last executing test programs: 15m32.21984482s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x15) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 15m27.815665894s ago: executing program 3 (id=16): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@deltaction={0x18, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x20048086) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000040)=0x80000004, 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) setresgid(0x0, r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x20000000) 15m12.017498317s ago: executing program 32 (id=16): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@deltaction={0x18, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x20048086) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000040)=0x80000004, 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) setresgid(0x0, r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x20000000) 14m58.243776157s ago: executing program 4 (id=46): syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x40200) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, &(0x7f0000000040)}) getresuid(0x0, 0x0, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1004000e, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) 14m52.111634453s ago: executing program 2 (id=52): socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000002) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write(r0, &(0x7f00000000c0)='4', 0x1) 14m49.507617658s ago: executing program 2 (id=54): socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x4000000000000000, 0x0, 0x2004c883}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r6, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) 14m49.324053444s ago: executing program 4 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x109e01, 0x0) write(r4, &(0x7f0000000180), 0x0) 14m47.605542449s ago: executing program 4 (id=56): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="00020000160020002abd7000fddbdf25ac1e00010000000000000000000000000a0101020000000000000000000000004e2300804e22", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000004d63c000000ffff00000000000000000000000000018300000000000000ff030000000000005e0900000000000005000000000000000800000000000000050000000000000000000600000000000400000000000000b20a00000000000005000000000000000f00000000000000fdffffffffffffff0200000009000000ff7f00002abd70000735000002000536c00000000000000001000000040000000c000f00010000000000000008001f000300", @ANYRES32=r0, @ANYRES32, @ANYBLOB="ac1414aa000000000000000000000000000004d56c000000fc0100000000000000000000000000800500000000000000090000000000000007000000000000000100000000000000080000000000000004000000000000004b0e0000000000000100000000000000060000000000000000000000000000000400000000000000cb8f00000000000006000000ed010000feffffff29bd700001351000"], 0x200}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140), 0x10, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20000011) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) set_mempolicy(0x4005, 0x0, 0x6) socket(0x15, 0x6, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) fsopen(&(0x7f00000000c0)='9p\x00', 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) fanotify_mark(r1, 0x80, 0x8, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f00007c8000/0x4000)=nil, 0x4000, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 14m43.86936991s ago: executing program 2 (id=61): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8c00) r3 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0xfffffc79}, 0x58) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 14m39.727587935s ago: executing program 4 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x1, 0xb2, 0x5, 0x2}, 0x9c) gettimeofday(0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x1, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 14m38.113175475s ago: executing program 4 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) 14m36.297852419s ago: executing program 4 (id=69): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f00000033c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000005400)={0x0, 0xffff, 0x0, 0x0, r1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = openat$panthor(0xffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x807c6406, &(0x7f0000002140)=""/29) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0xec6f, 0x1, 0x1}}, 0x40) 14m34.329947762s ago: executing program 2 (id=71): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1d, &(0x7f0000000840)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xa0000, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(r0, &(0x7f00000001c0)='./file0\x00', 0x400, 0x800, &(0x7f0000000400)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x3, 0x1, 0x2000, 0x80004, 0xfffffffd, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x20}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB='|'], 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) 14m29.007670608s ago: executing program 2 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) mkdirat(0xffffffffffffff9c, 0x0, 0x777) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r2, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x100000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 14m27.367882341s ago: executing program 2 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) preadv(0xffffffffffffffff, &(0x7f00000026c0), 0x0, 0xffffffff, 0x34) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000003c0)=@gettaction={0x34, 0x32, 0x301, 0x70bd2d, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x0) dup(r4) 14m20.891688245s ago: executing program 33 (id=69): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f00000033c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000005400)={0x0, 0xffff, 0x0, 0x0, r1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = openat$panthor(0xffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x807c6406, &(0x7f0000002140)=""/29) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0xec6f, 0x1, 0x1}}, 0x40) 14m11.832221205s ago: executing program 34 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) preadv(0xffffffffffffffff, &(0x7f00000026c0), 0x0, 0xffffffff, 0x34) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000003c0)=@gettaction={0x34, 0x32, 0x301, 0x70bd2d, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x0) dup(r4) 11m17.008803846s ago: executing program 0 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpriority(0x0, r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0xffff, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x28}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x118, 0x111, 0x4b4, 0x118, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0x0, 0xff000002, 0x0, 0xffffffff], [], 'ipvlan0\x00', 'lo\x00', {}, {}, 0x6, 0x0, 0x0, 0x10}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc6, 0x5, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r7) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r7, &(0x7f00000028c0)={0x0, 0xd00, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r8, 0xf01, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 11m15.397297413s ago: executing program 0 (id=225): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000696000/0x1000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f000068d000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$evdev(r1, 0x0, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x3231564e, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x400000}], 0x0, 0x0, 0x0, 0x0, 0x4}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xdc, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xc8, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xdc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x1a, 0x800) 11m12.796790237s ago: executing program 0 (id=226): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b40)=0xe) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x1) mlock(&(0x7f0000341000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000640)={{0x9, 0x4, 0x7, 0x3, 'syz0\x00', 0x4}, 0x0, [0x5, 0x5, 0x1, 0x8, 0x6, 0x720, 0x4, 0x7, 0x8, 0x6, 0x4, 0x6, 0x7e, 0x3ff, 0x1, 0x7, 0xa9, 0x1000, 0x19564bd4, 0x3, 0x1, 0x80, 0x3, 0x8, 0x8000000040, 0x2, 0x4, 0x1, 0x0, 0x9, 0x1, 0x3, 0x2, 0x3, 0x100000000, 0x4, 0x3, 0x7, 0x7, 0x2, 0x6f, 0x800, 0x7, 0x20006, 0x6, 0x2, 0x9, 0x8000000000000000, 0x10001, 0x4, 0xfffffffffffffff6, 0x9, 0x0, 0x2, 0x8000000000000001, 0x0, 0x7fffffffffffffff, 0x1, 0x8, 0x8, 0x8, 0x6, 0x7, 0x3, 0x81, 0x65c, 0x4, 0x2, 0xb3, 0x400, 0x0, 0x9, 0x6f, 0x0, 0x6, 0x81, 0x0, 0x4, 0x2, 0xffff, 0x1, 0x80000001, 0x7, 0xfece, 0x201d1db0, 0x8, 0x9, 0x3, 0xffff, 0x1, 0x2, 0x40, 0xb, 0x4, 0x3, 0x0, 0x5, 0x800, 0x5, 0x1, 0x2, 0x1d, 0xefffffffffff8000, 0x0, 0x1, 0x4, 0x3, 0x75c, 0x4, 0x0, 0x7, 0x3, 0x3, 0x0, 0xa, 0xfffffffffffffff8, 0x5, 0x2, 0xffffffffffff0262, 0x7ddb, 0x1, 0x7ff, 0x6, 0x10000, 0x4, 0x750d, 0x6]}) close_range(r0, 0xffffffffffffffff, 0x0) 11m10.774185377s ago: executing program 0 (id=228): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) io_setup(0x5, &(0x7f0000000040)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) syz_usb_connect$uac2(0x3, 0x136, &(0x7f0000000fc0)=ANY=[], 0x0) 11m6.965056327s ago: executing program 0 (id=231): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1b2) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x82100, 0x114) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$userns(0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc050) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) 11m4.973477431s ago: executing program 0 (id=232): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x44}}, 0x4000) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9101) r0 = openat(0xffffffffffffff9c, 0x0, 0x40080, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000000)="97", 0xfdef}], 0x1}}], 0x1, 0x4000800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) 10m48.801732706s ago: executing program 35 (id=232): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x44}}, 0x4000) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9101) r0 = openat(0xffffffffffffff9c, 0x0, 0x40080, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000000)="97", 0xfdef}], 0x1}}], 0x1, 0x4000800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) 5m4.733825317s ago: executing program 8 (id=817): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144}, {&(0x7f0000000700)=""/240}, {&(0x7f0000000300)=""/86, 0xfffffffffffffdb2}, {&(0x7f00000003c0)=""/253}, {&(0x7f00000004c0)=""/208}]}, 0x3422a61a}], 0x4000209, 0x10102, 0x0) 4m58.156910156s ago: executing program 8 (id=853): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x2) 4m57.815969572s ago: executing program 8 (id=854): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) getsockopt$llc_int(r0, 0x10c, 0x5, 0x0, &(0x7f00000000c0)) 4m56.484155835s ago: executing program 8 (id=858): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 4m56.325068292s ago: executing program 8 (id=859): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x6, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x2, 0x10000000, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc0000000}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x8000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x3, 0x200401) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='esdfs\x00', 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010518000000000000001800000018000000040000000200000000f1ff0c02000000000000000000000d0000000000005f00cea3efa9fc4ce384b546ad531416e7363950bbc98bd5e2414a5ba649ecf4eb022be4eae0f16157ffad4159d5b7b7ceed64fec6"], 0x0, 0x34, 0x0, 0x1}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r7, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 4m55.173934218s ago: executing program 8 (id=870): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) 4m54.729859324s ago: executing program 36 (id=870): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) 2m24.963153293s ago: executing program 7 (id=1433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x5}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x17, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) 2m20.26199361s ago: executing program 7 (id=1442): syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) epoll_create1(0x0) socket$inet(0x2, 0xa, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x150) pselect6(0x40, &(0x7f00000001c0)={0x6, 0xfffffffffffffffc, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000, 0xffffffff, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 2m18.153361964s ago: executing program 7 (id=1446): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x44, 0x0) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, r1, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="f2"}, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0xdc0a51ee460f8376}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048d0}, 0x0) 2m17.174552749s ago: executing program 7 (id=1448): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) wait4(0x0, 0x0, 0x8, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 2m14.875875953s ago: executing program 7 (id=1452): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1}}], 0x1, 0x34000, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, 0x0, 0x0) 2m9.150111285s ago: executing program 7 (id=1464): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x23, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) r3 = syz_usb_connect(0x2, 0x68, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000318ca9f4004041203c142010203010902560001a01380050904a80806f03b6f010905011020008103080705f4ba35fe7909050701ff0306030409052303fe073902c309050710200006050109050a7698030504730705e97b"], &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="400f18"], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x101, 0x0, 0x3000000, 0x7, 0x6, "dda720c4335f164222b8b1380b31350aff7b59"}) 2m8.654373886s ago: executing program 37 (id=1464): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x23, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) r3 = syz_usb_connect(0x2, 0x68, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000318ca9f4004041203c142010203010902560001a01380050904a80806f03b6f010905011020008103080705f4ba35fe7909050701ff0306030409052303fe073902c309050710200006050109050a7698030504730705e97b"], &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="400f18"], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x101, 0x0, 0x3000000, 0x7, 0x6, "dda720c4335f164222b8b1380b31350aff7b59"}) 33.836504413s ago: executing program 1 (id=1609): socket(0x200000000000011, 0x2, 0xd) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x200000000000011, 0x2, 0xd) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) 27.301769528s ago: executing program 6 (id=1618): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x6, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x2, 0x10000000, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc0000000}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x8000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x3, 0x200401) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='esdfs\x00', 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010518000000000000001800000018000000040000000200000000f1ff0c02000000000000000000000d0000000000005f00cea3efa9fc4ce384b546ad531416e7363950bbc98bd5e2414a5ba649ecf4eb022be4eae0f16157ffad4159d5b7b7ceed64fec6"], 0x0, 0x34, 0x0, 0x1}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r7, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 20.185196481s ago: executing program 5 (id=1622): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x200, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0xc62d71, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000020901010000000000000a0000040900010073797a3000000000100002000c0002800500010021"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20.041361706s ago: executing program 9 (id=1623): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x6c0000, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000080)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x2000, 0x24000, 0x10000e}}) 19.845144655s ago: executing program 1 (id=1624): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x3, 0x0, 0xb49, 0x8, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 19.0190684s ago: executing program 9 (id=1625): socket(0x10, 0x3, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000340)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2842, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 18.937704541s ago: executing program 5 (id=1626): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000005c0), 0x4) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) r3 = syz_open_dev$video(0x0, 0xd, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) 18.821069855s ago: executing program 6 (id=1627): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040), 0x0, 0x4008015, &(0x7f00000000c0)={0x11, 0xf8, r1, 0x1, 0x7}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(0x0, 0x7) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='omfs\x00', 0x204000, 0x0) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x9}, 0x40}, {{&(0x7f0000000280)=@ax25={{}, [@remote, @netrom, @rose, @rose, @bcast, @null, @netrom]}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000300)=""/222, 0xde}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/117, 0x75}, {&(0x7f0000000600)=""/79, 0x4f}, {&(0x7f0000000680)}], 0x5, &(0x7f0000000800)=""/78, 0x4e}, 0x401}, {{&(0x7f0000000880)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/166, 0xa6}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)=""/218, 0xda}, {&(0x7f0000000b00)=""/215, 0xd7}], 0x4, &(0x7f0000000d40)=""/178, 0xb2}, 0xb}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e00)=""/239, 0xef}, {&(0x7f0000000f00)=""/84, 0x54}], 0x2, &(0x7f0000000fc0)=""/137, 0x89}, 0x8}], 0x4, 0x10100, &(0x7f0000003940)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x474683, 0x408, 0xc}, 0x18) 15.70491056s ago: executing program 5 (id=1628): openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) unshare(0x2a020480) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x8000, 0x1, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 14.589923713s ago: executing program 6 (id=1629): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x3) close(0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x0, &(0x7f0000000140)={0x2, 0xe6f}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f51116c280e300", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 14.078428201s ago: executing program 1 (id=1630): socket$nl_xfrm(0x10, 0x3, 0x6) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = creat(0x0, 0x6a) close(r0) socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x6d, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r1], 0x7) 13.407087863s ago: executing program 6 (id=1631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$peek(0x3, r2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='clear_refs\x00') writev(r4, &(0x7f0000000380), 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a346af12e64a36c8d150e5e61d7b042ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 12.344395899s ago: executing program 5 (id=1632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x3, 0x1, 0x0, 0x4, 0x0, 0x3ff, [{0x3, 0x3, 0x1500}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000040)=""/150, 0x34, 0x96, 0x1}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) 12.279354586s ago: executing program 6 (id=1633): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x33, 0x0, 0x0) 11.002879872s ago: executing program 5 (id=1634): socket$alg(0x26, 0x5, 0x0) msgget$private(0x0, 0x230) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(r2, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000580)=""/93, 0x5d}, {0x0}, {0x0}], 0x4, &(0x7f0000002d40)=[{&(0x7f0000000840)=""/216, 0xd8}, {&(0x7f0000000a40)=""/7, 0x7}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/100, 0x64}, {0x0}], 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 10.946692728s ago: executing program 1 (id=1635): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24040810) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$peekuser(0x3, r0, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x7fffffff}}}, 0xd) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[], 0x70}, 0x1, 0x7}, 0x0) socket$igmp(0x2, 0x3, 0x2) 9.022379973s ago: executing program 1 (id=1636): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x6, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x2, 0x10000000, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc0000000}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x8000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x3, 0x200401) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='esdfs\x00', 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010518000000000000001800000018000000040000000200000000f1ff0c02000000000000000000000d0000000000005f00cea3efa9fc4ce384b546ad531416e7363950bbc98bd5e2414a5ba649ecf4eb022be4eae0f16157ffad4159d5b7b7ceed64fec6"], 0x0, 0x34, 0x0, 0x1}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r7, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 7.496070155s ago: executing program 5 (id=1637): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) socket$nl_route(0x10, 0x3, 0x0) 6.429453112s ago: executing program 6 (id=1638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r2, &(0x7f0000010440)=[{&(0x7f0000000400)=""/160, 0xa0}], 0x1, 0xc03, 0x0) gettid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f00006dbffc), 0x4) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r3, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x42872, 0xffffffffffffffff, 0x80000000) openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0xe8c00, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) sendmsg$inet(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000600)="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"/382, 0x17e}, {&(0x7f00000000c0)="10546a3ac51242cc2a267b253914c7f8d88d06dcf53982350ae242e74fa31294dfc9d76c5be0d3ae78827fe121c596a1fd92b347adf0e01b683da9f185cd83520a31c88ef2738ea8c2821b97ec235e788ba91c5da2b937c94656d0105658adcec7b017e14e709d1e74dac22222387dee5ad57ef9fa7f6785672d0f0c8fdf1494d8cc80ea2cbd79a52dee5993a936f724dba6ebd70bd56faa130b1683a95d134878f67d8a6b0e87bb3535ce2286e4ad69d79715d96e6caef62a6a46ac21242504cb448649f3a3f3a1c19bc575647aadbb7e82a0e80a5fe6d270591ae585bdf3d6bd969138cde1eb8d3b", 0xe9}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="11000000000000000000000001000000080000000000000680000000000000000000000007000000019404010086090000000106036886270000000101127b8cb64aed79d5cf0d8124a2e875658e050c7d42fea172bfcec845910603d600004434db537f000001000000040a01010200000009ac1414aa00000003ac14140cffffff00ac1414aa000000040a010101000000ff9404010001871eae0148bb60114907a3aad501031ec73f85db1a2b168fcf3a609768a292f6bf8f063c5f312a7c5436a6ddc9619cb0cb0cea6fbcc836d426ff37b2eea6398c6e9df165727a1eeb8ad3fac9"], 0x98}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) flock(0xffffffffffffffff, 0x6) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0xb, @sliced={0x1, [0x4d6, 0x7d, 0xc45, 0x2, 0x7, 0xfff5, 0x3ff, 0x2, 0x1, 0x7d4, 0x5, 0x2aa, 0x7, 0x9, 0x3ff, 0x4, 0x200a, 0x7, 0x200, 0x0, 0xc29, 0x1, 0xe7, 0xfff9, 0x40, 0x8, 0x80, 0x6, 0x8, 0xfff5, 0x5022, 0x9, 0x2, 0x3, 0x81, 0x6f4, 0x1, 0x1000, 0x2, 0x2, 0x40, 0x5, 0xf52, 0x4, 0xaae, 0x8, 0x85, 0x4], 0x9}}) 6.236630961s ago: executing program 9 (id=1639): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) setns(0xc9, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) 4.561693803s ago: executing program 9 (id=1640): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) 3.308543784s ago: executing program 9 (id=1641): syz_usb_connect(0x0, 0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x22020600) 1.112193202s ago: executing program 9 (id=1642): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x1, 0x0) write(r4, 0x0, 0x0) 0s ago: executing program 1 (id=1643): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x40010, 0xffffffffffffffff, 0xfd0c7000) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) setns(0xc9, 0x0) r0 = io_uring_setup(0x1757, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x23, 0xab}) socket(0x28, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="c3", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): duct=2, SerialNumber=3 [ 687.784748][ T5575] usb 9-1: Product: syz [ 687.784761][ T5575] usb 9-1: Manufacturer: syz [ 687.784785][ T5575] usb 9-1: SerialNumber: syz [ 687.803353][ T9430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.041858][ T5575] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 688.111920][ T9430] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.230430][ T5575] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 688.246106][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.246300][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.372906][ T5575] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 688.456587][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.456759][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.590218][ T5575] usb 9-1: USB disconnect, device number 3 [ 688.713305][ T5575] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 688.731299][ T5575] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 688.732467][ T5575] ti_usb_3410_5052 9-1:2.0: device disconnected [ 689.646194][ T147] bridge_slave_1: left allmulticast mode [ 689.646232][ T147] bridge_slave_1: left promiscuous mode [ 689.646462][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.807491][ T147] bridge_slave_0: left allmulticast mode [ 689.807531][ T147] bridge_slave_0: left promiscuous mode [ 689.807766][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.941521][ T5943] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 690.137473][ T5943] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 690.139582][ T5943] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.153223][ T5943] usb 9-1: config 0 descriptor?? [ 690.253143][ T5943] cp210x 9-1:0.0: cp210x converter detected [ 690.598666][ T5943] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 690.618576][ T5943] usb 9-1: cp210x converter now attached to ttyUSB0 [ 691.532850][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.532924][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.542501][ T5943] usb 9-1: USB disconnect, device number 4 [ 692.756197][ T5943] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 692.758545][ T5943] cp210x 9-1:0.0: device disconnected [ 693.015324][ T9842] input: syz0 as /devices/virtual/input/input19 [ 694.995872][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.148644][ T9846] program syz.8.641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 695.217202][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.258923][ T147] bond0 (unregistering): Released all slaves [ 695.429317][ T9855] input: syz0 as /devices/virtual/input/input20 [ 696.842236][ T5575] hid-generic 0005:4C4A:0002.0002: unknown main item tag 0x0 [ 697.359478][ T5575] hid-generic 0005:4C4A:0002.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 697.994421][ T9886] 9p: Bad value for 'rfdno' [ 699.957380][ T147] hsr_slave_0: left promiscuous mode [ 699.962691][ T9939] FAULT_INJECTION: forcing a failure. [ 699.962691][ T9939] name failslab, interval 1, probability 0, space 0, times 0 [ 699.962732][ T9939] CPU: 1 UID: 0 PID: 9939 Comm: syz.7.672 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 699.962762][ T9939] Tainted: [L]=SOFTLOCKUP [ 699.962770][ T9939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 699.962782][ T9939] Call Trace: [ 699.962791][ T9939] [ 699.962805][ T9939] dump_stack_lvl+0xe8/0x150 [ 699.962849][ T9939] should_fail_ex+0x46b/0x600 [ 699.962885][ T9939] should_failslab+0xa8/0x100 [ 699.962909][ T9939] __kmalloc_cache_noprof+0xa1/0x680 [ 699.962949][ T9939] ? alloc_fs_context+0x9b7/0xd00 [ 699.962976][ T9939] ? __se_sys_fsopen+0x13a/0x2c0 [ 699.963006][ T9939] ? __se_sys_fsopen+0x13a/0x2c0 [ 699.963042][ T9939] __se_sys_fsopen+0x13a/0x2c0 [ 699.963076][ T9939] do_syscall_64+0x166/0x520 [ 699.963099][ T9939] ? trace_irq_disable+0x3b/0x140 [ 699.963126][ T9939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.963147][ T9939] ? clear_bhb_loop+0x70/0xc0 [ 699.963172][ T9939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.963192][ T9939] RIP: 0033:0x7fe8c8f2e159 [ 699.963211][ T9939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.963230][ T9939] RSP: 002b:00007fe8c7186028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 699.963252][ T9939] RAX: ffffffffffffffda RBX: 00007fe8c91b5fa0 RCX: 00007fe8c8f2e159 [ 699.963267][ T9939] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 699.963281][ T9939] RBP: 00007fe8c8fc506b R08: 0000000000000000 R09: 0000000000000000 [ 699.963294][ T9939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.963306][ T9939] R13: 00007fe8c91b6038 R14: 00007fe8c91b5fa0 R15: 00007ffcce150fd8 [ 699.963338][ T9939] [ 700.146684][ T8158] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 700.198343][ T147] hsr_slave_1: left promiscuous mode [ 700.199766][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.199877][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.294892][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.294922][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.299071][ T8158] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 700.304310][ T8158] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.304335][ T8158] usb 9-1: Product: syz [ 700.304350][ T8158] usb 9-1: Manufacturer: syz [ 700.304364][ T8158] usb 9-1: SerialNumber: syz [ 700.321610][ T8158] usb 9-1: config 0 descriptor?? [ 700.364076][ T8158] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 700.712123][ T147] veth1_macvtap: left promiscuous mode [ 700.712313][ T147] veth0_macvtap: left promiscuous mode [ 700.712813][ T147] veth1_vlan: left promiscuous mode [ 700.713140][ T147] veth0_vlan: left promiscuous mode [ 701.156733][ T8158] gspca_stk1135: reg_w 0x5 err -71 [ 701.157801][ T8158] gspca_stk1135: serial bus timeout: status=0x00 [ 701.157818][ T8158] gspca_stk1135: Sensor write failed [ 701.157845][ T8158] gspca_stk1135: serial bus timeout: status=0x00 [ 701.157854][ T8158] gspca_stk1135: Sensor write failed [ 701.157876][ T8158] gspca_stk1135: serial bus timeout: status=0x00 [ 701.157883][ T8158] gspca_stk1135: Sensor read failed [ 701.157905][ T8158] gspca_stk1135: serial bus timeout: status=0x00 [ 701.157917][ T8158] gspca_stk1135: Sensor read failed [ 701.157923][ T8158] gspca_stk1135: Detected sensor type unknown (0x0) [ 701.158032][ T8158] gspca_stk1135: serial bus timeout: status=0x00 [ 701.158040][ T8158] gspca_stk1135: Sensor read failed [ 701.158064][ T8158] gspca_stk1135: serial bus timeout: status=0x00 [ 701.158072][ T8158] gspca_stk1135: Sensor read failed [ 701.158094][ T8158] gspca_stk1135: serial bus timeout: status=0x00 [ 701.158102][ T8158] gspca_stk1135: Sensor write failed [ 701.158123][ T8158] gspca_stk1135: serial bus timeout: status=0x00 [ 701.158130][ T8158] gspca_stk1135: Sensor write failed [ 701.158349][ T8158] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 701.198092][ T8158] usb 9-1: USB disconnect, device number 5 [ 702.001725][ T9958] i2c i2c-0: new_device: Missing parameters [ 702.206664][ T147] team0 (unregistering): Port device team_slave_1 removed [ 702.247235][ T147] team0 (unregistering): Port device team_slave_0 removed [ 703.760515][ T9993] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2308.0.0), cmd(3) [ 703.880089][ T9430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.106181][ T9610] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 704.353382][ T9610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 704.359666][ T9610] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 704.485805][ T8159] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 704.546199][ T9610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 704.588676][ T9610] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 704.658561][ T9610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 704.659783][ T9610] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 704.689407][ T9610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 704.717035][ T8159] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 704.719074][ T8159] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.810579][ T8159] usb 9-1: config 0 descriptor?? [ 704.967600][ T9430] veth0_vlan: entered promiscuous mode [ 705.022443][ T9430] veth1_vlan: entered promiscuous mode [ 705.065036][ T8159] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 705.126291][ T9610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.182008][ T9430] veth0_macvtap: entered promiscuous mode [ 705.204955][ T9430] veth1_macvtap: entered promiscuous mode [ 705.224480][ T9610] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.271844][ T8279] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.272060][ T8279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.310106][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.310259][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.320920][ T9430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.358594][ T9430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.903408][ T8159] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 705.903443][ T8159] [drm] Initialized udl on minor 1 [ 706.489112][ T8159] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 706.739711][ T8159] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 706.761589][ T8159] usb 9-1: USB disconnect, device number 6 [ 707.007888][T10033] tap0: tun_chr_ioctl cmd 1074025677 [ 707.008067][T10033] tap0: linktype set to 778 [ 707.011080][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.011101][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.380084][ T3328] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.380528][ T3328] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.442305][ T147] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.442648][ T147] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.725399][ T3404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.725421][ T3404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.911066][T10083] input: syz0 as /devices/virtual/input/input21 [ 710.320601][ T9610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.745817][ T57] IPVS: starting estimator thread 0... [ 711.853415][T10095] IPVS: using max 11 ests per chain, 26400 per kthread [ 712.113035][T10098] netlink: 136 bytes leftover after parsing attributes in process `syz.8.718'. [ 712.644556][ T5595] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 713.327258][T10119] netlink: 'syz.7.725': attribute type 1 has an invalid length. [ 714.489748][ T5595] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 714.502798][ T5595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.502836][ T5595] usb 7-1: Product: syz [ 714.502851][ T5595] usb 7-1: Manufacturer: syz [ 714.502866][ T5595] usb 7-1: SerialNumber: syz [ 714.644434][ T5595] usb 7-1: config 0 descriptor?? [ 714.894089][ T5595] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 714.957609][ T9610] veth0_vlan: entered promiscuous mode [ 715.075098][ T9610] veth1_vlan: entered promiscuous mode [ 715.359981][ T9610] veth0_macvtap: entered promiscuous mode [ 715.384835][ T9610] veth1_macvtap: entered promiscuous mode [ 715.579173][ T9610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.590632][ T5595] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 715.778189][ T5595] usb 7-1: USB disconnect, device number 2 [ 716.754811][ T9610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.036066][ T1165] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.040573][ T1165] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.299037][T10164] overlay: filesystem on ./bus is read-only [ 717.538932][ T1165] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.450399][ T1165] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.827714][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.827736][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.309943][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.310028][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.134902][T10209] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 723.193103][T10219] loop4: detected capacity change from 0 to 7 [ 723.365384][T10219] Dev loop4: unable to read RDB block 7 [ 723.365471][T10219] loop4: AHDI p1 p2 p3 [ 723.365510][T10219] loop4: partition table