last executing test programs: 21m25.319261574s ago: executing program 32 (id=709): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = fcntl$dupfd(r0, 0xc0a, r0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002180)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) r4 = socket(0x10, 0x2, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r5, r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x116885, &(0x7f0000002280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}, {@debug={'debug', 0x3d, 0x8ea}}, {@cache_readahead}, {@noextend}, {@cache_mmap}, {@noxattr}, {@msize={'msize', 0x3d, 0x4}}, {@cache_none}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@subj_type={'subj_type', 0x3d, '@\\+]}'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fsname={'fsname', 0x3d, '+\'\x86+)#!.-^s.}}'}}, {@smackfshat={'smackfshat', 0x3d, '+'}}, {@appraise}, {@uid_eq={'uid', 0x3d, r3}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, r5}}]}}) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000002600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002400)={0x1b8, 0x17, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x8c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x118, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe10}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) 20m45.446373767s ago: executing program 33 (id=812): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f8ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1856fb0a1d1ea7045300000065a5b9b4416ac48600000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x7, 0x9}}, './file0\x00'}) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x628, 0xc88d, 0x43, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) r6 = socket$phonet(0x23, 0x2, 0x1) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(r6, 0x89ef, &(0x7f0000000100)=0x5) 20m4.713719889s ago: executing program 34 (id=872): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getegid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@getpolicy={0x58, 0x15, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x6e6bba}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000003c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000000, &(0x7f00000005c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x7}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xe3}}], [{@audit}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_RESIZE_FS(r7, 0x4008f510, &(0x7f0000000000)=0x400000000) connect(r1, &(0x7f00000000c0)=@x25, 0x80) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x8000) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000580)=@ethtool_regs={0x4, 0x0, 0xc, "f794cb4149aef20900000000"}}) 12m27.364924366s ago: executing program 0 (id=1646): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 12m27.219765334s ago: executing program 0 (id=1648): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080002a107000200060001c003", 0x31}, {&(0x7f0000000300)="0e11c87e6c96ec4bc04cb33ff683a061dc636db2c572b881bb4cc9a1354e2fc000c35da27279cff682dd98", 0x2b}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 12m26.961065302s ago: executing program 0 (id=1650): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f5c4e59f8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="750a19000000000061119c00000000001800000000000000000000dd08c24c972e8c373900000010009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 12m26.884308918s ago: executing program 0 (id=1651): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), 0x0, 0x2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x19, 0x0, 0xfcd8) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 12m26.797542047s ago: executing program 0 (id=1652): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x50) 12m26.691951339s ago: executing program 0 (id=1653): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe0c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x3, 0x5, 0xffffffff, {0xa, 0x4e24, 0x2, @local, 0x7}}}, 0x80, 0x0}, 0x2000f761) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random='\b\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb96f37538e486dd637288a8"], 0xe) 12m11.24961301s ago: executing program 35 (id=1653): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe0c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x3, 0x5, 0xffffffff, {0xa, 0x4e24, 0x2, @local, 0x7}}}, 0x80, 0x0}, 0x2000f761) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random='\b\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb96f37538e486dd637288a8"], 0xe) 2m24.148480596s ago: executing program 7 (id=2575): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20000) 2m23.903814177s ago: executing program 7 (id=2576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 2m23.413875795s ago: executing program 5 (id=2579): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r1}, 0x18) r2 = syz_clone(0xa2940380, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) 2m23.346720456s ago: executing program 6 (id=2580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'veth1_to_bridge\x00'}) 2m22.84782409s ago: executing program 5 (id=2582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2m22.847521102s ago: executing program 7 (id=2583): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x24048814) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x18) close(r2) close(r3) 2m22.6637963s ago: executing program 6 (id=2585): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48) 2m22.601501909s ago: executing program 5 (id=2586): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400ea3f05"], 0x50) 2m22.447724745s ago: executing program 7 (id=2587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 2m22.330285159s ago: executing program 5 (id=2589): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000015c0)="7c533121ba56b5b10006000081001a", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m22.259850394s ago: executing program 6 (id=2590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 2m21.895889248s ago: executing program 8 (id=2591): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2m21.895625927s ago: executing program 5 (id=2592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='fdb_delete\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2m21.895471136s ago: executing program 6 (id=2593): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000070000008908630b4d7d11"], 0x18, 0x5}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m21.744587832s ago: executing program 8 (id=2594): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) 2m21.446016536s ago: executing program 8 (id=2595): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m21.131723449s ago: executing program 7 (id=2596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 2m21.131450447s ago: executing program 5 (id=2597): socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 2m21.111719061s ago: executing program 6 (id=2598): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x4, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100001000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 2m20.91705263s ago: executing program 7 (id=2599): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0xfffffeed) 2m20.800336961s ago: executing program 8 (id=2600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 2m20.474016776s ago: executing program 8 (id=2601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 2m20.392434611s ago: executing program 6 (id=2602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x2c, &(0x7f0000000440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @tail_call, @ldst={0x2, 0x0, 0x0, 0x2, 0xd, 0x6, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], 0x0, 0x2, 0x9a, &(0x7f0000000140)=""/154, 0x40f00, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0x36) 2m20.096934963s ago: executing program 8 (id=2603): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000087f000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0xfffffeed) 2m6.024518805s ago: executing program 36 (id=2597): socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 2m5.410649363s ago: executing program 37 (id=2599): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0xfffffeed) 2m4.517759724s ago: executing program 38 (id=2603): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000087f000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0xfffffeed) 2m4.414996016s ago: executing program 39 (id=2602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x2c, &(0x7f0000000440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @tail_call, @ldst={0x2, 0x0, 0x0, 0x2, 0xd, 0x6, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], 0x0, 0x2, 0x9a, &(0x7f0000000140)=""/154, 0x40f00, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0x36) 1m15.474087597s ago: executing program 4 (id=2618): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, 0x0) (fail_nth: 2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 1m13.951948686s ago: executing program 4 (id=2620): ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20048080) 1m13.569893361s ago: executing program 4 (id=2622): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$vim2m(0x0, 0x20400000000006, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000002a82, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0xe94, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @filter_kind_options=@f_route={{0xa}, {0xe5c, 0x2, [@TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x4, 0x20000000, 0x9, 0x4}, 0xc, 0x10}, [{0xff, 0x9, 0x1, 0x90000000, 0x4}, {0x7, 0x81, 0x7, 0x6, 0xc0ce, 0x8}, {0x10001, 0x7, 0x48, 0x4, 0x6, 0xf}, {0x3cf0, 0xfffffffd, 0x63, 0xee6, 0x10000, 0xfffffffa}, {0x8000, 0xfffffff9, 0x0, 0x9, 0x1, 0x10}, {0x0, 0xff, 0x9, 0x6, 0xa4, 0xfffffff9}, {0x9, 0x2, 0x5, 0x7, 0x8, 0x7ab}, {0x55, 0x0, 0x8, 0x7, 0xfffffffa, 0x81b}, {0x0, 0x8000, 0x6, 0x9, 0x0, 0x7fffffff}, {0x5, 0x7, 0x7a47, 0x81, 0x80000000, 0x7}, {0x8, 0x2, 0x6, 0x4, 0x2, 0x3}, {0x7, 0x8, 0x3, 0xcb, 0x9f, 0xf4}, {0x1000, 0x700000, 0x8001, 0x0, 0x3, 0x7}, {0x81, 0x1, 0x6, 0x0, 0xfffffffb, 0xa409}, {0x0, 0x6, 0x8, 0x8, 0xa, 0x9}, {0x9, 0x8, 0x3, 0xffff, 0x10, 0x4}, {0x7, 0x0, 0x9, 0x8, 0x6, 0x7}, {0x1ff, 0x5, 0x3, 0xffffc8ab, 0xfffff253, 0x6}, {0xb99d, 0x8, 0x400, 0x1000, 0xffffffff, 0x6}, {0x6, 0x35, 0x0, 0x279bf9f7, 0x5, 0xee}, {0x3, 0x8, 0x6, 0x8, 0x6, 0xff}, {0x800, 0x9, 0xe, 0x26, 0x0, 0xb98}, {0x1, 0x1000, 0x8, 0x7, 0x1e0, 0x9}, {0xf93, 0xb, 0xb272, 0x9, 0x5, 0x2}, {0x0, 0x5, 0x10000, 0x8, 0x21, 0x7f}, {0xffffff6b, 0x8, 0xffff, 0x8, 0x0, 0xc80}, {0x7, 0x3, 0x8, 0x688, 0x9, 0x3}, {0x9, 0x5, 0x1, 0xe0, 0x4, 0x3}, {0x10001, 0x5, 0x2, 0x2, 0x6, 0xd4f}, {0x81, 0xa05, 0x8001, 0x7, 0xc, 0x401}, {0x7, 0x6, 0x4, 0x4, 0x2, 0x5}, {0x8, 0x8, 0xff, 0x80, 0x3, 0x401}, {0x4, 0x8, 0x5, 0x5, 0x1, 0xb0c8}, {0x0, 0x7, 0x40, 0x101, 0x1, 0x9}, {0x7, 0x200, 0x81, 0x80000, 0x3, 0xffffffff}, {0x3, 0xfffffff7, 0x6, 0x9, 0x1}, {0x1ff, 0x1000, 0x6, 0x2, 0x4, 0x8}, {0x5, 0x9, 0x2, 0xd, 0xfffffffa, 0xdb}, {0x7, 0x0, 0x2, 0x3, 0x200, 0x7}, {0x7, 0x9, 0xa6ff, 0x3, 0x81, 0x80}, {0x7fffffff, 0x1, 0x3, 0x7, 0x1, 0x1}, {0x9, 0x8, 0x4, 0x1, 0x6, 0x8}, {0x3d9, 0x9, 0x9193, 0x0, 0xec9, 0x83f0}, {0x8f, 0x8, 0x8388, 0x6, 0x5, 0xffff}, {0x98cf, 0x6, 0x5cf9, 0x8, 0x5, 0x3}, {0x1400000, 0x7ff, 0x4, 0xc0b2, 0x8, 0xb}, {0x80000001, 0x80, 0x9, 0x5, 0x9, 0x9}, {0x2778, 0x7, 0x0, 0x7f, 0x1dcb38ca, 0x1}, {0x6, 0x6, 0x6, 0x4, 0x3, 0x4}, {0x3, 0x0, 0x4, 0x1, 0x5, 0xe713}, {0x5800000, 0x9ac8, 0x0, 0x200, 0x1, 0x2}, {0x800, 0x8, 0x7, 0x6000, 0x6, 0x9}, {0x401, 0x5, 0x4, 0x1, 0x0, 0x9}, {0x2, 0x1fa, 0x7, 0x8, 0x4, 0x2}, {0x5, 0xffff, 0x9, 0x4, 0xc, 0x7fa}, {0x3, 0xfffffffb, 0x81, 0x8, 0xd9, 0x3b3e}, {0x9, 0x2, 0x2, 0x0, 0x2227, 0x7}, {0x7b, 0x7, 0x1, 0x80000001, 0x6cd2, 0x5}, {0x7, 0x40, 0x7, 0xf8, 0x3ff, 0x1}, {0x63, 0xfff, 0xff, 0x3, 0x0, 0x5}, {0x638, 0x0, 0x80000000, 0x80, 0xc, 0x7}, {0xa, 0x3, 0x3, 0x2000000, 0x4, 0x3}, {0x1, 0x8f5b, 0xe, 0x1, 0xfffffff7, 0xffff}, {0x3, 0x4, 0x8001, 0x3ff, 0x2, 0x5}, {0x3, 0xfffff87c, 0x5, 0x0, 0x6, 0x5}, {0x9, 0x200, 0x5, 0x8, 0x0, 0x4}, {0x5, 0x5, 0x3, 0xe3f, 0x6, 0xb5da}, {0x1, 0xff, 0x0, 0x7fffffff, 0x3, 0x8}, {0x2, 0x1a, 0x0, 0x6, 0x1, 0x5}, {0x18, 0x100, 0x3, 0x0, 0x2, 0x5}, {0xfffffffe, 0x4, 0xd97, 0x8, 0x8000, 0xffff}, {0x2, 0x200, 0x3, 0x6, 0xfffffff8, 0x13}, {0x4, 0x8, 0x7ff, 0x19, 0x1ff, 0xffff7fff}, {0x799, 0x0, 0x4, 0x6ae, 0x4, 0x1be9d3db}, {0x3, 0x4, 0x4, 0x8386289, 0x5, 0xd0d4}, {0x7f, 0x0, 0x8, 0x9, 0x9, 0x10}, {0x6, 0xfffffff8, 0xad9, 0x8, 0x33f, 0x2f}, {0x3, 0x80, 0x3, 0xefa, 0x80, 0xb}, {0x0, 0x2, 0xf, 0x80, 0xe, 0x1}, {0x9, 0x9, 0xb, 0x0, 0x3, 0xfffffffc}, {0x5, 0x2, 0x9, 0xf01, 0x10000, 0x4}, {0x3, 0xe, 0x4, 0x81, 0xb, 0x1000000}, {0xfffffff9, 0x100, 0x2, 0x7f, 0x2, 0x2}, {0xf19, 0x2b, 0xd9a, 0x8, 0x6, 0x8}, {0xdb4, 0x0, 0x7, 0xfffff4f6, 0x4, 0x100}, {0x2, 0x5718, 0xf01f, 0x3, 0x8, 0x5}, {0x200, 0x100, 0x0, 0x9, 0x1, 0x10000}, {0x5444, 0x8, 0x5, 0x8000, 0xfffffffb, 0x1}, {0x2, 0x88, 0x3, 0x1, 0x6}, {0x9, 0xea6, 0x7, 0x7fffffff, 0x9, 0x80000000}, {0x4, 0x9, 0x1, 0x4, 0x2, 0x80000000}, {0x985, 0xa, 0x7, 0x80, 0x7, 0x9}, {0x7f, 0x0, 0x5, 0x2, 0x7, 0x2}, {0x1000, 0x6, 0x5, 0x7ff, 0x0, 0x81}, {0x7, 0x4, 0x0, 0x8, 0x9115, 0x2}, {0x80000001, 0x31, 0x84, 0x4, 0xe, 0x5}, {0x0, 0x4, 0x7, 0x3, 0x2, 0xceed}, {0x6, 0x4, 0x81, 0x2, 0xffffb6e6, 0x100}, {0x5, 0x5, 0x2, 0x6, 0xf49a}, {0x9, 0x7, 0x7, 0xfffffffc, 0x7ff, 0x727}, {0x8000, 0x5, 0x4, 0x6, 0x7ff, 0x9}, {0x0, 0x7, 0x10000, 0xff, 0x7c48e465, 0x8}, {0x2, 0x5, 0x3, 0x4, 0x7ff, 0x1}, {0x19, 0x1, 0x200, 0x480000, 0x8, 0x7fff}, {0x9, 0xe, 0x1, 0x6, 0x1, 0x5}, {0x8000, 0x8, 0xa996, 0x6, 0x7}, {0x3, 0x0, 0xfffffe00, 0x2, 0x1, 0x2}, {0xfffffff9, 0x3, 0x0, 0x3, 0x2, 0x6}, {0x6, 0x7fff, 0x7f, 0x85, 0x9, 0x5}, {0xf, 0xcf00, 0x99d76ad, 0x0, 0x5, 0x9}, {0xef8, 0x3, 0xeced, 0x8, 0x8, 0x6}, {0x8, 0x0, 0x400, 0x800, 0x4, 0x3}, {0x4, 0x7, 0xe45c, 0x8, 0x3ff, 0x4}, {0x80, 0x7, 0xffffff92, 0x2, 0x2, 0x950}, {0x5, 0x1140000, 0x8, 0x200, 0xd559, 0x1}, {0x5, 0x0, 0x9, 0xfff, 0x4, 0xaed}, {0x2, 0xb0b, 0x3, 0x7, 0x100, 0xbb}, {0x0, 0xfffffffe, 0x1ff, 0x56a4, 0x17, 0x3b72}, {0x4, 0x4, 0x2, 0x10001, 0xb881, 0x3}, {0x7, 0x7fff, 0xb01d, 0x13, 0x1, 0xfffffff0}, {0xa, 0xff, 0xbef, 0x7, 0x1}, {0x4, 0x6, 0x697c, 0xff, 0x9, 0x83}, {0xfffffffd, 0x1000, 0x8, 0x9, 0x4, 0x3}, {0x10e, 0x7, 0xce, 0x4, 0x14d8c, 0x5}, {0x4, 0x1, 0x7, 0x361, 0x7fffffff, 0x6}, {0x6, 0x7, 0x3, 0x4, 0x0, 0xb}, {0x9, 0x8e87, 0x1, 0xff, 0x4, 0x8}, {0x0, 0xe, 0x7, 0xffff1330, 0x7fffffff, 0x3}], [{0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {}, {0x1}, {}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x2, 0xa8c5556e20160a7e}, {0x3, 0x1}, {0x7, 0x1}, {0x3}, {0x2}, {0x2}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0xd, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x71ebf7bd175809f, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x9d60d204ce2765be}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x5fd78bcfeb4d7e02}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x358ee31b1848ce85, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe94}}, 0x20000040) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbf00620b8000000710100000000000095000000000032da"], 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) close(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(r0, 0x8, 0x1, 0x0) 1m11.204444242s ago: executing program 4 (id=2629): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000001440)={0x0, 0x1, 0xc9, {0xc9, 0xc, "44702d3da7c6e7e5f066906417f6ee22b686f75fc47f6c9afc9239c107382a0730d862d11825dd3acb6a0e0b62094163d3475d9fad5c13843c351cb31b5eed498ea65c2189cb18d1189c0f1dce8a7e2a78b555528f9ae66c457b8183db168a841843f299820c85c1a6825b1a6497dcf2acd4f0dcc13600467228031259634931f821120e0739f356ebc9984bcfd111b45e78e1923b5caa6d597bd2e1cf6768cf7db240ef2cf6ec7c8c71e54756c553b24a7142d3baea122300a4423ed3eb7f744302214b51c0cc"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00055800000095e4db0a5e452779edb1d48b12de6d60439276020a49f86d56904352949430d3dc176e06f79e07000000484c57220e5263545b487f43d5760831c676fede67f0a1864209944d789079b89d6785c60012f32ad19a555f2b35"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}}) r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000001600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x66032, 0xffffffffffffffff, 0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r1, &(0x7f00000002c0)=""/153, 0x99) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40000100009a76178d58b1d9de8d00e6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x48b, 0x0, 0xffffffffffffffff}]}) recvmmsg$unix(r3, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)}}], 0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$inet6(0xa, 0x3, 0x20) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x46) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000001540)=0x2, 0x4) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1m1.71249784s ago: executing program 4 (id=2641): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat, @flat=@handle={0x73682a85, 0x1001}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 57.764891969s ago: executing program 4 (id=2647): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000040)) 42.233607725s ago: executing program 40 (id=2647): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000040)) 18.231390039s ago: executing program 1 (id=2708): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.764744858s ago: executing program 1 (id=2709): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000180)) 14.087602532s ago: executing program 1 (id=2713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) 13.436670695s ago: executing program 1 (id=2714): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat, @flat=@handle={0x73682a85, 0x1001}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 13.343255383s ago: executing program 9 (id=2715): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x4, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x8800) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0) kexec_load(0x5b1, 0x0, 0x0, 0x0) syz_io_uring_setup(0xcaf, 0x0, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = getpgid(0xffffffffffffffff) r8 = syz_clone3(0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000016c0)={'\x00', 0x3, 0x5, 0x9, 0x1, 0x4, 0x0}) syz_clone3(&(0x7f0000001780)={0x150100000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000180), {0x1f}, &(0x7f00000001c0)=""/112, 0x70, &(0x7f0000000480)=""/97, &(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0, 0x0, r6, r7, r8, r9], 0x9, {r3}}, 0x58) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800030000000000000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 11.651057986s ago: executing program 1 (id=2716): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000280)) (async) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x3d) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) creat(&(0x7f0000000580)='./bus\x00', 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 10.919577244s ago: executing program 3 (id=2717): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r1 = eventfd(0x8c69) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r1, 