last executing test programs: 7m46.656171937s ago: executing program 0 (id=631): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00X\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_pidfd_open(r4, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) ioctl$NS_GET_OWNER_UID(r2, 0xb704, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x0) r11 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r12 = accept$packet(r2, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c80)=0x14) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, 0x0) r13 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) syz_io_uring_setup(0xaad, &(0x7f0000000300)={0x0, 0x4, 0x40, 0x22, 0x1b}, &(0x7f0000000100), &(0x7f0000000400), &(0x7f0000000000)) write$binfmt_script(r13, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) pwrite64(r13, &(0x7f0000000180)='\n\x00\x00', 0x3, 0x2) execveat(r13, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmmsg$unix(r6, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e27}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000280)="ebb318b3cc4f1573adc0b32c064ef3e262ecc3146bd70c7075e5665f30172adfad0337eb02a58a850db9cce0b66c08806e8da358462d6262446c5308f39ca5e0c35d300a53888295313b6cbaa2979928d40a625449d8b29dbed5068e0538168a23181c029f630f2c0162d3f18d6acf50279db6a608f1c4341274ecfc1cb7d7086cb8ab33efcf4469cb3e211f397df537d4a1bc98a9bf95f09bc04efc426a7908c42a8258809072f403ac75a74378e083a676ddec624262631bbbb453117a02e3ca69c0e1e7edbb88bb9e106877e063b2009e2e666f4523774e4c0ef31fce073c5d85447b6d8b961a74ed33a43b2f89b6691f", 0xf2}, {&(0x7f0000000380)="43b3fc9fc0625e86ae602771c9b7795056e5b923f34046bb9fd4fd1fa988eea6eec779ce009e006e25effbc56a3c2d358315f0a26174fc1fc92b8ee99fe1d3b624da253cdc94f809ce2d94a45e4b63efa357c498fc2f063bdab8e75195782a5657a80d323fa612bfd2767359e4e3ca79b9261dc228c87b057879d28ec7a12672d47d12652885153db60399a8cf5b69249080b5e04e6822fb9ea2e3873f46ff251eb0ef6f2127", 0xa6}, {&(0x7f00000005c0)="f8875fd88c7b7d12084a675956367861b4d2dcfe24bf1cd2496f91a70caf2df4725e6385b111910baebb514c76584f366d0dc98e41d38a4f407cbeef47215ae18998a4825dbef78ec6b672606a8f18d5b8c7f9fde11d134bb22d2a82bf7231108b0f2001dd885c480f68d152b18f3de63d174f7cb84c96308e7c49a4bf71b61801d0148a1fee3d6668c263853bed43704186b141af43540bdbaeee0a69c2ae972c0370b30e310393fd133640d50fe6c4655462ddbf9053812941ab90762b86f6cda49a6a48447a6ccb55cee66cad61", 0xcf}, {&(0x7f0000000780)="5f1cf94fa186299c032988f993305726d5c6b2a3cbfd598acb32083b81453771274b27a29686f2c52234575cbfa17f6541b7499987a8b3e12bdbdbca2caaf7cd92c22dd6542fafc7206ee75b6e8febd8ebf800c3232cff4ad264989919fc4599fb192cb9025540c02f3d48920f263fd9c675c130a3cfb90bbadf0f809e4f195e39601a067e8d7f6277c15dadfa91dd7df17c5561ae8640b5da9f2902ea11933185fded3fcbbfab2b2485a5c2093fca07810f5e9f3951b84a1a5a0d365219ca016f43f18f3461deb60e72785bbc4bac9f0bf6bd1ccfea264f", 0xd8}], 0x4, &(0x7f0000000a40)=[@rights={{0x18, 0x1, 0x1, [r3, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r9}}}, @rights={{0x1c, 0x1, 0x1, [r5, r10, r3]}}], 0x78, 0x4800}}, {{&(0x7f0000000ac0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b40)="c6190c75e74e54be282c", 0xa}, {&(0x7f0000000b80)="4f97d77837c6db971987d7e7bccdf7d60eaf63ba7b153c7234f7f5d15ce64e56f7", 0x21}], 0x2, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {r4, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r9}}}, @rights={{0x28, 0x1, 0x1, [r11, r12, r2, r1, r2, r5]}}], 0x68, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r12, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @rights={{0x24, 0x1, 0x1, [r0, r11, r1, r10, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}], 0xa0, 0x8000}}, {{&(0x7f0000001280)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001480)}, {&(0x7f00000014c0)="5fbb73e6e4663c6e47254c86be52af18e487dc504a1b15de611e3cbe36a35fee3c62f35b7b5a84ae478d7cab60451633f74c4aa7d15ed1573eb7006bf65fdb87a13ef381315895aa748c79e739bc1c8e0353bd6e8c2282cc25ae2af749325d054443e06b51a0078f1723ab26a94524ddbbafa482", 0x74}, {&(0x7f0000001540)}], 0x3, &(0x7f0000001640)=[@rights={{0x24, 0x1, 0x1, [r14, r2, 0xffffffffffffffff, 0xffffffffffffffff, r14]}}, @rights={{0x18, 0x1, 0x1, [r7, r14]}}], 0x40, 0x478447a2e0b98908}}, {{&(0x7f0000001680)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000001700)="4631f1b65140c53e35abed5e", 0xc}], 0x1, &(0x7f0000001800), 0x0, 0x40010}}], 0x5, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) 7m44.520292754s ago: executing program 0 (id=637): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$getenv(0x4201, r0, 0x404, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$sndpcmc(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) msgget$private(0x0, 0x1c0) 7m41.087881241s ago: executing program 0 (id=644): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x7800, 0x0, 0x80000d6, {{0xa, 0x4, 0x1, 0x23, 0x28, 0x66, 0x0, 0xbc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x14, 0x1a, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x4ad9}, {@private=0xa010102, 0x40}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070700000000000000000000000000000000140003006970766c616e300000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206030000000000000000000a0000000d000300686173683a6e657400000000050001000700000005000500020000000900020073797a3000000000050004000000000014000780080008400000007808000640"], 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) read$FUSE(r4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000004c40)=[{0x0}, {&(0x7f0000000740)}, {&(0x7f0000002840)="20c283d4fbc0fb5f8953afab3256cf089eb9ecda3ca834bdf7d881f7cd9c773cc0a58dbf94515f7195b44271ffa65ef9066bd7de67836ddf1bca068004f724bfdd96174b4ad98dbd06f8c34036d662dc5b090e5260150c571637accec4cd904694d19e7c56855b107f123570f8033aa04d8f459fe8011f9de6c1853cd426d572b2f11a7541a744241c328b6d016931d8d304a16f93901bf3e1fdf8fb12f17f05fdd2946248d2002418ffacbec3df00c43b5b566a116ae1fc06d9832b5a5218657cb3e394f7df2418ad527d901bfde2f01c271ddef6f3c5469869b9c3e020550238655611a303168133687f4f66f3c330f552a50edc3a0936aa03b0f7271ecebbd0225fb156b2abf6e7fe37eb2a4b5d913e985a276fd86db44552dc3f5f3b1d78b2c8e29b9248cf1267860dae1a6413d399cc92880edaa56bbbe2b30a605fc0c51bb12ccd1ab76d01aa0b5ecc5b794a4ace5101712e06ec20c64ab55dfeda4854c8111e1f2c70ab98a912357d0aee5a9de012e7aecb0f3fe79dea8364954059412903758b9492a9bb964e52fc4fbeec1fa9698173bd5e7238fe49fdfe342ed32eb05d4c723cbe14baf843cb0ac077ab0348cfec769fcc862bd48d4432b86647e76c5759fa9c1547b0f341b568839735e85c98d8859e57b8d789564733c2bb10de9593ed6cceff6385692bd80ad5c1b9f2cfc1d59db6bd41be0a663848332ac810f8a2be90f15e1914cab41311f082b3096b8618bf4cdc5fb643d0af35a099f3186ee853fbe7458ab9ea62c0ad56f44fab7de0b71dfb00864bd465e9c88486b86e2afaf6b35326983e038f07a1422f36eb693815a6acbde5e10a8554ed0630b26b0d5226fd312966757376f6e7b4cde3e60db5eb5bc7602ea2712b0a031a822a1a436ed17cff2b80d49ce05c820af4395fad01e2dc0e0172c5859dcf56f4747dc9b6c0b5cc4c4a1b7830c28a34d5960a2f38bfafad8748152bf2a51290d851bd40d4e74c42fcfbdd063e09fe3d35f2079477b1f642fbbcb22d71797e8a8e590ae7da760d192ce27cd40a14c3489df394e3e2360380fde9f245826227ebfb54c6b6c463231e6fb7e259beb724fb2833ef046b4f0cd0fad35b20ee4de06d6409e82fbd4f1b0f9f70f40d09c161cb3382890f3f8bc649efad8c2323a326a0cdabf78711d3f15b201182bab453b44fbc48b6aec1cf08d3ee5d5c4242b3862fbf11ea070dc9ea6b5857b3cce041717e3963c1f104677995d69eddacc750b65523d24696aff0507da4977396287ed924682d55c3e7d5f7df56a5963cb64feabce2cbba5411dacffd937c021dd0e3692ad03fbf4c1ab831e3d3396be2c3e620880f1dead34056dfdb1e32e1be3d27231c7e32ee9e52bc9518513be27bf1c16e937d8e343098ec3c8ad4a577497cc476cd487a79b3515be9cb789e1a7a1e0812f776702245402fa9403e12a4eb884e6de763a7580f86b0dac3ebf6e2b6e702e9dd626f1b5b5bc449a8e541834f61a4b6630599f244c795d5ba6757487d6350f4238643611fa32df894485333f54ffbaefb61869ec649e770a71962d08d20ec9be87a8458af50805ffa32077227f755c577b2721a568d25893648b80df79d8f7711182c7c30d9576261db6157c70e87fe0c4a727ec376670e4b7e2ae347fb11475eab219c7fbdde894b05efe399cbbef02deb18b7248d27817bba795e0ca224d0705a83abcc9e41b6620c39aedf58b9ced556f204f8882cb1a73c4cd453ea482b3d9ea84d320d24389443d20f7e5b4d447888b7eee2327bc84b8b476bfce64c1a6b42c54430730628361593174b3da93ce88e819f5a04f0dd3089533d96909adf453821e82df6d3f2d6bec8fd21c0e53f1fd06a04920d52064565976ff5c9e02e45bd0f81ccbbd5af019ce42c5291279891171a274456a7adf57d3b98b65876e7aa50283d622a6c05e05efbbc8e4445e8c41b6a88c3fe5c505acd8d286075d7c329819aa2d7a6a93528a73cc516b8fe5aaa94a23cbcbba0a1520e68847a6b3428ccb841fa8f9767c22e5d01e4979bb06103a662cf5e4fc5b177a86232264d52edaf3ed61fc4ed7893d9d36e453e4e14a30ad41c75af3317d78d00eae5752f0e0ef1a79d88b3e9d9aa563eb0e2fcd1c46c936bf46b340704038f39d90ec6cd46092644420c00bc01785cc88e643bdf5076ebaa01125fe9a5eafb6f8175da315e324b057955e0b0e4ccfb626a127bbeb3b75d7727bf3be98beb4411a144eee22e78bdae059a9d7e4adcdbebdce0ecb93fae76c036c2d228a5a027a0b75f4b5aa41f0f0139606874ffe7ec0721262005c55d4b52a838c3130530f0d641b2a3912e234b3437c6e4884805359c51dc89042b3bc8c273df696d7b639d80f0ba2967ac21e1eef6c1e0e9b434e9a5425dd476192f8a5357084376080fdc912e8e05843798db87ff1120deafc0e37f1b8a297b12c99f22592dadea76aedb92e165e3cec526bb37504d4e079678b2ee58b2f3fd2e1b59642560ff1bf724288021f7de0e192217b4087329129150097e1d73d984be74f53efb6699273d7d33d5269b0660b0c0d16e56cdb0a09f07f7341e60ce940033893e0972de0c628b084736bdfcc3e9f15605c459cd5f22202e16211f9f3c26a700749de7cd194796682256d8c738d4abf03c046636d951dcb6bbb8039cf4978cad91a1936558512f704044b8b6bbe40a966c3ad52e9606dbeeb9d3637388d14ef3b538cad3368f8e6bcd0b46a5693370f8d744409b3f1c7d0081ad434b50003d38fc153a178797a9b2253ef8b64a5ec480b290b932b07ce86ed84dbcd34a6dfbb44610c2107d2f0a8e71a77b00013e3c4a3ac431d356209f561757f81de1286fba5d730d09eea8e9871b72d31d2825fad49a5eb5f866de26822965b9928f6f1cc97a8466c3eec409f86bb144c12b726db3cc5ec05412ba1750a11b64e91a03ba94eee40501c8772c08e11a9390dda3f1da26c6bd5bb7b6b8c9b82a338fc1307d5c4a71f961d163b25a0824e7ede6464dec43809da4ce91a35ef78692b817afbf55f24e634fdbc34c4c37319235fa26e39227e7814449244c91db53c0766a734182bd2c76bfba824aed8ffdc245a1018efcf950d6481e136a7a47aef800e517a9312f99166940e0441eb7e0f89df070103f725c7daf166e84b1d44b5ffd7ba8a91628ea54cd37e06cbfb08af14e016eb82feb0cf44b598365a6df4d31802b3c06ffbd192e9f4fb9bd2046d2815fc9030a5eb11e54f6bd23928ec97847493758af4d2ba2a22b0176bab8b0b86a3ec9274ba4c88ca54573afa88813f6dabfd3f512900cf90babcac096aa3107fe32ae40bef1e53c320d9840291b60940e90bef8fc550087c6d953dcde39ebb00941a9e3483164be9a0cf2216c30777bfe6cac5a3c8ce7aa1ac5e24bc47984928df368d7802eabc0ff03efe2ba816a98ff27352eaf219c99c58da7d42d94c8985083605bc9474717f9d6e2dab0600eaf9dfe6c4802039ae01def90b47c8dd11f7530d49008e53595d0f0ba1c9700d6bb7ded357d1ea1e005c1d60045dec5f68c021ae1853f1651fe19ebd313cf269313fd791f50626e68b5e02adae8ee32b226f39bb49c35de43feb46dbbccb93fcd891dd15f073c0774ec35db8e67d5b7cdc12e91a8fbd862dee5d552a7eae492066d8bb5abc5dc91b48b9c22747d3d19308ff6dbfe103f4c543ecd62cb6917ae012a24df5b1efb1c65f24521b581c8448d33b236b6b9cd96b4b57f2cb77a5e089ea44398b0c5adc2b6cb8289d0fb1ad8e1bb3c2adf190d08eaa8fe2c80fa9c6694e97ca8f7236c6f13b1c1c77a1ceb9c9cfe28ddca2709d6e859f47c445f9de6bffc2811b3ddb814b84078cb399434b885f69d8345b93445843885ec813413731463d88cdf94e6fa3498e5abb30769cf3169f07814190f4588624a0afb4cd7b918b6026c8d2208fc43c7bed36d1e015f2355599f7aae4d5bbe3efefe3e456236e0aa26d9b35dcd64785a67f54e00eb7120c6270e426f46ae63f29b4c4a1218a9022cbfaa3a5211004c32b20d3314a9951cf7bb8d2363f4c79ea9d6f6a6d9231c6761102218040ffd6683dd1c1c88895e808389eee3667dad3ab9e90345471091bdd57de98e6507f93956e180a371320ec009e20dc0fc6a754e5b10f53878842ecebc7b101ff1aa1a02f653c8ed16a4ce6d921c2be9b51451ab45bf5a08a4374c30aa8fe7d6c67d095dae32485823998896c83ed2f5fb0f1dd2524d6beda6c5ac34846349de81461cef9efe673846ad9706a257406460c392ba339bd48e6e89d367319026a6c43babde4ef0f1de29e1a052693a63c857694f143d9ea0ad1e7f100fc154c5e87db1e73cdc2e8fb3bad2335556dbfb69bb4303f9484a2112e500c12c9db45d8b601127b425c89b9228d80f350546a030796863ff661e8620023a3da81a70dbdd85d25c7d7ed4b1de940cd6425afcc4bf4de353fb1bf099e8d5c857e79d54e9f51f6df1997094776a1affdd53ec6625e566c7e5de0ea9896a8803387b4cbf8ed29c8d1f01ea7d85727591b4bec49879215f3eff58cf581e3205c4a6f89272784ae5d27a44f16774dbd0e9c580e2e145a0a35d31bedddbeac2b72b382dda61ee97a2bec5e854dc1d66077ea76871af4363eb8a30c5edcb7e62d4ad4281824a4e63d0d0d6447cfa16f1790a25d2900e5a4daf9a2405d2ca34517c0fa09d7b7aee40806b22908c09d734e2d60507ac449a7f1dc2351fc1c9b0c3c62de6972ee2ba9050b6779bdff3fd297bb5322b1d15c8769aa59a89fe30c4e86ae2f0c53871d4c33876ac2abd398ca522615e9301baeb892ae1909b7c7d12f640caed806934af228db15bad63103f9ad347e81e0fac97593ccdd1e334bddf8a83c402091297a177f7671418911bdc9d141d203037d9e3f1c6642bc8d8e1245f9592f815cfe7b07e305da48236eb74a7bc634429828056dec7920c332df4adbceb62a79afdcc70aba79c9688a05e7f5bf5c5ec4110e721eb02180c21f9491496eb364d63e481cf340e068c2618b6b89506a21ad49dad340478217b1c03d603ba28c53ad06177e521cab8f8d3381b2357ea05a668db4d6fea509e3e75ddf7f67ef98e0a896af6231bc53ab2d41e2901f7715e3388ee6e461b54e271aa37b4826bb24f1c64bb43bb8db14583e879ef0fedc90a3559009c3a2c2d878aeac85ee7aa2432701fe8c7a2683b121d6dca0b31ccc97420435b659e6b6590aba3f78522259b957485d26c37f76a6382f6abcf4f086292fa0750b3c71ae05a677a37183cdfd851c63ba012b769c422e1aa9c89bfb86b6bd5531293a6fe618359bf73cfd44a6f134be27e6c76754cb82b7dc8a55ec7bbc9b6940123b1d7728d7ba43229c9075e2e4139019fb9bd782119f79f7ebc8a279ff412fc5da22e720d5f5c7e37e8bd5aac9bac4716f819d6f2656c8477b2d3a4ed451db2a617887efc77d5ae22ddda83223380c9cae511a815869251fb5efefda0f77b39ae5a0ea6f6ffa09f9c8bd5a4b3e0b6d33cd216eb2a26eda54ea5fb76d821ad7216916b28d54b56b2ad408bfc69a7b1d4eedcbb974f1717f3a092c98029391d648247bf2b7132df367bcff7fab00b4e2516f5ee21dd2c8a97f5ae9ddacdc1929b9be3d19c05ec802770b8b9ea535733792576ff918d8525b4c3bd5e4036e4c8f58c9ce14a55be5e27af80ff8359ec3f88c2b633afbc30bccfb269a89257315a8f15c5b3431d9c603aa730e18cbed3c92ba29ba93f87a50cc00ec7dd257f5e7812e4917f21a4eaf1d8c3dd", 0x1000}], 0x3}, 0x41) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x4, 0x3a, 'batadv_slave_0\x00', 0x3a, '/dev/kvm\x00', 0x3a, './file0', 0x3a, [0x50]}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd29, 0x25df5bfa, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0x9, 0x3}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r9 = socket$alg(0x26, 0x5, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c0fbe88646630ba06000000", 0xc) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000680)="eae7003600f3dbcf2eadbaf80c66b828e4f68166efbafc0cb000ee66b8000000000f23c00f21f86635010007000f23f8b817008ed8ba4100ec36662e67660fc7b3000000000f01d1b866008ed8", 0x4d}], 0x1, 0x54, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 7m37.334280623s ago: executing program 0 (id=652): socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000240)="a3fc12437d", 0x5) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000001b00)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="0078354e0058f6000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000004c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x3) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x18) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x10000, 0x18482) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000040)) openat$procfs(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x4000}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f67003000028006000c400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = syz_usb_connect$uac1(0x0, 0xd9, &(0x7f0000000fc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x414d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x8, 0x0, 0xde, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x37, 0x4a}, [@mixer_unit={0x5, 0x24, 0x4, 0x6, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x302, 0x5, 0x6, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x1, 0x3, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x403, 0x5, 0x7, 0x3, 0xf8, 0x9}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x4, 0x5, [0x1, 0x2, 0x2, 0x4, 0x2], 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x2, 0x2, 0x3ff, 0x2, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xe, 0x2, 0x7, 0x9, "055970ba"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xffff, 0x7, 0x8, '\v'}, @as_header={0x7, 0x24, 0x1, 0x3, 0xbf, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x1, 0x7a, {0x7, 0x25, 0x1, 0xc, 0xf, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x4, 0x5, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x7, 0xa4, {0x7, 0x25, 0x1, 0x8, 0x94, 0x2}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0x3, 0x3f, 0x5, 0x10}, 0xa1, &(0x7f0000000400)={0x5, 0xf, 0xa1, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0xa5, 0xf00, 0x3, [0x7fbf00]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0x9, 0xa}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x2, 0x6e, 0xe, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x17, 0xe, 0xf, 0x1}, @generic={0x70, 0x10, 0x4, "aa9c1b7c6db3326dec319056071458f13e29c5f173783a81232d695cfb88328cc867eadc0cdc057daaf2e7b02ddb80e01ce269900ae9f9a5eb3405c143c8004fd901c12c98f477bb324b5c8cb5f2d072f0a8cde12725386f43995472822f6a41821550f13598d201f68276973b"}]}, 0x4, [{0x2f, &(0x7f0000000540)=@string={0x2f, 0x3, "849b19ca126e2c73514c93842b6d494f303f44cdcac31f93044b1a2eb4c53c4a3806f3eb3140eed99554551209"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x71, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x401}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000000800)={0x14, &(0x7f0000000b40)={0x0, 0x22, 0xea, {0xea, 0xd, "8410bc9dfd950c20017cd6f5d660deeb377610b9618fbeffa3f9fb3299ed930c9f3e3606677b3e115bcea03a8c6dff44d5656f5bc2d0e40a51a879a97b38cc1c3758e157315292755013d61cd7356685f7d99a61a8cd12b16debfb61a9abc8488ca200481b9565a9bb2dc32841b0a0ac9886b67f183d12eafe8e75690b2ec69f5c64e0e4be8285b99d58442e53e66e19ebf94672d8aa5f1d92deab3a2cb276da0b8bc431175219367ced050cc5d9baf8332bcd89b5f241b5f91ee9ffcc9f6b7b7f678275cebf992a4ff31087cdc62f694e31cd7f3eaa3c65f0525b304a469f5916299a8e1deace3c"}}, &(0x7f0000000d80)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "4638b3e11abbc172eef711d55fbf84d4767d58cc8ba84607625711363b773687c3d359017750f87dcea905ba42eb4289d135b616b0bb73ec927934d199478e9d8d24c05d5e1fa7fd6cb781c82f7fd50473cc93b2133ac83025c2f56e40345f000b8d7c88e41ccd385b6f2c4179b013fe762945084bfdaa5a141278324cfe92e347b7a50d1021c34767f091bf99901451d412d29477498a7d9e6837fb77ff8b3cfa3ed179d70c052f4bca3dc569bffa17ba86cc7462496e2e85b28aff8b7461fb4bc1504a744935482d82c99d8dbe3931cb7688d2d070e566f03e68bba835a6d38dceb9a2c4fa61861b2a14495f59860de10766b2ea69"}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000c40)={0x20, 0xf, 0x100, "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"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000080)=ANY=[@ANYBLOB="206103000000051e68"], &(0x7f0000000700)={0x20, 0x82, 0x3, '\x00\x00\x00'}, &(0x7f0000000a40)={0x20, 0x83, 0x1, 'C'}, &(0x7f0000000980)={0x20, 0x84, 0x4, "721c7e80"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "eb3877"}}) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @mcast1, 0x5}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000094c0)=[{{&(0x7f0000000740)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x4048cd1) 7m33.866603787s ago: executing program 0 (id=662): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 7m32.775017606s ago: executing program 0 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8947, &(0x7f0000000a00)="47ab46f00c95fef53a") mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fa0e0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000028500000095000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffc, &(0x7f0000000880)=""/4092}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000200)={'pimreg\x00', {0x2, 0x0, @broadcast}}) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, 0x0, &(0x7f0000000140)) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000002e40)=ANY=[@ANYBLOB="01000000", @ANYRES16, @ANYBLOB="010025bd7000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x28008000}, 0x8000) 7m17.640492318s ago: executing program 32 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8947, &(0x7f0000000a00)="47ab46f00c95fef53a") mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fa0e0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000028500000095000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffc, &(0x7f0000000880)=""/4092}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000200)={'pimreg\x00', {0x2, 0x0, @broadcast}}) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, 0x0, &(0x7f0000000140)) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000002e40)=ANY=[@ANYBLOB="01000000", @ANYRES16, @ANYBLOB="010025bd7000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x28008000}, 0x8000) 