partially beyond EOD, truncated [ 723.463395][T10219] loop4: p1 start 1601398130 is beyond EOD, truncated [ 723.463428][T10219] loop4: p2 start 1702059890 is beyond EOD, truncated [ 723.762387][ T38] audit: type=1326 audit(1791129222.754:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10229 comm="syz.7.765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c8f2e159 code=0x7ffc0000 [ 723.762546][ T38] audit: type=1326 audit(1791129222.754:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10229 comm="syz.7.765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c8f2e159 code=0x7ffc0000 [ 723.763708][ T38] audit: type=1326 audit(1791129222.754:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10229 comm="syz.7.765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c8f2e159 code=0x7ffc0000 [ 723.763849][ T38] audit: type=1326 audit(1791129222.754:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10229 comm="syz.7.765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c8f2e159 code=0x7ffc0000 [ 723.764107][ T38] audit: type=1326 audit(1791129222.754:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10229 comm="syz.7.765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe8c8f2e159 code=0x7ffc0000 [ 723.764350][ T38] audit: type=1326 audit(1791129222.754:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10229 comm="syz.7.765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c8f2e159 code=0x7ffc0000 [ 723.764486][ T38] audit: type=1326 audit(1791129222.754:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10229 comm="syz.7.765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c8f2e159 code=0x7ffc0000 [ 723.765321][ T38] audit: type=1326 audit(1791129222.754:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10229 comm="syz.7.765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c8f2e159 code=0x7ffc0000 [ 723.765590][ T38] audit: type=1326 audit(1791129222.754:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10229 comm="syz.7.765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fe8c8f2e159 code=0x7ffc0000 [ 723.767947][ T38] audit: type=1326 audit(1791129222.764:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10229 comm="syz.7.765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c8f2e159 code=0x7ffc0000 [ 724.874943][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.772'. [ 724.874972][T10245] netlink: 28 bytes leftover after parsing attributes in process `syz.6.772'. [ 725.025864][ T5694] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 725.346335][ T5694] usb 6-1: Using ep0 maxpacket: 8 [ 725.366222][ T5694] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 725.393430][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.393460][ T5694] usb 6-1: Product: syz [ 725.393475][ T5694] usb 6-1: Manufacturer: syz [ 725.393489][ T5694] usb 6-1: SerialNumber: syz [ 725.449316][ T5694] usb 6-1: config 0 descriptor?? [ 725.466019][ T5694] gspca_main: sq930x-2.14.0 probing 2770:930c [ 725.886890][ T5694] gspca_sq930x: ucbus_write failed -71 [ 726.267395][ T5694] gspca_sq930x: Sensor ov9630 not yet treated [ 726.324743][ T5694] sq930x 6-1:0.0: probe with driver sq930x failed with error -22 [ 727.004197][ T5694] usb 6-1: USB disconnect, device number 2 [ 727.368132][T10285] pim6reg: entered allmulticast mode [ 727.368295][T10286] pim6reg: left allmulticast mode [ 727.857921][T10302] FAULT_INJECTION: forcing a failure. [ 727.857921][T10302] name fail_futex, interval 1, probability 0, space 0, times 1 [ 727.857963][T10302] CPU: 0 UID: 0 PID: 10302 Comm: syz.8.792 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 727.857991][T10302] Tainted: [L]=SOFTLOCKUP [ 727.857999][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 727.858011][T10302] Call Trace: [ 727.858057][T10302] [ 727.858135][T10302] dump_stack_lvl+0xe8/0x150 [ 727.858302][T10302] should_fail_ex+0x46b/0x600 [ 727.858373][T10302] get_futex_key+0x1b4/0x1580 [ 727.858429][T10302] ? preempt_schedule_thunk+0x16/0x40 [ 727.858489][T10302] ? __pfx_get_futex_key+0x10/0x10 [ 727.858530][T10302] futex_wake+0x119/0x600 [ 727.858561][T10302] ? __pfx_futex_wake+0x10/0x10 [ 727.858585][T10302] ? __fget_files+0x2a/0x420 [ 727.858635][T10302] ? __fget_files+0x3a8/0x420 [ 727.858658][T10302] ? __pfx_vfs_writev+0x10/0x10 [ 727.858690][T10302] do_futex+0x458/0x4e0 [ 727.858716][T10302] ? __pfx_do_futex+0x10/0x10 [ 727.858745][T10302] __se_sys_futex+0x3a8/0x450 [ 727.858769][T10302] ? __se_sys_sendfile64+0x116/0x1a0 [ 727.858799][T10302] ? __pfx___se_sys_futex+0x10/0x10 [ 727.858820][T10302] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 727.858853][T10302] ? __x64_sys_futex+0x21/0xf0 [ 727.858874][T10302] do_syscall_64+0x166/0x520 [ 727.858974][T10302] ? trace_irq_disable+0x3b/0x140 [ 727.859013][T10302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.859051][T10302] ? clear_bhb_loop+0x70/0xc0 [ 727.859084][T10302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.859105][T10302] RIP: 0033:0x7f0b095ee159 [ 727.859131][T10302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.859150][T10302] RSP: 002b:00007f0b078460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 727.859179][T10302] RAX: ffffffffffffffda RBX: 00007f0b09875fa8 RCX: 00007f0b095ee159 [ 727.859196][T10302] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0b09875fac [ 727.859210][T10302] RBP: 00007f0b09875fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 727.859224][T10302] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 727.859239][T10302] R13: 00007f0b09876038 R14: 00007ffd56983930 R15: 00007ffd56983a18 [ 727.859272][T10302] [ 731.851821][ T38] kauditd_printk_skb: 22 callbacks suppressed [ 731.851841][ T38] audit: type=1326 audit(1791129230.844:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10348 comm="syz.5.811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1659e159 code=0x7ffc0000 [ 731.854237][ T38] audit: type=1326 audit(1791129230.844:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10348 comm="syz.5.811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7eff1659e159 code=0x7ffc0000 [ 731.854529][ T38] audit: type=1326 audit(1791129230.844:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10348 comm="syz.5.811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1659e159 code=0x7ffc0000 [ 731.854947][ T38] audit: type=1326 audit(1791129230.844:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10348 comm="syz.5.811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1659e159 code=0x7ffc0000 [ 731.855431][ T38] audit: type=1326 audit(1791129230.844:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10348 comm="syz.5.811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7eff1659e159 code=0x7ffc0000 [ 731.902340][T10376] sg_write: data in/out 335912/136 bytes for SCSI command 0x0-- guessing data in; [ 731.902340][T10376] program syz.7.820 not setting count and/or reply_len properly [ 732.005668][ T38] audit: type=1326 audit(1791129230.844:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10348 comm="syz.5.811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1659e159 code=0x7ffc0000 [ 733.369145][T10401] input: syz0 as /devices/virtual/input/input22 [ 737.711825][T10451] loop5: detected capacity change from 0 to 7 [ 737.802267][T10451] Dev loop5: unable to read RDB block 7 [ 737.802302][T10451] loop5: AHDI p1 p2 p3 [ 737.802322][T10451] loop5: partition table partially beyond EOD, truncated [ 737.802589][T10451] loop5: p1 start 5472580 is beyond EOD, truncated [ 737.802608][T10451] loop5: p2 start 167772160 is beyond EOD, truncated [ 737.904728][ T8158] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 738.088172][ T8158] usb 7-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 738.091169][ T8158] usb 7-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 738.091203][ T8158] usb 7-1: config 1 interface 0 has no altsetting 0 [ 738.137327][ T8158] usb 7-1: string descriptor 0 read error: -22 [ 738.137472][ T8158] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.377075][T10448] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 739.224111][ T8158] cypress 0003:04B4:ED81.0003: global environment stack underflow [ 739.224136][ T8158] cypress 0003:04B4:ED81.0003: item 0 2 1 11 parsing failed [ 739.227406][ T8158] cypress 0003:04B4:ED81.0003: parse failed [ 739.227617][ T8158] cypress 0003:04B4:ED81.0003: probe with driver cypress failed with error -22 [ 739.423136][ T5943] usb 7-1: USB disconnect, device number 3 [ 740.303132][T10490] input: syz0 as /devices/virtual/input/input23 [ 741.280082][T10515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 741.371365][ T8415] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 742.176782][ T5575] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 742.263428][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 742.402007][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 742.408042][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 742.418954][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 742.442812][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 742.457705][ T5575] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 742.554732][ T5575] usb 7-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 742.554762][ T5575] usb 7-1: Product: syz [ 742.658263][ T5575] usb 7-1: config 0 descriptor?? [ 742.709150][ T5575] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 742.843084][ T5575] usb 7-1: Detected FT232H [ 742.946141][ T5575] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 743.192761][T10550] file system registered [ 743.212903][T10550] unloading [ 743.634704][ T5575] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 743.679076][ T5575] usb 7-1: USB disconnect, device number 4 [ 743.977750][ T8279] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.033182][ T5575] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 744.056232][ T5575] ftdi_sio 7-1:0.0: device disconnected [ 744.530112][T10585] jffs2: notice: (10585) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 744.743286][ T60] Bluetooth: hci5: command tx timeout [ 745.216953][ T38] audit: type=1400 audit(1791129244.184:191): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10601 comm="syz.6.894" src=65532 dest=20002 netif=wpan0 [ 746.688662][ T8279] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.806467][ T60] Bluetooth: hci5: command tx timeout [ 747.400638][ T8279] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.479776][T10654] tipc: Started in network mode [ 747.479801][T10654] tipc: Node identity 1001001, cluster identity 4711 [ 747.479815][T10654] tipc: Node number set to 16781313 [ 747.943255][T10655] tipc: New replicast peer: 127.0.0.1 [ 748.025726][T10655] tipc: Enabled bearer , priority 10 [ 748.429962][ T8114] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 748.452389][ T8279] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.600002][ T8114] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 748.631078][ T8114] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.694172][ T8114] usb 7-1: config 0 descriptor?? [ 748.767957][ T8114] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 748.886291][ T60] Bluetooth: hci5: command tx timeout [ 749.211621][ T8114] cpia1 7-1:0.0: unexpected state after lo power cmd: 00 [ 750.266732][ T8114] gspca_cpia1: usb_control_msg 02, error -71 [ 750.266754][ T8114] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 750.320479][ T8114] usb 7-1: USB disconnect, device number 5 [ 750.331838][T10684] device-mapper: ioctl: device name cannot contain '/' [ 750.653785][ T38] audit: type=1400 audit(1791129249.644:192): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10691 comm="syz.1.919" src=65532 dest=20002 netif=wpan0 [ 750.977611][ T60] Bluetooth: hci5: command tx timeout [ 751.194285][T10537] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.203102][T10537] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.203310][T10537] bridge_slave_0: entered allmulticast mode [ 751.252296][T10537] bridge_slave_0: entered promiscuous mode [ 751.396025][T10537] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.396153][T10537] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.396355][T10537] bridge_slave_1: entered allmulticast mode [ 751.433550][T10537] bridge_slave_1: entered promiscuous mode [ 751.886847][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 752.696453][T10537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.697545][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.926'. [ 752.738037][T10705] input: syz0 as /devices/virtual/input/input24 [ 752.969435][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.969507][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.032401][T10537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.032582][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.926'. [ 753.366733][T10724] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5585] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10724] [ 753.564943][T10733] loop5: detected capacity change from 0 to 7 [ 753.605896][T10733] loop5: [POWERTEC] [ 753.971737][ T8159] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 754.125739][ T8159] usb 7-1: Using ep0 maxpacket: 8 [ 754.133650][ T8159] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 754.159777][ T8159] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 754.159839][ T8159] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 754.159861][ T8159] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 754.159886][ T8159] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 754.159909][ T8159] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 754.159950][ T8159] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.231589][T10537] team0: Port device team_slave_0 added [ 754.366561][T10537] team0: Port device team_slave_1 added [ 754.440553][ T8159] usb 7-1: usb_control_msg returned -32 [ 754.440602][ T8159] usbtmc 7-1:16.0: can't read capabilities [ 755.062969][T10537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.062987][T10537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.063014][T10537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.288184][T10778] FAULT_INJECTION: forcing a failure. [ 755.288184][T10778] name failslab, interval 1, probability 0, space 0, times 0 [ 755.288227][T10778] CPU: 0 UID: 0 PID: 10778 Comm: syz.7.944 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 755.288257][T10778] Tainted: [L]=SOFTLOCKUP [ 755.288265][T10778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 755.288278][T10778] Call Trace: [ 755.288286][T10778] [ 755.288296][T10778] dump_stack_lvl+0xe8/0x150 [ 755.288333][T10778] should_fail_ex+0x46b/0x600 [ 755.288367][T10778] ? __d_alloc+0x37/0x6f0 [ 755.288393][T10778] should_failslab+0xa8/0x100 [ 755.288446][T10778] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 755.288488][T10778] ? __d_alloc+0x37/0x6f0 [ 755.288520][T10778] __d_alloc+0x37/0x6f0 [ 755.288550][T10778] d_alloc_pseudo+0x21/0xc0 [ 755.288579][T10778] alloc_path_pseudo+0x107/0x220 [ 755.288608][T10778] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 755.288627][T10778] ? rt_spin_lock+0x1e2/0x400 [ 755.288756][T10778] alloc_file_pseudo+0xa8/0x1e0 [ 755.288781][T10778] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 755.288805][T10778] ? alloc_fd+0x654/0x6d0 [ 755.288840][T10778] sock_alloc_file+0xb8/0x2f0 [ 755.288975][T10778] ? __sys_socket+0x12b/0x1b0 [ 755.289008][T10778] __sys_socket+0x13f/0x1b0 [ 755.289043][T10778] __x64_sys_socket+0x7a/0x90 [ 755.289077][T10778] do_syscall_64+0x166/0x520 [ 755.289099][T10778] ? trace_irq_disable+0x3b/0x140 [ 755.289126][T10778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.289147][T10778] ? clear_bhb_loop+0x70/0xc0 [ 755.289174][T10778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.289195][T10778] RIP: 0033:0x7fe8c8f2e159 [ 755.289215][T10778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.289234][T10778] RSP: 002b:00007fe8c7186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 755.289257][T10778] RAX: ffffffffffffffda RBX: 00007fe8c91b5fa0 RCX: 00007fe8c8f2e159 [ 755.289273][T10778] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 755.289286][T10778] RBP: 00007fe8c8fc506b R08: 0000000000000000 R09: 0000000000000000 [ 755.289299][T10778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.289312][T10778] R13: 00007fe8c91b6038 R14: 00007fe8c91b5fa0 R15: 00007ffcce150fd8 [ 755.289343][T10778] [ 755.316317][T10537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.316335][T10537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.316361][T10537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.041233][T10537] hsr_slave_0: entered promiscuous mode [ 756.044458][T10537] hsr_slave_1: entered promiscuous mode [ 756.084929][ T38] audit: type=1326 audit(1791129255.074:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10791 comm="syz.1.950" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb1407e159 code=0x0 [ 756.184053][T10797] netlink: 112 bytes leftover after parsing attributes in process `syz.5.952'. [ 756.196544][ T8279] bridge_slave_1: left allmulticast mode [ 756.196582][ T8279] bridge_slave_1: left promiscuous mode [ 756.196875][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.348298][T10797] FAULT_INJECTION: forcing a failure. [ 756.348298][T10797] name failslab, interval 1, probability 0, space 0, times 0 [ 756.348341][T10797] CPU: 1 UID: 0 PID: 10797 Comm: syz.5.952 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 756.348370][T10797] Tainted: [L]=SOFTLOCKUP [ 756.348377][T10797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 756.348389][T10797] Call Trace: [ 756.348397][T10797] [ 756.348405][T10797] dump_stack_lvl+0xe8/0x150 [ 756.348440][T10797] should_fail_ex+0x46b/0x600 [ 756.348475][T10797] should_failslab+0xa8/0x100 [ 756.348499][T10797] __kmalloc_node_noprof+0xfd/0x7b0 [ 756.348531][T10797] ? crypto_create_tfm_node+0x81/0x3c0 [ 756.348582][T10797] ? crypto_create_tfm_node+0x81/0x3c0 [ 756.348611][T10797] crypto_create_tfm_node+0x81/0x3c0 [ 756.348636][T10797] crypto_spawn_tfm2+0x5c/0x90 [ 756.348653][T10797] aead_init_geniv+0xa6/0x170 [ 756.348665][T10797] crypto_create_tfm_node+0x143/0x3c0 [ 756.348678][T10797] crypto_alloc_tfm_node+0x169/0x3e0 [ 756.348694][T10797] esp_init_state+0x615/0x1220 [ 756.348771][T10797] ? do_syscall_64+0x166/0x520 [ 