last executing test programs: 16m8.718294475s ago: executing program 0 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) (fail_nth: 2) 16m7.392134511s ago: executing program 0 (id=303): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079192000000000007a000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f00000001c0)={0x0, 0x300}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029", @ANYRES64=r1], 0x108}}], 0x1, 0x20000014) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@base={0xa, 0x16, 0x800, 0x7f, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000000}, 0x50) socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000740)={0x1, 0x7}, 0x8) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1a, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x11003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) connect$can_bcm(r2, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) 16m5.82934746s ago: executing program 0 (id=312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x9000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x9000, 0x12000}) 16m5.32967299s ago: executing program 0 (id=317): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) unshare(0x400) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000040), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semop(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003d00010325bd7000fcffffff010000009b754a65e4c8f7"], 0x14}, 0x1, 0x0, 0x0, 0x885}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80002, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 16m3.036888301s ago: executing program 0 (id=320): unshare(0x22020400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0xe) 16m2.792066333s ago: executing program 0 (id=324): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x7f]}, 0x8) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000340)={0xed, &(0x7f0000000240)="5d7d729b19542f7798cdb5309c92b029a3a0641aadf9ffd5cee4fabee0d94df51bfcf889f281d89427ddcb30c582a5b6b78b441c13e126b25eccbd2bf693c89cca6eab8d12e47a7b6e01bcc9fd606b7acf8852bff0b1050a2ce9369dfa135ab7c23ef2e42cff3ff1b610698831629c12a6695c0ceb5f120ea219a15befd9056efb0bed7728557485a08ea985b17e5e526c4b05ccae4eb564332f8cf7e2219b2c06de543d69e30aea7afb6054f44c0dc0f48114ea6a49464ffe054caba51684dd5a6dcff363046ede18e4e546ef1953de2a8a638242b947a15c513df72d9459740e3e4808eb97878cd61631a7b1"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x2) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000001c0)=0x1, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/softlockup_count', 0x100, 0x100) readv(r2, &(0x7f00000011c0)=[{&(0x7f00000010c0)=""/149, 0x95}], 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4], 0x15) 15m46.904128872s ago: executing program 32 (id=324): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x7f]}, 0x8) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000340)={0xed, &(0x7f0000000240)="5d7d729b19542f7798cdb5309c92b029a3a0641aadf9ffd5cee4fabee0d94df51bfcf889f281d89427ddcb30c582a5b6b78b441c13e126b25eccbd2bf693c89cca6eab8d12e47a7b6e01bcc9fd606b7acf8852bff0b1050a2ce9369dfa135ab7c23ef2e42cff3ff1b610698831629c12a6695c0ceb5f120ea219a15befd9056efb0bed7728557485a08ea985b17e5e526c4b05ccae4eb564332f8cf7e2219b2c06de543d69e30aea7afb6054f44c0dc0f48114ea6a49464ffe054caba51684dd5a6dcff363046ede18e4e546ef1953de2a8a638242b947a15c513df72d9459740e3e4808eb97878cd61631a7b1"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x2) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000001c0)=0x1, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/softlockup_count', 0x100, 0x100) readv(r2, &(0x7f00000011c0)=[{&(0x7f00000010c0)=""/149, 0x95}], 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4], 0x15) 12m25.115617312s ago: executing program 4 (id=1323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000900)={0x0, 0x0, @pic={0x9, 0x4, 0xf, 0xe7, 0x6, 0x9, 0xf9, 0x9, 0xf1, 0xf0, 0x2, 0x3, 0x2, 0x5, 0x0, 0x7}}) (fail_nth: 1) 12m24.355082536s ago: executing program 4 (id=1327): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, r0, &(0x7f0000000100)='./file0\x00') syz_usb_connect(0x0, 0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) 12m23.683822636s ago: executing program 4 (id=1334): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sendfile(r0, r0, 0x0, 0x24002de8) 12m23.68274312s ago: executing program 4 (id=1335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001"], 0x1c}}, 0x0) 12m23.636712335s ago: executing program 4 (id=1336): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) listen(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0x1}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x1224, 0x2, 0x4d, 0xfffffff2, 0x5e, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x2c, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x8, 0x1000007, 0x3, 0x8001, 0xffff, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x4, 0x7, 0x103, 0x0, 0x5, 0x39, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x0, 0x21, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0xf2fe, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x7c, 0x5, 0x400, 0x1, 0x20000006, 0x2, 0xff, 0x1008, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x238, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x200008, 0x3, 0x4, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x2, 0xff], [0x3, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0xfffffffe, 0x40002, 0xf, 0x7, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x0, 0xfffffffb, 0x120000, 0x3, 0x4fa, 0xfffff1d1, 0x0, 0x3], [0x200009, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x7, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x7ff, 0x6, 0x1000001, 0x10000, 0x5, 0x2, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000200)="bd810781935d64d6d6907be75a9072bee61580c4d227c10e81790b13edb3b2ed0b2229fb4bbea6029c7860c1ab1c9618e721686a6d27a7c1bda36573501105eb", 0x40}], 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0xfffffffffffffff8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000580)=0xfffffffe, 0x4) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 12m22.650655716s ago: executing program 4 (id=1343): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettaction={0x28, 0x30, 0x1, 0x470af2b, 0x25dfdbfa, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c8c5}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x4000894) 12m7.291477287s ago: executing program 33 (id=1343): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettaction={0x28, 0x30, 0x1, 0x470af2b, 0x25dfdbfa, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c8c5}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x4000894) 2m29.667390776s ago: executing program 2 (id=4388): r0 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x10, {{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@rand_addr=0x64010101, 0x34ff, 0x0, 0x2}, {{@in6=@loopback, 0x3, 0x2b}, 0x0, @in6=@empty, 0x3503, 0x1, 0x0, 0x0, 0x8}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x3504, 0x4, 0x0, 0x4, 0x0, 0xabb}]}]}, 0x17c}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0xe, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x3, 0xb, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0x5fd}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x5, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x8, 0x4, 0x5}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xb6, 0xeb, 0x2, 0x10, 0x3}, 0xe8, &(0x7f0000000100)={0x5, 0xf, 0xe8, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "e4695b283d60d62af836643994dae8e6"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xf9, 0x9, 0xc40}, @generic={0xbb, 0x10, 0x163d6cd447d13cf5, "c65bdf3c3d419806bc974685d35422a84480cc710afebbcea4d4c91c05a9fecdead7d9402e90e73b96a33ea25bb26a8af60e2a41df60aece7c197fcfea9783a3ce06c0b3de33ae7a9b07ddd95aeb514d83d368cd9b0b243d7e1e54b40b30cf7bfdf90a43fdddb41afa5c862f925ba53bec613e3788196d676266779af66de56b6f654847f460d0a0ca08582ddd4d2353c626bd4d9cc7e1fa1f26931150fc97b74e2cad6c4e3643843ada1019c5a0d6d0dbfa854262b182f4"}]}, 0x6, [{0x7a, &(0x7f0000000200)=@string={0x7a, 0x3, "28f0a47062410a504123d4e5ca46411d7f07b4592c1f6a2f135e89464cafcb28d8090d67d090618c27da6674d59b596055901cc92b9713201a388732c619d589da03df5fbcabb370f5989a087eb585fd176c87918ee7eb353a8b57994ad3f3c7948135dca7a35525d1586a4294eb446094d56114fe2983e4"}}, {0x54, &(0x7f0000000280)=@string={0x54, 0x3, "676301f539aeedf9a256801de508ecb9820108661c6883473b52e528dea70dba81dd34b264d605fefb7f3cd93509ec619da0d0c7622dbaa9d12ba2d28790815a669b7a6ba19994c429bd11707da898fbccbc"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x458}}, {0x101, &(0x7f0000000340)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41b}}, {0x9c, &(0x7f00000004c0)=@string={0x9c, 0x3, "d528da18de27d0c8073cbe7bae4cf58a007198595d74623609bc87c71417f2c57e9638197c435d3b3a31c0cd2d94ec712a059c2a5efe42e2f909b3cffda5bf91d523f9ea05779b65ee7228e16085d18ec6acc431ba4e64e46c0ef655671bebceb8b102c14900da0127ca76975b9c43bf15f68658d672c0512a19edaa06cd1d2b8f52ac9e413f70ce4c773ce85e91a13921de5225819d51ad60eb"}}]}) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, &(0x7f0000000740)={0x0, 0x1, 0xc8, {0xc8, 0xf, "14a5928ac3940fdb225ddaa42934daf1b0ca0437dc12665d6f752118d9c9aab23b0214548cd62f5ebdc512adcab3187eae78f4ce45090ae9c22a20935b93ff4642ac70193a4f274516bb06f79abc4e058e889afe30dcc32532f96f88827a0c05a8b38203c33eac2153310df9a6af4978fd8c80a8efd6779655dcb03c6c13a8e864b5e8ba28ab50e1eaa7e62fc2cab21b34c80f5813c49a60531b0fb35fa2a1af9cbae464c81ffb6007ef4b29a9cd1996fd909af1d89c36d0c6564cfb2eb504b9942269b28cd4"}}, &(0x7f0000000840)={0x0, 0x3, 0xd9, @string={0xd9, 0x3, "57a7fa9b84543a6ca41f52f3466330525d9e97b11ccea2355bb90af3dbf2b3cd115563cf6a8b0f0a2aaa8c73e33cc9437eaa962cb56357a7e81a4757883f2eb1fa8a6145f3580f19b140406ffc5a11d5729daded569a4b32663f0af164c3ed80757fdb5df51257a5ebf3582cad453b13a0510e405482547325f5b0b539fcce070a9315d3097f6d1a730d4c46ec0c9bca014959a6ff343c8aa9852e8e8d93d9dea0992c375993ff27ecab916d8a49cbc135ba8a13ee79043d097cfcf1fd61c266ebd070c169141d5b627f59c3e364fc0219e986f1d7b43e"}}, &(0x7f0000000600)={0x0, 0x22, 0x29, {[@global=@item_4={0x3, 0x1, 0x2, "abc85329"}, @global=@item_4={0x3, 0x1, 0x7, "b7536567"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x8, "d186e8e7"}, @main=@item_012={0x1, 0x0, 0x9, 'h'}, @local=@item_4={0x3, 0x2, 0x1, "5245a512"}, @global=@item_4={0x3, 0x1, 0x5, "7eb3f4f8"}, @global=@item_4={0x3, 0x1, 0x9, "5d9ed1d7"}, @main=@item_4={0x3, 0x0, 0x8, "ec94d14f"}, @global=@item_012={0x2, 0x1, 0x9, "d8c5"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x154}}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000940)={0x40, 0x8, 0xa8, "33bbccecbcc3bb86b490c6c9467eae4b96e8738c7f98193f512347602a8131f970660ccffa43e8ae11f7de071c28694ae740f335244a57ca387367bbec8cfd02b4f2b76a44df725ca754b3c2dbef2b505c798ce8d309c2666ed2821287e5b3278255c27fd0b60415843796b1a79eda9e6af39cd6378c7f5f4e3df019f1658637be463afbdeb07006ac3c25f839c48b0a95d05d03afe04654639b0a72d9074b70f664f968619ee1ce"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a80)={0x20, 0x1, 0x59, "2999c05c441cd06d555872ee09010469a6f3fb2a7a14fce89eb7c1899d1441c08a4e776d0d3f84847e9cdb66915b80b73a01b235ce58e528e471d7d360854cdcfd40ee829c0dfc76c17800983ca72696591230ccacc89be671"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x1f}}) 2m28.372968121s ago: executing program 2 (id=4391): socket(0x10, 0x803, 0x0) socket(0x11, 0x803, 0x0) socket(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0, r0) socket$inet(0x2, 0x3, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 2m27.163063163s ago: executing program 2 (id=4393): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r1 = socket(0xa, 0x3, 0x3a) syz_open_procfs(0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="005330080000a13c5b72"], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r2 = userfaultfd(0x80801) close(0x3) r3 = userfaultfd(0x80801) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000100)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0xd00000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}}, &(0x7f0000000480)=0x84) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x80) 2m26.03571012s ago: executing program 2 (id=4396): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0xd0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x91) 2m25.888289622s ago: executing program 2 (id=4397): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x14, 0x0, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) listen(r0, 0xfffffffd) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 2m25.560092957s ago: executing program 2 (id=4400): mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='romfs\x00', 0x2200000, 0x0) (async) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='romfs\x00', 0x2200000, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) (async) getresgid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) r1 = getuid() setreuid(r1, r1) mount$bpf(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000140), 0x200484a, &(0x7f0000000240)={[{@gid={'gid', 0x3d, r0}}, {@uid={'uid', 0x3d, r1}}, {@mode={'mode', 0x3d, 0x5}}], [{@hash}, {@permit_directio}, {@seclabel}, {@subj_type={'subj_type', 0x3d, '/dev/nbd'}}]}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) (async) sendmmsg$inet6(r2, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) socket$rds(0x15, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r3], 0x1c}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r3], 0x1c}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r4, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r4, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8) get_mempolicy(0x0, 0x0, 0x400000001fc, &(0x7f0000001000/0x3000)=nil, 0x3) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c0000008100"], &(0x7f0000001500), 0x200) (async) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c0000008100"], &(0x7f0000001500), 0x200) socket(0x15, 0x5, 0x0) 2m10.409914071s ago: executing program 34 (id=4400): mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='romfs\x00', 0x2200000, 0x0) (async) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='romfs\x00', 0x2200000, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) (async) getresgid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) r1 = getuid() setreuid(r1, r1) mount$bpf(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000140), 0x200484a, &(0x7f0000000240)={[{@gid={'gid', 0x3d, r0}}, {@uid={'uid', 0x3d, r1}}, {@mode={'mode', 0x3d, 0x5}}], [{@hash}, {@permit_directio}, {@seclabel}, {@subj_type={'subj_type', 0x3d, '/dev/nbd'}}]}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) (async) sendmmsg$inet6(r2, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) socket$rds(0x15, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r3], 0x1c}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r3], 0x1c}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r4, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r4, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8) get_mempolicy(0x0, 0x0, 0x400000001fc, &(0x7f0000001000/0x3000)=nil, 0x3) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c0000008100"], &(0x7f0000001500), 0x200) (async) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c0000008100"], &(0x7f0000001500), 0x200) socket(0x15, 0x5, 0x0) 1m5.587317367s ago: executing program 6 (id=4648): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x2000000, 0xffffffff}}) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x2283486, &(0x7f0000000400)={[{@uuid_null}, {@userxattr}, {@verity_on}, {@volatile}, {@verity_on}, {@redirect_dir_follow}]}) chdir(&(0x7f00000003c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5cc}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0x108) syz_open_procfs(r1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000100), 0x4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, 0x0, 0x0) 1m4.337329666s ago: executing program 6 (id=4653): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r1 = socket(0xa, 0x3, 0x3a) syz_open_procfs(0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="005330080000a13c5b72"], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r2 = userfaultfd(0x80801) close(0x3) r3 = userfaultfd(0x80801) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000100)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8000004}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0xd00000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}}, &(0x7f0000000480)=0x84) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x80) 1m3.601552855s ago: executing program 6 (id=4660): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$netlink(0x10, 0x3, 0x6) r2 = semget$private(0x0, 0x20000000102, 0x140) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000040)=""/70) 55.887248749s ago: executing program 6 (id=4684): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ptrace$poke(0x4212, r0, &(0x7f0000000140), 0x20007ffffffe) 55.704938352s ago: executing program 6 (id=4685): r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000000c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x4000000000000000, 0x0, 0x200, 0x0, 0x1}) r3 = syz_io_uring_setup(0x100008cf, &(0x7f0000000700)={0x0, 0x8991, 0x200, 0x20000, 0x377, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847b9, 0x3e82, 0x0, 0x0, 0x0) 55.395524684s ago: executing program 6 (id=4686): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000580)={0x38, 0x1403, 0xc23, 0x70bd0a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040845}, 0x4004080) 39.518299616s ago: executing program 35 (id=4686): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000580)={0x38, 0x1403, 0xc23, 0x70bd0a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040845}, 0x4004080) 7.881290712s ago: executing program 5 (id=4838): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x100) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbdd600fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42f48006c032b24d9e8d722841b7c7244b1d2cc012fcda1f7472fdbabb673ef862e32b359fad715b3f5cef6ef951abab80a4a0f5f8574395c5820fa25d07a119e23b39a87cb3b763fbfb0493121eec3e05eacbe7835e79e74881d1179013622a2a6421d51c974e6abd48a9882c8fcadbcee369346a9ad948fd5dd8f87496a30a9d888cdbcee8f3592dd69165358c4cd474639fc13300317b7fed115fb9818b20d177a39157101dbd8e23bc9ed32efed96c410a103d35336fb4ee4000bfb3d32b0181ff", 0x1e5}], 0x1}}], 0x3, 0x2090) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0xffffffffffffffda, 0xfffffffffffffffc, {0x88, 0x1, 0x0, {0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0xffffffffffb, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xffffffffffffffff, r3, 0xffffffff, 0x20000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0xffffffffffffffda, 0xfffffffffffffffc, {0x88, 0x1, 0x0, {0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0xffffffffffb, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xffffffffffffffff, r5, 0xffffffff, 0x20000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000740)={[{@gid}, {@gid={'gid', 0x3d, r3}}, {@gid}, {@gid={'gid', 0x3d, r5}}], [{@flag='mand'}, {@dont_hash}, {@hash}, {@appraise}]}) getsockname(r2, &(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f00000000c0)=0x80) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.709197814s ago: executing program 8 (id=4733): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pause() r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x6c03, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000001400)=0x75, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', &(0x7f00000001c0), 0x1000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r5, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 5.544389493s ago: executing program 5 (id=4841): r0 = socket$inet(0x2, 0x2, 0x1) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x284}) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010203010902240001000010000904140002a024260009050602ff0300000009058202"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0xfffffffffffffe2d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0xfffffffd, 0x398}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r2, 0x67a1, 0x6933, 0xa, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket(0x10, 0x80002, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 4.60175953s ago: executing program 5 (id=4843): r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x52}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, r2, 0x1, 0x1, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x220408c4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES8=0x0, @ANYBLOB="0a00560002029f0b6dcc20000000ae7ce266510212cd73a06e3e6f5d7760c64b1c97d18ef9fd8098eba992ccd15d1c6cf1ed6eb57d1a2a09faa8b6ccc9db43e7bfbd48a2c004768a5c0d0086cea64f3a830b7be36fddeac72730bd5b48fa9ae007ade6e1079e1fecd4886fb64a6789b593fac3a915b4cabfb5709d8dafca6823927949bd14e09fc0f5596eb9dd9d0421a41e69c8734d091bc1d25b4199b6e9561c09775f"], 0x30}}, 0x4c081) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000540)={0x0, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x108) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010182"], 0x2a1) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0xfffe, @remote}, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r6, 0x0, &(0x7f00000000c0)) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000180)={r9, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x5}, 0x90) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r9, 0x0, 0xfff}, &(0x7f0000000280)=0xc) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 3.253440015s ago: executing program 1 (id=4848): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r1, 0x5452, &(0x7f0000001840)=0x5d4) write(0xffffffffffffffff, &(0x7f00000000c0)='$', 0x1) (async) r2 = socket(0x40000000015, 0x805, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt(r2, 0x114, 0x5, 0x0, &(0x7f00000000c0)) (async, rerun: 32) r3 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000)) (rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f00000000c0)={0x4, r3, 0xf, {0x100, 0x1}, 0x8}, 0x1) accept4$alg(r1, 0x0, 0x0, 0x80800) 2.842649893s ago: executing program 1 (id=4850): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000400)={0x0, 0x83, 0xf00}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000000)={0x0, 0xe35, 0x0, 0x0, 0x9, 0x6}) unshare(0x20020000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000a0000000700000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000040), 0x0}, 0x20) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000006c0)={0x1, 0x0, 0x0}) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) semget$private(0x0, 0x6, 0x431) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x20008000) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c841}, 0x4040890) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x68, r6, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r8 = semget$private(0x0, 0x7, 0x191) semtimedop(r8, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) semtimedop(r8, &(0x7f0000000040)=[{0x0, 0x9}], 0x1, 0x0) semtimedop(r8, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 2.660271868s ago: executing program 5 (id=4851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x40010003, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001e80)={'syz', 0x1}, &(0x7f0000000080)='blake2b-256-generic\x00\v\xe5\xa1\"\x05<\x99\xd3U\xf8\x9cb\xfa\xb5\xd8\x1et\x05s\x95\xd9\xbd>\x97\x90\xde#\xb1&b\fy\x96b\xecc\xdbr\x94\x0e+?