 0xfffffff8, 0x1}, {0x0, 0xc, 0x937, 0x5, 0x8, 0x2}, {0x0, 0x8001, 0xb9c, 0x80000001, 0xd, 0xffff}, {0x81, 0x3, 0x7, 0x6, 0x2, 0x100}, {0x3ff, 0x9, 0x1, 0x4, 0x8, 0xffffffff}, {0x5, 0x3e1, 0x1, 0x81, 0x7, 0x6a}, {0x7, 0x3, 0xce, 0x2, 0x6, 0xa2b}, {0x9, 0x6, 0x20, 0x6, 0x4, 0x6}, {0xb8e4, 0x800, 0xc639, 0x9, 0x6, 0xfff}, {0x47, 0x4, 0x3, 0x10, 0x7, 0x8}, {0x7, 0x8001, 0x800, 0x8, 0x1, 0x5}, {0xf, 0x10001, 0xb, 0x84, 0x5f5f, 0x8}, {0x6, 0x1, 0x6, 0x9, 0xfffffffd, 0xca}, {0x100, 0xd, 0x3, 0xfff, 0x5, 0xfffffee1}, {0x9, 0x7, 0x10001, 0x8, 0x8, 0x9}, {0x3, 0x4, 0xa, 0x3, 0x4, 0x1}, {0x3, 0x4, 0x9dc, 0x5, 0x401, 0xd5}, {0x4302, 0x2, 0x0, 0x3, 0x1, 0x7ff}, {0x400, 0x2, 0x8, 0x7, 0x5, 0xdf3e}, {0x9, 0x8, 0x3ff, 0x1, 0x3, 0x9}, {0x99, 0xdcc8, 0xc, 0x3, 0x4, 0x90b2}, {0x4, 0x3, 0x6, 0x101, 0x27, 0x9}, {0xabcc, 0x80000000, 0x7c, 0x9, 0x1, 0x7fffffff}, {0x0, 0xf, 0xff, 0x7, 0xfae, 0xfff}, {0x9, 0xff, 0x5, 0xc, 0x81, 0x7}, {0x6a, 0x6d, 0x4, 0x591, 0x7f, 0xbef}, {0x37, 0x0, 0x7f, 0x324, 0x0, 0xd}, {0x0, 0x7, 0x3b, 0x5, 0x7, 0x10}, {0x7, 0x2, 0x20, 0x80000000, 0x1}, {0xf, 0x5, 0x6, 0x2da, 0x1, 0x9}, {0x4, 0xfff, 0x7fff, 0x6712, 0xc7c, 0x8587}, {0x157, 0xde, 0x6, 0x2, 0x5, 0x3}, {0x6, 0x2, 0x7, 0x1, 0xffff7fff, 0x6}, {0x0, 0xd, 0x3, 0x5, 0xa1f1, 0x2}, {0x7, 0x839, 0x7, 0x3, 0x3, 0x7}, {0xe, 0x3, 0x9, 0x1ff, 0xffffffff, 0x8001}, {0x4, 0x10000, 0x7, 0x4, 0x3, 0x2}, {0xfffffffe, 0x5, 0x5, 0x4, 0x2, 0x7fffffff}, {0xb, 0x100, 0x3, 0x80000000, 0x5d5, 0x8}, {0x4, 0x85, 0x0, 0xe3, 0x1, 0x3}, {0x10, 0x3, 0x2, 0x85b, 0x2, 0x1ff}, {0x7, 0x7, 0xffffff7f, 0x6, 0x7, 0x5}, {0xfffffc01, 0x7197, 0x8, 0x4, 0x80, 0x2}, {0x6, 0xfffffff8, 0x6, 0x8, 0x3, 0x7}, {0x8, 0x40000000, 0x1ff, 0xa, 0x2, 0x401}, {0x20000000, 0x0, 0x7, 0x3, 0xffffffff, 0x274e9372}, {0x8001, 0x5, 0x8, 0x7, 0x2, 0x7}, {0x7fffffff, 0x2, 0x400, 0x9, 0x8, 0x3a4be998}, {0x1, 0x3, 0x6, 0x3, 0x9, 0x81}, {0x5, 0x5, 0xc, 0x4, 0x4, 0x8}, {0x400, 0x1d1, 0x77f, 0x4, 0x3, 0xfffffff9}, {0x3ff, 0xe, 0x7fffffff, 0xfffffff8, 0xce, 0x3}, {0x80000001, 0x6, 0xffff23eb, 0x2, 0xabc, 0xffffc234}, {0x3, 0xc1, 0x6273, 0x0, 0x100, 0x4}, {0x10001, 0x80, 0x9, 0x3, 0x8, 0x5}, {0x2, 0x8001, 0x0, 0x3, 0x1b, 0x8}, {0x0, 0x80000000, 0x2b3, 0x5, 0x52b, 0x8}, {0xfffffffe, 0x10001, 0x6, 0x81, 0xa0000, 0x3}, {0x80, 0x0, 0x1, 0x6f6d, 0x0, 0x1d}, {0x8, 0x89, 0x3535, 0x0, 0x2cf, 0x6}, {0x40, 0x7, 0x2, 0xffff0000, 0x4, 0x5}, {0x3ff, 0x23f, 0xd, 0x1ff, 0x3439, 0x8}, {0x10001, 0x8, 0x7fff, 0x3ff, 0x80000000, 0xf}, {0x1, 0x3, 0xf, 0x4, 0x1, 0x10001}, {0x101, 0x70000, 0x1, 0x2, 0x3, 0x401}, {0x401, 0x0, 0x3, 0x7fff, 0xfffffffe}, {0x5, 0x2, 0xfff, 0xf, 0x1, 0x6}, {0xfffffffb, 0x3, 0x3, 0x3465, 0x1000, 0x40}, {0x0, 0x5, 0x5, 0x1, 0x9, 0x3}, {0x10, 0x3, 0x3, 0xa11b, 0xaa0, 0x5}, {0x1, 0xfffffffd, 0x4, 0x8, 0x4, 0x401}, {0x5, 0x40, 0x3, 0x8, 0x3, 0x5}, {0xfffffffc, 0x9, 0x7ff, 0x1c, 0x9, 0x7}, {0x5, 0xb8e, 0xad, 0x200, 0xf, 0x8000}, {0x3, 0x3, 0x8, 0xffffffc0, 0x10000, 0xc70}, {0x3, 0x7d7, 0x5, 0x401, 0xfffffffa, 0xffff2f02}, {0xd8d, 0x5, 0x1ff, 0xd7, 0x3}, {0xffffffff, 0x81, 0x509, 0xc2, 0x7fffffff, 0xb}, {0x0, 0x5, 0x3, 0x4, 0x8, 0x9}, {0x4, 0x101, 0x5, 0xb, 0x6, 0xd}, {0xfffffff8, 0x9, 0x2, 0x9, 0x6, 0x8}, {0x7, 0x9, 0xe, 0xf5, 0x200}, {0x1, 0x8, 0xfffff000, 0x6, 0x6, 0x4}, {0xfffffffa, 0xfffffff8, 0x0, 0x8001, 0x808, 0x2}, {0x0, 0x7000, 0x2, 0x7f, 0x9bca, 0xfffffff9}, {0x3, 0x10000, 0xf7, 0x7, 0x4, 0x4}, {0xe673, 0x8, 0x6, 0x800, 0x1, 0x10001}, {0xa53, 0x62fd, 0xb, 0x8000, 0x482e, 0x9}, {0x101, 0x0, 0x0, 0x6310, 0xf6, 0x2}, {0x6, 0x8f, 0x80, 0x9, 0x6, 0x74a9}, {0x64, 0x5, 0x4, 0x2, 0x1ff, 0x5}, {0x668, 0x5b39ef5c, 0x9, 0x7f, 0x6, 0xedf9}, {0x6, 0x0, 0x0, 0x7f, 0x2, 0x80000000}, {0x9, 0x9, 0x80, 0x5, 0x800, 0x9}, {0x80000001, 0x2, 0x80, 0x6, 0x6, 0x1}, {0x800, 0x47a, 0x6, 0x4b, 0x0, 0x405e}], [{0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x4}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x3}, {}, {0x4}, {0x3}, {0x2}, {0x2}, {0x3}, {0x2}, {}, {0x1, 0x1}, {0x8, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {}, {0x4}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x4, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x11ac}}, 0x20000040) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x2ef5, 0x1c080, 0xa, 0x20002f7}) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000140)='cgroup\x00', 0x2c002, &(0x7f0000000180)={@align=0x8000000000000001, {0x61ed, 0x40, 0x2, 0x8}}, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x3}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_COPY$syz(r4, 0x3b83, &(0x7f0000000280)={0x28, 0x10000, 0x0, r6, 0x3a0c91, 0x100000001, 0x3, 0x30e819}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000100)=0xffffffff, 0x4) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, 0x0, 0x0) 3.132633475s ago: executing program 0 (id=8375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r5, &(0x7f0000000140)={0x18, 0x0, r6, {0x7}}, 0x18) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) close_range(r4, 0xffffffffffffffff, 0x400000000000000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, 0x0) 2.962955193s ago: executing program 2 (id=8378): syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) pwrite64(r0, &(0x7f0000000340)="06d68dd3abf369040d87c67da212a7628ac0e2d4624212397a7fe77a81a0209896d83cae144b00b164c6a5b0e3886352403f9d66d630da7a10b22dbe592c4e6227d7eb5b3a7bd9dcccabeecce0fa2983957326e4ff63980f98b49bdb4e67eeab53d15d685fee9c439920d23532c1c1f7e05ff04c9a090f80faf5cd4a2184a9977accbe6e2c3ab5471c9574ba772dc8221e7dcc5f3471829e8da0183af8aa387ee404ec0db3d72ca9f352af907929324aaebed7e8efc23e2f29397a2676452c97a48a0ed1fdb4157b", 0xc8, 0x2) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000300)=0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000540)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="0600130084e000000a00060008021100000100000600100080050000060012"], 0xd8}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$unix(r7, &(0x7f00000002c0)=@abs={0xa, 0x2}, 0x6e) 1.787548486s ago: executing program 8 (id=8379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a03000000000000e700000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000080000000731199000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000040)) 1.625450919s ago: executing program 0 (id=8380): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x15120}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x48}}, 0x0) read$nci(r0, &(0x7f0000000000)=""/136, 0x88) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x9, "e865b1", 0x80, 0x9}) 1.4526441s ago: executing program 0 (id=8381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 1.449954698s ago: executing program 5 (id=8382): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x109}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f000034e000/0x2000)=nil, &(0x7f0000cd1000/0x1000)=nil, 0x2000, 0x3, 0x2}) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) 1.44657549s ago: executing program 2 (id=8383): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x1000000000000053}, 0xfffe}], 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) acct(&(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.405533085s ago: executing program 8 (id=8384): syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') 1.404171467s ago: executing program 9 (id=8385): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000d0b8032a340002800800080006000000085c4996ea00030000000000080006000001000005000d0001000000080006000900000006000e00"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000440)={r0, &(0x7f0000000340)='$\':\\\x00', 0x8802, &(0x7f0000000380)={@align=0xc6, {0x5, 0x1, 0x0, 0x7}}, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x7}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0], 0x2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000000, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000540)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000640)={r2, r4, r5, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) r7 = socket(0x2, 0x1, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r8, 0xab00, r7) ioctl$NBD_DO_IT(r8, 0xab03) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x6, r6, 0xcccccccc}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000000000000000017", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x24000011) waitid(0x1, 0x0, 0x0, 0x61000006, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r11 = fcntl$dupfd(r3, 0x0, r7) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) r12 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r11, 0x4004550c, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r11, 0x1a, &(0x7f0000000240)={0x3}, 0x1) getsockopt$netlink(r10, 0x10e, 0x9, 0x0, &(0x7f0000000100)) sendmmsg$inet(r9, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.300550708s ago: executing program 5 (id=8386): bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0xffff, 0x2, 0x6, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10004, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x41}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.201005462s ago: executing program 0 (id=8387): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000200)=@newsa={0xf0, 0x1c, 0x1, 0x70bd28, 0x25dfdbff, {{@in6=@remote, @in=@multicast2, 0x4e23, 0x0, 0x2000, 0x8000, 0xa, 0x20, 0x0, 0xc}, {@in=@loopback, 0x20, 0x6c}, @in=@multicast2, {0xfffffffffffffffe, 0xffffbffffffffffc, 0x0, 0x800000000000001, 0x10000000002c8, 0xfffffffffffffc00, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0xffffffff, 0x9}, 0x0, 0x80001fd, 0x2, 0x1, 0x0, 0x3}}, 0xf0}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) sendmsg$xdp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="4eebd63f133fa4cd4614f21693821f92ecb98d8fb52c3521beb071c3cf703859a3d229569b1dc0b1eff3bcf0aac8a59aee29163b32762e5c54f9631c80f6259ef0f552f342261ff8672d8048dd", 0x4d}], 0x1, 0x0, 0x0, 0x44044}, 0x0) 1.200863935s ago: executing program 8 (id=8388): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) (fail_nth: 2) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 966.210064ms ago: executing program 5 (id=8389): syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 760.710313ms ago: executing program 8 (id=8390): r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x20000) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x7, &(0x7f0000000100)={0x23, "f4090003000000000000007f00040000010000000000000000001000"}}) 693.143551ms ago: executing program 0 (id=8391): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100) (async) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x4) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x200000, &(0x7f0000019200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@version_9p2000}], [{@pcr={'pcr', 0x3d, 0x37}}]}}) (async) write$P9_RVERSION(r4, &(0x7f0000019280)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3], 0x15) (async) r5 = socket(0x10, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller1\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000580)={&(0x7f00000192c0)=ANY=[@ANYRES16=r2, @ANYRES8=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x840) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x4, 0x400}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r7, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r8}, 0x20) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r7, &(0x7f0000000140), &(0x7f0000000340)=@udp6=r9, 0x2}, 0x20) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) (async) pread64(r10, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) (async) recvfrom$inet6(r9, 0x0, 0x0, 0x2001, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x80, "1b9099e31f637670a934aa57f045cdd9522fde7f3d573b1654dac321738941d4fd794c4fb59271b2e644ff1c0bdce4e5135bcaa2eb083ecd954641ec66cbfff62880c9d8e30d2579e6ab3992310c76424e1d65500fead5fad55d64595585fd01bfcd455b881c96cfffae6cf1a2ccb32c0a75ccc527d2831472a8b09274bab50e"}, &(0x7f0000000300)=0x88) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=r11, @ANYBLOB="0104ad004604503226e9b3c9ad86a24e8e2cce58d727a73d491b04e1ce80125bc6eb88a917344aa00857f92f09c68846c8b3b3214a057fa565096eff913b09122b2b6c02465e85af7a27a450d129e03d676a41c6bab317c1edd71c7103beb8356eef2fb8fdec3f966ec40a3ccb607c7b7b36739028625f88c035a75520db280b5cf9461b002c8734709d73a681caaced1e5fdc3c860692cbdca7582b1e9fb1063909a400"/177], 0xb5) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019380)=ANY=[@ANYBLOB="600000004a0010002bbd7000ffdbdf250a002f00", @ANYRES32=r12, @ANYBLOB="8000000000140001000000000000000000000000000000000014000100fe800000000000000000003a6d3900000000aa14000100fe8000000000000000000000000000aa000000000000008ba329de9798c895d88fa6b4740d4e2acfc2e1fdb334b380706b3277e042d9d8e25d4aed9e415dd8d1752ea2b9efd7365aca31f6cbcdbdffebf1861e5d0a8a736153a4fffb3df681c263a9927ca8a90702a8050d46367189bc83cc298bdbfb31648fa5abcb168455fb96d212c360341c640b6b27912bcee8c5b161f923"], 0x60}, 0x1, 0x0, 0x0, 0x2400c040}, 0x4040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x45}, 0x0) 686.274428ms ago: executing program 8 (id=8392): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000100)=0x5, 0x4) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="260a00b45ee9960061119c000400000018000000a300200000000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47}, 0x94) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200021"], 0x69) close(r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)={0x34, r3, 0x1, 0x70bd22, 0x40, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x7b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_INIT(r7, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0x40200, 0x6, 0xd1, 0xf94b, 0x0, 0x0, 0x0, 0x10, 0x7c7}}, 0x50) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x1000000, 0x0, r1}) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f0000000240)=[{0x0, 0x2, {0x1, 0xf0, 0x1}, {0x0, 0xf0, 0x2}, 0xff, 0xff}, {0x0, 0x2, {0x0, 0x0, 0x4}, {}, 0xfd, 0x1ff}, {0x0, 0x9, {0x2, 0x0, 0x3}, {0x1}, 0xfe}, {0x0, 0x1, {0x1, 0xff, 0x2}, {0x0, 0xf0, 0x2}, 0xfd, 0xfe}, {0x2, 0x3, {0x5, 0xff, 0x3}, {0x3}, 0x2, 0x2}, {0x1, 0x0, {0x1, 0xf0}, {0x1, 0x1, 0x3}, 0xff}, {0x2, 0x0, {0x1, 0x0, 0x4}, {0x2, 0x0, 0x3}, 0xff, 0x1}, {0x2, 0x1, {0x1, 0xf0, 0x3}, {0x0, 0x0, 0x1}, 0xff, 0x1}, {0x1, 0x0, {}, {0x1, 0xff, 0x3}, 0x2, 0xff}], 0x120) 626.782652ms ago: executing program 8 (id=8393): syz_usb_connect$midi(0x0, 0x3e, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1235, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x4, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x9, [], [{{0x9, 0x5, 0x4, 0xb, 0x200, 0xf, 0x1, 0x2, {0x4}}}, {{0x9, 0x5, 0x8c, 0x2, 0x3ff, 0x6d, 0xf7, 0x7, {0x4}}}]}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000140)="f5b3db7109", 0x5}], 0x1, &(0x7f0000000580)=[@init={0x18, 0x84, 0x0, {0x200, 0xb, 0xb, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x38, 0x10}, 0x2004c0c5) 489.006354ms ago: executing program 5 (id=8394): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a010200000000000000000100000009000100737b7a30000000006c000000160a0101000b000000000000010000000900020073797a300000000009000100737900000000000040"], 0xb4}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000000000000000080000000180000000700000000000000400000009500000000000000ae9486cf383a93bffc7ccf0b6d9d149d1793ca90b061837ec4521c8ba9d07a46b1290241eb3a746629bcfd9ffd38277975d0f3f0dd6017068f6d380d2262682c554945e8cf6f"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe747}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009405, &(0x7f0000000080)) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000001500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001540)={0x17f4, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x61}}}}, [@NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x1208, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x15, 0xb, "c376d22b2e13901134042fb7df07b61b7a"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x11e4, 0xe, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0x8d, 0x0, "d66460cceeea0e2c429b1db2e25494959247cb394de03d760ebf231ae7aaa1ae0fbd57652c8b61286b290ca4f1755433b40b3a224781a253daf4a90490d96848983b7719b0c6c9e9e08b128d98bc9cdbb332a4f1f9d71621d2f42383ba5f6125063540403868543717d65f98637514cc33969ba0ab8af315373c9410e3fc1d570199c06744d0158343"}, {0x22, 0x0, "caa9600a6c7a3458e952f230408b795e283049a30c6c20baf54e81222f3d"}, {0x60, 0x0, "d9f3b3067383535a2a7a80a49de3e5e74cda7051d9c73d78e91e57244b0aeb663d73460c7d8975db99e34afaad6eae66ee2147883ea8338da509a474d742f953ae67d4bdeb39f2929d43590b0f72b7c010cc43523dd5de34d69a1357"}, {0x41, 0x0, "2762297932da2d1367ccfaeebc58f8471f49eb6c83a33cc98b1121039504379cbc1e778fb5421cfda7887bffdc4feae7eb76a6417c276ed4d5c39d7e4d"}, {0x82, 0x0, "6d3271a273204ff4073e0288140ab69ea865e54b5c7d5406424b3302de8b772d1667ad9d542fc5483dcb512e95f265972fa3ae781a4aba625a30f2a7525d535073bdbcef82bcd5e587a9fe3b44d36bd6fffda6bb6e46e599695f607ccd1e7e5518eef5327d98fb96c819a0d716433c3c0561e16964925db868b4632e3286"}]}]}, @NL80211_ATTR_NAN_FUNC={0x5b0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x580, 0xe, 0x0, 0x1, [{0xea, 0x0, "dbf30a80983bb0e3f943c035f0a3b9778f18c661d3b7be91fe063acf15ac18d1f7886dc34f4a3cc2788ae2c97604163da79c7b954a6da22484b16ee8c465ad151e78b092ca9ff8cb8466b10d5eb7be6c250d09dd305e0bdde6d46eb1e3e8c7f87719a6f8a340b4860c65c7f3ee302a06fd1f30522ddfdf7e5acac9a4faebda6ead2a00e70868377c318a4c59eb6423c877ddd0269ff991a5272ae54483c944e990d2d866ebcec11571deccdbed6abfe0da52e0b445fa39093afc8759a173ce436ad01577e617a98da3bfbb916b006448378e37942497de23ab68502ce7f7dc654d198c14d2dc"}, {0x20, 0x0, "7bb2f5a46d8d942d33dd5c5143ead861e2a23bab9b578cc7a55ecd20"}, {0xf3, 0x0, "282f70038a18bd9591b93f46e830e07d5467336eb9ac166ee94fb69be0e9ed2546bbed95f9665c4387ecc9891858d12548e43688e01bbcca8951aba4ac99bc25876dca92617bf604980cea2ccd63f2283b751e6b09793cce256e2a5c0c7bc7d449128c75719164615bfd70a62d5fc21b4362eee6f680dc0537b488ddb99e9d357afae8802a1b71e58172c798f8ffa9cbaf045219fbf475cbbd6713327d3e6d2280882b2653f564351e54832443a464b835dee49bff843a2f75f9aaa4c8727c3ddc26ce0613114d05503919ea37f13ffffa3e28c0f62ff03e241449ac2ffc3913fc4d3554133884b6380469dd52d284"}, {0x82, 0x0, "6424820322dcabe68dd133c8335c30a017ec28e5a07dc279d264ef5415c93371951598e09c716b54e8ad431b6e7fc2b95d8b26e7464968fea78f57908cde6b4eec93306101d834d1add299e357b061953c1eac8ffcd2ec7e397c7800290653a6866bfb8e4048f0e4708d99e2cbf4ecae83cfda1086e4ff2862464bdc8061"}, {0x59, 0x0, "b3ac97c0e9310f29391f5aa0958371162673d9d90d8f2887629a281007f9dbad3b84793e4cffaa0c08836d70782704d1a62ac845f907ecf0500a4881a23ffaee0875d3db8f8a0b9753e95fe5e2bb30d6670e547705"}, {0x2c, 0x0, "b6957b3113f9566d87b54b74844a2b641d079f9dc7558f37b5b971d61441bcdd4136c527eb9e7085"}, {0x23, 0x0, "ad71a01fac6dd144d9c8fd5be5e6e3142bd53b019f9a712d630efd4a0b6638"}, {0x7e, 