4m49.985932724s ago: executing program 2 (id=1136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 4m46.510510368s ago: executing program 2 (id=1138): r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) userfaultfd(0x80001) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000feffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b000000"], 0x48) mprotect(&(0x7f00004a3000/0x2000)=nil, 0x2000, 0x2000006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x4800) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x4808) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$XFS_IOC_FSGEOMETRY(r2, 0x8100587e, &(0x7f00000001c0)) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000100)=@req={0x2, 0x4, 0x1, 0x1}, 0x10) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x46}, 0x25) 4m43.803075556s ago: executing program 2 (id=1141): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05004a808237006330680085100000020a0000850000002300000095000d000000000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r0 = io_uring_setup(0x2f93, &(0x7f00000003c0)={0x0, 0x1, 0x1, 0x3}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000005c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @opaque="9bd7563b"}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c94012000e0004ea15100a000b000900060007007f00"], 0x17) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000000040), &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) 4m43.209003741s ago: executing program 2 (id=1144): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) 4m42.968250643s ago: executing program 2 (id=1146): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/module/ueagle_atm/parameters/sync_wait\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0', 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10202, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, r1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x50, 0xffffffffffffffff, 0xc974d000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0xffffffffffffffee, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4m42.845637659s ago: executing program 2 (id=1149): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x25409, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x40000, &(0x7f0000000140)=[{&(0x7f0000000ec0)=""/246, 0xf6}, {&(0x7f0000000000)=""/166, 0xa6}, {&(0x7f0000000fc0)=""/4108, 0x100c}], 0x3}, 0xfff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x800003}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x40000020, 0x0) 4m26.802218824s ago: executing program 33 (id=1149): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x25409, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x40000, &(0x7f0000000140)=[{&(0x7f0000000ec0)=""/246, 0xf6}, {&(0x7f0000000000)=""/166, 0xa6}, {&(0x7f0000000fc0)=""/4108, 0x100c}], 0x3}, 0xfff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x800003}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x40000020, 0x0) 2m49.788403562s ago: executing program 4 (id=1419): epoll_create1(0x0) r0 = syz_io_uring_setup(0x719a, &(0x7f0000000400)={0x0, 0xcb6e, 0x10000, 0x1, 0x3bb}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000040)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x30, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x4d, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x9) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r7, 0x0, 0x4004) sched_getaffinity(r7, 0x8, &(0x7f0000000100)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0xe309b000) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r11, 0x289e0cb5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) 2m48.546205708s ago: executing program 4 (id=1421): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, &(0x7f0000019080)='net/ptype\x00') r1 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42142, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = dup3(r3, r2, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) pread64(r0, &(0x7f0000000080)=""/102350, 0x18fce, 0x200) preadv(r0, &(0x7f0000019280)=[{&(0x7f00000190c0)=""/24, 0x18}], 0x1, 0xa3, 0x0) syz_emit_ethernet(0x34d, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x317, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/54}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000191c0)={@fallback=r4, 0x1, 0x9f5ef3b0f79a04b1, 0x3ff, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000019100)=[0x0], &(0x7f0000019140)=[0x0], &(0x7f0000019180)=[0x0, 0x0, 0x0]}, 0x40) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x111040, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000054c0), 0x2000, 0x0) fsetxattr$smack_xattr_label(r5, &(0x7f00000060c0)='security.SMACK64\x00', &(0x7f0000019200)=ANY=[@ANYBLOB="2900cbce2dff2f9e4d37810aea3ccb7432b5149baa"], 0x2, 0x2) 2m47.121594751s ago: executing program 4 (id=1424): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m45.276954157s ago: executing program 4 (id=1430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x4000, 0xfffffff9, 0xfffffffc, 0x5, 0x0, [{0x9, 0x0, 0x2, '\x00', 0x8d}, {0x6, 0x1, 0x3, '\x00', 0x2}, {0x0, 0x2, 0x40, '\x00', 0x3}, {0x7, 0x4, 0x10, '\x00', 0x5}, {0x4, 0x8, 0x2, '\x00', 0x5}, {0xb3, 0x6, 0x4, '\x00', 0xf1}, {0xcb, 0x9, 0xda, '\x00', 0x6}, {0xc, 0x3, 0x80}, {0xb, 0x7, 0xb4, '\x00', 0x7f}, {0x3, 0x9, 0x3, '\x00', 0xb}, {0x8, 0x5, 0x1, '\x00', 0x8}, {0x10, 0x6, 0x3, '\x00', 0x2}, {0xdf, 0xdc, 0x0, '\x00', 0x9e}, {0x4, 0x4, 0x2, '\x00', 0x1}, {0x81, 0x2, 0x3, '\x00', 0x7f}, {0x2, 0x3, 0x2, '\x00', 0x40}, {0x2, 0x63, 0x7, '\x00', 0x4}, {0xe, 0x2, 0xc, '\x00', 0x3}, {0x6, 0x1, 0xd, '\x00', 0x2}, {0xc, 0x5e, 0x2, '\x00', 0x5}, {0x0, 0xb2, 0x1, '\x00', 0x8}, {0x9, 0x12, 0x7, '\x00', 0x4}, {0x6, 0x3a, 0x7e, '\x00', 0x8}, {0x4, 0x4, 0x2, '\x00', 0x8}]}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x4, 0x8, 0x800000004, 0xe, 0x9], 0x7000, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) 2m41.168436186s ago: executing program 4 (id=1434): futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x1f000000) r0 = socket(0x10, 0x3, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff908500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 2m40.904131107s ago: executing program 4 (id=1436): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000740)=""/85, 0x55}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000450)='-2', 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000470), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='tcp 2049\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x1000080, &(0x7f0000000800)=ANY=[@ANYBLOB='mpol=interleave,mpol=lgc']) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000000100)={0x0, "b7195b37341eef92ed278097a1044a6240c830dfe7f95da56a49234b69b443fc", 0x2, 0x800, 0x3, 0x65, 0x4, 0x3, 0xf0, 0x6}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) 2m25.655883013s ago: executing program 34 (id=1436): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000740)=""/85, 0x55}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000450)='-2', 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000470), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='tcp 2049\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x1000080, &(0x7f0000000800)=ANY=[@ANYBLOB='mpol=interleave,mpol=lgc']) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000000100)={0x0, "b7195b37341eef92ed278097a1044a6240c830dfe7f95da56a49234b69b443fc", 0x2, 0x800, 0x3, 0x65, 0x4, 0x3, 0xf0, 0x6}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) 3.642267614s ago: executing program 3 (id=2112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x2400, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000628000480240001800b000100657874686472000014000280080006400000000208000740000000150900010073797a30000000000900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x10010}, 0x0) 3.333581296s ago: executing program 5 (id=2114): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fff) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8040, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000000c0)={0xf83, 0xffffffffffffffff, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r3 = socket(0x2, 0x80002, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000128c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000012880)={0x0, 0x74d8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000051) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b1600000000000000000200000828000480240001800b0001007470726f78790000140002"], 0x7c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000400)={'pim6reg\x00', {0x2, 0x4e23, @remote}}) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) 3.29162076s ago: executing program 3 (id=2115): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) r1 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "3c0c89", 0x8, 0x2b, 0x1, @private2, @local, {[@hopopts={0xff}]}}}}}, 0x0) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x8f2}, {{0x0, 0x0, 0x0}, 0x10}], 0x2, 0x62, 0x0) read$snddsp(r0, 0x0, 0x0) 3.060099277s ago: executing program 5 (id=2116): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, &(0x7f0000019080)='net/ptype\x00') r1 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42142, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = dup3(r3, r2, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) pread64(r0, &(0x7f0000000080)=""/102350, 0x18fce, 0x200) preadv(r0, &(0x7f0000019280)=[{&(0x7f00000190c0)=""/24, 0x18}], 0x1, 0xa3, 0x0) syz_emit_ethernet(0x289, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x253, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000191c0)={@fallback=r4, 0x1, 0x9f5ef3b0f79a04b1, 0x3ff, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000019100)=[0x0], &(0x7f0000019140)=[0x0], &(0x7f0000019180)=[0x0, 0x0, 0x0]}, 0x40) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x111040, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000054c0), 0x2000, 0x0) fsetxattr$smack_xattr_label(r5, &(0x7f00000060c0)='security.SMACK64\x00', &(0x7f0000019200)=ANY=[@ANYBLOB="2900cbce2dff2f9e4d37810aea3ccb7432b5149baa"], 0x2, 0x2) 3.059946319s ago: executing program 3 (id=2117): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r0}, 0xc) 2.89336819s ago: executing program 5 (id=2118): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a80000001000ffff26bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04008000128009000100766c616e0000000070000280060001000400000004000380580004800c0001000a004000060000000c00010081000000080000000c00010000000000ffffffff0c00010004000000050000000c000100fbffffffff7f00000c00010003000000050000000c00010006000000000000000600050088a8000008000500", @ANYRES32=r1], 0xa8}}, 0x8000002) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f00000002c0)={0x0, 0x0}) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a80000001000ffff26bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04008000128009000100766c616e0000000070000280060001000400000004000380580004800c0001000a004000060000000c00010081000000080000000c00010000000000ffffffff0c00010004000000050000000c000100fbffffffff7f00000c00010003000000050000000c00010006000000000000000600050088a8000008000500", @ANYRES32=r1], 0xa8}}, 0x8000002) (async) 2.858763797s ago: executing program 3 (id=2119): r0 = socket$tipc(0x1e, 0x5, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x10) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000040)='\x00', 0x4080, &(0x7f00000000c0)={@align=0x3, {0x8, 0x3, 0x3, 0x7}}, 0xf9, &(0x7f0000000100)={@_ha_fsid}, &(0x7f00000001c0)=0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000240)={{0x3, 0x59}, 'port1\x00', 0x6, 0x100018, 0x2, 0x8e8f, 0x4, 0x0, 0x0, 0x0, 0x1, 0xd}) (async) bind$tipc(r1, 0x0, 0x0) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) listen(r5, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x4, 0x0, 0x4000, 0x2, 0x1}, 0x30, 0x1) 2.515617155s ago: executing program 3 (id=2121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0x1, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x100, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xf}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000300000008001b000000000008000800290041010000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010027bd7000bf"], 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x20048410) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x40}}, 0x8084) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) 1.059109771s ago: executing program 1 (id=2123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/failslab/verbose\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x50, r1, 0xb49ab000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x880) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000602", @ANYRES16=r5, @ANYBLOB="ffff2cbd700100800000340000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x20000000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x288, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfc59}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xfffff52b}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x8686}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x100}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x200}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xb}, {0x6, 0x16, 0x6d9}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0xd726}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x59}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0xff31}, {0x8, 0xb, 0x3}}]}, 0x288}, 0x1, 0x0, 0x0, 0x40000000}, 0x8014) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x4040895}, 0x4) 892.4225ms ago: executing program 1 (id=2124): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) read$snddsp(r0, 0x0, 0x0) 874.05945ms ago: executing program 1 (id=2125): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000940)="c1188e9900df71c1ca3bc2522d5c", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a518ae46463208004d"], 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x4, 0x1, {0xa, 0x4e20, 0xbdf9, @empty, 0x2194}}}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$inet6(r2, &(0x7f0000000140), &(0x7f0000000180)=0x1c) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10004) 705.340511ms ago: executing program 1 (id=2126): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, &(0x7f0000019080)='net/ptype\x00') r1 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42142, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = dup3(r3, r2, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) pread64(r0, &(0x7f0000000080)=""/102350, 0x18fce, 0x200) preadv(r0, &(0x7f0000019280)=[{&(0x7f00000190c0)=""/24, 0x18}], 0x1, 0xa3, 0x0) syz_emit_ethernet(0x28b, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x255, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000191c0)={@fallback=r4, 0x1, 0x9f5ef3b0f79a04b1, 0x3ff, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000019100)=[0x0], &(0x7f0000019140)=[0x0], &(0x7f0000019180)=[0x0, 0x0, 0x0]}, 0x40) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x111040, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000054c0), 0x2000, 0x0) fsetxattr$smack_xattr_label(r5, &(0x7f00000060c0)='security.SMACK64\x00', &(0x7f0000019200)=ANY=[@ANYBLOB="2900cbce2dff2f9e4d37810aea3ccb7432b5149baa"], 0x2, 0x2) 554.406633ms ago: executing program 1 (id=2127): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r0}, 0xc) 445.225621ms ago: executing program 1 (id=2128): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x7800, 0x0, 0x80000d6, {{0xa, 0x4, 0x1, 0x23, 0x28, 0x66, 0x0, 0xbc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x14, 0x1a, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x4ad9}, {@private=0xa010102, 0x40}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070700000000000000000000000000000000140003006970766c616e300000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206030000000000000000000a0000000d000300686173683a6e657400000000050001000700000005000500020000000900020073797a3000000000050004000000000014000780080008400000007808000640"], 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) read$FUSE(r4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000004c40)=[{0x0}, {&(0x7f0000000740)}, {&(0x7f0000002840)="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", 0x1000}], 0x3}, 0x41) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x4, 0x3a, 'batadv_slave_0\x00', 0x3a, '/dev/kvm\x00', 0x3a, './file0', 0x3a, [0x50]}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd29, 0x25df5bfa, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0x9, 0x3}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000600)="0d4842ef613cd07219f1c61a888039b1a204cbea852fb54a519422dad98a042e29a885cac4fae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55cf6db48e8491fc10e0df8d473be2cce014df8721b92ed584920271", 0x5f}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r9 = socket$alg(0x26, 0x5, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c0fbe88646630ba06000000", 0xc) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000680)="eae7003600f3dbcf2eadbaf80c66b828e4f68166efbafc0cb000ee66b8000000000f23c00f21f86635010007000f23f8b817008ed8ba4100ec36662e67660fc7b3000000000f01d1b866008ed8", 0x4d}], 0x1, 0x54, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 443.297319ms ago: executing program 3 (id=2129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172", 0x8}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 5) 235.622176ms ago: executing program 5 (id=2130): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0x7400000, 0x7fffffff, 0x80000001, 0x5, 0x7f, "6c3312e6703b3e3327cdbc4b9730d70dc0aba0", 0xb, 0x802}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000b4a69595801fde12000d020000000000"], 0x0, 0x26, 0x0, 0xa, 0x32e}, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@delchain={0x34, 0x65, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0xa, 0x6}, {0xe, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0xcd}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44005}, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000540)=@assoc_value, &(0x7f0000000580)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x410c068, &(0x7f0000000300)='/dev/ubi_ctrl\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0xd) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = inotify_init() ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000400)) inotify_add_watch(r6, &(0x7f0000000340)='.