\xea\x1ey\x1a\xa4@\xb3\bV\xb7\xc3k\x9113,', 0xfffffffffffffffd) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, 0x0) sendmsg$nl_generic(r6, 0x0, 0x20008080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$unix(0x1, 0x5, 0x0) syz_clone3(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1c0, 0x20a, 0x278, 0x1c0, 0x278, 0x3, 0x0, {[{{@ipv6={@local, @loopback, [0x0, 0x0, 0xff000000], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {0x101}, 0x3b}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4}, {0xffffffffffffffff, 0xfe, 0x83ae0c10c44c0425}}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@ipv6header={{0x28}, {0xe7, 0xd}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 2.502403299s ago: executing program 7 (id=4853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000140)={0x6, 0x0, [{0x3, 0x0, 0x0, 0x8, 0x200000, 0xfffffffb, 0x1}, {0x0, 0x6, 0x6, 0x0, 0x7}, {0x1, 0xffffffff, 0x0, 0x333, 0x4, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x1008, 0x4, 0x2000110, 0x2}, {0x6, 0x5dd3, 0x6, 0x6, 0xe231, 0x1, 0x1ff}, {0x80000007, 0x4, 0x0, 0x3, 0x6, 0x3, 0x9}]}) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="380000000000000000000000070000004424e6d3ac1414aa00000001ac1e000100000dcdffffffff00000057ac1414bb00000002940401001c000000000000000000000008000000", @ANYRES32], 0x58}, 0x0) r5 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x10b240) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0x3, 0x101b, 0x1, 0x0, 0x2, 0x2, 0x8}}) 2.424913326s ago: executing program 1 (id=4854): r0 = socket$inet(0x2, 0x2, 0x1) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x284}) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010203010902240001000010000904140002a024260009050602ff0300000009058202"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0xfffffffffffffe2d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0xfffffffd, 0x398}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r2, 0x67a1, 0x6933, 0xa, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket(0x10, 0x80002, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 2.257794622s ago: executing program 3 (id=4855): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000640)={0x2, 0x4e29, @loopback}, 0x10, 0x0, 0xf00}}], 0x1, 0x4000000) 2.120963162s ago: executing program 3 (id=4856): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000400)={0x0, 0x83, 0xf00}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000000)={0x0, 0xe35, 0x0, 0x0, 0x9, 0x6}) unshare(0x20020000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000a0000000700000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000040), 0x0}, 0x20) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000006c0)={0x1, 0x0, 0x0}) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) semget$private(0x0, 0x6, 0x431) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c841}, 0x4040890) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x68, r6, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r8 = semget$private(0x0, 0x7, 0x191) semtimedop(r8, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) semtimedop(r8, &(0x7f0000000040)=[{0x0, 0x9}], 0x1, 0x0) semtimedop(r8, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 2.032239998s ago: executing program 7 (id=4857): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_getneigh={0x24, 0x1e, 0x1, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x0, 0x70008}, [@IFLA_PROP_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048050}, 0x20000800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffe, 0x3c8098e1, 0x401, 0xfffc, 0x101, 0x0, 0x0, 0x0, 0x10, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x20) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0xc0046686, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000280)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x60, 0x10, 0x1, 0x0, 0x4000, {0x0, 0x0, 0x0, r7, 0x0, 0x1391ccd1beab952f}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x39}}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2={0xff, 0x5}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x810) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r8, &(0x7f0000000100)=@other={'unlock', ' ', 'mem'}, 0xb) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="08000180"], 0x20}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x6c, 0x14, 0x70b, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0xc}, {0x4}}, [@TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0xfc, 0x200, 0x80000a, 0x1, 0xb16d, 0x7e, 0x1}}, {0x6, 0x2, [0xde4]}}, {{0x1c, 0x1, {0x8, 0xf, 0x8, 0xd, 0x2, 0x7, 0x2}}, {0x4}}]}]}, 0x6c}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000b8d5a42ceb4d32b96ac5eab8af3dd64d4705eccb00d86d38af0614256959282e8ba5d64bd85e013187fdd6c718f99bbbffa4cf94611200e64caa3f7b282a33496c96c659d9125b56886e80a61b8744570eea2f32", @ANYRES16=r11, @ANYBLOB="0b0b00000000000000000b000000280002800800060006000000080003000400000014000100e000000100"/54], 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r11, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x90b}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x5) 1.9291998s ago: executing program 3 (id=4858): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x800007, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x2a) sendmmsg$inet6(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x0) (async) setuid(0xee00) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x3, 0x8001, {0x0}, {0xffffffffffffffff}, 0x2, 0x9cbe}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1d05}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x408e0302}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) (async) ioprio_set$pid(0x3, r1, 0x2004) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_usb_connect(0x5, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x6b, 0x8b, 0xe6, 0x10, 0x77d, 0x627a, 0x10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xf8, 0xff, 0x0, 0x55, "", [{{0x9, 0x4, 0xc7, 0x5, 0x2, 0x3, 0x3c, 0x80, 0x4, [], [{{0x9, 0x5, 0xf, 0x9, 0x10, 0x10, 0xa, 0x1}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0xc, 0x97, 0x4}}]}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async, rerun: 32) shutdown(r3, 0x1) (rerun: 32) 1.620444713s ago: executing program 5 (id=4859): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x7fffffff}}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000280)=""/116, 0x34, 0x74, 0x1, 0x4, 0x10000}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0xcffe}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffffa}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@typedef={0xa, 0x0, 0x0, 0x8, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x5}}, @struct={0xf, 0x4, 0x0, 0x4, 0x0, 0x0, [{0xe, 0x2, 0x8000}, {0x4, 0x1, 0x8591}, {0x2, 0x5, 0x4}, {0xb, 0x3, 0x4}]}]}, {0x0, [0x30]}}, &(0x7f00000004c0)=""/129, 0x7b, 0x81, 0x1, 0x200}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x9, 0x8, 0x0, 0x10, r0, 0xd3, '\x00', r2, r3, 0x3, 0x0, 0x3}, 0x50) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r4, 0x0, &(0x7f00005c8000/0x2000)=nil, 0x2000, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000182"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.620041123s ago: executing program 7 (id=4860): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x51, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1000000, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xa5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.484304548s ago: executing program 1 (id=4861): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x3a, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0xa9) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000180)=0x6, 0x4) 1.462893454s ago: executing program 5 (id=4862): set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x67, 0x0, 0x2000, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xfffffef6, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f00000000c0)={0x8, 'ipvlan0\x00', {'lo\x00'}, 0x6}) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c00000012000126000000000700074e23000000000000000000194b1cec000000000001000000fdffffff00000100"/56, @ANYRES32=0x0, @ANYBLOB="00000000ff7f0000070000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000193}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x20, 0x0, 0x0, 0x3, 0xc8, 0x9, 0x1b00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, 0x3c}}, 0x4000010) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd3, 0xdd, 0x71, 0x10, 0x46d, 0xa0e, 0x61f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x0, 0xdc, "", [{{0x9, 0x4, 0x39, 0xd3, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1555555555555801}) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc3301500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.43619415s ago: executing program 7 (id=4863): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x9) poll(&(0x7f00000005c0)=[{r0, 0x400, 0x300}], 0x1, 0x44) 1.252319879s ago: executing program 1 (id=4864): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000400)={0x0, 0x83, 0xf00}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000000)={0x0, 0xe35, 0x0, 0x0, 0x9, 0x6}) unshare(0x20020000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000a0000000700000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000040), 0x0}, 0x20) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000006c0)={0x1, 0x0, 0x0}) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) semget$private(0x0, 0x6, 0x431) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x20008000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c841}, 0x4040890) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x68, r6, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r8 = semget$private(0x0, 0x7, 0x191) semtimedop(r8, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) semtimedop(r8, &(0x7f0000000040)=[{0x0, 0x9}], 0x1, 0x0) semtimedop(r8, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.22802281s ago: executing program 3 (id=4865): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000540)=[@reply={0x40406301, {0xfffffffe, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @request_death={0x400c630e, 0x3}, @reply_sg={0x40486312, {0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r3}, @flat=@handle={0x73682a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/26, 0x1a, 0x0, 0x33}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 1.120102173s ago: executing program 7 (id=4866): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, r2, 0x1, 0x1, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x220408c4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000000000000064000100000602020202"], 0x2a1) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (fail_nth: 4) 1.020798158s ago: executing program 1 (id=4867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f0400"], 0x7) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000140)={0x6, 0x0, [{0x3, 0x0, 0x0, 0x8, 0x200000, 0xfffffffb, 0x1}, {0x0, 0x6, 0x6, 0x0, 0x7}, {0x1, 0xffffffff, 0x0, 0x333, 0x4, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x1008, 0x4, 0x2000110, 0x2}, {0x6, 0x5dd3, 0x6, 0x6, 0xe231, 0x1, 0x1ff}, {0x80000007, 0x4, 0x0, 0x3, 0x6, 0x3, 0x9}]}) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="380000000000000000000000070000004424e6d3ac1414aa00000001ac1e000100000dcdffffffff00000057ac1414bb00000002940401001c000000000000000000000008000000", @ANYRES32], 0x58}, 0x0) r5 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x10b240) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0x3, 0x101b, 0x1, 0x0, 0x2, 0x2, 0x8}}) 945.575039ms ago: executing program 3 (id=4868): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000400)={0x0, 0x83, 0xf00}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000000)={0x0, 0xe35, 0x0, 0x0, 0x9, 0x6}) unshare(0x20020000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000a0000000700000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000040), 0x0}, 0x20) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000006c0)={0x1, 0x0, 0x0}) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) semget$private(0x0, 0x6, 0x431) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c841}, 0x4040890) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x68, r6, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r8 = semget$private(0x0, 0x7, 0x191) semtimedop(r8, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) semtimedop(r8, &(0x7f0000000040)=[{0x0, 0x9}], 0x1, 0x0) semtimedop(r8, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 555.942979ms ago: executing program 3 (id=4869): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[], 0x2c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xffffffff, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000a00)=ANY=[], 0x0}, 0x94) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) (fail_nth: 4) 287.151µs ago: executing program 7 (id=4870): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x67, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cf0a000000"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 0s ago: executing program 8 (id=4871): r0 = socket$inet(0x2, 0x2, 0x1) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x284}) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010203010902240001000010000904140002a024260009050602ff0300000009058202"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0xfffffffffffffe2d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0xfffffffd, 0x398}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000025"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x1) io_uring_enter(r2, 0x67a1, 0x6933, 0xa, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket(0x10, 0x80002, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) kernel console output (not intermixed with test programs): RCX: 00007fe721f4c799 [ 1010.430044][T19315] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 1010.430057][T19315] RBP: 00007fe72017d090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.430068][T19315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.430080][T19315] R13: 00007fe7221c6128 R14: 00007fe7221c6090 R15: 00007fff7553c028 [ 1010.430110][T19315] [ 1012.090770][ T6315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1012.091499][ T6315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1012.420299][T19305] chnl_net:caif_netlink_parms(): no params data found [ 1012.466241][T12675] Bluetooth: hci2: command tx timeout [ 1013.921876][T19342] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4478'. [ 1014.544801][T19351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.548099][T19351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.570697][T12675] Bluetooth: hci2: command tx timeout [ 1015.553974][T19357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.557456][T19357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.924839][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1015.952672][ T1439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1016.515872][T19305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.516732][T19305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.516902][T19305] bridge_slave_0: entered allmulticast mode [ 1016.526586][T19305] bridge_slave_0: entered promiscuous mode [ 1016.536905][T19305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.537772][T19305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.537964][T19305] bridge_slave_1: entered allmulticast mode [ 1016.546403][T19305] bridge_slave_1: entered promiscuous mode [ 1016.596343][T12675] Bluetooth: hci2: command tx timeout [ 1016.642518][T19305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.653476][T19305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.750271][T19305] team0: Port device team_slave_0 added [ 1016.757633][T19305] team0: Port device team_slave_1 added [ 1016.868349][T19375] loop6: detected capacity change from 0 to 7 [ 1016.882048][T19305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.882063][T19305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.882086][T19305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.884159][T19305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.884171][T19305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.884196][T19305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.913769][ C0] blk_print_req_error: 64 callbacks suppressed [ 1016.913788][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1016.913817][ C0] buffer_io_error: 64 callbacks suppressed [ 1016.913829][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1016.926314][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1016.926345][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1016.931593][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1016.931623][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1016.964754][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1016.964785][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1016.973698][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1016.973729][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1016.980926][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1016.980955][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1016.983053][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1016.983082][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1017.002008][T19375] ldm_validate_partition_table(): Disk