0x11}) syz_usb_connect(0x0, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406000005240000000d2402"], 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000300)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000600)="a1", 0x1, 0x9}) 9.63415096s ago: executing program 2 (id=2719): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) socketpair(0x11, 0x800, 0x7fff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_int(r5, 0x1, 0x8, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000200)=@ethtool_gfeatures={0x3a, 0x5, [{}, {}, {}, {}, {}]}}) syz_usb_connect(0x0, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63000000000009050300000000000009050cf2000002060209050f0000004000000905", @ANYBLOB="02e463"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$tcp_congestion(r7, &(0x7f0000000080)='nv\x00', 0x3) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fedbdf25040000000800040003000000080002"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) write$binfmt_misc(r7, &(0x7f00000003c0)="dea3d1ebca337f0ebef37dfc4b344364ee4c7873e2b2a0ff01f0efa00900000000d0fe9b1865e4303243695f0bb7c1b940c79bced1b33d57e2346668240ed38f0fc3aa7c2f2f1ad9e869621ab826000000000000000000000000000000000000002c6b9b5e28cce8430e98ff2dc747f853060f910e6da3d878ac9a093eed5f5fca4adc68bb612a4dba6654978d9920e1a7c7590ae7e9516dcdc030a555b0bc5048dff733e552136ae227554c537d7870ec5beef7b1967354dbcf4865f0bd", 0xbe) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000700000004000000000000060400000000070000006100"], 0x0, 0x2b, 0x0, 0x1}, 0x28) r10 = dup3(r4, r4, 0x0) r11 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$CEC_TRANSMIT(r10, 0xc0386105, &(0x7f0000000280)={0x9, 0x10, 0x5, 0x0, 0x7bff, 0x9, "61fb97bad5fc2e122996ba56e8634a46", 0x4, 0x7, 0x3, 0x7, 0xf, 0x7, 0x6}) syz_io_uring_submit(r12, r13, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r10, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x9643}}, './file0\x00'}) io_uring_enter(r11, 0x2def, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x168) syz_usb_connect(0x0, 0x2d, &(0x7f00000022c0)=ANY=[@ANYBLOB="12012002b4073608d11281a4a3cc0102030109021b0001345520010904ab0701ff0415000905f7"], &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x55}) 9.163464915s ago: executing program 3 (id=2720): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x25, 0x5, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x800, 0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000016c0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000a0000c8044000b800800090088ae5177080009007e18f94a08000a004ac8000008000a00a823000008000900bc4a0b5408000a0002c7000008000900cb1e381b08000a00520f000014000b8008000a002ac00000080009008213e77644000b8008000900f4f8b35908000d00d781144308000a002990000008000a003cae000008000a00f6e2000008000a001b5a000008000900647bd774080009006263dc1b080002000100000008000100000000000400088034000480050003000300000005000300010000000500030001000000050003000000000005000300"], 0xfc}}, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @bcast, @remote, @null, @netrom]}, &(0x7f0000000080)=0x80) getpid() r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f00000005c0)=""/194, 0xc2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r10, 0x4008af22, &(0x7f00000002c0)) accept4(r9, 0x0, 0x0, 0x800) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="000426bd7000fcdbdf250c00000034000980080002000010000008000100fbffffff08000100ffffff7f08000200d63c0000080001000400000008000100090000002c0101800d0001007564703a73797a3200000000380004001400010002004e23ac1e00010000000000000000200002000a004e227ffffffffc00000000000000000000000000000001000080080003000400000038000400200001000a004e2000000009ff020000000000000000000000000001040000001400020002004e240000000000000000000000004c00028008000300ff0100000800040001040000080003000900000008000200f6000000080001001c0000000800020001000000080001001a0000000800030009000000080001001700000054000280080001001c00000008"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r11, &(0x7f0000000040)="e2", 0x12d8) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x4800) 7.083927632s ago: executing program 9 (id=2721): r0 = socket(0x28, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x18) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) 7.040661597s ago: executing program 2 (id=2722): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000180)) 6.888402379s ago: executing program 3 (id=2723): r0 = socket(0x28, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x18) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) 6.602599522s ago: executing program 9 (id=2724): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'bond0\x00', 0x0}) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) sendmsg$nl_netfilter(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x2a0, 0x0, 0x3, 0x801, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x2}, [@nested={0x8d, 0xb3, 0x0, 0x1, [@generic="b4a616ebc549c3536d79df8a2978a3370dc6cf86c23d9b8264ff454fac9cbc07d4a4f0fe2db862a47e2cc7d31db13f84563739789464b5aecaf47c90ae5da4841c4b0f29bb375e15931d3f8edda488c6416fbf0c10f2047ef8c00c375b2ba3f024df0444d8bf24be82b673e9f11d", @generic="5223af2f2448ba5f41937d246d66fca4362729", @typed={0x8, 0x9e, 0x0, 0x0, @str='#![\x00'}]}, @generic="bf0db746a7a5de75658027fdc9ffd4c225db736a2b14d86778cf0ed535772693dea6684169aa465006663e57c8aabc073d5e2e13111bc9cb7aa2d9d793af8f23be3ce22bebeefa5323ea4c4ab61c2020c8f6273c6725c867ef1e7d9609315c39e14de719fff0fd18bda0322a04e599", @generic="c895336dd2f0d5cb6dce9de450ae7ec141cffa77637165036ebd486367cdbdf99bc68e9bdadbcda48b189a2bcb3924de093d84cc202e4f5dac9828ce46c31d8caa0b30c86482631b726ec05b2a32b1050d373eed2a8e5bb8b473510e03c3b79fa8df3f959bb6267e5448209830e41df03b42ea5fa05a05", @typed={0x8, 0x3f, 0x0, 0x0, @uid=r1}, @typed={0x102, 0x113, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x7b, 0x0, 0x0, @u32=0x6}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4000080}, 0x10001) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000000)={0x1, 0x8d, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "c75c85e8b0e3eb49"}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000108000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18a9ab00000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.448354728s ago: executing program 3 (id=2725): r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat, @flat=@handle={0x73682a85, 0x1001}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 4.259047427s ago: executing program 3 (id=2726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x50}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) (fail_nth: 2) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600"], 0x6c}}, 0x0) 3.979514835s ago: executing program 9 (id=2727): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r2, 0x1, 0x1, 0xa, 0x1ff, 0x1}) 3.592819965s ago: executing program 9 (id=2728): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.339943164s ago: executing program 2 (id=2729): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'bond0\x00', 0x0}) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) sendmsg$nl_netfilter(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x2a0, 0x0, 0x3, 0x801, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x2}, [@nested={0x8d, 0xb3, 0x0, 0x1, [@generic="b4a616ebc549c3536d79df8a2978a3370dc6cf86c23d9b8264ff454fac9cbc07d4a4f0fe2db862a47e2cc7d31db13f84563739789464b5aecaf47c90ae5da4841c4b0f29bb375e15931d3f8edda488c6416fbf0c10f2047ef8c00c375b2ba3f024df0444d8bf24be82b673e9f11d", @generic="5223af2f2448ba5f41937d246d66fca4362729", @typed={0x8, 0x9e, 0x0, 0x0, @str='#![\x00'}]}, @generic="bf0db746a7a5de75658027fdc9ffd4c225db736a2b14d86778cf0ed535772693dea6684169aa465006663e57c8aabc073d5e2e13111bc9cb7aa2d9d793af8f23be3ce22bebeefa5323ea4c4ab61c2020c8f6273c6725c867ef1e7d9609315c39e14de719fff0fd18bda0322a04e599", @generic="c895336dd2f0d5cb6dce9de450ae7ec141cffa77637165036ebd486367cdbdf99bc68e9bdadbcda48b189a2bcb3924de093d84cc202e4f5dac9828ce46c31d8caa0b30c86482631b726ec05b2a32b1050d373eed2a8e5bb8b473510e03c3b79fa8df3f959bb6267e5448209830e41df03b42ea5fa05a05", @typed={0x8, 0x3f, 0x0, 0x0, @uid=r1}, @typed={0x102, 0x113, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x7b, 0x0, 0x0, @u32=0x6}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4000080}, 0x10001) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000000)={0x1, 0x8d, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "c75c85e8b0e3eb49"}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000108000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18a9ab00000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.339526447s ago: executing program 9 (id=2730): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x4, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x8800) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0) kexec_load(0x5b1, 0x0, 0x0, 0x0) syz_io_uring_setup(0xcaf, 0x0, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = getpgid(0xffffffffffffffff) r8 = syz_clone3(0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000016c0)={'\x00', 0x3, 0x5, 0x9, 0x1, 0x4, 0x0}) syz_clone3(&(0x7f0000001780)={0x150100000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000180), {0x1f}, &(0x7f00000001c0)=""/112, 0x70, &(0x7f0000000480)=""/97, &(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0, 0x0, r6, r7, r8, r9], 0x9, {r3}}, 0x58) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800030000000000000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 2.934983463s ago: executing program 2 (id=2731): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r1, 0xf, 0x7}, 0x8) 2.783135154s ago: executing program 1 (id=2732): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socket$pppl2tp(0x18, 0x1, 0x1) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0xfffffffffffffffe, 0x0, {{0xc3c, 0xd8c, 0x1, r1}}}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x40034f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4, @loopback, 0x120}, {0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x401}, r7, 0x10000}}, 0x48) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.60372774s ago: executing program 2 (id=2733): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lo\x00', 0x8}, 0x18) ioctl$TIOCGICOUNT(r0, 0x5409, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000d000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000040)=0xb) syncfs(r0) 2.022219662s ago: executing program 2 (id=2734): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f00000001c0)={0x60, 0x11, 0x2, "23ba"}, 0x0, 0x0}) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @bcast, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="461a288eeb3b41c1b562af1709d7dda5b73e8b03f05727381c1ac92b5d7912b87863996c570478754f60b8a8e03968727003ba5ed01801ad701fab576ef088dcd12157a4394073c097c1a940db57f39c23adae725952678dbf73859f910c1aeae2ce045a44f777b4dc71d90d415bd0145879843b83867cf45232dbd50e7863c0c77a9e47a0bf2868bc526d3a0840235c722ac842cfbc1cc766aa81046efec89fc98af65ae38a3055b1ba7677ac4648c2e09000c60b7787c23009645747c1c9251ad3e79f6c", @ANYBLOB='\x00'/20, @ANYBLOB="1dd48a2cd3f5c52dd0410f22491e40f8cf2e8fa758175cd2d8ea5b30fea4b48a054f9a89f58cdd178f011af02a706a6bd59b7b3b28641977dae3fe3c62594236ed9c447d9c49a024614386a7fb9fcf9ea0dbaf066059deb61e0c80f8fead962f79cb82e42b07fc92ef46c114bcb15c5457127197bcfcfec2a836ee6eb5457d628470d3ed9854b007ab55ead8cb8f87e5c6905b62f926c7", @ANYRES32=0x0, @ANYRES32], 0x50) r2 = memfd_secret(0x80000) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'io'}, {0x2b, 'rdma'}, {0x2d, 'blkio'}, {0x2d, 'cpu'}, {0x2b, 'perf_event'}, {0x2b, 'rlimit'}, {0x2d, 'memory'}, {0x2b, 'cpuacct'}]}, 0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private1}}, &(0x7f00000003c0)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f000000a680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x8, {0x20000000000000c, 0x0, 0x0, {0x4, 0x7, 0x0, 0xf846, 0x10000, 0x9, 0x4, 0x1, 0xffffffc0, 0x2000, 0x2, r4, r5, 0x100003, 0x7fff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r3, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') 0s ago: executing program 3 (id=2735): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat, @flat=@handle={0x73682a85, 0x1001}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) kernel console output (not intermixed with test programs): file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1420.053139][T15458] lowmem_reserve[]: 0 0 0 0 0 [ 1420.053178][T15458] Node 1 Normal free:3897496kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:308kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 1420.053373][T15458] lowmem_reserve[]: 0 0 0 0 0 [ 1420.053482][T15458] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1420.053825][T15458] Node 0 DMA32: 566*4kB (UM) 1672*8kB (UE) 1546*16kB (UE) 269*32kB (UME) 411*64kB (UME) 502*128kB (UME) 419*256kB (UM) 288*512kB (UM) 226*1024kB (UM) 167*2048kB (UM) 61*4096kB (UME) = 1217560kB [ 1420.054254][T15458] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1420.054467][T15458] Node 1 Normal: 156*4kB (UM) 47*8kB (UME) 27*16kB (UE) 186*32kB (UE) 81*64kB (UE) 27*128kB (UME) 8*256kB (UM) 7*512kB (UM) 1*1024kB (M) 0*2048kB 946*4096kB (ME) = 3897496kB [ 1420.054972][T15458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1420.055026][T15458] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1420.055073][T15458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1420.055125][T15458] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1420.055164][T15458] 79729 total pagecache pages [ 1420.055188][T15458] 0 pages in swap cache [ 1420.055210][T15458] Free swap = 124996kB [ 1420.055224][T15458] Total swap = 124996kB [ 1420.055240][T15458] 2097051 pages RAM [ 1420.055248][T15458] 0 pages HighMem/MovableOnly [ 1420.055269][T15458] 421362 pages reserved [ 1420.055292][T15458] 0 pages cma reserved [ 1420.913936][ T3183] team0 (unregistering): Port device team_slave_0 removed [ 1421.104425][T15462] FAULT_INJECTION: forcing a failure. [ 1421.104425][T15462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1421.104456][T15462] CPU: 1 UID: 0 PID: 15462 Comm: syz.6.2411 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1421.104479][T15462] Tainted: [L]=SOFTLOCKUP [ 1421.104486][T15462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1421.104497][T15462] Call Trace: [ 1421.104503][T15462] [ 1421.104511][T15462] dump_stack_lvl+0xe8/0x150 [ 1421.104539][T15462] should_fail_ex+0x46c/0x600 [ 1421.104567][T15462] _copy_to_user+0x31/0xb0 [ 1421.104587][T15462] simple_read_from_buffer+0xe1/0x170 [ 1421.104608][T15462] proc_fail_nth_read+0x1b6/0x220 [ 1421.104641][T15462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1421.104668][T15462] ? rw_verify_area+0x2ac/0x4e0 [ 1421.104690][T15462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1421.104716][T15462] vfs_read+0x206/0xa30 [ 1421.104742][T15462] ? bpf_iter_create+0x121/0x210 [ 1421.104765][T15462] ? __pfx_vfs_read+0x10/0x10 [ 1421.104785][T15462] ? __sys_bpf+0x6e2/0x860 [ 1421.104805][T15462] ? __pfx___sys_bpf+0x10/0x10 [ 1421.104835][T15462] ksys_read+0x14b/0x260 [ 1421.104860][T15462] ? __pfx_ksys_read+0x10/0x10 [ 1421.104891][T15462] do_syscall_64+0xec/0xf80 [ 1421.104910][T15462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.104926][T15462] ? trace_irq_disable+0x37/0x100 [ 1421.104943][T15462] ? clear_bhb_loop+0x60/0xb0 [ 1421.104963][T15462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.104980][T15462] RIP: 0033:0x7f06470fe15c [ 1421.104994][T15462] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1421.105008][T15462] RSP: 002b:00007f064535e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1421.105025][T15462] RAX: ffffffffffffffda RBX: 00007f0647355fa0 RCX: 00007f06470fe15c [ 1421.105037][T15462] RDX: 000000000000000f RSI: 00007f064535e0a0 RDI: 0000000000000005 [ 1421.105048][T15462] RBP: 00007f064535e090 R08: 0000000000000000 R09: 0000000000000000 [ 1421.105058][T15462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1421.105068][T15462] R13: 00007f0647356038 R14: 00007f0647355fa0 R15: 00007ffe79968218 [ 1421.105094][T15462] [ 1422.482577][ T5808] Bluetooth: hci2: command tx timeout [ 1423.577478][ T3183] team0 (unregistering): Port device team_slave_1 removed [ 1423.750098][ T3183] team0 (unregistering): Port device team_slave_0 removed [ 1425.047605][ T3183] team0 (unregistering): Port device team_slave_1 removed [ 1425.206866][ T3183] team0 (unregistering): Port device team_slave_0 removed [ 1426.295653][T10054] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1426.322935][T10054] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1426.330093][T10054] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1426.333565][T10054] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1426.344308][T10054] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1427.215599][T15486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.229396][T15486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.372947][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.378520][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.403528][ T5808] Bluetooth: hci3: command tx timeout [ 1428.538833][T15408] chnl_net:caif_netlink_parms(): no params data found [ 1429.443910][T15408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.444361][T15408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.444559][T15408] bridge_slave_0: entered allmulticast mode [ 1429.449885][T15408] bridge_slave_0: entered promiscuous mode [ 1429.635877][T15408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.636748][T15408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.637009][T15408] bridge_slave_1: entered allmulticast mode [ 1429.644141][T15408] bridge_slave_1: entered promiscuous mode [ 1430.400715][T15509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.401271][T15509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.438498][T15509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.439106][T15509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.466160][ T5808] Bluetooth: hci3: command tx timeout [ 1430.493657][T15408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.628729][T15408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1430.629249][T15417] chnl_net:caif_netlink_parms(): no params data found [ 1430.923494][T15474] chnl_net:caif_netlink_parms(): no params data found [ 1430.958885][T15408] team0: Port device team_slave_0 added [ 1431.073843][T15408] team0: Port device team_slave_1 added [ 1431.418650][T15408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1431.418664][T15408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1431.418687][T15408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1431.550194][T15408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1431.550214][T15408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1431.550247][T15408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.797811][T15417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.798113][T15417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.798286][T15417] bridge_slave_0: entered allmulticast mode [ 1431.800672][T15417] bridge_slave_0: entered promiscuous mode [ 