0x0, "116bffcdaabd787a9516bd39da2b124be50fd2e99ff9c42d1b3906c40a0a86304bf9e21ac70dbe521c1fa90eb53b1f024bb82103c30b5c1dd7e04a166ca12f9a09debe43008c487f8ed914500bed4aff62a65a993dc45f3c7fe012506c92986ef6dee95a22dc9f7520d8420235711e56e280b0403ba0771e7e86"}, {0xd3, 0x0, "65bb7182efdf46476fa60caff1d3487da2d879f163d3f71554255175cec0396296bdf234a35b4906e67909ef4d27dbb5d746db6398350e1c973231a40cc791711137bf96a2f97ac83420ae4a1e50f92fb7360293139213f64ae837af4336c24508678abb8c21bdc5081e5d7f20d8e25085bbabf10b744ec1a8ffad59605207fc0908b2acbe32b44816344357778ef0987d3a089aef0bced1c226c413f64cd67847a0f948569fd8fd2e0b6d0c8afa6ad518afb01d651de9ea6939a9f0dcd7e89750a363a54ae964891f96a944396a82"}, {0xf7, 0x0, "57249dfeb3d37787586b796d0db8bf318181830dc83b267069e0f97003bce3711abb23b4d446ceabdbe68d217feb1e9e5dcf3872649db8031f4c7715230c41dc7d7d1f8f3853169a48d49f3c6a505c49cc7459db147d8898c1ab409b471abad1895607e1c6cfab1918864735556dca4c79bea9e8f5a4c2592b6f62b98218309a44de7ef307801f585726d3669f2f5d0765babddc3c44ef239f93400ac7aba685a9949790a098a8681773c241356777dbc87283a339ad6e3f6fd77bbe91843ac6a5149f3cfe62a9c7a2a2f30da01cd7cff07e42838b34fdd855b32a18af0dc7e5e7c724d11609c68db9fc9b8a818680f5f62e1b"}]}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x17f4}, 0x1, 0x0, 0x0, 0x40000}, 0x40090) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x50000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) getresuid(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) write(r4, &(0x7f0000000140), 0x0) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000aa1d800", @ANYRES32=r7, @ANYBLOB="140002"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x80) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x8040ae9f, &(0x7f0000000040)=@arm64) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424020004"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000140)) 488.052092ms ago: executing program 0 (id=8395): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) add_key$user(0x0, 0x0, &(0x7f0000000080)="269d5dfee993d0b38403e96b97e97a715a61f496e8d05a99f2f7ffb097254c115b53559cdf6bc389", 0x28, 0xfffffffffffffffd) (async) syz_usb_connect(0x2, 0x48, &(0x7f0000000080)=ANY=[], 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet6(0xa, 0x80003, 0x5) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@loopback, 0x78, r4}) (async) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) (async) r6 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) r7 = fsmount(r6, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt(r8, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f0000000040)={0x9}, 0x1) (async) fchdir(r7) (async) r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x49) lseek(r9, 0x2, 0x1) 126.341405ms ago: executing program 2 (id=8396): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001cdb000000400000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001140), 0x286042, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x18, r1}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000100)={r1, r7}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) fstat(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x800000, &(0x7f0000000980)=ANY=[@ANYBLOB="7472619feab8cac809e129646e6f3d8d12868710ff28138b5e5ccafb949ec65805c5aafbfc42e7e86852c4e00a9f6ce33414074cd1c32c527180aa7099a2e046dec0c91ee0b85a412698c82004805a74795c59320020ee6fb575389d5ac372214253e426014af4d00c2cd2f4ad45d63fbe6be2", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',noextend,cache=loose,fsuuid=dec66f0f-be6e-16bc-5b2a-ee158483,hash,subj_role=-_,fowner>', @ANYRESDEC=r10, @ANYBLOB=',measure,smackfstransmute=syzkaller\x00,\x00']) sendmmsg$inet(r8, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000640)="f9", 0x1}], 0x1}}], 0x1, 0x2400c042) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, &(0x7f0000000940)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a001c00", @ANYRES32, @ANYBLOB="0000000014000100fe800000"], 0x54}}, 0x0) 65.294035ms ago: executing program 5 (id=8397): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x25, 0x0, &(0x7f0000001480)) 0s ago: executing program 5 (id=8398): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf={0xe0ff, 0xffffffffffffffff}) io_uring_enter(0xffffffffffffffff, 0x6145, 0x9e35, 0x40, 0x0, 0x0) kernel console output (not intermixed with test programs): oogle Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1575.846711][T26145] Call Trace: [ 1575.846720][T26145] [ 1575.846729][T26145] dump_stack_lvl+0xe8/0x150 [ 1575.846762][T26145] should_fail_ex+0x46b/0x600 [ 1575.846805][T26145] should_failslab+0xa8/0x100 [ 1575.846836][T26145] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1575.846862][T26145] ? __alloc_skb+0x1d0/0x7d0 [ 1575.846892][T26145] ? lockdep_hardirqs_on+0x7a/0x110 [ 1575.846933][T26145] __alloc_skb+0x1d0/0x7d0 [ 1575.846962][T26145] sock_wmalloc+0xb2/0x130 [ 1575.846993][T26145] pppoe_sendmsg+0x2b4/0x7c0 [ 1575.847029][T26145] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 1575.847062][T26145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1575.847091][T26145] ____sys_sendmsg+0x94c/0x9c0 [ 1575.847123][T26145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1575.847159][T26145] ? import_iovec+0x73/0xa0 [ 1575.847184][T26145] ___sys_sendmsg+0x2a5/0x360 [ 1575.847203][T26145] ? __lock_acquire+0x6b5/0x2cf0 [ 1575.847230][T26145] ? __pfx____sys_sendmsg+0x10/0x10 [ 1575.847254][T26145] ? kstrtouint+0x6e/0xe0 [ 1575.847299][T26145] ? __fget_files+0x2a/0x420 [ 1575.847324][T26145] ? __fget_files+0x3a6/0x420 [ 1575.847359][T26145] __sys_sendmmsg+0x282/0x4e0 [ 1575.847384][T26145] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1575.847412][T26145] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1575.847446][T26145] ? ksys_write+0x248/0x270 [ 1575.847467][T26145] ? __pfx_ksys_write+0x10/0x10 [ 1575.847492][T26145] __x64_sys_sendmmsg+0xa0/0xc0 [ 1575.847513][T26145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.847531][T26145] do_syscall_64+0x15f/0xf80 [ 1575.847548][T26145] ? trace_irq_disable+0x3b/0x140 [ 1575.847567][T26145] ? clear_bhb_loop+0x40/0x90 [ 1575.847589][T26145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.847606][T26145] RIP: 0033:0x7f6895d2cdd9 [ 1575.847623][T26145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.847638][T26145] RSP: 002b:00007f6893f7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1575.847656][T26145] RAX: ffffffffffffffda RBX: 00007f6895fa5fa0 RCX: 00007f6895d2cdd9 [ 1575.847668][T26145] RDX: 0000000000000002 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1575.847689][T26145] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1575.847699][T26145] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 1575.847709][T26145] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1575.847735][T26145] [ 1576.388046][ T5609] Bluetooth: hci2: command tx timeout [ 1576.510490][T22418] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1576.733979][T22418] usb 6-1: Using ep0 maxpacket: 32 [ 1576.754088][T22418] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1576.755653][T22418] usb 6-1: config 64 has an invalid interface number: 254 but max is 0 [ 1576.755680][T22418] usb 6-1: config 64 has no interface number 0 [ 1576.755729][T22418] usb 6-1: config 64 interface 254 altsetting 12 endpoint 0x5 has an invalid bInterval 64, changing to 7 [ 1576.755771][T22418] usb 6-1: config 64 interface 254 altsetting 12 bulk endpoint 0x8 has invalid maxpacket 8 [ 1576.755815][T22418] usb 6-1: config 64 interface 254 has no altsetting 0 [ 1576.863314][T22418] usb 6-1: New USB device found, idVendor=0f11, idProduct=2050, bcdDevice=31.12 [ 1576.863350][T22418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.863372][T22418] usb 6-1: Product: syz [ 1576.863389][T22418] usb 6-1: Manufacturer: syz [ 1576.863405][T22418] usb 6-1: SerialNumber: syz [ 1576.904209][T26149] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1576.924586][T18933] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.947557][T26162] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7118'. [ 1577.133416][T22418] ldusb 6-1:64.254: Interrupt in endpoint not found [ 1577.161909][T22418] usb 6-1: USB disconnect, device number 30 [ 1577.264054][T26072] lo speed is unknown, defaulting to 1000 [ 1577.266357][T26072] virt_wifi0 speed is unknown, defaulting to 1000 [ 1577.351632][T26170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7119'. [ 1577.351661][T26170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7119'. [ 1578.219939][T18933] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.488782][ T5609] Bluetooth: hci2: command tx timeout [ 1578.723930][T25328] veth0_vlan: entered promiscuous mode [ 1578.955586][T26216] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7137'. [ 1579.320627][T18933] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.402175][T26231] FAULT_INJECTION: forcing a failure. [ 1579.402175][T26231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1579.402213][T26231] CPU: 0 UID: 0 PID: 26231 Comm: syz.5.7143 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1579.402241][T26231] Tainted: [L]=SOFTLOCKUP [ 1579.402248][T26231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1579.402261][T26231] Call Trace: [ 1579.402269][T26231] [ 1579.402278][T26231] dump_stack_lvl+0xe8/0x150 [ 1579.402311][T26231] should_fail_ex+0x46b/0x600 [ 1579.402349][T26231] _copy_from_user+0x2d/0xb0 [ 1579.402374][T26231] ___sys_sendmsg+0x1c6/0x360 [ 1579.402400][T26231] ? __lock_acquire+0x6b5/0x2cf0 [ 1579.402434][T26231] ? __pfx____sys_sendmsg+0x10/0x10 [ 1579.402457][T26231] ? __lock_acquire+0x6b5/0x2cf0 [ 1579.402489][T26231] ? kstrtouint+0x6e/0xe0 [ 1579.402558][T26231] __sys_sendmmsg+0x282/0x4e0 [ 1579.402588][T26231] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1579.402623][T26231] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1579.402665][T26231] ? ksys_write+0x248/0x270 [ 1579.402691][T26231] ? __pfx_ksys_write+0x10/0x10 [ 1579.402723][T26231] __x64_sys_sendmmsg+0xa0/0xc0 [ 1579.402748][T26231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.402770][T26231] do_syscall_64+0x15f/0xf80 [ 1579.402791][T26231] ? trace_irq_disable+0x3b/0x140 [ 1579.402815][T26231] ? clear_bhb_loop+0x40/0x90 [ 1579.402841][T26231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.402862][T26231] RIP: 0033:0x7f6895d2cdd9 [ 1579.402889][T26231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1579.402908][T26231] RSP: 002b:00007f6893f7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1579.402930][T26231] RAX: ffffffffffffffda RBX: 00007f6895fa5fa0 RCX: 00007f6895d2cdd9 [ 1579.402945][T26231] RDX: 0000000000000002 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1579.402959][T26231] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1579.402972][T26231] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 1579.402985][T26231] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1579.403017][T26231] [ 1579.917322][T25328] veth1_vlan: entered promiscuous mode [ 1580.061201][T26240] af_packet: tpacket_rcv: packet too big, clamped from 2902 to 4294967272. macoff=96 [ 1580.206549][T25328] veth0_macvtap: entered promiscuous mode [ 1580.360543][ T36] audit: type=1326 audit(2000001825.560:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26250 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1580.360597][ T36] audit: type=1326 audit(2000001825.560:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26250 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1580.363072][ T36] audit: type=1326 audit(2000001825.560:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26250 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1580.364614][ T36] audit: type=1326 audit(2000001825.560:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26250 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1580.365463][ T36] audit: type=1326 audit(2000001825.560:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26250 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1580.365752][ T36] audit: type=1326 audit(2000001825.560:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26250 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1580.366033][ T36] audit: type=1326 audit(2000001825.560:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26250 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1580.366989][ T36] audit: type=1326 audit(2000001825.560:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26250 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1580.367414][ T36] audit: type=1326 audit(2000001825.560:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26250 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1580.367719][ T36] audit: type=1326 audit(2000001825.560:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26250 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1580.551153][ T5609] Bluetooth: hci2: command tx timeout [ 1580.693197][T25328] veth1_macvtap: entered promiscuous mode [ 1581.598013][T26072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.598228][T26072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.598494][T26072] bridge_slave_0: entered allmulticast mode [ 1581.601197][T26072] bridge_slave_0: entered promiscuous mode [ 1581.822822][T26072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.822942][T26072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.823187][T26072] bridge_slave_1: entered allmulticast mode [ 1581.852585][T26072] bridge_slave_1: entered promiscuous mode [ 1581.973254][T25328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1582.001840][T26072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1582.034339][T26072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1582.112289][T25328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1582.325219][T26072] team0: Port device team_slave_0 added [ 1582.369745][T26072] team0: Port device team_slave_1 added [ 1582.678339][T18933] bridge_slave_1: left allmulticast mode [ 1582.678379][T18933] bridge_slave_1: left promiscuous mode [ 1582.717625][T18933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.820045][T18933] bridge_slave_0: left allmulticast mode [ 1582.820084][T18933] bridge_slave_0: left promiscuous mode [ 1582.820349][T18933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.278992][T26307] overlayfs: failed to clone upperpath [ 1585.368673][T18933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.462170][T18933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.505486][T18933] bond0 (unregistering): Released all slaves [ 1585.593346][T26318] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.7172'. [ 1585.596610][ T1169] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.756186][ T1169] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.772857][T26072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1585.772877][T26072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1585.772908][T26072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1585.774514][ T1169] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.936616][T26326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7177'. [ 1585.958197][T26072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1585.958216][T26072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1585.958246][T26072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1585.962849][T26326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7177'. [ 1585.972943][ T1169] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.661620][T26342] netlink: 'syz.2.7183': attribute type 12 has an invalid length. [ 1586.661646][T26342] netlink: 'syz.2.7183': attribute type 29 has an invalid length. [ 1586.661662][T26342] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7183'. [ 1586.661704][T26342] netlink: 59 bytes leftover after parsing attributes in process `syz.2.7183'. [ 1587.156084][T26072] hsr_slave_0: entered promiscuous mode [ 1587.157516][T26072] hsr_slave_1: entered promiscuous mode [ 1587.178997][T26072] debugfs: 'hsr0' already exists in 'hsr' [ 1587.179025][T26072] Cannot create hsr debugfs directory [ 1588.213464][T18933] hsr_slave_0: left promiscuous mode [ 1588.249228][T18933] hsr_slave_1: left promiscuous mode [ 1588.250465][T18933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1588.250495][T18933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1588.282097][T18933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1588.282127][T18933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1588.400590][T18933] veth1_macvtap: left promiscuous mode [ 1588.400692][T18933] veth0_macvtap: left promiscuous mode [ 1588.400926][T18933] veth1_vlan: left promiscuous mode [ 1588.401119][T18933] veth0_vlan: left promiscuous mode [ 1589.603325][T18933] team0 (unregistering): Port device team_slave_1 removed [ 1589.689462][T18933] team0 (unregistering): Port device team_slave_0 removed [ 1590.332820][T17306] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1590.360385][T17306] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1590.397412][T17306] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1590.417607][T17306] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1590.435124][T17306] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1591.707853][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 1591.707960][ T36] audit: type=1326 audit(2000001836.900:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26429 comm="syz.0.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1591.708292][ T36] audit: type=1326 audit(2000001836.910:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26429 comm="syz.0.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1591.731442][ T36] audit: type=1326 audit(2000001836.930:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26429 comm="syz.0.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1591.731504][ T36] audit: type=1326 audit(2000001836.930:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26429 comm="syz.0.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1591.732039][ T36] audit: type=1326 audit(2000001836.930:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26429 comm="syz.0.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1591.732092][ T36] audit: type=1326 audit(2000001836.930:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26429 comm="syz.0.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1591.732476][ T36] audit: type=1326 audit(2000001836.930:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26429 comm="syz.0.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1591.733579][ T36] audit: type=1326 audit(2000001836.930:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26429 comm="syz.0.