\x00', 0xa50003d1) fcntl$setstatus(r2, 0x4, 0x2c00) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40186f40, &(0x7f0000000180)={0xffffffff, 0x0, 0x3f, 0x1, '\x00', 0x10003}) 101.928403ms ago: executing program 5 (id=2131): syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r0, 0x0, &(0x7f00000002c0)) 0s ago: executing program 5 (id=2132): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000a40)=[{0x6, '\x00', @st={0x4, [{0x3, @uvalue=0x4}, {0x1, @svalue=0x77}, {0x2, @svalue=0x3}, {0x2, @svalue=0x7}]}, 0x80}, {0x1a, '\x00', @data=0x9, 0x3}, {0x1b, '\x00', @data=0x7fff, 0x1}]}) kernel console output (not intermixed with test programs): 71][T11397] CPU: 1 UID: 0 PID: 11397 Comm: syz.5.1615 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 654.209802][T11397] Tainted: [L]=SOFTLOCKUP [ 654.209810][T11397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.209822][T11397] Call Trace: [ 654.209831][T11397] [ 654.209841][T11397] dump_stack_lvl+0xe8/0x150 [ 654.209889][T11397] should_fail_ex+0x467/0x600 [ 654.209930][T11397] should_failslab+0xa8/0x100 [ 654.209959][T11397] __kmalloc_node_noprof+0x107/0x7d0 [ 654.209984][T11397] ? __get_vm_area_node+0x1f2/0x300 [ 654.210016][T11397] ? __vmalloc_node_range_noprof+0x5d9/0x1730 [ 654.210038][T11397] ? __vmalloc_node_range_noprof+0x5d9/0x1730 [ 654.210069][T11397] __vmalloc_node_range_noprof+0x5d9/0x1730 [ 654.210100][T11397] ? is_bpf_text_address+0x26/0x2b0 [ 654.210148][T11397] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 654.210170][T11397] ? is_bpf_text_address+0x26/0x2b0 [ 654.210198][T11397] ? kernel_text_address+0xa5/0xe0 [ 654.210230][T11397] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 654.210252][T11397] __vmalloc_noprof+0xd2/0x120 [ 654.210274][T11397] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 654.210302][T11397] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 654.210325][T11397] ? bpf_prog_alloc+0x2a/0x1a0 [ 654.210350][T11397] bpf_prog_alloc+0x3c/0x1a0 [ 654.210375][T11397] bpf_prog_load+0x7f8/0x1c00 [ 654.210413][T11397] ? __pfx_bpf_prog_load+0x10/0x10 [ 654.210463][T11397] __sys_bpf+0xd0d/0xd90 [ 654.210497][T11397] ? __pfx___sys_bpf+0x10/0x10 [ 654.210524][T11397] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 654.210560][T11397] ? rt_mutex_slowunlock+0x219/0x460 [ 654.210605][T11397] ? ksys_write+0x248/0x270 [ 654.210636][T11397] ? __pfx_ksys_write+0x10/0x10 [ 654.210669][T11397] __x64_sys_bpf+0xba/0xd0 [ 654.210701][T11397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.210725][T11397] do_syscall_64+0x174/0x580 [ 654.210751][T11397] ? trace_irq_disable+0x3b/0x140 [ 654.210774][T11397] ? clear_bhb_loop+0x40/0x90 [ 654.210801][T11397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.210823][T11397] RIP: 0033:0x7fa1d0b5e019 [ 654.210844][T11397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.210871][T11397] RSP: 002b:00007fa1cedb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 654.210896][T11397] RAX: ffffffffffffffda RBX: 00007fa1d0de5fa0 RCX: 00007fa1d0b5e019 [ 654.210913][T11397] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 654.210928][T11397] RBP: 00007fa1cedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 654.210943][T11397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.210961][T11397] R13: 00007fa1d0de6038 R14: 00007fa1d0de5fa0 R15: 00007ffe01694008 [ 654.210997][T11397] [ 654.212686][T11397] syz.5.1615: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 654.212763][T11397] CPU: 1 UID: 0 PID: 11397 Comm: syz.5.1615 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 654.212793][T11397] Tainted: [L]=SOFTLOCKUP [ 654.212802][T11397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.212814][T11397] Call Trace: [ 654.212823][T11397] [ 654.212833][T11397] dump_stack_lvl+0xe8/0x150 [ 654.212877][T11397] warn_alloc+0x24c/0x270 [ 654.212909][T11397] ? __pfx_warn_alloc+0x10/0x10 [ 654.212940][T11397] ? __kmalloc_node_noprof+0x5a2/0x7d0 [ 654.212964][T11397] ? __get_vm_area_node+0x1f2/0x300 [ 654.212996][T11397] ? __vmalloc_node_range_noprof+0x5d9/0x1730 [ 654.213018][T11397] ? __vmalloc_node_range_noprof+0x5d9/0x1730 [ 654.213049][T11397] __vmalloc_node_range_noprof+0xa81/0x1730 [ 654.213081][T11397] ? is_bpf_text_address+0x26/0x2b0 [ 654.213127][T11397] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 654.213149][T11397] ? is_bpf_text_address+0x26/0x2b0 [ 654.213178][T11397] ? kernel_text_address+0xa5/0xe0 [ 654.213208][T11397] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 654.213232][T11397] __vmalloc_noprof+0xd2/0x120 [ 654.213254][T11397] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 654.213282][T11397] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 654.213305][T11397] ? bpf_prog_alloc+0x2a/0x1a0 [ 654.213331][T11397] bpf_prog_alloc+0x3c/0x1a0 [ 654.213358][T11397] bpf_prog_load+0x7f8/0x1c00 [ 654.213395][T11397] ? __pfx_bpf_prog_load+0x10/0x10 [ 654.213452][T11397] __sys_bpf+0xd0d/0xd90 [ 654.213485][T11397] ? __pfx___sys_bpf+0x10/0x10 [ 654.213512][T11397] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 654.213546][T11397] ? rt_mutex_slowunlock+0x219/0x460 [ 654.213591][T11397] ? ksys_write+0x248/0x270 [ 654.213622][T11397] ? __pfx_ksys_write+0x10/0x10 [ 654.213655][T11397] __x64_sys_bpf+0xba/0xd0 [ 654.213688][T11397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.213711][T11397] do_syscall_64+0x174/0x580 [ 654.213739][T11397] ? trace_irq_disable+0x3b/0x140 [ 654.213762][T11397] ? clear_bhb_loop+0x40/0x90 [ 654.213788][T11397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.213810][T11397] RIP: 0033:0x7fa1d0b5e019 [ 654.213830][T11397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.213850][T11397] RSP: 002b:00007fa1cedb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 654.213879][T11397] RAX: ffffffffffffffda RBX: 00007fa1d0de5fa0 RCX: 00007fa1d0b5e019 [ 654.213895][T11397] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 654.213909][T11397] RBP: 00007fa1cedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 654.213922][T11397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.213936][T11397] R13: 00007fa1d0de6038 R14: 00007fa1d0de5fa0 R15: 00007ffe01694008 [ 654.213969][T11397] [ 654.215678][T11397] Mem-Info: [ 654.215691][T11397] active_anon:190 inactive_anon:22694 isolated_anon:0 [ 654.215691][T11397] active_file:26408 inactive_file:37536 isolated_file:0 [ 654.215691][T11397] unevictable:768 dirty:81 writeback:0 [ 654.215691][T11397] slab_reclaimable:12698 slab_unreclaimable:106065 [ 654.215691][T11397] mapped:39987 shmem:17716 pagetables:1449 [ 654.215691][T11397] sec_pagetables:0 bounce:0 [ 654.215691][T11397] kernel_misc_reclaimable:0 [ 654.215691][T11397] free:1260680 free_pcp:8240 free_cma:0 [ 654.215752][T11397] Node 0 active_anon:760kB inactive_anon:90776kB active_file:105292kB inactive_file:150024kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159720kB dirty:324kB writeback:0kB shmem:69328kB kernel_stack:13532kB pagetables:5648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 654.217786][T11397] Node 1 active_anon:0kB inactive_anon:0kB active_file:340kB inactive_file:120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:228kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 654.217845][T11397] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 654.217920][T11397] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 654.217959][T11397] Node 0 DMA32 free:1098356kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:760kB inactive_anon:90776kB active_file:105292kB inactive_file:150024kB unevictable:1536kB writepending:324kB zspages:0kB present:3129332kB managed:2560556kB mlocked:0kB bounce:0kB free_pcp:32856kB local_pcp:8364kB free_cma:0kB [ 654.218027][T11397] lowmem_reserve[]: 0 0 1 1 1 [ 654.218065][T11397] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 654.218128][T11397] lowmem_reserve[]: 0 0 0 0 0 [ 654.218164][T11397] Node 1 Normal free:3929004kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:340kB inactive_file:120kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 654.218244][T11397] lowmem_reserve[]: 0 0 0 0 0 [ 654.218280][T11397] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 654.218421][T11397] Node 0 DMA32: 316*4kB (UME) 161*8kB (UME) 436*16kB (UM) 230*32kB (M) 114*64kB (M) 198*128kB (UM) 63*256kB (ME) 13*512kB (UM) 4*1024kB (UME) 7*2048kB (M) 246*4096kB (UM) = 1098360kB [ 654.218596][T11397] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 654.218705][T11397] Node 1 Normal: 3*4kB (UM) 0*8kB 4*16kB (U) 9*32kB (UM) 7*64kB (UM) 5*128kB (UM) 4*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 2*2048kB (M) 956*4096kB (UM) = 3929004kB [ 654.218875][T11397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 654.218894][T11397] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 654.218912][T11397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 654.218929][T11397] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 654.218947][T11397] 81656 total pagecache pages [ 654.218957][T11397] 0 pages in swap cache [ 654.218965][T11397] Free swap = 124996kB [ 654.218974][T11397] Total swap = 124996kB [ 654.218982][T11397] 2097051 pages RAM [ 654.218991][T11397] 0 pages HighMem/MovableOnly [ 654.218999][T11397] 424834 pages reserved [ 654.219007][T11397] 0 pages cma reserved [ 654.853183][T11413] FAULT_INJECTION: forcing a failure. [ 654.853183][T11413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.853225][T11413] CPU: 1 UID: 0 PID: 11413 Comm: syz.5.1620 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 654.853252][T11413] Tainted: [L]=SOFTLOCKUP [ 654.853260][T11413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.853271][T11413] Call Trace: [ 654.853280][T11413] [ 654.853288][T11413] dump_stack_lvl+0xe8/0x150 [ 654.853323][T11413] should_fail_ex+0x467/0x600 [ 654.853366][T11413] _copy_from_user+0x2d/0xb0 [ 654.853390][T11413] dev_ethtool+0xdb/0x29c0 [ 654.853482][T11413] ? __lock_acquire+0x683/0x2ce0 [ 654.853519][T11413] ? __pfx_dev_ethtool+0x10/0x10 [ 654.853539][T11413] ? kasan_quarantine_put+0xbb/0x1f0 [ 654.853576][T11413] ? dev_load+0x21/0x1f0 [ 654.853629][T11413] ? dev_load+0x21/0x1f0 [ 654.853652][T11413] ? dev_load+0x21/0x1f0 [ 654.853674][T11413] dev_ioctl+0x392/0x1150 [ 654.853699][T11413] sock_do_ioctl+0x23e/0x320 [ 654.853731][T11413] ? __pfx_sock_do_ioctl+0x10/0x10 [ 654.853756][T11413] ? hook_file_ioctl+0x1f3/0x600 [ 654.853788][T11413] ? __asan_memset+0x22/0x50 [ 654.853815][T11413] ? smack_file_ioctl+0x263/0x360 [ 654.853841][T11413] sock_ioctl+0x57d/0x7f0 [ 654.853871][T11413] ? __pfx_sock_ioctl+0x10/0x10 [ 654.853897][T11413] ? __fget_files+0x2a/0x420 [ 654.853917][T11413] ? __fget_files+0x3a8/0x420 [ 654.853936][T11413] ? __fget_files+0x2a/0x420 [ 654.853959][T11413] ? bpf_lsm_file_ioctl+0x9/0x20 [ 654.853987][T11413] ? __pfx_sock_ioctl+0x10/0x10 [ 654.854013][T11413] __se_sys_ioctl+0xff/0x170 [ 654.854038][T11413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.854059][T11413] do_syscall_64+0x174/0x580 [ 654.854084][T11413] ? trace_irq_disable+0x3b/0x140 [ 654.854103][T11413] ? clear_bhb_loop+0x40/0x90 [ 654.854126][T11413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.854145][T11413] RIP: 0033:0x7fa1d0b5e019 [ 654.854165][T11413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.854181][T11413] RSP: 002b:00007fa1cedb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.854202][T11413] RAX: ffffffffffffffda RBX: 00007fa1d0de5fa0 RCX: 00007fa1d0b5e019 [ 654.854217][T11413] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000006 [ 654.854230][T11413] RBP: 00007fa1cedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 654.854243][T11413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.854254][T11413] R13: 00007fa1d0de6038 R14: 00007fa1d0de5fa0 R15: 00007ffe01694008 [ 654.854286][T11413] [ 654.983301][T11378] 8021q: VLANs not supported on ip6_vti0 [ 655.003169][T11382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.019398][T11382] batadv0: entered promiscuous mode [ 655.020318][T11382] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 655.039373][ T5897] usb 2-1: USB disconnect, device number 41 [ 655.294132][T11418] binder: 11417:11418 ioctl 4018620d 0 returned -22 [ 657.631728][T10973] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 657.726201][T10973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 657.770450][T10973] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 658.069689][T10973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 658.150413][T10973] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 658.277639][T10973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 658.584895][T10973] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 659.370809][T10973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 659.731267][T11530] binder: 11529:11530 ioctl c018620b 0 returned -14 [ 662.384923][T10973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.407287][T10962] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 662.530896][T11565] FAULT_INJECTION: forcing a failure. [ 662.530896][T11565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.530972][T11565] CPU: 1 UID: 0 PID: 11565 Comm: syz.1.1660 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 662.531003][T11565] Tainted: [L]=SOFTLOCKUP [ 662.531010][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 662.531022][T11565] Call Trace: [ 662.531032][T11565] [ 662.531042][T11565] dump_stack_lvl+0xe8/0x150 [ 662.531077][T11565] should_fail_ex+0x467/0x600 [ 662.531117][T11565] _copy_from_user+0x2d/0xb0 [ 662.531145][T11565] kstrtouint_from_user+0xd6/0x180 [ 662.531177][T11565] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 662.531199][T11565] ? __lock_acquire+0x683/0x2ce0 [ 662.531242][T11565] proc_fail_nth_write+0x8e/0x210 [ 662.531269][T11565] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 662.531300][T11565] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 662.531322][T11565] vfs_write+0x29f/0xbb0 [ 662.531357][T11565] ? __pfx_vfs_write+0x10/0x10 [ 662.531385][T11565] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 662.531414][T11565] ? lockdep_hardirqs_on+0x7a/0x110 [ 662.531440][T11565] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 662.531467][T11565] ? mutex_lock_nested+0x152/0x1d0 [ 662.531487][T11565] ? fdget_pos+0x252/0x320 [ 662.531520][T11565] ksys_write+0x156/0x270 [ 662.531551][T11565] ? __pfx_ksys_write+0x10/0x10 [ 662.531589][T11565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.531614][T11565] do_syscall_64+0x174/0x580 [ 662.531642][T11565] ? trace_irq_disable+0x3b/0x140 [ 662.531663][T11565] ? clear_bhb_loop+0x40/0x90 [ 662.531690][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.531711][T11565] RIP: 0033:0x7f2fbe6ce84e [ 662.531732][T11565] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 662.531750][T11565] RSP: 002b:00007f2fbc965fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 662.531775][T11565] RAX: ffffffffffffffda RBX: 00007f2fbc9666c0 RCX: 00007f2fbe6ce84e [ 662.531791][T11565] RDX: 0000000000000001 RSI: 00007f2fbc9660a0 RDI: 0000000000000006 [ 662.531806][T11565] RBP: 00007f2fbc966090 R08: 0000000000000000 R09: 0000000000000000 [ 662.531820][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.531833][T11565] R13: 00007f2fbe996038 R14: 00007f2fbe995fa0 R15: 00007ffc08040d58 [ 662.531871][T11565] [ 662.680833][T10962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 662.712709][T10962] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 663.091741][T10962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 663.114297][T10962] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 663.229085][T10962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 663.260028][T10973] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.266747][T10962] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 663.631050][T10962] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 663.658637][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.694926][ T1021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.783826][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.784914][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.525143][T11612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.637476][T10962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.693528][T10962] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.733226][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.733364][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.802946][ T1495] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.855106][ T1495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.365722][T11632] tipc: Enabling of bearer rejected, already enabled [ 669.498341][T10973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.530811][T11682] netlink: 'syz.3.1695': attribute type 10 has an invalid length. [ 669.549386][T11680] FAULT_INJECTION: forcing a failure. [ 669.549386][T11680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.549426][T11680] CPU: 0 UID: 0 PID: 11680 Comm: syz.5.1694 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 669.549456][T11680] Tainted: [L]=SOFTLOCKUP [ 669.549464][T11680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 669.549476][T11680] Call Trace: [ 669.549485][T11680] [ 669.549494][T11680] dump_stack_lvl+0xe8/0x150 [ 669.549532][T11680] should_fail_ex+0x467/0x600 [ 669.549577][T11680] _copy_from_user+0x2d/0xb0 [ 669.549606][T11680] ___sys_sendmsg+0x1c6/0x360 [ 669.549634][T11680] ? __lock_acquire+0x683/0x2ce0 [ 669.549663][T11680] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.549728][T11680] ? __fget_files+0x2a/0x420 [ 669.549752][T11680] ? __fget_files+0x3a8/0x420 [ 669.549786][T11680] __x64_sys_sendmsg+0x1b7/0x290 [ 669.549817][T11680] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 669.549863][T11680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.549885][T11680] do_syscall_64+0x174/0x580 [ 669.549912][T11680] ? trace_irq_disable+0x3b/0x140 [ 669.549933][T11680] ? clear_bhb_loop+0x40/0x90 [ 669.549958][T11680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.549979][T11680] RIP: 0033:0x7fa1d0b5e019 [ 669.550008][T11680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.550027][T11680] RSP: 002b:00007fa1cedb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.550051][T11680] RAX: ffffffffffffffda RBX: 00007fa1d0de5fa0 RCX: 00007fa1d0b5e019 [ 669.550066][T11680] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 669.550080][T11680] RBP: 00007fa1cedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 669.550093][T11680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.550107][T11680] R13: 00007fa1d0de6038 R14: 00007fa1d0de5fa0 R15: 00007ffe01694008 [ 669.550141][T11680] [ 669.970881][T10962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.163832][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1698'. [ 670.176682][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'. [ 670.286949][T11701] netlink: 'syz.3.1698': attribute type 4 has an invalid length. [ 670.286999][T11701] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1698'. [ 671.945877][ T5830] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 672.120601][T10973] veth0_vlan: entered promiscuous mode [ 672.158571][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 959, setting to 64 [ 672.158607][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 672.199437][ T5830] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 672.199468][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.199480][ T5830] usb 4-1: Product: syz [ 672.199489][ T5830] usb 4-1: Manufacturer: syz [ 672.199497][ T5830] usb 4-1: SerialNumber: syz [ 672.245312][ T5830] usb 4-1: config 0 descriptor?? [ 672.251267][T11720] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 672.251403][T11720] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 672.299841][T10973] veth1_vlan: entered promiscuous mode [ 672.457304][T11720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.458563][T11720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.463338][T11720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.466130][T11720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.504615][T11720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.515457][T11720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.529813][T11720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.530519][T11720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.532048][T11720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.532746][T11720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.659981][ T9] usb 4-1: USB disconnect, device number 34 [ 672.920524][T10962] veth0_vlan: entered promiscuous mode [ 672.977766][T10962] veth1_vlan: entered promiscuous mode [ 672.985224][T10973] veth0_macvtap: entered promiscuous mode [ 673.123040][T10973] veth1_macvtap: entered promiscuous mode [ 673.440164][T10973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.482720][T10962] veth0_macvtap: entered promiscuous mode [ 673.503751][T10973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.603555][T10962] veth1_macvtap: entered promiscuous mode [ 674.613216][T10962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.792011][T10962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.261002][T11771] netlink: 'syz.1.1724': attribute type 10 has an invalid length. [ 675.844945][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.844970][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.323341][T11810] netlink: 'syz.3.1739': attribute type 10 has an invalid length. [ 678.457627][T11806] FAULT_INJECTION: forcing a failure. [ 678.457627][T11806] name failslab, interval 1, probability 0, space 0, times 0 [ 678.457703][T11806] CPU: 1 UID: 0 PID: 11806 Comm: syz.5.1737 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 678.457737][T11806] Tainted: [L]=SOFTLOCKUP [ 678.457745][T11806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 678.457758][T11806] Call Trace: [ 678.457768][T11806] [ 678.457778][T11806] dump_stack_lvl+0xe8/0x150 [ 678.457824][T11806] should_fail_ex+0x467/0x600 [ 678.457865][T11806] should_failslab+0xa8/0x100 [ 678.457895][T11806] __kmalloc_cache_noprof+0xa0/0x6b0 [ 678.457920][T11806] ? preempt_schedule_thunk+0x16/0x40 [ 678.458006][T11806] ? tcf_proto_create+0x65/0x340 [ 678.458079][T11806] ? tcf_proto_create+0x65/0x340 [ 678.458118][T11806] tcf_proto_create+0x65/0x340 [ 678.458156][T11806] tc_new_tfilter+0x13cf/0x1850 [ 678.458216][T11806] ? __pfx_tc_new_tfilter+0x10/0x10 [ 678.458264][T11806] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 