756.348784][T10797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.348802][T10797] ? __pfx_esp_init_state+0x10/0x10 [ 756.348823][T10797] ? lock_acquire+0x115/0x350 [ 756.348855][T10797] ? __xfrm_init_state+0x745/0x1320 [ 756.348917][T10797] __xfrm_init_state+0x9dd/0x1320 [ 756.348930][T10797] ? __xfrm_init_state+0x745/0x1320 [ 756.348944][T10797] xfrm_add_sa+0x2f3f/0x40a0 [ 756.348962][T10797] ? __pfx_xfrm_add_sa+0x10/0x10 [ 756.348979][T10797] ? __nla_parse+0x40/0x60 [ 756.349001][T10797] xfrm_user_rcv_msg+0x7a8/0xf30 [ 756.349024][T10797] ? lockdep_hardirqs_on+0x7b/0x110 [ 756.349048][T10797] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 756.349102][T10797] ? __lock_acquire+0x747/0x2de0 [ 756.349136][T10797] ? __pfx_ref_tracker_free+0x10/0x10 [ 756.349174][T10797] netlink_rcv_skb+0x226/0x4a0 [ 756.349287][T10797] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 756.349308][T10797] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 756.349331][T10797] ? mutex_lock_nested+0x152/0x1d0 [ 756.349356][T10797] ? xfrm_netlink_rcv+0x6a/0x90 [ 756.349381][T10797] xfrm_netlink_rcv+0x79/0x90 [ 756.349404][T10797] netlink_unicast+0x7f5/0x990 [ 756.349438][T10797] netlink_sendmsg+0x813/0xb40 [ 756.349466][T10797] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 756.349503][T10797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.349532][T10797] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 756.349568][T10797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.349582][T10797] sock_sendmsg_nosec+0x13a/0x180 [ 756.349634][T10797] ____sys_sendmsg+0x565/0x870 [ 756.349652][T10797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 756.349669][T10797] ? import_iovec+0x73/0xa0 [ 756.349699][T10797] ___sys_sendmsg+0x2a5/0x360 [ 756.349712][T10797] ? __lock_acquire+0x747/0x2de0 [ 756.349734][T10797] ? __pfx____sys_sendmsg+0x10/0x10 [ 756.349749][T10797] ? futex_wait+0x2a2/0x390 [ 756.349781][T10797] ? __fget_files+0x2a/0x420 [ 756.349798][T10797] ? __fget_files+0x3a8/0x420 [ 756.349816][T10797] __x64_sys_sendmsg+0x1b7/0x290 [ 756.349831][T10797] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 756.349855][T10797] do_syscall_64+0x166/0x520 [ 756.349866][T10797] ? trace_irq_disable+0x3b/0x140 [ 756.349884][T10797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.349896][T10797] ? clear_bhb_loop+0x70/0xc0 [ 756.349912][T10797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.349924][T10797] RIP: 0033:0x7eff1659e159 [ 756.349935][T10797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.349944][T10797] RSP: 002b:00007eff147f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.349957][T10797] RAX: ffffffffffffffda RBX: 00007eff16825fa0 RCX: 00007eff1659e159 [ 756.349966][T10797] RDX: 0000000020000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 756.349973][T10797] RBP: 00007eff1663506b R08: 0000000000000000 R09: 0000000000000000 [ 756.349980][T10797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.349986][T10797] R13: 00007eff16826038 R14: 00007eff16825fa0 R15: 00007ffee69b23c8 [ 756.350004][T10797] [ 756.518025][ T8279] bridge_slave_0: left allmulticast mode [ 756.518062][ T8279] bridge_slave_0: left promiscuous mode [ 756.518329][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.833241][ T5694] usb 7-1: USB disconnect, device number 6 [ 756.981223][T10807] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 756.981223][T10807] [ 756.981541][T10807] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 756.983952][T10807] CIFS: Attempting to mount //127.0.0.1/share [ 757.847123][ T38] audit: type=1326 audit(1791129256.844:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10819 comm="syz.6.958" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578bf0e159 code=0x0 [ 757.973914][T10807] CIFS: VFS: cifs_mount failed w/return code = -112 [ 758.083991][T10825] input: syz0 as /devices/virtual/input/input25 [ 758.088130][ C1] tipc: RX(1001001): key[1] is activated [ 758.267153][ T8279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.327967][ T8279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.368122][ T8279] bond0 (unregistering): Released all slaves [ 758.475788][ T5575] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 758.686014][ T5575] usb 6-1: Using ep0 maxpacket: 32 [ 758.687538][ T5575] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 758.694537][ T5575] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 758.694565][ T5575] usb 6-1: config 0 has no interface number 0 [ 758.742338][ T5575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.742367][ T5575] usb 6-1: Product: syz [ 758.742382][ T5575] usb 6-1: Manufacturer: syz [ 758.742396][ T5575] usb 6-1: SerialNumber: syz [ 758.883897][ T5575] usb 6-1: config 0 descriptor?? [ 759.363333][ T5575] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 759.363366][ T5575] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 759.800738][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'. [ 760.024533][ T5575] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 760.027973][ T5575] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 760.277790][ T5575] usb 6-1: USB disconnect, device number 3 [ 761.653722][ T5248] 8021q: adding VLAN 0 to HW filter on device eth17 [ 762.517757][ T8279] hsr_slave_0: left promiscuous mode [ 762.567830][ T8279] hsr_slave_1: left promiscuous mode [ 762.569151][ T8279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.569178][ T8279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.626620][ T8279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.626644][ T8279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.112602][ T8279] veth1_macvtap: left promiscuous mode [ 763.112710][ T8279] veth0_macvtap: left promiscuous mode [ 763.112932][ T8279] veth1_vlan: left promiscuous mode [ 763.113069][ T8279] veth0_vlan: left promiscuous mode [ 765.098922][ T8279] team0 (unregistering): Port device team_slave_1 removed [ 765.156445][ T8279] team0 (unregistering): Port device team_slave_0 removed [ 765.774275][T10927] geneve3: entered promiscuous mode [ 765.805767][T10924] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 58532 - 0 [ 765.806159][T10924] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 58532 - 0 [ 765.806196][T10924] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 58532 - 0 [ 765.806225][T10924] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 58532 - 0 [ 765.876695][T10537] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 765.986571][T10537] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 765.993430][T10537] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 766.234401][T10537] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 766.365600][T10537] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 766.418950][T10537] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 766.427411][T10537] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 766.581621][T10537] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 769.342777][T10979] FAULT_INJECTION: forcing a failure. [ 769.342777][T10979] name fail_usercopy, interval 1, probability 0, space 0, times -1 [ 769.342819][T10979] CPU: 1 UID: 0 PID: 10979 Comm: syz.5.1000 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 769.342848][T10979] Tainted: [L]=SOFTLOCKUP [ 769.342856][T10979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 769.342872][T10979] Call Trace: [ 769.342880][T10979] [ 769.342889][T10979] dump_stack_lvl+0xe8/0x150 [ 769.342927][T10979] should_fail_ex+0x46b/0x600 [ 769.342971][T10979] strncpy_from_user+0x36/0x2c0 [ 769.343003][T10979] __se_sys_add_key+0xdb/0x420 [ 769.343031][T10979] ? __pfx___se_sys_add_key+0x10/0x10 [ 769.343065][T10979] ? __x64_sys_add_key+0x20/0xc0 [ 769.343091][T10979] do_syscall_64+0x166/0x520 [ 769.343115][T10979] ? trace_irq_disable+0x3b/0x140 [ 769.343143][T10979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.343165][T10979] ? clear_bhb_loop+0x70/0xc0 [ 769.343191][T10979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.343212][T10979] RIP: 0033:0x7eff1659e159 [ 769.343232][T10979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.343251][T10979] RSP: 002b:00007eff147f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 769.343275][T10979] RAX: ffffffffffffffda RBX: 00007eff16825fa0 RCX: 00007eff1659e159 [ 769.343290][T10979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 769.343303][T10979] RBP: 00007eff1663506b R08: ffffffffffffffff R09: 0000000000000000 [ 769.343317][T10979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.343330][T10979] R13: 00007eff16826038 R14: 00007eff16825fa0 R15: 00007ffee69b23c8 [ 769.343363][T10979] [ 769.719749][T10537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.748399][T10537] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.827307][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.827532][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.868110][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.868272][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.924147][T10987] device-mapper: dirty region log: region count exceeds limit of 4294967295 [ 769.924200][T10987] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL) [ 769.924213][T10987] device-mapper: ioctl: error adding target to table [ 770.189015][ T5248] 8021q: adding VLAN 0 to HW filter on device eth18 [ 770.711021][ T8279] IPVS: stop unused estimator thread 0... [ 774.448065][T11024] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1013'. [ 774.999254][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1020'. [ 775.200122][T11063] netlink: 'syz.5.1021': attribute type 12 has an invalid length. [ 775.200148][T11063] netlink: 'syz.5.1021': attribute type 29 has an invalid length. [ 775.200162][T11063] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1021'. [ 775.200200][T11063] netlink: 'syz.5.1021': attribute type 1 has an invalid length. [ 775.200212][T11063] netlink: 'syz.5.1021': attribute type 2 has an invalid length. [ 775.200224][T11063] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1021'. [ 775.201757][T11063] netlink: 'syz.5.1021': attribute type 12 has an invalid length. [ 775.201777][T11063] netlink: 'syz.5.1021': attribute type 29 has an invalid length. [ 775.201791][T11063] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1021'. [ 775.201806][T11063] netlink: 'syz.5.1021': attribute type 1 has an invalid length. [ 775.201818][T11063] netlink: 'syz.5.1021': attribute type 2 has an invalid length. [ 775.201829][T11063] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1021'. [ 775.370182][ T38] audit: type=1800 audit(1791129274.364:195): pid=11064 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1022" name="nullb0" dev="tmpfs" ino=2578 res=0 errno=0 [ 775.472953][T10537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.734609][T11083] FAULT_INJECTION: forcing a failure. [ 775.734609][T11083] name failslab, interval 1, probability 0, space 0, times 0 [ 775.734653][T11083] CPU: 0 UID: 0 PID: 11083 Comm: syz.7.1026 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 775.734684][T11083] Tainted: [L]=SOFTLOCKUP [ 775.734700][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 775.734713][T11083] Call Trace: [ 775.734721][T11083] [ 775.734731][T11083] dump_stack_lvl+0xe8/0x150 [ 775.734770][T11083] should_fail_ex+0x46b/0x600 [ 775.734807][T11083] should_failslab+0xa8/0x100 [ 775.734832][T11083] __kmalloc_cache_noprof+0xa1/0x680 [ 775.734863][T11083] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 775.735020][T11083] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 775.735056][T11083] snd_pcm_hw_param_near+0x80/0x4d0 [ 775.735088][T11083] snd_pcm_oss_change_params_locked+0x1e5e/0x3c80 [ 775.735140][T11083] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 775.735169][T11083] ? do_raw_spin_lock+0x12b/0x2f0 [ 775.735203][T11083] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 775.735243][T11083] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 775.735276][T11083] ? snd_pcm_oss_write+0x207/0xb40 [ 775.735306][T11083] snd_pcm_oss_write+0x274/0xb40 [ 775.735346][T11083] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 775.735370][T11083] vfs_write+0x29f/0xbb0 [ 775.735407][T11083] ? __pfx_vfs_write+0x10/0x10 [ 775.735436][T11083] ? __fget_files+0x2a/0x420 [ 775.735462][T11083] ? __fget_files+0x2a/0x420 [ 775.735482][T11083] ? __fget_files+0x3a8/0x420 [ 775.735503][T11083] ? __fget_files+0x2a/0x420 [ 775.735534][T11083] ksys_write+0x156/0x270 [ 775.735562][T11083] ? __pfx_ksys_write+0x10/0x10 [ 775.735600][T11083] do_syscall_64+0x166/0x520 [ 775.735625][T11083] ? trace_irq_disable+0x3b/0x140 [ 775.735657][T11083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.735679][T11083] ? clear_bhb_loop+0x70/0xc0 [ 775.735714][T11083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.735736][T11083] RIP: 0033:0x7fe8c8f2e159 [ 775.735757][T11083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.735774][T11083] RSP: 002b:00007fe8c7186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 775.735797][T11083] RAX: ffffffffffffffda RBX: 00007fe8c91b5fa0 RCX: 00007fe8c8f2e159 [ 775.735813][T11083] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 775.735826][T11083] RBP: 00007fe8c8fc506b R08: 0000000000000000 R09: 0000000000000000 [ 775.735840][T11083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.735854][T11083] R13: 00007fe8c91b6038 R14: 00007fe8c91b5fa0 R15: 00007ffcce150fd8 [ 775.735888][T11083] [ 776.244282][ T5248] 8021q: adding VLAN 0 to HW filter on device eth19 [ 776.451924][T11099] netlink: 'syz.5.1030': attribute type 1 has an invalid length. [ 776.451951][T11099] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1030'. [ 776.451982][T11099] netlink: 'syz.5.1030': attribute type 1 has an invalid length. [ 777.002475][ T13] IPVS: starting estimator thread 0... [ 777.004089][T10537] veth0_vlan: entered promiscuous mode [ 777.032756][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 777.335489][T11125] IPVS: using max 9 ests per chain, 21600 per kthread [ 777.723501][T10537] veth1_vlan: entered promiscuous mode [ 778.050778][T10537] veth0_macvtap: entered promiscuous mode [ 778.053119][T11133] hsr0: entered promiscuous mode [ 778.074840][T10537] veth1_macvtap: entered promiscuous mode [ 778.149406][T11133] hsr_slave_0: left promiscuous mode [ 778.186888][T11133] hsr_slave_1: left promiscuous mode [ 778.260379][T11133] hsr0 (unregistering): left promiscuous mode [ 778.301330][T11144] FAULT_INJECTION: forcing a failure. [ 778.301330][T11144] name failslab, interval 1, probability 0, space 0, times 0 [ 778.301369][T11144] CPU: 0 UID: 0 PID: 11144 Comm: syz.6.1043 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 778.301399][T11144] Tainted: [L]=SOFTLOCKUP [ 778.301407][T11144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 778.301419][T11144] Call Trace: [ 778.301431][T11144] [ 778.301441][T11144] dump_stack_lvl+0xe8/0x150 [ 778.301479][T11144] should_fail_ex+0x46b/0x600 [ 778.301522][T11144] should_failslab+0xa8/0x100 [ 778.301543][T11144] ? alloc_empty_file+0x5b/0x1d0 [ 778.301564][T11144] kmem_cache_alloc_noprof+0x9e/0x690 [ 778.301594][T11144] ? alloc_empty_file+0x5b/0x1d0 [ 778.301620][T11144] alloc_empty_file+0x5b/0x1d0 [ 778.301641][T11144] alloc_file_pseudo+0x115/0x1e0 [ 778.301665][T11144] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 778.301688][T11144] ? alloc_fd+0x654/0x6d0 [ 778.301714][T11144] sock_alloc_file+0xb8/0x2f0 [ 778.301742][T11144] ? __sys_socket+0x12b/0x1b0 [ 778.301774][T11144] __sys_socket+0x13f/0x1b0 [ 778.301808][T11144] __x64_sys_socket+0x7a/0x90 [ 778.301841][T11144] do_syscall_64+0x166/0x520 [ 778.301864][T11144] ? trace_irq_disable+0x3b/0x140 [ 778.301891][T11144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.301912][T11144] ? clear_bhb_loop+0x70/0xc0 [ 778.301936][T11144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.301956][T11144] RIP: 0033:0x7f578bf0e159 [ 778.301976][T11144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.301993][T11144] RSP: 002b:00007f578a165fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 778.302015][T11144] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f578bf0e159 [ 778.302031][T11144] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 778.302043][T11144] RBP: 00007f578bfa506b R08: 0000000000000000 R09: 0000000000000000 [ 778.302056][T11144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.302069][T11144] R13: 00007f578c196038 R14: 00007f578c195fa0 R15: 00007fff0f96b368 [ 778.302101][T11144] [ 778.543474][T10537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.879124][T10537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.986737][ T5248] 8021q: adding VLAN 0 to HW filter on device eth20 [ 779.188863][T10924] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.188909][T10924] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.271983][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.272717][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.306643][T11165] loop4: detected capacity change from 0 to 7 [ 779.323481][T11165] Dev loop4: unable to read RDB block 7 [ 779.323562][T11165] loop4: unable to read partition table [ 779.323761][T11165] loop4: partition table beyond EOD, truncated [ 779.323780][T11165] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 781.455549][ T8279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.455571][ T8279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.858218][ T3405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.858240][ T3405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.884740][T11209] FAULT_INJECTION: forcing a failure. [ 781.884740][T11209] name failslab, interval 1, probability 0, space 0, times 0 [ 781.884780][T11209] CPU: 1 UID: 0 PID: 11209 Comm: syz.6.1061 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 781.884809][T11209] Tainted: [L]=SOFTLOCKUP [ 781.884817][T11209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 781.884830][T11209] Call Trace: [ 781.884838][T11209] [ 781.884846][T11209] dump_stack_lvl+0xe8/0x150 [ 781.884888][T11209] should_fail_ex+0x46b/0x600 [ 781.884924][T11209] should_failslab+0xa8/0x100 [ 781.884948][T11209] __kmalloc_cache_noprof+0xa1/0x680 [ 781.884978][T11209] ? ioc_cpd_alloc+0x73/0x120 [ 781.885045][T11209] ? ioc_cpd_alloc+0x73/0x120 [ 781.885074][T11209] ioc_cpd_alloc+0x73/0x120 [ 781.885096][T11209] blkcg_css_alloc+0x45a/0xa90 [ 