read failed. [ 1017.002156][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1017.002185][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1017.003161][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1017.003188][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1017.013577][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1017.013607][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1017.014974][T19375] Dev loop6: unable to read RDB block 0 [ 1017.032760][T19375] loop6: unable to read partition table [ 1017.033026][T19375] loop6: partition table beyond EOD, truncated [ 1017.033060][T19375] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 1017.325382][T19305] hsr_slave_0: entered promiscuous mode [ 1017.329036][T19305] hsr_slave_1: entered promiscuous mode [ 1017.330036][T19305] debugfs: 'hsr0' already exists in 'hsr' [ 1017.330057][T19305] Cannot create hsr debugfs directory [ 1018.774765][T12675] Bluetooth: hci2: command tx timeout [ 1018.854451][T15275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1018.855107][T15275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1020.372345][T19400] fuse: Unknown parameter 'fd0x0000000000000003' [ 1020.520855][T19404] FAULT_INJECTION: forcing a failure. [ 1020.520855][T19404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.520889][T19404] CPU: 0 UID: 0 PID: 19404 Comm: syz.5.4495 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1020.520915][T19404] Tainted: [L]=SOFTLOCKUP [ 1020.520922][T19404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1020.520934][T19404] Call Trace: [ 1020.520941][T19404] [ 1020.520949][T19404] dump_stack_lvl+0xe8/0x150 [ 1020.520980][T19404] should_fail_ex+0x46b/0x600 [ 1020.521006][T19404] _copy_from_user+0x2d/0xb0 [ 1020.521030][T19404] ___sys_sendmsg+0x1c6/0x360 [ 1020.521060][T19404] ? __pfx____sys_sendmsg+0x10/0x10 [ 1020.521118][T19404] ? __fget_files+0x2a/0x420 [ 1020.521140][T19404] ? __fget_files+0x3a6/0x420 [ 1020.521172][T19404] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1020.521199][T19404] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1020.521239][T19404] ? __pfx_ksys_write+0x10/0x10 [ 1020.521275][T19404] do_syscall_64+0x14d/0xf80 [ 1020.521298][T19404] ? trace_irq_disable+0x3b/0x150 [ 1020.521319][T19404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.521338][T19404] ? clear_bhb_loop+0x40/0x90 [ 1020.521360][T19404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.521379][T19404] RIP: 0033:0x7f8ecf07c799 [ 1020.521397][T19404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.521414][T19404] RSP: 002b:00007f8ecd2d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1020.521434][T19404] RAX: ffffffffffffffda RBX: 00007f8ecf2f5fa0 RCX: 00007f8ecf07c799 [ 1020.521448][T19404] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 1020.521461][T19404] RBP: 00007f8ecd2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.521473][T19404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.521485][T19404] R13: 00007f8ecf2f6038 R14: 00007f8ecf2f5fa0 R15: 00007ffd676d02f8 [ 1020.521516][T19404] [ 1020.909182][T19305] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1020.930116][T19305] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1020.986146][T19305] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1021.071824][T19305] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1021.263951][T19420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.267371][T19420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.050797][ T6319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1022.051171][ T6319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1022.324635][T19305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.356778][T19305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.380689][ T3820] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.380880][ T3820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.411799][ T3820] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.411919][ T3820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.466321][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1022.495259][T19437] fuse: Unknown parameter 'fd0x0000000000000003' [ 1022.736315][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1022.743250][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1022.745081][ T10] usb 2-1: config 227 has an invalid interface number: 124 but max is 0 [ 1022.745100][ T10] usb 2-1: config 227 has an invalid descriptor of length 72, skipping remainder of the config [ 1022.745110][ T10] usb 2-1: config 227 has no interface number 0 [ 1022.745135][ T10] usb 2-1: config 227 interface 124 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1022.745149][ T10] usb 2-1: config 227 interface 124 has no altsetting 0 [ 1022.913459][ T10] usb 2-1: New USB device found, idVendor=0d46, idProduct=2020, bcdDevice= 2.20 [ 1022.913605][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.913733][ T10] usb 2-1: Product: syz [ 1022.913807][ T10] usb 2-1: Manufacturer: syz [ 1022.913887][ T10] usb 2-1: SerialNumber: syz [ 1023.596080][ T64] block nbd0: Possible stuck request ffff88802656e000: control (read@0,4096B). Runtime 300 seconds [ 1024.159357][T19456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.162556][T19456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.197896][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1024.198785][ T2209] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1024.822389][T19305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.863259][T19468] hugetlbfs: Bad value '%' for mount option 'size' [ 1025.863259][T19468] [ 1026.341735][T19479] fuse: Unknown parameter 'fd0x0000000000000003' [ 1027.533802][ T486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1027.539618][ T1386] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1027.596035][T19305] veth0_vlan: entered promiscuous mode [ 1027.634730][T19305] veth1_vlan: entered promiscuous mode [ 1027.973520][T19490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.977085][T19490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.716716][ T10] ftdi_sio 2-1:227.124: FTDI USB Serial Device converter detected [ 1028.720943][ T10] ftdi_sio ttyUSB3: unknown device type: 0x220 [ 1029.052880][T19494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.053576][T19494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.208112][T19305] veth0_macvtap: entered promiscuous mode [ 1029.223754][ T68] erspan0: left allmulticast mode [ 1029.223778][ T68] erspan0: left promiscuous mode [ 1029.224001][ T68] bridge0: port 3(erspan0) entered disabled state [ 1029.297925][ T68] bridge_slave_1: left allmulticast mode [ 1029.297952][ T68] bridge_slave_1: left promiscuous mode [ 1029.298241][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.323693][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1029.352864][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1029.431253][ T68] bridge_slave_0: left allmulticast mode [ 1029.431270][ T68] bridge_slave_0: left promiscuous mode [ 1029.451828][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.585082][T19502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.585673][T19502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.695872][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1030.141413][T19506] hugetlbfs: Bad value '%' for mount option 'size' [ 1030.141413][T19506] [ 1030.243224][T19509] FAULT_INJECTION: forcing a failure. [ 1030.243224][T19509] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.243247][T19509] CPU: 0 UID: 0 PID: 19509 Comm: syz.3.4522 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1030.243262][T19509] Tainted: [L]=SOFTLOCKUP [ 1030.243266][T19509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1030.243272][T19509] Call Trace: [ 1030.243277][T19509] [ 1030.243282][T19509] dump_stack_lvl+0xe8/0x150 [ 1030.243302][T19509] should_fail_ex+0x46b/0x600 [ 1030.243319][T19509] should_failslab+0xa8/0x100 [ 1030.243332][T19509] __kmalloc_noprof+0xdf/0x7b0 [ 1030.243348][T19509] ? sock_kmalloc+0xd6/0x160 [ 1030.243363][T19509] ? __local_bh_enable+0x1e1/0x2f0 [ 1030.243380][T19509] sock_kmalloc+0xd6/0x160 [ 1030.243396][T19509] af_alg_alloc_areq+0x99/0x200 [ 1030.243412][T19509] skcipher_recvmsg+0x332/0x1140 [ 1030.243444][T19509] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1030.243471][T19509] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1030.243498][T19509] ? security_socket_recvmsg+0x7e/0x2c0 [ 1030.243521][T19509] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1030.243544][T19509] sock_recvmsg+0x172/0x1b0 [ 1030.243558][T19509] ____sys_recvmsg+0x1f2/0x4b0 [ 1030.243577][T19509] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1030.243599][T19509] ? import_iovec+0x73/0xa0 [ 1030.243614][T19509] ___sys_recvmsg+0x215/0x590 [ 1030.243631][T19509] ? __pfx____sys_recvmsg+0x10/0x10 [ 1030.243658][T19509] ? __fget_files+0x3a6/0x420 [ 1030.243676][T19509] __x64_sys_recvmsg+0x1c0/0x2a0 [ 1030.243692][T19509] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1030.243711][T19509] ? __pfx_ksys_write+0x10/0x10 [ 1030.243731][T19509] do_syscall_64+0x14d/0xf80 [ 1030.243744][T19509] ? trace_irq_disable+0x3b/0x150 [ 1030.243756][T19509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.243766][T19509] ? clear_bhb_loop+0x40/0x90 [ 1030.243779][T19509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.243789][T19509] RIP: 0033:0x7fe721f4c799 [ 1030.243799][T19509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.243808][T19509] RSP: 002b:00007fe72019e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1030.243826][T19509] RAX: ffffffffffffffda RBX: 00007fe7221c5fa0 RCX: 00007fe721f4c799 [ 1030.243834][T19509] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1030.243840][T19509] RBP: 00007fe72019e090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.243846][T19509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.243852][T19509] R13: 00007fe7221c6038 R14: 00007fe7221c5fa0 R15: 00007fff7553c028 [ 1030.243868][T19509] [ 1030.479811][ T2209] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1030.532264][T19514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4524'. [ 1032.294963][T15262] Bluetooth: hci8: Frame reassembly failed (-84) [ 1032.304336][ T6315] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1032.367678][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.436625][T12675] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1032.453960][ T68] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 1032.529447][ T68] bond0 (unregistering): Released all slaves [ 1032.572154][ T68] bond1 (unregistering): Released all slaves [ 1032.602720][ T2209] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1032.688697][T19532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4530'. [ 1032.729142][T19305] veth1_macvtap: entered promiscuous mode [ 1032.837294][T19536] netlink: 'syz.6.4532': attribute type 1 has an invalid length. [ 1032.901930][T19305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.919379][T19305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.941665][T19537] FAULT_INJECTION: forcing a failure. [ 1032.941665][T19537] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.941697][T19537] CPU: 0 UID: 0 PID: 19537 Comm: syz.3.4531 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1032.941722][T19537] Tainted: [L]=SOFTLOCKUP [ 1032.941728][T19537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1032.941739][T19537] Call Trace: [ 1032.941747][T19537] [ 1032.941755][T19537] dump_stack_lvl+0xe8/0x150 [ 1032.941787][T19537] should_fail_ex+0x46b/0x600 [ 1032.941812][T19537] should_failslab+0xa8/0x100 [ 1032.941833][T19537] kmem_cache_alloc_noprof+0x87/0x680 [ 1032.941859][T19537] ? do_getname+0x2e/0x250 [ 1032.941883][T19537] do_getname+0x2e/0x250 [ 1032.941900][T19537] ? getname_flags+0x11/0x20 [ 1032.941930][T19537] __se_sys_statx+0xd7/0x2a0 [ 1032.941951][T19537] ? lockdep_hardirqs_on+0x7a/0x110 [ 1032.941974][T19537] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1032.941999][T19537] ? __pfx___se_sys_statx+0x10/0x10 [ 1032.942027][T19537] ? fput+0xa0/0xd0 [ 1032.942048][T19537] ? ksys_write+0x248/0x270 [ 1032.942074][T19537] ? __pfx_ksys_write+0x10/0x10 [ 1032.942102][T19537] ? __x64_sys_statx+0x20/0xc0 [ 1032.942125][T19537] do_syscall_64+0x14d/0xf80 [ 1032.942146][T19537] ? trace_irq_disable+0x3b/0x150 [ 1032.942167][T19537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.942186][T19537] ? clear_bhb_loop+0x40/0x90 [ 1032.942208][T19537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.942226][T19537] RIP: 0033:0x7fe721f4c799 [ 1032.942244][T19537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.942259][T19537] RSP: 002b:00007fe72017d028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 1032.942279][T19537] RAX: ffffffffffffffda RBX: 00007fe7221c6090 RCX: 00007fe721f4c799 [ 1032.942293][T19537] RDX: 0000000000002000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1032.942306][T19537] RBP: 00007fe72017d090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.942319][T19537] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1032.942331][T19537] R13: 00007fe7221c6128 R14: 00007fe7221c6090 R15: 00007fff7553c028 [ 1032.942360][T19537] [ 1033.166489][T15275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1033.217043][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.217652][ T6315] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.220760][ T6315] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.222028][ T2209] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.052175][T19546] FAULT_INJECTION: forcing a failure. [ 1034.052175][T19546] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.052209][T19546] CPU: 0 UID: 0 PID: 19546 Comm: syz.5.4535 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1034.052234][T19546] Tainted: [L]=SOFTLOCKUP [ 1034.052242][T19546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1034.052253][T19546] Call Trace: [ 1034.052261][T19546] [ 1034.052269][T19546] dump_stack_lvl+0xe8/0x150 [ 1034.052301][T19546] should_fail_ex+0x46b/0x600 [ 1034.052326][T19546] should_failslab+0xa8/0x100 [ 1034.052347][T19546] __kmalloc_noprof+0xdf/0x7b0 [ 1034.052373][T19546] ? __lock_acquire+0x6b5/0x2cf0 [ 1034.052391][T19546] ? bpf_test_init+0x9f/0x150 [ 1034.052417][T19546] bpf_test_init+0x9f/0x150 [ 1034.052439][T19546] bpf_prog_test_run_skb+0x36f/0x1c90 [ 1034.052471][T19546] ? __fget_files+0x2a/0x420 [ 1034.052493][T19546] ? __fget_files+0x3a6/0x420 [ 1034.052513][T19546] ? __fget_files+0x2a/0x420 [ 1034.052539][T19546] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1034.052560][T19546] bpf_prog_test_run+0x2cd/0x340 [ 1034.052588][T19546] __sys_bpf+0x643/0x950 [ 1034.052612][T19546] ? __pfx___sys_bpf+0x10/0x10 [ 1034.052634][T19546] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1034.052670][T19546] ? ksys_write+0x248/0x270 [ 1034.052698][T19546] ? __pfx_ksys_write+0x10/0x10 [ 1034.052729][T19546] __x64_sys_bpf+0x7c/0x90 [ 1034.052751][T19546] do_syscall_64+0x14d/0xf80 [ 1034.052773][T19546] ? trace_irq_disable+0x3b/0x150 [ 1034.052794][T19546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.052813][T19546] ? clear_bhb_loop+0x40/0x90 [ 1034.052844][T19546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.052863][T19546] RIP: 0033:0x7f8ecf07c799 [ 1034.052881][T19546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.052897][T19546] RSP: 002b:00007f8ecd2d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1034.052918][T19546] RAX: ffffffffffffffda RBX: 00007f8ecf2f5fa0 RCX: 00007f8ecf07c799 [ 1034.052932][T19546] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1034.052945][T19546] RBP: 00007f8ecd2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.052957][T19546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.052969][T19546] R13: 00007f8ecf2f6038 R14: 00007f8ecf2f5fa0 R15: 00007ffd676d02f8 [ 1034.053000][T19546] [ 1034.356413][ T5805] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1034.438624][ T1448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1034.666312][T15262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.666333][T15262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.417601][T19553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.418127][T19553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.425181][T19553] syz.5.4537 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1035.481078][T19553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.481606][T19553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.765507][ T64] block nbd2: Possible stuck request ffff888026615080: control (read@0,4096B). Runtime 270 seconds [ 1035.778000][T19552] netdevsim netdevsim5: Direct firmware load for / [ 1035.778000][T19552] failed with error -2 [ 1035.778025][T19552] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 1035.778025][T19552] [ 1036.197292][T19567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.200840][T19567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.118374][ T6326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.118394][ T6326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.145111][T19569] FAULT_INJECTION: forcing a failure. [ 1037.145111][T19569] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.145134][T19569] CPU: 0 UID: 0 PID: 19569 Comm: syz.1.4542 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1037.145160][T19569] Tainted: [L]=SOFTLOCKUP [ 1037.145167][T19569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1037.145179][T19569] Call Trace: [ 1037.145187][T19569] [ 1037.145197][T19569] dump_stack_lvl+0xe8/0x150 [ 1037.145233][T19569] should_fail_ex+0x46b/0x600 [ 1037.145266][T19569] should_failslab+0xa8/0x100 [ 1037.145290][T19569] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1037.145324][T19569] ? __alloc_skb+0x1d0/0x7d0 [ 1037.145350][T19569] ? lockdep_hardirqs_on+0x7a/0x110 [ 1037.145386][T19569] __alloc_skb+0x1d0/0x7d0 [ 1037.145417][T19569] netlink_sendmsg+0x5d4/0xb40 [ 1037.145435][T19569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1037.145447][T19569] ? unwind_get_return_address+0x4d/0x90 [ 1037.145460][T19569] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1037.145477][T19569] ____sys_sendmsg+0x94c/0x9c0 [ 1037.145495][T19569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1037.145512][T19569] ? import_iovec+0x73/0xa0 [ 1037.145528][T19569] ___sys_sendmsg+0x2a5/0x360 [ 1037.145543][T19569] ? __pfx____sys_sendmsg+0x10/0x10 [ 1037.145579][T19569] ? __fget_files+0x2a/0x420 [ 1037.145591][T19569] ? __fget_files+0x3a6/0x420 [ 1037.145607][T19569] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1037.145622][T19569] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1037.145641][T19569] ? __pfx_ksys_write+0x10/0x10 [ 1037.145660][T19569] do_syscall_64+0x14d/0xf80 [ 1037.145673][T19569] ? trace_irq_disable+0x3b/0x150 [ 1037.145684][T19569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.145694][T19569] ? clear_bhb_loop+0x40/0x90 [ 1037.145709][T19569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.145719][T19569] RIP: 0033:0x7f19036cc799 [ 1037.145729][T19569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.145742][T19569] RSP: 002b:00007f1901926028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1037.145754][T19569] RAX: ffffffffffffffda RBX: 00007f1903945fa0 RCX: 00007f19036cc799 [ 1037.145761][T19569] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 1037.145768][T19569] RBP: 00007f1901926090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.145775][T19569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.145781][T19569] R13: 00007f1903946038 R14: 00007f1903945fa0 R15: 00007ffd332b59e8 [ 1037.145796][T19569] [ 1037.346931][T19571] input: syz0 as /devices/virtual/input/input23 [ 1038.297708][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1038.931212][ T2209] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1040.253205][ T2209] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1040.441500][ T37] kauditd_printk_skb: 44 callbacks suppressed [ 1040.441518][ T37] audit: type=1326 audit(1773033193.660:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19590 comm="syz.5.4547" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ecf07c799 code=0x0 [ 1040.527744][T19593] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4547'. [ 1040.591245][T19595] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4547'. [ 1044.111286][ T1448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1044.213053][T19627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.213584][T19627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.335817][ T37] audit: type=1326 audit(1773033197.550:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19630 comm="syz.5.