678.458309][T11806] ? __pfx_tc_new_tfilter+0x10/0x10 [ 678.458347][T11806] rtnetlink_rcv_msg+0x802/0xc00 [ 678.458370][T11806] ? __kmalloc_node_track_caller_noprof+0x57f/0x7c0 [ 678.458401][T11806] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 678.458425][T11806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 678.458451][T11806] ? __lock_acquire+0x683/0x2ce0 [ 678.458491][T11806] netlink_rcv_skb+0x226/0x4a0 [ 678.458522][T11806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 678.458550][T11806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 678.458594][T11806] ? netlink_deliver_tap+0x2e/0x1b0 [ 678.458622][T11806] ? netlink_deliver_tap+0x2e/0x1b0 [ 678.458658][T11806] netlink_unicast+0x7f5/0x990 [ 678.458697][T11806] netlink_sendmsg+0x813/0xb40 [ 678.458737][T11806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.458769][T11806] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 678.458803][T11806] ? __kernel_text_address+0xd/0x30 [ 678.458824][T11806] ? unwind_get_return_address+0x4d/0x90 [ 678.458854][T11806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.458882][T11806] sock_sendmsg_nosec+0x13a/0x180 [ 678.458921][T11806] ____sys_sendmsg+0x565/0x870 [ 678.458949][T11806] ? __might_fault+0xaf/0x130 [ 678.458980][T11806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 678.459019][T11806] ? import_iovec+0x73/0xa0 [ 678.459051][T11806] ___sys_sendmsg+0x2a5/0x360 [ 678.459078][T11806] ? __lock_acquire+0x683/0x2ce0 [ 678.459107][T11806] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.459179][T11806] ? __fget_files+0x2a/0x420 [ 678.459201][T11806] ? __fget_files+0x3a8/0x420 [ 678.459237][T11806] __x64_sys_sendmsg+0x1b7/0x290 [ 678.459270][T11806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 678.459329][T11806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.459353][T11806] do_syscall_64+0x174/0x580 [ 678.459383][T11806] ? trace_irq_disable+0x3b/0x140 [ 678.459405][T11806] ? clear_bhb_loop+0x40/0x90 [ 678.459434][T11806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.459456][T11806] RIP: 0033:0x7fa1d0b5e019 [ 678.459479][T11806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.459498][T11806] RSP: 002b:00007fa1ced95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.459524][T11806] RAX: ffffffffffffffda RBX: 00007fa1d0de6090 RCX: 00007fa1d0b5e019 [ 678.459541][T11806] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000000000000003 [ 678.459555][T11806] RBP: 00007fa1ced95090 R08: 0000000000000000 R09: 0000000000000000 [ 678.459570][T11806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.459583][T11806] R13: 00007fa1d0de6128 R14: 00007fa1d0de6090 R15: 00007ffe01694008 [ 678.459620][T11806] [ 679.215764][ T1495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.215789][ T1495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.730311][T11819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1741'. [ 679.738404][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 679.783794][T11819] netlink: 'syz.1.1741': attribute type 4 has an invalid length. [ 679.783877][T11819] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1741'. [ 680.650359][T11825] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 680.929159][ T9795] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.929766][ T9795] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.929814][ T9795] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.929854][ T9795] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.929892][ T9795] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.929931][ T9795] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.929969][ T9795] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.930007][ T9795] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.852687][ T6973] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 681.914592][ T6973] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 681.925777][ T6973] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 681.934219][ T6973] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 681.935861][ T6973] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 682.124581][ T5608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 682.167907][ T5608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 682.175906][ T5608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 682.197529][ T5608] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 682.202323][ T5608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 682.812449][T11825] uprobe: syz.1.1744:11825 failed to unregister, leaking uprobe [ 684.126066][ T6973] Bluetooth: hci2: command tx timeout [ 684.381995][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1761'. [ 684.434057][ T6973] Bluetooth: hci7: command tx timeout [ 684.524569][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1761'. [ 684.627812][T11890] netlink: 'syz.1.1761': attribute type 4 has an invalid length. [ 684.627908][T11890] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1761'. [ 686.869195][ T6973] Bluetooth: hci2: command tx timeout [ 686.869234][ T5608] Bluetooth: hci7: command tx timeout [ 686.896044][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.471740][ T67] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.907468][T11842] wlan0 speed is unknown, defaulting to 1000 [ 688.345763][T10105] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 688.414061][ T67] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.507756][T10105] usb 4-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 688.507789][T10105] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 688.507824][T10105] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 688.510205][T10105] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 688.510235][T10105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.510257][T10105] usb 4-1: Product: syz [ 688.510272][T10105] usb 4-1: Manufacturer: syz [ 688.510285][T10105] usb 4-1: SerialNumber: syz [ 688.684817][T10105] cdc_ncm 4-1:1.0: skipping garbage [ 688.684848][T10105] usb 4-1: selecting invalid altsetting 1 [ 688.699904][T11839] wlan0 speed is unknown, defaulting to 1000 [ 688.926179][ T5608] Bluetooth: hci2: command tx timeout [ 688.926217][ T5608] Bluetooth: hci7: command tx timeout [ 689.686709][T10105] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 689.687197][T10105] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 689.705026][T10105] usb 4-1: selecting invalid altsetting 1 [ 689.705088][T10105] cdc_ncm 4-1:1.0: bind() failure [ 689.750835][T10105] usb 4-1: USB disconnect, device number 35 [ 690.922526][ T67] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.108566][ T6973] Bluetooth: hci7: command tx timeout [ 691.108605][ T6973] Bluetooth: hci2: command tx timeout [ 691.347973][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1772'. [ 691.355776][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'. [ 691.388915][T11939] netlink: 'syz.1.1772': attribute type 4 has an invalid length. [ 691.388993][T11939] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1772'. [ 693.508292][ T67] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.082443][T11981] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1785'. [ 698.500065][T10105] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 698.645717][T10105] usb 2-1: Using ep0 maxpacket: 16 [ 698.649134][T10105] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.649162][T10105] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 698.654487][T10105] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 698.654522][T10105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.654545][T10105] usb 2-1: Product: syz [ 698.654560][T10105] usb 2-1: Manufacturer: syz [ 698.654576][T10105] usb 2-1: SerialNumber: syz [ 698.808995][T10105] usb 2-1: 0:2 : does not exist [ 699.003498][T10105] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 699.480030][T10105] usb 2-1: USB disconnect, device number 42 [ 699.656234][T10303] udevd[10303]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 701.446858][T12035] FAULT_INJECTION: forcing a failure. [ 701.446858][T12035] name failslab, interval 1, probability 0, space 0, times 0 [ 701.446899][T12035] CPU: 0 UID: 0 PID: 12035 Comm: syz.5.1805 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 701.446929][T12035] Tainted: [L]=SOFTLOCKUP [ 701.446937][T12035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 701.446950][T12035] Call Trace: [ 701.446959][T12035] [ 701.446968][T12035] dump_stack_lvl+0xe8/0x150 [ 701.447013][T12035] should_fail_ex+0x467/0x600 [ 701.447057][T12035] should_failslab+0xa8/0x100 [ 701.447086][T12035] kmem_cache_alloc_noprof+0xa4/0x650 [ 701.447110][T12035] ? skb_clone+0x212/0x3a0 [ 701.447143][T12035] ? skb_clone+0x212/0x3a0 [ 701.447179][T12035] skb_clone+0x212/0x3a0 [ 701.447206][T12035] ? nfnetlink_rcv+0x4b0/0x28d0 [ 701.447239][T12035] nfnetlink_rcv+0x4e2/0x28d0 [ 701.447270][T12035] ? kernel_text_address+0xa5/0xe0 [ 701.447296][T12035] ? unwind_get_return_address+0x4d/0x90 [ 701.447324][T12035] ? arch_stack_walk+0xfb/0x150 [ 701.447364][T12035] ? stack_trace_save+0xa9/0x100 [ 701.447402][T12035] ? __lock_acquire+0x683/0x2ce0 [ 701.447432][T12035] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 701.447480][T12035] ? __lock_acquire+0x683/0x2ce0 [ 701.447516][T12035] ? __netlink_lookup+0xc6/0x8b0 [ 701.447558][T12035] ? netlink_deliver_tap+0x2e/0x1b0 [ 701.447597][T12035] ? netlink_deliver_tap+0x2e/0x1b0 [ 701.447632][T12035] ? netlink_deliver_tap+0x2e/0x1b0 [ 701.447660][T12035] ? netlink_deliver_tap+0x2e/0x1b0 [ 701.447693][T12035] netlink_unicast+0x7f5/0x990 [ 701.447731][T12035] netlink_sendmsg+0x813/0xb40 [ 701.447771][T12035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.447802][T12035] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 701.447846][T12035] ? __kernel_text_address+0xd/0x30 [ 701.447869][T12035] ? unwind_get_return_address+0x4d/0x90 [ 701.447897][T12035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.447925][T12035] sock_sendmsg_nosec+0x13a/0x180 [ 701.447964][T12035] ____sys_sendmsg+0x565/0x870 [ 701.447990][T12035] ? __might_fault+0xaf/0x130 [ 701.448022][T12035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 701.448061][T12035] ? import_iovec+0x73/0xa0 [ 701.448091][T12035] ___sys_sendmsg+0x2a5/0x360 [ 701.448119][T12035] ? __lock_acquire+0x683/0x2ce0 [ 701.448148][T12035] ? __pfx____sys_sendmsg+0x10/0x10 [ 701.448215][T12035] ? __fget_files+0x2a/0x420 [ 701.448239][T12035] ? __fget_files+0x3a8/0x420 [ 701.448275][T12035] __x64_sys_sendmsg+0x1b7/0x290 [ 701.448308][T12035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 701.448357][T12035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.448383][T12035] do_syscall_64+0x174/0x580 [ 701.448414][T12035] ? trace_irq_disable+0x3b/0x140 [ 701.448439][T12035] ? clear_bhb_loop+0x40/0x90 [ 701.448467][T12035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.448489][T12035] RIP: 0033:0x7fa1d0b5e019 [ 701.448512][T12035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.448531][T12035] RSP: 002b:00007fa1cedb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.448556][T12035] RAX: ffffffffffffffda RBX: 00007fa1d0de5fa0 RCX: 00007fa1d0b5e019 [ 701.448573][T12035] RDX: 0000000000040800 RSI: 0000200000000040 RDI: 0000000000000003 [ 701.448596][T12035] RBP: 00007fa1cedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 701.448611][T12035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.448625][T12035] R13: 00007fa1d0de6038 R14: 00007fa1d0de5fa0 R15: 00007ffe01694008 [ 701.448661][T12035] [ 701.693266][T11839] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.693393][T11839] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.694105][T11839] bridge_slave_0: entered allmulticast mode [ 701.751640][T11839] bridge_slave_0: entered promiscuous mode [ 701.941612][T11839] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.941731][T11839] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.941988][T11839] bridge_slave_1: entered allmulticast mode [ 702.132790][T11839] bridge_slave_1: entered promiscuous mode [ 702.161774][T12034] ceph: No mds server is up or the cluster is laggy [ 702.284868][T12031] ceph: No mds server is up or the cluster is laggy [ 702.332426][T12030] ceph: No mds server is up or the cluster is laggy [ 702.891028][ T67] bridge_slave_1: left allmulticast mode [ 702.891069][ T67] bridge_slave_1: left promiscuous mode [ 702.891393][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.138809][ T67] bridge_slave_0: left allmulticast mode [ 703.138852][ T67] bridge_slave_0: left promiscuous mode [ 703.139212][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.506976][T12093] FAULT_INJECTION: forcing a failure. [ 704.506976][T12093] name failslab, interval 1, probability 0, space 0, times 0 [ 704.507016][T12093] CPU: 1 UID: 0 PID: 12093 Comm: syz.5.1827 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 704.507045][T12093] Tainted: [L]=SOFTLOCKUP [ 704.507054][T12093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 704.507066][T12093] Call Trace: [ 704.507075][T12093] [ 704.507085][T12093] dump_stack_lvl+0xe8/0x150 [ 704.507124][T12093] should_fail_ex+0x467/0x600 [ 704.507165][T12093] should_failslab+0xa8/0x100 [ 704.507195][T12093] __kmalloc_noprof+0xfe/0x780 [ 704.507220][T12093] ? security_sk_alloc+0x52/0x360 [ 704.507242][T12093] ? security_sk_alloc+0x52/0x360 [ 704.507271][T12093] security_sk_alloc+0x52/0x360 [ 704.507298][T12093] sk_prot_alloc+0x101/0x210 [ 704.507325][T12093] ? sk_alloc+0x27/0x390 [ 704.507349][T12093] sk_alloc+0x3a/0x390 [ 704.507378][T12093] bpf_prog_test_run_skb+0x3a6/0x2230 [ 704.507423][T12093] ? __fget_files+0x3a8/0x420 [ 704.507443][T12093] ? __fget_files+0x2a/0x420 [ 704.507465][T12093] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 704.507486][T12093] bpf_prog_test_run+0x2cb/0x340 [ 704.507512][T12093] __sys_bpf+0xa22/0xd90 [ 704.507545][T12093] ? __pfx___sys_bpf+0x10/0x10 [ 704.507578][T12093] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 704.507614][T12093] ? rt_mutex_slowunlock+0x219/0x460 [ 704.507659][T12093] ? ksys_write+0x248/0x270 [ 704.507688][T12093] ? __pfx_ksys_write+0x10/0x10 [ 704.507721][T12093] __x64_sys_bpf+0xba/0xd0 [ 704.507753][T12093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.507776][T12093] do_syscall_64+0x174/0x580 [ 704.507805][T12093] ? trace_irq_disable+0x3b/0x140 [ 704.507828][T12093] ? clear_bhb_loop+0x40/0x90 [ 704.507853][T12093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.507875][T12093] RIP: 0033:0x7fa1d0b5e019 [ 704.507897][T12093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.507924][T12093] RSP: 002b:00007fa1cedb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 704.507949][T12093] RAX: ffffffffffffffda RBX: 00007fa1d0de5fa0 RCX: 00007fa1d0b5e019 [ 704.507966][T12093] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 704.507981][T12093] RBP: 00007fa1cedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 704.507995][T12093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.508017][T12093] R13: 00007fa1d0de6038 R14: 00007fa1d0de5fa0 R15: 00007ffe01694008 [ 704.508053][T12093] [ 704.758800][T12099] FAULT_INJECTION: forcing a failure. [ 704.758800][T12099] name failslab, interval 1, probability 0, space 0, times 0 [ 704.758827][T12099] CPU: 1 UID: 0 PID: 12099 Comm: syz.5.1831 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 704.758846][T12099] Tainted: [L]=SOFTLOCKUP [ 704.758851][T12099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 704.758857][T12099] Call Trace: [ 704.758863][T12099] [ 704.758868][T12099] dump_stack_lvl+0xe8/0x150 [ 704.758892][T12099] should_fail_ex+0x467/0x600 [ 704.758915][T12099] should_failslab+0xa8/0x100 [ 704.758934][T12099] __kmalloc_noprof+0xfe/0x780 [ 704.758951][T12099] ? ___neigh_create+0x719/0x2390 [ 704.759016][T12099] ? ___neigh_create+0x719/0x2390 [ 704.759032][T12099] ___neigh_create+0x719/0x2390 [ 704.759058][T12099] ip_neigh_gw4+0x27e/0x3a0 [ 704.759083][T12099] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 704.759103][T12099] ip_finish_output2+0xe6e/0x1100 [ 704.759116][T12099] ? ip_finish_output2+0x3de/0x1100 [ 704.759128][T12099] ? ip_skb_dst_mtu+0x109/0xa50 [ 704.759141][T12099] ? ip_finish_output+0x40b/0x530 [ 704.759161][T12099] ip_output+0x29f/0x450 [ 704.759173][T12099] ? ip_output+0x5a/0x450 [ 704.759186][T12099] ip_send_skb+0x45/0xc0 [ 704.759199][T12099] udp_send_skb+0x7f7/0xfb0 [ 704.759238][T12099] udp_sendmsg+0x1971/0x2140 [ 704.759259][T12099] ? count_memcg_event_mm+0x21/0x260 [ 704.759273][T12099] ? __pfx_udp_sendmsg+0x10/0x10 [ 704.759292][T12099] ? handle_mm_fault+0xe8/0x13f0 [ 704.759308][T12099] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 704.759329][T12099] ? __asan_memset+0x22/0x50 [ 704.759351][T12099] ? sock_rps_record_flow+0x19/0x350 [ 704.759365][T12099] ? inet_sendmsg+0x23e/0x320 [ 704.759379][T12099] ? __pfx_inet_sendmsg+0x10/0x10 [ 704.759391][T12099] sock_sendmsg_nosec+0x10e/0x180 [ 704.759411][T12099] ____sys_sendmsg+0x565/0x870 [ 704.759425][T12099] ? irqentry_exit+0x218/0x8f0 [ 704.759448][T12099] ? trace_irq_disable+0x3b/0x140 [ 704.759465][T12099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 704.759489][T12099] ? import_iovec+0x73/0xa0 [ 704.759506][T12099] ___sys_sendmsg+0x2a5/0x360 [ 704.759521][T12099] ? __lock_acquire+0x683/0x2ce0 [ 704.759537][T12099] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.759556][T12099] ? kstrtouint+0x6e/0xe0 [ 704.759589][T12099] ? __fget_files+0x2a/0x420 [ 704.759602][T12099] ? __fget_files+0x3a8/0x420 [ 704.759621][T12099] __sys_sendmmsg+0x279/0x4d0 [ 704.759640][T12099] ? __pfx___sys_sendmmsg+0x10/0x10 [ 704.759662][T12099] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 704.759683][T12099] ? ksys_write+0x248/0x270 [ 704.759700][T12099] ? __pfx_ksys_write+0x10/0x10 [ 704.759720][T12099] __x64_sys_sendmmsg+0xa0/0xc0 [ 704.759735][T12099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.759748][T12099] do_syscall_64+0x174/0x580 [ 704.759763][T12099] ? trace_irq_disable+0x3b/0x140 [ 704.759775][T12099] ? clear_bhb_loop+0x40/0x90 [ 704.759790][T12099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.759802][T12099] RIP: 0033:0x7fa1d0b5e019 [ 704.759816][T12099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.759826][T12099] RSP: 002b:00007fa1cedb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 704.759841][T12099] RAX: ffffffffffffffda RBX: 00007fa1d0de5fa0 RCX: 00007fa1d0b5e019 [ 704.759851][T12099] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 704.759859][T12099] RBP: 00007fa1cedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 704.759867][T12099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.759875][T12099] R13: 00007fa1d0de6038 R14: 00007fa1d0de5fa0 R15: 00007ffe01694008 [ 704.759894][T12099] [ 706.426410][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.542304][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.581542][ T67] bond0 (unregistering): Released all slaves [ 707.900564][T12130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.009860][T11839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.010475][T11842] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.010626][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.010842][T11842] bridge_slave_0: entered allmulticast mode [ 709.019300][T11842] bridge_slave_0: entered promiscuous mode [ 709.112123][T11839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.112881][T11842] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.112997][T11842] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.113188][T11842] bridge_slave_1: entered allmulticast mode [ 709.236834][T11842] bridge_slave_1: entered promiscuous mode [ 709.665029][T11839] team0: Port device team_slave_0 added [ 709.693905][T11842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.703998][T11839] team0: Port device team_slave_1 added [ 709.967248][T11842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.623374][T12159] FAULT_INJECTION: forcing a failure. [ 710.623374][T12159] name failslab, interval 1, probability 0, space 0, times 0 [ 710.623417][T12159] CPU: 1 UID: 0 PID: 12159 Comm: syz.5.1852 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 710.623447][T12159] Tainted: [L]=SOFTLOCKUP [ 710.623456][T12159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 710.623468][T12159] Call Trace: [ 710.623478][T12159] [ 710.623488][T12159] dump_stack_lvl+0xe8/0x150 [ 710.623527][T12159] should_fail_ex+0x467/0x600 [ 