1431.927130][T15417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.927293][T15417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.927514][T15417] bridge_slave_1: entered allmulticast mode [ 1431.929772][T15417] bridge_slave_1: entered promiscuous mode [ 1431.935067][T15474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.935191][T15474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.935342][T15474] bridge_slave_0: entered allmulticast mode [ 1431.942372][T15474] bridge_slave_0: entered promiscuous mode [ 1432.157116][T15474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.157258][T15474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.157430][T15474] bridge_slave_1: entered allmulticast mode [ 1432.159395][T15474] bridge_slave_1: entered promiscuous mode [ 1432.490604][T15417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1432.546216][ T5808] Bluetooth: hci3: command tx timeout [ 1432.593660][T15408] hsr_slave_0: entered promiscuous mode [ 1432.594765][T15408] hsr_slave_1: entered promiscuous mode [ 1432.691550][T15417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1432.788387][T15474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1432.901066][T15474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1432.901360][ T3183] bridge_slave_1: left allmulticast mode [ 1432.901386][ T3183] bridge_slave_1: left promiscuous mode [ 1432.901648][ T3183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.979672][ T3183] bridge_slave_0: left allmulticast mode [ 1432.979706][ T3183] bridge_slave_0: left promiscuous mode [ 1432.979995][ T3183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.040135][ T3183] bridge_slave_1: left allmulticast mode [ 1433.040161][ T3183] bridge_slave_1: left promiscuous mode [ 1433.040395][ T3183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.098521][ T3183] bridge_slave_0: left allmulticast mode [ 1433.098545][ T3183] bridge_slave_0: left promiscuous mode [ 1433.098851][ T3183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.160279][ T3183] bridge_slave_1: left allmulticast mode [ 1433.160304][ T3183] bridge_slave_1: left promiscuous mode [ 1433.160497][ T3183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.227363][ T3183] bridge_slave_0: left allmulticast mode [ 1433.227386][ T3183] bridge_slave_0: left promiscuous mode [ 1433.227592][ T3183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.577306][ T3183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1433.678048][ T3183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1433.763382][ T3183] bond0 (unregistering): Released all slaves [ 1433.977426][ T3183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1434.090016][ T3183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1434.158701][ T3183] bond0 (unregistering): Released all slaves [ 1434.366821][ T3183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1434.448484][ T3183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1434.508501][ T3183] bond0 (unregistering): Released all slaves [ 1434.626193][ T5808] Bluetooth: hci3: command tx timeout [ 1435.036591][T15417] team0: Port device team_slave_0 added [ 1435.368639][T15417] team0: Port device team_slave_1 added [ 1435.440498][T15474] team0: Port device team_slave_0 added [ 1435.555674][T15474] team0: Port device team_slave_1 added [ 1435.728165][T15417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1435.728184][T15417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.728216][T15417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1435.935887][T15417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1435.935909][T15417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.936698][T15417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1435.992134][T15474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1435.992154][T15474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.992189][T15474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1436.236196][ T3183] hsr_slave_0: left promiscuous mode [ 1436.266404][ T3183] hsr_slave_1: left promiscuous mode [ 1436.267452][ T3183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1436.290446][ T3183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1436.396123][ T3183] hsr_slave_0: left promiscuous mode [ 1436.416100][ T3183] hsr_slave_1: left promiscuous mode [ 1436.417548][ T3183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1436.449372][ T3183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1436.546361][ T3183] hsr_slave_0: left promiscuous mode [ 1436.588053][ T3183] hsr_slave_1: left promiscuous mode [ 1436.588824][ T3183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1436.627640][ T3183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.546955][ T3183] team0 (unregistering): Port device team_slave_1 removed [ 1437.719396][ T3183] team0 (unregistering): Port device team_slave_0 removed [ 1438.947605][ T3183] team0 (unregistering): Port device team_slave_1 removed [ 1439.001109][T15564] FAULT_INJECTION: forcing a failure. [ 1439.001109][T15564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1439.001141][T15564] CPU: 0 UID: 0 PID: 15564 Comm: syz.6.2433 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1439.001164][T15564] Tainted: [L]=SOFTLOCKUP [ 1439.001170][T15564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1439.001181][T15564] Call Trace: [ 1439.001188][T15564] [ 1439.001195][T15564] dump_stack_lvl+0xe8/0x150 [ 1439.001250][T15564] should_fail_ex+0x46c/0x600 [ 1439.001291][T15564] _copy_to_user+0x31/0xb0 [ 1439.001319][T15564] simple_read_from_buffer+0xe1/0x170 [ 1439.001349][T15564] proc_fail_nth_read+0x1b6/0x220 [ 1439.001389][T15564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1439.001416][T15564] ? rw_verify_area+0x2ac/0x4e0 [ 1439.001439][T15564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1439.001465][T15564] vfs_read+0x206/0xa30 [ 1439.001494][T15564] ? __pfx_vfs_read+0x10/0x10 [ 1439.001528][T15564] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1439.001548][T15564] ? lockdep_hardirqs_on+0x7b/0x110 [ 1439.001566][T15564] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1439.001584][T15564] ? mutex_lock_nested+0x154/0x1d0 [ 1439.001606][T15564] ? fdget_pos+0x253/0x320 [ 1439.001630][T15564] ksys_read+0x14b/0x260 [ 1439.001655][T15564] ? __pfx_ksys_read+0x10/0x10 [ 1439.001687][T15564] do_syscall_64+0xec/0xf80 [ 1439.001704][T15564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.001720][T15564] ? trace_irq_disable+0x37/0x100 [ 1439.001738][T15564] ? clear_bhb_loop+0x60/0xb0 [ 1439.001760][T15564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.001776][T15564] RIP: 0033:0x7f06470fe15c [ 1439.001790][T15564] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1439.001805][T15564] RSP: 002b:00007f064535e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1439.001823][T15564] RAX: ffffffffffffffda RBX: 00007f0647355fa0 RCX: 00007f06470fe15c [ 1439.001836][T15564] RDX: 000000000000000f RSI: 00007f064535e0a0 RDI: 0000000000000004 [ 1439.001847][T15564] RBP: 00007f064535e090 R08: 0000000000000000 R09: 0000000000000000 [ 1439.001858][T15564] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1439.001868][T15564] R13: 00007f0647356038 R14: 00007f0647355fa0 R15: 00007ffe79968218 [ 1439.001894][T15564] [ 1439.358139][ T3183] team0 (unregistering): Port device team_slave_0 removed [ 1439.814226][T15574] FAULT_INJECTION: forcing a failure. [ 1439.814226][T15574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1439.814257][T15574] CPU: 1 UID: 0 PID: 15574 Comm: syz.6.2437 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1439.814280][T15574] Tainted: [L]=SOFTLOCKUP [ 1439.814286][T15574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1439.814297][T15574] Call Trace: [ 1439.814304][T15574] [ 1439.814312][T15574] dump_stack_lvl+0xe8/0x150 [ 1439.814339][T15574] should_fail_ex+0x46c/0x600 [ 1439.814367][T15574] _copy_from_user+0x2d/0xb0 [ 1439.814385][T15574] core_sys_select+0x60b/0xa20 [ 1439.814460][T15574] ? __pfx_core_sys_select+0x10/0x10 [ 1439.814504][T15574] ? __pfx_set_user_sigmask+0x10/0x10 [ 1439.814522][T15574] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1439.814548][T15574] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1439.814578][T15574] __se_sys_pselect6+0x27a/0x300 [ 1439.814609][T15574] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1439.814635][T15574] ? __pfx_ksys_write+0x10/0x10 [ 1439.814664][T15574] ? __x64_sys_pselect6+0x21/0xf0 [ 1439.814692][T15574] do_syscall_64+0xec/0xf80 [ 1439.814710][T15574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.814726][T15574] ? trace_irq_disable+0x37/0x100 [ 1439.814744][T15574] ? clear_bhb_loop+0x60/0xb0 [ 1439.814764][T15574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.814781][T15574] RIP: 0033:0x7f06470ff749 [ 1439.814795][T15574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1439.814810][T15574] RSP: 002b:00007f064535e038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1439.814828][T15574] RAX: ffffffffffffffda RBX: 00007f0647355fa0 RCX: 00007f06470ff749 [ 1439.814841][T15574] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1439.814852][T15574] RBP: 00007f064535e090 R08: 0000000000000000 R09: 0000000000000000 [ 1439.814863][T15574] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1439.814873][T15574] R13: 00007f0647356038 R14: 00007f0647355fa0 R15: 00007ffe79968218 [ 1439.814899][T15574] [ 1440.848160][ T3183] team0 (unregistering): Port device team_slave_1 removed [ 1441.018123][ T3183] team0 (unregistering): Port device team_slave_0 removed [ 1441.648173][T15474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.648189][T15474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1441.648213][T15474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.857914][T15582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.858538][T15582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.333252][T15417] hsr_slave_0: entered promiscuous mode [ 1442.334779][T15417] hsr_slave_1: entered promiscuous mode [ 1442.335813][T15417] debugfs: 'hsr0' already exists in 'hsr' [ 1442.335839][T15417] Cannot create hsr debugfs directory [ 1442.515716][T15474] hsr_slave_0: entered promiscuous mode [ 1442.522748][T15474] hsr_slave_1: entered promiscuous mode [ 1442.523562][T15474] debugfs: 'hsr0' already exists in 'hsr' [ 1442.523582][T15474] Cannot create hsr debugfs directory [ 1444.519212][T15611] binder: 15610:15611 ioctl 4018620d 0 returned -22 [ 1446.793285][T15615] FAULT_INJECTION: forcing a failure. [ 1446.793285][T15615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1446.793328][T15615] CPU: 1 UID: 0 PID: 15615 Comm: syz.1.2449 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1446.793362][T15615] Tainted: [L]=SOFTLOCKUP [ 1446.793371][T15615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1446.793385][T15615] Call Trace: [ 1446.793394][T15615] [ 1446.793404][T15615] dump_stack_lvl+0xe8/0x150 [ 1446.793442][T15615] should_fail_ex+0x46c/0x600 [ 1446.793482][T15615] _copy_from_user+0x2d/0xb0 [ 1446.793509][T15615] memdup_user+0x5e/0xd0 [ 1446.793537][T15615] strndup_user+0x68/0xd0 [ 1446.793564][T15615] __se_sys_mount+0x9d/0x410 [ 1446.793590][T15615] ? ksys_write+0x230/0x260 [ 1446.793627][T15615] ? __pfx___se_sys_mount+0x10/0x10 [ 1446.793659][T15615] ? __x64_sys_mount+0x20/0xc0 [ 1446.793686][T15615] do_syscall_64+0xec/0xf80 [ 1446.793711][T15615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.793735][T15615] ? trace_irq_disable+0x37/0x100 [ 1446.793760][T15615] ? clear_bhb_loop+0x60/0xb0 [ 1446.793789][T15615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.793813][T15615] RIP: 0033:0x7f783ae0f749 [ 1446.793834][T15615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1446.793855][T15615] RSP: 002b:00007f783906e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1446.793880][T15615] RAX: ffffffffffffffda RBX: 00007f783b065fa0 RCX: 00007f783ae0f749 [ 1446.793897][T15615] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000000000000000 [ 1446.793914][T15615] RBP: 00007f783906e090 R08: 00002000000004c0 R09: 0000000000000000 [ 1446.793930][T15615] R10: 0000000000004898 R11: 0000000000000246 R12: 0000000000000001 [ 1446.793945][T15615] R13: 00007f783b066038 R14: 00007f783b065fa0 R15: 00007ffff13b9d68 [ 1446.793983][T15615] [ 1447.876040][T15624] 9p: Bad value for 'source' [ 1448.555807][T15626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.582699][T15626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.748670][T15626] cifs: Unknown parameter 'ÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 1448.748670][T15626] SÃȘØÈžZ§6ŸÂ' [ 1448.748711][T15626] CIFS mount error: No usable UNC path provided in device string! [ 1448.748711][T15626] [ 1448.748729][T15626] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1448.758784][T15626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.759362][T15626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.765006][T15626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.765569][T15626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.635729][T15634] loop2: detected capacity change from 0 to 7 [ 1450.676755][T15579] Dev loop2: unable to read RDB block 7 [ 1450.676802][T15579] loop2: AHDI p1 p2 p3 [ 1450.676839][T15579] loop2: partition table partially beyond EOD, truncated [ 1450.677157][T15579] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1450.677179][T15579] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1450.729545][T15634] Dev loop2: unable to read RDB block 7 [ 1450.729589][T15634] loop2: AHDI p1 p2 p3 [ 1450.729619][T15634] loop2: partition table partially beyond EOD, truncated [ 1450.730483][T15634] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1450.730514][T15634] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1450.827328][T15634] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2456'. [ 1450.953923][T15408] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1451.022722][T15639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.032535][T15408] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1451.068658][T15639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.098196][T15408] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1451.257331][T15408] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1451.422508][T15417] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1451.453914][T15417] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1451.498827][T15417] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1451.532829][T15417] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1451.734056][T15474] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1451.762213][T15474] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1451.803858][T15474] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1451.843872][T15474] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1455.342995][T15674] FAULT_INJECTION: forcing a failure. [ 1455.342995][T15674] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.343035][T15674] CPU: 0 UID: 0 PID: 15674 Comm: syz.6.2463 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1455.343069][T15674] Tainted: [L]=SOFTLOCKUP [ 1455.343077][T15674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1455.343093][T15674] Call Trace: [ 1455.343102][T15674] [ 1455.343113][T15674] dump_stack_lvl+0xe8/0x150 [ 1455.343161][T15674] should_fail_ex+0x46c/0x600 [ 1455.343199][T15674] should_failslab+0xa8/0x100 [ 1455.343225][T15674] __kmalloc_noprof+0xe0/0x7e0 [ 1455.343259][T15674] ? kfree+0x4d/0x900 [ 1455.343286][T15674] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1455.343319][T15674] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1455.343347][T15674] ? tomoyo_domain+0xd9/0x130 [ 1455.343380][T15674] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1455.343416][T15674] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1455.343453][T15674] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1455.343487][T15674] ? __lock_acquire+0x6b6/0x2cf0 [ 1455.343523][T15674] ? do_raw_spin_lock+0x121/0x290 [ 1455.343587][T15674] ? __fget_files+0x2a/0x420 [ 1455.343617][T15674] ? __fget_files+0x2a/0x420 [ 1455.343641][T15674] ? __fget_files+0x3a6/0x420 [ 1455.343665][T15674] ? __fget_files+0x2a/0x420 [ 1455.343696][T15674] security_file_ioctl+0xcb/0x2d0 [ 1455.343733][T15674] __se_sys_ioctl+0x47/0x170 [ 1455.343768][T15674] do_syscall_64+0xec/0xf80 [ 1455.343795][T15674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.343818][T15674] ? trace_irq_disable+0x37/0x100 [ 1455.343843][T15674] ? clear_bhb_loop+0x60/0xb0 [ 1455.343872][T15674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.343895][T15674] RIP: 0033:0x7f06470ff749 [ 1455.343915][T15674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1455.343935][T15674] RSP: 002b:00007f064535e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1455.343960][T15674] RAX: ffffffffffffffda RBX: 00007f0647355fa0 RCX: 00007f06470ff749 [ 1455.343977][T15674] RDX: 0000200000001080 RSI: 0000000040045730 RDI: 0000000000000003 [ 1455.343993][T15674] RBP: 00007f064535e090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.344009][T15674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.344023][T15674] R13: 00007f0647356038 R14: 00007f0647355fa0 R15: 00007ffe79968218 [ 1455.344062][T15674] [ 1455.344072][T15674] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1455.613197][T15417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1455.648093][T15408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.017729][T15408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.021475][T15417] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.067180][ T1406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.067424][ T1406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1456.070324][ T1406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.070472][ T1406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1456.135142][ T1406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.135607][ T1406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1456.157310][ T1406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.157405][ T1406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1456.198199][T15474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.352122][T15474] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.434078][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.434227][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1456.486924][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.487110][ T8398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.206811][T15408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1457.404050][T15417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1457.504488][T15474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1458.137668][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2467'. [ 1458.553387][T15408] veth0_vlan: entered promiscuous mode [ 1458.625025][T15408] veth1_vlan: entered promiscuous mode [ 1458.768047][T15474] veth0_vlan: entered promiscuous mode [ 1458.861563][T15474] veth1_vlan: entered promiscuous mode [ 1458.874511][T15408] veth0_macvtap: entered promiscuous mode [ 1458.966453][T15417] veth0_vlan: entered promiscuous mode [ 1458.968592][T15408] veth1_macvtap: entered promiscuous mode [ 1459.069029][T15417] veth1_vlan: entered promiscuous mode [ 1459.110276][T15408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1459.193092][T15408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1459.202306][T15474] veth0_macvtap: entered promiscuous mode [ 1459.291549][T15474] veth1_macvtap: entered promiscuous mode [ 1459.295825][ T9130] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.323719][ T9130] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.356781][ T9130] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.357668][ T9130] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.518434][T15417] veth0_macvtap: entered promiscuous mode [ 1459.536818][T15474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1459.662776][T15474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1459.677275][T15417] veth1_macvtap: entered promiscuous mode [ 1459.813554][ T1406] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.863486][ T1406] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.962936][ T1406] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.017413][ T1406] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.049333][ T9130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.049357][ T9130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.247970][T15417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1460.574236][T15417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1460.673330][ T1406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.673354][ T1406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.739520][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.739576][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.739618][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.739666][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.900024][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.900046][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.160300][ T9130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.160324][ T9130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.423588][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.423613][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.799638][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.799663][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.460395][T15783] FAULT_INJECTION: forcing a failure. [ 1462.460395][T15783] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.460454][T15783] CPU: 1 UID: 0 PID: 15783 Comm: syz.5.711 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1462.460488][T15783] Tainted: [L]=SOFTLOCKUP [ 1462.460498][T15783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1462.460521][T15783] Call Trace: [ 1462.460531][T15783] [ 1462.460541][T15783] dump_stack_lvl+0xe8/0x150 [ 1462.460580][T15783] should_fail_ex+0x46c/0x600 [ 1462.460619][T15783] ? security_inode_alloc+0x39/0x330 [ 1462.460646][T15783] should_failslab+0xa8/0x100 [ 1462.460671][T15783] ? security_inode_alloc+0x39/0x330 [ 1462.460698][T15783] kmem_cache_alloc_noprof+0x84/0x6c0 [ 1462.460745][T15783] security_inode_alloc+0x39/0x330 [ 1462.460776][T15783] inode_init_always_gfp+0x9bf/0xd70 [ 1462.460808][T15783] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1462.460832][T15783] alloc_inode+0x82/0x1b0 [ 1462.460856][T15783] do_accept+0x117/0x680 [ 1462.460883][T15783] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1462.460925][T15783] ? __pfx_do_accept+0x10/0x10 [ 1462.460984][T15783] __sys_accept4+0x127/0x210 [ 1462.461015][T15783] ? __pfx___sys_accept4+0x10/0x10 [ 1462.461042][T15783] ? __pfx_ksys_write+0x10/0x10 [ 1462.461085][T15783] __x64_sys_accept+0x7d/0x90 [ 1462.461115][T15783] do_syscall_64+0xec/0xf80 [ 1462.461140][T15783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.461163][T15783] ? trace_irq_disable+0x37/0x100 [ 1462.461189][T15783] ? clear_bhb_loop+0x60/0xb0 [ 1462.461218][T15783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.461242][T15783] RIP: 0033:0x7fcca06ef749 [ 1462.461263][T15783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1462.461284][T15783] RSP: 002b:00007fcc9e94e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1462.461308][T15783] RAX: ffffffffffffffda RBX: 00007fcca0945fa0 RCX: 00007fcca06ef749 [ 1462.461325][T15783] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1462.461340][T15783] RBP: 00007fcc9e94e090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.461354][T15783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.461368][T15783] R13: 00007fcca0946038 R14: 00007fcca0945fa0 R15: 00007ffeb836ff38 [ 1462.461405][T15783] [ 1464.531309][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2474'. [ 1466.977008][T15436] usb 2-1: USB disconnect, device number 36 [ 1468.790884][T10054] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1468.822696][T10054] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1468.843403][T10054] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1468.875523][T10054] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1468.912496][T10054] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1469.157667][T15835] tmpfs: Unknown parameter 'mask' [ 1469.188540][ T37] audit: type=1800 audit(2000001035.140:512): pid=15835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.2487" name="file1" dev="overlay" ino=63 res=0 errno=0 [ 1469.577199][ T37] audit: type=1326 audit(2000001035.550:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15840 comm="syz.5.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1469.577356][ T37] audit: type=1326 audit(2000001035.550:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15840 comm="syz.5.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1469.577612][ T37] audit: type=1326 audit(2000001035.550:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15840 comm="syz.5.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1469.580833][ T37] audit: type=1326 audit(2000001035.550:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15840 comm="syz.5.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1469.581025][ T37] audit: type=1326 audit(2000001035.550:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15840 comm="syz.5.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1469.581205][ T37] audit: type=1326 audit(2000001035.550:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15840 comm="syz.5.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1469.581662][ T37] audit: type=1326 audit(2000001035.550:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15840 comm="syz.5.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1469.582447][ T37] audit: type=1326 audit(2000001035.550:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15840 comm="syz.5.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1469.582648][ T37] audit: type=1326 audit(2000001035.550:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15840 comm="syz.5.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1470.076114][T14489] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1470.238724][T14489] usb 6-1: Using ep0 maxpacket: 16 [ 1470.277248][T14489] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.277286][T14489] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1470.325431][T14489] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1470.325468][T14489] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.325493][T14489] usb 6-1: Product: syz [ 1470.325511][T14489] usb 6-1: Manufacturer: syz [ 1470.325529][T14489] usb 6-1: SerialNumber: syz [ 1470.586930][T15856] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2492'. [ 1471.312681][ T5808] Bluetooth: hci5: command tx timeout [ 1471.668555][T14489] usb 6-1: 0:2 : does not exist [ 1471.698894][T15862] FAULT_INJECTION: forcing a failure. [ 1471.698894][T15862] name failslab, interval 1, probability 0, space 0, times 0 [ 1471.698935][T15862] CPU: 1 UID: 0 PID: 15862 Comm: syz.8.2493 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1471.698969][T15862] Tainted: [L]=SOFTLOCKUP [ 1471.698978][T15862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1471.698993][T15862] Call Trace: [ 1471.699002][T15862] [ 1471.699012][T15862] dump_stack_lvl+0xe8/0x150 [ 1471.699052][T15862] should_fail_ex+0x46c/0x600 [ 1471.699090][T15862] ? __alloc_skb+0x1dc/0x3a0 [ 1471.699118][T15862] should_failslab+0xa8/0x100 [ 1471.699143][T15862] ? __alloc_skb+0x1dc/0x3a0 [ 1471.699169][T15862] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1471.699204][T15862] ? lockdep_hardirqs_on+0x7b/0x110 [ 1471.699233][T15862] ? __alloc_skb+0x198/0x3a0 [ 1471.699262][T15862] __alloc_skb+0x1dc/0x3a0 [ 1471.699295][T15862] netlink_sendmsg+0x5c6/0xb30 [ 1471.699341][T15862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1471.699384][T15862] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1471.699417][T15862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1471.699453][T15862] __sock_sendmsg+0x21c/0x270 [ 1471.699481][T15862] ____sys_sendmsg+0x508/0x810 [ 1471.699520][T15862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1471.699563][T15862] ? import_iovec+0x74/0xa0 [ 1471.699593][T15862] ___sys_sendmsg+0x21f/0x2a0 [ 1471.699628][T15862] ? __pfx____sys_sendmsg+0x10/0x10 [ 1471.699734][T15862] ? __fget_files+0x2a/0x420 [ 1471.699760][T15862] ? __fget_files+0x3a6/0x420 [ 1471.699797][T15862] __x64_sys_sendmsg+0x1a1/0x260 [ 1471.699834][T15862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1471.699879][T15862] ? __pfx_ksys_write+0x10/0x10 [ 1471.699925][T15862] do_syscall_64+0xec/0xf80 [ 1471.699952][T15862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.699975][T15862] ? trace_irq_disable+0x37/0x100 [ 1471.700000][T15862] ? clear_bhb_loop+0x60/0xb0 [ 1471.700029][T15862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.700053][T15862] RIP: 0033:0x7fd9cf6af749 [ 1471.700073][T15862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1471.700095][T15862] RSP: 002b:00007fd9cd916038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1471.700120][T15862] RAX: ffffffffffffffda RBX: 00007fd9cf905fa0 RCX: 00007fd9cf6af749 [ 1471.700138][T15862] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 1471.700154][T15862] RBP: 00007fd9cd916090 R08: 0000000000000000 R09: 0000000000000000 [ 1471.700170][T15862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1471.700184][T15862] R13: 00007fd9cf906038 R14: 00007fd9cf905fa0 R15: 00007ffd02243c48 [ 1471.700221][T15862] [ 1471.796219][T14489] usb 6-1: USB disconnect, device number 2 [ 1472.195838][T15670] udevd[15670]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1473.336077][ T5808] Bluetooth: hci5: command tx timeout [ 1473.629525][T15892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2498'. [ 1473.709551][ T8398] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1473.709582][ T8398] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.921362][T15827] chnl_net:caif_netlink_parms(): no params data found [ 1474.729951][ T8398] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1474.729994][ T8398] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.212991][ T8398] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1475.213033][ T8398] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.275702][T15926] FAULT_INJECTION: forcing a failure. [ 1475.275702][T15926] name failslab, interval 1, probability 0, space 0, times 0 [ 1475.275745][T15926] CPU: 1 UID: 0 PID: 15926 Comm: syz.5.2503 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1475.275779][T15926] Tainted: [L]=SOFTLOCKUP [ 1475.275788][T15926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1475.275804][T15926] Call Trace: [ 1475.275814][T15926] [ 1475.275825][T15926] dump_stack_lvl+0xe8/0x150 [ 1475.275864][T15926] should_fail_ex+0x46c/0x600 [ 1475.275903][T15926] ? __alloc_skb+0x1dc/0x3a0 [ 1475.275934][T15926] should_failslab+0xa8/0x100 [ 1475.275958][T15926] ? __alloc_skb+0x1dc/0x3a0 [ 1475.275983][T15926] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1475.276018][T15926] ? lockdep_hardirqs_on+0x7b/0x110 [ 1475.276045][T15926] ? __alloc_skb+0x198/0x3a0 [ 1475.276072][T15926] __alloc_skb+0x1dc/0x3a0 [ 1475.276103][T15926] netlink_sendmsg+0x5c6/0xb30 [ 1475.276148][T15926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1475.276191][T15926] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1475.276223][T15926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1475.276258][T15926] __sock_sendmsg+0x21c/0x270 [ 1475.276284][T15926] ____sys_sendmsg+0x508/0x810 [ 1475.276322][T15926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1475.276370][T15926] ? import_iovec+0x74/0xa0 [ 1475.276399][T15926] ___sys_sendmsg+0x21f/0x2a0 [ 1475.276434][T15926] ? __pfx____sys_sendmsg+0x10/0x10 [ 1475.276506][T15926] ? __fget_files+0x2a/0x420 [ 1475.276531][T15926] ? __fget_files+0x3a6/0x420 [ 1475.276568][T15926] __x64_sys_sendmsg+0x1a1/0x260 [ 1475.276605][T15926] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1475.276649][T15926] ? __pfx_ksys_write+0x10/0x10 [ 1475.276696][T15926] do_syscall_64+0xec/0xf80 [ 1475.276722][T15926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.276745][T15926] ? trace_irq_disable+0x37/0x100 [ 1475.276771][T15926] ? clear_bhb_loop+0x60/0xb0 [ 1475.276800][T15926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.276824][T15926] RIP: 0033:0x7fcca06ef749 [ 1475.276845][T15926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1475.276866][T15926] RSP: 002b:00007fcc9e94e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1475.276893][T15926] RAX: ffffffffffffffda RBX: 00007fcca0945fa0 RCX: 00007fcca06ef749 [ 1475.276911][T15926] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1475.276927][T15926] RBP: 00007fcc9e94e090 R08: 0000000000000000 R09: 0000000000000000 [ 1475.276942][T15926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1475.276957][T15926] R13: 00007fcca0946038 R14: 00007fcca0945fa0 R15: 00007ffeb836ff38 [ 1475.276995][T15926] [ 1475.416068][ T5808] Bluetooth: hci5: command tx timeout [ 1475.741704][T15935] FAULT_INJECTION: forcing a failure. [ 1475.741704][T15935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1475.741745][T15935] CPU: 1 UID: 0 PID: 15935 Comm: syz.5.2504 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1475.741779][T15935] Tainted: [L]=SOFTLOCKUP [ 1475.741788][T15935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1475.741807][T15935] Call Trace: [ 1475.741817][T15935] [ 1475.741828][T15935] dump_stack_lvl+0xe8/0x150 [ 1475.741868][T15935] should_fail_ex+0x46c/0x600 [ 1475.741908][T15935] _copy_from_user+0x2d/0xb0 [ 1475.741935][T15935] kstrtouint_from_user+0xc4/0x170 [ 1475.741973][T15935] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1475.742025][T15935] proc_fail_nth_write+0x88/0x200 [ 1475.742061][T15935] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1475.742101][T15935] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1475.742139][T15935] vfs_write+0x287/0xb40 [ 1475.742183][T15935] ? __pfx_vfs_write+0x10/0x10 [ 1475.742221][T15935] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1475.742249][T15935] ? lockdep_hardirqs_on+0x7b/0x110 [ 1475.742275][T15935] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1475.742302][T15935] ? mutex_lock_nested+0x154/0x1d0 [ 1475.742343][T15935] ? fdget_pos+0x253/0x320 [ 1475.742380][T15935] ksys_write+0x14b/0x260 [ 1475.742412][T15935] ? __fget_files+0x3a6/0x420 [ 1475.742438][T15935] ? __pfx_ksys_write+0x10/0x10 [ 1475.742485][T15935] do_syscall_64+0xec/0xf80 [ 1475.742512][T15935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.742535][T15935] ? trace_irq_disable+0x37/0x100 [ 1475.742562][T15935] ? clear_bhb_loop+0x60/0xb0 [ 1475.742592][T15935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.742616][T15935] RIP: 0033:0x7fcca06ee1ff [ 1475.742637][T15935] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1475.742659][T15935] RSP: 002b:00007fcc9e92d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1475.742685][T15935] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcca06ee1ff [ 1475.742702][T15935] RDX: 0000000000000001 RSI: 00007fcc9e92d0a0 RDI: 0000000000000004 [ 1475.742718][T15935] RBP: 00007fcc9e92d090 R08: 0000000000000000 R09: 0000000000000000 [ 1475.742732][T15935] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1475.742746][T15935] R13: 00007fcca0946128 R14: 00007fcca0946090 R15: 00007ffeb836ff38 [ 1475.742785][T15935] [ 1476.076281][T15934] netlink: 'syz.8.2505': attribute type 2 has an invalid length. [ 1477.031021][ T8398] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1477.031065][ T8398] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.651481][ T5808] Bluetooth: hci5: command tx timeout [ 1477.722132][T15827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.727142][T15827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.727418][T15827] bridge_slave_0: entered allmulticast mode [ 1477.764147][T15827] bridge_slave_0: entered promiscuous mode [ 1477.831672][T15827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.848537][T15827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.848815][T15827] bridge_slave_1: entered allmulticast mode [ 1477.882049][T15827] bridge_slave_1: entered promiscuous mode [ 1479.276486][T15436] hid-generic 0005:0002:0004.000D: item fetching failed at offset 1/165 [ 1479.277308][T15436] hid-generic 0005:0002:0004.000D: probe with driver hid-generic failed with error -22 [ 1479.871871][T15827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.149672][ T9992] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1480.822907][T15827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.046040][ T9992] usb 6-1: Using ep0 maxpacket: 16 [ 1481.048369][ T9992] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1481.048397][ T9992] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.048421][ T9992] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1481.059710][ T9992] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1481.059743][ T9992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.059767][ T9992] usb 6-1: Product: syz [ 1481.059784][ T9992] usb 6-1: Manufacturer: syz [ 1481.059801][ T9992] usb 6-1: SerialNumber: syz [ 1481.150851][T15994] FAULT_INJECTION: forcing a failure. [ 1481.150851][T15994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1481.150892][T15994] CPU: 0 UID: 0 PID: 15994 Comm: syz.8.2520 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1481.150936][T15994] Tainted: [L]=SOFTLOCKUP [ 1481.150945][T15994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1481.150960][T15994] Call Trace: [ 1481.150968][T15994] [ 1481.150978][T15994] dump_stack_lvl+0xe8/0x150 [ 1481.151017][T15994] should_fail_ex+0x46c/0x600 [ 1481.151056][T15994] _copy_from_user+0x2d/0xb0 [ 1481.151083][T15994] smc_setsockopt+0x3b8/0xab0 [ 1481.151126][T15994] ? __pfx_smc_setsockopt+0x10/0x10 [ 1481.151164][T15994] ? __fget_files+0x2a/0x420 [ 1481.151189][T15994] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1481.151219][T15994] ? __pfx_smc_setsockopt+0x10/0x10 [ 1481.151257][T15994] do_sock_setsockopt+0x17c/0x1b0 [ 1481.151294][T15994] __x64_sys_setsockopt+0x145/0x1b0 [ 1481.151332][T15994] do_syscall_64+0xec/0xf80 [ 1481.151358][T15994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.151381][T15994] ? trace_irq_disable+0x37/0x100 [ 1481.151407][T15994] ? clear_bhb_loop+0x60/0xb0 [ 1481.151436][T15994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.151459][T15994] RIP: 0033:0x7fd9cf6af749 [ 1481.151478][T15994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1481.151500][T15994] RSP: 002b:00007fd9cd916038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1481.151525][T15994] RAX: ffffffffffffffda RBX: 00007fd9cf905fa0 RCX: 00007fd9cf6af749 [ 1481.151543][T15994] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000003 [ 1481.151558][T15994] RBP: 00007fd9cd916090 R08: 0000000000000004 R09: 0000000000000000 [ 1481.151574][T15994] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1481.151590][T15994] R13: 00007fd9cf906038 R14: 00007fd9cf905fa0 R15: 00007ffd02243c48 [ 1481.151627][T15994] [ 1481.603701][ T9992] usb 6-1: 0:2 : does not exist [ 1482.873500][T15827] team0: Port device team_slave_0 added [ 1482.909524][T15827] team0: Port device team_slave_1 added [ 1483.650966][ T9992] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 1484.706785][ T9992] usb 6-1: USB disconnect, device number 3 [ 1485.270308][T15827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.270326][T15827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.270350][T15827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.305319][T15827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.305379][T15827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.305466][T15827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1486.172240][ T8398] bridge_slave_1: left allmulticast mode [ 1486.172273][ T8398] bridge_slave_1: left promiscuous mode [ 1486.172538][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.318746][ T8398] bridge_slave_0: left allmulticast mode [ 1486.318773][ T8398] bridge_slave_0: left promiscuous mode [ 1486.319000][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.785981][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.786071][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.384063][T16099] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1491.398242][T16099] openvswitch: netlink: IP tunnel dst address not specified [ 1491.716799][ T8398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1491.777329][ T8398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1491.837312][ T8398] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1491.863128][ T8398] bond0 (unregistering): Released all slaves [ 1492.163964][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.164663][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.233150][T15827] hsr_slave_0: entered promiscuous mode [ 1492.234293][T15827] hsr_slave_1: entered promiscuous mode [ 1492.235032][T15827] debugfs: 'hsr0' already exists in 'hsr' [ 1492.235052][T15827] Cannot create hsr debugfs directory [ 1492.345095][ T8398] rxrpc: Call ffff88802c3a2300 still in use (1,Complete,1489,0)! [ 1492.587289][T16107] FAULT_INJECTION: forcing a failure. [ 1492.587289][T16107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1492.587336][T16107] CPU: 1 UID: 0 PID: 16107 Comm: syz.7.2539 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1492.587369][T16107] Tainted: [L]=SOFTLOCKUP [ 1492.587378][T16107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1492.587392][T16107] Call Trace: [ 1492.587402][T16107] [ 1492.587412][T16107] dump_stack_lvl+0xe8/0x150 [ 1492.587449][T16107] should_fail_ex+0x46c/0x600 [ 1492.587489][T16107] _copy_from_user+0x2d/0xb0 [ 1492.587516][T16107] smc_setsockopt+0x3b8/0xab0 [ 1492.587566][T16107] ? __pfx_smc_setsockopt+0x10/0x10 [ 1492.587605][T16107] ? __fget_files+0x2a/0x420 [ 1492.587629][T16107] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1492.587662][T16107] ? __pfx_smc_setsockopt+0x10/0x10 [ 1492.587698][T16107] do_sock_setsockopt+0x17c/0x1b0 [ 1492.587734][T16107] __x64_sys_setsockopt+0x145/0x1b0 [ 1492.587771][T16107] do_syscall_64+0xec/0xf80 [ 1492.587797][T16107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.587820][T16107] ? trace_irq_disable+0x37/0x100 [ 1492.587845][T16107] ? clear_bhb_loop+0x60/0xb0 [ 1492.587872][T16107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.587896][T16107] RIP: 0033:0x7f18352ff749 [ 1492.587916][T16107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1492.587936][T16107] RSP: 002b:00007f183351c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1492.587961][T16107] RAX: ffffffffffffffda RBX: 00007f1835556180 RCX: 00007f18352ff749 [ 1492.587978][T16107] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000003 [ 1492.587992][T16107] RBP: 00007f183351c090 R08: 0000000000000004 R09: 0000000000000000 [ 1492.588007][T16107] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1492.588023][T16107] R13: 00007f1835556218 R14: 00007f1835556180 R15: 00007fffad7a4b28 [ 1492.588060][T16107] [ 1492.687957][T16108] FAULT_INJECTION: forcing a failure. [ 1492.687957][T16108] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.688000][T16108] CPU: 1 UID: 0 PID: 16108 Comm: syz.5.2540 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1492.688034][T16108] Tainted: [L]=SOFTLOCKUP [ 1492.688044][T16108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1492.688061][T16108] Call Trace: [ 1492.688071][T16108] [ 1492.688090][T16108] dump_stack_lvl+0xe8/0x150 [ 1492.688131][T16108] should_fail_ex+0x46c/0x600 [ 1492.688172][T16108] should_failslab+0xa8/0x100 [ 1492.688199][T16108] __kvmalloc_node_noprof+0x181/0x940 [ 1492.688239][T16108] ? nf_hook_entries_grow+0x281/0x720 [ 1492.688285][T16108] nf_hook_entries_grow+0x281/0x720 [ 1492.688339][T16108] __nf_register_net_hook+0x2c9/0x930 [ 1492.688376][T16108] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1492.688416][T16108] nf_register_net_hook+0xb2/0x190 [ 1492.688457][T16108] nf_register_net_hooks+0x44/0x1b0 [ 1492.688499][T16108] ip_vs_register_hooks+0xc8/0x140 [ 1492.688538][T16108] ip_vs_add_service+0x2c5/0x1350 [ 1492.688578][T16108] ? rcu_read_unlock+0x87/0xa0 [ 1492.688610][T16108] do_ip_vs_set_ctl+0x7f2/0xa60 [ 1492.688643][T16108] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1492.688696][T16108] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1492.688724][T16108] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1492.688760][T16108] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1492.688812][T16108] nf_setsockopt+0x26f/0x290 [ 1492.688842][T16108] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1492.688872][T16108] do_sock_setsockopt+0x17c/0x1b0 [ 1492.688909][T16108] __x64_sys_setsockopt+0x145/0x1b0 [ 1492.688947][T16108] do_syscall_64+0xec/0xf80 [ 1492.688973][T16108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.688997][T16108] ? trace_irq_disable+0x37/0x100 [ 1492.689022][T16108] ? clear_bhb_loop+0x60/0xb0 [ 1492.689053][T16108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.689076][T16108] RIP: 0033:0x7fcca06ef749 [ 1492.689104][T16108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1492.689125][T16108] RSP: 002b:00007fcc9e90c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1492.689151][T16108] RAX: ffffffffffffffda RBX: 00007fcca0946180 RCX: 00007fcca06ef749 [ 1492.689170][T16108] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000008 [ 1492.689185][T16108] RBP: 00007fcc9e90c090 R08: 000000000000002c R09: 0000000000000000 [ 1492.689200][T16108] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1492.689216][T16108] R13: 00007fcca0946218 R14: 00007fcca0946180 R15: 00007ffeb836ff38 [ 1492.689254][T16108] [ 1494.556829][T16121] FAULT_INJECTION: forcing a failure. [ 1494.556829][T16121] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.556898][T16121] CPU: 0 UID: 0 PID: 16121 Comm: syz.8.2544 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1494.556933][T16121] Tainted: [L]=SOFTLOCKUP [ 1494.556949][T16121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1494.556965][T16121] Call Trace: [ 1494.556975][T16121] [ 1494.556986][T16121] dump_stack_lvl+0xe8/0x150 [ 1494.557024][T16121] should_fail_ex+0x46c/0x600 [ 1494.557062][T16121] ? __alloc_skb+0x1dc/0x3a0 [ 1494.557091][T16121] should_failslab+0xa8/0x100 [ 1494.557115][T16121] ? __alloc_skb+0x1dc/0x3a0 [ 1494.557141][T16121] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1494.557177][T16121] ? __local_bh_enable_ip+0x1c3/0x2c0 [ 1494.557208][T16121] ? __alloc_skb+0x198/0x3a0 [ 1494.557238][T16121] __alloc_skb+0x1dc/0x3a0 [ 1494.557272][T16121] netlink_sendmsg+0x5c6/0xb30 [ 1494.557312][T16121] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1494.557349][T16121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1494.557393][T16121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1494.557426][T16121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1494.557462][T16121] __sock_sendmsg+0x21c/0x270 [ 1494.557489][T16121] ____sys_sendmsg+0x508/0x810 [ 1494.557529][T16121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1494.557571][T16121] ? import_iovec+0x74/0xa0 [ 1494.557600][T16121] ___sys_sendmsg+0x21f/0x2a0 [ 1494.557635][T16121] ? __pfx____sys_sendmsg+0x10/0x10 [ 1494.557711][T16121] ? lockdep_hardirqs_on+0x7b/0x110 [ 1494.557757][T16121] ? __x64_sys_sendmsg+0x186/0x260 [ 1494.557798][T16121] __x64_sys_sendmsg+0x1a1/0x260 [ 1494.557834][T16121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1494.557879][T16121] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1494.557919][T16121] do_syscall_64+0xec/0xf80 [ 1494.557955][T16121] ? rcu_is_watching+0x15/0xb0 [ 1494.557977][T16121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.558001][T16121] ? clear_bhb_loop+0x60/0xb0 [ 1494.558031][T16121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.558055][T16121] RIP: 0033:0x7fd9cf6af749 [ 1494.558076][T16121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1494.558098][T16121] RSP: 002b:00007fd9cd8d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1494.558123][T16121] RAX: ffffffffffffffda RBX: 00007fd9cf906180 RCX: 00007fd9cf6af749 [ 1494.558142][T16121] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 1494.558165][T16121] RBP: 00007fd9cd8d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1494.558181][T16121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1494.558196][T16121] R13: 00007fd9cf906218 R14: 00007fd9cf906180 R15: 00007ffd02243c48 [ 1494.558234][T16121] [ 1495.086166][T15829] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1495.441365][T15829] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.441428][T15829] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1495.441457][T15829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.538707][T15829] usb 6-1: config 0 descriptor?? [ 1495.583344][T15829] rndis_host 6-1:0.0: probe with driver rndis_host failed with error -22 [ 1495.770782][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2545'. [ 1495.799259][T16127] netlink: 'syz.8.2545': attribute type 1 has an invalid length. [ 1495.823755][T15829] usb 6-1: USB disconnect, device number 4 [ 1497.629946][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2550'. [ 1499.268076][T16173] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1500.285175][ T37] kauditd_printk_skb: 60 callbacks suppressed [ 1500.285195][ T37] audit: type=1326 audit(2000001066.250:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16189 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1500.286062][ T9992] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1500.316868][ T37] audit: type=1326 audit(2000001066.290:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16189 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1500.317147][ T37] audit: type=1326 audit(2000001066.290:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16189 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1500.386097][ T37] audit: type=1326 audit(2000001066.290:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16189 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1500.440267][ T37] audit: type=1326 audit(2000001066.410:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16189 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1500.440449][ T37] audit: type=1326 audit(2000001066.410:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16189 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1500.446777][ T37] audit: type=1326 audit(2000001066.410:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16189 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1500.456102][ T37] audit: type=1326 audit(2000001066.420:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16189 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1500.466008][ T37] audit: type=1326 audit(2000001066.430:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16189 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1500.466070][ T37] audit: type=1326 audit(2000001066.430:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16189 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca06ef749 code=0x7ffc0000 [ 1500.490599][ T9992] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.490817][ T9992] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1500.583367][ T9992] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1500.583466][ T9992] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.583539][ T9992] usb 8-1: Product: syz [ 1500.583583][ T9992] usb 8-1: Manufacturer: syz [ 1500.583628][ T9992] usb 8-1: SerialNumber: syz [ 1500.707715][ T9992] usb 8-1: bad CDC descriptors [ 1503.303886][T15827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1503.354809][T15827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1503.434875][T15827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1503.489225][T15827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1503.868788][T15827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1503.964499][T16212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1503.964535][T16212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.004546][T16212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1504.004579][T16212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1504.540626][T16198] usb 8-1: USB disconnect, device number 2 [ 1504.580527][T16219] netlink: 'syz.6.2568': attribute type 10 has an invalid length. [ 1504.580554][T16219] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2568'. [ 1504.729506][T15827] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.770175][ T1406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.770346][ T1406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1504.776097][T16221] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2569'. [ 1504.776815][T16221] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2569'. [ 1504.847685][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.847857][ T6269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.861027][T16244] syz.8.2565 (16244) used greatest stack depth: 17632 bytes left [ 1506.069666][T16246] pim6reg1: entered promiscuous mode [ 1506.069701][T16246] pim6reg1: entered allmulticast mode [ 1506.622747][T16263] tap0: tun_chr_ioctl cmd 2147767506 [ 1506.962896][T15827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.145065][T15827] veth0_vlan: entered promiscuous mode [ 1507.175002][T15827] veth1_vlan: entered promiscuous mode [ 1507.297422][T15827] veth0_macvtap: entered promiscuous mode [ 1507.332124][T15827] veth1_macvtap: entered promiscuous mode [ 1507.378942][T15827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1507.402947][T15827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1507.453024][ T9975] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.453100][ T9975] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.453144][ T9975] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.453186][ T9975] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.567539][T16284] pim6reg1: entered promiscuous mode [ 1507.567580][T16284] pim6reg1: entered allmulticast mode [ 1509.113096][T16317] ªªªªªª: renamed from vlan0 (while UP) [ 1524.072701][T10054] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1524.130024][T10054] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1524.132003][T10054] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1524.146597][T10054] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1524.157280][T10054] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1524.459277][T10054] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1524.465325][T10054] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1524.471481][T10054] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1524.527503][T10054] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1524.531264][T10054] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1525.522447][T10054] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1525.531245][T10054] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1525.576331][T10054] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1525.584449][T10054] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1525.585376][T10054] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1525.627214][T15421] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1525.634022][T15421] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1525.642210][T15421] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1525.668634][ T5808] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1525.670327][ T5808] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1526.296457][ T9929] Bluetooth: hci0: command tx timeout [ 1526.593107][T15421] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1526.605825][T15421] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1526.662147][T15421] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1526.665524][T15421] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1526.668542][T15421] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1526.696161][ T9929] Bluetooth: hci6: command tx timeout [ 1527.775122][T15421] Bluetooth: hci7: command tx timeout [ 1527.816574][T15421] Bluetooth: hci8: command tx timeout [ 1528.380466][T15421] Bluetooth: hci0: command tx timeout [ 1528.800175][ T9929] Bluetooth: hci6: command tx timeout [ 1528.800302][T15421] Bluetooth: hci9: command tx timeout [ 1529.817983][T15421] Bluetooth: hci7: command tx timeout [ 1529.896173][T15421] Bluetooth: hci8: command tx timeout [ 1530.456285][T15421] Bluetooth: hci0: command tx timeout [ 1530.856710][ T9929] Bluetooth: hci6: command tx timeout [ 1530.860964][T15421] Bluetooth: hci9: command tx timeout [ 1531.896146][T15421] Bluetooth: hci7: command tx timeout [ 1531.976829][T15421] Bluetooth: hci8: command tx timeout [ 1532.536118][T15421] Bluetooth: hci0: command tx timeout [ 1532.959436][ T9929] Bluetooth: hci6: command tx timeout [ 1532.959492][T15421] Bluetooth: hci9: command tx timeout [ 1533.978837][T15421] Bluetooth: hci7: command tx timeout [ 1534.066319][T15421] Bluetooth: hci8: command tx timeout [ 1535.026109][T15421] Bluetooth: hci9: command tx timeout [ 1537.925734][ T9929] Bluetooth: hci1: command 0x0406 tx timeout [ 