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecf07c799 code=0x7ffc0000 [ 1044.338483][ T37] audit: type=1326 audit(1773033197.550:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19630 comm="syz.5.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecf07c799 code=0x7ffc0000 [ 1044.338526][ T37] audit: type=1326 audit(1773033197.550:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19630 comm="syz.5.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8ecf0394fb code=0x7ffc0000 [ 1044.389262][ T37] audit: type=1326 audit(1773033197.550:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19630 comm="syz.5.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecf07c799 code=0x7ffc0000 [ 1044.389307][ T37] audit: type=1326 audit(1773033197.610:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19630 comm="syz.5.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecf07c799 code=0x7ffc0000 [ 1044.389949][ T37] audit: type=1326 audit(1773033197.610:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19630 comm="syz.5.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ecf07c799 code=0x7ffc0000 [ 1044.390605][ T37] audit: type=1326 audit(1773033197.610:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19630 comm="syz.5.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ecf07c799 code=0x7ffc0000 [ 1044.390646][ T37] audit: type=1326 audit(1773033197.610:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19630 comm="syz.5.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecf07c799 code=0x7ffc0000 [ 1044.390683][ T37] audit: type=1326 audit(1773033197.610:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19630 comm="syz.5.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecf07c799 code=0x7ffc0000 [ 1044.729383][ T1439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1044.826338][ T68] hsr_slave_0: left promiscuous mode [ 1044.868809][ T68] hsr_slave_1: left promiscuous mode [ 1044.871042][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.871067][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.927666][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1044.927693][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.963555][T19642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.964889][T19642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.127478][ T68] veth1_macvtap: left promiscuous mode [ 1045.132436][ T68] veth0_vlan: left promiscuous mode [ 1045.844060][T19651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.857686][T19651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.959818][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1046.338930][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1046.397041][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1047.269958][T19660] FAULT_INJECTION: forcing a failure. [ 1047.269958][T19660] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.269993][T19660] CPU: 0 UID: 0 PID: 19660 Comm: syz.7.4568 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1047.270019][T19660] Tainted: [L]=SOFTLOCKUP [ 1047.270026][T19660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1047.270038][T19660] Call Trace: [ 1047.270045][T19660] [ 1047.270054][T19660] dump_stack_lvl+0xe8/0x150 [ 1047.270086][T19660] should_fail_ex+0x46b/0x600 [ 1047.270113][T19660] should_failslab+0xa8/0x100 [ 1047.270134][T19660] __kmalloc_noprof+0xdf/0x7b0 [ 1047.270160][T19660] ? tomoyo_encode+0x28b/0x550 [ 1047.270184][T19660] tomoyo_encode+0x28b/0x550 [ 1047.270207][T19660] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1047.270236][T19660] ? tomoyo_path_number_perm+0x219/0x630 [ 1047.270260][T19660] tomoyo_path_number_perm+0x246/0x630 [ 1047.270286][T19660] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1047.270313][T19660] ? __lock_acquire+0x6b5/0x2cf0 [ 1047.270366][T19660] ? __fget_files+0x2a/0x420 [ 1047.270390][T19660] ? __fget_files+0x2a/0x420 [ 1047.270410][T19660] ? __fget_files+0x3a6/0x420 [ 1047.270430][T19660] ? __fget_files+0x2a/0x420 [ 1047.270456][T19660] security_file_ioctl+0xc3/0x2a0 [ 1047.270484][T19660] __se_sys_ioctl+0x47/0x170 [ 1047.270513][T19660] do_syscall_64+0x14d/0xf80 [ 1047.270536][T19660] ? trace_irq_disable+0x3b/0x150 [ 1047.270556][T19660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.270575][T19660] ? clear_bhb_loop+0x40/0x90 [ 1047.270604][T19660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.270623][T19660] RIP: 0033:0x7f385f3dc799 [ 1047.270641][T19660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.270657][T19660] RSP: 002b:00007f385d60d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1047.270677][T19660] RAX: ffffffffffffffda RBX: 00007f385f656090 RCX: 00007f385f3dc799 [ 1047.270690][T19660] RDX: 0000200000000200 RSI: 00000000402c542c RDI: 0000000000000003 [ 1047.270702][T19660] RBP: 00007f385d60d090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.270715][T19660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1047.270727][T19660] R13: 00007f385f656128 R14: 00007f385f656090 R15: 00007ffe683ecee8 [ 1047.270758][T19660] [ 1047.270778][T19660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1048.305337][T19666] hugetlbfs: Bad value '%' for mount option 'size' [ 1048.305337][T19666] [ 1048.500946][T19662] hugetlbfs: Bad value '%' for mount option 'size' [ 1048.500946][T19662] [ 1048.519129][ T2209] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1048.627424][T19670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.645850][T19670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.213617][T15275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1051.843725][T15275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1051.861816][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1051.941909][T19685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.942471][T19685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.035511][T19690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.036081][T19690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.162129][T19692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.162671][T19692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.163002][T19715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.163548][T19715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.337173][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.367700][ T6319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1054.369337][ T1448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1054.413366][ T64] block nbd0: Possible stuck request ffff88802656e000: control (read@0,4096B). Runtime 330 seconds [ 1054.528763][T19711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1057.904452][ T6319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1057.905538][ T6319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1058.234678][T19731] hugetlbfs: Bad value '%' for mount option 'size' [ 1058.234678][T19731] [ 1058.521716][T19736] binder_alloc: 19735: binder_alloc_buf, no vma [ 1058.522916][T19736] binder: 19735:19736 ioctl c0306201 200000000240 returned -11 [ 1058.688929][T19743] MTD: Attempt to mount non-MTD device "./file0" [ 1058.689695][T19743] ./file0: Can't open blockdev [ 1058.894346][T19749] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4594'. [ 1058.974589][T19754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.989647][T19754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.991602][T19753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.992089][T19753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.099541][ T1439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1060.376505][ T1439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1060.513654][T19767] FAULT_INJECTION: forcing a failure. [ 1060.513654][T19767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1060.513689][T19767] CPU: 0 UID: 0 PID: 19767 Comm: syz.5.4601 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1060.513714][T19767] Tainted: [L]=SOFTLOCKUP [ 1060.513722][T19767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1060.513733][T19767] Call Trace: [ 1060.513741][T19767] [ 1060.513750][T19767] dump_stack_lvl+0xe8/0x150 [ 1060.513781][T19767] should_fail_ex+0x46b/0x600 [ 1060.513807][T19767] _copy_from_user+0x2d/0xb0 [ 1060.513831][T19767] __copy_msghdr+0x3c5/0x5b0 [ 1060.513862][T19767] ___sys_sendmsg+0x213/0x360 [ 1060.513890][T19767] ? __pfx____sys_sendmsg+0x10/0x10 [ 1060.513944][T19767] ? __fget_files+0x2a/0x420 [ 1060.513966][T19767] ? __fget_files+0x3a6/0x420 [ 1060.513996][T19767] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1060.514024][T19767] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1060.514057][T19767] ? __pfx_ksys_write+0x10/0x10 [ 1060.514093][T19767] do_syscall_64+0x14d/0xf80 [ 1060.514116][T19767] ? trace_irq_disable+0x3b/0x150 [ 1060.514136][T19767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.514156][T19767] ? clear_bhb_loop+0x40/0x90 [ 1060.514178][T19767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.514197][T19767] RIP: 0033:0x7f8ecf07c799 [ 1060.514214][T19767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.514230][T19767] RSP: 002b:00007f8ecd2d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1060.514250][T19767] RAX: ffffffffffffffda RBX: 00007f8ecf2f5fa0 RCX: 00007f8ecf07c799 [ 1060.514264][T19767] RDX: 0000000000004004 RSI: 0000200000000380 RDI: 0000000000000003 [ 1060.514277][T19767] RBP: 00007f8ecd2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.514288][T19767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.514300][T19767] R13: 00007f8ecf2f6038 R14: 00007f8ecf2f5fa0 R15: 00007ffd676d02f8 [ 1060.514330][T19767] [ 1061.896730][T19773] hugetlbfs: Bad value '%' for mount option 'size' [ 1061.896730][T19773] [ 1062.718933][T19779] binder: BINDER_SET_CONTEXT_MGR already set [ 1062.718947][T19779] binder: 19775:19779 ioctl 4018620d 200000000040 returned -16 [ 1062.771055][T19779] binder: 19775:19779 ioctl c0306201 200000000240 returned -11 [ 1062.833893][T19781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4605'. [ 1062.948115][T19790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.948679][T19790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.106023][T19792] FAULT_INJECTION: forcing a failure. [ 1063.106023][T19792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.106046][T19792] CPU: 0 UID: 0 PID: 19792 Comm: syz.5.4609 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1063.106061][T19792] Tainted: [L]=SOFTLOCKUP [ 1063.106065][T19792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1063.106071][T19792] Call Trace: [ 1063.106076][T19792] [ 1063.106081][T19792] dump_stack_lvl+0xe8/0x150 [ 1063.106101][T19792] should_fail_ex+0x46b/0x600 [ 1063.106116][T19792] _copy_from_iter+0x1d3/0x1670 [ 1063.106132][T19792] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1063.106167][T19792] ? __alloc_skb+0x27d/0x7d0 [ 1063.106189][T19792] ? __pfx__copy_from_iter+0x10/0x10 [ 1063.106206][T19792] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1063.106229][T19792] ? __alloc_skb+0x27d/0x7d0 [ 1063.106253][T19792] ? netlink_sendmsg+0x650/0xb40 [ 1063.106270][T19792] ? skb_put+0x11b/0x210 [ 1063.106294][T19792] netlink_sendmsg+0x6c0/0xb40 [ 1063.106320][T19792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1063.106341][T19792] ? unwind_get_return_address+0x4d/0x90 [ 1063.106364][T19792] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1063.106391][T19792] ____sys_sendmsg+0x94c/0x9c0 [ 1063.106421][T19792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1063.106451][T19792] ? import_iovec+0x73/0xa0 [ 1063.106474][T19792] ___sys_sendmsg+0x2a5/0x360 [ 1063.106502][T19792] ? __pfx____sys_sendmsg+0x10/0x10 [ 1063.106553][T19792] ? __fget_files+0x2a/0x420 [ 1063.106573][T19792] ? __fget_files+0x3a6/0x420 [ 1063.106600][T19792] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1063.106624][T19792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1063.106661][T19792] ? __pfx_ksys_write+0x10/0x10 [ 1063.106696][T19792] do_syscall_64+0x14d/0xf80 [ 1063.106718][T19792] ? trace_irq_disable+0x3b/0x150 [ 1063.106736][T19792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.106754][T19792] ? clear_bhb_loop+0x40/0x90 [ 1063.106774][T19792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.106792][T19792] RIP: 0033:0x7f8ecf07c799 [ 1063.106809][T19792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.106825][T19792] RSP: 002b:00007f8ecd2d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1063.106844][T19792] RAX: ffffffffffffffda RBX: 00007f8ecf2f5fa0 RCX: 00007f8ecf07c799 [ 1063.106857][T19792] RDX: 0000000008004002 RSI: 0000200000000180 RDI: 0000000000000003 [ 1063.106869][T19792] RBP: 00007f8ecd2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.106880][T19792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.106891][T19792] R13: 00007f8ecf2f6038 R14: 00007f8ecf2f5fa0 R15: 00007ffd676d02f8 [ 1063.106919][T19792] [ 1064.245888][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1064.277071][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1064.442097][T19803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.442628][T19803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.794174][T19814] hugetlbfs: Bad value '%' for mount option 'size' [ 1065.794174][T19814] [ 1065.875994][ T64] block nbd2: Possible stuck request ffff888026615080: control (read@0,4096B). Runtime 300 seconds [ 1065.921390][T19816] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4620'. [ 1065.960940][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1065.961161][ T1439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1066.212761][T19827] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4624'. [ 1067.388555][T19833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.389058][T19833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.518527][T19839] netdevsim netdevsim5: Direct firmware load for / [ 1067.518527][T19839] failed with error -2 [ 1067.518542][T19839] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 1067.518542][T19839] [ 1067.638055][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 1067.638073][ T37] audit: type=1800 audit(1773033220.860:809): pid=19836 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.5.4626" name="/newroot/166/pids.events" dev="tmpfs" ino=891 res=0 errno=0 [ 1067.913957][T19851] FAULT_INJECTION: forcing a failure. [ 1067.913957][T19851] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.913991][T19851] CPU: 0 UID: 0 PID: 19851 Comm: syz.6.4630 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1067.914016][T19851] Tainted: [L]=SOFTLOCKUP [ 1067.914023][T19851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1067.914035][T19851] Call Trace: [ 1067.914043][T19851] [ 1067.914051][T19851] dump_stack_lvl+0xe8/0x150 [ 1067.914086][T19851] should_fail_ex+0x46b/0x600 [ 1067.914113][T19851] should_failslab+0xa8/0x100 [ 1067.914135][T19851] __kmalloc_cache_noprof+0x84/0x690 [ 1067.914162][T19851] ? fuse_dentry_init+0x51/0xe0 [ 1067.914294][T19851] fuse_dentry_init+0x51/0xe0 [ 1067.914321][T19851] __d_alloc+0x480/0x6f0 [ 1067.914352][T19851] d_alloc+0x4b/0x190 [ 1067.914372][T19851] ? lookup_one_qstr_excl+0xc8/0x360 [ 1067.914398][T19851] lookup_one_qstr_excl+0xdc/0x360 [ 1067.914425][T19851] filename_create+0x20e/0x370 [ 1067.914456][T19851] ? __pfx_filename_create+0x10/0x10 [ 1067.914491][T19851] filename_mkdirat+0xd2/0x520 [ 1067.914516][T19851] ? __pfx_filename_mkdirat+0x10/0x10 [ 1067.914538][T19851] ? do_getname+0x151/0x250 [ 1067.914561][T19851] __se_sys_mkdirat+0x35/0x150 [ 1067.914583][T19851] do_syscall_64+0x14d/0xf80 [ 1067.914606][T19851] ? trace_irq_disable+0x3b/0x150 [ 1067.914626][T19851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.914646][T19851] ? clear_bhb_loop+0x40/0x90 [ 1067.914669][T19851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.914687][T19851] RIP: 0033:0x7f955390c799 [ 1067.914705][T19851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.914721][T19851] RSP: 002b:00007f9551b66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1067.914749][T19851] RAX: ffffffffffffffda RBX: 00007f9553b85fa0 RCX: 00007f955390c799 [ 1067.914763][T19851] RDX: 0000000000000062 RSI: 0000200000000900 RDI: ffffffffffffff9c [ 1067.914776][T19851] RBP: 00007f9551b66090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.914788][T19851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.914800][T19851] R13: 00007f9553b86038 R14: 00007f9553b85fa0 R15: 00007ffe1b0cf078 [ 1067.914832][T19851] [ 1068.326919][T19859] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4632'. [ 1068.418585][T19861] veth1_to_bond: entered allmulticast mode [ 1068.419733][T19861] FAULT_INJECTION: forcing a failure. [ 1068.419733][T19861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.419766][T19861] CPU: 0 UID: 0 PID: 19861 Comm: syz.3.4633 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1068.419792][T19861] Tainted: [L]=SOFTLOCKUP [ 1068.419799][T19861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1068.419810][T19861] Call Trace: [ 1068.419818][T19861] [ 1068.419827][T19861] dump_stack_lvl+0xe8/0x150 [ 1068.419859][T19861] should_fail_ex+0x46b/0x600 [ 1068.419886][T19861] _copy_from_iter+0x1d3/0x1670 [ 1068.419915][T19861] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1068.419939][T19861] ? __alloc_skb+0x27d/0x7d0 [ 1068.419962][T19861] ? __pfx__copy_from_iter+0x10/0x10 [ 1068.419981][T19861] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1068.420005][T19861] ? __alloc_skb+0x27d/0x7d0 [ 1068.420032][T19861] ? netlink_sendmsg+0x650/0xb40 [ 1068.420052][T19861] ? skb_put+0x11b/0x210 [ 1068.420077][T19861] netlink_sendmsg+0x6c0/0xb40 [ 1068.420110][T19861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1068.420133][T19861] ? unwind_get_return_address+0x4d/0x90 [ 1068.420157][T19861] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1068.420185][T19861] ____sys_sendmsg+0x94c/0x9c0 [ 1068.420215][T19861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1068.420249][T19861] ? import_iovec+0x73/0xa0 [ 1068.420280][T19861] ___sys_sendmsg+0x2a5/0x360 [ 1068.420310][T19861] ? __pfx____sys_sendmsg+0x10/0x10 [ 1068.420367][T19861] ? __fget_files+0x2a/0x420 [ 1068.420388][T19861] ? __fget_files+0x3a6/0x420 [ 1068.420419][T19861] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1068.420446][T19861] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1068.420480][T19861] ? __pfx_ksys_write+0x10/0x10 [ 1068.420516][T19861] do_syscall_64+0x14d/0xf80 [ 1068.420538][T19861] ? trace_irq_disable+0x3b/0x150 [ 1068.420559][T19861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.420578][T19861] ? clear_bhb_loop+0x40/0x90 [ 1068.420599][T19861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.420618][T19861] RIP: 0033:0x7fe721f4c799 [ 1068.420635][T19861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.420651][T19861] RSP: 002b:00007fe72019e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1068.420671][T19861] RAX: ffffffffffffffda RBX: 00007fe7221c5fa0 RCX: 00007fe721f4c799 [ 1068.420685][T19861] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1068.420697][T19861] RBP: 00007fe72019e090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.420710][T19861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.420721][T19861] R13: 00007fe7221c6038 R14: 00007fe7221c5fa0 R15: 00007fff7553c028 [ 1068.420751][T19861] [ 1068.421200][T19860] veth1_to_bond: left allmulticast mode [ 1068.968495][T19863] hugetlbfs: Bad value '%' for mount option 'size' [ 1068.968495][T19863] [ 1071.599580][ T1439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1071.662936][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1071.670502][ T2209] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1071.674133][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1071.765275][T19875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.765836][T19875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.275332][T19888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.275870][T19888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.609620][T19896] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4644'. [ 