710.623569][T12159] should_failslab+0xa8/0x100 [ 710.623598][T12159] __kvmalloc_node_noprof+0x17a/0x8a0 [ 710.623629][T12159] ? seq_read_iter+0x1eb/0xcb0 [ 710.623659][T12159] ? seq_read_iter+0x1eb/0xcb0 [ 710.623689][T12159] ? seq_read_iter+0xa5/0xcb0 [ 710.623723][T12159] seq_read_iter+0x1eb/0xcb0 [ 710.623760][T12159] ? kernfs_fop_read_iter+0x145/0x6a0 [ 710.623880][T12159] vfs_read+0x59e/0xa90 [ 710.623919][T12159] ? __pfx_vfs_read+0x10/0x10 [ 710.623951][T12159] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 710.623983][T12159] ? lockdep_hardirqs_on+0x7a/0x110 [ 710.624015][T12159] ? mutex_lock_nested+0x152/0x1d0 [ 710.624038][T12159] ? fdget_pos+0x252/0x320 [ 710.624073][T12159] ksys_read+0x156/0x270 [ 710.624104][T12159] ? __pfx_ksys_read+0x10/0x10 [ 710.624142][T12159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.624167][T12159] do_syscall_64+0x174/0x580 [ 710.624193][T12159] ? trace_irq_disable+0x3b/0x140 [ 710.624216][T12159] ? clear_bhb_loop+0x40/0x90 [ 710.624242][T12159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.624264][T12159] RIP: 0033:0x7fa1d0b5e019 [ 710.624286][T12159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.624305][T12159] RSP: 002b:00007fa1ced95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 710.624329][T12159] RAX: ffffffffffffffda RBX: 00007fa1d0de6090 RCX: 00007fa1d0b5e019 [ 710.624353][T12159] RDX: 00000000000000aa RSI: 0000200000000340 RDI: 000000000000000a [ 710.624369][T12159] RBP: 00007fa1ced95090 R08: 0000000000000000 R09: 0000000000000000 [ 710.624383][T12159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.624397][T12159] R13: 00007fa1d0de6128 R14: 00007fa1d0de6090 R15: 00007ffe01694008 [ 710.624434][T12159] [ 710.897767][T11839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.897785][T11839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.897811][T11839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.029683][T11839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.029703][T11839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.029732][T11839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.739482][T11842] team0: Port device team_slave_0 added [ 712.822816][T11842] team0: Port device team_slave_1 added [ 713.457536][T11842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.457556][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.457584][T11842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.621587][T11839] hsr_slave_0: entered promiscuous mode [ 713.694558][T11839] hsr_slave_1: entered promiscuous mode [ 713.703010][T11839] debugfs: 'hsr0' already exists in 'hsr' [ 713.703039][T11839] Cannot create hsr debugfs directory [ 713.710275][T11842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.710293][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.710320][T11842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.758440][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 714.037311][ T67] hsr_slave_0: left promiscuous mode [ 714.100910][ T67] hsr_slave_1: left promiscuous mode [ 714.102232][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.102260][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.156981][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.157013][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.323008][T12208] FAULT_INJECTION: forcing a failure. [ 714.323008][T12208] name failslab, interval 1, probability 0, space 0, times 0 [ 714.323049][T12208] CPU: 1 UID: 0 PID: 12208 Comm: syz.3.1869 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 714.323079][T12208] Tainted: [L]=SOFTLOCKUP [ 714.323087][T12208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 714.323099][T12208] Call Trace: [ 714.323109][T12208] [ 714.323119][T12208] dump_stack_lvl+0xe8/0x150 [ 714.323158][T12208] should_fail_ex+0x467/0x600 [ 714.323197][T12208] should_failslab+0xa8/0x100 [ 714.323225][T12208] kmem_cache_alloc_noprof+0xa4/0x650 [ 714.323247][T12208] ? skb_clone+0x212/0x3a0 [ 714.323275][T12208] ? skb_clone+0x212/0x3a0 [ 714.323306][T12208] skb_clone+0x212/0x3a0 [ 714.323331][T12208] ? nfnetlink_rcv+0x4b0/0x28d0 [ 714.323397][T12208] nfnetlink_rcv+0x4e2/0x28d0 [ 714.323427][T12208] ? kernel_text_address+0xa5/0xe0 [ 714.323452][T12208] ? unwind_get_return_address+0x4d/0x90 [ 714.323477][T12208] ? arch_stack_walk+0xfb/0x150 [ 714.323513][T12208] ? stack_trace_save+0xa9/0x100 [ 714.323548][T12208] ? __lock_acquire+0x683/0x2ce0 [ 714.323573][T12208] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 714.323620][T12208] ? __lock_acquire+0x683/0x2ce0 [ 714.323657][T12208] ? __netlink_lookup+0xc6/0x8b0 [ 714.323698][T12208] ? netlink_deliver_tap+0x2e/0x1b0 [ 714.323728][T12208] ? netlink_deliver_tap+0x2e/0x1b0 [ 714.323763][T12208] ? netlink_deliver_tap+0x2e/0x1b0 [ 714.323790][T12208] ? netlink_deliver_tap+0x2e/0x1b0 [ 714.323826][T12208] netlink_unicast+0x7f5/0x990 [ 714.323862][T12208] netlink_sendmsg+0x813/0xb40 [ 714.323902][T12208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 714.323934][T12208] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 714.323968][T12208] ? __kernel_text_address+0xd/0x30 [ 714.323990][T12208] ? unwind_get_return_address+0x4d/0x90 [ 714.324018][T12208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 714.324046][T12208] sock_sendmsg_nosec+0x13a/0x180 [ 714.324084][T12208] ____sys_sendmsg+0x565/0x870 [ 714.324112][T12208] ? __might_fault+0xaf/0x130 [ 714.324143][T12208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 714.324182][T12208] ? import_iovec+0x73/0xa0 [ 714.324214][T12208] ___sys_sendmsg+0x2a5/0x360 [ 714.324241][T12208] ? __lock_acquire+0x683/0x2ce0 [ 714.324270][T12208] ? __pfx____sys_sendmsg+0x10/0x10 [ 714.324337][T12208] ? __fget_files+0x2a/0x420 [ 714.324368][T12208] ? __fget_files+0x3a8/0x420 [ 714.324404][T12208] __x64_sys_sendmsg+0x1b7/0x290 [ 714.324436][T12208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 714.324485][T12208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.324509][T12208] do_syscall_64+0x174/0x580 [ 714.324535][T12208] ? trace_irq_disable+0x3b/0x140 [ 714.324557][T12208] ? clear_bhb_loop+0x40/0x90 [ 714.324586][T12208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.324608][T12208] RIP: 0033:0x7f529fbae019 [ 714.324630][T12208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.324649][T12208] RSP: 002b:00007f529de06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.324674][T12208] RAX: ffffffffffffffda RBX: 00007f529fe35fa0 RCX: 00007f529fbae019 [ 714.324692][T12208] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 714.324706][T12208] RBP: 00007f529de06090 R08: 0000000000000000 R09: 0000000000000000 [ 714.324721][T12208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.324734][T12208] R13: 00007f529fe36038 R14: 00007f529fe35fa0 R15: 00007ffff33818a8 [ 714.324770][T12208] [ 714.750765][ T67] veth1_macvtap: left promiscuous mode [ 714.750892][ T67] veth0_macvtap: left promiscuous mode [ 714.751186][ T67] veth1_vlan: left promiscuous mode [ 714.751410][ T67] veth0_vlan: left promiscuous mode [ 717.634776][T12245] FAULT_INJECTION: forcing a failure. [ 717.634776][T12245] name failslab, interval 1, probability 0, space 0, times 0 [ 717.634801][T12245] CPU: 1 UID: 0 PID: 12245 Comm: syz.5.1881 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 717.634819][T12245] Tainted: [L]=SOFTLOCKUP [ 717.634823][T12245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 717.634830][T12245] Call Trace: [ 717.634836][T12245] [ 717.634841][T12245] dump_stack_lvl+0xe8/0x150 [ 717.634865][T12245] should_fail_ex+0x467/0x600 [ 717.634888][T12245] should_failslab+0xa8/0x100 [ 717.634904][T12245] __kmalloc_noprof+0xfe/0x780 [ 717.634918][T12245] ? tomoyo_supervisor+0xc53/0x1560 [ 717.634934][T12245] ? tomoyo_supervisor+0xc53/0x1560 [ 717.634953][T12245] tomoyo_supervisor+0xc53/0x1560 [ 717.634976][T12245] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 717.634999][T12245] ? snprintf+0xe8/0x140 [ 717.635016][T12245] ? __pfx_snprintf+0x10/0x10 [ 717.635030][T12245] ? tomoyo_check_acl+0x386/0x400 [ 717.635047][T12245] tomoyo_path_number_perm+0x463/0x5f0 [ 717.635061][T12245] ? tomoyo_path_number_perm+0x219/0x5f0 [ 717.635074][T12245] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 717.635096][T12245] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 717.635112][T12245] ? hook_file_ioctl+0x1f3/0x600 [ 717.635129][T12245] ? lockdep_hardirqs_on+0x7a/0x110 [ 717.635155][T12245] ? __fget_files+0x2a/0x420 [ 717.635170][T12245] ? __fget_files+0x2a/0x420 [ 717.635185][T12245] ? __fget_files+0x3a8/0x420 [ 717.635197][T12245] ? __fget_files+0x2a/0x420 [ 717.635212][T12245] security_file_ioctl+0xc3/0x2a0 [ 717.635228][T12245] __se_sys_ioctl+0x47/0x170 [ 717.635243][T12245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.635257][T12245] do_syscall_64+0x174/0x580 [ 717.635271][T12245] ? trace_irq_disable+0x3b/0x140 [ 717.635284][T12245] ? clear_bhb_loop+0x40/0x90 [ 717.635299][T12245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.635311][T12245] RIP: 0033:0x7fa1d0b5e019 [ 717.635324][T12245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.635335][T12245] RSP: 002b:00007fa1cedb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.635350][T12245] RAX: ffffffffffffffda RBX: 00007fa1d0de5fa0 RCX: 00007fa1d0b5e019 [ 717.635360][T12245] RDX: 00002000000002c0 RSI: 00000000c018aa3f RDI: 0000000000000004 [ 717.635368][T12245] RBP: 00007fa1cedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 717.635376][T12245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.635384][T12245] R13: 00007fa1d0de6038 R14: 00007fa1d0de5fa0 R15: 00007ffe01694008 [ 717.635403][T12245] [ 718.276702][ T67] team0 (unregistering): Port device team_slave_1 removed [ 718.336632][ T67] team0 (unregistering): Port device team_slave_0 removed [ 719.053198][ T5608] Bluetooth: hci3: Invalid handle: 0x91a5 > 0x0eff [ 719.097135][T11842] hsr_slave_0: entered promiscuous mode [ 719.117885][T11842] hsr_slave_1: entered promiscuous mode [ 719.124811][T11842] debugfs: 'hsr0' already exists in 'hsr' [ 719.124842][T11842] Cannot create hsr debugfs directory [ 719.318225][T12279] FAULT_INJECTION: forcing a failure. [ 719.318225][T12279] name failslab, interval 1, probability 0, space 0, times 0 [ 719.403618][T12279] CPU: 0 UID: 0 PID: 12279 Comm: syz.5.1896 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 719.403656][T12279] Tainted: [L]=SOFTLOCKUP [ 719.403664][T12279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 719.403677][T12279] Call Trace: [ 719.403686][T12279] [ 719.403695][T12279] dump_stack_lvl+0xe8/0x150 [ 719.403742][T12279] should_fail_ex+0x467/0x600 [ 719.403781][T12279] should_failslab+0xa8/0x100 [ 719.403810][T12279] __kmalloc_cache_noprof+0xa0/0x6b0 [ 719.403835][T12279] ? drm_queue_vblank_event+0xa5/0x8a0 [ 719.403983][T12279] ? drm_queue_vblank_event+0xa5/0x8a0 [ 719.404017][T12279] drm_queue_vblank_event+0xa5/0x8a0 [ 719.404052][T12279] drm_wait_vblank_ioctl+0x705/0xdb0 [ 719.404090][T12279] ? __pfx_drm_wait_vblank_ioctl+0x10/0x10 [ 719.404135][T12279] drm_ioctl_kernel+0x2e2/0x3b0 [ 719.404214][T12279] ? __pfx_drm_wait_vblank_ioctl+0x10/0x10 [ 719.404240][T12279] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 719.404280][T12279] drm_ioctl+0x713/0xba0 [ 719.404317][T12279] ? __pfx_drm_wait_vblank_ioctl+0x10/0x10 [ 719.404344][T12279] ? __pfx_drm_ioctl+0x10/0x10 [ 719.404385][T12279] ? __fget_files+0x2a/0x420 [ 719.404411][T12279] ? bpf_lsm_file_ioctl+0x9/0x20 [ 719.404434][T12279] ? __pfx_drm_ioctl+0x10/0x10 [ 719.404463][T12279] __se_sys_ioctl+0xff/0x170 [ 719.404491][T12279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.404514][T12279] do_syscall_64+0x174/0x580 [ 719.404542][T12279] ? trace_irq_disable+0x3b/0x140 [ 719.404564][T12279] ? clear_bhb_loop+0x40/0x90 [ 719.404589][T12279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.404610][T12279] RIP: 0033:0x7fa1d0b5e019 [ 719.404632][T12279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.404649][T12279] RSP: 002b:00007fa1ced95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.404673][T12279] RAX: ffffffffffffffda RBX: 00007fa1d0de6090 RCX: 00007fa1d0b5e019 [ 719.404689][T12279] RDX: 0000200000000040 RSI: 00000000c018643a RDI: 0000000000000003 [ 719.404705][T12279] RBP: 00007fa1ced95090 R08: 0000000000000000 R09: 0000000000000000 [ 719.404717][T12279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.404729][T12279] R13: 00007fa1d0de6128 R14: 00007fa1d0de6090 R15: 00007ffe01694008 [ 719.404773][T12279] [ 719.654202][T12284] Illegal XDP return value 4294967274 on prog (id 219) dev syz_tun, expect packet loss! [ 719.662694][T12284] vivid-001: ================= START STATUS ================= [ 719.662780][T12284] vivid-001: Radio HW Seek Mode: Bounded [ 719.662805][T12284] vivid-001: Radio Programmable HW Seek: false [ 719.662825][T12284] vivid-001: RDS Rx I/O Mode: Block I/O [ 719.662844][T12284] vivid-001: Generate RBDS Instead of RDS: false [ 719.662873][T12284] vivid-001: RDS Reception: true [ 719.662892][T12284] vivid-001: RDS Program Type: 0 inactive [ 719.662915][T12284] vivid-001: RDS PS Name: inactive [ 719.662937][T12284] vivid-001: RDS Radio Text: inactive [ 719.662959][T12284] vivid-001: RDS Traffic Announcement: false inactive [ 719.662982][T12284] vivid-001: RDS Traffic Program: false inactive [ 719.663005][T12284] vivid-001: RDS Music: false inactive [ 719.663029][T12284] vivid-001: ================== END STATUS ================== [ 720.156699][T12293] FAULT_INJECTION: forcing a failure. [ 720.156699][T12293] name failslab, interval 1, probability 0, space 0, times 0 [ 720.156726][T12293] CPU: 1 UID: 0 PID: 12293 Comm: syz.5.1900 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 720.156744][T12293] Tainted: [L]=SOFTLOCKUP [ 720.156749][T12293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 720.156756][T12293] Call Trace: [ 720.156762][T12293] [ 720.156768][T12293] dump_stack_lvl+0xe8/0x150 [ 720.156792][T12293] should_fail_ex+0x467/0x600 [ 720.156817][T12293] should_failslab+0xa8/0x100 [ 720.156834][T12293] __kmalloc_noprof+0xfe/0x780 [ 720.156848][T12293] ? tomoyo_encode+0x2ad/0x570 [ 720.156863][T12293] ? tomoyo_encode+0x2ad/0x570 [ 720.156882][T12293] tomoyo_encode+0x2ad/0x570 [ 720.156901][T12293] tomoyo_realpath_from_path+0x5fa/0x640 [ 720.156936][T12293] ? tomoyo_path_number_perm+0x219/0x5f0 [ 720.156961][T12293] tomoyo_path_number_perm+0x246/0x5f0 [ 720.156977][T12293] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 720.156991][T12293] ? lockdep_hardirqs_on+0x7a/0x110 [ 720.157007][T12293] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 720.157023][T12293] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 720.157062][T12293] ? __pfx_current_check_access_path+0x10/0x10 [ 720.157135][T12293] ? d_splice_alias+0x12/0x30 [ 720.157156][T12293] tomoyo_path_mknod+0x14a/0x1a0 [ 720.157175][T12293] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 720.157195][T12293] ? __pfx_filename_create+0x10/0x10 [ 720.157214][T12293] security_path_mknod+0x176/0x370 [ 720.157234][T12293] filename_mknodat+0x2c2/0x670 [ 720.157254][T12293] ? __pfx_filename_mknodat+0x10/0x10 [ 720.157272][T12293] ? do_getname+0x151/0x250 [ 720.157300][T12293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.157324][T12293] __se_sys_mknodat+0x3b/0x150 [ 720.157341][T12293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.157355][T12293] do_syscall_64+0x174/0x580 [ 720.157393][T12293] ? trace_irq_disable+0x3b/0x140 [ 720.157406][T12293] ? clear_bhb_loop+0x40/0x90 [ 720.157422][T12293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.157434][T12293] RIP: 0033:0x7fa1d0b5e019 [ 720.157448][T12293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.157458][T12293] RSP: 002b:00007fa1cedb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 720.157473][T12293] RAX: ffffffffffffffda RBX: 00007fa1d0de5fa0 RCX: 00007fa1d0b5e019 [ 720.157483][T12293] RDX: 00000000000081c0 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 720.157491][T12293] RBP: 00007fa1cedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 720.157499][T12293] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 720.157507][T12293] R13: 00007fa1d0de6038 R14: 00007fa1d0de5fa0 R15: 00007ffe01694008 [ 720.157527][T12293] [ 720.157571][T12293] ERROR: Out of memory at tomoyo_realpath_from_path. [ 720.624912][ T6973] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 723.263862][T12321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1906'. [ 723.263893][T12321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1906'. [ 723.486141][ T6973] Bluetooth: hci4: Invalid handle: 0x91a5 > 0x0eff [ 723.951753][T12342] FAULT_INJECTION: forcing a failure. [ 723.951753][T12342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.951793][T12342] CPU: 1 UID: 0 PID: 12342 Comm: syz.5.1913 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 723.951819][T12342] Tainted: [L]=SOFTLOCKUP [ 723.951825][T12342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 723.951836][T12342] Call Trace: [ 723.951843][T12342] [ 723.951851][T12342] dump_stack_lvl+0xe8/0x150 [ 723.951883][T12342] should_fail_ex+0x467/0x600 [ 723.951915][T12342] _copy_from_iter+0x1d3/0x1660 [ 723.951933][T12342] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 723.951959][T12342] ? __pfx_policy_nodemask+0x10/0x10 [ 723.951981][T12342] ? unwind_next_frame+0x8f/0x2550 [ 723.952001][T12342] ? __pfx__copy_from_iter+0x10/0x10 [ 723.952023][T12342] ? alloc_pages_mpol+0x115/0x280 [ 723.952051][T12342] copy_page_from_iter+0x219/0x2d0 [ 723.952074][T12342] tun_get_user+0x1b68/0x4380 [ 723.952182][T12342] ? is_bpf_text_address+0x292/0x2b0 [ 723.952205][T12342] ? tun_get_user+0x6e7/0x4380 [ 723.952240][T12342] ? __pfx_tun_get_user+0x10/0x10 [ 723.952260][T12342] ? __lock_acquire+0x683/0x2ce0 [ 723.952293][T12342] ? ref_tracker_alloc+0x353/0x4c0 [ 723.952341][T12342] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 723.952360][T12342] ? tun_get+0x1c/0x2f0 [ 723.952377][T12342] ? tun_get+0x1c/0x2f0 [ 723.952399][T12342] ? tun_get+0x1c/0x2f0 [ 723.952414][T12342] ? tun_get+0x1c/0x2f0 [ 723.952434][T12342] tun_chr_write_iter+0x119/0x200 [ 723.952482][T12342] vfs_write+0x61e/0xbb0 [ 723.952512][T12342] ? __pfx_vfs_write+0x10/0x10 [ 723.952543][T12342] ? __fget_files+0x2a/0x420 [ 723.952570][T12342] ksys_write+0x156/0x270 [ 723.952593][T12342] ? __pfx_ksys_write+0x10/0x10 [ 723.952622][T12342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.952641][T12342] do_syscall_64+0x174/0x580 [ 723.952666][T12342] ? clear_bhb_loop+0x40/0x90 [ 723.952687][T12342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.952704][T12342] RIP: 0033:0x7fa1d0b1e84e [ 723.952721][T12342] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 723.952736][T12342] RSP: 002b:00007fa1cedb5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 723.952755][T12342] RAX: ffffffffffffffda RBX: 00007fa1cedb66c0 RCX: 00007fa1d0b1e84e [ 723.952769][T12342] RDX: 000000000000002a RSI: 0000200000000000 RDI: 00000000000000c8 [ 723.952782][T12342] RBP: 00007fa1cedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 723.952795][T12342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.952808][T12342] R13: 00007fa1d0de6038 R14: 00007fa1d0de5fa0 R15: 00007ffe01694008 [ 723.952843][T12342] [ 724.116328][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 725.394601][T12351] FAULT_INJECTION: forcing a failure. [ 725.394601][T12351] name failslab, interval 1, probability 0, space 0, times 0 [ 725.394659][T12351] CPU: 0 UID: 0 PID: 12351 Comm: syz.1.1914 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 725.394691][T12351] Tainted: [L]=SOFTLOCKUP [ 725.394699][T12351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 725.394718][T12351] Call Trace: [ 725.394727][T12351] [ 725.394735][T12351] dump_stack_lvl+0xe8/0x150 [ 725.394760][T12351] should_fail_ex+0x467/0x600 [ 725.394784][T12351] should_failslab+0xa8/0x100 [ 725.394801][T12351] kmem_cache_alloc_noprof+0xa4/0x650 [ 725.394815][T12351] ? sctp_get_port_local+0x749/0x17a0 [ 725.394891][T12351] ? sctp_get_port_local+0x749/0x17a0 [ 725.394911][T12351] sctp_get_port_local+0x749/0x17a0 [ 725.394933][T12351] ? sctp_get_port_local+0x50c/0x17a0 [ 725.394949][T12351] ? __pfx_sctp_get_port_local+0x10/0x10 [ 725.394965][T12351] ? sctp_bind_addr_match+0x30/0x2b0 [ 725.394978][T12351] ? sctp_bind_addr_match+0x28b/0x2b0 [ 725.394994][T12351] sctp_do_bind+0x4d9/0x9a0 [ 725.395016][T12351] sctp_connect_new_asoc+0x270/0x6b0 [ 725.395034][T12351] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 