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1591.740477][ T36] audit: type=1326 audit(2000001836.940:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26429 comm="syz.0.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59c7a8e647 code=0x7ffc0000 [ 1591.742742][ T36] audit: type=1326 audit(2000001836.940:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26429 comm="syz.0.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1592.641445][ T5609] Bluetooth: hci3: command tx timeout [ 1592.738079][T22418] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1592.973613][T22418] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1592.973660][T22418] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1592.973700][T22418] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1592.973724][T22418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.034993][T22418] usb 6-1: config 0 descriptor?? [ 1593.482198][T22418] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 1593.482234][T22418] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 1593.482257][T22418] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 1593.482279][T22418] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 1593.482302][T22418] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 1593.482324][T22418] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 1593.482346][T22418] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 1593.485837][T22418] hid-thrustmaster 0003:044F:B65D.0010: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 1593.486080][T22418] hid-thrustmaster 0003:044F:B65D.0010: Wrong number of endpoints? [ 1593.541148][ C1] hid-thrustmaster 0003:044F:B65D.0010: Unknown packet type 0x0, unable to proceed further with wheel init [ 1593.917529][T22418] usb 6-1: USB disconnect, device number 31 [ 1594.518890][T26480] FAULT_INJECTION: forcing a failure. [ 1594.518890][T26480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1594.518929][T26480] CPU: 1 UID: 0 PID: 26480 Comm: syz.5.7226 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1594.518959][T26480] Tainted: [L]=SOFTLOCKUP [ 1594.518966][T26480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1594.518998][T26480] Call Trace: [ 1594.519008][T26480] [ 1594.519018][T26480] dump_stack_lvl+0xe8/0x150 [ 1594.519055][T26480] should_fail_ex+0x46b/0x600 [ 1594.519095][T26480] _copy_from_user+0x2d/0xb0 [ 1594.519121][T26480] get_itimerspec64+0xaa/0x310 [ 1594.519159][T26480] ? __pfx_get_itimerspec64+0x10/0x10 [ 1594.519191][T26480] ? lockdep_hardirqs_on+0x7a/0x110 [ 1594.519229][T26480] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1594.519277][T26480] __x64_sys_timer_settime+0x15c/0x270 [ 1594.519321][T26480] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 1594.519373][T26480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.519396][T26480] do_syscall_64+0x15f/0xf80 [ 1594.519416][T26480] ? trace_irq_disable+0x3b/0x140 [ 1594.519442][T26480] ? clear_bhb_loop+0x40/0x90 [ 1594.519486][T26480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.519510][T26480] RIP: 0033:0x7f6895d2cdd9 [ 1594.519532][T26480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.519552][T26480] RSP: 002b:00007f6893f7e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 1594.519575][T26480] RAX: ffffffffffffffda RBX: 00007f6895fa5fa0 RCX: 00007f6895d2cdd9 [ 1594.519592][T26480] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000 [ 1594.519606][T26480] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.519620][T26480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.519633][T26480] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1594.519668][T26480] [ 1594.718525][ T5609] Bluetooth: hci3: command tx timeout [ 1594.852321][ T5256] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1594.891642][T26390] lo speed is unknown, defaulting to 1000 [ 1594.894508][T26390] virt_wifi0 speed is unknown, defaulting to 1000 [ 1596.802060][ T5609] Bluetooth: hci3: command tx timeout [ 1597.477820][T26559] FAULT_INJECTION: forcing a failure. [ 1597.477820][T26559] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.479775][T26559] CPU: 1 UID: 0 PID: 26559 Comm: syz.5.7252 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1597.479810][T26559] Tainted: [L]=SOFTLOCKUP [ 1597.479819][T26559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1597.479833][T26559] Call Trace: [ 1597.479842][T26559] [ 1597.479853][T26559] dump_stack_lvl+0xe8/0x150 [ 1597.479892][T26559] should_fail_ex+0x46b/0x600 [ 1597.479935][T26559] should_failslab+0xa8/0x100 [ 1597.479966][T26559] kmem_cache_alloc_noprof+0x87/0x680 [ 1597.479993][T26559] ? do_getname+0x2e/0x250 [ 1597.480031][T26559] do_getname+0x2e/0x250 [ 1597.480076][T26559] __se_sys_linkat+0x49/0x2d0 [ 1597.480108][T26559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.480136][T26559] do_syscall_64+0x15f/0xf80 [ 1597.480158][T26559] ? trace_irq_disable+0x3b/0x140 [ 1597.480186][T26559] ? clear_bhb_loop+0x40/0x90 [ 1597.480216][T26559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.480241][T26559] RIP: 0033:0x7f6895d2cdd9 [ 1597.480263][T26559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1597.480283][T26559] RSP: 002b:00007f6893f7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 1597.480309][T26559] RAX: ffffffffffffffda RBX: 00007f6895fa5fa0 RCX: 00007f6895d2cdd9 [ 1597.480326][T26559] RDX: ffffffffffffff9c RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 1597.480348][T26559] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1597.480363][T26559] R10: 0000200000000ac0 R11: 0000000000000246 R12: 0000000000000001 [ 1597.480379][T26559] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1597.480416][T26559] [ 1598.237500][T18933] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.346685][T26582] FAULT_INJECTION: forcing a failure. [ 1598.346685][T26582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1598.346730][T26582] CPU: 1 UID: 0 PID: 26582 Comm: syz.5.7263 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1598.346753][T26582] Tainted: [L]=SOFTLOCKUP [ 1598.346759][T26582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1598.346769][T26582] Call Trace: [ 1598.346776][T26582] [ 1598.346783][T26582] dump_stack_lvl+0xe8/0x150 [ 1598.346807][T26582] should_fail_ex+0x46b/0x600 [ 1598.346839][T26582] _copy_to_user+0x31/0xb0 [ 1598.346859][T26582] simple_read_from_buffer+0xe1/0x170 [ 1598.346890][T26582] proc_fail_nth_read+0x1be/0x230 [ 1598.346919][T26582] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1598.346949][T26582] ? rw_verify_area+0x2ac/0x4e0 [ 1598.346966][T26582] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1598.346993][T26582] vfs_read+0x212/0xa80 [ 1598.347018][T26582] ? __pfx_vfs_read+0x10/0x10 [ 1598.347043][T26582] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1598.347070][T26582] ? lockdep_hardirqs_on+0x7a/0x110 [ 1598.347096][T26582] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1598.347122][T26582] ? mutex_lock_nested+0x152/0x1d0 [ 1598.347141][T26582] ? fdget_pos+0x252/0x320 [ 1598.347163][T26582] ksys_read+0x156/0x270 [ 1598.347183][T26582] ? __pfx_ksys_read+0x10/0x10 [ 1598.347199][T26582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.347223][T26582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.347240][T26582] do_syscall_64+0x15f/0xf80 [ 1598.347255][T26582] ? trace_irq_disable+0x3b/0x140 [ 1598.347276][T26582] ? clear_bhb_loop+0x40/0x90 [ 1598.347296][T26582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.347313][T26582] RIP: 0033:0x7f6895ced60e [ 1598.347328][T26582] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1598.347342][T26582] RSP: 002b:00007f6893f7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1598.347359][T26582] RAX: ffffffffffffffda RBX: 00007f6893f7e6c0 RCX: 00007f6895ced60e [ 1598.347371][T26582] RDX: 000000000000000f RSI: 00007f6893f7e0a0 RDI: 0000000000000003 [ 1598.347382][T26582] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1598.347392][T26582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1598.347402][T26582] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1598.347428][T26582] [ 1598.878897][ T5609] Bluetooth: hci3: command tx timeout [ 1599.732966][T26612] FAULT_INJECTION: forcing a failure. [ 1599.732966][T26612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1599.732996][T26612] CPU: 1 UID: 0 PID: 26612 Comm: syz.5.7272 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1599.733018][T26612] Tainted: [L]=SOFTLOCKUP [ 1599.733025][T26612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1599.733035][T26612] Call Trace: [ 1599.733041][T26612] [ 1599.733049][T26612] dump_stack_lvl+0xe8/0x150 [ 1599.733073][T26612] should_fail_ex+0x46b/0x600 [ 1599.733103][T26612] _copy_to_user+0x31/0xb0 [ 1599.733136][T26612] simple_read_from_buffer+0xe1/0x170 [ 1599.733172][T26612] proc_fail_nth_read+0x1be/0x230 [ 1599.733200][T26612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1599.733227][T26612] ? rw_verify_area+0x2ac/0x4e0 [ 1599.733244][T26612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1599.733270][T26612] vfs_read+0x212/0xa80 [ 1599.733293][T26612] ? __pfx_vfs_read+0x10/0x10 [ 1599.733312][T26612] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1599.733338][T26612] ? lockdep_hardirqs_on+0x7a/0x110 [ 1599.733362][T26612] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1599.733387][T26612] ? mutex_lock_nested+0x152/0x1d0 [ 1599.733406][T26612] ? fdget_pos+0x252/0x320 [ 1599.733427][T26612] ksys_read+0x156/0x270 [ 1599.733446][T26612] ? __pfx_ksys_read+0x10/0x10 [ 1599.733469][T26612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.733487][T26612] do_syscall_64+0x15f/0xf80 [ 1599.733502][T26612] ? clear_bhb_loop+0x40/0x90 [ 1599.733522][T26612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.733537][T26612] RIP: 0033:0x7f6895ced60e [ 1599.733552][T26612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1599.733566][T26612] RSP: 002b:00007f6893f7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1599.733582][T26612] RAX: ffffffffffffffda RBX: 00007f6893f7e6c0 RCX: 00007f6895ced60e [ 1599.733593][T26612] RDX: 000000000000000f RSI: 00007f6893f7e0a0 RDI: 0000000000000006 [ 1599.733604][T26612] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1599.733613][T26612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1599.733623][T26612] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1599.733647][T26612] [ 1600.903003][T18933] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.816816][T18933] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.884853][T26390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.885092][T26390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.885343][T26390] bridge_slave_0: entered allmulticast mode [ 1601.920821][T26390] bridge_slave_0: entered promiscuous mode [ 1602.029204][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 1602.029224][ T36] audit: type=1326 audit(2000001847.230:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26654 comm="syz.0.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1602.032694][ T36] audit: type=1326 audit(2000001847.230:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26654 comm="syz.0.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1602.034765][ T36] audit: type=1326 audit(2000001847.230:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26654 comm="syz.0.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1602.035049][ T36] audit: type=1326 audit(2000001847.230:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26654 comm="syz.0.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1602.038378][ T36] audit: type=1326 audit(2000001847.240:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26654 comm="syz.0.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1602.038729][ T36] audit: type=1326 audit(2000001847.240:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26654 comm="syz.0.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1602.039378][ T36] audit: type=1326 audit(2000001847.240:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26654 comm="syz.0.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1602.042436][ T36] audit: type=1326 audit(2000001847.240:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26654 comm="syz.0.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1602.458944][T26656] netlink: 'syz.0.7288': attribute type 2 has an invalid length. [ 1602.458965][T26656] netlink: 'syz.0.7288': attribute type 1 has an invalid length. [ 1602.458975][T26656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7288'. [ 1602.503677][T26390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.503838][T26390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.504097][T26390] bridge_slave_1: entered allmulticast mode [ 1602.507490][T26390] bridge_slave_1: entered promiscuous mode [ 1602.549322][T26666] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7292'. [ 1602.569258][ T36] audit: type=1326 audit(2000001847.760:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26654 comm="syz.0.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1602.569595][ T36] audit: type=1326 audit(2000001847.770:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26654 comm="syz.0.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1603.197483][T26681] 9pnet_fd: Insufficient options for proto=fd [ 1604.163163][T18933] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.820672][T26390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1604.856490][T26390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1606.500232][T26390] team0: Port device team_slave_0 added [ 1606.519566][T26390] team0: Port device team_slave_1 added [ 1606.594187][T26390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1606.594208][T26390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1606.594238][T26390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1606.596879][T26390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1606.596895][T26390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1606.596926][T26390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1606.803539][T26072] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1606.833195][T26072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1606.899874][T26072] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1606.974010][T26072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1607.033146][T26390] hsr_slave_0: entered promiscuous mode [ 1607.037168][T26390] hsr_slave_1: entered promiscuous mode [ 1607.059640][T26390] debugfs: 'hsr0' already exists in 'hsr' [ 1607.059671][T26390] Cannot create hsr debugfs directory [ 1607.397776][T26072] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1608.401616][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.401697][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.472166][T26072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1609.153455][T26072] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1609.252946][T26072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1609.543260][T26757] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7317'. [ 1610.063956][T18864] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1610.188013][T18864] usb 6-1: device descriptor read/64, error -71 [ 1610.428045][T18864] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1610.568039][T18864] usb 6-1: device descriptor read/64, error -71 [ 1610.678394][T18864] usb usb6-port1: attempt power cycle [ 1610.698493][T18933] bridge_slave_1: left allmulticast mode [ 1610.698522][T18933] bridge_slave_1: left promiscuous mode [ 1610.698736][T18933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.729836][T26793] 9p: Bad value for 'rfdno' [ 1610.789999][T18933] bridge_slave_0: left allmulticast mode [ 1610.790027][T18933] bridge_slave_0: left promiscuous mode [ 1610.790205][T18933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.018055][T18864] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1611.043167][T18864] usb 6-1: device descriptor read/8, error -71 [ 1611.298016][T18864] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1611.325287][T18864] usb 6-1: device descriptor read/8, error -71 [ 1611.428425][T18864] usb usb6-port1: unable to enumerate USB device [ 1611.788878][T18933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1611.869380][T18933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1611.890502][T18933] bond0 (unregistering): Released all slaves [ 1611.965356][T26794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7327'. [ 1615.538837][T26072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1615.707130][T18933] hsr_slave_0: left promiscuous mode [ 1615.738226][T18933] hsr_slave_1: left promiscuous mode [ 1615.739398][T18933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1615.739426][T18933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1615.900705][T18933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1615.900744][T18933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1615.968493][T26858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7349'. [ 1615.968636][T26858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7349'. [ 1615.968765][T26858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7349'. [ 1615.968894][T26858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7349'. [ 1615.969013][T26858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7349'. [ 1615.969133][T26858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7349'. [ 1615.969283][T26858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7349'. [ 1615.969402][T26858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7349'. [ 1615.969521][T26858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7349'. [ 1615.969639][T26858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7349'. [ 1617.702690][T18933] veth1_macvtap: left promiscuous mode [ 1617.702769][T18933] veth0_macvtap: left promiscuous mode [ 1617.702937][T18933] veth1_vlan: left promiscuous mode [ 1617.703067][T18933] veth0_vlan: left promiscuous mode [ 1617.880797][T26887] FAULT_INJECTION: forcing a failure. [ 1617.880797][T26887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1617.880836][T26887] CPU: 1 UID: 0 PID: 26887 Comm: syz.5.7358 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1617.880863][T26887] Tainted: [L]=SOFTLOCKUP [ 1617.880871][T26887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1617.880883][T26887] Call Trace: [ 1617.880891][T26887] [ 1617.880900][T26887] dump_stack_lvl+0xe8/0x150 [ 1617.880931][T26887] should_fail_ex+0x46b/0x600 [ 1617.880968][T26887] _copy_from_user+0x2d/0xb0 [ 1617.880993][T26887] __se_sys_move_pages+0x146e/0x1d40 [ 1617.881021][T26887] ? get_pid_task+0x20/0x1f0 [ 1617.881061][T26887] ? get_pid_task+0x20/0x1f0 [ 