1547.452580][T16374] chnl_net:caif_netlink_parms(): no params data found [ 1547.543506][T16368] chnl_net:caif_netlink_parms(): no params data found [ 1547.898279][T16360] chnl_net:caif_netlink_parms(): no params data found [ 1547.917141][T16364] chnl_net:caif_netlink_parms(): no params data found [ 1547.939137][T16370] chnl_net:caif_netlink_parms(): no params data found [ 1548.736699][T16374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.736910][T16374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.737184][T16374] bridge_slave_0: entered allmulticast mode [ 1548.740130][T16374] bridge_slave_0: entered promiscuous mode [ 1548.912007][T16374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.919466][T16374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.920312][T16374] bridge_slave_1: entered allmulticast mode [ 1548.929380][T16374] bridge_slave_1: entered promiscuous mode [ 1548.965548][T16368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.965638][T16368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.965811][T16368] bridge_slave_0: entered allmulticast mode [ 1548.989136][T16368] bridge_slave_0: entered promiscuous mode [ 1549.250828][T16368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.251060][T16368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.251238][T16368] bridge_slave_1: entered allmulticast mode [ 1549.253211][T16368] bridge_slave_1: entered promiscuous mode [ 1549.673076][T16374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.673291][T16360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.674365][T16360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.674559][T16360] bridge_slave_0: entered allmulticast mode [ 1549.707901][T16360] bridge_slave_0: entered promiscuous mode [ 1549.714556][T16364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.714709][T16364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.714949][T16364] bridge_slave_0: entered allmulticast mode [ 1549.743710][T16364] bridge_slave_0: entered promiscuous mode [ 1549.823360][T16370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.823455][T16370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.823676][T16370] bridge_slave_0: entered allmulticast mode [ 1549.825606][T16370] bridge_slave_0: entered promiscuous mode [ 1549.852526][T16374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.853314][T16360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.853436][T16360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.853635][T16360] bridge_slave_1: entered allmulticast mode [ 1549.855602][T16360] bridge_slave_1: entered promiscuous mode [ 1549.947648][T16364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.947739][T16364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.947937][T16364] bridge_slave_1: entered allmulticast mode [ 1549.949894][T16364] bridge_slave_1: entered promiscuous mode [ 1549.956091][T16368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.962130][T16370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.962479][T16370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.963322][T16370] bridge_slave_1: entered allmulticast mode [ 1549.988513][T16370] bridge_slave_1: entered promiscuous mode [ 1550.350055][T16368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.689487][T16374] team0: Port device team_slave_0 added [ 1550.693926][T16360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1550.718902][T16364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1550.726865][T16370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1550.811002][T16374] team0: Port device team_slave_1 added [ 1550.813967][T16360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.821009][T16364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.831898][T16370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.841376][T16368] team0: Port device team_slave_0 added [ 1551.105025][T16368] team0: Port device team_slave_1 added [ 1551.180426][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.180532][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.738240][T16374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1551.738256][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1551.738278][T16374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1551.740684][T16360] team0: Port device team_slave_0 added [ 1551.743389][T16364] team0: Port device team_slave_0 added [ 1551.745765][T16370] team0: Port device team_slave_0 added [ 1551.891203][T16360] team0: Port device team_slave_1 added [ 1551.892550][T16374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1551.892566][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1551.892597][T16374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1551.895197][T16364] team0: Port device team_slave_1 added [ 1551.908691][T16370] team0: Port device team_slave_1 added [ 1551.929638][T16368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1551.929692][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1551.929773][T16368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1552.210023][T16368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.210042][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.210066][T16368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1552.569490][T16360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1552.569505][T16360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.569529][T16360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1552.571863][T16364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1552.571882][T16364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.571921][T16364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1552.574682][T16370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1552.574695][T16370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.574716][T16370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1552.608346][T16360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.608412][T16360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.608495][T16360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1552.808046][T16364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.808067][T16364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.808100][T16364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1552.809477][T16370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.809491][T16370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.809513][T16370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1553.067161][T16374] hsr_slave_0: entered promiscuous mode [ 1553.068406][T16374] hsr_slave_1: entered promiscuous mode [ 1553.069201][T16374] debugfs: 'hsr0' already exists in 'hsr' [ 1553.069221][T16374] Cannot create hsr debugfs directory [ 1553.169398][T16368] hsr_slave_0: entered promiscuous mode [ 1553.170720][T16368] hsr_slave_1: entered promiscuous mode [ 1553.171470][T16368] debugfs: 'hsr0' already exists in 'hsr' [ 1553.171490][T16368] Cannot create hsr debugfs directory [ 1553.845175][T16360] hsr_slave_0: entered promiscuous mode [ 1553.852366][T16360] hsr_slave_1: entered promiscuous mode [ 1553.853175][T16360] debugfs: 'hsr0' already exists in 'hsr' [ 1553.853196][T16360] Cannot create hsr debugfs directory [ 1553.881338][T16370] hsr_slave_0: entered promiscuous mode [ 1553.882455][T16370] hsr_slave_1: entered promiscuous mode [ 1553.883200][T16370] debugfs: 'hsr0' already exists in 'hsr' [ 1553.883220][T16370] Cannot create hsr debugfs directory [ 1553.976868][T16364] hsr_slave_0: entered promiscuous mode [ 1553.978291][T16364] hsr_slave_1: entered promiscuous mode [ 1553.979055][T16364] debugfs: 'hsr0' already exists in 'hsr' [ 1553.979075][T16364] Cannot create hsr debugfs directory [ 1555.463499][T16374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.749780][T16374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.025240][T16374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.310149][T16374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.489957][T16374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1560.544017][T16374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1560.604528][T16374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1560.681457][T16374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1560.902358][T16360] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1560.966065][T16360] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1561.009678][T16360] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1561.086708][T16360] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1561.324573][T16368] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1561.404278][T16368] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1561.476430][T16368] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1561.583930][T16368] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1561.885584][T16364] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1561.924786][T16374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1561.943227][T16364] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1562.017858][T16364] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1562.141886][T16364] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1562.312637][T16374] 8021q: adding VLAN 0 to HW filter on device team0 [ 1562.453113][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.453340][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1562.522579][T16370] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1562.591978][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.592212][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1562.592930][T16370] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1562.662671][T16370] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1562.710507][T16370] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1562.753584][T16360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1562.947270][T16360] 8021q: adding VLAN 0 to HW filter on device team0 [ 1563.025854][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.030917][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1563.130985][ T1406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.131262][ T1406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1563.203525][T16368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.427727][T16368] 8021q: adding VLAN 0 to HW filter on device team0 [ 1563.476609][T16364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.532951][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.540765][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1563.630646][ T1406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.630792][ T1406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1563.778933][T16364] 8021q: adding VLAN 0 to HW filter on device team0 [ 1563.839711][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.839933][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1563.912997][T16370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.958200][T15346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.958458][T15346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1564.153089][T16374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1564.188285][T16370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.303595][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.314115][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.391788][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.400679][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1564.673682][T16360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1564.757856][T16374] veth0_vlan: entered promiscuous mode [ 1564.881576][T16374] veth1_vlan: entered promiscuous mode [ 1564.970137][T16368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1565.189975][T16374] veth0_macvtap: entered promiscuous mode [ 1565.224589][T16374] veth1_macvtap: entered promiscuous mode [ 1565.303015][T16374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1565.353849][T16374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1565.380012][ T2635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.381164][ T2635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.381764][ T2635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.381933][ T2635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.954596][T16364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1565.981461][T16370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1565.997230][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.997254][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.122805][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.122836][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.464538][T16370] veth0_vlan: entered promiscuous mode [ 1566.480676][T16364] veth0_vlan: entered promiscuous mode [ 1566.484183][T16360] veth0_vlan: entered promiscuous mode [ 1568.485221][T16370] veth1_vlan: entered promiscuous mode [ 1568.553852][T16364] veth1_vlan: entered promiscuous mode [ 1568.605610][T16360] veth1_vlan: entered promiscuous mode [ 1568.751094][T16368] veth0_vlan: entered promiscuous mode [ 1568.827401][T16368] veth1_vlan: entered promiscuous mode [ 1568.943650][T16364] veth0_macvtap: entered promiscuous mode [ 1568.969601][T16370] veth0_macvtap: entered promiscuous mode [ 1568.996844][T16364] veth1_macvtap: entered promiscuous mode [ 1569.014222][T16360] veth0_macvtap: entered promiscuous mode [ 1569.025422][T16370] veth1_macvtap: entered promiscuous mode [ 1569.068646][T16360] veth1_macvtap: entered promiscuous mode [ 1569.150281][T16364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1569.169702][T16370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1569.187580][T16368] veth0_macvtap: entered promiscuous mode [ 1569.219589][T16364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1569.223029][T16360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1569.241710][T16370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1569.259503][T16368] veth1_macvtap: entered promiscuous mode [ 1569.334598][ T144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.359270][T16360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1569.360152][ T144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.451461][ T144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.481964][ T144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.517433][ T144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.555080][ T144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.647572][ T144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.664615][T16368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1569.666771][ T144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.794097][T16392] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.797774][T16392] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.951768][T16392] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.072297][T16368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1570.091870][T16392] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.357254][ T9975] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.462964][ T2635] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.467979][ T1406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.467999][ T1406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.511652][ T2635] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.553106][ T2635] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.915334][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.915359][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.129552][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.129578][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.344203][ T2635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.344224][ T2635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.463681][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.463704][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.898557][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.898581][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.066362][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.066391][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.575575][ T6080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.575599][ T6080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.070280][T16751] FAULT_INJECTION: forcing a failure. [ 1573.070280][T16751] name failslab, interval 1, probability 0, space 0, times 0 [ 1573.070324][T16751] CPU: 1 UID: 0 PID: 16751 Comm: syz.1.2616 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1573.070356][T16751] Tainted: [L]=SOFTLOCKUP [ 1573.070365][T16751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1573.070380][T16751] Call Trace: [ 1573.070390][T16751] [ 1573.070400][T16751] dump_stack_lvl+0xe8/0x150 [ 1573.070439][T16751] should_fail_ex+0x46c/0x600 [ 1573.070476][T16751] ? __alloc_skb+0x1dc/0x3a0 [ 1573.070505][T16751] should_failslab+0xa8/0x100 [ 1573.070536][T16751] ? __alloc_skb+0x1dc/0x3a0 [ 1573.070561][T16751] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1573.070597][T16751] ? lockdep_hardirqs_on+0x7b/0x110 [ 1573.070625][T16751] ? __alloc_skb+0x198/0x3a0 [ 1573.070654][T16751] __alloc_skb+0x1dc/0x3a0 [ 1573.070687][T16751] netlink_sendmsg+0x5c6/0xb30 [ 1573.070733][T16751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1573.070777][T16751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1573.070809][T16751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1573.070845][T16751] __sock_sendmsg+0x21c/0x270 [ 1573.070873][T16751] ____sys_sendmsg+0x508/0x810 [ 1573.070936][T16751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1573.070985][T16751] ? import_iovec+0x74/0xa0 [ 1573.071014][T16751] ___sys_sendmsg+0x21f/0x2a0 [ 1573.071049][T16751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1573.071119][T16751] ? __fget_files+0x2a/0x420 [ 1573.071144][T16751] ? __fget_files+0x3a6/0x420 [ 1573.071180][T16751] __x64_sys_sendmsg+0x1a1/0x260 [ 1573.071215][T16751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1573.071259][T16751] ? __pfx_ksys_write+0x10/0x10 [ 1573.071305][T16751] do_syscall_64+0xec/0xf80 [ 1573.071330][T16751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.071353][T16751] ? trace_irq_disable+0x37/0x100 [ 1573.071379][T16751] ? clear_bhb_loop+0x60/0xb0 [ 1573.071408][T16751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.071432][T16751] RIP: 0033:0x7faa4624f749 [ 1573.071454][T16751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1573.071476][T16751] RSP: 002b:00007faa444b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1573.071502][T16751] RAX: ffffffffffffffda RBX: 00007faa464a5fa0 RCX: 00007faa4624f749 [ 1573.071520][T16751] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1573.071536][T16751] RBP: 00007faa444b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1573.071551][T16751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1573.071565][T16751] R13: 00007faa464a6038 R14: 00007faa464a5fa0 R15: 00007fffa1a57248 [ 1573.071600][T16751] [ 1574.823600][T16766] binder: BINDER_SET_CONTEXT_MGR already set [ 