725.395054][T12351] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 725.395070][T12351] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 725.395108][T12351] ? security_sctp_bind_connect+0x7e/0x2c0 [ 725.395126][T12351] sctp_sendmsg+0x1506/0x2a50 [ 725.395152][T12351] ? __pfx_sctp_sendmsg+0x10/0x10 [ 725.395165][T12351] ? smack_socket_sendmsg+0x48c/0x590 [ 725.395183][T12351] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 725.395200][T12351] ? __lock_acquire+0x683/0x2ce0 [ 725.395222][T12351] ? __lock_acquire+0x683/0x2ce0 [ 725.395237][T12351] ? sock_rps_record_flow+0x19/0x350 [ 725.395253][T12351] ? inet_sendmsg+0x298/0x320 [ 725.395267][T12351] ? __pfx_inet_sendmsg+0x10/0x10 [ 725.395279][T12351] sock_sendmsg_nosec+0x10e/0x180 [ 725.395300][T12351] ____sys_sendmsg+0x565/0x870 [ 725.395322][T12351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 725.395344][T12351] ? import_iovec+0x73/0xa0 [ 725.395362][T12351] ___sys_sendmsg+0x2a5/0x360 [ 725.395377][T12351] ? __lock_acquire+0x683/0x2ce0 [ 725.395393][T12351] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.395433][T12351] ? __fget_files+0x2a/0x420 [ 725.395446][T12351] ? __fget_files+0x3a8/0x420 [ 725.395465][T12351] __x64_sys_sendmsg+0x1b7/0x290 [ 725.395480][T12351] ? lockdep_hardirqs_on+0x7a/0x110 [ 725.395499][T12351] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 725.395527][T12351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.395553][T12351] do_syscall_64+0x174/0x580 [ 725.395581][T12351] ? clear_bhb_loop+0x40/0x90 [ 725.395607][T12351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.395628][T12351] RIP: 0033:0x7f2fbe70e019 [ 725.395646][T12351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.395657][T12351] RSP: 002b:00007f2fbc945028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.395672][T12351] RAX: ffffffffffffffda RBX: 00007f2fbe996090 RCX: 00007f2fbe70e019 [ 725.395682][T12351] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000004 [ 725.395690][T12351] RBP: 00007f2fbc945090 R08: 0000000000000000 R09: 0000000000000000 [ 725.395697][T12351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.395705][T12351] R13: 00007f2fbe996128 R14: 00007f2fbe996090 R15: 00007ffc08040d58 [ 725.395733][T12351] [ 727.093437][ T67] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.065730][ T6540] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 728.218388][ T6540] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.218453][ T6540] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.221820][ T6540] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 728.221852][ T6540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.221873][ T6540] usb 2-1: Product: syz [ 728.221889][ T6540] usb 2-1: Manufacturer: syz [ 728.221905][ T6540] usb 2-1: SerialNumber: syz [ 728.977354][ T6540] usb 2-1: usb_control_msg returned -71 [ 728.977410][ T6540] usbtmc 2-1:1.0: can't read capabilities [ 729.072354][ T67] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.106791][ T6540] usb 2-1: USB disconnect, device number 43 [ 729.279542][T12416] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1939'. [ 729.285843][ T5608] Bluetooth: hci5: SCO packet too small [ 729.303191][T12395] openvswitch: netlink: Flow actions attr not present in new flow. [ 729.321965][T12418] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1939'. [ 729.323378][ T5608] Bluetooth: hci5: SCO packet too small [ 729.538664][T12426] FAULT_INJECTION: forcing a failure. [ 729.538664][T12426] name failslab, interval 1, probability 0, space 0, times 0 [ 729.538701][T12426] CPU: 0 UID: 0 PID: 12426 Comm: syz.5.1941 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 729.538726][T12426] Tainted: [L]=SOFTLOCKUP [ 729.538732][T12426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 729.538743][T12426] Call Trace: [ 729.538751][T12426] [ 729.538759][T12426] dump_stack_lvl+0xe8/0x150 [ 729.538793][T12426] should_fail_ex+0x467/0x600 [ 729.538825][T12426] should_failslab+0xa8/0x100 [ 729.538847][T12426] kmem_cache_alloc_noprof+0xa4/0x650 [ 729.538866][T12426] ? skb_clone+0x212/0x3a0 [ 729.538889][T12426] ? skb_clone+0x212/0x3a0 [ 729.538916][T12426] skb_clone+0x212/0x3a0 [ 729.538936][T12426] ? nfnetlink_rcv+0x4b0/0x28d0 [ 729.538959][T12426] nfnetlink_rcv+0x4e2/0x28d0 [ 729.538986][T12426] ? kernel_text_address+0xa5/0xe0 [ 729.539008][T12426] ? unwind_get_return_address+0x4d/0x90 [ 729.539038][T12426] ? arch_stack_walk+0xfb/0x150 [ 729.539067][T12426] ? stack_trace_save+0xa9/0x100 [ 729.539095][T12426] ? __lock_acquire+0x683/0x2ce0 [ 729.539115][T12426] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 729.539152][T12426] ? __lock_acquire+0x683/0x2ce0 [ 729.539188][T12426] ? __netlink_lookup+0xc6/0x8b0 [ 729.539221][T12426] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.539247][T12426] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.539278][T12426] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.539297][T12426] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.539320][T12426] netlink_unicast+0x7f5/0x990 [ 729.539357][T12426] netlink_sendmsg+0x813/0xb40 [ 729.539389][T12426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.539416][T12426] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 729.539442][T12426] ? __kernel_text_address+0xd/0x30 [ 729.539459][T12426] ? unwind_get_return_address+0x4d/0x90 [ 729.539480][T12426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.539500][T12426] sock_sendmsg_nosec+0x13a/0x180 [ 729.539529][T12426] ____sys_sendmsg+0x565/0x870 [ 729.539551][T12426] ? __might_fault+0xaf/0x130 [ 729.539576][T12426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 729.539606][T12426] ? import_iovec+0x73/0xa0 [ 729.539630][T12426] ___sys_sendmsg+0x2a5/0x360 [ 729.539651][T12426] ? __lock_acquire+0x683/0x2ce0 [ 729.539673][T12426] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.539728][T12426] ? __fget_files+0x2a/0x420 [ 729.539746][T12426] ? __fget_files+0x3a8/0x420 [ 729.539773][T12426] __x64_sys_sendmsg+0x1b7/0x290 [ 729.539799][T12426] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 729.539838][T12426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.539859][T12426] do_syscall_64+0x174/0x580 [ 729.539883][T12426] ? trace_irq_disable+0x3b/0x140 [ 729.539902][T12426] ? clear_bhb_loop+0x40/0x90 [ 729.539924][T12426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.539941][T12426] RIP: 0033:0x7fa1d0b5e019 [ 729.539959][T12426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.539975][T12426] RSP: 002b:00007fa1cedb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.539996][T12426] RAX: ffffffffffffffda RBX: 00007fa1d0de5fa0 RCX: 00007fa1d0b5e019 [ 729.540010][T12426] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 729.540022][T12426] RBP: 00007fa1cedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 729.540045][T12426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.540057][T12426] R13: 00007fa1d0de6038 R14: 00007fa1d0de5fa0 R15: 00007ffe01694008 [ 729.540087][T12426] [ 732.504317][T12469] FAULT_INJECTION: forcing a failure. [ 732.504317][T12469] name failslab, interval 1, probability 0, space 0, times 0 [ 732.504356][T12469] CPU: 1 UID: 0 PID: 12469 Comm: syz.5.1952 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 732.504387][T12469] Tainted: [L]=SOFTLOCKUP [ 732.504394][T12469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 732.504406][T12469] Call Trace: [ 732.504415][T12469] [ 732.504425][T12469] dump_stack_lvl+0xe8/0x150 [ 732.504470][T12469] should_fail_ex+0x467/0x600 [ 732.504507][T12469] should_failslab+0xa8/0x100 [ 732.504537][T12469] __kmalloc_cache_noprof+0xa0/0x6b0 [ 732.504561][T12469] ? unix_autobind+0xee/0xa30 [ 732.504652][T12469] ? unix_autobind+0xee/0xa30 [ 732.504682][T12469] ? unix_autobind+0x57/0xa30 [ 732.504715][T12469] unix_autobind+0xee/0xa30 [ 732.504746][T12469] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 732.504792][T12469] unix_bind+0xef/0x1260 [ 732.504830][T12469] ? tomoyo_socket_bind_permission+0x1ae/0x290 [ 732.504860][T12469] ? __pfx_unix_bind+0x10/0x10 [ 732.504893][T12469] ? bpf_lsm_socket_bind+0x9/0x20 [ 732.504927][T12469] __sys_bind+0x2e9/0x410 [ 732.504955][T12469] ? __pfx___sys_bind+0x10/0x10 [ 732.504990][T12469] ? __pfx_ksys_write+0x10/0x10 [ 732.505025][T12469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.505049][T12469] __x64_sys_bind+0x7a/0x90 [ 732.505084][T12469] do_syscall_64+0x174/0x580 [ 732.505112][T12469] ? trace_irq_disable+0x3b/0x140 [ 732.505135][T12469] ? clear_bhb_loop+0x40/0x90 [ 732.505163][T12469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.505185][T12469] RIP: 0033:0x7fa1d0b5e019 [ 732.505206][T12469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.505224][T12469] RSP: 002b:00007fa1cedb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 732.505249][T12469] RAX: ffffffffffffffda RBX: 00007fa1d0de5fa0 RCX: 00007fa1d0b5e019 [ 732.505265][T12469] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 732.505279][T12469] RBP: 00007fa1cedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 732.505292][T12469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.505305][T12469] R13: 00007fa1d0de6038 R14: 00007fa1d0de5fa0 R15: 00007ffe01694008 [ 732.505341][T12469] [ 732.919607][ T67] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.476494][ T37] audit: type=1326 audit(1785806702.670:5961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.1.1960" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fbe70e019 code=0x0 [ 736.698518][T12490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.831515][T12530] FAULT_INJECTION: forcing a failure. [ 736.831515][T12530] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 736.831557][T12530] CPU: 0 UID: 0 PID: 12530 Comm: syz.5.1963 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 736.831588][T12530] Tainted: [L]=SOFTLOCKUP [ 736.831595][T12530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 736.831607][T12530] Call Trace: [ 736.831616][T12530] [ 736.831625][T12530] dump_stack_lvl+0xe8/0x150 [ 736.831663][T12530] should_fail_ex+0x467/0x600 [ 736.831704][T12530] prepare_alloc_pages+0x223/0x690 [ 736.831736][T12530] __alloc_frozen_pages_noprof+0x12f/0x380 [ 736.831766][T12530] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 736.831799][T12530] ? __pfx_policy_nodemask+0x10/0x10 [ 736.831825][T12530] ? lockdep_hardirqs_on+0x7a/0x110 [ 736.831858][T12530] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 736.831887][T12530] alloc_pages_mpol+0xce/0x280 [ 736.831918][T12530] alloc_pages_noprof+0xd2/0x2f0 [ 736.831949][T12530] get_free_pages_noprof+0xf/0x80 [ 736.831977][T12530] __kasan_populate_vmalloc+0x38/0x1c0 [ 736.832013][T12530] ? rt_spin_unlock+0x163/0x200 [ 736.832040][T12530] alloc_vmap_area+0xd1a/0x1420 [ 736.832099][T12530] ? __pfx_alloc_vmap_area+0x10/0x10 [ 736.832131][T12530] ? __kmalloc_cache_node_noprof+0x47b/0x6a0 [ 736.832156][T12530] ? __get_vm_area_node+0x136/0x300 [ 736.832184][T12530] ? __get_vm_area_node+0x136/0x300 [ 736.832220][T12530] __get_vm_area_node+0x1f2/0x300 [ 736.832258][T12530] __vmalloc_node_range_noprof+0x358/0x1730 [ 736.832282][T12530] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 736.832315][T12530] ? is_bpf_text_address+0x26/0x2b0 [ 736.832358][T12530] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 736.832380][T12530] ? is_bpf_text_address+0x26/0x2b0 [ 736.832406][T12530] ? kernel_text_address+0xa5/0xe0 [ 736.832437][T12530] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 736.832459][T12530] __vmalloc_noprof+0xd2/0x120 [ 736.832480][T12530] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 736.832505][T12530] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 736.832526][T12530] ? bpf_prog_alloc+0x2a/0x1a0 [ 736.832549][T12530] bpf_prog_alloc+0x3c/0x1a0 [ 736.832573][T12530] bpf_prog_load+0x7f8/0x1c00 [ 736.832610][T12530] ? __pfx_bpf_prog_load+0x10/0x10 [ 736.832659][T12530] __sys_bpf+0xd0d/0xd90 [ 736.832691][T12530] ? __pfx___sys_bpf+0x10/0x10 [ 736.832717][T12530] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 736.832749][T12530] ? rt_mutex_slowunlock+0x219/0x460 [ 736.832791][T12530] ? ksys_write+0x248/0x270 [ 736.832820][T12530] ? __pfx_ksys_write+0x10/0x10 [ 736.832852][T12530] __x64_sys_bpf+0xba/0xd0 [ 736.832886][T12530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.832908][T12530] do_syscall_64+0x174/0x580 [ 736.832934][T12530] ? trace_irq_disable+0x3b/0x140 [ 736.832955][T12530] ? clear_bhb_loop+0x40/0x90 [ 736.832982][T12530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.833004][T12530] RIP: 0033:0x7fa1d0b5e019 [ 736.833025][T12530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.833045][T12530] RSP: 002b:00007fa1cedb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 736.833078][T12530] RAX: ffffffffffffffda RBX: 00007fa1d0de5fa0 RCX: 00007fa1d0b5e019 [ 736.833093][T12530] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 736.833108][T12530] RBP: 00007fa1cedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 736.833123][T12530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.833137][T12530] R13: 00007fa1d0de6038 R14: 00007fa1d0de5fa0 R15: 00007ffe01694008 [ 736.833173][T12530] [ 736.855864][T12530] syz.5.1963: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 736.855962][T12530] CPU: 1 UID: 0 PID: 12530 Comm: syz.5.1963 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 736.855990][T12530] Tainted: [L]=SOFTLOCKUP [ 736.855998][T12530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 736.856009][T12530] Call Trace: [ 736.856017][T12530] [ 736.856026][T12530] dump_stack_lvl+0xe8/0x150 [ 736.856060][T12530] warn_alloc+0x24c/0x270 [ 736.856084][T12530] ? kasan_quarantine_put+0xbb/0x1f0 [ 736.856108][T12530] ? __pfx_warn_alloc+0x10/0x10 [ 736.856131][T12530] ? __get_vm_area_node+0x20b/0x300 [ 736.856165][T12530] ? __get_vm_area_node+0x20b/0x300 [ 736.856198][T12530] __vmalloc_node_range_noprof+0x37d/0x1730 [ 736.856225][T12530] ? is_bpf_text_address+0x26/0x2b0 [ 736.856265][T12530] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 736.856284][T12530] ? is_bpf_text_address+0x26/0x2b0 [ 736.856309][T12530] ? kernel_text_address+0xa5/0xe0 [ 736.856335][T12530] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 736.856354][T12530] __vmalloc_noprof+0xd2/0x120 [ 736.856373][T12530] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 736.856397][T12530] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 736.856417][T12530] ? bpf_prog_alloc+0x2a/0x1a0 [ 736.856439][T12530] bpf_prog_alloc+0x3c/0x1a0 [ 736.856462][T12530] bpf_prog_load+0x7f8/0x1c00 [ 736.856494][T12530] ? __pfx_bpf_prog_load+0x10/0x10 [ 736.856539][T12530] __sys_bpf+0xd0d/0xd90 [ 736.856575][T12530] ? __pfx___sys_bpf+0x10/0x10 [ 736.856598][T12530] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 736.856628][T12530] ? rt_mutex_slowunlock+0x219/0x460 [ 736.856667][T12530] ? ksys_write+0x248/0x270 [ 736.856694][T12530] ? __pfx_ksys_write+0x10/0x10 [ 736.856722][T12530] __x64_sys_bpf+0xba/0xd0 [ 736.856750][T12530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.856772][T12530] do_syscall_64+0x174/0x580 [ 736.856795][T12530] ? trace_irq_disable+0x3b/0x140 [ 736.856814][T12530] ? clear_bhb_loop+0x40/0x90 [ 736.856837][T12530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.856857][T12530] RIP: 0033:0x7fa1d0b5e019 [ 736.856877][T12530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.856894][T12530] RSP: 002b:00007fa1cedb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 736.856913][T12530] RAX: ffffffffffffffda RBX: 00007fa1d0de5fa0 RCX: 00007fa1d0b5e019 [ 736.856928][T12530] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 736.856941][T12530] RBP: 00007fa1cedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 736.856953][T12530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.856966][T12530] R13: 00007fa1d0de6038 R14: 00007fa1d0de5fa0 R15: 00007ffe01694008 [ 736.856997][T12530] [ 736.857004][T12530] Mem-Info: [ 736.857013][T12530] active_anon:200 inactive_anon:22612 isolated_anon:0 [ 736.857013][T12530] active_file:26443 inactive_file:37536 isolated_file:0 [ 736.857013][T12530] unevictable:768 dirty:104 writeback:0 [ 736.857013][T12530] slab_reclaimable:12879 slab_unreclaimable:112181 [ 736.857013][T12530] mapped:39009 shmem:17727 pagetables:1446 [ 736.857013][T12530] sec_pagetables:0 bounce:0 [ 736.857013][T12530] kernel_misc_reclaimable:0 [ 736.857013][T12530] free:1253751 free_pcp:8821 free_cma:0 [ 736.857066][T12530] Node 0 active_anon:800kB inactive_anon:90448kB active_file:105432kB inactive_file:150024kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:155792kB dirty:416kB writeback:0kB shmem:69372kB kernel_stack:13728kB pagetables:5636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 736.857136][T12530] Node 1 active_anon:0kB inactive_anon:0kB active_file:340kB inactive_file:120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:244kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 736.857182][T12530] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 736.857239][T12530] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 736.857342][T12530] Node 0 DMA32 free:1073360kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:800kB inactive_anon:90448kB active_file:105432kB inactive_file:150024kB unevictable:1536kB writepending:416kB zspages:0kB present:3129332kB managed:2560556kB mlocked:0kB bounce:0kB free_pcp:32552kB local_pcp:4180kB free_cma:0kB [ 736.857402][T12530] lowmem_reserve[]: 0 0 1 1 1 [ 736.857433][T12530] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 736.857488][T12530] lowmem_reserve[]: 0 0 0 0 0 [ 736.857519][T12530] Node 1 Normal free:3926284kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:340kB inactive_file:120kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2716kB local_pcp:0kB free_cma:0kB [ 736.857585][T12530] lowmem_reserve[]: 0 0 0 0 0 [ 736.857616][T12530] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 736.857728][T12530] Node 0 DMA32: 815*4kB (UME) 519*8kB (UME) 441*16kB (UME) 450*32kB (UME) 161*64kB (UME) 227*128kB (UME) 46*256kB (UME) 36*512kB (UME) 4*1024kB (M) 6*2048kB (UM) 234*4096kB (UM) = 1073284kB [ 736.857882][T12530] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 736.857976][T12530] Node 1 Normal: 3*4kB (M) 0*8kB 4*16kB (U) 10*32kB (UM) 8*64kB (UM) 5*128kB (UM) 5*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (M) 956*4096kB (UM) = 3926284kB [ 736.858119][T12530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 736.858136][T12530] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 736.858152][T12530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 736.858167][T12530] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 736.858183][T12530] 81702 total pagecache pages [ 736.858192][T12530] 0 pages in swap cache [ 736.858198][T12530] Free swap = 124996kB [ 736.858206][T12530] Total swap = 124996kB [ 736.858214][T12530] 2097051 pages RAM [ 736.858221][T12530] 0 pages HighMem/MovableOnly [ 736.858229][T12530] 424834 pages reserved [ 736.858236][T12530] 0 pages cma reserved [ 737.395694][ T5897] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 737.545759][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 737.551711][ T5897] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 737.551742][ T5897] usb 4-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 737.551768][ T5897] usb 4-1: config 1 interface 0 has no altsetting 0 [ 737.687197][ T5897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 737.687230][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.687249][ T5897] usb 4-1: Product: ᐪ [ 737.687263][ T5897] usb 4-1: Manufacturer: 頶ቖ哬牕笆蟸䜁䴰簗ꭧ뀭찟꠮᳌蔅瀒䤼몾溦ਙ淭޷Ꮩ䗌袾茔最틉㇏澛鴪龍鑦绞哯컮籯ﶺⅶ獼诟܃叆ּ邰읦闸沚㿺硜呴发䞽飻鰓흔搔漻、ড歵佶晵㸀〙鴷눂囈鹠觅巆౷㎚㇑㞰ˡມ윊좍ᴟĄ䊿鈚闩ଶ뇠ⶰ猴⡯牢ꤛ瀔瀓줓鹠 [ 737.727809][T12537] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 738.152026][ T67] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.262261][T12555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1967'. [ 738.284351][ T5897] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 4 proto 1 vid 0x0525 pid 0xA4A8 [ 738.334358][ T5897] usb 4-1: USB disconnect, device number 36 [ 738.444900][ T5897] usblp0: removed [ 738.461207][T12557] FAULT_INJECTION: forcing a failure. [ 738.461207][T12557] name failslab, interval 1, probability 0, space 0, times 0 [ 738.461248][T12557] CPU: 1 UID: 0 PID: 12557 Comm: syz.5.1968 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 738.461284][T12557] Tainted: [L]=SOFTLOCKUP [ 738.461292][T12557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.461306][T12557] Call Trace: [ 738.461315][T12557] [ 738.461325][T12557] dump_stack_lvl+0xe8/0x150 [ 738.461365][T12557] should_fail_ex+0x467/0x600 [ 738.461404][T12557] should_failslab+0xa8/0x100 [ 738.461434][T12557] kmem_cache_alloc_noprof+0xa4/0x650 [ 738.461457][T12557] ? fcntl_getlk+0x32/0xaa0 [ 738.461556][T12557] ? fcntl_getlk+0x32/0xaa0 [ 738.461588][T12557] fcntl_getlk+0x32/0xaa0 [ 738.461626][T12557] do_fcntl+0xb8a/0x19e0 [ 738.461658][T12557] ? smack_file_fcntl+0x150/0x320 [ 738.461680][T12557] ? __pfx_do_fcntl+0x10/0x10 [ 738.461707][T12557] ? __pfx_smack_file_fcntl+0x10/0x10 [ 738.461739][T12557] ? __fget_files+0x2a/0x420 [ 738.461770][T12557] ? bpf_lsm_file_fcntl+0x9/0x20 [ 738.461796][T12557] __se_sys_fcntl+0xcb/0x160 [ 738.461823][T12557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.461848][T12557] do_syscall_64+0x174/0x580 [ 738.461875][T12557] ? trace_irq_disable+0x3b/0x140 [ 738.461899][T12557] ? clear_bhb_loop+0x40/0x90 [ 738.461926][T12557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.461947][T12557] RIP: 0033:0x7fa1d0b5e019 [ 738.461969][T12557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.461986][T12557] RSP: 002b:00007fa1cedb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 738.462010][T12557] RAX: ffffffffffffffda RBX: 00007fa1d0de5fa0 RCX: 00007fa1d0b5e019 [ 738.462026][T12557] RDX: 0000200000000080 RSI: 0000000000000024 RDI: 0000000000000006 [ 738.462041][T12557] RBP: 00007fa1cedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 738.462053][T12557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.462067][T12557] R13: 00007fa1d0de6038 R14: 00007fa1d0de5fa0 R15: 00007ffe01694008 [ 738.462102][T12557] [ 739.372802][T12581] FAULT_INJECTION: forcing a failure. [ 739.372802][T12581] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 739.372842][T12581] CPU: 0 UID: 0 PID: 12581 Comm: syz.3.1976 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 739.372873][T12581] Tainted: [L]=SOFTLOCKUP [ 739.372882][T12581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 739.372894][T12581] Call Trace: [ 739.372903][T12581] [ 739.372912][T12581] dump_stack_lvl+0xe8/0x150 [ 739.372950][T12581] should_fail_ex+0x467/0x600 [ 739.372988][T12581] prepare_alloc_pages+0x223/0x690 [ 739.373021][T12581] __alloc_frozen_pages_noprof+0x12f/0x380 [ 739.373052][T12581] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 739.373098][T12581] __alloc_pages_noprof+0x10/0x100 [ 739.373125][T12581] alloc_pages_bulk_noprof+0x67e/0x890 [ 739.373155][T12581] ? copy_splice_read+0x16f/0xab0 [ 739.373179][T12581] ? copy_splice_read+0x16f/0xab0 [ 739.373209][T12581] copy_splice_read+0x19f/0xab0 [ 739.373244][T12581] ? rcu_is_watching+0x15/0xb0 [ 739.373272][T12581] ? __pfx_copy_splice_read+0x10/0x10 [ 739.373294][T12581] ? trace_kmalloc+0x2a/0xf0 [ 739.373317][T12581] ? look_up_lock_class+0x57/0x110 [ 739.373345][T12581] ? register_lock_class+0x31/0x2e0 [ 739.373370][T12581] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 739.373403][T12581] ? alloc_pipe_info+0x35d/0x4c0 [ 739.373430][T12581] ? __pfx_filemap_splice_read+0x10/0x10 [ 739.373566][T12581] splice_direct_to_actor+0x4c1/0xcc0 [ 739.373598][T12581] ? kstrtouint+0x6e/0xe0 [ 739.373642][T12581] ? __pfx_direct_splice_actor+0x10/0x10 [ 739.373665][T12581] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 739.373702][T12581] do_splice_direct+0x19b/0x2a0 [ 739.373730][T12581] ? __pfx_do_splice_direct+0x10/0x10 [ 739.373755][T12581] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 739.373784][T12581] ? bpf_lsm_file_permission+0x9/0x20 [ 739.373813][T12581] ? security_file_permission+0x75/0x260 [ 739.373841][T12581] ? rw_verify_area+0x209/0x4d0 [ 739.373872][T12581] do_sendfile+0x540/0x7e0 [ 739.373893][T12581] ? lockdep_hardirqs_on+0x7a/0x110 [ 739.373930][T12581] ? __pfx_do_sendfile+0x10/0x10 [ 739.373964][T12581] __se_sys_sendfile64+0x144/0x1a0 [ 739.373999][T12581] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 739.374040][T12581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.374064][T12581] do_syscall_64+0x174/0x580 [ 739.374091][T12581] ? trace_irq_disable+0x3b/0x140 [ 739.374113][T12581] ? clear_bhb_loop+0x40/0x90 [ 739.374139][T12581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.374161][T12581] RIP: 0033:0x7f529fbae019 [ 739.374184][T12581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.374204][T12581] RSP: 002b:00007f529de06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 739.374229][T12581] RAX: ffffffffffffffda RBX: 00007f529fe35fa0 RCX: 00007f529fbae019 [ 739.374245][T12581] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 739.374258][T12581] RBP: 00007f529de06090 R08: 0000000000000000 R09: 0000000000000000 [ 739.374272][T12581] R10: 252c000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.374287][T12581] R13: 00007f529fe36038 R14: 00007f529fe35fa0 R15: 00007ffff33818a8 [ 739.374321][T12581] [ 742.269884][T12604] netlink: 680 bytes leftover after parsing attributes in process `syz.3.1982'. [ 742.572595][ T6973] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 742.594552][ T6973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 742.645074][ T6973] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 742.679486][ T6973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 742.683363][ T6973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 742.714495][T12611] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 742.926254][ T67] bridge_slave_1: left allmulticast mode [ 742.926307][ T67] bridge_slave_1: left promiscuous mode [ 742.926616][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.113222][ T6973] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 743.160450][ T6973] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 743.164783][ T6973] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 743.169918][ T6973] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 743.172526][ T6973] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 743.483532][ T67] bridge_slave_0: left allmulticast mode [ 743.483591][ T67] bridge_slave_0: left promiscuous mode [ 743.483857][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.926983][ T6973] Bluetooth: hci0: command tx timeout [ 745.101090][ T6973] Bluetooth: hci3: Invalid handle: 0x91a5 > 0x0eff [ 745.336074][ T6973] Bluetooth: hci6: command tx timeout [ 745.746674][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.827431][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.874639][ T67] bond0 (unregistering): Released all slaves [ 745.986545][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 746.647857][T12716] FAULT_INJECTION: forcing a failure. [ 746.647857][T12716] name failslab, interval 1, probability 0, space 0, times 0 [ 746.647899][T12716] CPU: 1 UID: 0 PID: 12716 Comm: syz.5.2012 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 746.647930][T12716] Tainted: [L]=SOFTLOCKUP [ 746.647939][T12716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 746.647952][T12716] Call Trace: [ 746.647961][T12716] [ 746.647972][T12716] dump_stack_lvl+0xe8/0x150 [ 746.648012][T12716] should_fail_ex+0x467/0x600 [ 746.648057][T12716] should_failslab+0xa8/0x100 [ 746.648087][T12716] __kmalloc_cache_noprof+0xa0/0x6b0 [ 746.648113][T12716] ? ceph_get_tree+0x1b7/0x1a40 [ 746.648219][T12716] ? ceph_get_tree+0x1b7/0x1a40 [ 746.648251][T12716] ceph_get_tree+0x1b7/0x1a40 [ 746.648275][T12716] ? cap_capable+0x123/0x460 [ 746.648300][T12716] ? safesetid_security_capable+0xa9/0x1a0 [ 746.648333][T12716] vfs_get_tree+0x92/0x2a0 [ 746.648366][T12716] vfs_cmd_create+0xa2/0x200 [ 746.648403][T12716] __se_sys_fsconfig+0x6bf/0x810 [ 746.648441][T12716] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 746.648471][T12716] ? ksys_write+0x248/0x270 [ 746.648502][T12716] ? __pfx_ksys_write+0x10/0x10 [ 746.648537][T12716] ? __x64_sys_fsconfig+0x20/0xc0 [ 746.648567][T12716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.648592][T12716] do_syscall_64+0x174/0x580 [ 746.648621][T12716] ? trace_irq_disable+0x3b/0x140 [ 746.648645][T12716] ? clear_bhb_loop+0x40/0x90 [ 746.648673][T12716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.648695][T12716] RIP: 0033:0x7fa1d0b5e019 [ 746.648716][T12716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.648735][T12716] RSP: 002b:00007fa1cedb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 746.648787][T12716] RAX: ffffffffffffffda RBX: 00007fa1d0de5fa0 RCX: 00007fa1d0b5e019 [ 746.648805][T12716] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 746.648818][T12716] RBP: 00007fa1cedb6090 R08: 0000000000000000 R09: 0000000000000000 [ 746.648833][T12716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.648846][T12716] R13: 00007fa1d0de6038 R14: 00007fa1d0de5fa0 R15: 00007ffe01694008 [ 746.648883][T12716] [ 746.740390][ T9] libceph: connect (1)[c::]:6789 error -101 [ 746.740591][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 746.773495][ T9] libceph: connect (1)[c::]:6789 error -101 [ 746.773696][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 746.798235][T12711] ceph: No mds server is up or the cluster is laggy [ 747.034749][ T6973] Bluetooth: hci0: command tx timeout [ 747.052750][ T197] libceph: connect (1)[c::]:6789 error -101 [ 747.052948][ T197] libceph: mon0 (1)[c::]:6789 connect error [ 747.444094][ T6973] Bluetooth: hci6: command tx timeout [ 747.556027][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.681767][T12733] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5614] was attempted by " [ 749.085733][ T6973] Bluetooth: hci0: command tx timeout [ 749.385764][ T6540] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 750.435813][ T6973] Bluetooth: hci6: command tx timeout [ 750.528429][ T6540] usb 4-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 750.528464][ T6540] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 750.528519][ T6540] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 750.531674][ T6540] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 750.531707][ T6540] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.531738][ T6540] usb 4-1: Product: syz [ 750.531755][ T6540] usb 4-1: Manufacturer: syz [ 750.531770][ T6540] usb 4-1: SerialNumber: syz [ 750.703670][ T6540] cdc_ncm 4-1:1.0: skipping garbage [ 750.703698][ T6540] usb 4-1: selecting invalid altsetting 1 [ 751.165717][ T6973] Bluetooth: hci0: command tx timeout [ 751.244373][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 751.486329][T12764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.491537][T12764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.509792][ T6540] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 751.510316][ T6540] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 751.523427][ T6540] usb 4-1: selecting invalid altsetting 1 [ 751.523493][ T6540] cdc_ncm 4-1:1.0: bind() failure [ 751.557049][ T6540] usb 4-1: USB disconnect, device number 37 [ 752.446476][ T6973] Bluetooth: hci6: command tx timeout [ 752.535998][T12607] wlan0 speed is unknown, defaulting to 1000 [ 752.768754][T12820] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 753.358941][ T6973] Bluetooth: hci5: unexpected event for opcode 0x201c [ 753.548026][T12612] wlan0 speed is unknown, defaulting to 1000 [ 753.595722][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 753.745738][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 753.748526][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.750387][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 753.750417][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 753.750440][ T9] usb 6-1: Manufacturer: syz [ 753.802001][ T9] usb 6-1: config 0 descriptor?? [ 753.921221][T12842] FAULT_INJECTION: forcing a failure. [ 753.921221][T12842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.921262][T12842] CPU: 1 UID: 0 PID: 12842 Comm: syz.1.2055 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 753.921293][T12842] Tainted: [L]=SOFTLOCKUP [ 753.921302][T12842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 753.921316][T12842] Call Trace: [ 753.921325][T12842] [ 753.921338][T12842] dump_stack_lvl+0xe8/0x150 [ 753.921378][T12842] should_fail_ex+0x467/0x600 [ 753.921419][T12842] _copy_to_user+0x31/0xb0 [ 753.921449][T12842] simple_read_from_buffer+0xe1/0x170 [ 753.921481][T12842] proc_fail_nth_read+0x1be/0x230 [ 753.921511][T12842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 753.921540][T12842] ? rw_verify_area+0x250/0x4d0 [ 753.921570][T12842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 753.921594][T12842] vfs_read+0x219/0xa90 [ 753.921630][T12842] ? __pfx_vfs_read+0x10/0x10 [ 753.921668][T12842] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 753.921699][T12842] ? lockdep_hardirqs_on+0x7a/0x110 [ 753.921728][T12842] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 753.921757][T12842] ? mutex_lock_nested+0x152/0x1d0 [ 753.921778][T12842] ? fdget_pos+0x252/0x320 [ 753.921812][T12842] ksys_read+0x156/0x270 [ 753.921842][T12842] ? __pfx_ksys_read+0x10/0x10 [ 753.921879][T12842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.921903][T12842] do_syscall_64+0x174/0x580 [ 753.921931][T12842] ? trace_irq_disable+0x3b/0x140 [ 753.921954][T12842] ? clear_bhb_loop+0x40/0x90 [ 753.921982][T12842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.922004][T12842] RIP: 0033:0x7f2fbe6ce84e [ 753.922025][T12842] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 753.922043][T12842] RSP: 002b:00007f2fbc965fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 753.922068][T12842] RAX: ffffffffffffffda RBX: 00007f2fbc9666c0 RCX: 00007f2fbe6ce84e [ 753.922085][T12842] RDX: 000000000000000f RSI: 00007f2fbc9660a0 RDI: 0000000000000004 [ 753.922100][T12842] RBP: 00007f2fbc966090 R08: 0000000000000000 R09: 0000000000000000 [ 753.922113][T12842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.922127][T12842] R13: 00007f2fbe996038 R14: 00007f2fbe995fa0 R15: 00007ffc08040d58 [ 753.922163][T12842] [ 754.046803][ T5729] usb 6-1: USB disconnect, device number 12 [ 754.230872][ T67] hsr_slave_0: left promiscuous mode [ 754.487476][ T67] hsr_slave_1: left promiscuous mode [ 754.488795][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.488824][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.600663][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.600692][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.934592][ T67] veth1_macvtap: left promiscuous mode [ 755.024360][ T67] veth0_macvtap: left promiscuous mode [ 755.024713][ T67] veth1_vlan: left promiscuous mode [ 755.024956][ T67] veth0_vlan: left promiscuous mode [ 756.364044][T12879] FAULT_INJECTION: forcing a failure. [ 756.364044][T12879] name failslab, interval 1, probability 0, space 0, times 0 [ 756.364095][T12879] CPU: 1 UID: 0 PID: 12879 Comm: syz.5.2067 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 756.364126][T12879] Tainted: [L]=SOFTLOCKUP [ 756.364134][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 756.364147][T12879] Call Trace: [ 756.364156][T12879] [ 756.364166][T12879] dump_stack_lvl+0xe8/0x150 [ 756.364206][T12879] should_fail_ex+0x467/0x600 [ 756.364246][T12879] should_failslab+0xa8/0x100 [ 756.364276][T12879] kmem_cache_alloc_node_noprof+0xae/0x670 [ 756.364302][T12879] ? dup_task_struct+0x52/0x8f0 [ 756.364405][T12879] ? dup_task_struct+0x52/0x8f0 [ 756.364440][T12879] dup_task_struct+0x52/0x8f0 [ 756.364466][T12879] ? rt_spin_unlock+0x163/0x200 [ 756.364497][T12879] copy_process+0x820/0x4390 [ 756.364560][T12879] ? __pfx_copy_process+0x10/0x10 [ 756.364603][T12879] vhost_task_create+0x1f9/0x380 [ 756.364677][T12879] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 756.364731][T12879] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 756.364758][T12879] ? __pfx_vhost_task_create+0x10/0x10 [ 756.364801][T12879] ? __pfx_vhost_task_fn+0x10/0x10 [ 756.364839][T12879] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 756.364868][T12879] ? lockdep_hardirqs_on+0x7a/0x110 [ 756.364897][T12879] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 756.364926][T12879] ? mutex_lock_nested+0x152/0x1d0 [ 756.364948][T12879] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 756.365002][T12879] kvm_mmu_post_init_vm+0x147/0x2b0 [ 756.365033][T12879] kvm_arch_vcpu_ioctl_run+0x103/0x2010 [ 756.365133][T12879] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 756.365160][T12879] ? do_raw_spin_lock+0x12b/0x2f0 [ 756.365208][T12879] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 756.365237][T12879] ? lockdep_hardirqs_on+0x7a/0x110 [ 756.365267][T12879] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 756.365296][T12879] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 756.365320][T12879] ? do_raw_spin_lock+0x12b/0x2f0 [ 756.365350][T12879] ? lock_acquire+0x106/0x350 [ 756.365376][T12879] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 756.365411][T12879] ? rt_write_unlock+0x19c/0x360 [ 756.365441][T12879] ? rt_write_unlock+0x1a8/0x360 [ 756.365469][T12879] kvm_vcpu_ioctl+0xa64/0xfe0 [ 756.365533][T12879] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 756.365554][T12879] ? hook_file_ioctl+0x1f3/0x600 [ 756.365588][T12879] ? __asan_memset+0x22/0x50 [ 756.365618][T12879] ? smack_file_ioctl+0x331/0x360 [ 756.365645][T12879] ? __pfx_smack_file_ioctl+0x10/0x10 [ 756.365682][T12879] ? __fget_files+0x2a/0x420 [ 756.365705][T12879] ? __fget_files+0x3a8/0x420 [ 756.365727][T12879] ? __fget_files+0x2a/0x420 [ 756.365754][T12879] ? bpf_lsm_file_ioctl+0x9/0x20 [ 756.365776][T12879] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 756.365802][T12879] __se_sys_ioctl+0xff/0x170 [ 756.365831][T12879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.365855][T12879] do_syscall_64+0x174/0x580 [ 756.365883][T12879] ? trace_irq_disable+0x3b/0x140 [ 756.365907][T12879] ? clear_bhb_loop+0x40/0x90 [ 756.365934][T12879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.365957][T12879] RIP: 0033:0x7fa1d0b5e019 [ 756.365979][T12879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.365999][T12879] RSP: 002b:00007fa1ced54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.366024][T12879] RAX: ffffffffffffffda RBX: 00007fa1d0de6090 RCX: 00007fa1d0b5e019 [ 756.366042][T12879] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 756.366056][T12879] RBP: 00007fa1ced54090 R08: 0000000000000000 R09: 0000000000000000 [ 756.366080][T12879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.366093][T12879] R13: 00007fa1d0de6128 R14: 00007fa1d0de6090 R15: 00007ffe01694008 [ 756.366132][T12879] [ 757.009234][T12883] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2069'. [ 757.009260][T12883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2069'. [ 758.596211][ T67] team0 (unregistering): Port device team_slave_1 removed [ 758.706126][ T67] team0 (unregistering): Port device team_slave_0 removed [ 759.675795][ T197] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 759.825807][ T197] usb 4-1: Using ep0 maxpacket: 32 [ 759.830177][ T197] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 759.830211][ T197] usb 4-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 759.830241][ T197] usb 4-1: config 1 interface 0 has no altsetting 0 [ 759.833951][ T197] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 759.833982][ T197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.834005][ T197] usb 4-1: Product: ᐪ [ 759.834021][ T197] usb 4-1: Manufacturer: 頶ቖ哬牕笆蟸䜁䴰簗ꭧ뀭찟꠮᳌蔅瀒䤼몾溦ਙ淭޷Ꮩ䗌袾茔最틉㇏澛鴪龍鑦绞哯컮籯ﶺⅶ獼诟܃叆ּ邰읦闸沚㿺硜呴发䞽飻鰓흔搔漻、ড歵佶晵㸀〙鴷눂囈鹠觅巆౷㎚㇑㞰ˡມ윊좍ᴟĄ䊿鈚闩ଶ뇠ⶰ猴⡯牢ꤛ瀔瀓줓鹠 [ 760.024743][T12924] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 761.115433][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2096'. [ 761.536600][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2099'. [ 762.589497][ T197] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 4 proto 1 vid 0x0525 pid 0xA4A8 [ 762.600872][ T197] usb 4-1: USB disconnect, device number 38 [ 762.647913][ T197] usblp0: removed [ 763.004214][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2112'. [ 763.849790][ T67] bridge_slave_1: left allmulticast mode [ 763.849831][ T67] bridge_slave_1: left promiscuous mode [ 763.850129][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.898876][T13032] FAULT_INJECTION: forcing a failure. [ 763.898876][T13032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.898918][T13032] CPU: 1 UID: 0 PID: 13032 Comm: syz.1.2120 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 763.898950][T13032] Tainted: [L]=SOFTLOCKUP [ 763.898959][T13032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 763.898972][T13032] Call Trace: [ 763.898981][T13032] [ 763.898990][T13032] dump_stack_lvl+0xe8/0x150 [ 763.899030][T13032] should_fail_ex+0x467/0x600 [ 763.899071][T13032] _copy_to_user+0x31/0xb0 [ 763.899110][T13032] simple_read_from_buffer+0xe1/0x170 [ 763.899145][T13032] proc_fail_nth_read+0x1be/0x230 [ 763.899175][T13032] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 763.899204][T13032] ? rw_verify_area+0x250/0x4d0 [ 763.899232][T13032] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 763.899255][T13032] vfs_read+0x219/0xa90 [ 763.899292][T13032] ? __pfx_vfs_read+0x10/0x10 [ 763.899321][T13032] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 763.899352][T13032] ? lockdep_hardirqs_on+0x7a/0x110 [ 763.899379][T13032] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 763.899406][T13032] ? mutex_lock_nested+0x152/0x1d0 [ 763.899427][T13032] ? fdget_pos+0x252/0x320 [ 763.899460][T13032] ksys_read+0x156/0x270 [ 763.899490][T13032] ? __pfx_ksys_read+0x10/0x10 [ 763.899513][T13032] ? __pfx_evdev_ioctl+0x10/0x10 [ 763.899617][T13032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.899640][T13032] do_syscall_64+0x174/0x580 [ 763.899668][T13032] ? trace_irq_disable+0x3b/0x140 [ 763.899690][T13032] ? clear_bhb_loop+0x40/0x90 [ 763.899717][T13032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.899739][T13032] RIP: 0033:0x7f2fbe6ce84e [ 763.899759][T13032] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 763.899778][T13032] RSP: 002b:00007f2fbc965fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 763.899803][T13032] RAX: ffffffffffffffda RBX: 00007f2fbc9666c0 RCX: 00007f2fbe6ce84e [ 763.899820][T13032] RDX: 000000000000000f RSI: 00007f2fbc9660a0 RDI: 0000000000000004 [ 763.899834][T13032] RBP: 00007f2fbc966090 R08: 0000000000000000 R09: 0000000000000000 [ 763.899849][T13032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.899862][T13032] R13: 00007f2fbe996038 R14: 00007f2fbe995fa0 R15: 00007ffc08040d58 [ 763.899898][T13032] [ 764.240883][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2121'. [ 764.375911][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2121'. [ 764.476867][T13039] netlink: 'syz.3.2121': attribute type 1 has an invalid length. [ 764.476947][T13039] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2121'. [ 765.326776][ T67] bridge_slave_0: left allmulticast mode [ 765.326804][ T67] bridge_slave_0: left promiscuous mode [ 765.326982][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.796620][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.916315][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.977627][ T67] bond0 (unregistering): Released all slaves [ 766.061762][T13023] vlan2: entered allmulticast mode [ 766.061786][T13023] bond0: entered allmulticast mode [ 766.061801][T13023] bond_slave_0: entered allmulticast mode [ 766.061827][T13023] bond_slave_1: entered allmulticast mode [ 766.495085][T13057] FAULT_INJECTION: forcing a failure. [ 766.495085][T13057] name failslab, interval 1, probability 0, space 0, times 0 [ 766.495111][T13057] CPU: 1 UID: 0 PID: 13057 Comm: syz.3.2129 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 766.495129][T13057] Tainted: [L]=SOFTLOCKUP [ 766.495134][T13057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 766.495142][T13057] Call Trace: [ 766.495147][T13057] [ 766.495153][T13057] dump_stack_lvl+0xe8/0x150 [ 766.495177][T13057] should_fail_ex+0x467/0x600 [ 766.495200][T13057] should_failslab+0xa8/0x100 [ 766.495217][T13057] __kmalloc_noprof+0xfe/0x780 [ 766.495230][T13057] ? security_task_alloc+0x4d/0x330 [ 766.495245][T13057] ? security_task_alloc+0x4d/0x330 [ 766.495268][T13057] ? copy_process+0xd3c/0x4390 [ 766.495297][T13057] security_task_alloc+0x4d/0x330 [ 766.495316][T13057] ? copy_process+0xd3c/0x4390 [ 766.495330][T13057] copy_process+0x1c4d/0x4390 [ 766.495350][T13057] ? copy_process+0xd3c/0x4390 [ 766.495375][T13057] ? __pfx_copy_process+0x10/0x10 [ 766.495408][T13057] vhost_task_create+0x1f9/0x380 [ 766.495438][T13057] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 766.495463][T13057] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 766.495497][T13057] ? __pfx_vhost_task_create+0x10/0x10 [ 766.495540][T13057] ? __pfx_vhost_task_fn+0x10/0x10 [ 766.495576][T13057] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 766.495605][T13057] ? lockdep_hardirqs_on+0x7a/0x110 [ 766.495633][T13057] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 766.495662][T13057] ? mutex_lock_nested+0x152/0x1d0 [ 766.495683][T13057] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 766.495712][T13057] kvm_mmu_post_init_vm+0x147/0x2b0 [ 766.495740][T13057] kvm_arch_vcpu_ioctl_run+0x103/0x2010 [ 766.495786][T13057] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 766.495810][T13057] ? do_raw_spin_lock+0x12b[ 766.495810][T13057] ? do_raw_spin_lock+0x12b/0x2f0 [ 766.495855][T13057] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 766.495882][T13057] ? lockdep_hardirqs_on+0x7a/0x110 [ 766.495908][T13057] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 766.495938][T13057] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 766.495961][T13057] ? do_raw_spin_lock+0x12b/0x2f0 [ 766.495988][T13057] ? lock_acquire+0x106/0x350 [ 766.496012][T13057] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 766.496044][T13057] ? rt_write_unlock+0x19c/0x360 [ 766.496072][T13057] ? rt_write_unlock+0x1a8/0x360 [ 766.496099][T13057] kvm_vcpu_ioctl+0xa64/0xfe0 [ 766.496131][T13057] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 766.496153][T13057] ? hook_file_ioctl+0x1f3/0x600 [ 766.496190][T13057] ? __asan_memset+0x22/0x50 [ 766.496221][T13057] ? smack_file_ioctl+0x331/0x360 [ 766.496248][T13057] ? __pfx_smack_file_ioctl+0x10/0x10 [ 766.496284][T13057] ? __fget_files+0x2a/0x420 [ 766.496308][T13057] ? __fget_files+0x3a8/0x420 [ 766.496330][T13057] ? __fget_files+0x2a/0x420 [ 766.496358][T13057] ? bpf_lsm_file_ioctl+0x9/0x20 [ 766.496380][T13057] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 766.496404][T13057] __se_sys_ioctl+0xff/0x170 [ 766.496431][T13057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.496456][T13057] do_syscall_64+0x174/0x580 [ 766.496491][T13057] ? trace_irq_disable+0x3b/0x140 [ 766.496513][T13057] ? clear_bhb_loop+0x40/0x90 [ 766.496541][T13057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.496563][T13057] RIP: 0033:0x7f529fbae019 [ 766.496586][T13057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.496604][T13057] RSP: 002b:00007f529dde5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 766.496649][T13057] RAX: ffffffffffffffda RBX: 00007f529fe36090 RCX: 00007f529fbae019 [ 766.496667][T13057] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 766.496681][T13057] RBP: 00007f529dde5090 R08: 0000000000000000 R09: 0000000000000000 [ 766.496695][T13057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.496709][T13057] R13: 00007f529fe36128 R14: 00007f529fe36090 R15: 00007ffff33818a8 [ 766.496746][T13057] [ 766.685807][ T38] INFO: task syz.4.1436:10752 blocked for more than 143 seconds. [ 766.685834][ T38] Tainted: G L syzkaller #0 [ 766.685845][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 766.685855][ T38] task:syz.4.1436 state:D stack:27504 pid:10752 tgid:10747 ppid:5606 task_flags:0x400140 flags:0x00080002 [ 766.685913][ T38] Call Trace: [ 766.685921][ T38] [ 766.685934][ T38] __schedule+0x16dc/0x5500 [ 766.685985][ T38] ? __pfx___schedule+0x10/0x10 [ 766.686011][ T38] ? irqentry_exit+0x218/0x8f0 [ 766.686039][ T38] ? __pfx___schedule+0x10/0x10 [ 766.686059][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 766.686097][ T38] rt_mutex_schedule+0x76/0xf0 [ 766.686121][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 766.686151][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 766.686175][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 766.686198][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 766.686220][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 766.686252][ T38] ? write_versions+0x95/0xe30 [ 766.686392][ T38] ? write_versions+0x95/0xe30 [ 766.686425][ T38] ? write_versions+0x95/0xe30 [ 766.686449][ T38] mutex_lock_nested+0x168/0x1d0 [ 766.686482][ T38] write_versions+0x95/0xe30 [ 766.686625][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 766.686657][ T38] ? __pfx_write_versions+0x10/0x10 [ 766.686691][ T38] ? __pfx_write_versions+0x10/0x10 [ 766.686727][ T38] nfsctl_transaction_write+0x112/0x160 [ 766.686757][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 766.686785][ T38] vfs_write+0x29f/0xbb0 [ 766.686819][ T38] ? __pfx_vfs_write+0x10/0x10 [ 766.686846][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 766.686871][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 766.686896][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 766.686921][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 766.686940][ T38] ? fdget_pos+0x252/0x320 [ 766.686970][ T38] ksys_write+0x156/0x270 [ 766.686998][ T38] ? __pfx_ksys_write+0x10/0x10 [ 766.687031][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.687053][ T38] do_syscall_64+0x174/0x580 [ 766.687078][ T38] ? trace_irq_disable+0x3b/0x140 [ 766.687099][ T38] ? clear_bhb_loop+0x40/0x90 [ 766.687138][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.687158][ T38] RIP: 0033:0x7f9f7bd7e019 [ 766.687178][ T38] RSP: 002b:00007f9f79fb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 766.687199][ T38] RAX: ffffffffffffffda RBX: 00007f9f7c006090 RCX: 00007f9f7bd7e019 [ 766.687214][ T38] RDX: 0000000000000002 RSI: 0000200000000450 RDI: 0000000000000004 [ 766.687249][ T38] RBP: 00007f9f7be1500c R08: 0000000000000000 R09: 0000000000000000 [ 766.687262][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.687274][ T38] R13: 00007f9f7c006128 R14: 00007f9f7c006090 R15: 00007fff2b5c68e8 [ 766.687307][ T38] [ 766.687316][ T38] INFO: task syz.4.1436:10762 blocked for more than 143 seconds. [ 766.687333][ T38] Tainted: G L syzkaller #0 [ 766.687344][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 766.687352][ T38] task:syz.4.1436 state:D stack:28424 pid:10762 tgid:10747 ppid:5606 task_flags:0x400040 flags:0x00080002 [ 766.687407][ T38] Call Trace: [ 766.687414][ T38] [ 766.687425][ T38] __schedule+0x16dc/0x5500 [ 766.687484][ T38] ? __pfx___schedule+0x10/0x10 [ 766.687523][ T38] rt_mutex_schedule+0x76/0xf0 [ 766.687545][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 766.687581][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 766.687727][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 766.687750][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 766.687783][ T38] ? write_threads+0x3a0/0x5a0 [ 766.687813][ T38] ? write_threads+0x3a0/0x5a0 [ 766.687845][ T38] ? write_threads+0x3a0/0x5a0 [ 766.687869][ T38] mutex_lock_nested+0x168/0x1d0 [ 766.687894][ T38] write_threads+0x3a0/0x5a0 [ 766.687919][ T38] ? __might_fault+0xaf/0x130 [ 766.687942][ T38] ? __pfx_write_threads+0x10/0x10 [ 766.687988][ T38] ? _copy_from_user+0x94/0xb0 [ 766.688013][ T38] ? simple_transaction_get+0x130/0x170 [ 766.688038][ T38] nfsctl_transaction_write+0x112/0x160 [ 766.688066][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 766.688093][ T38] vfs_write+0x29f/0xbb0 [ 766.688125][ T38] ? __pfx_vfs_write+0x10/0x10 [ 766.688153][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 766.688178][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 766.688202][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 766.688227][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 766.688245][ T38] ? fdget_pos+0x252/0x320 [ 766.688274][ T38] ksys_write+0x156/0x270 [ 766.688301][ T38] ? __pfx_ksys_write+0x10/0x10 [ 766.688334][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.688355][ T38] do_syscall_64+0x174/0x580 [ 766.688379][ T38] ? trace_irq_disable+0x3b/0x140 [ 766.688399][ T38] ? clear_bhb_loop+0x40/0x90 [ 766.688422][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.688441][ T38] RIP: 0033:0x7f9f7bd7e019 [ 766.688458][ T38] RSP: 002b:00007f9f79b71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 766.688485][ T38] RAX: ffffffffffffffda RBX: 00007f9f7c006270 RCX: 00007f9f7bd7e019 [ 766.688499][ T38] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000006 [ 766.688512][ T38] RBP: 00007f9f7be1500c R08: 0000000000000000 R09: 0000000000000000 [ 766.688525][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.688537][ T38] R13: 00007f9f7c006308 R14: 00007f9f7c006270 R15: 00007fff2b5c68e8 [ 766.688569][ T38] [ 766.688595][ T38] [ 766.688595][ T38] Showing all locks held in the system: [ 766.688642][ T38] 4 locks held by pr/legacy/17: [ 766.688677][ T38] 1 lock held by khungtaskd/38: [ 766.688688][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 766.689089][ T38] 7 locks held by kworker/u8:5/67: [ 766.689127][ T38] 2 locks held by dhcpcd/5260: [ 766.689138][ T38] #0: ffff888021aa8928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 766.689189][ T38] #1: ffffffff8f5b2578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14b0 [ 766.689238][ T38] 2 locks held by getty/5353: [ 766.689249][ T38] #0: ffff88823be1c8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 766.689345][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 766.689398][ T38] 1 lock held by syz-executor/8127: [ 766.689413][ T38] 3 locks held by syz.4.1436/10752: [ 766.689424][ T38] #0: ffff88803fb80528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 766.689470][ T38] #1: ffff888031924500 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 766.689537][ T38] #2: ffffffff8e4e95d8 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 766.689588][ T38] 3 locks held by syz.4.1436/10757: [ 766.689599][ T38] #0: ffff888038e59328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 766.689644][ T38] #1: ffff888031924500 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 766.689696][ T38] #2: ffffffff8e4e95d8 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 766.689746][ T38] 3 locks held by syz.4.1436/10762: [ 766.689757][ T38] #0: ffff88803bf9f128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 766.689801][ T38] #1: ffff888031924500 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 766.689853][ T38] #2: ffffffff8e4e95d8 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 766.690014][ T38] 1 lock held by syz-executor/11839: [ 766.690027][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 766.690082][ T38] 2 locks held by syz-executor/12607: [ 766.690094][ T38] 2 locks held by syz-executor/12612: [ 766.690105][ T38] #0: ffffffff8fb1b608 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 766.690158][ T38] #1: ffffffff8f5b2578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 766.690204][ T38] 3 locks held by kworker/u8:16/12658: [ 766.690215][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 766.690265][ T38] #1: ffffc90004877c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 766.690312][ T38] #2: ffffffff8f5b2578 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 766.690367][ T38] 1 lock held by syz.3.2129/13055: [ 766.690378][ T38] #0: ffff8880501b80e8 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_vm_ioctl_set_memory_region+0x67/0xa0 [ 766.690427][ T38] 2 locks held by syz.1.2128/13056: [ 766.690437][ T38] #0: ffffffff8ecedb48 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 766.690496][ T38] #1: ffffffff8f5b2578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 766.690556][ T38] 1 lock held by syz.1.2128/13060: [ 766.690568][ T38] #0: ffff88802e3940e8 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_vm_ioctl_set_memory_region+0x67/0xa0 [ 766.690636][ T38] [ 766.690642][ T38] ============================================= [ 766.690642][ T38] [ 766.690651][ T38] NMI backtrace for cpu 1 [ 766.690668][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 766.690694][ T38] Tainted: [L]=SOFTLOCKUP [ 766.690701][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 766.690711][ T38] Call Trace: [ 766.690719][ T38] [ 766.690727][ T38] dump_stack_lvl+0xe8/0x150 [ 766.690755][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 766.690808][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 766.690884][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 766.690908][ T38] sys_info+0x135/0x170 [ 766.690926][ T38] watchdog+0xfd7/0x1030 [ 766.690953][ T38] ? watchdog+0x1c7/0x1030 [ 766.690980][ T38] kthread+0x388/0x470 [ 766.691028][ T38] ? __pfx_watchdog+0x10/0x10 [ 766.691044][ T38] ? __pfx_kthread+0x10/0x10 [ 766.691071][ T38] ret_from_fork+0x514/0xb70 [ 766.691121][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 766.691148][ T38] ? __switch_to+0xc89/0x1420 [ 766.691192][ T38] ? __pfx_kthread+0x10/0x10 [ 766.691221][ T38] ret_from_fork_asm+0x1a/0x30 [ 766.691255][ T38] [ 766.691278][ T38] Sending NMI from CPU 1 to CPUs 0: [ 766.691306][ C0] NMI backtrace for cpu 0 [ 766.691323][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 766.691346][ C0] Tainted: [L]=SOFTLOCKUP [ 766.691353][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 766.691362][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 766.691447][ C0] Code: e8 ce 32 70 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3f a6 d9 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 766.691463][ C0] RSP: 0018:ffffc90000167a28 EFLAGS: 00000202 [ 766.691479][ C0] RAX: 1ffffffff33c9c00 RBX: 00000000000003fd RCX: 0000000000000000 [ 766.691492][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 766.691503][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 766.691514][ C0] R10: dffffc0000000000 R11: ffffffff8555a8a0 R12: dffffc0000000000 [ 766.691527][ C0] R13: 0000000000000000 R14: ffffffff99e4e300 R15: 0000000000000000 [ 766.691539][ C0] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 766.691553][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 766.691566][ C0] CR2: 00007f529de04558 CR3: 0000000038184000 CR4: 00000000003526f0 [ 766.691582][ C0] Call Trace: [ 766.691589][ C0] [ 766.691598][ C0] wait_for_lsr+0x190/0x300 [ 766.691622][ C0] serial8250_console_write+0x113a/0x1b40 [ 766.691650][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 766.691672][ C0] ? console_flush_one_record+0xfa/0xb50 [ 766.691713][ C0] ? console_flush_one_record+0x472/0xb50 [ 766.691731][ C0] console_flush_one_record+0x642/0xb50 [ 766.691750][ C0] ? console_flush_one_record+0xfa/0xb50 [ 766.691771][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 766.691789][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 766.691814][ C0] legacy_kthread_func+0x1b6/0x250 [ 766.691831][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 766.691847][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 766.691891][ C0] ? __kthread_parkme+0x71/0x1f0 [ 766.691912][ C0] ? __kthread_parkme+0x196/0x1f0 [ 766.691935][ C0] kthread+0x388/0x470 [ 766.691957][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 766.691973][ C0] ? __pfx_kthread+0x10/0x10 [ 766.692002][ C0] ret_from_fork+0x514/0xb70 [ 766.692027][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 766.692050][ C0] ? __switch_to+0xc89/0x1420 [ 766.692072][ C0] ? __pfx_kthread+0x10/0x10 [ 766.692095][ C0] ret_from_fork_asm+0x1a/0x30 [ 766.692118][ C0] [ 766.692557][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 766.692574][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 766.692599][ T38] Tainted: [L]=SOFTLOCKUP [ 766.692607][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 766.692618][ T38] Call Trace: [ 766.692626][ T38] [ 766.692634][ T38] vpanic+0x56c/0xa60 [ 766.692655][ T38] ? __pfx___schedule+0x10/0x10 [ 766.692679][ T38] ? __pfx_vpanic+0x10/0x10 [ 766.692707][ T38] panic+0xc5/0xd0 [ 766.692726][ T38] ? __pfx_panic+0x10/0x10 [ 766.692742][ T38] ? preempt_schedule_common+0x82/0xd0 [ 766.692766][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 766.692791][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 766.692815][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 766.692841][ T38] watchdog+0x1030/0x1030 [ 766.692867][ T38] ? watchdog+0x1c7/0x1030 [ 766.692892][ T38] kthread+0x388/0x470 [ 766.692919][ T38] ? __pfx_watchdog+0x10/0x10 [ 766.692935][ T38] ? __pfx_kthread+0x10/0x10 [ 766.692962][ T38] ret_from_fork+0x514/0xb70 [ 766.692993][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 766.693020][ T38] ? __switch_to+0xc89/0x1420 [ 766.693047][ T38] ? __pfx_kthread+0x10/0x10 [ 766.693075][ T38] ret_from_fork_asm+0x1a/0x30 [ 766.693109][ T38] [ 766.693407][ T38] Kernel Offset: disabled