1617.881087][T26887] ? get_pid_task+0x20/0x1f0 [ 1617.881116][T26887] ? __pfx___se_sys_move_pages+0x10/0x10 [ 1617.881173][T26887] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1617.881208][T26887] ? lockdep_hardirqs_on+0x7a/0x110 [ 1617.881240][T26887] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1617.881274][T26887] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1617.881301][T26887] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1617.881361][T26887] ? fput+0xa0/0xd0 [ 1617.881392][T26887] ? ksys_write+0x248/0x270 [ 1617.881420][T26887] ? __pfx_ksys_write+0x10/0x10 [ 1617.881450][T26887] ? __x64_sys_move_pages+0x21/0xf0 [ 1617.881478][T26887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.881503][T26887] do_syscall_64+0x15f/0xf80 [ 1617.881527][T26887] ? trace_irq_disable+0x3b/0x140 [ 1617.881554][T26887] ? clear_bhb_loop+0x40/0x90 [ 1617.881581][T26887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.881603][T26887] RIP: 0033:0x7f6895d2cdd9 [ 1617.881624][T26887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.881642][T26887] RSP: 002b:00007f6893f7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1617.881666][T26887] RAX: ffffffffffffffda RBX: 00007f6895fa5fa0 RCX: 00007f6895d2cdd9 [ 1617.881686][T26887] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1617.881696][T26887] RBP: 00007f6893f7e090 R08: 0000200000001680 R09: 0000000000000000 [ 1617.881707][T26887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1617.881716][T26887] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1617.881741][T26887] [ 1618.061658][T26888] netlink: 'syz.0.7357': attribute type 1 has an invalid length. [ 1619.950365][T18933] team0 (unregistering): Port device team_slave_1 removed [ 1620.979632][T18933] team0 (unregistering): Port device team_slave_0 removed [ 1621.474502][T26964] 9pnet_fd: Insufficient options for proto=fd [ 1621.801595][ T5256] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1621.852900][T26072] 8021q: adding VLAN 0 to HW filter on device team0 [ 1621.914198][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.914426][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1621.961356][T14480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.961529][T14480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1622.221505][T26980] __nla_validate_parse: 27 callbacks suppressed [ 1622.221528][T26980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7398'. [ 1622.221549][T26980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7398'. [ 1623.815372][T27017] gretap1: entered promiscuous mode [ 1623.816378][T27017] batman_adv: batadv0: Adding interface: gretap1 [ 1623.816394][T27017] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1623.816427][T27017] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1623.874915][T27023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7409'. [ 1623.874948][T27023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7409'. [ 1624.147002][T27032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7410'. [ 1624.690398][T27050] FAULT_INJECTION: forcing a failure. [ 1624.690398][T27050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1624.690435][T27050] CPU: 1 UID: 0 PID: 27050 Comm: syz.5.7415 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1624.690464][T27050] Tainted: [L]=SOFTLOCKUP [ 1624.690472][T27050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1624.690483][T27050] Call Trace: [ 1624.690490][T27050] [ 1624.690497][T27050] dump_stack_lvl+0xe8/0x150 [ 1624.690524][T27050] should_fail_ex+0x46b/0x600 [ 1624.690556][T27050] _copy_to_user+0x31/0xb0 [ 1624.690578][T27050] simple_read_from_buffer+0xe1/0x170 [ 1624.690610][T27050] proc_fail_nth_read+0x1be/0x230 [ 1624.690644][T27050] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1624.690678][T27050] ? rw_verify_area+0x2ac/0x4e0 [ 1624.690700][T27050] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1624.690729][T27050] vfs_read+0x212/0xa80 [ 1624.690759][T27050] ? __pfx_vfs_read+0x10/0x10 [ 1624.690784][T27050] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1624.690817][T27050] ? lockdep_hardirqs_on+0x7a/0x110 [ 1624.690846][T27050] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1624.690872][T27050] ? mutex_lock_nested+0x152/0x1d0 [ 1624.690892][T27050] ? fdget_pos+0x252/0x320 [ 1624.690914][T27050] ksys_read+0x156/0x270 [ 1624.690935][T27050] ? __pfx_ksys_read+0x10/0x10 [ 1624.690961][T27050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.690980][T27050] do_syscall_64+0x15f/0xf80 [ 1624.691006][T27050] ? trace_irq_disable+0x3b/0x140 [ 1624.691027][T27050] ? clear_bhb_loop+0x40/0x90 [ 1624.691048][T27050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.691065][T27050] RIP: 0033:0x7f6895ced60e [ 1624.691081][T27050] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1624.691100][T27050] RSP: 002b:00007f6893f7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1624.691118][T27050] RAX: ffffffffffffffda RBX: 00007f6893f7e6c0 RCX: 00007f6895ced60e [ 1624.691131][T27050] RDX: 000000000000000f RSI: 00007f6893f7e0a0 RDI: 0000000000000003 [ 1624.691141][T27050] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.691152][T27050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1624.691162][T27050] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1624.691189][T27050] [ 1625.128928][T27053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7416'. [ 1626.191550][T26390] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1626.251540][T26390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1626.255162][T26390] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1626.367640][T26390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1626.381780][T26390] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1626.408610][T26390] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1626.430797][T26072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1626.431488][T26390] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1627.722527][T26390] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1628.565030][T26390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1628.783488][T26390] 8021q: adding VLAN 0 to HW filter on device team0 [ 1628.987989][T18933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.988154][T18933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1629.061270][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.061499][ T5797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1629.145563][T26072] veth0_vlan: entered promiscuous mode [ 1629.228607][T26072] veth1_vlan: entered promiscuous mode [ 1629.770863][T26072] veth0_macvtap: entered promiscuous mode [ 1629.997186][T26072] veth1_macvtap: entered promiscuous mode [ 1630.073103][T26072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1630.162656][T26072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1630.189490][ T5797] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.190238][ T5797] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.194498][ T5797] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.231935][ T5797] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.256341][T26390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1633.083490][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1633.167019][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1633.170696][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1633.186773][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1633.187642][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1634.342434][T27230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7462'. [ 1634.954542][T18933] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.243623][T26390] veth0_vlan: entered promiscuous mode [ 1635.588924][T17306] Bluetooth: hci2: command tx timeout [ 1635.700985][T27269] Attempt to restore checkpoint with obsolete wellknown handles [ 1637.045720][T18933] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.668587][T17306] Bluetooth: hci2: command tx timeout [ 1638.956055][T26390] veth1_vlan: entered promiscuous mode [ 1639.196078][T27302] afs: Unknown parameter 'smackfshatd' [ 1639.501537][T18933] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.596072][T27204] lo speed is unknown, defaulting to 1000 [ 1639.608636][T27204] virt_wifi0 speed is unknown, defaulting to 1000 [ 1639.875473][T27331] bond3: up delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 1639.875512][T27331] bond3: peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms [ 1639.875670][T27331] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 1639.943108][T27331] bond3 (unregistering): Released all slaves [ 1640.066182][T27335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1640.162223][T27335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1640.192699][T27342] FAULT_INJECTION: forcing a failure. [ 1640.192699][T27342] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1640.192740][T27342] CPU: 1 UID: 0 PID: 27342 Comm: syz.5.7504 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1640.192771][T27342] Tainted: [L]=SOFTLOCKUP [ 1640.192779][T27342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1640.192791][T27342] Call Trace: [ 1640.192800][T27342] [ 1640.192810][T27342] dump_stack_lvl+0xe8/0x150 [ 1640.192842][T27342] should_fail_ex+0x46b/0x600 [ 1640.192883][T27342] prepare_alloc_pages+0x22a/0x6b0 [ 1640.192923][T27342] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1640.192957][T27342] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1640.192991][T27342] ? __pfx_policy_nodemask+0x10/0x10 [ 1640.193017][T27342] ? do_raw_spin_lock+0x12b/0x2f0 [ 1640.193056][T27342] alloc_pages_mpol+0xd1/0x380 [ 1640.193089][T27342] alloc_pages_noprof+0xd2/0x2f0 [ 1640.193120][T27342] pte_alloc_one+0x22/0x380 [ 1640.193153][T27342] __pte_alloc+0x25/0x1a0 [ 1640.193189][T27342] do_pte_missing+0x1c13/0x2950 [ 1640.193228][T27342] ? __pmd_alloc+0x41b/0x5e0 [ 1640.193258][T27342] handle_mm_fault+0xd0a/0x13c0 [ 1640.193289][T27342] ? handle_mm_fault+0xe7/0x13c0 [ 1640.193319][T27342] ? __pfx_handle_mm_fault+0x10/0x10 [ 1640.193359][T27342] ? __lock_acquire+0x6b5/0x2cf0 [ 1640.193395][T27342] ? lock_mm_and_find_vma+0xa7/0x340 [ 1640.193433][T27342] do_user_addr_fault+0x75b/0x1340 [ 1640.193484][T27342] exc_page_fault+0x6a/0xc0 [ 1640.193521][T27342] asm_exc_page_fault+0x26/0x30 [ 1640.193544][T27342] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1640.193572][T27342] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1640.193592][T27342] RSP: 0018:ffffc90005e97af8 EFLAGS: 00050246 [ 1640.193613][T27342] RAX: ffffffff849ec501 RBX: ffffc90005e97d20 RCX: 0000000000000040 [ 1640.193630][T27342] RDX: 0000000000000000 RSI: ffffc90005e97d20 RDI: 0000200000000240 [ 1640.193645][T27342] RBP: ffffc90005e97c70 R08: ffffc90005e97d5f R09: 1ffff92000bd2fab [ 1640.193662][T27342] R10: dffffc0000000000 R11: fffff52000bd2fac R12: 1ffff92000bd2fc5 [ 1640.193677][T27342] R13: 0000200000000240 R14: ffffc90005e97e38 R15: 0000000000000040 [ 1640.193702][T27342] ? _copy_to_iter+0x211/0x17d0 [ 1640.193746][T27342] _copy_to_iter+0x255/0x17d0 [ 1640.193789][T27342] ? __asan_memset+0x22/0x50 [ 1640.193829][T27342] ? __pfx__copy_to_iter+0x10/0x10 [ 1640.193870][T27342] ? crng_make_state+0x318/0x5d0 [ 1640.193909][T27342] get_random_bytes_user+0x1cf/0x3d0 [ 1640.193948][T27342] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1640.193990][T27342] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1640.194040][T27342] ? import_ubuf+0xfb/0x1d0 [ 1640.194067][T27342] __x64_sys_getrandom+0x17a/0x270 [ 1640.194103][T27342] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1640.194135][T27342] ? ksys_write+0x248/0x270 [ 1640.194163][T27342] ? __pfx_ksys_write+0x10/0x10 [ 1640.194198][T27342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.194223][T27342] do_syscall_64+0x15f/0xf80 [ 1640.194243][T27342] ? trace_irq_disable+0x3b/0x140 [ 1640.194270][T27342] ? clear_bhb_loop+0x40/0x90 [ 1640.194319][T27342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.194342][T27342] RIP: 0033:0x7f6895d2cdd9 [ 1640.194363][T27342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1640.194383][T27342] RSP: 002b:00007f6893f7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1640.194406][T27342] RAX: ffffffffffffffda RBX: 00007f6895fa5fa0 RCX: 00007f6895d2cdd9 [ 1640.194423][T27342] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 1640.194444][T27342] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1640.194459][T27342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1640.194473][T27342] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1640.194509][T27342] [ 1640.708794][T17306] Bluetooth: hci2: command tx timeout [ 1640.937041][T27335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1640.946022][T27335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1640.972573][T27335] ,Íìpó»: left promiscuous mode [ 1640.974300][T27335] veth0_vlan: left promiscuous mode [ 1640.975551][T27335] veth0_vlan: entered promiscuous mode [ 1641.006713][T27335] ,Íìpó»: entered promiscuous mode [ 1641.075027][T27335] veth1_macvtap: left promiscuous mode [ 1641.079775][T27335] veth0_macvtap: left promiscuous mode [ 1641.089683][T27335] veth0_macvtap: entered promiscuous mode [ 1641.095849][T27335] veth1_macvtap: entered promiscuous mode [ 1641.154142][T27335] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1641.156539][T27335] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1641.181807][T27335] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1641.202408][T27335] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1641.277163][T27335] veth3: left allmulticast mode [ 1641.299397][T27335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1641.358865][T27335] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1641.461793][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.462048][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1641.486890][T27371] openvswitch: netlink: Flow actions attr not present in new flow. [ 1641.524331][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.524483][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1641.694691][T27380] netlink: 'syz.2.7520': attribute type 1 has an invalid length. [ 1642.049260][T18933] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.154336][T27393] FAULT_INJECTION: forcing a failure. [ 1642.154336][T27393] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.154365][T27393] CPU: 1 UID: 0 PID: 27393 Comm: syz.5.7527 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1642.154387][T27393] Tainted: [L]=SOFTLOCKUP [ 1642.154394][T27393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1642.154407][T27393] Call Trace: [ 1642.154414][T27393] [ 1642.154420][T27393] dump_stack_lvl+0xe8/0x150 [ 1642.154443][T27393] should_fail_ex+0x46b/0x600 [ 1642.154473][T27393] should_failslab+0xa8/0x100 [ 1642.154494][T27393] kmem_cache_alloc_noprof+0x87/0x680 [ 1642.154514][T27393] ? __anon_vma_prepare+0xcb/0x4a0 [ 1642.154536][T27393] __anon_vma_prepare+0xcb/0x4a0 [ 1642.154553][T27393] ? __pte_alloc+0x15e/0x1a0 [ 1642.154578][T27393] do_pte_missing+0x1d67/0x2950 [ 1642.154604][T27393] ? __pmd_alloc+0x41b/0x5e0 [ 1642.154625][T27393] handle_mm_fault+0xd0a/0x13c0 [ 1642.154647][T27393] ? handle_mm_fault+0xe7/0x13c0 [ 1642.154666][T27393] ? __pfx_handle_mm_fault+0x10/0x10 [ 1642.154693][T27393] ? __lock_acquire+0x6b5/0x2cf0 [ 1642.154719][T27393] ? lock_mm_and_find_vma+0xa7/0x340 [ 1642.154741][T27393] do_user_addr_fault+0x75b/0x1340 [ 1642.154772][T27393] exc_page_fault+0x6a/0xc0 [ 1642.154798][T27393] asm_exc_page_fault+0x26/0x30 [ 1642.154813][T27393] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1642.154832][T27393] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1642.154846][T27393] RSP: 0018:ffffc90005be7af8 EFLAGS: 00050246 [ 1642.154861][T27393] RAX: ffffffff849ec501 RBX: ffffc90005be7d20 RCX: 0000000000000040 [ 1642.154872][T27393] RDX: 0000000000000000 RSI: ffffc90005be7d20 RDI: 0000200000000240 [ 1642.154884][T27393] RBP: ffffc90005be7c70 R08: ffffc90005be7d5f R09: 1ffff92000b7cfab [ 1642.154895][T27393] R10: dffffc0000000000 R11: fffff52000b7cfac R12: 1ffff92000b7cfc5 [ 1642.154907][T27393] R13: 0000200000000240 R14: ffffc90005be7e38 R15: 0000000000000040 [ 1642.154924][T27393] ? _copy_to_iter+0x211/0x17d0 [ 1642.154955][T27393] _copy_to_iter+0x255/0x17d0 [ 1642.154984][T27393] ? __asan_memset+0x22/0x50 [ 1642.155012][T27393] ? __pfx__copy_to_iter+0x10/0x10 [ 1642.155041][T27393] ? crng_make_state+0x318/0x5d0 [ 1642.155070][T27393] get_random_bytes_user+0x1cf/0x3d0 [ 1642.155097][T27393] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1642.155127][T27393] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1642.155161][T27393] ? import_ubuf+0xfb/0x1d0 [ 1642.155180][T27393] __x64_sys_getrandom+0x17a/0x270 [ 1642.155205][T27393] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1642.155227][T27393] ? ksys_write+0x248/0x270 [ 1642.155247][T27393] ? __pfx_ksys_write+0x10/0x10 [ 1642.155276][T27393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.155293][T27393] do_syscall_64+0x15f/0xf80 [ 1642.155307][T27393] ? trace_irq_disable+0x3b/0x140 [ 1642.155326][T27393] ? clear_bhb_loop+0x40/0x90 [ 1642.155345][T27393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.155361][T27393] RIP: 0033:0x7f6895d2cdd9 [ 1642.155374][T27393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1642.155387][T27393] RSP: 002b:00007f6893f7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1642.155402][T27393] RAX: ffffffffffffffda RBX: 00007f6895fa5fa0 RCX: 00007f6895d2cdd9 [ 1642.155414][T27393] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 1642.155424][T27393] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1642.155434][T27393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1642.155443][T27393] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1642.155468][T27393] [ 1642.541670][T23622] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.733453][T27387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7523'. [ 1642.733490][T27387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7523'. [ 1642.734712][ T1169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.780420][ T1169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.787973][T17306] Bluetooth: hci2: command tx timeout [ 1642.805429][ T1169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.853591][T26390] veth0_macvtap: entered promiscuous mode [ 1642.917301][T27402] 9p: Bad value for 'rfdno' [ 1642.938089][T22418] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1642.975258][T26390] veth1_macvtap: entered promiscuous mode [ 1643.078014][T22418] usb 6-1: device descriptor read/64, error -71 [ 