1074.151157][T19903] hugetlbfs: Bad value '%' for mount option 'size' [ 1074.151157][T19903] [ 1074.426443][T19905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.426751][T19905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.590085][T19908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4649'. [ 1075.839097][T19921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.839656][T19921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.926401][T19925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.930341][T19925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.931349][T19924] FAULT_INJECTION: forcing a failure. [ 1075.931349][T19924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1075.931380][T19924] CPU: 0 UID: 0 PID: 19924 Comm: syz.5.4654 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1075.931405][T19924] Tainted: [L]=SOFTLOCKUP [ 1075.931412][T19924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1075.931423][T19924] Call Trace: [ 1075.931431][T19924] [ 1075.931439][T19924] dump_stack_lvl+0xe8/0x150 [ 1075.931477][T19924] should_fail_ex+0x46b/0x600 [ 1075.931506][T19924] _copy_from_iter+0x1d3/0x1670 [ 1075.931535][T19924] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1075.931561][T19924] ? __alloc_skb+0x27d/0x7d0 [ 1075.931584][T19924] ? __pfx__copy_from_iter+0x10/0x10 [ 1075.931604][T19924] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1075.931628][T19924] ? __alloc_skb+0x27d/0x7d0 [ 1075.931654][T19924] ? netlink_sendmsg+0x650/0xb40 [ 1075.931675][T19924] ? skb_put+0x11b/0x210 [ 1075.931701][T19924] netlink_sendmsg+0x6c0/0xb40 [ 1075.931731][T19924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1075.931754][T19924] ? unwind_get_return_address+0x4d/0x90 [ 1075.931776][T19924] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1075.931803][T19924] ____sys_sendmsg+0x94c/0x9c0 [ 1075.931833][T19924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1075.931865][T19924] ? import_iovec+0x73/0xa0 [ 1075.931890][T19924] ___sys_sendmsg+0x2a5/0x360 [ 1075.931919][T19924] ? __pfx____sys_sendmsg+0x10/0x10 [ 1075.931975][T19924] ? __fget_files+0x2a/0x420 [ 1075.931996][T19924] ? __fget_files+0x3a6/0x420 [ 1075.932026][T19924] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1075.932053][T19924] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1075.932087][T19924] ? __pfx_ksys_write+0x10/0x10 [ 1075.932123][T19924] do_syscall_64+0x14d/0xf80 [ 1075.932146][T19924] ? trace_irq_disable+0x3b/0x150 [ 1075.932166][T19924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.932185][T19924] ? clear_bhb_loop+0x40/0x90 [ 1075.932208][T19924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.932226][T19924] RIP: 0033:0x7f8ecf07c799 [ 1075.932244][T19924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.932260][T19924] RSP: 002b:00007f8ecd2d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1075.932280][T19924] RAX: ffffffffffffffda RBX: 00007f8ecf2f5fa0 RCX: 00007f8ecf07c799 [ 1075.932294][T19924] RDX: 0000000004004080 RSI: 0000200000000240 RDI: 0000000000000003 [ 1075.932307][T19924] RBP: 00007f8ecd2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.932319][T19924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.932330][T19924] R13: 00007f8ecf2f6038 R14: 00007f8ecf2f5fa0 R15: 00007ffd676d02f8 [ 1075.932360][T19924] [ 1076.143541][T19930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.144045][T19930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.844164][ T1439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1076.844388][ T2209] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1076.844820][ T1439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1077.318106][ T1386] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1077.490065][T19949] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4662'. [ 1079.133458][T19970] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4669'. [ 1079.169526][T19970] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4669'. [ 1079.183694][T19974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.185397][T19974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.845528][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4673'. [ 1080.060352][T19983] overlayfs: missing 'lowerdir' [ 1080.401000][T19990] FAULT_INJECTION: forcing a failure. [ 1080.401000][T19990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.401034][T19990] CPU: 1 UID: 0 PID: 19990 Comm: syz.1.4674 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1080.401060][T19990] Tainted: [L]=SOFTLOCKUP [ 1080.401076][T19990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1080.401088][T19990] Call Trace: [ 1080.401096][T19990] [ 1080.401104][T19990] dump_stack_lvl+0xe8/0x150 [ 1080.401135][T19990] should_fail_ex+0x46b/0x600 [ 1080.401161][T19990] _copy_to_iter+0x589/0x17d0 [ 1080.401194][T19990] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1080.401216][T19990] ? __pfx__copy_to_iter+0x10/0x10 [ 1080.401234][T19990] ? rt_spin_lock+0x1e0/0x400 [ 1080.401256][T19990] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1080.401286][T19990] __skb_datagram_iter+0xf8/0x980 [ 1080.401314][T19990] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1080.401348][T19990] skb_copy_datagram_iter+0xb5/0x270 [ 1080.401376][T19990] netlink_recvmsg+0x2c3/0xa50 [ 1080.401397][T19990] ? __lock_acquire+0x6b5/0x2cf0 [ 1080.401424][T19990] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1080.401454][T19990] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1080.401478][T19990] ? security_socket_recvmsg+0x7e/0x2c0 [ 1080.401501][T19990] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1080.401523][T19990] sock_recvmsg+0x172/0x1b0 [ 1080.401547][T19990] ____sys_recvmsg+0x1f2/0x4b0 [ 1080.401580][T19990] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1080.401619][T19990] ? import_iovec+0x73/0xa0 [ 1080.401644][T19990] ___sys_recvmsg+0x215/0x590 [ 1080.401672][T19990] ? __pfx____sys_recvmsg+0x10/0x10 [ 1080.401717][T19990] ? __fget_files+0x3a6/0x420 [ 1080.401749][T19990] do_recvmmsg+0x33a/0x800 [ 1080.401782][T19990] ? __pfx_do_recvmmsg+0x10/0x10 [ 1080.401819][T19990] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1080.401854][T19990] __x64_sys_recvmmsg+0x198/0x250 [ 1080.401882][T19990] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1080.401919][T19990] do_syscall_64+0x14d/0xf80 [ 1080.401941][T19990] ? trace_irq_disable+0x3b/0x150 [ 1080.401961][T19990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.401980][T19990] ? clear_bhb_loop+0x40/0x90 [ 1080.402003][T19990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.402021][T19990] RIP: 0033:0x7f19036cc799 [ 1080.402039][T19990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.402054][T19990] RSP: 002b:00007f1901926028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1080.402082][T19990] RAX: ffffffffffffffda RBX: 00007f1903945fa0 RCX: 00007f19036cc799 [ 1080.402097][T19990] RDX: 0000000000000001 RSI: 000020000000cd40 RDI: 0000000000000003 [ 1080.402109][T19990] RBP: 00007f1901926090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.402121][T19990] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.402133][T19990] R13: 00007f1903946038 R14: 00007f1903945fa0 R15: 00007ffd332b59e8 [ 1080.402164][T19990] [ 1082.814380][ T486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1082.815032][ T486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1082.906861][ T3820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1083.082963][ T3820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1083.198197][T20010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.198741][T20010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.207051][T20012] FAULT_INJECTION: forcing a failure. [ 1083.207051][T20012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.207083][T20012] CPU: 0 UID: 0 PID: 20012 Comm: syz.7.4681 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1083.207108][T20012] Tainted: [L]=SOFTLOCKUP [ 1083.207116][T20012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1083.207127][T20012] Call Trace: [ 1083.207135][T20012] [ 1083.207143][T20012] dump_stack_lvl+0xe8/0x150 [ 1083.207173][T20012] should_fail_ex+0x46b/0x600 [ 1083.207199][T20012] _copy_from_iter+0x1d3/0x1670 [ 1083.207229][T20012] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1083.207253][T20012] ? __alloc_skb+0x27d/0x7d0 [ 1083.207275][T20012] ? __pfx__copy_from_iter+0x10/0x10 [ 1083.207301][T20012] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1083.207325][T20012] ? __alloc_skb+0x27d/0x7d0 [ 1083.207351][T20012] ? netlink_sendmsg+0x650/0xb40 [ 1083.207371][T20012] ? skb_put+0x11b/0x210 [ 1083.207396][T20012] netlink_sendmsg+0x6c0/0xb40 [ 1083.207425][T20012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1083.207448][T20012] ? unwind_get_return_address+0x4d/0x90 [ 1083.207470][T20012] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1083.207498][T20012] ____sys_sendmsg+0x94c/0x9c0 [ 1083.207528][T20012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1083.207560][T20012] ? import_iovec+0x73/0xa0 [ 1083.207586][T20012] ___sys_sendmsg+0x2a5/0x360 [ 1083.207615][T20012] ? __pfx____sys_sendmsg+0x10/0x10 [ 1083.207672][T20012] ? __fget_files+0x2a/0x420 [ 1083.207692][T20012] ? __fget_files+0x3a6/0x420 [ 1083.207723][T20012] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1083.207750][T20012] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1083.207783][T20012] ? __pfx_ksys_write+0x10/0x10 [ 1083.207818][T20012] do_syscall_64+0x14d/0xf80 [ 1083.207841][T20012] ? trace_irq_disable+0x3b/0x150 [ 1083.207861][T20012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.207879][T20012] ? clear_bhb_loop+0x40/0x90 [ 1083.207902][T20012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.207919][T20012] RIP: 0033:0x7f385f3dc799 [ 1083.207937][T20012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.207952][T20012] RSP: 002b:00007f385d62e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1083.207973][T20012] RAX: ffffffffffffffda RBX: 00007f385f655fa0 RCX: 00007f385f3dc799 [ 1083.207986][T20012] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1083.207998][T20012] RBP: 00007f385d62e090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.208010][T20012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.208021][T20012] R13: 00007f385f656038 R14: 00007f385f655fa0 R15: 00007ffe683ecee8 [ 1083.208051][T20012] [ 1085.044922][ T64] block nbd0: Possible stuck request ffff88802656e000: control (read@0,4096B). Runtime 360 seconds [ 1085.481059][T20036] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4688'. [ 1085.562759][T20029] infiniband syz1: set active [ 1085.573767][T20029] infiniband syz1: added veth0 [ 1085.758558][T20029] RDS/IB: syz1: added [ 1085.759424][T20029] smc: adding ib device syz1 with port count 1 [ 1085.759770][T20029] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 1085.983133][T20044] netlink: 'syz.3.4691': attribute type 8 has an invalid length. [ 1086.345822][T20052] FAULT_INJECTION: forcing a failure. [ 1086.345822][T20052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1086.345857][T20052] CPU: 0 UID: 0 PID: 20052 Comm: syz.3.4693 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1086.345881][T20052] Tainted: [L]=SOFTLOCKUP [ 1086.345888][T20052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1086.345899][T20052] Call Trace: [ 1086.345907][T20052] [ 1086.345915][T20052] dump_stack_lvl+0xe8/0x150 [ 1086.345943][T20052] should_fail_ex+0x46b/0x600 [ 1086.345959][T20052] _copy_from_user+0x2d/0xb0 [ 1086.345973][T20052] __copy_msghdr+0x3c5/0x5b0 [ 1086.345990][T20052] ___sys_sendmsg+0x213/0x360 [ 1086.346007][T20052] ? __pfx____sys_sendmsg+0x10/0x10 [ 1086.346038][T20052] ? __fget_files+0x2a/0x420 [ 1086.346050][T20052] ? __fget_files+0x3a6/0x420 [ 1086.346067][T20052] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1086.346082][T20052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1086.346101][T20052] ? __pfx_ksys_write+0x10/0x10 [ 1086.346121][T20052] do_syscall_64+0x14d/0xf80 [ 1086.346134][T20052] ? trace_irq_disable+0x3b/0x150 [ 1086.346146][T20052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.346163][T20052] ? clear_bhb_loop+0x40/0x90 [ 1086.346175][T20052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.346185][T20052] RIP: 0033:0x7fe721f4c799 [ 1086.346196][T20052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.346205][T20052] RSP: 002b:00007fe72017d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1086.346216][T20052] RAX: ffffffffffffffda RBX: 00007fe7221c6090 RCX: 00007fe721f4c799 [ 1086.346224][T20052] RDX: 0000000000004004 RSI: 0000200000000380 RDI: 0000000000000005 [ 1086.346231][T20052] RBP: 00007fe72017d090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.346237][T20052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.346243][T20052] R13: 00007fe7221c6128 R14: 00007fe7221c6090 R15: 00007fff7553c028 [ 1086.346259][T20052] [ 1087.707205][T20066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.707710][T20066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.194111][ T486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1088.194511][ T486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1088.194871][ T486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1088.197669][ T486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1090.411760][T20083] FAULT_INJECTION: forcing a failure. [ 1090.411760][T20083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1090.411792][T20083] CPU: 0 UID: 0 PID: 20083 Comm: syz.1.4704 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1090.411816][T20083] Tainted: [L]=SOFTLOCKUP [ 1090.411822][T20083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1090.411830][T20083] Call Trace: [ 1090.411836][T20083] [ 1090.411843][T20083] dump_stack_lvl+0xe8/0x150 [ 1090.411880][T20083] should_fail_ex+0x46b/0x600 [ 1090.411899][T20083] _copy_from_iter+0x1d3/0x1670 [ 1090.411922][T20083] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1090.411943][T20083] ? __alloc_skb+0x27d/0x7d0 [ 1090.411959][T20083] ? __pfx__copy_from_iter+0x10/0x10 [ 1090.411973][T20083] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1090.411990][T20083] ? __alloc_skb+0x27d/0x7d0 [ 1090.412010][T20083] ? netlink_sendmsg+0x650/0xb40 [ 1090.412025][T20083] ? skb_put+0x11b/0x210 [ 1090.412044][T20083] netlink_sendmsg+0x6c0/0xb40 [ 1090.412066][T20083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1090.412082][T20083] ? unwind_get_return_address+0x4d/0x90 [ 1090.412099][T20083] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1090.412121][T20083] ____sys_sendmsg+0x94c/0x9c0 [ 1090.412144][T20083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1090.412169][T20083] ? import_iovec+0x73/0xa0 [ 1090.412190][T20083] ___sys_sendmsg+0x2a5/0x360 [ 1090.412213][T20083] ? __pfx____sys_sendmsg+0x10/0x10 [ 1090.412258][T20083] ? __fget_files+0x2a/0x420 [ 1090.412276][T20083] ? __fget_files+0x3a6/0x420 [ 1090.412302][T20083] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1090.412323][T20083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1090.412349][T20083] ? __pfx_ksys_write+0x10/0x10 [ 1090.412381][T20083] do_syscall_64+0x14d/0xf80 [ 1090.412401][T20083] ? trace_irq_disable+0x3b/0x150 [ 1090.412418][T20083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.412434][T20083] ? clear_bhb_loop+0x40/0x90 [ 1090.412453][T20083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.412470][T20083] RIP: 0033:0x7f19036cc799 [ 1090.412484][T20083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.412496][T20083] RSP: 002b:00007f1901926028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1090.412511][T20083] RAX: ffffffffffffffda RBX: 00007f1903945fa0 RCX: 00007f19036cc799 [ 1090.412521][T20083] RDX: 0000000000000010 RSI: 0000200000000380 RDI: 0000000000000004 [ 1090.412530][T20083] RBP: 00007f1901926090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.412539][T20083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.412547][T20083] R13: 00007f1903946038 R14: 00007f1903945fa0 R15: 00007ffd332b59e8 [ 1090.412568][T20083] [ 1090.635955][T20085] FAULT_INJECTION: forcing a failure. [ 1090.635955][T20085] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.635987][T20085] CPU: 0 UID: 0 PID: 20085 Comm: syz.1.4706 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1090.636011][T20085] Tainted: [L]=SOFTLOCKUP [ 1090.636018][T20085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1090.636029][T20085] Call Trace: [ 1090.636037][T20085] [ 1090.636045][T20085] dump_stack_lvl+0xe8/0x150 [ 1090.636076][T20085] should_fail_ex+0x46b/0x600 [ 1090.636102][T20085] should_failslab+0xa8/0x100 [ 1090.636121][T20085] __kmalloc_cache_noprof+0x84/0x690 [ 1090.636148][T20085] ? nr_add_neigh+0xc0/0x440 [ 1090.636282][T20085] ? nr_neigh_get_dev+0x135/0x170 [ 1090.636307][T20085] nr_add_neigh+0xc0/0x440 [ 1090.636332][T20085] nr_rt_ioctl+0xea2/0x1040 [ 1090.636362][T20085] ? kasan_quarantine_put+0xbb/0x1f0 [ 1090.636385][T20085] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1090.636414][T20085] ? cap_capable+0x123/0x490 [ 1090.636436][T20085] ? tomoyo_path_number_perm+0x219/0x630 [ 1090.636469][T20085] ? capable+0x88/0xe0 [ 1090.636494][T20085] ? nr_ioctl+0x1b1/0x3b0 [ 1090.636513][T20085] sock_do_ioctl+0x101/0x320 [ 1090.636536][T20085] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1090.636559][T20085] ? __asan_memset+0x22/0x50 [ 1090.636580][T20085] ? smack_file_ioctl+0x263/0x360 [ 1090.636608][T20085] sock_ioctl+0x5c9/0x7f0 [ 1090.636628][T20085] ? __pfx_sock_ioctl+0x10/0x10 [ 1090.636647][T20085] ? __fget_files+0x2a/0x420 [ 1090.636668][T20085] ? __fget_files+0x3a6/0x420 [ 1090.636687][T20085] ? __fget_files+0x2a/0x420 [ 1090.636711][T20085] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1090.636729][T20085] ? __pfx_sock_ioctl+0x10/0x10 [ 1090.636747][T20085] __se_sys_ioctl+0xff/0x170 [ 1090.636775][T20085] do_syscall_64+0x14d/0xf80 [ 1090.636797][T20085] ? trace_irq_disable+0x3b/0x150 [ 1090.636816][T20085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.636834][T20085] ? clear_bhb_loop+0x40/0x90 [ 1090.636862][T20085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.636880][T20085] RIP: 0033:0x7f19036cc799 [ 1090.636898][T20085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.636913][T20085] RSP: 002b:00007f1901926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1090.636932][T20085] RAX: ffffffffffffffda RBX: 00007f1903945fa0 RCX: 00007f19036cc799 [ 1090.636946][T20085] RDX: 00002000000001c0 RSI: 000000000000890b RDI: 0000000000000004 [ 1090.636958][T20085] RBP: 00007f1901926090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.636970][T20085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.636981][T20085] R13: 00007f1903946038 R14: 00007f1903945fa0 R15: 00007ffd332b59e8 [ 1090.637010][T20085] [ 1091.098307][T20092] FAULT_INJECTION: forcing a failure. [ 1091.098307][T20092] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.098341][T20092] CPU: 1 UID: 0 PID: 20092 Comm: syz.7.4709 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1091.098367][T20092] Tainted: [L]=SOFTLOCKUP [ 1091.098374][T20092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1091.098385][T20092] Call Trace: [ 1091.098393][T20092] [ 1091.098400][T20092] dump_stack_lvl+0xe8/0x150 [ 1091.098430][T20092] should_fail_ex+0x46b/0x600 [ 1091.098457][T20092] should_failslab+0xa8/0x100 [ 1091.098478][T20092] kmem_cache_alloc_noprof+0x87/0x680 [ 1091.098504][T20092] ? dst_alloc+0x105/0x170 [ 1091.098528][T20092] ? fib_lookup+0x76/0x440 [ 1091.098645][T20092] dst_alloc+0x105/0x170 [ 1091.098675][T20092] ip_route_input_rcu+0x23e5/0x3130 [ 1091.098710][T20092] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 1091.098746][T20092] ? __skb_flow_dissect+0x649c/0x6d20 [ 1091.098815][T20092] ? ip_route_input_noref+0xad/0x270 [ 1091.098838][T20092] ip_route_input_noref+0x17c/0x270 [ 1091.098862][T20092] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1091.098892][T20092] ? __pfx___skb_flow_dissect+0x10/0x10 [ 1091.098920][T20092] ip_rcv_finish_core+0x5af/0x1c00 [ 1091.098956][T20092] ip_rcv_finish+0x14c/0x2a0 [ 1091.098984][T20092] NF_HOOK+0x336/0x3c0 [ 1091.099009][T20092] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1091.099032][T20092] ? NF_HOOK+0x9e/0x3c0 [ 1091.099055][T20092] ? __pfx_NF_HOOK+0x10/0x10 [ 1091.099080][T20092] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1091.099111][T20092] ? netif_receive_skb+0x102/0xc50 [ 1091.099158][T20092] ? __pfx_ip_rcv+0x10/0x10 [ 1091.099182][T20092] netif_receive_skb+0x45b/0xc50 [ 1091.099208][T20092] ? __pfx_netif_receive_skb+0x10/0x10 [ 1091.099227][T20092] ? rcu_is_watching+0x15/0xb0 [ 1091.099246][T20092] ? __local_bh_disable_ip+0x3c/0x420 [ 1091.099271][T20092] ? tun_rx_batched+0x191/0x760 [ 1091.099294][T20092] ? tun_rx_batched+0x191/0x760 [ 1091.099318][T20092] tun_rx_batched+0x1ee/0x760 [ 1091.099347][T20092] ? __pfx_tun_rx_batched+0x10/0x10 [ 1091.099367][T20092] ? __virtio_net_hdr_to_skb+0x9d2/0x13d0 [ 1091.099389][T20092] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1091.099433][T20092] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1091.099457][T20092] ? lockdep_hardirqs_on+0x7a/0x110 [ 1091.099486][T20092] ? tun_get_user+0x2669/0x3de0 [ 1091.099508][T20092] tun_get_user+0x2a88/0x3de0 [ 1091.099554][T20092] ? __pfx_tun_get_user+0x10/0x10 [ 1091.099603][T20092] ? ref_tracker_alloc+0x332/0x4a0 [ 1091.099629][T20092] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1091.099655][T20092] ? tun_get+0x1c/0x2f0 [ 1091.099683][T20092] ? tun_get+0x1c/0x2f0 [ 1091.099705][T20092] ? tun_get+0x1c/0x2f0 [ 1091.099732][T20092] tun_chr_write_iter+0x119/0x200 [ 1091.099757][T20092] vfs_write+0x629/0xba0 [ 1091.099792][T20092] ? __pfx_vfs_write+0x10/0x10 [ 1091.099828][T20092] ? __fget_files+0x2a/0x420 [ 1091.099860][T20092] ksys_write+0x156/0x270 [ 1091.099888][T20092] ? __pfx_ksys_write+0x10/0x10 [ 1091.099925][T20092] do_syscall_64+0x14d/0xf80 [ 1091.099947][T20092] ? trace_irq_disable+0x3b/0x150 [ 1091.099966][T20092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.099986][T20092] ? clear_bhb_loop+0x40/0x90 [ 1091.100009][T20092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.100026][T20092] RIP: 0033:0x7f385f39cfce [ 1091.100044][T20092] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1091.100059][T20092] RSP: 002b:00007f385d62dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1091.100078][T20092] RAX: ffffffffffffffda RBX: 00007f385d62e6c0 RCX: 00007f385f39cfce [ 1091.100090][T20092] RDX: 00000000000000be RSI: 0000200000000800 RDI: 00000000000000c8 [ 1091.100100][T20092] RBP: 00007f385d62e090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.100110][T20092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.100122][T20092] R13: 00007f385f656038 R14: 00007f385f655fa0 R15: 00007ffe683ecee8 [ 1091.100154][T20092] [ 1093.245537][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1093.610020][T20110] FAULT_INJECTION: forcing a failure. [ 1093.610020][T20110] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1093.610055][T20110] CPU: 0 UID: 0 PID: 20110 Comm: syz.7.4713 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1093.610081][T20110] Tainted: [L]=SOFTLOCKUP [ 1093.610089][T20110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1093.610099][T20110] Call Trace: [ 1093.610107][T20110] [ 1093.610115][T20110] dump_stack_lvl+0xe8/0x150 [ 1093.610146][T20110] should_fail_ex+0x46b/0x600 [ 1093.610173][T20110] prepare_alloc_pages+0x22a/0x6b0 [ 1093.610201][T20110] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1093.610226][T20110] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1093.610250][T20110] ? __pfx_policy_nodemask+0x10/0x10 [ 1093.610278][T20110] alloc_pages_mpol+0xd1/0x380 [ 1093.610301][T20110] ___kmalloc_large_node+0x4e/0x150 [ 1093.610329][T20110] __kmalloc_large_node_noprof+0x18/0x90 [ 1093.610359][T20110] __kmalloc_noprof+0x4a3/0x7b0 [ 1093.610391][T20110] ? bcm_tx_setup+0x5a0/0x1be0 [ 1093.610508][T20110] bcm_tx_setup+0x5a0/0x1be0 [ 1093.610535][T20110] ? lockdep_hardirqs_on+0x7a/0x110 [ 1093.610562][T20110] bcm_sendmsg+0x46e/0x6c0 [ 1093.610586][T20110] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1093.610609][T20110] ? unwind_get_return_address+0x4d/0x90 [ 1093.610632][T20110] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1093.610659][T20110] ____sys_sendmsg+0x94c/0x9c0 [ 1093.610688][T20110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1093.610720][T20110] ? import_iovec+0x73/0xa0 [ 1093.610746][T20110] ___sys_sendmsg+0x2a5/0x360 [ 1093.610776][T20110] ? __pfx____sys_sendmsg+0x10/0x10 [ 1093.610832][T20110] ? __fget_files+0x2a/0x420 [ 1093.610853][T20110] ? __fget_files+0x3a6/0x420 [ 1093.610881][T20110] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1093.610907][T20110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1093.610940][T20110] ? __pfx_ksys_write+0x10/0x10 [ 1093.610973][T20110] do_syscall_64+0x14d/0xf80 [ 1093.610994][T20110] ? trace_irq_disable+0x3b/0x150 [ 1093.611014][T20110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.611034][T20110] ? clear_bhb_loop+0x40/0x90 [ 1093.611056][T20110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.611075][T20110] RIP: 0033:0x7f385f3dc799 [ 1093.611093][T20110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.611110][T20110] RSP: 002b:00007f385d60d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1093.611130][T20110] RAX: ffffffffffffffda RBX: 00007f385f656090 RCX: 00007f385f3dc799 [ 1093.611144][T20110] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000006 [ 1093.611157][T20110] RBP: 00007f385d60d090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.611169][T20110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.611181][T20110] R13: 00007f385f656128 R14: 00007f385f656090 R15: 00007ffe683ecee8 [ 1093.611212][T20110] [ 1093.952593][ T1386] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1093.952702][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1093.953140][ T1386] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1095.188353][T20123] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1095.188389][T20123] FAULT_INJECTION: forcing a failure. [ 1095.188389][T20123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.188511][T20123] CPU: 0 UID: 0 PID: 20123 Comm: syz.7.4717 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1095.188537][T20123] Tainted: [L]=SOFTLOCKUP [ 1095.188544][T20123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1095.188556][T20123] Call Trace: [ 1095.188564][T20123] [ 1095.188573][T20123] dump_stack_lvl+0xe8/0x150 [ 1095.188604][T20123] should_fail_ex+0x46b/0x600 [ 1095.188630][T20123] _copy_to_user+0x31/0xb0 [ 1095.188657][T20123] simple_read_from_buffer+0xe1/0x170 [ 1095.188685][T20123] proc_fail_nth_read+0x1be/0x230 [ 1095.188712][T20123] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1095.188736][T20123] ? rw_verify_area+0x2ac/0x4e0 [ 1095.188759][T20123] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1095.188782][T20123] vfs_read+0x212/0xa80 [ 1095.188821][T20123] ? __pfx_vfs_read+0x10/0x10 [ 1095.188848][T20123] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1095.188872][T20123] ? lockdep_hardirqs_on+0x7a/0x110 [ 1095.188896][T20123] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1095.188919][T20123] ? mutex_lock_nested+0x152/0x1d0 [ 1095.188937][T20123] ? fdget_pos+0x252/0x320 [ 1095.188967][T20123] ksys_read+0x156/0x270 [ 1095.188994][T20123] ? __pfx_ksys_read+0x10/0x10 [ 1095.189017][T20123] ? __pfx_sock_ioctl+0x10/0x10 [ 1095.189046][T20123] do_syscall_64+0x14d/0xf80 [ 1095.189068][T20123] ? trace_irq_disable+0x3b/0x150 [ 1095.189089][T20123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.189109][T20123] ? clear_bhb_loop+0x40/0x90 [ 1095.189131][T20123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.189150][T20123] RIP: 0033:0x7f385f39cfce [ 1095.189169][T20123] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1095.189185][T20123] RSP: 002b:00007f385d62dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1095.189205][T20123] RAX: ffffffffffffffda RBX: 00007f385d62e6c0 RCX: 00007f385f39cfce [ 1095.189220][T20123] RDX: 000000000000000f RSI: 00007f385d62e0a0 RDI: 0000000000000007 [ 1095.189232][T20123] RBP: 00007f385d62e090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.189245][T20123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.189257][T20123] R13: 00007f385f656038 R14: 00007f385f655fa0 R15: 00007ffe683ecee8 [ 1095.189289][T20123] [ 1095.963523][T20126] FAULT_INJECTION: forcing a failure. [ 1095.963523][T20126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.963559][T20126] CPU: 1 UID: 0 PID: 20126 Comm: syz.5.4718 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1095.963585][T20126] Tainted: [L]=SOFTLOCKUP [ 1095.963593][T20126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1095.963604][T20126] Call Trace: [ 1095.963612][T20126] [ 1095.963620][T20126] dump_stack_lvl+0xe8/0x150 [ 1095.963659][T20126] should_fail_ex+0x46b/0x600 [ 1095.963685][T20126] _copy_from_iter+0x1d3/0x1670 [ 1095.963715][T20126] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1095.963739][T20126] ? __alloc_skb+0x27d/0x7d0 [ 1095.963761][T20126] ? __pfx__copy_from_iter+0x10/0x10 [ 1095.963780][T20126] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1095.963803][T20126] ? __alloc_skb+0x27d/0x7d0 [ 1095.963828][T20126] ? netlink_sendmsg+0x650/0xb40 [ 1095.963848][T20126] ? skb_put+0x11b/0x210 [ 1095.963874][T20126] netlink_sendmsg+0x6c0/0xb40 [ 1095.963903][T20126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1095.963932][T20126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1095.963959][T20126] ____sys_sendmsg+0x94c/0x9c0 [ 1095.963990][T20126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1095.964022][T20126] ? import_iovec+0x73/0xa0 [ 1095.964048][T20126] ___sys_sendmsg+0x2a5/0x360 [ 1095.964077][T20126] ? __pfx____sys_sendmsg+0x10/0x10 [ 1095.964134][T20126] ? __fget_files+0x2a/0x420 [ 1095.964155][T20126] ? __fget_files+0x3a6/0x420 [ 1095.964186][T20126] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1095.964214][T20126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1095.964247][T20126] ? __pfx_ksys_write+0x10/0x10 [ 1095.964282][T20126] do_syscall_64+0x14d/0xf80 [ 1095.964309][T20126] ? trace_irq_disable+0x3b/0x150 [ 1095.964328][T20126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.964347][T20126] ? clear_bhb_loop+0x40/0x90 [ 1095.964369][T20126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.964388][T20126] RIP: 0033:0x7f8ecf07c799 [ 1095.964406][T20126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.964421][T20126] RSP: 002b:00007f8ecd2d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1095.964442][T20126] RAX: ffffffffffffffda RBX: 00007f8ecf2f5fa0 RCX: 00007f8ecf07c799 [ 1095.964456][T20126] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000004 [ 1095.964468][T20126] RBP: 00007f8ecd2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.964479][T20126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.964491][T20126] R13: 00007f8ecf2f6038 R14: 00007f8ecf2f5fa0 R15: 00007ffd676d02f8 [ 1095.964521][T20126] [ 1096.549109][ T64] block nbd2: Possible stuck request ffff888026615080: control (read@0,4096B). Runtime 330 seconds [ 1096.913815][T20144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.916640][T20144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.313026][T12675] Bluetooth: hci5: command 0x0406 tx timeout [ 1097.793889][T20150] ieee802154 phy1 wpan1: encryption failed: -22 [ 1098.464186][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1098.696092][T20156] hugetlbfs: Bad value '%' for mount option 'size' [ 1098.696092][T20156] [ 1099.890731][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1099.898989][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1099.899609][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1100.573916][T20170] libceph: resolve '0..' (ret=-3): failed [ 1100.850523][ T6062] usb 7-1: USB disconnect, device number 26 [ 1100.967431][ T6062] ftdi_sio 7-1:227.124: device disconnected [ 1101.353114][T12675] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1101.368715][T12675] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1101.376601][T12675] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1101.893913][T12675] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1101.923288][T12675] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1102.400233][T20189] 9p: Bad value for 'rfdno' [ 1102.688165][T20193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.690911][T20193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.250500][T20205] netlink: 592 bytes leftover after parsing attributes in process `syz.3.4743'. [ 1104.315504][T20177] chnl_net:caif_netlink_parms(): no params data found [ 1104.465117][ T5805] Bluetooth: hci7: command tx timeout [ 1105.633103][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1105.633748][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1105.676383][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1105.831267][T20177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.831392][T20177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.831592][T20177] bridge_slave_0: entered allmulticast mode [ 1105.835459][T20177] bridge_slave_0: entered promiscuous mode [ 1105.838472][T20177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.838582][T20177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.838755][T20177] bridge_slave_1: entered allmulticast mode [ 1105.841131][T20177] bridge_slave_1: entered promiscuous mode [ 1105.924923][T20225] 9p: Bad value for 'rfdno' [ 1106.029628][T20227] FAULT_INJECTION: forcing a failure. [ 1106.029628][T20227] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.029662][T20227] CPU: 0 UID: 0 PID: 20227 Comm: syz.3.4749 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1106.029687][T20227] Tainted: [L]=SOFTLOCKUP [ 1106.029694][T20227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1106.029705][T20227] Call Trace: [ 1106.029713][T20227] [ 1106.029721][T20227] dump_stack_lvl+0xe8/0x150 [ 1106.029752][T20227] should_fail_ex+0x46b/0x600 [ 1106.029777][T20227] should_failslab+0xa8/0x100 [ 1106.029807][T20227] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1106.029833][T20227] ? __alloc_skb+0x1d0/0x7d0 [ 1106.029853][T20227] ? lockdep_hardirqs_on+0x7a/0x110 [ 1106.029881][T20227] __alloc_skb+0x1d0/0x7d0 [ 1106.029902][T20227] ? kernel_text_address+0xa5/0xe0 [ 1106.029926][T20227] alloc_skb_with_frags+0xca/0x890 [ 1106.029962][T20227] sock_alloc_send_pskb+0x884/0x9a0 [ 1106.029992][T20227] ? stack_depot_save_flags+0x33/0x810 [ 1106.030022][T20227] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1106.030045][T20227] ? ip6_make_skb+0x1e7/0x350 [ 1106.030070][T20227] ? udpv6_sendmsg+0x1cfe/0x2560 [ 1106.030140][T20227] ? ____sys_sendmsg+0x5aa/0x9c0 [ 1106.030163][T20227] ? ___sys_sendmsg+0x2a5/0x360 [ 1106.030184][T20227] ? __sys_sendmmsg+0x282/0x4e0 [ 1106.030206][T20227] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1106.030228][T20227] ? do_syscall_64+0x14d/0xf80 [ 1106.030250][T20227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.030279][T20227] __ip6_append_data+0x2976/0x3c50 [ 1106.030320][T20227] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1106.030362][T20227] ? __pfx___ip6_append_data+0x10/0x10 [ 1106.030387][T20227] ? __pfx_ip6_mtu+0x10/0x10 [ 1106.030416][T20227] ip6_make_skb+0x2df/0x350 [ 1106.030442][T20227] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1106.030466][T20227] ? __pfx_ip6_make_skb+0x10/0x10 [ 1106.030503][T20227] ? xfrm_lookup_route+0x103/0x1c0 [ 1106.030585][T20227] udpv6_sendmsg+0x1cfe/0x2560 [ 1106.030619][T20227] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1106.030645][T20227] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1106.030677][T20227] ? __pfx_handle_mm_fault+0x10/0x10 [ 1106.030700][T20227] ? smack_socket_sendmsg+0x1a9/0x590 [ 1106.030743][T20227] ? do_user_addr_fault+0xbad/0x1340 [ 1106.030774][T20227] ? inet_send_prepare+0x5c/0x270 [ 1106.030805][T20227] ? inet6_sendmsg+0xe4/0x120 [ 1106.030825][T20227] ____sys_sendmsg+0x5aa/0x9c0 [ 1106.030855][T20227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1106.030888][T20227] ? import_iovec+0x73/0xa0 [ 1106.030915][T20227] ___sys_sendmsg+0x2a5/0x360 [ 1106.030945][T20227] ? __pfx____sys_sendmsg+0x10/0x10 [ 1106.030974][T20227] ? kstrtouint+0x6e/0xe0 [ 1106.031018][T20227] ? __fget_files+0x2a/0x420 [ 1106.031038][T20227] ? __fget_files+0x3a6/0x420 [ 1106.031068][T20227] __sys_sendmmsg+0x282/0x4e0 [ 1106.031098][T20227] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1106.031131][T20227] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1106.031163][T20227] ? ksys_write+0x248/0x270 [ 1106.031190][T20227] ? __pfx_ksys_write+0x10/0x10 [ 1106.031220][T20227] __x64_sys_sendmmsg+0xa0/0xc0 [ 1106.031246][T20227] do_syscall_64+0x14d/0xf80 [ 1106.031267][T20227] ? trace_irq_disable+0x3b/0x150 [ 1106.031287][T20227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.031305][T20227] ? clear_bhb_loop+0x40/0x90 [ 1106.031327][T20227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.031345][T20227] RIP: 0033:0x7fe721f4c799 [ 1106.031363][T20227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.031379][T20227] RSP: 002b:00007fe72019e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1106.031399][T20227] RAX: ffffffffffffffda RBX: 00007fe7221c5fa0 RCX: 00007fe721f4c799 [ 1106.031413][T20227] RDX: 000000000000003b RSI: 0000200000001840 RDI: 0000000000000003 [ 1106.031425][T20227] RBP: 00007fe72019e090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.031437][T20227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.031449][T20227] R13: 00007fe7221c6038 R14: 00007fe7221c5fa0 R15: 00007fff7553c028 [ 1106.031478][T20227] [ 1106.504879][ T5805] Bluetooth: hci7: command tx timeout [ 1106.680630][T20177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.705536][T20177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.872040][T20177] team0: Port device team_slave_0 added [ 1106.893267][T20177] team0: Port device team_slave_1 added [ 1107.538353][T20177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.538371][T20177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.538396][T20177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.610957][T20177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.610972][T20177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.610997][T20177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.971481][T20251] FAULT_INJECTION: forcing a failure. [ 1107.971481][T20251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1107.971515][T20251] CPU: 1 UID: 0 PID: 20251 Comm: syz.3.4757 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1107.971549][T20251] Tainted: [L]=SOFTLOCKUP [ 1107.971556][T20251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1107.971567][T20251] Call Trace: [ 1107.971576][T20251] [ 1107.971584][T20251] dump_stack_lvl+0xe8/0x150 [ 1107.971615][T20251] should_fail_ex+0x46b/0x600 [ 1107.971642][T20251] _copy_to_user+0x31/0xb0 [ 1107.971668][T20251] simple_read_from_buffer+0xe1/0x170 [ 1107.971696][T20251] proc_fail_nth_read+0x1be/0x230 [ 1107.971721][T20251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1107.971746][T20251] ? rw_verify_area+0x2ac/0x4e0 [ 1107.971770][T20251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1107.971792][T20251] vfs_read+0x212/0xa80 [ 1107.971824][T20251] ? __pfx_vfs_read+0x10/0x10 [ 1107.971851][T20251] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1107.971876][T20251] ? lockdep_hardirqs_on+0x7a/0x110 [ 1107.971899][T20251] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1107.971923][T20251] ? mutex_lock_nested+0x152/0x1d0 [ 1107.971941][T20251] ? fdget_pos+0x252/0x320 [ 1107.971971][T20251] ksys_read+0x156/0x270 [ 1107.971997][T20251] ? __pfx_ksys_read+0x10/0x10 [ 1107.972031][T20251] do_syscall_64+0x14d/0xf80 [ 1107.972053][T20251] ? trace_irq_disable+0x3b/0x150 [ 1107.972073][T20251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.972092][T20251] ? clear_bhb_loop+0x40/0x90 [ 1107.972115][T20251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.972134][T20251] RIP: 0033:0x7fe721f0cfce [ 1107.972152][T20251] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1107.972164][T20251] RSP: 002b:00007fe72019dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1107.972181][T20251] RAX: ffffffffffffffda RBX: 00007fe72019e6c0 RCX: 00007fe721f0cfce [ 1107.972195][T20251] RDX: 000000000000000f RSI: 00007fe72019e0a0 RDI: 0000000000000004 [ 1107.972208][T20251] RBP: 00007fe72019e090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.972220][T20251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.972231][T20251] R13: 