1574.823653][T16766] binder: 16764:16766 ioctl 4018620d 200000000040 returned -16 [ 1574.878721][T16768] FAULT_INJECTION: forcing a failure. [ 1574.878721][T16768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.878788][T16768] CPU: 0 UID: 0 PID: 16768 Comm: syz.4.2618 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1574.878822][T16768] Tainted: [L]=SOFTLOCKUP [ 1574.878831][T16768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1574.878854][T16768] Call Trace: [ 1574.878864][T16768] [ 1574.878875][T16768] dump_stack_lvl+0xe8/0x150 [ 1574.878913][T16768] should_fail_ex+0x46c/0x600 [ 1574.878954][T16768] _copy_from_user+0x2d/0xb0 [ 1574.878982][T16768] memdup_user+0x5e/0xd0 [ 1574.879011][T16768] strndup_user+0x68/0xd0 [ 1574.879040][T16768] __se_sys_mount+0x9d/0x410 [ 1574.879073][T16768] ? __pfx___se_sys_mount+0x10/0x10 [ 1574.879107][T16768] ? __x64_sys_mount+0x20/0xc0 [ 1574.879135][T16768] do_syscall_64+0xec/0xf80 [ 1574.879160][T16768] ? rcu_is_watching+0x15/0xb0 [ 1574.879182][T16768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.879207][T16768] ? clear_bhb_loop+0x60/0xb0 [ 1574.879236][T16768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.879260][T16768] RIP: 0033:0x7fd99246f749 [ 1574.879281][T16768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1574.879309][T16768] RSP: 002b:00007fd99068c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1574.879335][T16768] RAX: ffffffffffffffda RBX: 00007fd9926c6180 RCX: 00007fd99246f749 [ 1574.879354][T16768] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000 [ 1574.879371][T16768] RBP: 00007fd99068c090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.879387][T16768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1574.879403][T16768] R13: 00007fd9926c6218 R14: 00007fd9926c6180 R15: 00007ffcce8c06a8 [ 1574.879441][T16768] [ 1575.934871][T16758] wg2: entered promiscuous mode [ 1575.934898][T16758] wg2: entered allmulticast mode [ 1580.456498][T16166] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1580.626330][T16166] usb 5-1: Using ep0 maxpacket: 16 [ 1580.629205][T16166] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1580.629233][T16166] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.629257][T16166] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1580.632723][T16166] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1580.632757][T16166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.632780][T16166] usb 5-1: Product: syz [ 1580.632798][T16166] usb 5-1: Manufacturer: syz [ 1580.632814][T16166] usb 5-1: SerialNumber: syz [ 1581.140802][T16166] usb 5-1: 0:2 : does not exist [ 1586.621385][T16166] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 1587.812944][T16166] usb 5-1: USB disconnect, device number 16 [ 1588.174128][T16702] udevd[16702]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1588.319829][T16869] binder: 16863:16869 ioctl 4018620d 0 returned -22 [ 1592.119873][T16014] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1592.282238][T16014] usb 2-1: config index 0 descriptor too short (expected 3602, got 18) [ 1592.302749][T16014] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1592.302783][T16014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.302806][T16014] usb 2-1: Product: syz [ 1592.302824][T16014] usb 2-1: Manufacturer: syz [ 1592.302841][T16014] usb 2-1: SerialNumber: syz [ 1592.360725][T16014] usb 2-1: config 0 descriptor?? [ 1592.835562][T16014] usb 2-1: Firmware version (0.0) predates our first public release. [ 1592.835594][T16014] usb 2-1: Please update to version 0.2 or newer [ 1592.853430][T16904] FAULT_INJECTION: forcing a failure. [ 1592.853430][T16904] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.853471][T16904] CPU: 1 UID: 0 PID: 16904 Comm: syz.2.2649 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1592.853504][T16904] Tainted: [L]=SOFTLOCKUP [ 1592.853513][T16904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1592.853527][T16904] Call Trace: [ 1592.853536][T16904] [ 1592.853547][T16904] dump_stack_lvl+0xe8/0x150 [ 1592.853584][T16904] should_fail_ex+0x46c/0x600 [ 1592.853623][T16904] should_failslab+0xa8/0x100 [ 1592.853648][T16904] __kmalloc_noprof+0xe0/0x7e0 [ 1592.853682][T16904] ? tomoyo_encode+0x28b/0x550 [ 1592.853712][T16904] tomoyo_encode+0x28b/0x550 [ 1592.853741][T16904] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1592.853769][T16904] ? tomoyo_domain+0xd9/0x130 [ 1592.853799][T16904] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1592.853834][T16904] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1592.853870][T16904] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1592.853904][T16904] ? __lock_acquire+0x6b6/0x2cf0 [ 1592.853937][T16904] ? do_raw_spin_lock+0x121/0x290 [ 1592.854000][T16904] ? __fget_files+0x2a/0x420 [ 1592.854029][T16904] ? __fget_files+0x2a/0x420 [ 1592.854054][T16904] ? __fget_files+0x3a6/0x420 [ 1592.854078][T16904] ? __fget_files+0x2a/0x420 [ 1592.854108][T16904] security_file_ioctl+0xcb/0x2d0 [ 1592.854147][T16904] __se_sys_ioctl+0x47/0x170 [ 1592.854183][T16904] do_syscall_64+0xec/0xf80 [ 1592.854214][T16904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.854245][T16904] ? trace_irq_disable+0x37/0x100 [ 1592.854271][T16904] ? clear_bhb_loop+0x60/0xb0 [ 1592.854301][T16904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.854324][T16904] RIP: 0033:0x7f752364f749 [ 1592.854345][T16904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1592.854367][T16904] RSP: 002b:00007f75218ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1592.854391][T16904] RAX: ffffffffffffffda RBX: 00007f75238a5fa0 RCX: 00007f752364f749 [ 1592.854409][T16904] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 1592.854424][T16904] RBP: 00007f75218ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1592.854440][T16904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1592.854455][T16904] R13: 00007f75238a6038 R14: 00007f75238a5fa0 R15: 00007ffc26d24d48 [ 1592.854492][T16904] [ 1592.976320][T16904] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1595.351141][T16014] usb 2-1: USB disconnect, device number 37 [ 1598.071769][T12213] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1598.336063][T12213] usb 10-1: Using ep0 maxpacket: 16 [ 1598.338426][T12213] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1598.338453][T12213] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.338477][T12213] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1598.341706][T12213] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1598.341738][T12213] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.341763][T12213] usb 10-1: Product: syz [ 1598.341780][T12213] usb 10-1: Manufacturer: syz [ 1598.341797][T12213] usb 10-1: SerialNumber: syz [ 1598.628883][T12213] usb 10-1: 0:2 : does not exist [ 1598.637128][T12213] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 1601.108534][T12213] usb 10-1: USB disconnect, device number 2 [ 1601.303886][T16941] Bluetooth: MGMT ver 1.23 [ 1601.375739][T16908] udevd[16908]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1601.425811][T16942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2659'. [ 1601.969579][T16956] FAULT_INJECTION: forcing a failure. [ 1601.969579][T16956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1601.969623][T16956] CPU: 0 UID: 0 PID: 16956 Comm: syz.3.2662 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1601.969656][T16956] Tainted: [L]=SOFTLOCKUP [ 1601.969665][T16956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1601.969680][T16956] Call Trace: [ 1601.969690][T16956] [ 1601.969701][T16956] dump_stack_lvl+0xe8/0x150 [ 1601.969752][T16956] should_fail_ex+0x46c/0x600 [ 1601.969793][T16956] _copy_to_user+0x31/0xb0 [ 1601.969821][T16956] simple_read_from_buffer+0xe1/0x170 [ 1601.969852][T16956] proc_fail_nth_read+0x1b6/0x220 [ 1601.969892][T16956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1601.969933][T16956] ? rw_verify_area+0x2ac/0x4e0 [ 1601.969966][T16956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1601.970004][T16956] vfs_read+0x206/0xa30 [ 1601.970047][T16956] ? __pfx_vfs_read+0x10/0x10 [ 1601.970083][T16956] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1601.970111][T16956] ? lockdep_hardirqs_on+0x7b/0x110 [ 1601.970138][T16956] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1601.970165][T16956] ? mutex_lock_nested+0x154/0x1d0 [ 1601.970198][T16956] ? fdget_pos+0x253/0x320 [ 1601.970233][T16956] ksys_read+0x14b/0x260 [ 1601.970268][T16956] ? __pfx_ksys_read+0x10/0x10 [ 1601.970314][T16956] do_syscall_64+0xec/0xf80 [ 1601.970340][T16956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.970364][T16956] ? trace_irq_disable+0x37/0x100 [ 1601.970390][T16956] ? clear_bhb_loop+0x60/0xb0 [ 1601.970420][T16956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.970444][T16956] RIP: 0033:0x7f5c915fe15c [ 1601.970465][T16956] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1601.970487][T16956] RSP: 002b:00007f5c8f866030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1601.970512][T16956] RAX: ffffffffffffffda RBX: 00007f5c91855fa0 RCX: 00007f5c915fe15c [ 1601.970529][T16956] RDX: 000000000000000f RSI: 00007f5c8f8660a0 RDI: 0000000000000004 [ 1601.970545][T16956] RBP: 00007f5c8f866090 R08: 0000000000000000 R09: 0000000000000000 [ 1601.970561][T16956] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 1601.970576][T16956] R13: 00007f5c91856038 R14: 00007f5c91855fa0 R15: 00007ffeac4df8f8 [ 1601.970614][T16956] [ 1602.304101][T16962] FAULT_INJECTION: forcing a failure. [ 1602.304101][T16962] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.304141][T16962] CPU: 0 UID: 0 PID: 16962 Comm: syz.9.2664 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1602.304175][T16962] Tainted: [L]=SOFTLOCKUP [ 1602.304184][T16962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1602.304199][T16962] Call Trace: [ 1602.304209][T16962] [ 1602.304219][T16962] dump_stack_lvl+0xe8/0x150 [ 1602.304257][T16962] should_fail_ex+0x46c/0x600 [ 1602.304298][T16962] should_failslab+0xa8/0x100 [ 1602.304324][T16962] __kmalloc_noprof+0xe0/0x7e0 [ 1602.304360][T16962] ? tomoyo_encode+0x28b/0x550 [ 1602.304391][T16962] tomoyo_encode+0x28b/0x550 [ 1602.304430][T16962] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1602.304468][T16962] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1602.304504][T16962] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1602.304541][T16962] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1602.304580][T16962] ? sb_end_write+0xe9/0x1c0 [ 1602.304606][T16962] ? vfs_write+0x965/0xb40 [ 1602.304676][T16962] ? ksys_write+0x1e7/0x260 [ 1602.304718][T16962] security_file_ioctl+0xcb/0x2d0 [ 1602.304756][T16962] __se_sys_ioctl+0x47/0x170 [ 1602.304791][T16962] do_syscall_64+0xec/0xf80 [ 1602.304817][T16962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.304840][T16962] ? trace_irq_disable+0x37/0x100 [ 1602.304866][T16962] ? clear_bhb_loop+0x60/0xb0 [ 1602.304895][T16962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.304918][T16962] RIP: 0033:0x7fe6cb5af749 [ 1602.304939][T16962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1602.304960][T16962] RSP: 002b:00007fe6c9816038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1602.304985][T16962] RAX: ffffffffffffffda RBX: 00007fe6cb805fa0 RCX: 00007fe6cb5af749 [ 1602.305003][T16962] RDX: 0000200000000080 RSI: 000000004010744d RDI: 0000000000000003 [ 1602.305019][T16962] RBP: 00007fe6c9816090 R08: 0000000000000000 R09: 0000000000000000 [ 1602.305035][T16962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1602.305050][T16962] R13: 00007fe6cb806038 R14: 00007fe6cb805fa0 R15: 00007ffc10956a58 [ 1602.305087][T16962] [ 1602.305109][T16962] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1604.178534][T16971] tipc: Trying to set illegal importance in message [ 1604.178658][T16972] tipc: Trying to set illegal importance in message [ 1604.806217][T16913] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1604.958340][T16913] usb 10-1: Using ep0 maxpacket: 16 [ 1604.980999][T16913] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1604.981030][T16913] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.981054][T16913] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1604.993282][T16913] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1604.993318][T16913] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.993344][T16913] usb 10-1: Product: syz [ 1604.993361][T16913] usb 10-1: Manufacturer: syz [ 1604.993379][T16913] usb 10-1: SerialNumber: syz [ 1606.862057][T16913] usb 10-1: 0:2 : does not exist [ 1608.638015][ T9929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1608.672949][ T9929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1608.674843][ T9929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1608.695673][ T9929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1608.716802][ T9929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1609.334817][T17015] netlink: 'syz.1.2674': attribute type 1 has an invalid length. [ 1609.403958][T16913] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 1609.459116][T17016] macvlan2: entered promiscuous mode [ 1609.459146][T17016] macvlan2: entered allmulticast mode [ 1609.493877][T16913] usb 10-1: USB disconnect, device number 3 [ 1609.691614][T16908] udevd[16908]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1610.936314][ T9929] Bluetooth: hci1: command tx timeout [ 1611.326211][T16790] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1612.656559][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.656613][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.697310][T16790] usb 4-1: Using ep0 maxpacket: 16 [ 1612.719776][T16790] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1612.719806][T16790] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.719829][T16790] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1612.810398][T16790] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1612.810433][T16790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.810456][T16790] usb 4-1: Product: syz [ 1612.810474][T16790] usb 4-1: Manufacturer: syz [ 1612.810501][T16790] usb 4-1: SerialNumber: syz [ 1613.016235][ T9929] Bluetooth: hci1: command tx timeout [ 1613.342506][T16790] usb 4-1: 0:2 : does not exist [ 1614.524462][T17006] chnl_net:caif_netlink_parms(): no params data found [ 1616.756432][ T9929] Bluetooth: hci1: command tx timeout [ 1616.880516][T17064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2683'. [ 1617.072441][T16790] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 1617.121449][T16790] usb 4-1: USB disconnect, device number 19 [ 1617.380718][T16908] udevd[16908]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1617.845226][T17006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.873093][T17006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.873563][T17006] bridge_slave_0: entered allmulticast mode [ 1617.902277][T17006] bridge_slave_0: entered promiscuous mode [ 1617.925610][T17006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.930069][T17006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.931057][T17006] bridge_slave_1: entered allmulticast mode [ 1617.974375][T17006] bridge_slave_1: entered promiscuous mode [ 1617.982075][T16913] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1618.136018][T16913] usb 3-1: Using ep0 maxpacket: 32 [ 1618.144394][T16913] usb 3-1: config 2 has an invalid interface number: 45 but max is 0 [ 1618.144426][T16913] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.144449][T16913] usb 3-1: config 2 has no interface number 0 [ 1618.144500][T16913] usb 3-1: config 2 interface 45 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1618.148045][T16913] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1618.148079][T16913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.148103][T16913] usb 3-1: Product: syz [ 1618.148120][T16913] usb 3-1: Manufacturer: syz [ 1618.148138][T16913] usb 3-1: SerialNumber: syz [ 1618.235161][T16913] kobil_sct 3-1:2.45: required endpoints missing [ 1618.445533][T12213] usb 3-1: USB disconnect, device number 21 [ 1618.562149][T17006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1618.595290][T17006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.776169][ T9929] Bluetooth: hci1: command tx timeout [ 1618.981469][T17006] team0: Port device team_slave_0 added [ 1618.985774][T17006] team0: Port device team_slave_1 added [ 1623.897601][T17118] FAULT_INJECTION: forcing a failure. [ 1623.897601][T17118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1623.897671][T17118] CPU: 0 UID: 0 PID: 17118 Comm: syz.1.2694 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1623.897706][T17118] Tainted: [L]=SOFTLOCKUP [ 1623.897715][T17118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1623.897730][T17118] Call Trace: [ 1623.897740][T17118] [ 1623.897750][T17118] dump_stack_lvl+0xe8/0x150 [ 1623.897789][T17118] should_fail_ex+0x46c/0x600 [ 1623.897837][T17118] _copy_from_iter+0x1cd/0x1630 [ 1623.897875][T17118] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1623.897912][T17118] ? __pfx__copy_from_iter+0x10/0x10 [ 1623.897947][T17118] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1623.897981][T17118] ? set_page_refcounted+0xa0/0x1e0 [ 1623.898006][T17118] ? page_copy_sane+0x4e/0x280 [ 1623.898045][T17118] copy_page_from_iter+0xdd/0x170 [ 1623.898087][T17118] tun_get_user+0x1d40/0x3de0 [ 1623.898127][T17118] ? tun_get_user+0x6fc/0x3de0 [ 1623.898175][T17118] ? __pfx_tun_get_user+0x10/0x10 [ 1623.898232][T17118] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1623.898259][T17118] ? lockdep_hardirqs_on+0x7b/0x110 [ 1623.898285][T17118] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1623.898332][T17118] ? tun_get+0x1c/0x2f0 [ 1623.898369][T17118] tun_chr_write_iter+0x119/0x200 [ 1623.898406][T17118] vfs_write+0x5d5/0xb40 [ 1623.898446][T17118] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1623.898479][T17118] ? __pfx_vfs_write+0x10/0x10 [ 1623.898525][T17118] ? __fget_files+0x2a/0x420 [ 1623.898561][T17118] ksys_write+0x14b/0x260 [ 1623.898592][T17118] ? __pfx_ksys_write+0x10/0x10 [ 1623.898635][T17118] do_syscall_64+0xec/0xf80 [ 1623.898660][T17118] ? rcu_is_watching+0x15/0xb0 [ 1623.898681][T17118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.898706][T17118] ? clear_bhb_loop+0x60/0xb0 [ 1623.898735][T17118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.898759][T17118] RIP: 0033:0x7faa4624e1ff [ 1623.898780][T17118] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1623.898802][T17118] RSP: 002b:00007faa44474000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1623.898847][T17118] RAX: ffffffffffffffda RBX: 00007faa464a6180 RCX: 00007faa4624e1ff [ 1623.898865][T17118] RDX: 0000000000000072 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 1623.898882][T17118] RBP: 00007faa44474090 R08: 0000000000000000 R09: 0000000000000000 [ 1623.898897][T17118] R10: 0000000000000072 R11: 0000000000000293 R12: 0000000000000001 [ 1623.898912][T17118] R13: 00007faa464a6218 R14: 00007faa464a6180 R15: 00007fffa1a57248 [ 1623.898950][T17118] [ 