1643.123087][T26390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1644.211198][T22418] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1644.276411][T26390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1644.338055][T22418] usb 6-1: device descriptor read/64, error -71 [ 1644.386920][ T4346] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.400440][ T4346] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.425774][ T4346] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.449179][T14480] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.461758][T22418] usb usb6-port1: attempt power cycle [ 1644.512774][T27418] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7535'. [ 1644.971943][T22418] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1645.034999][T22418] usb 6-1: device descriptor read/8, error -71 [ 1645.329601][T22418] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1645.374261][T22418] usb 6-1: device descriptor read/8, error -71 [ 1645.565847][T27429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7538'. [ 1645.565875][T27429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7538'. [ 1645.595356][T22418] usb usb6-port1: unable to enumerate USB device [ 1648.804166][T18566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1648.804190][T18566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1648.837793][T27204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.838366][T27204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.838631][T27204] bridge_slave_0: entered allmulticast mode [ 1648.844783][T27204] bridge_slave_0: entered promiscuous mode [ 1649.435301][T27204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.435442][T27204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.435718][T27204] bridge_slave_1: entered allmulticast mode [ 1649.471618][T27204] bridge_slave_1: entered promiscuous mode [ 1650.208389][T18933] bridge_slave_1: left allmulticast mode [ 1650.208418][T18933] bridge_slave_1: left promiscuous mode [ 1650.208682][T18933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.289491][T18933] bridge_slave_0: left allmulticast mode [ 1650.289524][T18933] bridge_slave_0: left promiscuous mode [ 1650.289766][T18933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.491776][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1652.583528][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1652.601971][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1652.605523][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1652.606576][ T5609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1653.160351][T18933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1653.259022][T18933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1653.301863][T18933] bond0 (unregistering): Released all slaves [ 1654.038704][T27204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1654.061901][T27204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1654.972133][ T5609] Bluetooth: hci3: command tx timeout [ 1655.346696][T27204] team0: Port device team_slave_0 added [ 1655.439996][T27204] team0: Port device team_slave_1 added [ 1655.784485][T27204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1655.784503][T27204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1655.784527][T27204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1655.995527][T27204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1655.995547][T27204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1655.995577][T27204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1656.562054][T18933] hsr_slave_0: left promiscuous mode [ 1656.599245][T18933] hsr_slave_1: left promiscuous mode [ 1656.600379][T18933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1656.600408][T18933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1656.650084][T18933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1656.650115][T18933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.921490][T18933] veth1_macvtap: left promiscuous mode [ 1656.921598][T18933] veth0_macvtap: left promiscuous mode [ 1656.921830][T18933] veth1_vlan: left promiscuous mode [ 1656.921986][T18933] veth0_vlan: left promiscuous mode [ 1657.031950][ T5609] Bluetooth: hci3: command tx timeout [ 1657.071913][T27606] FAULT_INJECTION: forcing a failure. [ 1657.071913][T27606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1657.071944][T27606] CPU: 1 UID: 0 PID: 27606 Comm: syz.5.7596 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1657.071966][T27606] Tainted: [L]=SOFTLOCKUP [ 1657.071972][T27606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1657.071982][T27606] Call Trace: [ 1657.071988][T27606] [ 1657.071995][T27606] dump_stack_lvl+0xe8/0x150 [ 1657.072025][T27606] should_fail_ex+0x46b/0x600 [ 1657.072055][T27606] _copy_to_iter+0x1e4/0x17d0 [ 1657.072085][T27606] ? __asan_memset+0x22/0x50 [ 1657.072113][T27606] ? __pfx__copy_to_iter+0x10/0x10 [ 1657.072143][T27606] ? crng_make_state+0x318/0x5d0 [ 1657.072172][T27606] get_random_bytes_user+0x1cf/0x3d0 [ 1657.072199][T27606] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1657.072229][T27606] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1657.072264][T27606] ? import_ubuf+0xfb/0x1d0 [ 1657.072284][T27606] __x64_sys_getrandom+0x17a/0x270 [ 1657.072309][T27606] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1657.072331][T27606] ? ksys_write+0x248/0x270 [ 1657.072350][T27606] ? __pfx_ksys_write+0x10/0x10 [ 1657.072373][T27606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.072390][T27606] do_syscall_64+0x15f/0xf80 [ 1657.072405][T27606] ? trace_irq_disable+0x3b/0x140 [ 1657.072423][T27606] ? clear_bhb_loop+0x40/0x90 [ 1657.072442][T27606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.072458][T27606] RIP: 0033:0x7f6895d2cdd9 [ 1657.072472][T27606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.072486][T27606] RSP: 002b:00007f6893f7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1657.072502][T27606] RAX: ffffffffffffffda RBX: 00007f6895fa5fa0 RCX: 00007f6895d2cdd9 [ 1657.072514][T27606] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 1657.072525][T27606] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1657.072535][T27606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1657.072544][T27606] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1657.072569][T27606] [ 1657.917507][T27622] fuse: fd is not a fuse device [ 1658.094997][T27632] FAULT_INJECTION: forcing a failure. [ 1658.094997][T27632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1658.095026][T27632] CPU: 1 UID: 0 PID: 27632 Comm: syz.5.7606 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1658.095063][T27632] Tainted: [L]=SOFTLOCKUP [ 1658.095069][T27632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1658.095079][T27632] Call Trace: [ 1658.095085][T27632] [ 1658.095092][T27632] dump_stack_lvl+0xe8/0x150 [ 1658.095115][T27632] should_fail_ex+0x46b/0x600 [ 1658.095145][T27632] _copy_to_iter+0x1e4/0x17d0 [ 1658.095180][T27632] ? __asan_memset+0x22/0x50 [ 1658.095209][T27632] ? __pfx__copy_to_iter+0x10/0x10 [ 1658.095238][T27632] ? crng_make_state+0x318/0x5d0 [ 1658.095267][T27632] get_random_bytes_user+0x1cf/0x3d0 [ 1658.095293][T27632] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1658.095322][T27632] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1658.095356][T27632] ? import_ubuf+0xfb/0x1d0 [ 1658.095374][T27632] __x64_sys_getrandom+0x17a/0x270 [ 1658.095400][T27632] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1658.095421][T27632] ? ksys_write+0x248/0x270 [ 1658.095441][T27632] ? __pfx_ksys_write+0x10/0x10 [ 1658.095465][T27632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.095482][T27632] do_syscall_64+0x15f/0xf80 [ 1658.095497][T27632] ? trace_irq_disable+0x3b/0x140 [ 1658.095515][T27632] ? clear_bhb_loop+0x40/0x90 [ 1658.095535][T27632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.095551][T27632] RIP: 0033:0x7f6895d2cdd9 [ 1658.095566][T27632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1658.095579][T27632] RSP: 002b:00007f6893f7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1658.095595][T27632] RAX: ffffffffffffffda RBX: 00007f6895fa5fa0 RCX: 00007f6895d2cdd9 [ 1658.095607][T27632] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 1658.095618][T27632] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1658.095628][T27632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1658.095637][T27632] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1658.095662][T27632] [ 1659.111869][ T5609] Bluetooth: hci3: command tx timeout [ 1659.208925][T18933] team0 (unregistering): Port device team_slave_1 removed [ 1659.269012][T18933] team0 (unregistering): Port device team_slave_0 removed [ 1659.702466][ T5256] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1659.760344][T27204] hsr_slave_0: entered promiscuous mode [ 1659.764528][T27204] hsr_slave_1: entered promiscuous mode [ 1659.774592][T27204] debugfs: 'hsr0' already exists in 'hsr' [ 1659.774677][T27204] Cannot create hsr debugfs directory [ 1659.830924][T27480] lo speed is unknown, defaulting to 1000 [ 1659.901340][T27480] virt_wifi0 speed is unknown, defaulting to 1000 [ 1661.213665][ T5609] Bluetooth: hci3: command tx timeout [ 1661.993701][T27723] sch_tbf: burst 0 is lower than device veth0 mtu (1514) ! [ 1662.349370][ T5256] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1662.847039][T27764] 9p: Bad value for 'rfdno' [ 1663.608040][ T4922] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 1663.830593][ T4922] usb 6-1: device descriptor read/64, error -71 [ 1664.156736][ T4922] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 1664.330357][ T4922] usb 6-1: device descriptor read/64, error -71 [ 1664.438442][ T4922] usb usb6-port1: attempt power cycle [ 1664.791200][ T4922] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 1664.829249][ T4922] usb 6-1: device descriptor read/8, error -71 [ 1664.953016][T18933] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.088008][ T4922] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 1665.113373][ T4922] usb 6-1: device descriptor read/8, error -71 [ 1665.223119][ T4922] usb usb6-port1: unable to enumerate USB device [ 1665.596505][T27794] 9p: Bad value for 'rfdno' [ 1666.611626][T18933] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.784940][T27480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.785172][T27480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.785401][T27480] bridge_slave_0: entered allmulticast mode [ 1666.813570][T27480] bridge_slave_0: entered promiscuous mode [ 1666.825255][T27480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.825464][T27480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.825804][T27480] bridge_slave_1: entered allmulticast mode [ 1666.918043][T27480] bridge_slave_1: entered promiscuous mode [ 1667.836870][T18933] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.274979][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.275243][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.768600][T27480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1669.827164][T27480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1671.918366][T18933] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.285863][T27480] team0: Port device team_slave_0 added [ 1672.316610][T27480] team0: Port device team_slave_1 added [ 1672.658293][T27898] ipvlan2: entered promiscuous mode [ 1673.219132][T27480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1673.219151][T27480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1673.219179][T27480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1673.447006][T27480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1673.447024][T27480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1673.447051][T27480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1673.579477][T27932] FAULT_INJECTION: forcing a failure. [ 1673.579477][T27932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1673.579514][T27932] CPU: 1 UID: 0 PID: 27932 Comm: syz.5.7709 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1673.579539][T27932] Tainted: [L]=SOFTLOCKUP [ 1673.579546][T27932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1673.579558][T27932] Call Trace: [ 1673.579565][T27932] [ 1673.579574][T27932] dump_stack_lvl+0xe8/0x150 [ 1673.579605][T27932] should_fail_ex+0x46b/0x600 [ 1673.579650][T27932] _copy_from_iter+0x4ff/0x1670 [ 1673.579685][T27932] ? __alloc_skb+0x27d/0x7d0 [ 1673.579708][T27932] ? __alloc_skb+0x27d/0x7d0 [ 1673.579727][T27932] ? __pfx__copy_from_iter+0x10/0x10 [ 1673.579764][T27932] ? skb_set_owner_w+0x26c/0x3e0 [ 1673.579791][T27932] ? skb_put+0x11b/0x210 [ 1673.579818][T27932] pppoe_sendmsg+0x486/0x7c0 [ 1673.579853][T27932] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 1673.579880][T27932] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1673.579908][T27932] ____sys_sendmsg+0x94c/0x9c0 [ 1673.579934][T27932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1673.579961][T27932] ? import_iovec+0x73/0xa0 [ 1673.579982][T27932] ___sys_sendmsg+0x2a5/0x360 [ 1673.580078][T27932] ? __lock_acquire+0x6b5/0x2cf0 [ 1673.580104][T27932] ? __pfx____sys_sendmsg+0x10/0x10 [ 1673.580128][T27932] ? kstrtouint+0x6e/0xe0 [ 1673.580173][T27932] ? __fget_files+0x2a/0x420 [ 1673.580198][T27932] ? __fget_files+0x3a6/0x420 [ 1673.580236][T27932] __sys_sendmmsg+0x282/0x4e0 [ 1673.580261][T27932] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1673.580288][T27932] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1673.580323][T27932] ? ksys_write+0x248/0x270 [ 1673.580346][T27932] ? __pfx_ksys_write+0x10/0x10 [ 1673.580371][T27932] __x64_sys_sendmmsg+0xa0/0xc0 [ 1673.580391][T27932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.580410][T27932] do_syscall_64+0x15f/0xf80 [ 1673.580427][T27932] ? trace_irq_disable+0x3b/0x140 [ 1673.580450][T27932] ? clear_bhb_loop+0x40/0x90 [ 1673.580473][T27932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.580492][T27932] RIP: 0033:0x7f6895d2cdd9 [ 1673.580511][T27932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.580526][T27932] RSP: 002b:00007f6893f7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1673.580546][T27932] RAX: ffffffffffffffda RBX: 00007f6895fa5fa0 RCX: 00007f6895d2cdd9 [ 1673.580561][T27932] RDX: 0000000000000001 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1673.580573][T27932] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.580585][T27932] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 1673.580596][T27932] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1673.580628][T27932] [ 1673.922078][T27204] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1673.960229][T27204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1674.670733][T27204] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1674.702572][T27953] tmpfs: Bad value for 'mpol' [ 1674.736889][T27204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1674.779438][T27204] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1674.872016][T27204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1675.471378][T27204] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1675.533442][T27204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1675.621414][T27480] hsr_slave_0: entered promiscuous mode [ 1675.622839][T27480] hsr_slave_1: entered promiscuous mode [ 1675.651385][T27480] debugfs: 'hsr0' already exists in 'hsr' [ 1675.651418][T27480] Cannot create hsr debugfs directory [ 1675.760814][T27988] 9p: Bad value for 'rfdno' [ 1676.414308][T28012] FAULT_INJECTION: forcing a failure. [ 1676.414308][T28012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1676.414348][T28012] CPU: 1 UID: 0 PID: 28012 Comm: syz.5.7731 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1676.414379][T28012] Tainted: [L]=SOFTLOCKUP [ 1676.414387][T28012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1676.414400][T28012] Call Trace: [ 1676.414409][T28012] [ 1676.414418][T28012] dump_stack_lvl+0xe8/0x150 [ 1676.414450][T28012] should_fail_ex+0x46b/0x600 [ 1676.414492][T28012] _copy_from_user+0x2d/0xb0 [ 1676.414519][T28012] __sys_bpf+0x229/0x950 [ 1676.414549][T28012] ? __pfx___sys_bpf+0x10/0x10 [ 1676.414574][T28012] ? kmem_cache_free+0x187/0x6c0 [ 1676.414618][T28012] ? ksys_write+0x202/0x270 [ 1676.414647][T28012] ? __pfx_ksys_write+0x10/0x10 [ 1676.414677][T28012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.414710][T28012] __x64_sys_bpf+0x7c/0x90 [ 1676.414735][T28012] do_syscall_64+0x15f/0xf80 [ 1676.414759][T28012] ? clear_bhb_loop+0x40/0x90 [ 1676.414787][T28012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.414811][T28012] RIP: 0033:0x7f6895d2cdd9 [ 1676.414832][T28012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1676.414851][T28012] RSP: 002b:00007f6893f7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1676.414874][T28012] RAX: ffffffffffffffda RBX: 00007f6895fa5fa0 RCX: 00007f6895d2cdd9 [ 1676.414890][T28012] RDX: 0000000000000010 RSI: 0000200000000580 RDI: 000000000000000f [ 1676.414905][T28012] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1676.414919][T28012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1676.414932][T28012] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1676.414966][T28012] [ 1676.566139][T28013] MTD: Couldn't look up '/dev/rnullb0': -2 [ 1676.984324][T18933] bridge_slave_1: left allmulticast mode [ 1676.984363][T18933] bridge_slave_1: left promiscuous mode [ 1676.984636][T18933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.066416][T18933] bridge_slave_0: left allmulticast mode [ 1677.066453][T18933] bridge_slave_0: left promiscuous mode [ 1677.066734][T18933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.167055][T28036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7738'. [ 1679.408952][T18933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1679.474591][T18933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1679.491149][T18933] bond0 (unregistering): Released all slaves [ 1679.827001][T28071] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1679.832888][T28072] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1681.488215][T28079] FAULT_INJECTION: forcing a failure. [ 1681.488215][T28079] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.488256][T28079] CPU: 0 UID: 0 PID: 28079 Comm: syz.5.7751 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1681.488287][T28079] Tainted: [L]=SOFTLOCKUP [ 1681.488295][T28079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1681.488308][T28079] Call Trace: [ 1681.488317][T28079] [ 1681.488327][T28079] dump_stack_lvl+0xe8/0x150 [ 1681.488360][T28079] should_fail_ex+0x46b/0x600 [ 1681.488402][T28079] should_failslab+0xa8/0x100 [ 