781.885122][T11209] cgroup_apply_control_enable+0x5b8/0xd40 [ 781.885178][T11209] cgroup_mkdir+0xd22/0xf70 [ 781.885217][T11209] ? __pfx_cgroup_mkdir+0x10/0x10 [ 781.885249][T11209] kernfs_iop_mkdir+0x213/0x360 [ 781.885302][T11209] vfs_mkdir+0x408/0x620 [ 781.885338][T11209] filename_mkdirat+0x289/0x520 [ 781.885372][T11209] ? __pfx_filename_mkdirat+0x10/0x10 [ 781.885405][T11209] ? do_getname+0x151/0x250 [ 781.885427][T11209] __se_sys_mkdirat+0x35/0x150 [ 781.885463][T11209] do_syscall_64+0x166/0x520 [ 781.885485][T11209] ? trace_irq_disable+0x3b/0x140 [ 781.885512][T11209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.885533][T11209] ? clear_bhb_loop+0x70/0xc0 [ 781.885557][T11209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.885578][T11209] RIP: 0033:0x7f578bf0e159 [ 781.885598][T11209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.885613][T11209] RSP: 002b:00007f578a166028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 781.885634][T11209] RAX: ffffffffffffffda RBX: 00007f578c195fa0 RCX: 00007f578bf0e159 [ 781.885649][T11209] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 781.885663][T11209] RBP: 00007f578bfa506b R08: 0000000000000000 R09: 0000000000000000 [ 781.885674][T11209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.885684][T11209] R13: 00007f578c196038 R14: 00007f578c195fa0 R15: 00007fff0f96b368 [ 781.885714][T11209] [ 785.352185][T11213] block device autoloading is deprecated and will be removed. [ 785.400039][T11213] block device autoloading is deprecated and will be removed. [ 787.257354][T11213] device-mapper: table: 248:0: mirror: Unrecognised feature requested (-EINVAL) [ 787.257383][T11213] device-mapper: ioctl: error adding target to table [ 787.633177][T11271] CIFS: Attempting to mount //127.0.0.1/share [ 787.634810][T11272] FAULT_INJECTION: forcing a failure. [ 787.634810][T11272] name failslab, interval 1, probability 0, space 0, times 0 [ 787.634843][T11272] CPU: 0 UID: 0 PID: 11272 Comm: syz.7.1076 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 787.634866][T11272] Tainted: [L]=SOFTLOCKUP [ 787.634872][T11272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 787.634882][T11272] Call Trace: [ 787.634888][T11272] [ 787.634895][T11272] dump_stack_lvl+0xe8/0x150 [ 787.634928][T11272] should_fail_ex+0x46b/0x600 [ 787.634960][T11272] should_failslab+0xa8/0x100 [ 787.634981][T11272] __kmalloc_cache_noprof+0xa1/0x680 [ 787.635007][T11272] ? tipc_conn_alloc+0x57/0x500 [ 787.635142][T11272] ? tipc_conn_alloc+0x57/0x500 [ 787.635164][T11272] tipc_conn_alloc+0x57/0x500 [ 787.635186][T11272] tipc_topsrv_kern_subscr+0xf8/0x250 [ 787.635204][T11272] ? tipc_own_addr+0x45/0x2a0 [ 787.635223][T11272] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 787.635243][T11272] ? tipc_own_addr+0x45/0x2a0 [ 787.635263][T11272] ? __asan_memset+0x22/0x50 [ 787.635289][T11272] tipc_group_create+0x35b/0x4f0 [ 787.635315][T11272] tipc_sk_join+0x25d/0x6a0 [ 787.635377][T11272] ? __pfx_tipc_sk_join+0x10/0x10 [ 787.635402][T11272] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 787.635437][T11272] ? lockdep_hardirqs_on+0x7b/0x110 [ 787.635463][T11272] tipc_setsockopt+0x73e/0x9a0 [ 787.635493][T11272] ? __pfx_tipc_setsockopt+0x10/0x10 [ 787.635517][T11272] ? __fget_files+0x2a/0x420 [ 787.635546][T11272] ? __fget_files+0x2a/0x420 [ 787.635563][T11272] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 787.635594][T11272] ? __pfx_tipc_setsockopt+0x10/0x10 [ 787.635623][T11272] do_sock_setsockopt+0x17c/0x1b0 [ 787.635648][T11272] __x64_sys_setsockopt+0x143/0x1b0 [ 787.635672][T11272] do_syscall_64+0x166/0x520 [ 787.635691][T11272] ? trace_irq_disable+0x3b/0x140 [ 787.635715][T11272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.635734][T11272] ? clear_bhb_loop+0x70/0xc0 [ 787.635755][T11272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.635773][T11272] RIP: 0033:0x7fe8c8f2e159 [ 787.635792][T11272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.635807][T11272] RSP: 002b:00007fe8c7186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 787.635828][T11272] RAX: ffffffffffffffda RBX: 00007fe8c91b5fa0 RCX: 00007fe8c8f2e159 [ 787.635841][T11272] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 787.635852][T11272] RBP: 00007fe8c8fc506b R08: 00000000000004bd R09: 0000000000000000 [ 787.635862][T11272] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 787.635874][T11272] R13: 00007fe8c91b6038 R14: 00007fe8c91b5fa0 R15: 00007ffcce150fd8 [ 787.635902][T11272] [ 789.251096][T11271] CIFS: VFS: cifs_mount failed w/return code = -112 [ 789.455765][ T8114] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 790.582450][ T8114] usb 10-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 790.603283][ T8114] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 790.603318][ T8114] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 790.603343][ T8114] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 790.603366][ T8114] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 790.603387][ T8114] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 790.603441][ T8114] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.643337][T11288] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 790.643456][T11288] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 790.643565][T11288] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 790.744573][ T8114] mos7720 10-1:1.0: Moschip 2 port adapter converter detected [ 791.226172][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 791.949612][ T8114] usb 10-1: mos7720: usb_control_msg() failed: -71 [ 794.633831][ T8114] usb 10-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 795.160636][T11360] validate_nla: 1 callbacks suppressed [ 795.160777][T11360] netlink: 'syz.1.1100': attribute type 4 has an invalid length. [ 796.308744][ T8114] usb 10-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 796.681349][ T8159] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 796.915734][ T8159] usb 6-1: Using ep0 maxpacket: 32 [ 796.916660][ T8159] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 796.918317][ T8159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.983536][ C1] usb 10-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 796.983613][ T8114] usb 10-1: USB disconnect, device number 2 [ 797.056894][ T8114] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 797.163615][ T8159] usb 6-1: config 0 descriptor?? [ 797.191849][ T8114] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 797.212561][ T8114] mos7720 10-1:1.0: device disconnected [ 797.227477][ T8159] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 798.044086][T11376] ªªªªªª: renamed from vlan0 [ 798.683757][ T8159] gspca_vc032x: reg_w err -71 [ 798.683871][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.683884][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.683893][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.683902][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.683926][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.683934][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.683943][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.683952][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.683960][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.683968][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.683976][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.683985][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.683993][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.684001][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.684009][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.684026][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.684034][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.684042][ T8159] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.684082][ T8159] gspca_vc032x: Unknown sensor... [ 798.684175][ T8159] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 798.724331][ T8159] usb 6-1: USB disconnect, device number 4 [ 799.124028][T11416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.222999][T11419] FAULT_INJECTION: forcing a failure. [ 799.222999][T11419] name failslab, interval 1, probability 0, space 0, times 0 [ 799.223036][T11419] CPU: 0 UID: 0 PID: 11419 Comm: syz.7.1118 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 799.223062][T11419] Tainted: [L]=SOFTLOCKUP [ 799.223069][T11419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 799.223080][T11419] Call Trace: [ 799.223087][T11419] [ 799.223096][T11419] dump_stack_lvl+0xe8/0x150 [ 799.223128][T11419] should_fail_ex+0x46b/0x600 [ 799.223157][T11419] should_failslab+0xa8/0x100 [ 799.223177][T11419] __kmalloc_cache_noprof+0xa1/0x680 [ 799.223202][T11419] ? alloc_tty_struct+0xa6/0x7c0 [ 799.223222][T11419] ? alloc_tty_struct+0xa6/0x7c0 [ 799.223245][T11419] alloc_tty_struct+0xa6/0x7c0 [ 799.223269][T11419] ? __pfx_alloc_tty_struct+0x10/0x10 [ 799.223298][T11419] tty_init_dev+0x59/0x4d0 [ 799.223319][T11419] ptmx_open+0xf4/0x2e0 [ 799.223462][T11419] chrdev_open+0x4dc/0x600 [ 799.223490][T11419] ? __pfx_chrdev_open+0x10/0x10 [ 799.223525][T11419] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 799.223568][T11419] ? __pfx_chrdev_open+0x10/0x10 [ 799.223592][T11419] do_dentry_open+0x849/0x1420 [ 799.223618][T11419] vfs_open+0x3b/0x350 [ 799.223631][T11419] ? path_openat+0x142d/0x1d60 [ 799.223657][T11419] path_openat+0x1448/0x1d60 [ 799.223693][T11419] do_file_open+0x23e/0x4a0 [ 799.223716][T11419] ? __pfx_do_file_open+0x10/0x10 [ 799.223762][T11419] ? alloc_fd+0x654/0x6d0 [ 799.223789][T11419] do_sys_openat2+0x115/0x200 [ 799.223807][T11419] ? __se_sys_futex+0x3a8/0x450 [ 799.223827][T11419] ? __pfx_do_sys_openat2+0x10/0x10 [ 799.223850][T11419] ? rcu_is_watching+0x16/0xb0 [ 799.223887][T11419] __x64_sys_openat+0x138/0x170 [ 799.223909][T11419] do_syscall_64+0x166/0x520 [ 799.223931][T11419] ? trace_irq_disable+0x3b/0x140 [ 799.223954][T11419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.223974][T11419] ? clear_bhb_loop+0x70/0xc0 [ 799.223997][T11419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.224016][T11419] RIP: 0033:0x7fe8c8f2e159 [ 799.224033][T11419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.224050][T11419] RSP: 002b:00007fe8c7186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 799.224072][T11419] RAX: ffffffffffffffda RBX: 00007fe8c91b5fa0 RCX: 00007fe8c8f2e159 [ 799.224087][T11419] RDX: 0000000001123102 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 799.224101][T11419] RBP: 00007fe8c8fc506b R08: 0000000000000000 R09: 0000000000000000 [ 799.224115][T11419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.224127][T11419] R13: 00007fe8c91b6038 R14: 00007fe8c91b5fa0 R15: 00007ffcce150fd8 [ 799.224157][T11419] [ 799.558221][T11424] input: syz0 as /devices/virtual/input/input26 [ 803.503215][T11492] input: syz0 as /devices/virtual/input/input27 [ 804.265805][ T8158] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 804.415738][ T8158] usb 6-1: Using ep0 maxpacket: 8 [ 804.416658][ T8158] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 804.419915][ T8158] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 804.419943][ T8158] usb 6-1: config 0 has no interface number 0 [ 804.419986][ T8158] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 804.420011][ T8158] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 804.420035][ T8158] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 804.420060][ T8158] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 804.420103][ T8158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.650915][ T8158] usb 6-1: config 0 descriptor?? [ 804.862830][ T8158] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 805.268176][ T5575] usb 6-1: USB disconnect, device number 5 [ 805.502508][ T5575] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 805.959995][T11561] input: syz0 as /devices/virtual/input/input28 [ 808.606408][T11569] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1157'. [ 814.329903][T10924] IPVS: starting estimator thread 0... [ 814.425797][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.425870][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.435915][T11681] IPVS: using max 8 ests per chain, 19200 per kthread [ 816.658769][T11712] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1194'. [ 816.683491][ T1165] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 817.423132][ T144] IPVS: starting estimator thread 0... [ 817.659333][T11718] IPVS: using max 8 ests per chain, 19200 per kthread [ 821.060830][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 821.267463][T11779] FAULT_INJECTION: forcing a failure. [ 821.267463][T11779] name failslab, interval 1, probability 0, space 0, times 0 [ 821.267503][T11779] CPU: 1 UID: 0 PID: 11779 Comm: syz.5.1210 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 821.267532][T11779] Tainted: [L]=SOFTLOCKUP [ 821.267540][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 821.267553][T11779] Call Trace: [ 821.267561][T11779] [ 821.267570][T11779] dump_stack_lvl+0xe8/0x150 [ 821.267607][T11779] should_fail_ex+0x46b/0x600 [ 821.267650][T11779] should_failslab+0xa8/0x100 [ 821.267675][T11779] __kvmalloc_node_noprof+0x176/0x890 [ 821.267708][T11779] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 821.267738][T11779] ? alloc_netdev_mqs+0xd59/0x12c0 [ 821.267863][T11779] ? alloc_netdev_mqs+0xd59/0x12c0 [ 821.267897][T11779] alloc_netdev_mqs+0xd59/0x12c0 [ 821.267932][T11779] tun_set_iff+0x520/0xf20 [ 821.268021][T11779] __tun_chr_ioctl+0x7e8/0x1e70 [ 821.268057][T11779] ? __pfx_smack_file_ioctl+0x10/0x10 [ 821.268088][T11779] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 821.268119][T11779] ? __fget_files+0x2a/0x420 [ 821.268138][T11779] ? __fget_files+0x3a8/0x420 [ 821.268157][T11779] ? __fget_files+0x2a/0x420 [ 821.268180][T11779] ? bpf_lsm_file_ioctl+0x9/0x20 [ 821.268203][T11779] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 821.268227][T11779] __se_sys_ioctl+0xff/0x170 [ 821.268255][T11779] do_syscall_64+0x166/0x520 [ 821.268276][T11779] ? trace_irq_disable+0x3b/0x140 [ 821.268301][T11779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.268321][T11779] ? clear_bhb_loop+0x70/0xc0 [ 821.268346][T11779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.268366][T11779] RIP: 0033:0x7eff1659e159 [ 821.268386][T11779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.268403][T11779] RSP: 002b:00007eff147f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 821.268425][T11779] RAX: ffffffffffffffda RBX: 00007eff16825fa0 RCX: 00007eff1659e159 [ 821.268440][T11779] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 821.268454][T11779] RBP: 00007eff1663506b R08: 0000000000000000 R09: 0000000000000000 [ 821.268467][T11779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.268479][T11779] R13: 00007eff16826038 R14: 00007eff16825fa0 R15: 00007ffee69b23c8 [ 821.268511][T11779] [ 821.612801][ T8415] Bluetooth: hci3: command 0x0406 tx timeout [ 823.237126][T11804] fuse: Bad value for 'fd' [ 829.772942][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 829.785821][ T8159] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 830.905828][ T8159] usb 10-1: Using ep0 maxpacket: 32 [ 830.906775][ T8159] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 830.908407][ T8159] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.908437][ T8159] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.908475][ T8159] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.019374][ T8159] usb 10-1: config 0 descriptor?? [ 831.344804][ T38] audit: type=1800 audit(1791129330.334:196): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1238" name="(" dev="sda1" ino=2088 res=0 errno=0 [ 831.468348][ T8159] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 831.468373][ T8159] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 832.587262][T11900] fuse: Bad value for 'fd' [ 832.627347][ T8159] ft260 0003:0403:6030.0004: failed to retrieve chip version [ 832.627741][ T8159] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -71 [ 832.679495][ T8159] usb 10-1: USB disconnect, device number 3 [ 832.922778][T11910] netlink: 'syz.6.1246': attribute type 4 has an invalid length. [ 833.248649][T11917] netlink: 'syz.6.1246': attribute type 4 has an invalid length. [ 833.468981][T11913] netlink: 'syz.1.1247': attribute type 1 has an invalid length. [ 834.350463][T11913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 835.355120][T11920] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 835.849140][ T8273] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 835.853699][T11921] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 835.958477][ T8273] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 836.241934][T11960] binder: BINDER_SET_CONTEXT_MGR already set [ 836.241951][T11960] binder: 11959:11960 ioctl 4018620d 200000004a80 returned -16 [ 836.573277][ T8158] hid-generic 0008:046D:C082.0005: hidraw0: HID v0.04 Device [syz0] on syz0 [ 837.718794][T11994] FAULT_INJECTION: forcing a failure. [ 837.718794][T11994] name failslab, interval 1, probability 0, space 0, times 0 [ 837.718838][T11994] CPU: 1 UID: 0 PID: 11994 Comm: syz.7.1262 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 837.718869][T11994] Tainted: [L]=SOFTLOCKUP [ 837.718877][T11994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 837.718891][T11994] Call Trace: [ 837.718899][T11994] [ 837.718908][T11994] dump_stack_lvl+0xe8/0x150 [ 837.718945][T11994] should_fail_ex+0x46b/0x600 [ 837.718981][T11994] should_failslab+0xa8/0x100 [ 837.719006][T11994] __kvmalloc_node_noprof+0x176/0x890 [ 837.719039][T11994] ? kmem_cache_alloc_noprof+0x3c6/0x690 [ 837.719068][T11994] ? ceph_msg_new2+0x166/0x4d0 [ 837.719183][T11994] ? ceph_msg_new2+0x166/0x4d0 [ 837.719215][T11994] ceph_msg_new2+0x166/0x4d0 [ 837.719244][T11994] ceph_monc_init+0x643/0xb10 [ 837.719313][T11994] ceph_create_client+0x225/0x310 [ 837.719380][T11994] ceph_get_tree+0x1ca/0x1a40 [ 837.719421][T11994] ? cap_capable+0x123/0x460 [ 837.719449][T11994] ? safesetid_security_capable+0xa9/0x1a0 [ 837.719492][T11994] vfs_get_tree+0x92/0x2a0 [ 837.719521][T11994] vfs_cmd_create+0xa2/0x200 [ 837.719545][T11994] __se_sys_fsconfig+0x6bf/0x810 [ 837.719580][T11994] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 837.719624][T11994] ? __x64_sys_fsconfig+0x20/0xc0 [ 