1625.025292][T17006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1625.025307][T17006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1625.025334][T17006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1625.129056][T17006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1625.129071][T17006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1625.129093][T17006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1625.718199][T17006] hsr_slave_0: entered promiscuous mode [ 1625.719650][T17006] hsr_slave_1: entered promiscuous mode [ 1625.726661][T17006] debugfs: 'hsr0' already exists in 'hsr' [ 1625.726689][T17006] Cannot create hsr debugfs directory [ 1630.822295][T17155] binder: 17154:17155 ioctl 4018620d 0 returned -22 [ 1631.073719][T17160] FAULT_INJECTION: forcing a failure. [ 1631.073719][T17160] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.073760][T17160] CPU: 0 UID: 0 PID: 17160 Comm: syz.1.2707 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1631.073793][T17160] Tainted: [L]=SOFTLOCKUP [ 1631.073802][T17160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1631.073817][T17160] Call Trace: [ 1631.073826][T17160] [ 1631.073836][T17160] dump_stack_lvl+0xe8/0x150 [ 1631.073874][T17160] should_fail_ex+0x46c/0x600 [ 1631.073921][T17160] ? __alloc_skb+0x1dc/0x3a0 [ 1631.073950][T17160] should_failslab+0xa8/0x100 [ 1631.073974][T17160] ? __alloc_skb+0x1dc/0x3a0 [ 1631.074000][T17160] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1631.074035][T17160] ? lockdep_hardirqs_on+0x7b/0x110 [ 1631.074063][T17160] ? __alloc_skb+0x198/0x3a0 [ 1631.074093][T17160] __alloc_skb+0x1dc/0x3a0 [ 1631.074125][T17160] netlink_sendmsg+0x5c6/0xb30 [ 1631.074171][T17160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1631.074215][T17160] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1631.074247][T17160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1631.074283][T17160] __sock_sendmsg+0x21c/0x270 [ 1631.074310][T17160] ____sys_sendmsg+0x508/0x810 [ 1631.074348][T17160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1631.074388][T17160] ? import_iovec+0x74/0xa0 [ 1631.074416][T17160] ___sys_sendmsg+0x21f/0x2a0 [ 1631.074451][T17160] ? __pfx____sys_sendmsg+0x10/0x10 [ 1631.074523][T17160] ? __fget_files+0x2a/0x420 [ 1631.074547][T17160] ? __fget_files+0x3a6/0x420 [ 1631.074582][T17160] __x64_sys_sendmsg+0x1a1/0x260 [ 1631.074615][T17160] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1631.074657][T17160] ? __pfx_ksys_write+0x10/0x10 [ 1631.074703][T17160] do_syscall_64+0xec/0xf80 [ 1631.074728][T17160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.074751][T17160] ? trace_irq_disable+0x37/0x100 [ 1631.074776][T17160] ? clear_bhb_loop+0x60/0xb0 [ 1631.074805][T17160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.074827][T17160] RIP: 0033:0x7faa4624f749 [ 1631.074848][T17160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1631.074869][T17160] RSP: 002b:00007faa444b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1631.074894][T17160] RAX: ffffffffffffffda RBX: 00007faa464a5fa0 RCX: 00007faa4624f749 [ 1631.074918][T17160] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 1631.074933][T17160] RBP: 00007faa444b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1631.074947][T17160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1631.074962][T17160] R13: 00007faa464a6038 R14: 00007faa464a5fa0 R15: 00007fffa1a57248 [ 1631.074999][T17160] [ 1639.456240][T15823] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1639.610466][T15823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.610534][T15823] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1639.611244][T15823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.620821][T15823] usb 4-1: config 0 descriptor?? [ 1639.671952][T15823] rndis_host 4-1:0.0: probe with driver rndis_host failed with error -22 [ 1639.831804][T15823] usb 4-1: USB disconnect, device number 20 [ 1640.746115][T14489] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1641.056452][T14489] usb 3-1: Using ep0 maxpacket: 8 [ 1641.107737][T14489] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1641.141458][T14489] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1641.141495][T14489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1641.141660][T14489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1641.141679][T14489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1641.141696][T14489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1641.141712][T14489] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1641.141730][T14489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1641.141748][T14489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 99, setting to 64 [ 1641.366591][T14489] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1641.366628][T14489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.366652][T14489] usb 3-1: Product: syz [ 1641.367573][T14489] usb 3-1: Manufacturer: syz [ 1641.367594][T14489] usb 3-1: SerialNumber: syz [ 1641.454714][T14489] usb 3-1: config 0 descriptor?? [ 1641.471156][T17006] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1641.511089][T14489] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1641.760673][T17006] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1641.881452][T17006] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1641.966616][T17225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1641.967147][T17225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.021630][T17006] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1642.575418][T14489] usb 3-1: USB disconnect, device number 22 [ 1642.993750][T16891] udevd[16891]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1643.076467][T17006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1643.222803][T17006] 8021q: adding VLAN 0 to HW filter on device team0 [ 1643.374677][T15947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.374924][T15947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1643.440788][T15947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.452031][T15947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1647.231778][T17006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1647.311875][T17297] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 1647.648769][T17006] veth0_vlan: entered promiscuous mode [ 1647.716461][T17006] veth1_vlan: entered promiscuous mode [ 1647.979944][T17006] veth0_macvtap: entered promiscuous mode [ 1648.015628][T17006] veth1_macvtap: entered promiscuous mode [ 1648.146069][T17112] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1648.146637][T17006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1648.245505][T17006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1648.285560][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.285620][ T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.285662][ T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.285712][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.328638][T17112] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.328700][T17112] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1648.328729][T17112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.398856][T17112] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1649.673775][T17112] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1649.673800][T17112] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1650.197511][T17112] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 1650.197539][T17112] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 1650.348681][ T3597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.348706][ T3597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.371597][T17006] ieee80211 phy39: Selected rate control algorithm 'minstrel_ht' [ 1651.882955][ T38] INFO: task kworker/u8:19:8398 blocked for more than 146 seconds. [ 1651.882989][ T38] Tainted: G L syzkaller #0 [ 1651.883003][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1651.883015][ T38] task:kworker/u8:19 state:D stack:21048 pid:8398 tgid:8398 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1651.883086][ T38] Workqueue: netns cleanup_net [ 1651.883120][ T38] Call Trace: [ 1651.883129][ T38] [ 1651.883145][ T38] __schedule+0x145f/0x5070 [ 1651.883172][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1651.883218][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1651.883256][ T38] ? __pfx___schedule+0x10/0x10 [ 1651.883291][ T38] ? schedule+0x91/0x360 [ 1651.883318][ T38] schedule+0x165/0x360 [ 1651.883352][ T38] rxrpc_destroy_all_calls+0x564/0x660 [ 1651.883386][ T38] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 1651.883409][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1651.883439][ T38] ? __pfx_var_wake_function+0x10/0x10 [ 1651.883468][ T38] ? __try_to_del_timer_sync+0x34d/0x3a0 [ 1651.883509][ T38] rxrpc_exit_net+0x6f/0xc0 [ 1651.883536][ T38] ops_undo_list+0x49a/0x990 [ 1651.883573][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1651.883601][ T38] ? rt_spin_unlock+0x150/0x200 [ 1651.883641][ T38] ? rt_spin_unlock+0x161/0x200 [ 1651.883679][ T38] cleanup_net+0x4de/0x7b0 [ 1651.883712][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 1651.883746][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 1651.883773][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 1651.883802][ T38] process_scheduled_works+0xad1/0x1770 [ 1651.883860][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1651.883886][ T38] ? do_raw_spin_lock+0x121/0x290 [ 1651.883930][ T38] worker_thread+0x8a0/0xda0 [ 1651.883972][ T38] ? __kthread_parkme+0x7b/0x200 [ 1651.884013][ T38] kthread+0x711/0x8a0 [ 1651.884049][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1651.884102][ T38] ? __pfx_kthread+0x10/0x10 [ 1651.884133][ T38] ? rt_spin_unlock+0x150/0x200 [ 1651.884172][ T38] ? rt_spin_unlock+0x161/0x200 [ 1651.884204][ T38] ? __pfx_kthread+0x10/0x10 [ 1651.884239][ T38] ret_from_fork+0x510/0xa50 [ 1651.884268][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1651.884293][ T38] ? __switch_to+0xc9e/0x1480 [ 1651.884334][ T38] ? __pfx_kthread+0x10/0x10 [ 1651.884376][ T38] ret_from_fork_asm+0x1a/0x30 [ 1651.884431][ T38] [ 1651.884561][ T38] [ 1651.884561][ T38] Showing all locks held in the system: [ 1651.884572][ T38] 9 locks held by ktimers/0/16: [ 1651.884588][ T38] 1 lock held by khungtaskd/38: [ 1651.884601][ T38] #0: ffffffff8d5ae980 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1651.884700][ T38] 3 locks held by kworker/u8:14/3597: [ 1651.884717][ T38] 7 locks held by udevd/5168: [ 1651.884731][ T38] 2 locks held by getty/5559: [ 1651.884749][ T38] #0: ffff88823bfaa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1651.884811][ T38] #1: ffffc90003e932e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 1651.884869][ T38] 3 locks held by kworker/u9:4/5808: [ 1651.884886][ T38] 3 locks held by kworker/u8:19/8398: [ 1651.884900][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1651.884957][ T38] #1: ffffc9000f74fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1651.885013][ T38] #2: ffffffff8e898680 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0 [ 1651.885074][ T38] 3 locks held by kworker/u9:1/10054: [ 1651.885088][ T38] 1 lock held by dhcpcd/11341: [ 1651.885101][ T38] #0: ffff88805ced0278 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1651.885176][ T38] 3 locks held by kworker/u9:2/15421: [ 1651.885196][ T38] 3 locks held by kworker/u9:3/16372: [ 1651.885216][ T38] 2 locks held by kworker/u8:23/16847: [ 1651.885231][ T38] 1 lock held by udevd/16908: [ 1651.885243][ T38] #0: ffff8880334d7208 (&ep->lock){+.+.}-{3:3}, at: do_epoll_wait+0x848/0xbb0 [ 1651.885300][ T38] 4 locks held by syz-executor/17006: [ 1651.885314][ T38] 3 locks held by kworker/1:16/17112: [ 1651.885329][ T38] 2 locks held by syz.1.2709/17181: [ 1651.885353][ T38] 4 locks held by syz.1.2732/17291: [ 1651.885367][ T38] 4 locks held by syz.2.2734/17303: [ 1651.885381][ T38] 1 lock held by dhcpcd/17325: [ 1651.885394][ T38] [ 1651.885401][ T38] ============================================= [ 1651.885401][ T38] [ 1651.885412][ T38] NMI backtrace for cpu 1 [ 1651.885431][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1651.885462][ T38] Tainted: [L]=SOFTLOCKUP [ 1651.885470][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1651.885485][ T38] Call Trace: [ 1651.885495][ T38] [ 1651.885505][ T38] dump_stack_lvl+0xe8/0x150 [ 1651.885538][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1651.885572][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1651.885601][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1651.885637][ T38] sys_info+0x135/0x170 [ 1651.885666][ T38] watchdog+0xf95/0xfe0 [ 1651.885698][ T38] ? watchdog+0x20a/0xfe0 [ 1651.885732][ T38] kthread+0x711/0x8a0 [ 1651.885768][ T38] ? __pfx_watchdog+0x10/0x10 [ 1651.885793][ T38] ? __pfx_kthread+0x10/0x10 [ 1651.885823][ T38] ? rt_spin_unlock+0x150/0x200 [ 1651.885864][ T38] ? rt_spin_unlock+0x161/0x200 [ 1651.885894][ T38] ? __pfx_kthread+0x10/0x10 [ 1651.885928][ T38] ret_from_fork+0x510/0xa50 [ 1651.885957][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1651.885980][ T38] ? __switch_to+0xc9e/0x1480 [ 1651.886019][ T38] ? __pfx_kthread+0x10/0x10 [ 1651.886051][ T38] ret_from_fork_asm+0x1a/0x30 [ 1651.886098][ T38] [ 1651.886143][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1651.886178][ C0] NMI backtrace for cpu 0 [ 1651.886197][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1651.886223][ C0] Tainted: [L]=SOFTLOCKUP [ 1651.886230][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1651.886242][ C0] RIP: 0010:stack_trace_consume_entry+0x9e/0x280 [ 1651.886269][ C0] Code: 74 21 41 ff cc 41 0f b6 04 17 84 c0 0f 85 78 01 00 00 44 89 23 b0 01 e9 99 00 00 00 31 c0 e9 92 00 00 00 48 89 f8 48 c1 e8 03 <80> 3c 10 00 74 29 49 89 ff 48 89 74 24 08 49 89 d4 4c 89 04 24 4c [ 1651.886285][ C0] RSP: 0018:ffffc90000157218 EFLAGS: 00000a02 [ 1651.886302][ C0] RAX: 1ffff9200002ae64 RBX: ffffc9000015732c RCX: 0000000000000000 [ 1651.886317][ C0] RDX: dffffc0000000000 RSI: ffffffff88b7573a RDI: ffffc90000157320 [ 1651.886331][ C0] RBP: 1ffff9200002ae66 R08: ffffc90000157330 R09: 000000000000000b [ 1651.886345][ C0] R10: ffffc900001572b8 R11: ffffffff81abaf20 R12: 0000000000000000 [ 1651.886360][ C0] R13: 1ffff9200002ae65 R14: ffffc90000157328 R15: 1ffff9200002ae65 [ 1651.886376][ C0] FS: 0000000000000000(0000) GS:ffff888126ceb000(0000) knlGS:0000000000000000 [ 1651.886392][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1651.886406][ C0] CR2: 0000555583dcd490 CR3: 000000000d3a8000 CR4: 00000000003526f0 [ 1651.886425][ C0] Call Trace: [ 1651.886432][ C0] [ 1651.886439][ C0] ? net_rx_action+0x64a/0xdb0 [ 1651.886463][ C0] ? skb_release_data+0x62d/0x7c0 [ 1651.886488][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1651.886512][ C0] arch_stack_walk+0x110/0x150 [ 1651.886539][ C0] ? net_rx_action+0x64a/0xdb0 [ 1651.886563][ C0] stack_trace_save+0x9c/0xe0 [ 1651.886586][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1651.886614][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1651.886640][ C0] kasan_save_track+0x3e/0x80 [ 1651.886666][ C0] ? kasan_save_track+0x3e/0x80 [ 1651.886691][ C0] ? kasan_save_free_info+0x46/0x50 [ 1651.886712][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1651.886739][ C0] ? kmem_cache_free+0x18f/0x8d0 [ 1651.886767][ C0] ? skb_release_data+0x62d/0x7c0 [ 1651.886791][ C0] ? sk_skb_reason_drop+0x127/0x170 [ 1651.886815][ C0] ? ip6_mc_input+0x8de/0xb70 [ 1651.886835][ C0] ? NF_HOOK+0x30c/0x3a0 [ 1651.886852][ C0] ? __netif_receive_skb+0xd3/0x380 [ 1651.886877][ C0] ? process_backlog+0x315/0x8f0 [ 1651.886898][ C0] ? __napi_poll+0xae/0x520 [ 1651.886941][ C0] kasan_save_free_info+0x46/0x50 [ 1651.886963][ C0] __kasan_slab_free+0x5c/0x80 [ 1651.886991][ C0] kmem_cache_free+0x18f/0x8d0 [ 1651.887019][ C0] ? skb_release_data+0x62d/0x7c0 [ 1651.887047][ C0] skb_release_data+0x62d/0x7c0 [ 1651.887078][ C0] sk_skb_reason_drop+0x127/0x170 [ 1651.887110][ C0] ip6_mc_input+0x8de/0xb70 [ 1651.887134][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1651.887155][ C0] ? skb_dst+0x71/0xd0 [ 1651.887175][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 1651.887195][ C0] NF_HOOK+0x30c/0x3a0 [ 1651.887213][ C0] ? skb_orphan+0x4f/0xd0 [ 1651.887233][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1651.887251][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1651.887269][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1651.887289][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1651.887318][ C0] ? process_backlog+0x272/0x8f0 [ 1651.887340][ C0] __netif_receive_skb+0xd3/0x380 [ 1651.887368][ C0] ? process_backlog+0x272/0x8f0 [ 1651.887389][ C0] process_backlog+0x315/0x8f0 [ 1651.887418][ C0] __napi_poll+0xae/0x520 [ 1651.887440][ C0] net_rx_action+0x64a/0xdb0 [ 1651.887462][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1651.887490][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1651.887517][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1651.887551][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1651.887577][ C0] handle_softirqs+0x1df/0x650 [ 1651.887604][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1651.887628][ C0] run_ktimerd+0x69/0x100 [ 1651.887652][ C0] smpboot_thread_fn+0x542/0xa60 [ 1651.887677][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1651.887705][ C0] kthread+0x711/0x8a0 [ 1651.887733][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1651.887757][ C0] ? __pfx_kthread+0x10/0x10 [ 1651.887782][ C0] ? rt_spin_unlock+0x150/0x200 [ 1651.887811][ C0] ? rt_spin_unlock+0x161/0x200 [ 1651.887837][ C0] ? __pfx_kthread+0x10/0x10 [ 1651.887865][ C0] ret_from_fork+0x510/0xa50 [ 1651.887886][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1651.887906][ C0] ? __switch_to+0xc9e/0x1480 [ 1651.887936][ C0] ? __pfx_kthread+0x10/0x10 [ 1651.887962][ C0] ret_from_fork_asm+0x1a/0x30 [ 1651.887999][ C0] [ 1651.888228][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1651.888252][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1651.888282][ T38] Tainted: [L]=SOFTLOCKUP [ 1651.888290][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1651.888303][ T38] Call Trace: [ 1651.888311][ T38] [ 1651.888321][ T38] vpanic+0x1e0/0x670 [ 1651.888365][ T38] panic+0xb9/0xc0 [ 1651.888398][ T38] ? __pfx_panic+0x10/0x10 [ 1651.888433][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1651.888465][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1651.888504][ T38] watchdog+0xfdf/0xfe0 [ 1651.888536][ T38] ? watchdog+0x20a/0xfe0 [ 1651.888572][ T38] kthread+0x711/0x8a0 [ 1651.888608][ T38] ? __pfx_watchdog+0x10/0x10 [ 1651.888634][ T38] ? __pfx_kthread+0x10/0x10 [ 1651.888665][ T38] ? rt_spin_unlock+0x150/0x200 [ 1651.888704][ T38] ? rt_spin_unlock+0x161/0x200 [ 1651.888737][ T38] ? __pfx_kthread+0x10/0x10 [ 1651.888771][ T38] ret_from_fork+0x510/0xa50 [ 1651.888800][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1651.888830][ T38] ? __switch_to+0xc9e/0x1480 [ 1651.888870][ T38] ? __pfx_kthread+0x10/0x10 [ 1651.888905][ T38] ret_from_fork_asm+0x1a/0x30 [ 1651.888959][ T38] [ 1651.889564][ T38] Kernel Offset: disabled