1681.488432][T28079] kmem_cache_alloc_noprof+0x87/0x680 [ 1681.488458][T28079] ? mas_alloc_nodes+0x291/0x350 [ 1681.488516][T28079] mas_alloc_nodes+0x291/0x350 [ 1681.488555][T28079] mas_preallocate+0x2d6/0x640 [ 1681.488597][T28079] ? __pfx_mas_preallocate+0x10/0x10 [ 1681.488645][T28079] ? __mas_set_range+0x12f/0x3c0 [ 1681.488687][T28079] __split_vma+0x33d/0xa30 [ 1681.488721][T28079] ? __lock_acquire+0x6b5/0x2cf0 [ 1681.488770][T28079] ? __pfx___split_vma+0x10/0x10 [ 1681.488818][T28079] ? is_bpf_text_address+0x26/0x2b0 [ 1681.488853][T28079] ? can_vma_merge_left+0x191/0x3e0 [ 1681.488888][T28079] vma_modify+0x9f9/0x1f20 [ 1681.488938][T28079] vma_modify_flags+0x24b/0x330 [ 1681.488975][T28079] ? __pfx_vma_modify_flags+0x10/0x10 [ 1681.489028][T28079] ? __lock_acquire+0x6b5/0x2cf0 [ 1681.489060][T28079] ? mprotect_fixup+0xfb/0xb60 [ 1681.489097][T28079] mprotect_fixup+0x62a/0xb60 [ 1681.489136][T28079] ? __pfx_mprotect_fixup+0x10/0x10 [ 1681.489200][T28079] do_mprotect_pkey+0x8d5/0xd20 [ 1681.489256][T28079] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1681.489316][T28079] ? ksys_write+0x248/0x270 [ 1681.489346][T28079] ? __pfx_ksys_write+0x10/0x10 [ 1681.489379][T28079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.489405][T28079] __x64_sys_mprotect+0x80/0x90 [ 1681.489439][T28079] do_syscall_64+0x15f/0xf80 [ 1681.489461][T28079] ? trace_irq_disable+0x3b/0x140 [ 1681.489488][T28079] ? clear_bhb_loop+0x40/0x90 [ 1681.489518][T28079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.489541][T28079] RIP: 0033:0x7f6895d2cdd9 [ 1681.489564][T28079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1681.489584][T28079] RSP: 002b:00007f6893f7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1681.489608][T28079] RAX: ffffffffffffffda RBX: 00007f6895fa5fa0 RCX: 00007f6895d2cdd9 [ 1681.489626][T28079] RDX: 0000000000000001 RSI: 000000000000f000 RDI: 0000200000000000 [ 1681.489641][T28079] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1681.489656][T28079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1681.489670][T28079] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1681.489707][T28079] [ 1681.906566][T28097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1683.423465][ T5256] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1683.744438][T27204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1684.353687][T18933] hsr_slave_0: left promiscuous mode [ 1684.375267][T18933] hsr_slave_1: left promiscuous mode [ 1684.376615][T18933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1684.376644][T18933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1684.433070][T18933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1684.433101][T18933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1684.621187][T18933] veth1_macvtap: left promiscuous mode [ 1684.621289][T18933] veth0_macvtap: left promiscuous mode [ 1684.621537][T18933] veth1_vlan: left promiscuous mode [ 1684.621802][T18933] veth0_vlan: left promiscuous mode [ 1685.970149][T18933] team0 (unregistering): Port device team_slave_1 removed [ 1686.031199][T18933] team0 (unregistering): Port device team_slave_0 removed [ 1686.431983][ T5256] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1686.451670][T27204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.658564][T28254] netlink: 'syz.0.7813': attribute type 1 has an invalid length. [ 1687.243752][T28254] bond2: entered promiscuous mode [ 1687.244395][T28254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1687.406281][T28258] bond2: (slave bridge0): making interface the new active one [ 1687.406310][T28258] bridge0: entered promiscuous mode [ 1687.444380][T28258] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 1687.759311][ T36] audit: type=1326 audit(2000001932.940:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28284 comm="syz.0.7824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1687.759363][ T36] audit: type=1326 audit(2000001932.940:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28284 comm="syz.0.7824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1687.759404][ T36] audit: type=1326 audit(2000001932.940:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28284 comm="syz.0.7824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1687.759453][ T36] audit: type=1326 audit(2000001932.940:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28284 comm="syz.0.7824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1687.759493][ T36] audit: type=1326 audit(2000001932.940:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28284 comm="syz.0.7824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1687.759531][ T36] audit: type=1326 audit(2000001932.940:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28284 comm="syz.0.7824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1687.759570][ T36] audit: type=1326 audit(2000001932.940:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28284 comm="syz.0.7824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1687.759614][ T36] audit: type=1326 audit(2000001932.940:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28284 comm="syz.0.7824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1687.759653][ T36] audit: type=1326 audit(2000001932.940:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28284 comm="syz.0.7824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1687.759692][ T36] audit: type=1326 audit(2000001932.940:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28284 comm="syz.0.7824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f59c7a8cdd9 code=0x7ffc0000 [ 1688.486192][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.486337][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1688.513839][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.513966][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1691.416036][T28373] FAULT_INJECTION: forcing a failure. [ 1691.416036][T28373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1691.416077][T28373] CPU: 0 UID: 0 PID: 28373 Comm: syz.5.7850 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1691.416110][T28373] Tainted: [L]=SOFTLOCKUP [ 1691.416119][T28373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1691.416133][T28373] Call Trace: [ 1691.416142][T28373] [ 1691.416152][T28373] dump_stack_lvl+0xe8/0x150 [ 1691.416184][T28373] should_fail_ex+0x46b/0x600 [ 1691.416224][T28373] _copy_to_user+0x31/0xb0 [ 1691.416252][T28373] simple_read_from_buffer+0xe1/0x170 [ 1691.416293][T28373] proc_fail_nth_read+0x1be/0x230 [ 1691.416333][T28373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1691.416374][T28373] ? rw_verify_area+0x2ac/0x4e0 [ 1691.416407][T28373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1691.416447][T28373] vfs_read+0x212/0xa80 [ 1691.416482][T28373] ? __pfx_vfs_read+0x10/0x10 [ 1691.416518][T28373] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1691.416555][T28373] ? lockdep_hardirqs_on+0x7a/0x110 [ 1691.416592][T28373] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1691.416629][T28373] ? mutex_lock_nested+0x152/0x1d0 [ 1691.416661][T28373] ? fdget_pos+0x252/0x320 [ 1691.416693][T28373] ksys_read+0x156/0x270 [ 1691.416717][T28373] ? __pfx_n_tty_ioctl+0x10/0x10 [ 1691.416753][T28373] ? __pfx_ksys_read+0x10/0x10 [ 1691.416779][T28373] ? __pfx_tty_ioctl+0x10/0x10 [ 1691.416814][T28373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.416840][T28373] do_syscall_64+0x15f/0xf80 [ 1691.416861][T28373] ? trace_irq_disable+0x3b/0x140 [ 1691.416889][T28373] ? clear_bhb_loop+0x40/0x90 [ 1691.416918][T28373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.416942][T28373] RIP: 0033:0x7f6895ced60e [ 1691.416964][T28373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1691.416984][T28373] RSP: 002b:00007f6893f7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1691.417009][T28373] RAX: ffffffffffffffda RBX: 00007f6893f7e6c0 RCX: 00007f6895ced60e [ 1691.417026][T28373] RDX: 000000000000000f RSI: 00007f6893f7e0a0 RDI: 0000000000000006 [ 1691.417040][T28373] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1691.417055][T28373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1691.417068][T28373] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1691.417104][T28373] [ 1693.320073][T27480] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1693.469431][T27480] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1693.474255][T27480] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1693.531486][T27480] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1693.858490][T27480] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1693.971262][T27480] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1694.087647][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1694.194067][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1694.230784][T27480] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1694.251469][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1694.253137][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1694.269299][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1694.372384][T27480] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1694.531883][T28434] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1694.531903][T28434] overlayfs: missing 'lowerdir' [ 1695.382152][T27480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1695.558528][T28470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7876'. [ 1695.925240][T28492] netlink: 'syz.0.7882': attribute type 10 has an invalid length. [ 1695.925264][T28492] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7882'. [ 1696.002208][T28494] gfs2: path_lookup on € returned error -2 [ 1696.552375][ T5609] Bluetooth: hci4: command tx timeout [ 1696.811654][T28516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7895'. [ 1697.225761][T27480] 8021q: adding VLAN 0 to HW filter on device team0 [ 1697.355241][T18933] smbdirect: ib_dev[syz1] removed [ 1697.978327][T18566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.978567][T18566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1698.159505][T18566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.159688][T18566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1698.160464][T28422] lo speed is unknown, defaulting to 1000 [ 1698.635239][ T5609] Bluetooth: hci4: command tx timeout [ 1699.322179][T28594] netlink: 'syz.2.7931': attribute type 25 has an invalid length. [ 1700.000543][T28612] netlink: 15678 bytes leftover after parsing attributes in process `syz.5.7939'. [ 1700.718077][ T5609] Bluetooth: hci4: command tx timeout [ 1701.823849][T28663] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7955'. [ 1702.256958][T28422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.257096][T28422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.257352][T28422] bridge_slave_0: entered allmulticast mode [ 1702.287385][T28422] bridge_slave_0: entered promiscuous mode [ 1702.448855][T28422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.449098][T28422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.449356][T28422] bridge_slave_1: entered allmulticast mode [ 1702.452347][T28422] bridge_slave_1: entered promiscuous mode [ 1702.487383][T27480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1702.699451][ T1310] bridge_slave_1: left allmulticast mode [ 1702.699496][ T1310] bridge_slave_1: left promiscuous mode [ 1702.699696][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.788076][ T5609] Bluetooth: hci4: command tx timeout [ 1702.829844][ T1310] bridge_slave_0: left allmulticast mode [ 1702.829887][ T1310] bridge_slave_0: left promiscuous mode [ 1702.830181][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.748241][ T5858] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1703.900034][ T5858] usb 6-1: config 2 has an invalid interface number: 184 but max is 0 [ 1703.900066][ T5858] usb 6-1: config 2 has no interface number 0 [ 1703.900116][ T5858] usb 6-1: config 2 interface 184 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 16 [ 1703.900144][ T5858] usb 6-1: config 2 interface 184 has no altsetting 0 [ 1703.902642][ T5858] usb 6-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=ca.78 [ 1703.902676][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.902699][ T5858] usb 6-1: Product: syz [ 1703.902715][ T5858] usb 6-1: Manufacturer: syz [ 1703.902731][ T5858] usb 6-1: SerialNumber: syz [ 1703.991901][T28711] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1704.046732][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1704.129485][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1704.174793][ T1310] bond0 (unregistering): Released all slaves [ 1704.203740][ T5858] usbtouchscreen 6-1:2.184: probe with driver usbtouchscreen failed with error -71 [ 1704.219197][ T5858] usb 6-1: USB disconnect, device number 44 [ 1704.284823][T28726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7974'. [ 1704.284850][T28726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7974'. [ 1704.317264][T28422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1704.433565][T28422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1704.566714][T28422] team0: Port device team_slave_0 added [ 1704.593286][T28422] team0: Port device team_slave_1 added [ 1704.809919][T28422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1704.809939][T28422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1704.809968][T28422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1705.078385][ T1310] hsr_slave_0: left promiscuous mode [ 1705.098725][ T1310] hsr_slave_1: left promiscuous mode [ 1705.100278][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.122022][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.492885][T28762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7986'. [ 1706.168481][ T1310] team0 (unregistering): Port device team_slave_1 removed [ 1706.250333][ T1310] team0 (unregistering): Port device team_slave_0 removed [ 1706.701255][T28422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1706.701274][T28422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1706.701306][T28422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1707.212897][T28422] hsr_slave_0: entered promiscuous mode [ 1707.224792][T28422] hsr_slave_1: entered promiscuous mode [ 1707.238900][T28422] debugfs: 'hsr0' already exists in 'hsr' [ 1707.238932][T28422] Cannot create hsr debugfs directory [ 1708.274951][T27480] veth0_vlan: entered promiscuous mode [ 1708.393712][T28856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8021'. [ 1708.715485][T28856] bond3: entered promiscuous mode [ 1708.715515][T28856] bond3: entered allmulticast mode [ 1708.717512][T27480] veth1_vlan: entered promiscuous mode [ 1709.836157][ T5256] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1709.984995][T27480] veth0_macvtap: entered promiscuous mode [ 1710.011572][T27480] veth1_macvtap: entered promiscuous mode [ 1710.039121][T27480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1710.112071][T27480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1710.179357][ T5796] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.186763][T18933] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.208443][T18933] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.231593][T23622] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.197496][T17306] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1713.360496][T17306] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1713.403445][T17306] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1713.439564][T17306] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1713.456620][T17306] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1714.435999][T28987] netlink: 'syz.0.8063': attribute type 1 has an invalid length. [ 1715.009824][T23622] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.264067][T28987] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1715.317563][T28990] bond3: (slave gretap2): making interface the new active one [ 1715.399038][T28990] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1715.668039][ T5609] Bluetooth: hci2: command tx timeout [ 1716.356066][T23622] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.643734][T29033] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8080'. [ 1717.055917][T23622] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.371419][T29035] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8080'. [ 1717.687178][T23622] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.901007][ T5609] Bluetooth: hci2: command tx timeout [ 1717.929933][T28949] lo speed is unknown, defaulting to 1000 [ 1719.220417][T29058] netlink: 'syz.2.8087': attribute type 10 has an invalid length. [ 1719.771299][T28422] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1719.878654][T28422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1719.907349][T29068] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8090'. [ 1719.914575][ T5609] Bluetooth: hci2: command tx timeout [ 1719.944049][T28422] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1720.155759][T28422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1720.176730][T29070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8090'. [ 1720.213319][T28422] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1720.242447][T28422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1720.782090][T28422] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1720.835791][T28422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1721.988266][ T5609] Bluetooth: hci2: command tx timeout [ 1722.039975][T23622] bridge_slave_1: left allmulticast mode [ 1722.040015][T23622] bridge_slave_1: left promiscuous mode [ 1722.040312][T23622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.132996][T29152] FAULT_INJECTION: forcing a failure. [ 1722.132996][T29152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1722.133035][T29152] CPU: 1 UID: 0 PID: 29152 Comm: syz.5.8110 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1722.133063][T29152] Tainted: [L]=SOFTLOCKUP [ 1722.133070][T29152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1722.133082][T29152] Call Trace: [ 1722.133090][T29152] [ 1722.133099][T29152] dump_stack_lvl+0xe8/0x150 [ 1722.133129][T29152] should_fail_ex+0x46b/0x600 [ 1722.133167][T29152] _copy_from_user+0x2d/0xb0 [ 1722.133192][T29152] ___sys_recvmsg+0x175/0x590 [ 1722.133225][T29152] ? __pfx____sys_recvmsg+0x10/0x10 [ 1722.133256][T29152] ? __fget_files+0x2a/0x420 [ 1722.133319][T29152] do_recvmmsg+0x33a/0x800 [ 1722.133354][T29152] ? __pfx_do_recvmmsg+0x10/0x10 [ 1722.133392][T29152] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1722.133436][T29152] __x64_sys_recvmmsg+0x198/0x250 [ 