837.719658][T11994] do_syscall_64+0x166/0x520 [ 837.719681][T11994] ? trace_irq_disable+0x3b/0x140 [ 837.719709][T11994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.719729][T11994] ? clear_bhb_loop+0x70/0xc0 [ 837.719754][T11994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.719775][T11994] RIP: 0033:0x7fe8c8f2e159 [ 837.719796][T11994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.719813][T11994] RSP: 002b:00007fe8c7186028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 837.719835][T11994] RAX: ffffffffffffffda RBX: 00007fe8c91b5fa0 RCX: 00007fe8c8f2e159 [ 837.719851][T11994] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 837.719863][T11994] RBP: 00007fe8c8fc506b R08: 0000000000000000 R09: 0000000000000000 [ 837.719877][T11994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.719889][T11994] R13: 00007fe8c91b6038 R14: 00007fe8c91b5fa0 R15: 00007ffcce150fd8 [ 837.719923][T11994] [ 838.244407][ T38] audit: type=1326 audit(1791129337.234:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12000 comm="syz.9.1265" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9a9f1e159 code=0x0 [ 841.330994][T12020] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 847.045836][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 847.437095][ T38] audit: type=1800 audit(1791129346.424:198): pid=12082 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.1294" name="file1" dev="sda1" ino=2089 res=0 errno=0 [ 847.574330][T12089] netlink: 'syz.6.1297': attribute type 10 has an invalid length. [ 847.575249][T12089] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.607628][T12089] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.712145][T12089] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.714070][T12089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.752992][T12089] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.753169][T12089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.784894][T12089] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 848.318463][T12100] FAULT_INJECTION: forcing a failure. [ 848.318463][T12100] name failslab, interval 1, probability 0, space 0, times 0 [ 848.318503][T12100] CPU: 0 UID: 0 PID: 12100 Comm: syz.6.1301 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 848.318531][T12100] Tainted: [L]=SOFTLOCKUP [ 848.318540][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 848.318552][T12100] Call Trace: [ 848.318561][T12100] [ 848.318569][T12100] dump_stack_lvl+0xe8/0x150 [ 848.318606][T12100] should_fail_ex+0x46b/0x600 [ 848.318641][T12100] should_failslab+0xa8/0x100 [ 848.318665][T12100] __kvmalloc_node_noprof+0x176/0x890 [ 848.318705][T12100] ? io_pin_pages+0xac/0x1a0 [ 848.318734][T12100] ? io_pin_pages+0xac/0x1a0 [ 848.318769][T12100] io_pin_pages+0xac/0x1a0 [ 848.318801][T12100] io_region_pin_pages+0x7d/0x190 [ 848.318835][T12100] io_create_region+0x3a4/0x4b0 [ 848.318872][T12100] io_allocate_scq_urings+0x1f4/0x7f0 [ 848.318944][T12100] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 848.318969][T12100] ? bpf_lsm_capable+0x9/0x20 [ 848.318995][T12100] ? security_capable+0x7e/0x2c0 [ 848.319024][T12100] io_uring_create+0x46c/0x990 [ 848.319049][T12100] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 848.319075][T12100] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 848.319112][T12100] ? rcu_is_watching+0x16/0xb0 [ 848.319157][T12100] do_syscall_64+0x166/0x520 [ 848.319180][T12100] ? trace_irq_disable+0x3b/0x140 [ 848.319206][T12100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.319227][T12100] ? clear_bhb_loop+0x70/0xc0 [ 848.319252][T12100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.319271][T12100] RIP: 0033:0x7f578bf0e159 [ 848.319291][T12100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.319309][T12100] RSP: 002b:00007f578a166028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 848.319331][T12100] RAX: ffffffffffffffda RBX: 00007f578c195fa0 RCX: 00007f578bf0e159 [ 848.319347][T12100] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001b7b [ 848.319360][T12100] RBP: 00007f578bfa506b R08: 0000000000000000 R09: 0000000000000000 [ 848.319374][T12100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.319386][T12100] R13: 00007f578c196038 R14: 00007f578c195fa0 R15: 00007fff0f96b368 [ 848.319418][T12100] [ 848.678801][T12108] FAULT_INJECTION: forcing a failure. [ 848.678801][T12108] name failslab, interval 1, probability 0, space 0, times 0 [ 848.678833][T12108] CPU: 1 UID: 0 PID: 12108 Comm: syz.6.1304 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 848.678856][T12108] Tainted: [L]=SOFTLOCKUP [ 848.678863][T12108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 848.678874][T12108] Call Trace: [ 848.678881][T12108] [ 848.678899][T12108] dump_stack_lvl+0xe8/0x150 [ 848.678934][T12108] should_fail_ex+0x46b/0x600 [ 848.678965][T12108] should_failslab+0xa8/0x100 [ 848.678988][T12108] ? security_inode_alloc+0x39/0x310 [ 848.679009][T12108] kmem_cache_alloc_noprof+0x9e/0x690 [ 848.679035][T12108] ? security_inode_alloc+0x39/0x310 [ 848.679062][T12108] security_inode_alloc+0x39/0x310 [ 848.679084][T12108] inode_init_always_gfp+0x983/0xd40 [ 848.679109][T12108] ? __pfx_proc_alloc_inode+0x10/0x10 [ 848.679135][T12108] alloc_inode+0x82/0x1b0 [ 848.679158][T12108] new_inode+0x1f/0x170 [ 848.679179][T12108] ? proc_pid_make_inode+0x19/0x130 [ 848.679202][T12108] proc_pid_make_inode+0x21/0x130 [ 848.679223][T12108] proc_pident_instantiate+0x6d/0x2a0 [ 848.679249][T12108] proc_pident_lookup+0x1b7/0x270 [ 848.679274][T12108] __lookup_slow+0x1fb/0x2f0 [ 848.679301][T12108] lookup_slow+0x53/0x70 [ 848.679319][T12108] link_path_walk+0xd2a/0x1910 [ 848.679353][T12108] path_openat+0x1ce/0x1d60 [ 848.679394][T12108] do_file_open+0x23e/0x4a0 [ 848.679423][T12108] ? __pfx_do_file_open+0x10/0x10 [ 848.679458][T12108] ? __pfx_kfree_link+0x10/0x10 [ 848.679492][T12108] ? alloc_fd+0x654/0x6d0 [ 848.679524][T12108] do_sys_openat2+0x115/0x200 [ 848.679545][T12108] ? __se_sys_futex+0x3a8/0x450 [ 848.679566][T12108] ? __pfx_do_sys_openat2+0x10/0x10 [ 848.679591][T12108] ? rcu_is_watching+0x16/0xb0 [ 848.679624][T12108] __x64_sys_openat+0x138/0x170 [ 848.679649][T12108] do_syscall_64+0x166/0x520 [ 848.679673][T12108] ? trace_irq_disable+0x3b/0x140 [ 848.679699][T12108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.679720][T12108] ? clear_bhb_loop+0x70/0xc0 [ 848.679744][T12108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.679765][T12108] RIP: 0033:0x7f578bece98e [ 848.679784][T12108] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 848.679803][T12108] RSP: 002b:00007f578a165ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 848.679827][T12108] RAX: ffffffffffffffda RBX: 00007f578a1666c0 RCX: 00007f578bece98e [ 848.679845][T12108] RDX: 0000000000000002 RSI: 00007f578a165f90 RDI: ffffffffffffff9c [ 848.679861][T12108] RBP: 00007f578bfa506b R08: 0000000000000000 R09: 0000000000000000 [ 848.679876][T12108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.679900][T12108] R13: 00007f578c196038 R14: 00007f578c195fa0 R15: 00007fff0f96b368 [ 848.679934][T12108] [ 851.230793][T12141] FAULT_INJECTION: forcing a failure. [ 851.230793][T12141] name failslab, interval 1, probability 0, space 0, times 0 [ 851.231096][T12141] CPU: 1 UID: 0 PID: 12141 Comm: syz.9.1313 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 851.231115][T12141] Tainted: [L]=SOFTLOCKUP [ 851.231119][T12141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 851.231126][T12141] Call Trace: [ 851.231133][T12141] [ 851.231141][T12141] dump_stack_lvl+0xe8/0x150 [ 851.231177][T12141] should_fail_ex+0x46b/0x600 [ 851.231199][T12141] should_failslab+0xa8/0x100 [ 851.231213][T12141] __kmalloc_cache_noprof+0xa1/0x680 [ 851.231229][T12141] ? snd_seq_port_connect+0x6b/0x3a0 [ 851.231323][T12141] ? snd_seq_port_connect+0x6b/0x3a0 [ 851.231340][T12141] snd_seq_port_connect+0x6b/0x3a0 [ 851.231353][T12141] ? snd_seq_port_use_ptr+0x29/0x260 [ 851.231365][T12141] ? snd_seq_port_use_ptr+0x29/0x260 [ 851.231378][T12141] ? snd_seq_port_use_ptr+0x229/0x260 [ 851.231392][T12141] snd_seq_ioctl_subscribe_port+0x351/0x790 [ 851.231411][T12141] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 851.231426][T12141] ? clientptr+0x17/0x160 [ 851.231437][T12141] ? clientptr+0x17/0x160 [ 851.231447][T12141] ? clientptr+0x17/0x160 [ 851.231462][T12141] snd_seq_oss_midi_open+0x513/0x830 [ 851.231507][T12141] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 851.231529][T12141] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 851.231545][T12141] ? snd_seq_oss_timer_new+0x51/0x230 [ 851.231558][T12141] ? snd_seq_oss_timer_new+0x51/0x230 [ 851.231575][T12141] snd_seq_oss_midi_open_all+0x59/0xc0 [ 851.231593][T12141] snd_seq_oss_open+0x9b2/0xf40 [ 851.231610][T12141] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 851.231628][T12141] ? __lock_acquire+0x747/0x2de0 [ 851.231656][T12141] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 851.231684][T12141] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 851.231698][T12141] ? __pfx_free_devinfo+0x10/0x10 [ 851.231711][T12141] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 851.231723][T12141] ? mutex_lock_nested+0x152/0x1d0 [ 851.231737][T12141] ? odev_open+0x5c/0xa0 [ 851.231751][T12141] odev_open+0x67/0xa0 [ 851.231763][T12141] chrdev_open+0x4dc/0x600 [ 851.231788][T12141] ? __pfx_chrdev_open+0x10/0x10 [ 851.231805][T12141] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 851.231825][T12141] ? __pfx_chrdev_open+0x10/0x10 [ 851.231840][T12141] do_dentry_open+0x849/0x1420 [ 851.231860][T12141] vfs_open+0x3b/0x350 [ 851.231868][T12141] ? path_openat+0x142d/0x1d60 [ 851.231884][T12141] path_openat+0x1448/0x1d60 [ 851.231909][T12141] do_file_open+0x23e/0x4a0 [ 851.231925][T12141] ? __pfx_do_file_open+0x10/0x10 [ 851.231953][T12141] ? alloc_fd+0x654/0x6d0 [ 851.231970][T12141] do_sys_openat2+0x115/0x200 [ 851.231980][T12141] ? __se_sys_futex+0x3a8/0x450 [ 851.231992][T12141] ? __pfx_do_sys_openat2+0x10/0x10 [ 851.232006][T12141] ? rcu_is_watching+0x16/0xb0 [ 851.232024][T12141] __x64_sys_openat+0x138/0x170 [ 851.232038][T12141] do_syscall_64+0x166/0x520 [ 851.232049][T12141] ? trace_irq_disable+0x3b/0x140 [ 851.232062][T12141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.232074][T12141] ? clear_bhb_loop+0x70/0xc0 [ 851.232087][T12141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.232097][T12141] RIP: 0033:0x7fa9a9f1e159 [ 851.232109][T12141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.232118][T12141] RSP: 002b:00007fa9a8176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 851.232131][T12141] RAX: ffffffffffffffda RBX: 00007fa9aa1a5fa0 RCX: 00007fa9a9f1e159 [ 851.232139][T12141] RDX: 0000000000080200 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 851.232147][T12141] RBP: 00007fa9a9fb506b R08: 0000000000000000 R09: 0000000000000000 [ 851.232154][T12141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.232161][T12141] R13: 00007fa9aa1a6038 R14: 00007fa9aa1a5fa0 R15: 00007ffc9ceeed68 [ 851.232178][T12141] [ 852.627845][T12155] bridge0: port 3(syz_tun) entered blocking state [ 852.628034][T12155] bridge0: port 3(syz_tun) entered disabled state [ 852.628233][T12155] syz_tun: entered allmulticast mode [ 852.632722][T12155] syz_tun: entered promiscuous mode [ 852.636210][T12155] bridge0: port 3(syz_tun) entered blocking state [ 852.661996][T12155] bridge0: port 3(syz_tun) entered forwarding state [ 853.858610][T12183] FAULT_INJECTION: forcing a failure. [ 853.858610][T12183] name failslab, interval 1, probability 0, space 0, times 0 [ 853.858655][T12183] CPU: 1 UID: 0 PID: 12183 Comm: syz.5.1329 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 853.858685][T12183] Tainted: [L]=SOFTLOCKUP [ 853.858693][T12183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 853.858706][T12183] Call Trace: [ 853.858714][T12183] [ 853.858725][T12183] dump_stack_lvl+0xe8/0x150 [ 853.858766][T12183] should_fail_ex+0x46b/0x600 [ 853.858804][T12183] should_failslab+0xa8/0x100 [ 853.858829][T12183] __kmalloc_noprof+0xfb/0x790 [ 853.858859][T12183] ? fanotify_handle_event+0x28fe/0x4090 [ 853.858896][T12183] ? fanotify_handle_event+0x28fe/0x4090 [ 853.858929][T12183] fanotify_handle_event+0x28fe/0x4090 [ 853.858976][T12183] ? __pfx_fanotify_handle_event+0x10/0x10 [ 853.859000][T12183] ? __lock_acquire+0x747/0x2de0 [ 853.859034][T12183] ? lock_acquire+0x115/0x350 [ 853.859071][T12183] ? __pfx_fanotify_handle_event+0x10/0x10 [ 853.859097][T12183] fsnotify+0x15ed/0x1e50 [ 853.859125][T12183] ? lock_acquire+0x115/0x350 [ 853.859167][T12183] ? fsnotify+0x863/0x1e50 [ 853.859195][T12183] ? __pfx_fsnotify+0x10/0x10 [ 853.859238][T12183] __fsnotify_parent+0x50d/0x620 [ 853.859276][T12183] ? __pfx___fsnotify_parent+0x10/0x10 [ 853.859318][T12183] ? __fput+0xcc/0xa80 [ 853.859341][T12183] __fput+0x31e/0xa80 [ 853.859369][T12183] fput_close_sync+0x11f/0x240 [ 853.859390][T12183] ? __pfx_fput_close_sync+0x10/0x10 [ 853.859424][T12183] __x64_sys_close+0x7e/0x110 [ 853.859447][T12183] do_syscall_64+0x166/0x520 [ 853.859471][T12183] ? trace_irq_disable+0x3b/0x140 [ 853.859498][T12183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.859519][T12183] ? clear_bhb_loop+0x70/0xc0 [ 853.859545][T12183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.859565][T12183] RIP: 0033:0x7eff1659e159 [ 853.859584][T12183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.859602][T12183] RSP: 002b:00007eff147f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 853.859625][T12183] RAX: ffffffffffffffda RBX: 00007eff16825fa0 RCX: 00007eff1659e159 [ 853.859641][T12183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 853.859653][T12183] RBP: 00007eff1663506b R08: 0000000000000000 R09: 0000000000000000 [ 853.859667][T12183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 853.859680][T12183] R13: 00007eff16826038 R14: 00007eff16825fa0 R15: 00007ffee69b23c8 [ 853.859713][T12183] [ 855.365174][T12197] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 858.505159][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 858.505190][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 858.670084][T12251] loop0: detected capacity change from 0 to 3904 [ 858.738668][T12246] FAULT_INJECTION: forcing a failure. [ 858.738668][T12246] name failslab, interval 1, probability 0, space 0, times 0 [ 858.738723][T12246] CPU: 1 UID: 0 PID: 12246 Comm: syz.6.1347 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 858.738753][T12246] Tainted: [L]=SOFTLOCKUP [ 858.738760][T12246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 858.738773][T12246] Call Trace: [ 858.738783][T12246] [ 858.738793][T12246] dump_stack_lvl+0xe8/0x150 [ 858.738836][T12246] should_fail_ex+0x46b/0x600 [ 858.738875][T12246] should_failslab+0xa8/0x100 [ 858.738903][T12246] __kmalloc_cache_node_noprof+0xac/0x670 [ 858.738940][T12246] ? alloc_pages_node_noprof+0xe2/0x140 [ 858.738975][T12246] ? blk_mq_init_tags+0x83/0x2d0 [ 858.739005][T12246] ? blk_mq_init_tags+0x83/0x2d0 [ 858.739037][T12246] ? __kmalloc_node_noprof+0x58e/0x7b0 [ 858.739071][T12246] blk_mq_init_tags+0x83/0x2d0 [ 858.739107][T12246] blk_mq_alloc_map_and_rqs+0xbc/0x980 [ 858.739262][T12246] blk_mq_alloc_sched_tags+0x14d/0x380 [ 858.739299][T12246] blk_mq_alloc_sched_res+0x92/0x360 [ 858.739339][T12246] elevator_change+0x122/0x480 [ 858.739363][T12246] ? down_write_trylock+0x1ec/0x280 [ 858.739387][T12246] ? elv_iosched_store+0x498/0x630 [ 858.739415][T12246] elv_iosched_store+0x504/0x630 [ 858.739445][T12246] ? __pfx_elv_iosched_store+0x10/0x10 [ 858.739469][T12246] ? register_lock_class+0x31/0x2e0 [ 858.739521][T12246] queue_attr_store+0x207/0x2b0 [ 858.739556][T12246] ? __pfx_queue_attr_store+0x10/0x10 [ 858.739586][T12246] ? lock_acquire+0x115/0x350 [ 858.739614][T12246] ? sysfs_file_kobj+0x1a/0x230 [ 858.739647][T12246] ? sysfs_file_kobj+0x1a/0x230 [ 858.739669][T12246] ? sysfs_file_kobj+0x1a/0x230 [ 858.739690][T12246] ? sysfs_file_kobj+0x1a/0x230 [ 858.739714][T12246] ? sysfs_file_kobj+0x1e4/0x230 [ 858.739738][T12246] ? sysfs_kf_write+0x166/0x260 [ 858.739766][T12246] ? __pfx_sysfs_kf_write+0x10/0x10 [ 858.739786][T12246] kernfs_fop_write_iter+0x3a5/0x540 [ 858.739809][T12246] vfs_write+0x61e/0xbb0 [ 858.739845][T12246] ? __pfx_vfs_write+0x10/0x10 [ 858.739872][T12246] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 858.739896][T12246] ? mutex_lock_nested+0x152/0x1d0 [ 858.739919][T12246] ? fdget_pos+0x252/0x320 [ 858.739947][T12246] ksys_write+0x156/0x270 [ 858.739975][T12246] ? __pfx_ksys_write+0x10/0x10 [ 858.740014][T12246] do_syscall_64+0x166/0x520 [ 858.740052][T12246] ? trace_irq_disable+0x3b/0x140 [ 858.740074][T12246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.740092][T12246] ? clear_bhb_loop+0x70/0xc0 [ 858.740112][T12246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.740129][T12246] RIP: 0033:0x7f578bf0e159 [ 858.740147][T12246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.740162][T12246] RSP: 002b:00007f578a166028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 858.740183][T12246] RAX: ffffffffffffffda RBX: 00007f578c195fa0 RCX: 00007f578bf0e159 [ 858.740195][T12246] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 858.740206][T12246] RBP: 00007f578bfa506b R08: 0000000000000000 R09: 0000000000000000 [ 858.740216][T12246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.740226][T12246] R13: 00007f578c196038 R14: 00007f578c195fa0 R15: 00007fff0f96b368 [ 858.740255][T12246] [ 858.987820][T12253] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1350'. [ 859.468112][T12251] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 859.468148][T12251] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 859.468381][T12251] loop0: [ 859.595834][T12260] netlink: 'syz.1.1352': attribute type 4 has an invalid length. [ 859.655168][T12262] netlink: 'syz.1.1352': attribute type 4 has an invalid length. [ 859.711215][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1351'. [ 860.112339][T12272] C: renamed from lo (while UP) [ 860.274814][T12272] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 860.510781][ T8158] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 860.760169][ T8158] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 860.771075][ T8158] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.771104][ T8158] usb 6-1: Product: syz [ 860.771117][ T8158] usb 6-1: Manufacturer: syz [ 860.771131][ T8158] usb 6-1: SerialNumber: syz [ 862.013436][ T8158] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 862.013476][ T8158] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 862.865273][T12293] bond2: entered allmulticast mode [ 862.944263][T12295] ip6gretap1: entered promiscuous mode [ 862.998590][T12295] ip6gretap1: entered allmulticast mode [ 863.002934][T12295] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 863.047163][T12296] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 863.047191][T12296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 863.295225][ T8158] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 863.498579][ T8158] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 863.499065][ T8158] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 863.499119][ T8158] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 863.601180][ T8158] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 863.964798][ T8158] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 865.140823][ T8158] usb 6-1: USB disconnect, device number 6 [ 865.219858][T12318] intel_ish_ipc 0000:00:01.0: ISH: Failed to get PCI regions [ 865.219889][T12318] intel_ish_ipc 0000:00:01.0: probe with driver intel_ish_ipc failed with error -22 [ 868.217663][T12345] FAULT_INJECTION: forcing a failure. [ 868.217663][T12345] name failslab, interval 1, probability 0, space 0, times 0 [ 868.217704][T12345] CPU: 0 UID: 0 PID: 12345 Comm: syz.5.1375 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 868.217735][T12345] Tainted: [L]=SOFTLOCKUP [ 868.217743][T12345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 868.217755][T12345] Call Trace: [ 868.217764][T12345] [ 868.217774][T12345] dump_stack_lvl+0xe8/0x150 [ 868.217813][T12345] should_fail_ex+0x46b/0x600 [ 868.217848][T12345] should_failslab+0xa8/0x100 [ 868.217872][T12345] __kmalloc_cache_noprof+0xa1/0x680 [ 868.217901][T12345] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 868.217929][T12345] ? shrinker_alloc+0x59/0xbc0 [ 868.217950][T12345] ? shrinker_alloc+0x59/0xbc0 [ 868.217976][T12345] shrinker_alloc+0x59/0xbc0 [ 868.218000][T12345] ? __rt_spin_lock_init+0x3e/0x50 [ 868.218035][T12345] sget_fc+0xe92/0x1a80 [ 868.218058][T12345] ? __pfx_kernfs_test_super+0x10/0x10 [ 868.218088][T12345] ? __pfx_kernfs_set_super+0x10/0x10 [ 868.218112][T12345] ? __pfx_sget_fc+0x10/0x10 [ 868.218132][T12345] ? __kasan_kmalloc+0x93/0xb0 [ 868.218152][T12345] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 868.218180][T12345] ? kernfs_get_tree+0xc4/0x980 [ 868.218201][T12345] ? kernfs_get_tree+0xc4/0x980 [ 868.218231][T12345] kernfs_get_tree+0x1e9/0x980 [ 868.218254][T12345] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 868.218280][T12345] ? rt_spin_unlock+0x165/0x200 [ 868.218316][T12345] ? __pfx_kernfs_get_tree+0x10/0x10 [ 868.218338][T12345] ? cap_capable+0x123/0x460 [ 868.218367][T12345] ? bpf_lsm_capable+0x9/0x20 [ 868.218397][T12345] vfs_get_tree+0x92/0x2a0 [ 868.218424][T12345] do_new_mount+0x319/0xdc0 [ 868.218444][T12345] ? cap_capable+0x123/0x460 [ 868.218471][T12345] ? __pfx_do_new_mount+0x10/0x10 [ 868.218494][T12345] ? ns_capable+0x89/0xe0 [ 868.218521][T12345] ? path_mount+0x647/0x1050 [ 868.218544][T12345] ? user_path_at+0xd4/0x160 [ 868.218581][T12345] __se_sys_mount+0x31d/0x420 [ 868.218608][T12345] ? __pfx___se_sys_mount+0x10/0x10 [ 868.218637][T12345] ? __x64_sys_mount+0x20/0xc0 [ 868.218660][T12345] do_syscall_64+0x166/0x520 [ 868.218681][T12345] ? trace_irq_disable+0x3b/0x140 [ 868.218706][T12345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.218726][T12345] ? clear_bhb_loop+0x70/0xc0 [ 868.218749][T12345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.218767][T12345] RIP: 0033:0x7eff1659e159 [ 868.218786][T12345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.218803][T12345] RSP: 002b:00007eff147f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 868.218823][T12345] RAX: ffffffffffffffda RBX: 00007eff16825fa0 RCX: 00007eff1659e159 [ 868.218837][T12345] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 868.218851][T12345] RBP: 00007eff1663506b R08: 0000000000000000 R09: 0000000000000000 [ 868.218862][T12345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.218873][T12345] R13: 00007eff16826038 R14: 00007eff16825fa0 R15: 00007ffee69b23c8 [ 868.218903][T12345] [ 872.807513][ T5961] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 872.818635][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 873.009621][ T5961] usb 10-1: Using ep0 maxpacket: 16 [ 873.010394][ T5961] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 873.038350][ T5961] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 873.038379][ T5961] usb 10-1: config 0 has no interface number 0 [ 873.038416][ T5961] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 873.114769][ T5961] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 873.114813][ T5961] usb 10-1: Product: syz [ 873.114830][ T5961] usb 10-1: SerialNumber: syz [ 873.271550][ T5961] usb 10-1: config 0 descriptor?? [ 873.491600][ T5961] cm109 10-1:0.8: invalid payload size 208, expected 4 [ 873.495373][ T5961] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input29 [ 874.015397][ C0] cm109_urb_ctl_callback: 253 callbacks suppressed [ 874.015431][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 874.015751][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 874.016022][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 874.016257][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 874.016502][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 874.016738][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 874.016965][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 874.017193][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 874.017421][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 874.017654][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 874.452967][ T5694] usb 10-1: USB disconnect, device number 4 [ 874.453067][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 874.864562][ T5694] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 875.425795][ T5694] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 875.657940][ T5694] usb 10-1: Using ep0 maxpacket: 16 [ 875.658604][ T5694] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 875.659818][ T5694] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 875.659848][ T5694] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 875.665089][ T5694] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.665117][ T5694] usb 10-1: Product: syz [ 875.665132][ T5694] usb 10-1: Manufacturer: syz [ 875.665146][ T5694] usb 10-1: SerialNumber: syz [ 875.728261][ T5694] usb 10-1: config 0 descriptor?? [ 875.789020][ T5694] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 875.789085][ T5694] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 875.862103][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.862175][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.940441][ T5694] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 876.944173][ T5694] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 880.898638][ T5694] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 881.058230][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 881.250108][ T5694] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 881.250561][ T5694] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 881.250997][ T5694] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 881.251385][ T5694] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 881.251784][ T5694] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 881.378887][ T5694] usb 10-1: USB disconnect, device number 5 [ 884.136522][T12491] FAULT_INJECTION: forcing a failure. [ 884.136522][T12491] name fail_futex, interval 1, probability 0, space 0, times 0 [ 884.136565][T12491] CPU: 1 UID: 0 PID: 12491 Comm: syz.9.1415 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 884.136597][T12491] Tainted: [L]=SOFTLOCKUP [ 884.136604][T12491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 884.136618][T12491] Call Trace: [ 884.136626][T12491] [ 884.136635][T12491] dump_stack_lvl+0xe8/0x150 [ 884.136673][T12491] should_fail_ex+0x46b/0x600 [ 884.136708][T12491] get_futex_key+0x1b4/0x1580 [ 884.136739][T12491] ? __lock_acquire+0x747/0x2de0 [ 884.136771][T12491] ? kasan_save_track+0x3e/0x80 [ 884.136801][T12491] ? __kasan_slab_free+0x5c/0x80 [ 884.136832][T12491] ? kmem_cache_free+0x187/0x6d0 [ 884.136861][T12491] ? __pfx_get_futex_key+0x10/0x10 [ 884.136900][T12491] futex_wake+0x119/0x600 [ 884.136924][T12491] ? __pfx_futex_wake+0x10/0x10 [ 884.136966][T12491] do_futex+0x458/0x4e0 [ 884.136990][T12491] ? __pfx_do_futex+0x10/0x10 [ 884.137008][T12491] ? kmem_cache_free+0x187/0x6d0 [ 884.137039][T12491] ? do_sys_openat2+0x14e/0x200 [ 884.137066][T12491] __se_sys_futex+0x3a8/0x450 [ 884.137093][T12491] ? __pfx___se_sys_futex+0x10/0x10 [ 884.137113][T12491] ? rcu_is_watching+0x16/0xb0 [ 884.137150][T12491] ? __x64_sys_futex+0x21/0xf0 [ 884.137174][T12491] do_syscall_64+0x166/0x520 [ 884.137199][T12491] ? trace_irq_disable+0x3b/0x140 [ 884.137226][T12491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.137248][T12491] ? clear_bhb_loop+0x70/0xc0 [ 884.137274][T12491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.137296][T12491] RIP: 0033:0x7fa9a9f1e159 [ 884.137316][T12491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.137334][T12491] RSP: 002b:00007fa9a81760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 884.137357][T12491] RAX: ffffffffffffffda RBX: 00007fa9aa1a5fa8 RCX: 00007fa9a9f1e159 [ 884.137373][T12491] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa9aa1a5fac [ 884.137387][T12491] RBP: 00007fa9aa1a5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 884.137402][T12491] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 884.137415][T12491] R13: 00007fa9aa1a6038 R14: 00007ffc9ceeec80 R15: 00007ffc9ceeed68 [ 884.137447][T12491] [ 890.860385][T12546] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1429'. [ 891.400175][T12551] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 903.161008][T12623] jffs2: notice: (12623) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 905.209586][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1459'. [ 907.132491][ T5707] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 907.297442][ T5707] usb 6-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=ed.00 [ 907.303772][ T5707] usb 6-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 907.303802][ T5707] usb 6-1: Manufacturer: syz [ 907.644984][ T5707] net1080 6-1:1.0: probe with driver net1080 failed with error -71 [ 907.711265][ T5707] usb 6-1: USB disconnect, device number 7 [ 908.171059][T12672] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 908.212485][T12672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 908.214265][T12672] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 908.223707][T12672] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 908.273617][T12672] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 909.191283][ T1179] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.488620][ T8415] Bluetooth: hci2: command tx timeout [ 912.258148][T12722] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1481'. [ 912.283863][T12722] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1481'. [ 912.565802][ T8415] Bluetooth: hci2: command tx timeout [ 912.636424][ T1179] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.811054][T12722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 914.645796][ T8415] Bluetooth: hci2: command tx timeout [ 915.030693][ T1179] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.324668][ T8415] Bluetooth: hci2: command tx timeout [ 919.454515][ T1179] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.150870][ T1179] bridge_slave_1: left allmulticast mode [ 933.150905][ T1179] bridge_slave_1: left promiscuous mode [ 933.151167][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.331914][ T1179] bridge_slave_0: left allmulticast mode [ 933.331941][ T1179] bridge_slave_0: left promiscuous mode [ 933.332113][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.657467][ T1179] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 935.698369][ T1179] ip6gretap1 (unregistering): left allmulticast mode [ 935.859006][T12890] 9p: Bad value for 'rfdno' [ 936.587793][ T1179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.626203][ T1179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.665209][ T1179] bond0 (unregistering): Released all slaves [ 936.674589][ T1179] bond1 (unregistering): Released all slaves [ 936.692599][ T1179] bond2 (unregistering): Released all slaves [ 936.833539][T12866] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 936.833564][T12866] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 936.858955][T12867] tipc: Started in network mode [ 936.858974][T12867] tipc: Node identity 080211, cluster identity 4711 [ 937.042923][T12867] tipc: Enabled bearer , priority 0 [ 937.138653][T12671] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.138795][T12671] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.138999][T12671] bridge_slave_0: entered allmulticast mode [ 937.171906][T12671] bridge_slave_0: entered promiscuous mode [ 937.180624][ T1179] tipc: Disabling bearer [ 937.210670][ T1179] tipc: Left network mode [ 937.214951][T12671] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.215078][T12671] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.215278][T12671] bridge_slave_1: entered allmulticast mode [ 937.224012][T12671] bridge_slave_1: entered promiscuous mode [ 937.289979][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.290035][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.420286][T12908] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1526'. [ 937.420325][T12908] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1526'. [ 937.605117][T12908] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1526'. [ 937.605145][T12908] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1526'. [ 938.426199][T12671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.659263][T12671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.705766][ T5726] tipc: Node number set to 134353152 [ 939.155257][T12671] team0: Port device team_slave_0 added [ 939.168509][T12671] team0: Port device team_slave_1 added [ 943.869090][T12671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.869109][T12671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.869133][T12671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.201324][T12671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.201344][T12671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.201371][T12671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.391108][ T5248] 8021q: adding VLAN 0 to HW filter on device eth21 [ 944.525489][T12671] hsr_slave_0: entered promiscuous mode [ 944.540493][T12671] hsr_slave_1: entered promiscuous mode [ 944.541624][T12671] debugfs: 'hsr0' already exists in 'hsr' [ 944.541650][T12671] Cannot create hsr debugfs directory [ 946.407755][T12975] fuse: Bad value for 'fd' [ 946.595737][ T5707] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 946.726870][T12979] FAULT_INJECTION: forcing a failure. [ 946.726870][T12979] name failslab, interval 1, probability 0, space 0, times 0 [ 946.726918][T12979] CPU: 1 UID: 0 PID: 12979 Comm: syz.6.1538 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 946.726948][T12979] Tainted: [L]=SOFTLOCKUP [ 946.726956][T12979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 946.726970][T12979] Call Trace: [ 946.726979][T12979] [ 946.726989][T12979] dump_stack_lvl+0xe8/0x150 [ 946.727036][T12979] should_fail_ex+0x46b/0x600 [ 946.727079][T12979] should_failslab+0xa8/0x100 [ 946.727107][T12979] __kmalloc_cache_noprof+0xa1/0x680 [ 946.727140][T12979] ? landlock_init_hierarchy_log+0x9e/0x5f0 [ 946.727172][T12979] ? landlock_init_hierarchy_log+0x9e/0x5f0 [ 946.727208][T12979] landlock_init_hierarchy_log+0x9e/0x5f0 [ 946.727240][T12979] landlock_merge_ruleset+0x7e6/0xbe0 [ 946.727268][T12979] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 946.727304][T12979] __se_sys_landlock_restrict_self+0x2c1/0xd50 [ 946.727348][T12979] do_syscall_64+0x166/0x520 [ 946.727372][T12979] ? trace_irq_disable+0x3b/0x140 [ 946.727404][T12979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.727426][T12979] ? clear_bhb_loop+0x70/0xc0 [ 946.727452][T12979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.727472][T12979] RIP: 0033:0x7f578bf0e159 [ 946.727494][T12979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.727513][T12979] RSP: 002b:00007f578a124028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 946.727537][T12979] RAX: ffffffffffffffda RBX: 00007f578c196180 RCX: 00007f578bf0e159 [ 946.727553][T12979] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 946.727566][T12979] RBP: 00007f578bfa506b R08: 0000000000000000 R09: 0000000000000000 [ 946.727579][T12979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.727591][T12979] R13: 00007f578c196218 R14: 00007f578c196180 R15: 00007fff0f96b368 [ 946.727625][T12979] [ 947.216055][ T5707] usb 6-1: Using ep0 maxpacket: 16 [ 947.216903][ T5707] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 947.218413][ T5707] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 947.218442][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 947.221378][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.221403][ T5707] usb 6-1: Product: syz [ 947.221418][ T5707] usb 6-1: Manufacturer: syz [ 947.221432][ T5707] usb 6-1: SerialNumber: syz [ 947.265850][ T5707] usb 6-1: config 0 descriptor?? [ 947.279712][ T5707] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 947.279745][ T5707] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 947.822307][T12989] jffs2: notice: (12989) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 947.970463][ T5707] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 947.970961][ T5707] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 948.428428][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 948.428464][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 948.576441][ T5707] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 948.577130][ T5707] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 948.577612][ T5707] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 