00007fe7221c6038 R14: 00007fe7221c5fa0 R15: 00007fff7553c028 [ 1107.972262][T20251] [ 1108.034682][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1108.961078][ T5805] Bluetooth: hci7: command tx timeout [ 1109.791350][T20255] 9p: Bad value for 'rfdno' [ 1110.343343][T20259] FAULT_INJECTION: forcing a failure. [ 1110.343343][T20259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.343371][T20259] CPU: 1 UID: 0 PID: 20259 Comm: syz.3.4759 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1110.343390][T20259] Tainted: [L]=SOFTLOCKUP [ 1110.343394][T20259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1110.343403][T20259] Call Trace: [ 1110.343409][T20259] [ 1110.343415][T20259] dump_stack_lvl+0xe8/0x150 [ 1110.343440][T20259] should_fail_ex+0x46b/0x600 [ 1110.343459][T20259] _copy_from_iter+0x1d3/0x1670 [ 1110.343481][T20259] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1110.343500][T20259] ? __alloc_skb+0x27d/0x7d0 [ 1110.343516][T20259] ? __pfx__copy_from_iter+0x10/0x10 [ 1110.343529][T20259] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1110.343546][T20259] ? __alloc_skb+0x27d/0x7d0 [ 1110.343565][T20259] ? netlink_sendmsg+0x650/0xb40 [ 1110.343580][T20259] ? skb_put+0x11b/0x210 [ 1110.343598][T20259] netlink_sendmsg+0x6c0/0xb40 [ 1110.343618][T20259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1110.343635][T20259] ? unwind_get_return_address+0x4d/0x90 [ 1110.343651][T20259] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1110.343673][T20259] ____sys_sendmsg+0x94c/0x9c0 [ 1110.343695][T20259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1110.343718][T20259] ? import_iovec+0x73/0xa0 [ 1110.343736][T20259] ___sys_sendmsg+0x2a5/0x360 [ 1110.343758][T20259] ? __pfx____sys_sendmsg+0x10/0x10 [ 1110.343808][T20259] ? __fget_files+0x2a/0x420 [ 1110.343826][T20259] ? __fget_files+0x3a6/0x420 [ 1110.343848][T20259] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1110.343869][T20259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1110.343894][T20259] ? __pfx_ksys_write+0x10/0x10 [ 1110.343919][T20259] do_syscall_64+0x14d/0xf80 [ 1110.343937][T20259] ? trace_irq_disable+0x3b/0x150 [ 1110.343952][T20259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.343966][T20259] ? clear_bhb_loop+0x40/0x90 [ 1110.343982][T20259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.343995][T20259] RIP: 0033:0x7fe721f4c799 [ 1110.344009][T20259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.344021][T20259] RSP: 002b:00007fe72019e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1110.344036][T20259] RAX: ffffffffffffffda RBX: 00007fe7221c5fa0 RCX: 00007fe721f4c799 [ 1110.344047][T20259] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1110.344055][T20259] RBP: 00007fe72019e090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.344063][T20259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.344071][T20259] R13: 00007fe7221c6038 R14: 00007fe7221c5fa0 R15: 00007fff7553c028 [ 1110.344091][T20259] [ 1110.545936][ T5166] udevd[5166]: worker [12406] /devices/virtual/block/nbd2 timeout; kill it [ 1110.546035][ T5166] udevd[5166]: seq 17575 '/devices/virtual/block/nbd2' killed [ 1110.546076][ T5166] udevd[5166]: worker [12427] /devices/virtual/block/nbd0 timeout; kill it [ 1110.546147][ T5166] udevd[5166]: seq 16860 '/devices/virtual/block/nbd0' killed [ 1111.007721][ T5805] Bluetooth: hci7: command tx timeout [ 1111.483883][ T6319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1111.484514][ T6319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1111.485080][ T6319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1112.136412][ T1439] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.136435][ T1439] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.240349][T20177] hsr_slave_0: entered promiscuous mode [ 1112.247618][T20177] hsr_slave_1: entered promiscuous mode [ 1112.248731][T20177] debugfs: 'hsr0' already exists in 'hsr' [ 1112.248755][T20177] Cannot create hsr debugfs directory [ 1112.605548][ T1439] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.605581][ T1439] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.142113][ T6319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1113.355663][T14597] kernel read not supported for file /sequencer (pid: 14597 comm: kworker/0:3) [ 1113.505887][ T1439] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1113.505908][ T1439] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.632265][T20302] binder: 20301:20302 ioctl c0306201 200000000240 returned -11 [ 1113.812988][ T1439] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1113.813011][ T1439] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.841644][T20308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.842162][T20308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.081760][T20306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4774'. [ 1114.081792][T20306] netlink: 'syz.3.4774': attribute type 21 has an invalid length. [ 1114.081806][T20306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4774'. [ 1114.103406][T20306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4774'. [ 1114.103426][T20306] netlink: 'syz.3.4774': attribute type 21 has an invalid length. [ 1114.103435][T20306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4774'. [ 1114.688844][ T1439] bridge_slave_1: left allmulticast mode [ 1114.689111][ T1439] bridge_slave_1: left promiscuous mode [ 1114.706675][ T1439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.727017][T20331] binder: 20328:20331 ioctl c0306201 200000000240 returned -11 [ 1114.782465][ T1439] bridge_slave_0: left allmulticast mode [ 1114.782493][ T1439] bridge_slave_0: left promiscuous mode [ 1114.782723][ T1439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.099719][ T64] block nbd0: Possible stuck request ffff88802656e000: control (read@0,4096B). Runtime 390 seconds [ 1115.451264][T20341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.451869][T20341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.469463][T20341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.469987][T20341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.713384][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.079740][ T1439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1116.139681][ T1439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1116.161360][ T1439] bond0 (unregistering): Released all slaves [ 1116.267544][T20177] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1116.323372][ T1439] : left promiscuous mode [ 1116.412547][T20349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.413104][T20349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.442280][T20344] 9p: Could not find request transport: 0xffffffffffffffff [ 1116.445566][T20177] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1116.476225][T20344] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4785'. [ 1116.493432][T20348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.493910][T20348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.502607][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1116.514579][T20344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.525220][T20177] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1116.579456][ T1386] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1116.585392][ T1439] tipc: Left network mode [ 1116.585439][T20177] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1116.794147][T20177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.853221][T20177] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.979562][ T1305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1117.025175][T15262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.030903][T15262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.420735][T15262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.420872][T15262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.677387][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4790'. [ 1118.677421][T20376] netlink: 'syz.1.4790': attribute type 21 has an invalid length. [ 1118.677435][T20376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4790'. [ 1118.798865][ T1448] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.799112][ T1448] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.799168][ T1448] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.799203][ T1448] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.799413][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4790'. [ 1118.799440][T20376] netlink: 'syz.1.4790': attribute type 21 has an invalid length. [ 1118.799453][T20376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4790'. [ 1118.938492][T20382] binder: 20381:20382 ioctl c0306201 200000000240 returned -11 [ 1120.153006][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1120.463585][T20399] program syz.5.4795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1120.802832][T20177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.891419][T20407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.891953][T20407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.058860][T20410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.059404][T20410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.757084][T20434] binder: 20432:20434 ioctl c0306201 200000000240 returned -11 [ 1121.908394][T20440] FAULT_INJECTION: forcing a failure. [ 1121.908394][T20440] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.908429][T20440] CPU: 1 UID: 0 PID: 20440 Comm: syz.1.4805 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1121.908454][T20440] Tainted: [L]=SOFTLOCKUP [ 1121.908461][T20440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1121.908471][T20440] Call Trace: [ 1121.908479][T20440] [ 1121.908488][T20440] dump_stack_lvl+0xe8/0x150 [ 1121.908521][T20440] should_fail_ex+0x46b/0x600 [ 1121.908547][T20440] should_failslab+0xa8/0x100 [ 1121.908567][T20440] __kmalloc_noprof+0xdf/0x7b0 [ 1121.908591][T20440] ? kfree+0x4d/0x6c0 [ 1121.908612][T20440] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1121.908637][T20440] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1121.908667][T20440] ? tomoyo_path_number_perm+0x219/0x630 [ 1121.908690][T20440] tomoyo_path_number_perm+0x246/0x630 [ 1121.908717][T20440] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1121.908742][T20440] ? __lock_acquire+0x6b5/0x2cf0 [ 1121.908794][T20440] ? __fget_files+0x2a/0x420 [ 1121.908818][T20440] ? __fget_files+0x2a/0x420 [ 1121.908838][T20440] ? __fget_files+0x3a6/0x420 [ 1121.908858][T20440] ? __fget_files+0x2a/0x420 [ 1121.908882][T20440] security_file_ioctl+0xc3/0x2a0 [ 1121.908909][T20440] __se_sys_ioctl+0x47/0x170 [ 1121.908936][T20440] do_syscall_64+0x14d/0xf80 [ 1121.908959][T20440] ? trace_irq_disable+0x3b/0x150 [ 1121.908979][T20440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.908998][T20440] ? clear_bhb_loop+0x40/0x90 [ 1121.909020][T20440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.909037][T20440] RIP: 0033:0x7f19036cc799 [ 1121.909055][T20440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.909070][T20440] RSP: 002b:00007f1901926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1121.909089][T20440] RAX: ffffffffffffffda RBX: 00007f1903945fa0 RCX: 00007f19036cc799 [ 1121.909103][T20440] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000003 [ 1121.909114][T20440] RBP: 00007f1901926090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.909127][T20440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.909138][T20440] R13: 00007f1903946038 R14: 00007f1903945fa0 R15: 00007ffd332b59e8 [ 1121.909168][T20440] [ 1121.909281][T20440] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1122.100898][T15275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1122.101510][T15275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1122.381368][T20443] batman_adv: batadv0: Adding interface: dummy0 [ 1122.381384][T20443] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.381412][T20443] batman_adv: batadv0: Interface activated: dummy0 [ 1122.465647][T20444] batadv0: mtu less than device minimum [ 1122.481634][T20444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1122.490781][T20444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1122.498475][T20444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1122.505424][T20444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1122.514705][T20444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1122.525036][T20444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1122.534653][T20444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1122.543207][T20444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1122.561060][T20444] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1122.737100][T15275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1122.761024][T20454] : entered promiscuous mode [ 1122.888000][T20458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.889082][T20458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.152595][T20177] veth0_vlan: entered promiscuous mode [ 1123.193078][T20177] veth1_vlan: entered promiscuous mode [ 1123.611080][T20177] veth0_macvtap: entered promiscuous mode [ 1124.685930][T20177] veth1_macvtap: entered promiscuous mode [ 1124.861490][T20177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1124.939032][T20177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.004153][T15275] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.017011][T15275] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.017055][T15275] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.017090][T15275] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.956080][ T2209] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1126.334033][ T1439] hsr_slave_0: left promiscuous mode [ 1126.387155][ T1439] hsr_slave_1: left promiscuous mode [ 1126.388179][ T1439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1126.388203][ T1439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.416144][T20498] FAULT_INJECTION: forcing a failure. [ 1126.416144][T20498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.416175][T20498] CPU: 1 UID: 0 PID: 20498 Comm: syz.1.4822 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1126.416200][T20498] Tainted: [L]=SOFTLOCKUP [ 1126.416207][T20498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1126.416218][T20498] Call Trace: [ 1126.416226][T20498] [ 1126.416234][T20498] dump_stack_lvl+0xe8/0x150 [ 1126.416264][T20498] should_fail_ex+0x46b/0x600 [ 1126.416291][T20498] _copy_from_iter+0x1d3/0x1670 [ 1126.416320][T20498] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1126.416352][T20498] ? __alloc_skb+0x27d/0x7d0 [ 1126.416374][T20498] ? __pfx__copy_from_iter+0x10/0x10 [ 1126.416392][T20498] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1126.416410][T20498] ? __alloc_skb+0x27d/0x7d0 [ 1126.416430][T20498] ? netlink_sendmsg+0x650/0xb40 [ 1126.416445][T20498] ? skb_put+0x11b/0x210 [ 1126.416465][T20498] netlink_sendmsg+0x6c0/0xb40 [ 1126.416486][T20498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1126.416503][T20498] ? unwind_get_return_address+0x4d/0x90 [ 1126.416520][T20498] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1126.416541][T20498] ____sys_sendmsg+0x94c/0x9c0 [ 1126.416567][T20498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1126.416591][T20498] ? import_iovec+0x73/0xa0 [ 1126.416610][T20498] ___sys_sendmsg+0x2a5/0x360 [ 1126.416632][T20498] ? __pfx____sys_sendmsg+0x10/0x10 [ 1126.416674][T20498] ? __fget_files+0x2a/0x420 [ 1126.416690][T20498] ? __fget_files+0x3a6/0x420 [ 1126.416713][T20498] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1126.416733][T20498] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1126.416758][T20498] ? __pfx_ksys_write+0x10/0x10 [ 1126.416785][T20498] do_syscall_64+0x14d/0xf80 [ 1126.416803][T20498] ? trace_irq_disable+0x3b/0x150 [ 1126.416818][T20498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.416832][T20498] ? clear_bhb_loop+0x40/0x90 [ 1126.416850][T20498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.416864][T20498] RIP: 0033:0x7f19036cc799 [ 1126.416877][T20498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.416890][T20498] RSP: 002b:00007f1901926028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1126.416905][T20498] RAX: ffffffffffffffda RBX: 00007f1903945fa0 RCX: 00007f19036cc799 [ 1126.416915][T20498] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 1126.416925][T20498] RBP: 00007f1901926090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.416933][T20498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.416942][T20498] R13: 00007f1903946038 R14: 00007f1903945fa0 R15: 00007ffd332b59e8 [ 1126.416964][T20498] [ 1126.634121][ T64] block nbd2: Possible stuck request ffff888026615080: control (read@0,4096B). Runtime 360 seconds [ 1126.705017][ T1439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.705043][ T1439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.911470][ T1439] veth1_macvtap: left promiscuous mode [ 1126.911572][ T1439] veth0_macvtap: left promiscuous mode [ 1126.911810][ T1439] veth1_vlan: left promiscuous mode [ 1126.927129][ T1439] veth0_vlan: left promiscuous mode [ 1127.431950][T20509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4823'. [ 1127.748791][ T5805] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 1127.863633][T15275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1127.864072][T15275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1128.083724][ T1439] team0 (unregistering): Port device team_slave_1 removed [ 1128.144617][ T1439] team0 (unregistering): Port device team_slave_0 removed [ 1128.234476][ T486] smc: removing ib device syz1 [ 1128.495827][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1128.497494][ T6062] syz1: Port: 1 Link DOWN [ 1128.499638][T20516] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1128.499665][T20516] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1128.605440][T20516] net_ratelimit: 10 callbacks suppressed [ 1128.605454][T20516] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1130.675803][T20530] binder: 20529:20530 ioctl c0306201 200000000240 returned -11 [ 1131.028977][ T1386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.028997][ T1386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.267170][T20528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4829'. [ 1131.267193][T20528] netlink: 'syz.1.4829': attribute type 21 has an invalid length. [ 1131.267201][T20528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4829'. [ 1131.532352][T20553] FAULT_INJECTION: forcing a failure. [ 1131.532352][T20553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.532386][T20553] CPU: 0 UID: 0 PID: 20553 Comm: syz.5.4835 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1131.532412][T20553] Tainted: [L]=SOFTLOCKUP [ 1131.532420][T20553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1131.532431][T20553] Call Trace: [ 1131.532439][T20553] [ 1131.532447][T20553] dump_stack_lvl+0xe8/0x150 [ 1131.532486][T20553] should_fail_ex+0x46b/0x600 [ 1131.532510][T20553] _copy_from_iter+0x1d3/0x1670 [ 1131.532539][T20553] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1131.532563][T20553] ? __alloc_skb+0x27d/0x7d0 [ 1131.532585][T20553] ? __pfx__copy_from_iter+0x10/0x10 [ 1131.532604][T20553] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1131.532627][T20553] ? __alloc_skb+0x27d/0x7d0 [ 1131.532653][T20553] ? netlink_sendmsg+0x650/0xb40 [ 1131.532674][T20553] ? skb_put+0x11b/0x210 [ 1131.532699][T20553] netlink_sendmsg+0x6c0/0xb40 [ 1131.532728][T20553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1131.532751][T20553] ? unwind_get_return_address+0x4d/0x90 [ 1131.532774][T20553] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1131.532802][T20553] ____sys_sendmsg+0x94c/0x9c0 [ 1131.532831][T20553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1131.532864][T20553] ? import_iovec+0x73/0xa0 [ 1131.532886][T20553] ___sys_sendmsg+0x2a5/0x360 [ 1131.532915][T20553] ? __pfx____sys_sendmsg+0x10/0x10 [ 1131.532967][T20553] ? __fget_files+0x2a/0x420 [ 1131.532988][T20553] ? __fget_files+0x3a6/0x420 [ 1131.533017][T20553] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1131.533045][T20553] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1131.533077][T20553] ? __pfx_ksys_write+0x10/0x10 [ 1131.533112][T20553] do_syscall_64+0x14d/0xf80 [ 1131.533135][T20553] ? trace_irq_disable+0x3b/0x150 [ 1131.533155][T20553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.533174][T20553] ? clear_bhb_loop+0x40/0x90 [ 1131.533196][T20553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.533213][T20553] RIP: 0033:0x7f8ecf07c799 [ 1131.533230][T20553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.533245][T20553] RSP: 002b:00007f8ecd294028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1131.533264][T20553] RAX: ffffffffffffffda RBX: 00007f8ecf2f6180 RCX: 00007f8ecf07c799 [ 1131.533277][T20553] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 1131.533288][T20553] RBP: 00007f8ecd294090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.533300][T20553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.533311][T20553] R13: 00007f8ecf2f6218 R14: 00007f8ecf2f6180 R15: 00007ffd676d02f8 [ 1131.533340][T20553] [ 1131.600707][T20528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4829'. [ 1131.600740][T20528] netlink: 'syz.1.4829': attribute type 21 has an invalid length. [ 1131.600753][T20528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4829'. [ 1131.695119][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1131.939921][T20549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.940914][T20549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.029731][ T1386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.029751][ T1386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.311211][T12675] Bluetooth: hci2: command 0x0406 tx timeout [ 1133.882683][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1133.883318][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1134.378756][T15275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1134.598859][T20578] binder: 20575:20578 ioctl c0306201 200000000240 returned -11 [ 1134.718883][T20582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.740229][T20582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.638553][T20599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.345345][T20613] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4849'. [ 1137.449547][ T2209] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1137.721580][T20628] binder: 20625:20628 ioctl 4018620d 0 returned -22 [ 1137.740062][T20628] binder: 20625:20628 ioctl c0306201 200000000240 returned -11 [ 1137.843436][T20631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.867259][T20631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.033659][T20667] binder: 20666:20667 ioctl 4018620d 0 returned -22 [ 1139.045952][T20667] binder: 20666:20667 ioctl c0306201 200000000240 returned -11 [ 1139.175326][T20673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.176036][T20673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.227971][T20675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1139.371813][ T6315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1139.372028][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1139.472622][T20676] : entered promiscuous mode [ 1139.681837][T20683] FAULT_INJECTION: forcing a failure. [ 1139.681837][T20683] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.681873][T20683] CPU: 0 UID: 0 PID: 20683 Comm: syz.3.4869 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1139.681899][T20683] Tainted: [L]=SOFTLOCKUP [ 1139.681909][T20683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1139.681920][T20683] Call Trace: [ 1139.681928][T20683] [ 1139.681937][T20683] dump_stack_lvl+0xe8/0x150 [ 1139.681969][T20683] should_fail_ex+0x46b/0x600 [ 1139.681997][T20683] should_failslab+0xa8/0x100 [ 1139.682019][T20683] kmem_cache_alloc_noprof+0x87/0x680 [ 1139.682046][T20683] ? dst_alloc+0x105/0x170 [ 1139.682072][T20683] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1139.682095][T20683] dst_alloc+0x105/0x170 [ 1139.682125][T20683] ip6_pol_route+0xafb/0x13d0 [ 1139.682146][T20683] ? ip6_pol_route+0x160/0x13d0 [ 1139.682173][T20683] ? __pfx_ip6_pol_route+0x10/0x10 [ 1139.682203][T20683] ? inet6_ehashfn+0xaf/0x5a0 [ 1139.682299][T20683] ? __lock_acquire+0x6b5/0x2cf0 [ 1139.682323][T20683] fib6_rule_lookup+0x556/0x730 [ 1139.682348][T20683] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1139.682371][T20683] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1139.682402][T20683] ? __inet6_lookup_established+0xbca/0xc60 [ 1139.682438][T20683] ip6_route_input+0x730/0xad0 [ 1139.682468][T20683] ? __pfx_ip6_route_input+0x10/0x10 [ 1139.682522][T20683] ? ip6_rcv_finish_core+0x222/0x420 [ 1139.682553][T20683] ip6_rcv_finish+0x141/0x280 [ 1139.682583][T20683] NF_HOOK+0x336/0x3c0 [ 1139.682599][T20683] ? skb_orphan+0x4f/0xd0 [ 1139.682618][T20683] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1139.682642][T20683] ? NF_HOOK+0x9e/0x3c0 [ 1139.682666][T20683] ? __pfx_NF_HOOK+0x10/0x10 [ 1139.682687][T20683] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1139.682720][T20683] ? netif_receive_skb+0x102/0xc50 [ 1139.682742][T20683] netif_receive_skb+0x278/0xc50 [ 1139.682769][T20683] ? __pfx_netif_receive_skb+0x10/0x10 [ 1139.682789][T20683] ? rcu_is_watching+0x15/0xb0 [ 1139.682806][T20683] ? __local_bh_disable_ip+0x3c/0x420 [ 1139.682834][T20683] ? tun_rx_batched+0x191/0x760 [ 1139.682856][T20683] ? tun_rx_batched+0x191/0x760 [ 1139.682881][T20683] tun_rx_batched+0x1ee/0x760 [ 1139.682911][T20683] ? __pfx_tun_rx_batched+0x10/0x10 [ 1139.682931][T20683] ? __virtio_net_hdr_to_skb+0x9d2/0x13d0 [ 1139.682953][T20683] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1139.682998][T20683] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1139.683021][T20683] ? lockdep_hardirqs_on+0x7a/0x110 [ 1139.683050][T20683] ? tun_get_user+0x2669/0x3de0 [ 1139.683071][T20683] tun_get_user+0x2a88/0x3de0 [ 1139.683118][T20683] ? __pfx_tun_get_user+0x10/0x10 [ 1139.683162][T20683] ? ref_tracker_alloc+0x332/0x4a0 [ 1139.683187][T20683] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1139.683214][T20683] ? tun_get+0x1c/0x2f0 [ 1139.683243][T20683] ? tun_get+0x1c/0x2f0 [ 1139.683264][T20683] ? tun_get+0x1c/0x2f0 [ 1139.683292][T20683] tun_chr_write_iter+0x119/0x200 [ 1139.683318][T20683] vfs_write+0x629/0xba0 [ 1139.683354][T20683] ? __pfx_vfs_write+0x10/0x10 [ 1139.683390][T20683] ? __fget_files+0x2a/0x420 [ 1139.683423][T20683] ksys_write+0x156/0x270 [ 1139.683451][T20683] ? __pfx_ksys_write+0x10/0x10 [ 1139.683489][T20683] do_syscall_64+0x14d/0xf80 [ 1139.683511][T20683] ? trace_irq_disable+0x3b/0x150 [ 1139.683532][T20683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.683551][T20683] ? clear_bhb_loop+0x40/0x90 [ 1139.683574][T20683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.683593][T20683] RIP: 0033:0x7fe721f0cfce [ 1139.683611][T20683] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1139.683627][T20683] RSP: 002b:00007fe72019dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1139.683647][T20683] RAX: ffffffffffffffda RBX: 00007fe72019e6c0 RCX: 00007fe721f0cfce [ 1139.683667][T20683] RDX: 000000000000004e RSI: 0000200000000600 RDI: 00000000000000c8 [ 1139.683679][T20683] RBP: 00007fe72019e090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.683691][T20683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.683702][T20683] R13: 00007fe7221c6038 R14: 00007fe7221c5fa0 R15: 00007fff7553c028 [ 1139.683736][T20683] [ 1140.008000][ T38] INFO: task syz.2.4400:19068 blocked for more than 144 seconds. [ 1140.008024][ T38] Tainted: G L syzkaller #0 [ 1140.008035][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1140.008044][ T38] task:syz.2.4400 state:D stack:28896 pid:19068 tgid:19067 ppid:14632 task_flags:0x400140 flags:0x00080002 [ 1140.008101][ T38] Call Trac[ 1140.008101][ T38] Call Trace: [ 1140.008108][ T38] [ 1140.008121][ T38] __schedule+0x1553/0x5240 [ 1140.008155][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1140.008181][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1140.008214][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1140.008236][ T38] ? __pfx___schedule+0x10/0x10 [ 1140.008268][ T38] ? schedule+0x90/0x360 [ 1140.008292][ T38] schedule+0x164/0x360 [ 1140.008317][ T38] super_lock+0x1e0/0x3d0 [ 1140.008339][ T38] ? reacquire_held_locks+0x104/0x190 [ 1140.008363][ T38] ? __pfx_super_lock+0x10/0x10 [ 1140.008388][ T38] ? __pfx_var_wake_function+0x10/0x10 [ 1140.008418][ T38] ? rt_spin_unlock+0x160/0x200 [ 1140.008440][ T38] grab_super+0xb9/0x380 [ 1140.008464][ T38] ? preempt_count_add+0x91/0x190 [ 1140.008487][ T38] ? __pfx_grab_super+0x10/0x10 [ 1140.008508][ T38] ? rt_spin_lock+0x2ce/0x400 [ 1140.008525][ T38] ? mntput_no_expire+0x1c/0x1c0 [ 1140.008546][ T38] ? __pfx_rt_spin_lock+0x10/0x10 [ 1140.008570][ T38] ? lookup_bdev+0x1cd/0x290 [ 1140.008666][ T38] ? super_s_dev_test+0xb4/0x110 [ 1140.008699][ T38] ? __pfx_super_s_dev_test+0x10/0x10 [ 1140.008725][ T38] sget_fc+0x2c2/0xa40 [ 1140.008750][ T38] ? __pfx_super_s_dev_set+0x10/0x10 [ 1140.008778][ T38] get_tree_bdev_flags+0x214/0x4f0 [ 1140.008804][ T38] ? __pfx_romfs_fill_super+0x10/0x10 [ 1140.008860][ T38] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1140.008884][ T38] ? cap_capable+0x123/0x490 [ 1140.008908][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 1140.008939][ T38] vfs_get_tree+0x92/0x2a0 [ 1140.008968][ T38] do_new_mount+0x341/0xd30 [ 1140.008989][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 1140.009018][ T38] ? __pfx_do_new_mount+0x10/0x10 [ 1140.009040][ T38] ? ns_capable+0x89/0xe0 [ 1140.009075][ T38] ? user_path_at+0xd4/0x160 [ 1140.009102][ T38] __se_sys_mount+0x31d/0x420 [ 1140.009130][ T38] ? __pfx___se_sys_mount+0x10/0x10 [ 1140.009158][ T38] ? __x64_sys_mount+0x20/0xc0 [ 1140.009182][ T38] do_syscall_64+0x14d/0xf80 [ 1140.009205][ T38] ? trace_irq_disable+0x3b/0x150 [ 1140.009226][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.009245][ T38] ? clear_bhb_loop+0x40/0x90 [ 1140.009268][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.009287][ T38] RIP: 0033:0x7fee32c9c799 [ 1140.009304][ T38] RSP: 002b:00007fee30eee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1140.009325][ T38] RAX: ffffffffffffffda RBX: 00007fee32f15fa0 RCX: 00007fee32c9c799 [ 1140.009339][ T38] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000200000000080 [ 1140.009353][ T38] RBP: 00007fee32d32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1140.009365][ T38] R10: 0000000002200000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.009377][ T38] R13: 00007fee32f16038 R14: 00007fee32f15fa0 R15: 00007ffe15629d68 [ 1140.009408][ T38] [ 1140.009417][ T38] INFO: task syz.2.4400:19069 blocked for more than 144 seconds. [ 1140.009433][ T38] Tainted: G L syzkaller #0 [ 1140.009444][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1140.009453][ T38] task:syz.2.4400 state:D stack:28896 pid:19069 tgid:19067 ppid:14632 task_flags:0x400140 flags:0x00080002 [ 1140.009505][ T38] Call Trace: [ 1140.009512][ T38] [ 1140.009522][ T38] __schedule+0x1553/0x5240 [ 1140.009568][ T38] ? trace_irq_disable+0x3b/0x150 [ 1140.009592][ T38] ? __pfx___schedule+0x10/0x10 [ 1140.009628][ T38] rt_mutex_schedule+0x76/0xf0 [ 1140.009651][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1140.009690][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1140.009713][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 1140.009735][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1140.009756][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1140.009794][ T38] ? bdev_open+0xe0/0xcc0 [ 1140.009817][ T38] ? bdev_open+0xe0/0xcc0 [ 1140.009834][ T38] mutex_lock_nested+0x168/0x1d0 [ 1140.009859][ T38] bdev_open+0xe0/0xcc0 [ 1140.009888][ T38] bdev_file_open_by_dev+0x1be/0x240 [ 1140.009911][ T38] setup_bdev_super+0x5a/0x5b0 [ 1140.009940][ T38] get_tree_bdev_flags+0x389/0x4f0 [ 1140.009966][ T38] ? __pfx_romfs_fill_super+0x10/0x10 [ 1140.009984][ T38] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1140.010009][ T38] ? cap_capable+0x123/0x490 [ 1140.010032][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 1140.010060][ T38] vfs_get_tree+0x92/0x2a0 [ 1140.010087][ T38] do_new_mount+0x341/0xd30 [ 1140.010107][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 1140.010135][ T38] ? __pfx_do_new_mount+0x10/0x10 [ 1140.010157][ T38] ? ns_capable+0x89/0xe0 [ 1140.010189][ T38] ? user_path_at+0xd4/0x160 [ 1140.010215][ T38] __se_sys_mount+0x31d/0x420 [ 1140.010242][ T38] ? __pfx___se_sys_mount+0x10/0x10 [ 1140.010271][ T38] ? __x64_sys_mount+0x20/0xc0 [ 1140.010294][ T38] do_syscall_64+0x14d/0xf80 [ 1140.010316][ T38] ? trace_irq_disable+0x3b/0x150 [ 1140.010336][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.010355][ T38] ? clear_bhb_loop+0x40/0x90 [ 1140.010378][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.010396][ T38] RIP: 0033:0x7fee32c9c799 [ 1140.010413][ T38] RSP: 002b:00007fee30ecd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1140.010431][ T38] RAX: ffffffffffffffda RBX: 00007fee32f16090 RCX: 00007fee32c9c799 [ 1140.010445][ T38] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000200000000080 [ 1140.010459][ T38] RBP: 00007fee32d32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1140.010471][ T38] R10: 0000000002200000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.010483][ T38] R13: 00007fee32f16128 R14: 00007fee32f16090 R15: 00007ffe15629d68 [ 1140.010514][ T38] [ 1140.010552][ T38] [ 1140.010552][ T38] Showing all locks held in the system: [ 1140.010563][ T38] 2 locks held by kworker/0:1/10: [ 1140.010575][ T38] 4 locks held by pr/legacy/17: [ 1140.010586][ T38] 1 lock held by khungtaskd/38: [ 1140.010596][ T38] #0: ffffffff8ddcb840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1140.010661][ T38] 5 locks held by kworker/u8:6/486: [ 1140.010676][ T38] 4 locks held by kworker/u8:11/1439: [ 1140.010699][ T38] #0: ffff88801aee1138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1140.010743][ T38] #1: ffffc900062efc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1140.010788][ T38] #2: ffffffff8f14b840 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1140.010832][ T38] #3: ffffffff8ddd1ab0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1140.010885][ T38] 3 locks held by klogd/5155: [ 1140.010896][ T38] 2 locks held by getty/5557: [ 1140.010906][ T38] #0: ffff888037e6f0a0 (&tty->ldisc_sem [ 1140.019280][ T6315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1140.175519][ T38] ){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1140.175649][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1140.175707][ T38] 6 locks held by kworker/u8:17/6315: [ 1140.175719][ T38] 7 locks held by kworker/u8:21/6326: [ 1140.175734][ T38] 1 lock held by udevd/12406: [ 1140.175744][ T38] #0: ffff8880265104c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 1140.175787][ T38] 1 lock held by udevd/12427: [ 1140.175797][ T38] #0: ffff8880264b34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 1140.175848][ T38] 2 locks held by syz.2.4400/19069: [ 1140.175858][ T38] #0: ffff8880647a80d0 (&type->s_umount_key#59/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 1140.175914][ T38] #1: ffff8880265104c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 1140.175955][ T38] 10 locks held by syz-executor/19305: [ 1140.175968][ T38] 9 locks held by syz-executor/20177: [ 1140.175980][ T38] 1 lock held by syz.5.4862/20662: [ 1140.175991][ T38] 4 locks held by syz.1.4867/20676: [ 1140.176001][ T38] 7 locks held by syz.3.4869/20683: [ 1140.176014][ T38] [ 1140.176019][ T38] ============================================= [ 1140.176019][ T38] [ 1140.176125][ T38] NMI backtrace for cpu 1 [ 1140.176141][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1140.176169][ T38] Tainted: [L]=SOFTLOCKUP [ 1140.176175][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1140.176186][ T38] Call Trace: [ 1140.176194][ T38] [ 1140.176202][ T38] dump_stack_lvl+0xe8/0x150 [ 1140.176229][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1140.176249][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1140.176275][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1140.176296][ T38] sys_info+0x135/0x170 [ 1140.176320][ T38] watchdog+0xfd9/0x1030 [ 1140.176346][ T38] ? watchdog+0x21a/0x1030 [ 1140.176373][ T38] kthread+0x388/0x470 [ 1140.176392][ T38] ? __pfx_watchdog+0x10/0x10 [ 1140.176411][ T38] ? __pfx_kthread+0x10/0x10 [ 1140.176431][ T38] ret_from_fork+0x51e/0xb90 [ 1140.176457][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1140.176479][ T38] ? __switch_to+0xc7d/0x1450 [ 1140.176505][ T38] ? __pfx_kthread+0x10/0x10 [ 1140.176524][ T38] ret_from_fork_asm+0x1a/0x30 [ 1140.176556][ T38] [ 1140.176575][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1140.176604][ C0] NMI backtrace for cpu 0 [ 1140.176620][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1140.176642][ C0] Tainted: [L]=SOFTLOCKUP [ 1140.176648][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1140.176658][ C0] RIP: 0010:delay_tsc+0x5b/0xc0 [ 1140.176676][ C0] Code: 90 49 89 d7 49 c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 53 bf 01 00 00 00 e8 82 99 72 f6 65 8b 05 0b 0b 2d 07 85 c0 74 1c f3 90 01 00 00 00 e8 cb 97 72 f6 e8 76 77 01 00 39 c5 75 0e 0f 01 f9 [ 1140.176690][ C0] RSP: 0018:ffffc900001679d0 EFLAGS: 00000286 [ 1140.176705][ C0] RAX: 0000000080000000 RBX: 0000000000000899 RCX: 0000000000000000 [ 1140.176717][ C0] RDX: 000000000000024a RSI: ffffffff8ba65de0 RDI: 00000000ffffffff [ 1140.176728][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1140.176738][ C0] R10: dffffc0000000000 R11: ffffffff8b2104d0 R12: 1ffffffff332a0e6 [ 1140.176750][ C0] R13: 00000000ffffffff R14: 0000024a75495d10 R15: 000000000000030a [ 1140.176762][ C0] FS: 0000000000000000(0000) GS:ffff88812633f000(0000) knlGS:0000000000000000 [ 1140.176776][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1140.176788][ C0] CR2: 0000200000034000 CR3: 0000000038110000 CR4: 00000000003526f0 [ 1140.176802][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1140.176812][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1140.176823][ C0] Call Trace: [ 1140.176830][ C0] [ 1140.176838][ C0] wait_for_lsr+0x166/0x2f0 [ 1140.176971][ C0] serial8250_console_write+0x1391/0x1b90 [ 1140.176999][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1140.177022][ C0] ? console_flush_one_record+0x48f/0xb90 [ 1140.177051][ C0] console_flush_one_record+0x68b/0xb90 [ 1140.177077][ C0] ? console_flush_one_record+0xfa/0xb90 [ 1140.177101][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1140.177123][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1140.177146][ C0] legacy_kthread_func+0x1b6/0x250 [ 1140.177168][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1140.177189][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1140.177212][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1140.177236][ C0] kthread+0x388/0x470 [ 1140.177252][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1140.177272][ C0] ? __pfx_kthread+0x10/0x10 [ 1140.177288][ C0] ret_from_fork+0x51e/0xb90 [ 1140.177309][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1140.177328][ C0] ? __switch_to+0xc7d/0x1450 [ 1140.177347][ C0] ? __pfx_kthread+0x10/0x10 [ 1140.177362][ C0] ret_from_fork_asm+0x1a/0x30 [ 1140.177385][ C0] [ 1140.189215][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1140.189237][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1140.189261][ T38] Tainted: [L]=SOFTLOCKUP [ 1140.189268][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1140.189279][ T38] Call Trace: [ 1140.189288][ T38] [ 1140.189296][ T38] vpanic+0x56c/0xa60 [ 1140.189325][ T38] ? __pfx___schedule+0x10/0x10 [ 1140.189350][ T38] ? __pfx_vpanic+0x10/0x10 [ 1140.189383][ T38] panic+0xc5/0xd0 [ 1140.189407][ T38] ? __pfx_panic+0x10/0x10 [ 1140.189433][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1140.189459][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1140.189483][ T38] watchdog+0x1023/0x1030 [ 1140.189509][ T38] ? watchdog+0x21a/0x1030 [ 1140.189537][ T38] kthread+0x388/0x470 [ 1140.189556][ T38] ? __pfx_watchdog+0x10/0x10 [ 1140.189575][ T38] ? __pfx_kthread+0x10/0x10 [ 1140.189595][ T38] ret_from_fork+0x51e/0xb90 [ 1140.189621][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1140.189643][ T38] ? __switch_to+0xc7d/0x1450 [ 1140.189668][ T38] ? __pfx_kthread+0x10/0x10 [ 1140.189688][ T38] ret_from_fork_asm+0x1a/0x30 [ 1140.189721][ T38] [ 1140.189973][ T38] Kernel Offset: disabled