1722.133466][T29152] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1722.133509][T29152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.133533][T29152] do_syscall_64+0x15f/0xf80 [ 1722.133553][T29152] ? trace_irq_disable+0x3b/0x140 [ 1722.133578][T29152] ? clear_bhb_loop+0x40/0x90 [ 1722.133605][T29152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.133627][T29152] RIP: 0033:0x7f6895d2cdd9 [ 1722.133647][T29152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1722.133665][T29152] RSP: 002b:00007f6893f7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1722.133688][T29152] RAX: ffffffffffffffda RBX: 00007f6895fa5fa0 RCX: 00007f6895d2cdd9 [ 1722.133704][T29152] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1722.133717][T29152] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1722.133730][T29152] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1722.133743][T29152] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1722.133778][T29152] [ 1722.322630][T23622] bridge_slave_0: left allmulticast mode [ 1722.322736][T23622] bridge_slave_0: left promiscuous mode [ 1722.323446][T23622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.541389][T29160] trusted_key: encrypted_key: insufficient parameters specified [ 1723.147965][ T4922] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1723.302353][ T4922] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1723.302390][ T4922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.313670][ T4922] usb 6-1: config 0 descriptor?? [ 1723.918893][T23622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1724.012048][T23622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1724.051687][T23622] bond0 (unregistering): Released all slaves [ 1724.100451][T29138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8107'. [ 1724.416631][ T4922] usb 6-1: Cannot set MAC address [ 1724.416906][ T4922] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1724.447095][ T4922] usb 6-1: USB disconnect, device number 45 [ 1724.989551][T23622] hsr_slave_0: left promiscuous mode [ 1725.023017][T23622] hsr_slave_1: left promiscuous mode [ 1725.024278][T23622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1725.024307][T23622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1725.093192][T23622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1725.093223][T23622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1725.292875][T29227] netlink: 'syz.0.8132': attribute type 30 has an invalid length. [ 1725.384978][T23622] veth1_macvtap: left promiscuous mode [ 1725.385085][T23622] veth0_macvtap: left promiscuous mode [ 1725.385458][T23622] veth1_vlan: left promiscuous mode [ 1725.385631][T23622] veth0_vlan: left promiscuous mode [ 1726.016042][T29253] FAULT_INJECTION: forcing a failure. [ 1726.016042][T29253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1726.016071][T29253] CPU: 1 UID: 0 PID: 29253 Comm: syz.5.8139 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1726.016093][T29253] Tainted: [L]=SOFTLOCKUP [ 1726.016099][T29253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1726.016108][T29253] Call Trace: [ 1726.016115][T29253] [ 1726.016122][T29253] dump_stack_lvl+0xe8/0x150 [ 1726.016146][T29253] should_fail_ex+0x46b/0x600 [ 1726.016175][T29253] _copy_from_user+0x2d/0xb0 [ 1726.016193][T29253] ___sys_recvmsg+0x175/0x590 [ 1726.016217][T29253] ? __pfx____sys_recvmsg+0x10/0x10 [ 1726.016240][T29253] ? __fget_files+0x2a/0x420 [ 1726.016294][T29253] do_recvmmsg+0x33a/0x800 [ 1726.016320][T29253] ? __pfx_do_recvmmsg+0x10/0x10 [ 1726.016348][T29253] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1726.016380][T29253] __x64_sys_recvmmsg+0x198/0x250 [ 1726.016403][T29253] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1726.016429][T29253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.016446][T29253] do_syscall_64+0x15f/0xf80 [ 1726.016491][T29253] ? trace_irq_disable+0x3b/0x140 [ 1726.016517][T29253] ? clear_bhb_loop+0x40/0x90 [ 1726.016545][T29253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.016568][T29253] RIP: 0033:0x7f6895d2cdd9 [ 1726.016590][T29253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1726.016612][T29253] RSP: 002b:00007f6893f7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1726.016629][T29253] RAX: ffffffffffffffda RBX: 00007f6895fa5fa0 RCX: 00007f6895d2cdd9 [ 1726.016641][T29253] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1726.016651][T29253] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1726.016661][T29253] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1726.016671][T29253] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1726.016696][T29253] [ 1726.871791][T23622] team0 (unregistering): Port device team_slave_1 removed [ 1726.928610][T23622] team0 (unregistering): Port device team_slave_0 removed [ 1727.177774][T29227] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1727.187242][ T5256] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1727.406680][T28949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.406922][T28949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.407172][T28949] bridge_slave_0: entered allmulticast mode [ 1727.416536][T28949] bridge_slave_0: entered promiscuous mode [ 1727.445039][T28949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.445199][T28949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.445462][T28949] bridge_slave_1: entered allmulticast mode [ 1727.464976][T28949] bridge_slave_1: entered promiscuous mode [ 1728.830834][T28949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1728.835640][T28949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1729.250281][T28949] team0: Port device team_slave_0 added [ 1729.406440][T29303] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1729.446625][T28949] team0: Port device team_slave_1 added [ 1729.638995][T28422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1729.717891][T28949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1729.717909][T28949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1729.717937][T28949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1729.722395][T28949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1729.722414][T28949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1729.722446][T28949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1730.208101][T28422] 8021q: adding VLAN 0 to HW filter on device team0 [ 1730.252403][T28949] hsr_slave_0: entered promiscuous mode [ 1730.253656][T28949] hsr_slave_1: entered promiscuous mode [ 1730.254508][T28949] debugfs: 'hsr0' already exists in 'hsr' [ 1730.254530][T28949] Cannot create hsr debugfs directory [ 1730.590661][T18566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.590893][T18566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1730.717482][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.717548][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.789821][T18566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.789957][T18566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1731.251157][T29356] /dev/nullb0: Can't lookup blockdev [ 1731.696629][T29369] netlink: 840 bytes leftover after parsing attributes in process `syz.0.8180'. [ 1732.213928][ T5256] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1732.342405][T29385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8186'. [ 1734.080314][T29398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1735.127738][T29460] FAULT_INJECTION: forcing a failure. [ 1735.127738][T29460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1735.127786][T29460] CPU: 1 UID: 0 PID: 29460 Comm: syz.5.8211 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1735.127810][T29460] Tainted: [L]=SOFTLOCKUP [ 1735.127817][T29460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1735.127828][T29460] Call Trace: [ 1735.127835][T29460] [ 1735.127842][T29460] dump_stack_lvl+0xe8/0x150 [ 1735.127868][T29460] should_fail_ex+0x46b/0x600 [ 1735.127898][T29460] _copy_from_user+0x2d/0xb0 [ 1735.127919][T29460] get_user_ifreq+0x6b/0x180 [ 1735.127945][T29460] sock_ioctl+0x707/0x7f0 [ 1735.127970][T29460] ? __pfx_sock_ioctl+0x10/0x10 [ 1735.127995][T29460] ? __fget_files+0x3a6/0x420 [ 1735.128021][T29460] ? __fget_files+0x2a/0x420 [ 1735.128050][T29460] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1735.128071][T29460] ? __pfx_sock_ioctl+0x10/0x10 [ 1735.128093][T29460] __se_sys_ioctl+0xff/0x170 [ 1735.128114][T29460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.128134][T29460] do_syscall_64+0x15f/0xf80 [ 1735.128150][T29460] ? trace_irq_disable+0x3b/0x140 [ 1735.128170][T29460] ? clear_bhb_loop+0x40/0x90 [ 1735.128190][T29460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.128207][T29460] RIP: 0033:0x7f6895d2cdd9 [ 1735.128224][T29460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1735.128238][T29460] RSP: 002b:00007f6893f7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1735.128256][T29460] RAX: ffffffffffffffda RBX: 00007f6895fa5fa0 RCX: 00007f6895d2cdd9 [ 1735.128268][T29460] RDX: 0000200000000140 RSI: 00000000000089f3 RDI: 0000000000000005 [ 1735.128279][T29460] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1735.128290][T29460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.128300][T29460] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1735.128337][T29460] [ 1735.498593][T29464] FAULT_INJECTION: forcing a failure. [ 1735.498593][T29464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1735.498634][T29464] CPU: 1 UID: 0 PID: 29464 Comm: syz.5.8212 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1735.498666][T29464] Tainted: [L]=SOFTLOCKUP [ 1735.498675][T29464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1735.498688][T29464] Call Trace: [ 1735.498697][T29464] [ 1735.498708][T29464] dump_stack_lvl+0xe8/0x150 [ 1735.498740][T29464] should_fail_ex+0x46b/0x600 [ 1735.498782][T29464] _copy_to_user+0x31/0xb0 [ 1735.498812][T29464] simple_read_from_buffer+0xe1/0x170 [ 1735.498853][T29464] proc_fail_nth_read+0x1be/0x230 [ 1735.498895][T29464] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1735.498934][T29464] ? rw_verify_area+0x2ac/0x4e0 [ 1735.498960][T29464] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1735.498998][T29464] vfs_read+0x212/0xa80 [ 1735.499033][T29464] ? __pfx_vfs_read+0x10/0x10 [ 1735.499063][T29464] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1735.499104][T29464] ? lockdep_hardirqs_on+0x7a/0x110 [ 1735.499139][T29464] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1735.499175][T29464] ? mutex_lock_nested+0x152/0x1d0 [ 1735.499202][T29464] ? fdget_pos+0x252/0x320 [ 1735.499233][T29464] ksys_read+0x156/0x270 [ 1735.499262][T29464] ? __pfx_ksys_read+0x10/0x10 [ 1735.499298][T29464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.499325][T29464] do_syscall_64+0x15f/0xf80 [ 1735.499346][T29464] ? trace_irq_disable+0x3b/0x140 [ 1735.499383][T29464] ? clear_bhb_loop+0x40/0x90 [ 1735.499413][T29464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.499438][T29464] RIP: 0033:0x7f6895ced60e [ 1735.499460][T29464] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1735.499480][T29464] RSP: 002b:00007f6893f7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1735.499505][T29464] RAX: ffffffffffffffda RBX: 00007f6893f7e6c0 RCX: 00007f6895ced60e [ 1735.499522][T29464] RDX: 000000000000000f RSI: 00007f6893f7e0a0 RDI: 0000000000000006 [ 1735.499537][T29464] RBP: 00007f6893f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1735.499552][T29464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.499566][T29464] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1735.499616][T29464] [ 1737.546851][T28422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1738.303340][T29530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8229'. [ 1738.305061][T29530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8229'. [ 1739.809997][T29556] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8238'. [ 1740.181185][T28949] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1740.240779][T28949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1740.257505][T28949] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1740.327122][T28949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1740.342576][T28422] veth0_vlan: entered promiscuous mode [ 1740.344548][T28949] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1740.484886][T28949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1740.502956][T28949] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1740.545194][T28949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1740.676714][T28422] veth1_vlan: entered promiscuous mode [ 1740.991692][T29596] FAULT_INJECTION: forcing a failure. [ 1740.991692][T29596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.991728][T29596] CPU: 0 UID: 0 PID: 29596 Comm: syz.5.8247 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1740.991757][T29596] Tainted: [L]=SOFTLOCKUP [ 1740.991765][T29596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1740.991777][T29596] Call Trace: [ 1740.991785][T29596] [ 1740.991795][T29596] dump_stack_lvl+0xe8/0x150 [ 1740.991824][T29596] should_fail_ex+0x46b/0x600 [ 1740.991862][T29596] _copy_from_user+0x2d/0xb0 [ 1740.991896][T29596] ipv6_set_opt_hdr+0x3d3/0x760 [ 1740.991929][T29596] do_ipv6_setsockopt+0x13df/0x3150 [ 1740.991965][T29596] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1740.991991][T29596] ? kstrtouint+0x6e/0xe0 [ 1740.992021][T29596] ? get_pid_task+0x20/0x1f0 [ 1740.992054][T29596] ? __lock_acquire+0x6b5/0x2cf0 [ 1740.992084][T29596] ? get_pid_task+0x20/0x1f0 [ 1740.992108][T29596] ? get_pid_task+0x20/0x1f0 [ 1740.992146][T29596] ? __lock_acquire+0x6b5/0x2cf0 [ 1740.992177][T29596] ? do_raw_spin_lock+0x12b/0x2f0 [ 1740.992213][T29596] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1740.992251][T29596] ipv6_setsockopt+0x59/0x170 [ 1740.992282][T29596] rawv6_setsockopt+0x276/0x5f0 [ 1740.992312][T29596] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1740.992341][T29596] ? sock_common_setsockopt+0x36/0xc0 [ 1740.992390][T29596] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1740.992425][T29596] do_sock_setsockopt+0x17c/0x1b0 [ 1740.992452][T29596] __x64_sys_setsockopt+0x143/0x1b0 [ 1740.992496][T29596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.992522][T29596] do_syscall_64+0x15f/0xf80 [ 1740.992543][T29596] ? trace_irq_disable+0x3b/0x140 [ 1740.992571][T29596] ? clear_bhb_loop+0x40/0x90 [ 1740.992600][T29596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.992623][T29596] RIP: 0033:0x7f6895d2cdd9 [ 1740.992644][T29596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1740.992663][T29596] RSP: 002b:00007f6893f7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1740.992687][T29596] RAX: ffffffffffffffda RBX: 00007f6895fa5fa0 RCX: 00007f6895d2cdd9 [ 1740.992704][T29596] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000003 [ 1740.992718][T29596] RBP: 00007f6893f7e090 R08: 0000000000000008 R09: 0000000000000000 [ 1740.992732][T29596] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1740.992746][T29596] R13: 00007f6895fa6038 R14: 00007f6895fa5fa0 R15: 00007ffeb0ba21b8 [ 1740.992783][T29596] [ 1741.505688][T28422] veth0_macvtap: entered promiscuous mode [ 1741.552600][T28422] veth1_macvtap: entered promiscuous mode [ 1741.719051][T28422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1741.809375][T28422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1741.910471][T18933] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.915911][T18933] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.923479][T18933] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.924816][T18933] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.080511][T28949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1742.764346][T29644] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8262'. [ 1743.060855][T28949] 8021q: adding VLAN 0 to HW filter on device team0 [ 1743.162092][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.162226][ T5796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1743.262966][T18933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.271222][T18933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1743.729181][T29660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8267'. [ 1743.802816][T23622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1743.802840][T23622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.124215][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1744.124238][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1747.100473][T29729] syz_tun: entered allmulticast mode [ 1747.226883][T28949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1748.523878][T28949] veth0_vlan: entered promiscuous mode [ 1748.566426][T28949] veth1_vlan: entered promiscuous mode [ 1748.775528][T28949] veth0_macvtap: entered promiscuous mode [ 1748.880952][T28949] veth1_macvtap: entered promiscuous mode [ 1748.956885][T28949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1749.158891][T28949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1749.228923][T23622] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.229781][T23622] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.231703][T23622] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.233511][T23622] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.867249][T29780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8309'. [ 1751.477968][ T5715] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1751.569432][T29803] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8318'. [ 1751.575959][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1751.575984][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1751.607927][ T5715] usb 10-1: device descriptor read/64, error -71 [ 1751.857937][ T5715] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1751.988246][ T5715] usb 10-1: device descriptor read/64, error -71 [ 1752.099309][ T5715] usb usb10-port1: attempt power cycle [ 1752.137563][ T5796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.137587][ T5796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.245219][T29817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8323'. [ 1752.438102][ T5715] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1752.461424][ T5715] usb 10-1: device descriptor read/8, error -71 [ 1752.699744][ T5715] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1752.721196][ T5715] usb 10-1: device descriptor read/8, error -71 [ 1752.833031][ T5715] usb usb10-port1: unable to enumerate USB device [ 1753.029836][T29850] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8332'. [ 1753.094122][T29847] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8332'. [ 