948.578240][ T5707] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 948.578713][ T5707] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 948.579537][ T5707] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 948.721596][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 948.721617][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 948.786778][ T5707] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 948.786795][ T5707] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 948.786804][ T5707] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 948.786811][ T5707] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 948.786819][ T5707] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 952.094070][ T5707] usb 6-1: USB disconnect, device number 8 [ 952.150376][T13002] mmap: syz.6.1545 (13002) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 952.654239][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 953.681288][ T1179] veth1_macvtap: left promiscuous mode [ 953.681408][ T1179] veth0_macvtap: left promiscuous mode [ 953.681666][ T1179] veth1_vlan: left promiscuous mode [ 961.519614][ T1179] team0 (unregistering): Port device team_slave_1 removed [ 961.681786][ T1179] team0 (unregistering): Port device team_slave_0 removed [ 963.340048][T13038] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 963.348178][ T5248] 8021q: adding VLAN 0 to HW filter on device eth22 [ 964.000486][T13083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1561'. [ 970.344554][T12672] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 970.399943][T12672] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 970.413165][T12672] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 970.446306][T12672] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 970.464795][T12672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 972.904622][ T8415] Bluetooth: hci4: command tx timeout [ 976.163783][ T8415] Bluetooth: hci4: command tx timeout [ 978.378060][T12672] Bluetooth: hci4: command tx timeout [ 978.522006][T13165] FAULT_INJECTION: forcing a failure. [ 978.522006][T13165] name failslab, interval 1, probability 0, space 0, times 0 [ 978.522052][T13165] CPU: 1 UID: 0 PID: 13165 Comm: syz.5.1581 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 978.522083][T13165] Tainted: [L]=SOFTLOCKUP [ 978.522090][T13165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 978.522104][T13165] Call Trace: [ 978.522113][T13165] [ 978.522123][T13165] dump_stack_lvl+0xe8/0x150 [ 978.522163][T13165] should_fail_ex+0x46b/0x600 [ 978.522201][T13165] should_failslab+0xa8/0x100 [ 978.522227][T13165] __kmalloc_cache_noprof+0xa1/0x680 [ 978.522260][T13165] ? sctp_add_bind_addr+0x8c/0x370 [ 978.522431][T13165] ? sctp_add_bind_addr+0x8c/0x370 [ 978.522457][T13165] ? __pfx_sctp_get_port_local+0x10/0x10 [ 978.522492][T13165] sctp_add_bind_addr+0x8c/0x370 [ 978.522517][T13165] ? sctp_auto_asconf_init+0x180/0x210 [ 978.522552][T13165] sctp_do_bind+0x597/0x9a0 [ 978.522592][T13165] sctp_connect_new_asoc+0x270/0x6b0 [ 978.522626][T13165] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 978.522661][T13165] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 978.522690][T13165] ? lockdep_hardirqs_on+0x7b/0x110 [ 978.522722][T13165] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 978.522748][T13165] ? security_sctp_bind_connect+0x7e/0x2c0 [ 978.522783][T13165] sctp_sendmsg+0x1506/0x2a50 [ 978.522830][T13165] ? __pfx_sctp_sendmsg+0x10/0x10 [ 978.522858][T13165] ? smack_socket_sendmsg+0x4b8/0x5a0 [ 978.522894][T13165] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 978.522943][T13165] ? sock_rps_record_flow+0x19/0x350 [ 978.523038][T13165] ? inet_sendmsg+0x298/0x320 [ 978.523066][T13165] ? __pfx_inet_sendmsg+0x10/0x10 [ 978.523092][T13165] sock_sendmsg_nosec+0x10e/0x180 [ 978.523127][T13165] __sys_sendto+0x41e/0x5d0 [ 978.523155][T13165] ? __pfx___sys_sendto+0x10/0x10 [ 978.523204][T13165] ? rcu_is_watching+0x16/0xb0 [ 978.523243][T13165] __x64_sys_sendto+0xde/0x100 [ 978.523269][T13165] do_syscall_64+0x166/0x520 [ 978.523291][T13165] ? trace_irq_disable+0x3b/0x140 [ 978.523319][T13165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.523340][T13165] ? clear_bhb_loop+0x70/0xc0 [ 978.523365][T13165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.523386][T13165] RIP: 0033:0x7eff1659e159 [ 978.523406][T13165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.523424][T13165] RSP: 002b:00007eff147f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 978.523448][T13165] RAX: ffffffffffffffda RBX: 00007eff16825fa0 RCX: 00007eff1659e159 [ 978.523464][T13165] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003 [ 978.523478][T13165] RBP: 00007eff1663506b R08: 0000200000000000 R09: 000000000000001c [ 978.523492][T13165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 978.523505][T13165] R13: 00007eff16826038 R14: 00007eff16825fa0 R15: 00007ffee69b23c8 [ 978.523539][T13165] [ 978.670456][ T5248] 8021q: adding VLAN 0 to HW filter on device eth23 [ 980.804850][ T8415] Bluetooth: hci4: command tx timeout [ 986.793298][ T5248] 8021q: adding VLAN 0 to HW filter on device eth24 [ 989.705422][ T1179] IPVS: stop unused estimator thread 0... [ 993.849605][T13270] tmpfs: Too small a size for current use [ 998.888366][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.888441][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.266753][T13123] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.268657][T13123] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.270405][T13123] bridge_slave_0: entered allmulticast mode [ 999.279479][T13123] bridge_slave_0: entered promiscuous mode [ 999.292724][T13123] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.294473][T13123] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.294691][T13123] bridge_slave_1: entered allmulticast mode [ 999.304471][T13123] bridge_slave_1: entered promiscuous mode [ 999.531932][T13123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.579060][T13123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.194770][T13318] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1606'. [ 1001.194849][T13318] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1606'. [ 1001.773659][T13123] team0: Port device team_slave_0 added [ 1002.068965][T13123] team0: Port device team_slave_1 added [ 1002.115079][T13123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.115097][T13123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.115124][T13123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.118306][T13123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.118326][T13123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.118352][T13123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.202778][T13123] hsr_slave_0: entered promiscuous mode [ 1002.204082][T13123] hsr_slave_1: entered promiscuous mode [ 1002.204963][T13123] debugfs: 'hsr0' already exists in 'hsr' [ 1002.204987][T13123] Cannot create hsr debugfs directory [ 1003.055684][ T38] audit: type=1800 audit(1791129501.954:199): pid=13334 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1607" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1006.626004][ T3405] bridge_slave_1: left allmulticast mode [ 1006.626044][ T3405] bridge_slave_1: left promiscuous mode [ 1006.626319][ T3405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.043520][ T3405] bridge_slave_0: left allmulticast mode [ 1007.043560][ T3405] bridge_slave_0: left promiscuous mode [ 1007.043846][ T3405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.989874][ T3405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.059440][ T3405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.098209][ T3405] bond0 (unregistering): Released all slaves [ 1017.140752][ T3405] hsr_slave_0: left promiscuous mode [ 1017.156886][ T3405] hsr_slave_1: left promiscuous mode [ 1017.158047][ T3405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.246688][ T3405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.216409][T13442] /dev/nbd6: Can't lookup blockdev [ 1022.634216][T13451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.582596][ T3405] team0 (unregistering): Port device team_slave_1 removed [ 1026.693404][ T3405] team0 (unregistering): Port device team_slave_0 removed [ 1032.539804][T13513] : renamed from bond_slave_0 (while UP) [ 1032.693524][T12672] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1032.752071][T12672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1032.767409][T12672] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1032.780312][T12672] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1032.781062][T12672] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1035.140212][T12672] Bluetooth: hci2: command tx timeout [ 1037.175508][T13532] ------------[ cut here ]------------ [ 1037.175527][T13532] failed to allocate ring buffer on CPU 1 [ 1037.175546][T13532] WARNING: kernel/trace/ring_buffer.c:8110 at trace_rb_cpu_prepare+0x330/0x3c0, CPU#1: syz.5.1637/13532 [ 1037.202681][T13532] Modules linked in: [ 1037.206688][T13532] CPU: 1 UID: 0 PID: 13532 Comm: syz.5.1637 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1037.218240][T13532] Tainted: [L]=SOFTLOCKUP [ 1037.222589][T13532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1037.232766][T13532] RIP: 0010:trace_rb_cpu_prepare+0x332/0x3c0 [ 1037.238838][T13532] Code: 08 f0 48 0f ab 03 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7d 3e 92 09 cc e8 87 2c fc ff 48 8d 3d e0 2f eb 0d 89 ee <67> 48 0f b9 3a b8 f4 ff ff ff eb d2 e8 6d 2c fc ff e9 ef fe ff ff [ 1037.258562][T13532] RSP: 0018:ffffc9000631f7d0 EFLAGS: 00010283 [ 1037.264682][T13532] RAX: ffffffff81caaba9 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1037.272776][T13532] RDX: ffffc90016004000 RSI: 0000000000000001 RDI: ffffffff8fb5db90 [ 1037.280865][T13532] RBP: 0000000000000001 R08: ffffffff8fb22c7f R09: 1ffffffff1f6458f [ 1037.288954][T13532] R10: dffffc0000000000 R11: fffffbfff1f64590 R12: 0000000000000000 [ 1037.297024][T13532] R13: ffff888035b2f008 R14: ffff88806316e0a0 R15: 0000000000000000 [ 1037.305067][T13532] FS: 00007eff147f66c0(0000) GS:ffff888125cc2000(0000) knlGS:0000000000000000 [ 1037.314099][T13532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1037.320775][T13532] CR2: 00007fbd84da3000 CR3: 0000000034c26000 CR4: 00000000003526f0 [ 1037.328830][T13532] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1037.336898][T13532] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1037.344916][T13532] Call Trace: [ 1037.348280][T13532] [ 1037.351249][T13532] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 1037.357074][T13532] cpuhp_invoke_callback+0x498/0x810 [ 1037.362423][T13532] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 1037.368277][T13532] cpuhp_issue_call+0x3f0/0x750 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1037.373187][T13532] ? mutex_lock_nested+0x152/0x1d0 [ 1037.378398][T13532] ? __cpuhp_state_add_instance_cpuslocked+0x126/0x560 [ 1037.385314][T13532] __cpuhp_state_add_instance_cpuslocked+0x225/0x560 [ 1037.392123][T13532] __cpuhp_state_add_instance+0x25/0x40 [ 1037.397765][T13532] alloc_buffer+0x188f/0x1d70 [ 1037.402537][T13532] __ring_buffer_alloc+0x2c/0x40 [ 1037.407591][T13532] allocate_trace_buffer+0x1d2/0x950 [ 1037.412927][T13532] ? __kmalloc_node_track_caller_noprof+0x58c/0x7b0 [ 1037.419627][T13532] ? trace_array_create_systems+0x75/0xe60 [ 1037.425484][T13532] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 1037.431390][T13532] ? __raw_spin_lock_init+0x45/0x100 [ 1037.436769][T13532] trace_array_create_systems+0x590/0xe60 [ 1037.442543][T13532] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1037.448461][T13532] ? mutex_lock_nested+0x152/0x1d0 [ 1037.453634][T13532] instance_mkdir+0xd5/0x140 [ 1037.458330][T13532] tracefs_syscall_mkdir+0x11a/0x190 [ 1037.463724][T13532] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 1037.469629][T13532] ? generic_permission+0x2bf/0x670 [ 1037.474887][T13532] ? __pfx_tracefs_permission+0x10/0x10 [ 1037.480557][T13532] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 1037.485674][T13532] vfs_mkdir+0x408/0x620 [ 1037.489966][T13532] filename_mkdirat+0x289/0x520 [ 1037.494889][T13532] ? __pfx_filename_mkdirat+0x10/0x10 [ 1037.500373][T13532] ? do_getname+0x151/0x250 [ 1037.504920][T13532] __se_sys_mkdirat+0x35/0x150 [ 1037.509782][T13532] do_syscall_64+0x166/0x520 [ 1037.514410][T13532] ? trace_irq_disable+0x3b/0x140 [ 1037.519514][T13532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.525665][T13532] ? clear_bhb_loop+0x70/0xc0 [ 1037.530386][T13532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.536382][T13532] RIP: 0033:0x7eff1659e159 [ 1037.540835][T13532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.560564][T13532] RSP: 002b:00007eff147f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1037.569063][T13532] RAX: ffffffffffffffda RBX: 00007eff16825fa0 RCX: 00007eff1659e159 [ 1037.577155][T13532] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1037.585151][T13532] RBP: 00007eff1663506b R08: 0000000000000000 R09: 0000000000000000 [ 1037.593211][T13532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.601275][T13532] R13: 00007eff16826038 R14: 00007eff16825fa0 R15: 00007ffee69b23c8 [ 1037.609352][T13532] [ 1037.612415][T13532] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1037.619808][T13532] CPU: 1 UID: 0 PID: 13532 Comm: syz.5.1637 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1037.631295][T13532] Tainted: [L]=SOFTLOCKUP [ 1037.635631][T13532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1037.645801][T13532] Call Trace: [ 1037.649113][T13532] [ 1037.652070][T13532] vpanic+0x56d/0xa60 [ 1037.656084][T13532] ? __pfx__printk+0x10/0x10 [ 1037.660716][T13532] ? __pfx_vpanic+0x10/0x10 [ 1037.665286][T13532] ? is_bpf_text_address+0x292/0x2b0 [ 1037.670657][T13532] ? is_bpf_text_address+0x26/0x2b0 [ 1037.675915][T13532] panic+0xc5/0xd0 [ 1037.679670][T13532] ? __pfx_panic+0x10/0x10 [ 1037.684145][T13532] __warn+0x315/0x4c0 [ 1037.688173][T13532] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 1037.693597][T13532] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 1037.699018][T13532] __report_bug+0x276/0x570 [ 1037.703656][T13532] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 1037.709068][T13532] ? __pfx___report_bug+0x10/0x10 [ 1037.714138][T13532] ? rb_allocate_cpu_buffer+0x5cf/0x3070 [ 1037.719828][T13532] report_bug_entry+0x19b/0x290 [ 1037.724725][T13532] ? trace_rb_cpu_prepare+0x332/0x3c0 [ 1037.730143][T13532] ? trace_rb_cpu_prepare+0x337/0x3c0 [ 1037.735557][T13532] handle_bug+0xce/0x200 [ 1037.739938][T13532] exc_invalid_op+0x1a/0x50 [ 1037.744476][T13532] asm_exc_invalid_op+0x1a/0x20 [ 1037.749355][T13532] RIP: 0010:trace_rb_cpu_prepare+0x332/0x3c0 [ 1037.755375][T13532] Code: 08 f0 48 0f ab 03 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7d 3e 92 09 cc e8 87 2c fc ff 48 8d 3d e0 2f eb 0d 89 ee <67> 48 0f b9 3a b8 f4 ff ff ff eb d2 e8 6d 2c fc ff e9 ef fe ff ff [ 1037.775006][T13532] RSP: 0018:ffffc9000631f7d0 EFLAGS: 00010283 [ 1037.781106][T13532] RAX: ffffffff81caaba9 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1037.789100][T13532] RDX: ffffc90016004000 RSI: 0000000000000001 RDI: ffffffff8fb5db90 [ 1037.797105][T13532] RBP: 0000000000000001 R08: ffffffff8fb22c7f R09: 1ffffffff1f6458f [ 1037.805102][T13532] R10: dffffc0000000000 R11: fffffbfff1f64590 R12: 0000000000000000 [ 1037.813150][T13532] R13: ffff888035b2f008 R14: ffff88806316e0a0 R15: 0000000000000000 [ 1037.821164][T13532] ? trace_rb_cpu_prepare+0x329/0x3c0 [ 1037.826593][T13532] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 1037.832360][T13532] cpuhp_invoke_callback+0x498/0x810 [ 1037.837689][T13532] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 1037.843462][T13532] cpuhp_issue_call+0x3f0/0x750 [ 1037.848369][T13532] ? mutex_lock_nested+0x152/0x1d0 [ 1037.853513][T13532] ? __cpuhp_state_add_instance_cpuslocked+0x126/0x560 [ 1037.860394][T13532] __cpuhp_state_add_instance_cpuslocked+0x225/0x560 [ 1037.867104][T13532] __cpuhp_state_add_instance+0x25/0x40 [ 1037.872691][T13532] alloc_buffer+0x188f/0x1d70 [ 1037.877444][T13532] __ring_buffer_alloc+0x2c/0x40 [ 1037.882524][T13532] allocate_trace_buffer+0x1d2/0x950 [ 1037.887863][T13532] ? __kmalloc_node_track_caller_noprof+0x58c/0x7b0 [ 1037.894588][T13532] ? trace_array_create_systems+0x75/0xe60 [ 1037.900440][T13532] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 1037.906279][T13532] ? __raw_spin_lock_init+0x45/0x100 [ 1037.911614][T13532] trace_array_create_systems+0x590/0xe60 [ 1037.917375][T13532] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1037.923210][T13532] ? mutex_lock_nested+0x152/0x1d0 [ 1037.928360][T13532] instance_mkdir+0xd5/0x140 [ 1037.932973][T13532] tracefs_syscall_mkdir+0x11a/0x190 [ 1037.938279][T13532] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 1037.944130][T13532] ? generic_permission+0x2bf/0x670 [ 1037.949363][T13532] ? __pfx_tracefs_permission+0x10/0x10 [ 1037.954973][T13532] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 1037.960029][T13532] vfs_mkdir+0x408/0x620 [ 1037.964321][T13532] filename_mkdirat+0x289/0x520 [ 1037.969225][T13532] ? __pfx_filename_mkdirat+0x10/0x10 [ 1037.974631][T13532] ? do_getname+0x151/0x250 [ 1037.979136][T13532] __se_sys_mkdirat+0x35/0x150 [ 1037.983907][T13532] do_syscall_64+0x166/0x520 [ 1037.988497][T13532] ? trace_irq_disable+0x3b/0x140 [ 1037.993521][T13532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.999584][T13532] ? clear_bhb_loop+0x70/0xc0 [ 1038.004259][T13532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.010150][T13532] RIP: 0033:0x7eff1659e159 [ 1038.014565][T13532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.034179][T13532] RSP: 002b:00007eff147f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1038.042602][T13532] RAX: ffffffffffffffda RBX: 00007eff16825fa0 RCX: 00007eff1659e159 [ 1038.050572][T13532] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1038.058545][T13532] RBP: 00007eff1663506b R08: 0000000000000000 R09: 0000000000000000 [ 1038.066515][T13532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.074481][T13532] R13: 00007eff16826038 R14: 00007eff16825fa0 R15: 00007ffee69b23c8 [ 1038.082469][T13532] [ 1038.085824][T13532] Kernel Offset: disabled [ 1038.090184][T13532] Rebooting in 86400 seconds..