1753.847441][T29872] netlink: 'syz.2.8345': attribute type 1 has an invalid length. [ 1753.940359][T29872] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1754.060401][T29876] bond4: (slave veth0_to_bond): making interface the new active one [ 1754.255049][T29876] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1754.611609][T29872] bond4: entered promiscuous mode [ 1754.611636][T29872] veth0_to_bond: entered promiscuous mode [ 1754.611896][T29872] bond4: entered allmulticast mode [ 1754.611913][T29872] veth0_to_bond: entered allmulticast mode [ 1756.356781][T29940] netlink: 152 bytes leftover after parsing attributes in process `syz.8.8369'. [ 1757.076629][T29960] fuse: fd is not a fuse device [ 1758.363839][T29964] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8378'. [ 1758.820719][T29984] vivid-004: disconnect [ 1758.848059][T29988] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8387'. [ 1758.901600][T29990] FAULT_INJECTION: forcing a failure. [ 1758.901600][T29990] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1758.901640][T29990] CPU: 0 UID: 0 PID: 29990 Comm: syz.8.8388 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1758.901671][T29990] Tainted: [L]=SOFTLOCKUP [ 1758.901679][T29990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1758.901692][T29990] Call Trace: [ 1758.901701][T29990] [ 1758.901711][T29990] dump_stack_lvl+0xe8/0x150 [ 1758.901743][T29990] should_fail_ex+0x46b/0x600 [ 1758.901785][T29990] prepare_alloc_pages+0x22a/0x6b0 [ 1758.901824][T29990] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1758.901858][T29990] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1758.901907][T29990] __alloc_pages_noprof+0x10/0x100 [ 1758.901937][T29990] alloc_pages_bulk_noprof+0x6c0/0x8c0 [ 1758.901975][T29990] ? copy_splice_read+0x16f/0xab0 [ 1758.902015][T29990] copy_splice_read+0x19f/0xab0 [ 1758.902068][T29990] ? _parse_integer_limit+0x1ae/0x1f0 [ 1758.902113][T29990] ? __pfx_copy_splice_read+0x10/0x10 [ 1758.902158][T29990] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1758.902194][T29990] ? lockdep_hardirqs_on+0x7a/0x110 [ 1758.902230][T29990] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1758.902267][T29990] ? sock_splice_read+0xcd/0x100 [ 1758.902306][T29990] splice_file_to_pipe+0x452/0x6c0 [ 1758.902348][T29990] do_splice+0x1187/0x1940 [ 1758.902380][T29990] ? sb_end_write+0xe9/0x1c0 [ 1758.902437][T29990] ? __pfx_do_splice+0x10/0x10 [ 1758.902473][T29990] __se_sys_splice+0x353/0x490 [ 1758.902504][T29990] ? __pfx___se_sys_splice+0x10/0x10 [ 1758.902537][T29990] ? __x64_sys_splice+0x21/0xf0 [ 1758.902562][T29990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.902588][T29990] do_syscall_64+0x15f/0xf80 [ 1758.902609][T29990] ? trace_irq_disable+0x3b/0x140 [ 1758.902636][T29990] ? clear_bhb_loop+0x40/0x90 [ 1758.902664][T29990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.902687][T29990] RIP: 0033:0x7f084939cdd9 [ 1758.902709][T29990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.902728][T29990] RSP: 002b:00007f08475ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1758.902752][T29990] RAX: ffffffffffffffda RBX: 00007f0849615fa0 RCX: 00007f084939cdd9 [ 1758.902770][T29990] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 1758.902784][T29990] RBP: 00007f08475ee090 R08: 0000000000000f3a R09: 0000000000000000 [ 1758.902799][T29990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1758.902813][T29990] R13: 00007f0849616038 R14: 00007f0849615fa0 R15: 00007ffcf4b8ed58 [ 1758.902850][T29990] [ 1759.242872][T29993] i2c i2c-0: Invalid block write size 35 [ 1759.457477][T29977] vivid-004: reconnect [ 1759.758440][ T5609] block nbd9: Receive control failed (result -107) [ 1759.867920][ T5715] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1759.982762][T30015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8396'. [ 1760.025232][ T5715] usb 9-1: Using ep0 maxpacket: 32 [ 1760.033606][ T5715] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1760.034324][T29982] [ 1760.034335][T29982] ====================================================== [ 1760.034345][T29982] WARNING: possible circular locking dependency detected [ 1760.034365][T29982] syzkaller #0 Tainted: G L [ 1760.034378][T29982] ------------------------------------------------------ [ 1760.034387][T29982] syz.9.8385/29982 is trying to acquire lock: [ 1760.034400][T29982] ffffffff8e0ee180 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 1760.034459][T29982] [ 1760.034459][T29982] but task is already holding lock: [ 1760.034467][T29982] ffffffff8f6f8bd8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 1760.034536][T29982] [ 1760.034536][T29982] which lock already depends on the new lock. [ 1760.034536][T29982] [ 1760.034545][T29982] [ 1760.034545][T29982] the existing dependency chain (in reverse order) is: [ 1760.034554][T29982] [ 1760.034554][T29982] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 1760.034592][T29982] mutex_lock_nested+0x5a/0x1d0 [ 1760.034620][T29982] kobject_uevent_net_broadcast+0x281/0x560 [ 1760.034645][T29982] kobject_uevent_env+0x55f/0x9e0 [ 1760.034669][T29982] device_add+0x557/0xbb0 [ 1760.034688][T29982] device_create+0x269/0x300 [ 1760.034710][T29982] msr_device_create+0x33/0x50 [ 1760.034738][T29982] cpuhp_invoke_callback+0x445/0x860 [ 1760.034763][T29982] cpuhp_thread_fun+0x36b/0x780 [ 1760.034786][T29982] smpboot_thread_fn+0x541/0xa50 [ 1760.034810][T29982] kthread+0x388/0x470 [ 1760.034836][T29982] ret_from_fork+0x514/0xb70 [ 1760.034858][T29982] ret_from_fork_asm+0x1a/0x30 [ 1760.034883][T29982] [ 1760.034883][T29982] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1760.034913][T29982] cpuhp_thread_fun+0x127/0x780 [ 1760.034936][T29982] smpboot_thread_fn+0x541/0xa50 [ 1760.034959][T29982] kthread+0x388/0x470 [ 1760.034985][T29982] ret_from_fork+0x514/0xb70 [ 1760.035004][T29982] ret_from_fork_asm+0x1a/0x30 [ 1760.035027][T29982] [ 1760.035027][T29982] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1760.035056][T29982] cpus_read_lock+0x42/0x160 [ 1760.035074][T29982] static_key_disable+0x12/0x20 [ 1760.035104][T29982] __inet_hash_connect+0x2623/0x2630 [ 1760.035134][T29982] tcp_v4_connect+0xd5f/0x19b0 [ 1760.035159][T29982] __inet_stream_connect+0x25a/0xdd0 [ 1760.035197][T29982] inet_stream_connect+0x66/0xa0 [ 1760.035217][T29982] __sys_connect+0x315/0x450 [ 1760.035237][T29982] __x64_sys_connect+0x7a/0x90 [ 1760.035257][T29982] do_syscall_64+0x15f/0xf80 [ 1760.035277][T29982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.035299][T29982] [ 1760.035299][T29982] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1760.035330][T29982] lock_sock_nested+0x41/0x130 [ 1760.035360][T29982] inet_shutdown+0x6a/0x390 [ 1760.035381][T29982] nbd_mark_nsock_dead+0x2e9/0x560 [ 1760.035404][T29982] recv_work+0x1c4c/0x1d60 [ 1760.035424][T29982] process_scheduled_works+0xb5d/0x1860 [ 1760.035447][T29982] worker_thread+0xa53/0xfc0 [ 1760.035470][T29982] kthread+0x388/0x470 [ 1760.035497][T29982] ret_from_fork+0x514/0xb70 [ 1760.035520][T29982] ret_from_fork_asm+0x1a/0x30 [ 1760.035546][T29982] [ 1760.035546][T29982] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1760.035587][T29982] mutex_lock_nested+0x5a/0x1d0 [ 1760.035614][T29982] nbd_queue_rq+0x37b/0x1100 [ 1760.035633][T29982] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 1760.035661][T29982] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 1760.035692][T29982] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 1760.035723][T29982] blk_mq_run_hw_queue+0x368/0x520 [ 1760.035749][T29982] blk_mq_dispatch_list+0xd1f/0xe20 [ 1760.035777][T29982] blk_mq_flush_plug_list+0x48d/0x570 [ 1760.035807][T29982] __blk_flush_plug+0x3ed/0x4d0 [ 1760.035835][T29982] __submit_bio+0x28d/0x580 [ 1760.035864][T29982] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1760.035893][T29982] block_read_full_folio+0x7b7/0x830 [ 1760.035922][T29982] filemap_read_folio+0x137/0x3b0 [ 1760.035944][T29982] do_read_cache_folio+0x2bf/0x560 [ 1760.035968][T29982] read_part_sector+0xb8/0x2b0 [ 1760.035994][T29982] adfspart_check_ICS+0xb1/0x960 [ 1760.036020][T29982] bdev_disk_changed+0x817/0x1770 [ 1760.036047][T29982] blkdev_get_whole+0x2e5/0x480 [ 1760.036076][T29982] bdev_open+0x31e/0xcc0 [ 1760.036102][T29982] blkdev_open+0x485/0x620 [ 1760.036131][T29982] do_dentry_open+0x83d/0x13e0 [ 1760.036158][T29982] vfs_open+0x3b/0x350 [ 1760.036186][T29982] path_openat+0x2e43/0x38a0 [ 1760.036207][T29982] do_file_open+0x23e/0x4a0 [ 1760.036229][T29982] do_sys_openat2+0x113/0x200 [ 1760.036260][T29982] __x64_sys_openat+0x138/0x170 [ 1760.036292][T29982] do_syscall_64+0x15f/0xf80 [ 1760.036311][T29982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.036333][T29982] [ 1760.036333][T29982] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1760.036365][T29982] mutex_lock_nested+0x5a/0x1d0 [ 1760.036391][T29982] nbd_queue_rq+0xc6/0x1100 [ 1760.036410][T29982] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 1760.036438][T29982] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 1760.036469][T29982] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 1760.036501][T29982] blk_mq_run_hw_queue+0x368/0x520 [ 1760.036527][T29982] blk_mq_dispatch_list+0xd1f/0xe20 [ 1760.036562][T29982] blk_mq_flush_plug_list+0x48d/0x570 [ 1760.036597][T29982] __blk_flush_plug+0x3ed/0x4d0 [ 1760.036625][T29982] __submit_bio+0x28d/0x580 [ 1760.036655][T29982] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1760.036683][T29982] block_read_full_folio+0x7b7/0x830 [ 1760.036711][T29982] filemap_read_folio+0x137/0x3b0 [ 1760.036733][T29982] do_read_cache_folio+0x2bf/0x560 [ 1760.036758][T29982] read_part_sector+0xb8/0x2b0 [ 1760.036785][T29982] adfspart_check_ICS+0xb1/0x960 [ 1760.036814][T29982] bdev_disk_changed+0x817/0x1770 [ 1760.036840][T29982] blkdev_get_whole+0x2e5/0x480 [ 1760.036870][T29982] bdev_open+0x31e/0xcc0 [ 1760.036896][T29982] blkdev_open+0x485/0x620 [ 1760.036925][T29982] do_dentry_open+0x83d/0x13e0 [ 1760.036955][T29982] vfs_open+0x3b/0x350 [ 1760.036984][T29982] path_openat+0x2e43/0x38a0 [ 1760.037007][T29982] do_file_open+0x23e/0x4a0 [ 1760.037029][T29982] do_sys_openat2+0x113/0x200 [ 1760.037059][T29982] __x64_sys_openat+0x138/0x170 [ 1760.037092][T29982] do_syscall_64+0x15f/0xf80 [ 1760.037111][T29982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.037133][T29982] [ 1760.037133][T29982] -> #3 (set->srcu){.+.+}-{0:0}: [ 1760.037165][T29982] __synchronize_srcu+0xca/0x300 [ 1760.037193][T29982] elevator_switch+0x1e8/0x7a0 [ 1760.037220][T29982] elevator_change+0x2cc/0x450 [ 1760.037248][T29982] elevator_set_default+0x36c/0x430 [ 1760.037274][T29982] blk_register_queue+0x3e9/0x4e0 [ 1760.037304][T29982] __add_disk+0x677/0xd50 [ 1760.037323][T29982] add_disk_fwnode+0xfb/0x480 [ 1760.037339][T29982] nbd_dev_add+0x72c/0xb50 [ 1760.037372][T29982] nbd_init+0x168/0x1f0 [ 1760.037481][T29982] do_one_initcall+0x250/0x870 [ 1760.037507][T29982] do_initcall_level+0x104/0x190 [ 1760.037569][T29982] do_initcalls+0x59/0xa0 [ 1760.037608][T29982] kernel_init_freeable+0x2a6/0x3e0 [ 1760.037641][T29982] kernel_init+0x1d/0x1d0 [ 1760.037666][T29982] ret_from_fork+0x514/0xb70 [ 1760.037689][T29982] ret_from_fork_asm+0x1a/0x30 [ 1760.037717][T29982] [ 1760.037717][T29982] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1760.037750][T29982] mutex_lock_nested+0x5a/0x1d0 [ 1760.037776][T29982] elevator_change+0x1b3/0x450 [ 1760.037802][T29982] elevator_set_none+0xb5/0x140 [ 1760.037828][T29982] blk_mq_update_nr_hw_queues+0x607/0x1a80 [ 1760.037861][T29982] nbd_start_device+0x17f/0xb20 [ 1760.037878][T29982] nbd_genl_connect+0x1651/0x1c80 [ 1760.037909][T29982] genl_family_rcv_msg_doit+0x22a/0x330 [ 1760.037938][T29982] genl_rcv_msg+0x61c/0x7a0 [ 1760.037964][T29982] netlink_rcv_skb+0x232/0x4b0 [ 1760.037985][T29982] genl_rcv+0x28/0x40 [ 1760.038010][T29982] netlink_unicast+0x780/0x920 [ 1760.038039][T29982] netlink_sendmsg+0x813/0xb40 [ 1760.038061][T29982] ____sys_sendmsg+0x94c/0x9c0 [ 1760.038083][T29982] ___sys_sendmsg+0x2a5/0x360 [ 1760.038106][T29982] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1760.038129][T29982] do_syscall_64+0x15f/0xf80 [ 1760.038148][T29982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.038170][T29982] [ 1760.038170][T29982] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1760.038209][T29982] blk_alloc_queue+0x54e/0x690 [ 1760.038232][T29982] __blk_mq_alloc_disk+0x197/0x390 [ 1760.038263][T29982] nbd_dev_add+0x499/0xb50 [ 1760.038293][T29982] nbd_init+0x168/0x1f0 [ 1760.038323][T29982] do_one_initcall+0x250/0x870 [ 1760.038347][T29982] do_initcall_level+0x104/0x190 [ 1760.038377][T29982] do_initcalls+0x59/0xa0 [ 1760.038407][T29982] kernel_init_freeable+0x2a6/0x3e0 [ 1760.038440][T29982] kernel_init+0x1d/0x1d0 [ 1760.038463][T29982] ret_from_fork+0x514/0xb70 [ 1760.038484][T29982] ret_from_fork_asm+0x1a/0x30 [ 1760.038510][T29982] [ 1760.038510][T29982] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1760.038540][T29982] __lock_acquire+0x15a5/0x2cf0 [ 1760.038569][T29982] lock_acquire+0x106/0x350 [ 1760.038605][T29982] fs_reclaim_acquire+0x71/0x100 [ 1760.038631][T29982] kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 1760.038655][T29982] __alloc_skb+0x27d/0x7d0 [ 1760.038675][T29982] alloc_uevent_skb+0x7d/0x230 [ 1760.038700][T29982] kobject_uevent_net_broadcast+0x2fd/0x560 [ 1760.038726][T29982] kobject_uevent_env+0x55f/0x9e0 [ 1760.038752][T29982] nbd_set_size+0x546/0x670 [ 1760.038772][T29982] nbd_ioctl+0x57b/0xe40 [ 1760.038793][T29982] blkdev_ioctl+0x5e6/0x750 [ 1760.038823][T29982] __se_sys_ioctl+0xff/0x170 [ 1760.038847][T29982] do_syscall_64+0x15f/0xf80 [ 1760.038866][T29982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.038887][T29982] [ 1760.038887][T29982] other info that might help us debug this: [ 1760.038887][T29982] [ 1760.038896][T29982] Chain exists of: [ 1760.038896][T29982] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 1760.038896][T29982] [ 1760.038944][T29982] Possible unsafe locking scenario: [ 1760.038944][T29982] [ 1760.038952][T29982] CPU0 CPU1 [ 1760.038959][T29982] ---- ---- [ 1760.038967][T29982] lock(uevent_sock_mutex); [ 1760.038981][T29982] lock(cpuhp_state-up); [ 1760.038997][T29982] lock(uevent_sock_mutex); [ 1760.039014][T29982] lock(fs_reclaim); [ 1760.039028][T29982] [ 1760.039028][T29982] *** DEADLOCK *** [ 1760.039028][T29982] [ 1760.039044][T29982] 2 locks held by syz.9.8385/29982: [ 1760.039059][T29982] #0: ffff8880275a1a48 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_start_device+0x189/0xb20 [ 1760.039110][T29982] #1: ffffffff8f6f8bd8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 1760.039168][T29982] [ 1760.039168][T29982] stack backtrace: [ 1760.039186][T29982] CPU: 0 UID: 0 PID: 29982 Comm: syz.9.8385 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1760.039217][T29982] Tainted: [L]=SOFTLOCKUP [ 1760.039226][T29982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1760.039239][T29982] Call Trace: [ 1760.039248][T29982] [ 1760.039257][T29982] dump_stack_lvl+0xe8/0x150 [ 1760.039284][T29982] print_circular_bug+0x2e1/0x300 [ 1760.039307][T29982] check_noncircular+0x12e/0x150 [ 1760.039346][T29982] __lock_acquire+0x15a5/0x2cf0 [ 1760.039378][T29982] ? __pfx___schedule+0x10/0x10 [ 1760.039418][T29982] ? kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 1760.039443][T29982] lock_acquire+0x106/0x350 [ 1760.039471][T29982] ? kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 1760.039504][T29982] fs_reclaim_acquire+0x71/0x100 [ 1760.039529][T29982] ? kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 1760.039553][T29982] kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 1760.039584][T29982] ? __alloc_skb+0x27d/0x7d0 [ 1760.039606][T29982] ? __alloc_skb+0x186/0x7d0 [ 1760.039628][T29982] __alloc_skb+0x27d/0x7d0 [ 1760.039653][T29982] alloc_uevent_skb+0x7d/0x230 [ 1760.039682][T29982] kobject_uevent_net_broadcast+0x2fd/0x560 [ 1760.039713][T29982] kobject_uevent_env+0x55f/0x9e0 [ 1760.039744][T29982] nbd_set_size+0x546/0x670 [ 1760.039770][T29982] ? __pfx_nbd_set_size+0x10/0x10 [ 1760.039801][T29982] ? nbd_start_device+0x8dd/0xb20 [ 1760.039828][T29982] nbd_ioctl+0x57b/0xe40 [ 1760.039852][T29982] ? __pfx_nbd_ioctl+0x10/0x10 [ 1760.039872][T29982] ? __asan_memset+0x22/0x50 [ 1760.039903][T29982] ? smack_file_ioctl+0x263/0x360 [ 1760.039929][T29982] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1760.039955][T29982] ? __pfx_nbd_ioctl+0x10/0x10 [ 1760.039977][T29982] blkdev_ioctl+0x5e6/0x750 [ 1760.040010][T29982] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1760.040040][T29982] ? __fget_files+0x2a/0x420 [ 1760.040073][T29982] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1760.040098][T29982] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1760.040128][T29982] __se_sys_ioctl+0xff/0x170 [ 1760.040151][T29982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.040173][T29982] do_syscall_64+0x15f/0xf80 [ 1760.040193][T29982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.040216][T29982] ? clear_bhb_loop+0x40/0x90 [ 1760.040241][T29982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.040263][T29982] RIP: 0033:0x7f61565ccdd9 [ 1760.040283][T29982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1760.040304][T29982] RSP: 002b:00007f61547fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1760.040326][T29982] RAX: ffffffffffffffda RBX: 00007f6156846090 RCX: 00007f61565ccdd9 [ 1760.040344][T29982] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 1760.040359][T29982] RBP: 00007f6156662d69 R08: 0000000000000000 R09: 0000000000000000 [ 1760.040372][T29982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1760.040386][T29982] R13: 00007f6156846128 R14: 00007f6156846090 R15: 00007ffe132ca6d8 [ 1760.040411][T29982] [ 1760.046832][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 1760.046887][ T36] audit: type=1800 audit(2000002005.240:1289): pid=30018 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.8396" name="nullb0" dev="tmpfs" ino=5531 res=0 errno=0 [ 1760.051353][ T5715] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1023 [ 1760.112901][ T5715] usb 9-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 1760.112985][ T5715] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.113010][ T5715] usb 9-1: Product: syz [ 1760.113027][ T5715] usb 9-1: Manufacturer: syz [ 1760.113044][ T5715] usb 9-1: SerialNumber: syz [ 1760.431905][T30004] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1760.438940][T29982] block nbd9: shutting down sockets [ 1760.922181][ T5715] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1761.565791][ T5715] usb 9-1: USB disconnect, device number 2 [ 1761.609126][T30020] udevd[30020]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory