last executing test programs: 9m52.713548464s ago: executing program 4 (id=2560): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x180) socket$inet(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x40000002) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r6], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a"], 0xfe33) r7 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pidfd_getfd(r7, r0, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) 9m52.604599455s ago: executing program 4 (id=2562): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x10}, 0x17, 0x7}, 0x0) (async) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x8}, 0x2) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x4, 0x852}}]}]}]}, 0x4c}}, 0x0) (async) syz_usb_connect(0x2, 0x5c, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x0) 9m51.897811026s ago: executing program 4 (id=2564): read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020, 0x0, 0x0}, 0x2020) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000006f440000000000006b0a00fe000000007303000000000000b500feff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1"], 0x0}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000002900)={0x18, 0x0, r0, {0x7}}, 0x18) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x0) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000000)) r9 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x3) pselect6(0x40, &(0x7f0000000100)={0x0, 0xb, 0xfffffffffffffffe, 0x0, 0xf, 0x0, 0xfffffffffffffffe, 0x6}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x7, 0x806d, 0x80010000000000, 0x6a9, 0x100000001}, 0x0, 0x0) ioctl$TCXONC(r9, 0x540a, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)={0x28, 0x19, 0x15, 0x0, 0xffffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @typed={0xc, 0x12, 0x0, 0x0, @str='\x00\x00\x11\x11\"\"33'}]}, 0x28}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', 0x0}) syz_clone(0x0, 0x0, 0xfffffffffffffc57, 0x0, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r11, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xfffff800, 0x13}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000000) 9m50.916637568s ago: executing program 4 (id=2567): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) r2 = epoll_create(0x7) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20002000}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x20000001}) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="82fb0dc167a4f32cbf016f4b2dd1d26a6bf62ce216ab7f01e0aeeb3a04e5", 0x1e}, {&(0x7f0000000140)='\x00', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000004c0)}}], 0x2, 0x4404c880) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x81901) move_mount(r7, &(0x7f0000000140)='.\x00', r8, &(0x7f0000000180)='./file0\x00', 0x0) 9m49.765367227s ago: executing program 4 (id=2577): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000140)={0x0, 0x30, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_ublk_setup_io_uring(0x782b, &(0x7f0000000780)={0x0, 0x56bd, 0x2, 0x3, 0x2c7}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e6fc3f000000000000040000bc52fa75bc6c6968a4808fd16d0a00850000004a0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 9m48.237415818s ago: executing program 4 (id=2584): read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020}, 0x2020) sched_setattr(0xffffffffffffffff, &(0x7f0000000280)={0x34, 0x0, 0x10000026, 0x7f, 0x8530, 0x11, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffd}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3, 0x10000}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) socket$rds(0x15, 0x5, 0x0) r9 = syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) eventfd2(0x1, 0x80001) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r13 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r13, r14, r15, r16, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) r19 = dup(r18) syz_ublk_setup_queues(r19, r17, &(0x7f0000000180)={0x0, 0x1, 0x400, 0x5, 0x255}, &(0x7f0000000a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x3, 0xff, 0x0, r19}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xb2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r19}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x1, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) io_uring_register$IORING_REGISTER_EVENTFD(r9, 0x4, &(0x7f0000000080), 0x1) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 9m47.97789181s ago: executing program 32 (id=2584): read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020}, 0x2020) sched_setattr(0xffffffffffffffff, &(0x7f0000000280)={0x34, 0x0, 0x10000026, 0x7f, 0x8530, 0x11, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffd}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3, 0x10000}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) socket$rds(0x15, 0x5, 0x0) r9 = syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) eventfd2(0x1, 0x80001) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r13 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r13, r14, r15, r16, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) r19 = dup(r18) syz_ublk_setup_queues(r19, r17, &(0x7f0000000180)={0x0, 0x1, 0x400, 0x5, 0x255}, &(0x7f0000000a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x3, 0xff, 0x0, r19}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xb2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r19}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x1, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) io_uring_register$IORING_REGISTER_EVENTFD(r9, 0x4, &(0x7f0000000080), 0x1) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 1m20.853678626s ago: executing program 5 (id=7878): openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc957, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7c, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x2, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x4, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x171, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0xa34d, 0x44a, 0x100007, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xfffe, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfbf, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x3, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0x81, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000000, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x8, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x4f78, 0x2, 0xcc52, 0xe, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10012, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0xf, 0x6, 0x1c, 0x120000, 0x9, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0xfffe, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0xffffffff, 0x1, 0xffffffff, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0x4, 0x23, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x1) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1000000000000082) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0x2, 0xffffffff80000202, 0x0, 0xfffd, 0x605, 0x6}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x109081, 0x34) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x28, 0x0, 0x3ff, {{0x202, 0x1, 0x1, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r6, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x700}) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259", 0x5}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000180)={'L-', 0x1}, 0x16, 0x0) sendmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000000340)="10959e9532e962b76f", 0x9}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x2, @ANYBLOB="0600150008000000200016"], 0x60}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) recvmmsg(r0, &(0x7f0000007b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/242, 0xf2}], 0x1}, 0x6}], 0x1, 0x0, 0x0) 1m20.686361982s ago: executing program 5 (id=7879): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88901) move_mount(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x232) 1m20.57604298s ago: executing program 5 (id=7881): syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f00000004c0)=[{0x4, 0x20, 0x0, 0x0}], 0x1}) 1m19.324597866s ago: executing program 5 (id=7887): syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0xffffffff}, {@host=0x10, 0x1}, 0x400, "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"}, 0x418, 0x2001}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000200)={0x0, 0x0, 0x7fffffff}) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x200408d0) pidfd_send_signal(r0, 0x21, 0x0, 0x0) process_mrelease(r0, 0x0) 1m19.228902982s ago: executing program 5 (id=7888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x0, 0x7, [@remote, @broadcast, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}]}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/../file0\x00', &(0x7f0000000180)={0x6080, 0x0, 0x1}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd600100080000d31321fb7bc2da283afffe8000000000000000000000000000aaff0200000000000000000000000000018700907800000000fe8000000000000000000000000000bb0e020000000000000000000000000001c200738d1039f681dfbcf67bdf06d9fcb21af1d56f9e923be3f5d8df5294b15401c302c06823d8c19308ca6134658c6f0648e13fa2a80a843178b9a2f82eba31955a87751feecc81302eda0febeaa096238dda189e8b3ec9f73fe4ed1a7e0c36d8e3fcd9da3adb932a"], 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) socket(0x1d, 0x2, 0x6) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newtfilter={0x70, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x80) 1m19.16179931s ago: executing program 5 (id=7889): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xdf) pipe2$watch_queue(&(0x7f0000000380), 0x80) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0xa, 0xd0e0000, 0x100, 0x100, 0x190, 0x1d8, 0x1d8, 0x190, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x0, {0x1}}}, @common=@inet=@l2tp={{0x30}, {0x2, 0x1, 0x23, 0x0, 0xc}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4, 0x4}, {0x0, 0x6, 0x1}}}}, {{@ip={@private=0xa010100, @loopback, 0x0, 0xffffffff, 'batadv0\x00', 'tunl0\x00', {}, {0xff}, 0x11, 0x3}, 0x3202, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffffe, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c05010000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10}, 0x94) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0xa0, 0x6, 0x321, 0x3, 0x0, 0x101, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r7 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) unshare(0x42070e00) sendfile(r3, r3, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) 1m4.046511096s ago: executing program 33 (id=7889): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xdf) pipe2$watch_queue(&(0x7f0000000380), 0x80) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0xa, 0xd0e0000, 0x100, 0x100, 0x190, 0x1d8, 0x1d8, 0x190, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x0, {0x1}}}, @common=@inet=@l2tp={{0x30}, {0x2, 0x1, 0x23, 0x0, 0xc}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4, 0x4}, {0x0, 0x6, 0x1}}}}, {{@ip={@private=0xa010100, @loopback, 0x0, 0xffffffff, 'batadv0\x00', 'tunl0\x00', {}, {0xff}, 0x11, 0x3}, 0x3202, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffffe, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c05010000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10}, 0x94) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0xa0, 0x6, 0x321, 0x3, 0x0, 0x101, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r7 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) unshare(0x42070e00) sendfile(r3, r3, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) 18.349130359s ago: executing program 6 (id=8313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800800014000000014c16dad77046b7a2905000300000000000900020073797a3200000000141100010000000000000000000200000a000000"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000040)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r2}, &(0x7f0000000040)=""/58, 0x3a, &(0x7f0000000140)={&(0x7f0000000100)={'hmac(sha256-neon)\x00'}}) 18.002083421s ago: executing program 6 (id=8314): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {{@in6=@empty, @in=@empty, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000, 0xffffffffffffffff}, 0x800, 0x6e6bb0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x20004004) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/106, 0x6a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 17.925458408s ago: executing program 6 (id=8315): syz_io_uring_setup(0x1716, &(0x7f0000000280)={0x0, 0xb77f, 0x1000, 0x0, 0x269}, &(0x7f00000001c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x5036c2, 0x0) sigaltstack(&(0x7f0000000200)={0x0, 0x80000001}, 0x0) sigaltstack(0x0, &(0x7f0000000180)={0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = io_uring_setup(0x539d, &(0x7f0000000340)={0x0, 0x86b8, 0x40000, 0x1000, 0x126}) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c000000010700000000000000000000000c00064000000000000000090c00064000000000000000000c00064000000000000000000900010073797a31080000000900010073797a30000000000c0002400000000000000005da031db28c2e74b5f1d6c0c969b74bf705d165b4d7e23dd3774c9bb75bf7e7ba61"], 0x5c}, 0x1, 0x0, 0x0, 0x40041}, 0x8010) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x100000000000000, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r1, r1, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x548, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0xe8, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x3, 0x6, 0xd, 0x5, 0x4, 0x1, 0x5, 0x9, [{0x8, 0x1, 0x19, 0x7}, {0x0, 0x7, 0xfe000000, 0x1}, {0x9, 0x4, 0x4, 0x4}, {0x7, 0x7, 0xd, 0x1}, {0x5, 0x0, 0x3, 0xffffffff}, {0x101, 0x398, 0x8, 0x2}, {0x9, 0x0, 0x8, 0x80000036}, {0x4, 0xe8c, 0xcc, 0x5}, {0xff, 0x43, 0x347c, 0x1a80}, {0xc, 0x80, 0xffffffff, 0xc0000000}, {0x7, 0xe, 0xcf1713ac, 0x35ad5b6d}, {0x1, 0x6, 0xff, 0x4}, {0x0, 0xffff, 0x78e, 0x400}]}}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x42c, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_ACT={0x414, 0x1, [@m_mpls={0x90, 0x15, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x1, 0x0, 0x5, 0x1}, 0x4}}]}, {0x3e, 0x6, "7a4ec7fe84de0a8ea459f483db8265b7d855f217a4f2ab0fa0968abb43530a9bb44a23f0eb76d97622955bbdef1da0fa9484709e202da1b8b3dc"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_vlan={0xa4, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0x78, 0x6, "df90557931e06f2a7040e3b5adcc9ea9a47f9f1aa1243a35cc3b03894dce71c8e2709fd50654659e97d51ce3fdba5888cc5db003b0465b96a9c6547d490b76fbbb2e17dc192df94eee108df92ffb2f1cfa157101348c0cb172068e087ba72f4fad4d46f482746f2efe9381f1efec693397a40259"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x18c, 0x18, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x41, 0x97e, 0xffffffffffffffff, 0x4, 0x7}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x990f, 0xffffffffffffffff, 0xffff, 0x80}, 0x124d}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffa, 0x4, 0x0, 0x2071, 0x8}, 0x1fed}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf97a, 0xf, 0xffffffffffffffff, 0xfffffffa}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0x8a, 0x0, 0x1, 0x101}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0x3d3, 0x1, 0x5, 0x31}, 0xfffb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x2, 0xd5c, 0x4}, 0xaf}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1f7, 0x7ff, 0x7, 0x4, 0x2}, 0x1}}]}, {0x7a, 0x6, "62222a8a9cef52c52d5bb403427ddead036b0ad6a7921d96d5b2160c9350e22f585453c860ecf61fefc8c77f5791b1edd379acbf35f027b4602d82823aa92242b9b79d90508c262cb94d7947100bd85725e2c00a3ee1adfb55aac40990b0f81ec9b72feed853a6df2c8b32c59ff09f0878229ee0b21e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x150, 0x2, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_LABELS={0x14, 0x7, "4a9dcafbf706681c49f63b204302b579"}, @TCA_CT_ACTION={0x6, 0x3, 0x10}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x548}}, 0x0) 16.963329575s ago: executing program 6 (id=8319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x13, 0x2000}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a050400000000000000000500000008000240000000030900010073797a3000000000140000001100010000000000000000000500000a1adefb25710d7bc09f09de9e3a3ebfbee9f226fea3cf557e6076dda4891840666ec0c354a59cad2cd7584b6be0658019651beeb42078d9956ab122ffc57ce08896fe1b84123b9cff68cf6efe02f21508dd36f186fcfe534659d196416a6e5a7b681cd41c74beeb826282172558b4e5aabb173b"], 0x50}}, 0x4000010) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000030a01010000000000000000050000000900010073b987bfd97571c447797a30000000000900030073797a3000000000140004800800014000000001bcaa33fca778760f28f96192080002400000000a"], 0x68}}, 0x0) close(0x3) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff", 0x8) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0xe, 0x0, 0x0, {}, {0x0, 0x2}, 0x2, 0x2, {&(0x7f0000001000)}, 0x401000}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000001c0)=0x2) move_mount(r3, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000180)={@id={0x2, 0x0, @a}}) fcntl$addseals(r0, 0x409, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 16.848156121s ago: executing program 6 (id=8320): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) close(0x3) syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) (async) close(0x3) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async) 16.629811947s ago: executing program 6 (id=8322): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x1400, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001200578300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000004"], 0x38}}, 0x0) 16.240978666s ago: executing program 34 (id=8322): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x1400, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001200578300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000004"], 0x38}}, 0x0) 7.42596871s ago: executing program 0 (id=8369): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000000c640)={0x0, 0x0, &(0x7f000000c600)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000200001002dbd7000fbdbdf2502002000000000031e0000de92fdef000138c8fa0fe6d500db1414aa0c000c4000000000000000e9886f78b63e7ab35b36ca4ffca47ec7849eb1d4319d6a824d6f270d2e1946090de42d1fdda547c950aad0be9ec77acd2faa9b7dfb5cd04a886df09be38ef724d3a216e9412a6b41f90f7eb3e696df31dcf44bd75f69328e4d274bac94f2ae03092fdf987312125b86d0b5d7470ae4ed9c90cbf5d552001a42776d4f3c7110cd7658feb8d7e04b6b440c58133563bc5cd45da469fd585128f11dcd8954ef888938bad95de0180546b2cd08e360966767a4df044c8ad752a3fd31b88cb7ee585d566ae0011089e74f85f6811bf9ffc77e37296ff5f800330e35dff9bfccfe0840d66af0d7104949fa9cd7c73b88d1e3034daa8a5fe6870e046d4b2e42a7db707d047eb1fdcf4374d2b38c3db24431e95cccf72aff263498c9da1cc87cc84cb4c44300"/360], 0x38}, 0x1, 0x0, 0x0, 0x6044001}, 0x4000054) getpriority(0x1, 0x18) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x0, 0x4, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xf, 0x800000}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in=@loopback, 0x4e22, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r3}, {0xfffffffffffffffd, 0x1, 0xc, 0x0, 0x3, 0x400000000000003}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d2, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x616a45e7, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x3, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000ff00f005020500130a0007003500281014000000190005407f0a006d0004000000d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x4000) 7.232959053s ago: executing program 0 (id=8370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x7, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x200, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x7, 0x1}) 6.809229557s ago: executing program 0 (id=8372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x5c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x2000}, [@CTA_TUPLE_ORIG={0x4, 0x2}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x14, 0x4, @empty}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80c9}, 0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400"], 0x0) 6.664862229s ago: executing program 7 (id=8375): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x60, 0x42, 0x1, 0x70bd25, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3e, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00002c000111000001f500010244132403b1fd606412c3258e3d67aa5b0001000000000000003b00"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x60}}, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r2, 0x6, &(0x7f0000000040)=0x8325) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) socketpair(0xb, 0x1, 0x1b06, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x343440, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f0000000c00), &(0x7f0000002000)=0xffffffffffffff04) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) unshare(0x42040400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x804) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) socket$rds(0x15, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 5.301228054s ago: executing program 7 (id=8376): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = fsopen(&(0x7f0000000340)='overlay\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='workdir', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r4, 0x29, 0x39, 0x0, &(0x7f0000000140)) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000200)={0x100, r6}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r7 = inotify_init() r8 = inotify_add_watch(r7, &(0x7f0000000280)='.\x00', 0x25000001) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) poll(&(0x7f0000000440)=[{r9, 0x5510}], 0x1, 0xa) inotify_rm_watch(r7, r8) close(r6) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.005710145s ago: executing program 7 (id=8377): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000180001003bbd70000000000002200000fd00fd090000000008001e000300000008000400d7"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (fail_nth: 6) 4.829246859s ago: executing program 7 (id=8378): setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000100)={0x0, 0x2710}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) write(0xffffffffffffffff, &(0x7f0000000140)="a1da6c6c49d01d4d1d88903c419719b62cb6891fcf32d67dc24716928683ce0b3df076dcd67ff9c3193c66cb8cd28d326644006c1425b4494a98f64f323124ee291ad5a8bec387d0a15108a71be604fe2f9cdc5c08931fa230ddfa6f544815d0db3677d974d481d735de3950d344727d7cd320f709921c6c65e7810783d2d80875bfd6fab7c3e0aeaa3b1ce6c26df48ee5fc90c62a4caef88d198ead20520e", 0x9f) syz_usb_connect$uac2(0x0, 0x92, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150020000004082050142400001020301090280000301070008080b00010100200f0904000000010120000924010900042000030b240604f00a00030009000c2403010000090204"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 4.114842475s ago: executing program 3 (id=8386): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r2, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1}, 0x3}], 0x1, 0x40, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e23, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x5, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x4000010) 3.989214854s ago: executing program 3 (id=8387): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = fsopen(&(0x7f0000000340)='overlay\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='workdir', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r4, 0x29, 0x39, 0x0, &(0x7f0000000140)) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000200)={0x100, r6}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r7 = inotify_init() r8 = inotify_add_watch(r7, &(0x7f0000000280)='.\x00', 0x25000001) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) poll(&(0x7f0000000440)=[{r9, 0x5510}], 0x1, 0xa) inotify_rm_watch(r7, r8) close(r6) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.973676063s ago: executing program 3 (id=8388): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffff}, {0xb, 0x8}, {0xfff1, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 2) 3.929730431s ago: executing program 3 (id=8389): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b14201f2ca86c43fa4feb6c629c304cff8dde504000001090238000100c7690600000009041000"/64], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2014120000003219fad1a560da0781c2106a5bd2cb999f", @ANYRES16=r0], 0x0, 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x5, 0xe}) (rerun: 64) r1 = add_key$user(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000300)='h', 0xf, 0xfffffffffffffffe) (async) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r3 = socket$kcm(0x29, 0x6, 0x0) sendmsg$kcm(r3, &(0x7f0000000a80)={&(0x7f0000000480)=@rc={0x1f, @any, 0x7}, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000040)}, 0x1) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r2}, &(0x7f0000000280)=""/65, 0x41, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000040)=ANY=[]) 3.711223449s ago: executing program 0 (id=8391): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000880), 0x40000, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000008c0)={0x28, 0xc, 0x0, 0x0, 0x7, 0xc9, 0x9fffffffffffffff}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) writev(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)="016234c1f139669bd593eef4dc9e84df6028479d7df3e2f156687dd1d16a93c0c1a8743b51dae3d977443e52a22f04530cc63cb733352ec75f0a70140a6eef7e1080ab32506b6dce00c1d69c3a72b09f639c07e021726fafce0e00c70beaefdc5b579394b1b172455481b0505f6e", 0x6e}, {&(0x7f0000000280)="ce10ec700b0db85872e7f2e3a8bbf3e17697da14a9edd906a0b3f8dab3c3bf15c0f5cbc839077efd1493eb3c10f598f18ccad9ab1ffdd2583f5c0815b382f26465ad5a9d302824c9768a81b58884d2618fa31b2177afca5a8b7232c1a99bb1c9f519a7aeff634ab12f1852eadef36fa83e0176eb10f5c31de1bbffaabeb6aa62c1f580218749ac26a1583306f1d400d6fcff938eb7b48a130f36239bf73e92a20198570b074f5ab278ac45241f6d3f77025332e094e555aecc41a2b1ceedc53e66a1bf15f651a4f0b456acfebe6c4c7710ad667ba3328989fd1f5e97bdeeae5731a04e516d284fc5965ac7bf60c70f85bc74bc89c90d", 0xf6}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32, @ANYBLOB="0100000002"], 0x40) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x2, @loopback, 0x7}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x7, @private2, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff"], 0x28}}], 0x2, 0x4040800) 3.679599878s ago: executing program 0 (id=8392): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) poll(&(0x7f0000000040)=[{r1, 0x2}], 0x1, 0x80000000) close(0x3) 3.382079288s ago: executing program 7 (id=8395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0x4, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x5}, {0x6, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048044}, 0x2008c010) (async) socket$inet6(0xa, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) (async) r9 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) (async, rerun: 32) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000040)=0x1) (async, rerun: 64) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000080)=0x2) (async, rerun: 64) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xfffe, 0x6, 0xfffa}, 0x52, [0x8000, 0xc95a, 0x10, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0xa, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x2, 0x7, 0x205, 0x8, 0x4c74, 0xffff7fff, 0xe06, 0x3, 0xe, 0x0, 0x3fc0000, 0x7, 0x1000017, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x0, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x7, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x20000000, 0x4, 0x1007, 0x0, 0x8, 0x400, 0x401, 0x6, 0x0, 0x20000ff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x48, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8003, 0x1, 0xfe000000, 0xffef, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000008, 0x7, 0x0, 0x3, 0x9, 0x8c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x5, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0xd, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x1, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x4, 0x5, 0x84c0, 0x30b1d693, 0xa1f, 0xfffffc00, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) (async, rerun: 32) ppoll(&(0x7f00000000c0)=[{r3}, {}], 0x2, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 2.957926282s ago: executing program 2 (id=8397): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, 0x0, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xfcff}, {}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r4, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000380)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r5, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.881282271s ago: executing program 1 (id=8398): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000800)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r7 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xa100) preadv(r7, &(0x7f0000001d80)=[{0x0}, {&(0x7f0000000180)=""/119, 0x77}], 0x2, 0x2, 0xd) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x5, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000c}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x400180, 0x8) accept(r12, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000280)=0x80) r13 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r13, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) ioctl$IOCTL_VMCI_INIT_CONTEXT(r12, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) setsockopt$IP_VS_SO_SET_ADDDEST(r12, 0x0, 0x487, &(0x7f0000000400)={{0x2f, @loopback, 0x1, 0x0, 'none\x00', 0x12, 0x1, 0x74}, {@empty, 0x4e21, 0x3, 0x9, 0xfffffffb, 0x10000}}, 0x44) close(r13) 2.783116783s ago: executing program 0 (id=8399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10002, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x40000, 0x7fff25c8, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x5, 0x0, 0xffffffff, 0xffffffff, 0x302e, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x3, 0x9, 0x2, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r3) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000001100)={0x6, 0x8000000000000001, 0x2}) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000d2000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e7b000/0x4000)=nil, &(0x7f00001a5000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3b6}) write$char_usb(r4, &(0x7f0000001140)="a3558bfeb15dab1a601ecb865ca20af7bd97b7cafe1ccac92536b85472e6a3020c37f39936325bccbd1d275f7b990b115c54945bf93a000049957d5e0aec310346d49698c282d3acd25097267938f725da1f8144ff87d46c2d42290ae1cabf71349e17325f37517af6c822bde152393dc650842a5f8b9308976d31673b4c72e74808dcd179a7", 0x86) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x6145, 0x7721, 0x17, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000016c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1, 0x0, 0x6, 0x81, 0x3, 0x3e, 0x299, 0x1c7, 0x38, 0xe0, 0x5, 0x9, 0x20, 0x3, 0x3, 0x5, 0x100}, [{0x2, 0x3, 0x3, 0x1c000000, 0x0, 0x7, 0x5, 0x8}, {0x7, 0xa5b, 0x18000, 0x9, 0x800, 0x4, 0x1, 0x10}, {0x70000000, 0x6b, 0x0, 0x400, 0x2, 0x3, 0xd02, 0x6}], "e5a529b3096472f65b9a15756c49e1b2ef21338bd755847bab5c4bfd18f0d25fbe3077c344045637890054d18a251088754087b192281b703e1a4dbd6e49db7e1b0629de38c6e3b001e56e5de1305efd5a7f20b79c606b03584193daad6b714b4d106f657e83d1093f1d9513f27acf24c91a"}, 0x10a) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1bd) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000037fb1d7d74dfc4a28bf4dd832b28e9323602aaf78638bd55770001000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r8, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r8, 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000080)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="180000", @ANYRES32=r6, @ANYBLOB="000000000000000018110000", @ANYRES32=r7, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.293525215s ago: executing program 7 (id=8400): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f0000000240)=[{r1, 0x8001}], 0x0, 0x0, 0x0, 0xfffffffffffffcde) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r2, 0x301, 0x70bd28, 0x0, {{}, {@val={0x8, 0x1, 0x63}, @void, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x28}}, 0x44) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, 0x0, 0x0, r3) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, &(0x7f0000000340)={0x40, 0xd, 0x77, {0x77, 0x24, "777d85a20a3da89ef019bf4872466c9b0f21b32bfdc33e0d1118e50dc0763dd7401c2dc0d6d33686e61b45f94df6de5c36c9ee7ba5000513e37e258909e2f9eabe2de9bf9516972e4512772e2a7a8d06ff658b7f0ef9e4e25eae8650bb3523d5302473ca064b9e33c93f816c3eb746cbdf3524a147"}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400000004030110"], &(0x7f0000000500)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x4, "8b3ce18d"}, @local=@item_4={0x3, 0x2, 0x1, "ec11195e"}, @main=@item_012={0x1, 0x0, 0xb, 's'}, @main=@item_012={0x1, 0x0, 0x9, 'D'}, @main=@item_012={0x1, 0x0, 0xa, "a1"}, @local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x7, "fbd99817"}, @main=@item_012={0x1, 0x0, 0xa, '\"'}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x8, 0x1, {0x22, 0xa88}}}}, &(0x7f0000000840)={0x2c, &(0x7f00000005c0)={0x0, 0xe, 0x89, "073c294ff146d6c61fb34bd3f23bebd44641ec0cb9a03aad799fc3a8344485d1b773e01b8afaf41fdba2c3270d6dd0df558ad242163f3b1cec1ae43846d117c2862925b5b35ab073810d63b04ffaa2e70f7f4bd3715f422393cb81b22b069974f0eb653fd7ec48434655cf9963ae4dab7582867bab61fe582a4ad93f3744bc17bea95f13432e503cf5"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x3b}, &(0x7f0000000740)={0x20, 0x1, 0x2, "d093"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x3}}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x0, 0xffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0xc5da}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x1}}]}, 0x70}, 0x1, 0x7}, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x2, 0x1, 0x10001000}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$DRM_IOCTL_SG_FREE(r7, 0x40106439, &(0x7f0000000200)={0x5}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r6, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.236610881s ago: executing program 2 (id=8401): writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000200)="aefdf79d240303005a90f57f07703a", 0xf}], 0x1) r0 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r0, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) (fail_nth: 1) 2.181738843s ago: executing program 2 (id=8402): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0x8f}]}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@bridge_dellink={0x28, 0x13, 0x1, 0x1, 0x0, {0x7, 0x0, 0x0, r3, 0x30044, 0x141}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004881}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@bridge_dellink={0x28, 0x13, 0x1, 0x1, 0x0, {0x7, 0x0, 0x0, r3, 0x30044, 0x141}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004881}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2.062453647s ago: executing program 1 (id=8403): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) (fail_nth: 4) 1.918712019s ago: executing program 1 (id=8404): r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000001, 0x40000, 0x6, 0x901, 0x0, 0xfffffffc, 0x5}}) 1.916346062s ago: executing program 2 (id=8405): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000010c0)={0xfffd, 0x478, 0x1ff, 0xce}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)=0x1a000, 0x4) (fail_nth: 1) 1.825197739s ago: executing program 1 (id=8406): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0, 0x12, &(0x7f0000003580)=""/19, 0x13}, 0x4000d6}], 0x1, 0x40000000, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) 1.681593573s ago: executing program 1 (id=8407): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000380)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r1, 0xe) 1.589278356s ago: executing program 2 (id=8408): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x74, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000000)) 1.009515261s ago: executing program 1 (id=8409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x38, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000004}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00680000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa02, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r4, 0x0, &(0x7f0000001680)=""/227}, 0x20) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b0030003200060063"], 0x76) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) unshare(0x2020600) ioctl$XFS_IOC_GETBMAPX(r8, 0xc0205838, &(0x7f0000000080)={0xa62, 0x1000, 0x5, 0x3, 0x0, 0x1, 0x4}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a600000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x88}}, 0x4000040) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507dfff03814006090587", @ANYRES8], 0x0) 899.566703ms ago: executing program 3 (id=8410): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x8, 0x0, [0x806f, 0x0, 0x9, 0x2, 0x6], [0x2, 0x2, 0x51e5, 0x6, 0x7fff, 0xa1e, 0x5, 0x1004, 0x91b0, 0x800, 0xb, 0x1, 0x0, 0xfffffffffffffff4, 0x20000000004a, 0x5, 0xfc, 0xd, 0x1, 0x2, 0x0, 0x2a9, 0xff, 0xfffffffffffffff9, 0x3, 0x7fffffffffffffff, 0xa, 0x4125, 0xa51, 0xe372, 0xe, 0x2000000000003, 0x0, 0x0, 0x8, 0x100, 0x7f, 0x92f, 0x4c36, 0xf792, 0x4000000008004, 0x8000000000000000, 0x7, 0x1, 0xffffffffffffffec, 0xaa, 0x3, 0x100, 0x5, 0x85, 0x538a, 0x73, 0xda, 0x0, 0x0, 0x4, 0x39, 0x7, 0x3, 0x76, 0x6, 0x6, 0x1000000000000009, 0x5bc, 0x1, 0x7f, 0x100000004, 0x8000, 0xc9, 0x8, 0x6, 0x2800000009, 0x3e, 0x7ff, 0x7a90, 0xe6, 0xa, 0x4, 0x9, 0x1d, 0x4, 0x804, 0x6, 0x8000000000000000, 0x4, 0xc, 0x6, 0x6, 0x1, 0x6, 0x3, 0x5, 0x0, 0x7, 0x7, 0x7, 0xa, 0x0, 0x16d, 0x2, 0x68d, 0xce, 0x3, 0x645d, 0x5ed, 0x0, 0x0, 0xffffffffffffdf5f, 0x4, 0x8, 0x3ff, 0x11e, 0x8, 0xc, 0x8, 0x7, 0x100000000000003c, 0x7fffffff, 0x8000000007, 0xc, 0x8]}) socket$igmp(0x2, 0x3, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000200)={0x3, @win={{0x2, 0x4, 0x9, 0x8e8}, 0x2, 0x401a, &(0x7f00000021c0)={{0x2, 0x2, 0x1, 0x40}}, 0x3317, 0x0, 0x14}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xb8002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05143f00140e1208150f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230007) close(0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4080040) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r7, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x44) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 629.474637ms ago: executing program 2 (id=8411): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc0185502, &(0x7f0000002500)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0xffffffbffffffdfc, 0xfffffffc, 0x2a, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x400, 0x1, 0x0, 0x0, 0xffff, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5691, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fff, 0x5, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x400000, 0x0, 0x40008, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000000000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfff, 0xa2, 0x200, 0x0, 0x0, 0xfffffffffffffffc, 0x80, 0xc0ab, 0x0, 0x201, 0x0, 0xfffffffe, 0x0, 0xfffffffc]}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000600)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x4}) (async) write(r0, &(0x7f0000000180)='4k', 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=8412): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd07001003f3001400000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) kernel console output (not intermixed with test programs): 75.022444][T29076] vfs_read+0x213/0xa80 [ 1075.022468][T29076] ? __pfx___mutex_lock+0x10/0x10 [ 1075.022496][T29076] ? __pfx_vfs_read+0x10/0x10 [ 1075.022516][T29076] ? __fget_files+0x2a/0x420 [ 1075.022547][T29076] ? __fget_files+0x3a2/0x420 [ 1075.022571][T29076] ? __fget_files+0x2a/0x420 [ 1075.022605][T29076] ksys_read+0x150/0x270 [ 1075.022627][T29076] ? __pfx_ksys_read+0x10/0x10 [ 1075.022659][T29076] do_syscall_64+0x166/0x520 [ 1075.022684][T29076] ? trace_irq_disable+0x3b/0x140 [ 1075.022705][T29076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.022724][T29076] ? clear_bhb_loop+0x70/0xc0 [ 1075.022747][T29076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.022766][T29076] RIP: 0033:0x7ff63dd5e9ce [ 1075.022784][T29076] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1075.022801][T29076] RSP: 002b:00007ff63ebd9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1075.022821][T29076] RAX: ffffffffffffffda RBX: 00007ff63ebda6c0 RCX: 00007ff63dd5e9ce [ 1075.022836][T29076] RDX: 000000000000000f RSI: 00007ff63ebda0a0 RDI: 0000000000000005 [ 1075.022848][T29076] RBP: 00007ff63ebda090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.022867][T29076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.022879][T29076] R13: 00007ff63e026038 R14: 00007ff63e025fa0 R15: 00007ff63e14fa48 [ 1075.022910][T29076] [ 1075.442867][T29088] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.8207'. [ 1075.550717][T29091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8209'. [ 1075.600466][T29091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8209'. [ 1075.601124][T29091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8209'. [ 1075.601386][T29091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8209'. [ 1075.601594][T29091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8209'. [ 1075.601798][T29091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8209'. [ 1075.602086][T29091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8209'. [ 1075.602292][T29091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8209'. [ 1075.602534][T29091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8209'. [ 1075.602743][T29091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8209'. [ 1075.789217][T29095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1075.923084][T29097] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1075.923298][T29097] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1075.923451][T29097] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1075.923601][T29097] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1075.923746][T29097] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1075.923920][T29097] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1075.969715][T29097] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1075.971881][T29101] FAULT_INJECTION: forcing a failure. [ 1075.971881][T29101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1075.971902][T29101] CPU: 1 UID: 0 PID: 29101 Comm: syz.0.8212 Tainted: G L syzkaller #0 PREEMPT(full) [ 1075.971916][T29101] Tainted: [L]=SOFTLOCKUP [ 1075.971921][T29101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1075.971928][T29101] Call Trace: [ 1075.971932][T29101] [ 1075.971938][T29101] dump_stack_lvl+0xe8/0x150 [ 1075.971958][T29101] should_fail_ex+0x410/0x560 [ 1075.971974][T29101] _copy_from_iter+0x1d3/0x1660 [ 1075.971989][T29101] ? __alloc_skb+0x27a/0x7a0 [ 1075.972005][T29101] ? __alloc_skb+0x27a/0x7a0 [ 1075.972019][T29101] ? __alloc_skb+0x27a/0x7a0 [ 1075.972033][T29101] ? __pfx__copy_from_iter+0x10/0x10 [ 1075.972045][T29101] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1075.972056][T29101] ? __alloc_skb+0x27a/0x7a0 [ 1075.972069][T29101] ? __alloc_skb+0x27a/0x7a0 [ 1075.972085][T29101] ? netlink_sendmsg+0x650/0xb40 [ 1075.972096][T29101] ? skb_put+0x112/0x210 [ 1075.972112][T29101] netlink_sendmsg+0x6c0/0xb40 [ 1075.972127][T29101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1075.972142][T29101] ? apparmor_socket_sendmsg+0x98/0x360 [ 1075.972157][T29101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1075.972168][T29101] sock_sendmsg_nosec+0x13a/0x180 [ 1075.972182][T29101] ____sys_sendmsg+0x54e/0x850 [ 1075.972201][T29101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1075.972221][T29101] ? import_iovec+0x73/0xa0 [ 1075.972236][T29101] ___sys_sendmsg+0x2a5/0x360 [ 1075.972252][T29101] ? __lock_acquire+0x747/0x2de0 [ 1075.972275][T29101] ? __pfx____sys_sendmsg+0x10/0x10 [ 1075.972309][T29101] ? __fget_files+0x2a/0x420 [ 1075.972325][T29101] ? __fget_files+0x3a2/0x420 [ 1075.972345][T29101] __x64_sys_sendmsg+0x1b1/0x290 [ 1075.972362][T29101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1075.972388][T29101] do_syscall_64+0x166/0x520 [ 1075.972403][T29101] ? trace_irq_disable+0x3b/0x140 [ 1075.972415][T29101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.972425][T29101] ? clear_bhb_loop+0x70/0xc0 [ 1075.972438][T29101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.972448][T29101] RIP: 0033:0x7fe02b59e199 [ 1075.972459][T29101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.972468][T29101] RSP: 002b:00007fe02c51f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1075.972480][T29101] RAX: ffffffffffffffda RBX: 00007fe02b825fa0 RCX: 00007fe02b59e199 [ 1075.972487][T29101] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1075.972494][T29101] RBP: 00007fe02c51f090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.972501][T29101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.972507][T29101] R13: 00007fe02b826038 R14: 00007fe02b825fa0 R15: 00007fe02b94fa48 [ 1075.972522][T29101] [ 1076.198534][T29103] FAULT_INJECTION: forcing a failure. [ 1076.198534][T29103] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.198566][T29103] CPU: 0 UID: 0 PID: 29103 Comm: syz.0.8213 Tainted: G L syzkaller #0 PREEMPT(full) [ 1076.198589][T29103] Tainted: [L]=SOFTLOCKUP [ 1076.198596][T29103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1076.198607][T29103] Call Trace: [ 1076.198615][T29103] [ 1076.198623][T29103] dump_stack_lvl+0xe8/0x150 [ 1076.198652][T29103] should_fail_ex+0x410/0x560 [ 1076.198680][T29103] should_failslab+0xa8/0x100 [ 1076.198704][T29103] ? skb_clone+0x212/0x3a0 [ 1076.198722][T29103] kmem_cache_alloc_noprof+0xa1/0x600 [ 1076.198755][T29103] ? skb_clone+0x212/0x3a0 [ 1076.198780][T29103] skb_clone+0x212/0x3a0 [ 1076.198801][T29103] __netlink_deliver_tap+0x413/0x860 [ 1076.198831][T29103] ? netlink_deliver_tap+0x2e/0x1b0 [ 1076.198853][T29103] netlink_deliver_tap+0x19c/0x1b0 [ 1076.198873][T29103] netlink_unicast+0x781/0x940 [ 1076.198902][T29103] netlink_sendmsg+0x813/0xb40 [ 1076.198929][T29103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.198957][T29103] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1076.198982][T29103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.199001][T29103] sock_sendmsg_nosec+0x13a/0x180 [ 1076.199024][T29103] ____sys_sendmsg+0x54e/0x850 [ 1076.199057][T29103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1076.199090][T29103] ? import_iovec+0x73/0xa0 [ 1076.199118][T29103] ___sys_sendmsg+0x2a5/0x360 [ 1076.199143][T29103] ? __lock_acquire+0x747/0x2de0 [ 1076.199167][T29103] ? __pfx____sys_sendmsg+0x10/0x10 [ 1076.199224][T29103] ? __fget_files+0x2a/0x420 [ 1076.199248][T29103] ? __fget_files+0x3a2/0x420 [ 1076.199282][T29103] __x64_sys_sendmsg+0x1b1/0x290 [ 1076.199311][T29103] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1076.199356][T29103] do_syscall_64+0x166/0x520 [ 1076.199381][T29103] ? trace_irq_disable+0x3b/0x140 [ 1076.199399][T29103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.199418][T29103] ? clear_bhb_loop+0x70/0xc0 [ 1076.199440][T29103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.199458][T29103] RIP: 0033:0x7fe02b59e199 [ 1076.199475][T29103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.199489][T29103] RSP: 002b:00007fe02c51f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1076.199509][T29103] RAX: ffffffffffffffda RBX: 00007fe02b825fa0 RCX: 00007fe02b59e199 [ 1076.199522][T29103] RDX: 0000000020000880 RSI: 0000200000000280 RDI: 0000000000000007 [ 1076.199534][T29103] RBP: 00007fe02c51f090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.199545][T29103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.199556][T29103] R13: 00007fe02b826038 R14: 00007fe02b825fa0 R15: 00007fe02b94fa48 [ 1076.199585][T29103] [ 1076.586723][T29117] netlink: 'syz.6.8217': attribute type 1 has an invalid length. [ 1076.803095][T29129] FAULT_INJECTION: forcing a failure. [ 1076.803095][T29129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.803118][T29129] CPU: 0 UID: 0 PID: 29129 Comm: syz.1.8219 Tainted: G L syzkaller #0 PREEMPT(full) [ 1076.803133][T29129] Tainted: [L]=SOFTLOCKUP [ 1076.803137][T29129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1076.803143][T29129] Call Trace: [ 1076.803148][T29129] [ 1076.803153][T29129] dump_stack_lvl+0xe8/0x150 [ 1076.803181][T29129] should_fail_ex+0x410/0x560 [ 1076.803198][T29129] _copy_to_user+0x31/0xb0 [ 1076.803216][T29129] simple_read_from_buffer+0xe1/0x170 [ 1076.803235][T29129] proc_fail_nth_read+0x1bb/0x230 [ 1076.803246][T29129] ? common_file_perm+0x20e/0x2b0 [ 1076.803262][T29129] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1076.803275][T29129] ? rw_verify_area+0x24a/0x4c0 [ 1076.803286][T29129] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1076.803297][T29129] vfs_read+0x213/0xa80 [ 1076.803310][T29129] ? __pfx___mutex_lock+0x10/0x10 [ 1076.803327][T29129] ? __pfx_vfs_read+0x10/0x10 [ 1076.803337][T29129] ? __fget_files+0x2a/0x420 [ 1076.803355][T29129] ? __fget_files+0x3a2/0x420 [ 1076.803369][T29129] ? __fget_files+0x2a/0x420 [ 1076.803389][T29129] ksys_read+0x150/0x270 [ 1076.803400][T29129] ? __pfx_ksys_read+0x10/0x10 [ 1076.803410][T29129] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1076.803428][T29129] do_syscall_64+0x166/0x520 [ 1076.803443][T29129] ? trace_irq_disable+0x3b/0x140 [ 1076.803454][T29129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.803465][T29129] ? clear_bhb_loop+0x70/0xc0 [ 1076.803478][T29129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.803488][T29129] RIP: 0033:0x7fef2995e9ce [ 1076.803498][T29129] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1076.803508][T29129] RSP: 002b:00007fef2a8d7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1076.803519][T29129] RAX: ffffffffffffffda RBX: 00007fef2a8d86c0 RCX: 00007fef2995e9ce [ 1076.803527][T29129] RDX: 000000000000000f RSI: 00007fef2a8d80a0 RDI: 0000000000000004 [ 1076.803534][T29129] RBP: 00007fef2a8d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.803540][T29129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.803546][T29129] R13: 00007fef29c26038 R14: 00007fef29c25fa0 R15: 00007fef29d4fa48 [ 1076.803563][T29129] [ 1077.059419][T29134] FAULT_INJECTION: forcing a failure. [ 1077.059419][T29134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1077.059467][T29134] CPU: 1 UID: 0 PID: 29134 Comm: syz.2.8223 Tainted: G L syzkaller #0 PREEMPT(full) [ 1077.059490][T29134] Tainted: [L]=SOFTLOCKUP [ 1077.059496][T29134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1077.059506][T29134] Call Trace: [ 1077.059513][T29134] [ 1077.059521][T29134] dump_stack_lvl+0xe8/0x150 [ 1077.059551][T29134] should_fail_ex+0x410/0x560 [ 1077.059575][T29134] fpu__restore_sig+0x207/0x1200 [ 1077.059605][T29134] ? __pfx_fpu__restore_sig+0x10/0x10 [ 1077.059655][T29134] __ia32_sys_rt_sigreturn+0x756/0x8c0 [ 1077.059683][T29134] ? __lock_acquire+0x747/0x2de0 [ 1077.059716][T29134] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 1077.059740][T29134] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1077.059786][T29134] ? __task_pid_nr_ns+0x28/0x470 [ 1077.059814][T29134] do_syscall_64+0x166/0x520 [ 1077.059840][T29134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.059859][T29134] ? clear_bhb_loop+0x70/0xc0 [ 1077.059882][T29134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.059901][T29134] RIP: 0033:0x7ff63dd5e9ce [ 1077.059918][T29134] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1077.059934][T29134] RSP: 002b:00007ff63ebd9fe8 EFLAGS: 00000246 [ 1077.059951][T29134] RAX: 0000000000000001 RBX: 00007ff63ebda6c0 RCX: 00007ff63dd5e9ce [ 1077.059965][T29134] RDX: 0000000000000001 RSI: 00007ff63ebda090 RDI: 0000000000000004 [ 1077.059977][T29134] RBP: 00007ff63ebda090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.059989][T29134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1077.060000][T29134] R13: 00007ff63e026038 R14: 00007ff63e025fa0 R15: 00007ff63e14fa48 [ 1077.060030][T29134] [ 1077.118787][T29138] FAULT_INJECTION: forcing a failure. [ 1077.118787][T29138] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.118820][T29138] CPU: 0 UID: 0 PID: 29138 Comm: syz.0.8225 Tainted: G L syzkaller #0 PREEMPT(full) [ 1077.118845][T29138] Tainted: [L]=SOFTLOCKUP [ 1077.118852][T29138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1077.118863][T29138] Call Trace: [ 1077.118871][T29138] [ 1077.118879][T29138] dump_stack_lvl+0xe8/0x150 [ 1077.118910][T29138] should_fail_ex+0x410/0x560 [ 1077.118937][T29138] should_failslab+0xa8/0x100 [ 1077.118962][T29138] ? skb_clone+0x212/0x3a0 [ 1077.118980][T29138] kmem_cache_alloc_noprof+0xa1/0x600 [ 1077.119002][T29138] ? skb_clone+0x212/0x3a0 [ 1077.119025][T29138] skb_clone+0x212/0x3a0 [ 1077.119046][T29138] __netlink_deliver_tap+0x413/0x860 [ 1077.119078][T29138] ? netlink_deliver_tap+0x2e/0x1b0 [ 1077.119099][T29138] netlink_deliver_tap+0x19c/0x1b0 [ 1077.119120][T29138] netlink_unicast+0x781/0x940 [ 1077.119148][T29138] netlink_sendmsg+0x813/0xb40 [ 1077.119177][T29138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1077.119213][T29138] ? apparmor_socket_sendmsg+0x98/0x360 [ 1077.119239][T29138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1077.119261][T29138] sock_sendmsg_nosec+0x13a/0x180 [ 1077.119285][T29138] ____sys_sendmsg+0x54e/0x850 [ 1077.119316][T29138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1077.119352][T29138] ? import_iovec+0x73/0xa0 [ 1077.119379][T29138] ___sys_sendmsg+0x2a5/0x360 [ 1077.119404][T29138] ? __lock_acquire+0x747/0x2de0 [ 1077.119428][T29138] ? __pfx____sys_sendmsg+0x10/0x10 [ 1077.119486][T29138] ? __fget_files+0x2a/0x420 [ 1077.119511][T29138] ? __fget_files+0x3a2/0x420 [ 1077.119545][T29138] __x64_sys_sendmsg+0x1b1/0x290 [ 1077.119575][T29138] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1077.119620][T29138] do_syscall_64+0x166/0x520 [ 1077.119645][T29138] ? trace_irq_disable+0x3b/0x140 [ 1077.119664][T29138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.119683][T29138] ? clear_bhb_loop+0x70/0xc0 [ 1077.119704][T29138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.119723][T29138] RIP: 0033:0x7fe02b59e199 [ 1077.119740][T29138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.119756][T29138] RSP: 002b:00007fe02c51f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1077.119776][T29138] RAX: ffffffffffffffda RBX: 00007fe02b825fa0 RCX: 00007fe02b59e199 [ 1077.119790][T29138] RDX: 0000000000000800 RSI: 0000200000000080 RDI: 000000000000000a [ 1077.119802][T29138] RBP: 00007fe02c51f090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.119814][T29138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.119826][T29138] R13: 00007fe02b826038 R14: 00007fe02b825fa0 R15: 00007fe02b94fa48 [ 1077.119855][T29138] [ 1077.625929][T29147] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1077.914857][T29071] Bluetooth: hci3: command 0x0c1a tx timeout [ 1077.997182][ T5616] Bluetooth: hci4: command 0x0c1a tx timeout [ 1077.997221][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 1077.997248][ T5616] Bluetooth: hci5: command 0x0c1a tx timeout [ 1077.997271][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 1077.997366][T29071] Bluetooth: hci1: command 0x0c1a tx timeout [ 1078.289044][T29159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.308369][T29159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.327868][ T30] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 1078.333011][ T30] hid-generic 0000:0000:0000.0054: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1078.913224][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 1078.913243][ T31] audit: type=1326 audit(1791359038.339:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29181 comm="syz.6.8241" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d19e199 code=0x7ffc0000 [ 1078.914306][ T31] audit: type=1326 audit(1791359038.339:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29181 comm="syz.6.8241" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d19e199 code=0x7ffc0000 [ 1078.914441][ T31] audit: type=1326 audit(1791359038.339:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29181 comm="syz.6.8241" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fee3d19e199 code=0x7ffc0000 [ 1078.914567][ T31] audit: type=1326 audit(1791359038.339:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29181 comm="syz.6.8241" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d19e199 code=0x7ffc0000 [ 1078.946083][ T31] audit: type=1326 audit(1791359038.339:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29181 comm="syz.6.8241" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d19e199 code=0x7ffc0000 [ 1078.947244][ T31] audit: type=1326 audit(1791359038.379:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29181 comm="syz.6.8241" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee3d19e199 code=0x7ffc0000 [ 1078.947290][ T31] audit: type=1326 audit(1791359038.379:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29181 comm="syz.6.8241" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d19e199 code=0x7ffc0000 [ 1078.971844][ T31] audit: type=1326 audit(1791359038.379:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29181 comm="syz.6.8241" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee3d19de2b code=0x7ffc0000 [ 1078.971888][ T31] audit: type=1326 audit(1791359038.379:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29181 comm="syz.6.8241" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d19e199 code=0x7ffc0000 [ 1078.971921][ T31] audit: type=1326 audit(1791359038.379:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29181 comm="syz.6.8241" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3d19e199 code=0x7ffc0000 [ 1079.358183][T29194] netlink: 'syz.0.8245': attribute type 12 has an invalid length. [ 1079.358199][T29194] netlink: 'syz.0.8245': attribute type 29 has an invalid length. [ 1079.670031][T29071] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1079.673536][T29071] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1079.702735][T29071] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1079.715356][T29071] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1079.718617][T29071] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1079.915062][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1079.934654][T29209] FAULT_INJECTION: forcing a failure. [ 1079.934654][T29209] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.934687][T29209] CPU: 1 UID: 0 PID: 29209 Comm: syz.3.8249 Tainted: G L syzkaller #0 PREEMPT(full) [ 1079.934712][T29209] Tainted: [L]=SOFTLOCKUP [ 1079.934719][T29209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1079.934731][T29209] Call Trace: [ 1079.934738][T29209] [ 1079.934747][T29209] dump_stack_lvl+0xe8/0x150 [ 1079.934780][T29209] should_fail_ex+0x410/0x560 [ 1079.934807][T29209] should_failslab+0xa8/0x100 [ 1079.934830][T29209] ? skb_clone+0x212/0x3a0 [ 1079.934858][T29209] kmem_cache_alloc_noprof+0xa1/0x600 [ 1079.934879][T29209] ? skb_clone+0x212/0x3a0 [ 1079.934902][T29209] skb_clone+0x212/0x3a0 [ 1079.934922][T29209] __netlink_deliver_tap+0x413/0x860 [ 1079.934953][T29209] ? netlink_deliver_tap+0x2e/0x1b0 [ 1079.934976][T29209] netlink_deliver_tap+0x19c/0x1b0 [ 1079.934998][T29209] netlink_unicast+0x781/0x940 [ 1079.935025][T29209] netlink_sendmsg+0x813/0xb40 [ 1079.935053][T29209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1079.935079][T29209] ? apparmor_socket_sendmsg+0x98/0x360 [ 1079.935104][T29209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1079.935122][T29209] sock_sendmsg_nosec+0x13a/0x180 [ 1079.935147][T29209] ____sys_sendmsg+0x54e/0x850 [ 1079.935178][T29209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1079.935210][T29209] ? import_iovec+0x73/0xa0 [ 1079.935236][T29209] ___sys_sendmsg+0x2a5/0x360 [ 1079.935262][T29209] ? __lock_acquire+0x747/0x2de0 [ 1079.935286][T29209] ? __pfx____sys_sendmsg+0x10/0x10 [ 1079.935343][T29209] ? __fget_files+0x2a/0x420 [ 1079.935367][T29209] ? __fget_files+0x3a2/0x420 [ 1079.935398][T29209] __x64_sys_sendmsg+0x1b1/0x290 [ 1079.935428][T29209] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1079.935472][T29209] do_syscall_64+0x166/0x520 [ 1079.935498][T29209] ? trace_irq_disable+0x3b/0x140 [ 1079.935518][T29209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.935538][T29209] ? clear_bhb_loop+0x70/0xc0 [ 1079.935560][T29209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.935578][T29209] RIP: 0033:0x7fad9ab9e199 [ 1079.935595][T29209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.935611][T29209] RSP: 002b:00007fad9baa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1079.935632][T29209] RAX: ffffffffffffffda RBX: 00007fad9ae25fa0 RCX: 00007fad9ab9e199 [ 1079.935646][T29209] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 1079.935658][T29209] RBP: 00007fad9baa7090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.935669][T29209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.935680][T29209] R13: 00007fad9ae26038 R14: 00007fad9ae25fa0 R15: 00007fad9af4fa48 [ 1079.935709][T29209] [ 1080.079334][T29071] Bluetooth: hci2: command 0x0c1a tx timeout [ 1080.114700][T29212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.119978][T29212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.265262][T29217] raw-gadget.0 gadget.0: failed to queue resume event [ 1080.390437][T29216] raw-gadget.0 gadget.0: failed to queue suspend event [ 1080.455136][T24718] raw-gadget.0 gadget.0: failed to queue disconnect event [ 1080.581986][T29207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.582155][T29207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.582652][T29207] bridge_slave_0: entered allmulticast mode [ 1080.584668][T29207] bridge_slave_0: entered promiscuous mode [ 1080.650625][T26706] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1080.650648][T26706] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.650662][T26706] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 45253 - 0 [ 1080.687868][T29207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.688015][T29207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.688177][T29207] bridge_slave_1: entered allmulticast mode [ 1080.690173][T29207] bridge_slave_1: entered promiscuous mode [ 1080.754251][T29207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.767918][T29207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.801031][T28494] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 1080.811203][T28494] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1080.844730][T26706] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1080.845900][T26706] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.845929][T26706] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 45253 - 0 [ 1080.910487][T29207] team0: Port device team_slave_0 added [ 1080.914396][T29207] team0: Port device team_slave_1 added [ 1080.989338][T26706] bond0: (slave netdevsim1): Releasing backup interface [ 1080.992540][T26706] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1080.992560][T26706] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.992582][T26706] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 45253 - 0 [ 1081.034654][T29207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.034669][T29207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.034689][T29207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.058782][T29207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.058806][T29207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.058829][T29207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.214557][T26706] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1081.214589][T26706] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.214613][T26706] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 45253 - 0 [ 1081.263239][T29207] hsr_slave_0: entered promiscuous mode [ 1081.264322][T29207] hsr_slave_1: entered promiscuous mode [ 1081.265832][T29207] debugfs: 'hsr0' already exists in 'hsr' [ 1081.265852][T29207] Cannot create hsr debugfs directory [ 1081.413089][T29238] syzkaller0: entered promiscuous mode [ 1081.413112][T29238] syzkaller0: entered allmulticast mode [ 1081.627001][T26706] bridge_slave_1: left allmulticast mode [ 1081.627029][T26706] bridge_slave_1: left promiscuous mode [ 1081.627308][T26706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.636404][T26706] bridge_slave_0: left allmulticast mode [ 1081.636427][T26706] bridge_slave_0: left promiscuous mode [ 1081.638610][T26706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.666461][T26706] pimreg: left allmulticast mode [ 1081.834900][T29071] Bluetooth: hci6: command tx timeout [ 1082.001087][T26706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1082.003782][T26706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1082.010113][T26706] bond0 (unregistering): Released all slaves [ 1082.023350][T26706] bond1 (unregistering): Released all slaves [ 1082.047473][T26706] bond2 (unregistering): Released all slaves [ 1082.264421][T26706] tipc: Disabling bearer [ 1082.279532][T26706] tipc: Left network mode [ 1082.527507][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1082.658862][T26706] hsr_slave_0: left promiscuous mode [ 1082.661176][T26706] hsr_slave_1: left promiscuous mode [ 1082.664336][T26706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.664357][T26706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.720471][T26706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.720495][T26706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.769979][T29265] FAULT_INJECTION: forcing a failure. [ 1082.769979][T29265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.770013][T29265] CPU: 0 UID: 0 PID: 29265 Comm: syz.1.8260 Tainted: G L syzkaller #0 PREEMPT(full) [ 1082.770037][T29265] Tainted: [L]=SOFTLOCKUP [ 1082.770044][T29265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1082.770055][T29265] Call Trace: [ 1082.770063][T29265] [ 1082.770072][T29265] dump_stack_lvl+0xe8/0x150 [ 1082.770102][T29265] should_fail_ex+0x410/0x560 [ 1082.770130][T29265] _copy_to_user+0x31/0xb0 [ 1082.770159][T29265] simple_read_from_buffer+0xe1/0x170 [ 1082.770190][T29265] proc_fail_nth_read+0x1bb/0x230 [ 1082.770208][T29265] ? common_file_perm+0x20e/0x2b0 [ 1082.770237][T29265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1082.770258][T29265] ? rw_verify_area+0x24a/0x4c0 [ 1082.770275][T29265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1082.770292][T29265] vfs_read+0x213/0xa80 [ 1082.770314][T29265] ? __pfx___mutex_lock+0x10/0x10 [ 1082.770339][T29265] ? __pfx_vfs_read+0x10/0x10 [ 1082.770357][T29265] ? __fget_files+0x2a/0x420 [ 1082.770384][T29265] ? __fget_files+0x3a2/0x420 [ 1082.770407][T29265] ? __fget_files+0x2a/0x420 [ 1082.770440][T29265] ksys_read+0x150/0x270 [ 1082.770461][T29265] ? __pfx_ksys_read+0x10/0x10 [ 1082.770475][T29265] ? fput+0xa0/0xd0 [ 1082.770506][T29265] do_syscall_64+0x166/0x520 [ 1082.770528][T29265] ? trace_irq_disable+0x3b/0x140 [ 1082.770546][T29265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.770562][T29265] ? clear_bhb_loop+0x70/0xc0 [ 1082.770583][T29265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.770598][T29265] RIP: 0033:0x7fef2995e9ce [ 1082.770613][T29265] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1082.770628][T29265] RSP: 002b:00007fef2a8d7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1082.770646][T29265] RAX: ffffffffffffffda RBX: 00007fef2a8d86c0 RCX: 00007fef2995e9ce [ 1082.770660][T29265] RDX: 000000000000000f RSI: 00007fef2a8d80a0 RDI: 0000000000000004 [ 1082.770672][T29265] RBP: 00007fef2a8d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.770683][T29265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.770694][T29265] R13: 00007fef29c26038 R14: 00007fef29c25fa0 R15: 00007fef29d4fa48 [ 1082.770722][T29265] [ 1082.918696][T29267] FAULT_INJECTION: forcing a failure. [ 1082.918696][T29267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.918730][T29267] CPU: 0 UID: 0 PID: 29267 Comm: syz.1.8262 Tainted: G L syzkaller #0 PREEMPT(full) [ 1082.918755][T29267] Tainted: [L]=SOFTLOCKUP [ 1082.918762][T29267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1082.918773][T29267] Call Trace: [ 1082.918780][T29267] [ 1082.918787][T29267] dump_stack_lvl+0xe8/0x150 [ 1082.918818][T29267] should_fail_ex+0x410/0x560 [ 1082.918846][T29267] _copy_from_user+0x2d/0xb0 [ 1082.918872][T29267] kstrtouint_from_user+0xd6/0x180 [ 1082.918896][T29267] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1082.918926][T29267] ? lock_acquire+0x115/0x350 [ 1082.918951][T29267] proc_fail_nth_write+0x8e/0x210 [ 1082.918970][T29267] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1082.918998][T29267] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1082.919017][T29267] vfs_write+0x296/0xba0 [ 1082.919045][T29267] ? __pfx_vfs_write+0x10/0x10 [ 1082.919064][T29267] ? __fget_files+0x2a/0x420 [ 1082.919093][T29267] ? __fget_files+0x3a2/0x420 [ 1082.919117][T29267] ? __fget_files+0x2a/0x420 [ 1082.919150][T29267] ksys_write+0x150/0x270 [ 1082.919171][T29267] ? __pfx_ksys_write+0x10/0x10 [ 1082.919199][T29267] do_syscall_64+0x166/0x520 [ 1082.919226][T29267] ? trace_irq_disable+0x3b/0x140 [ 1082.919245][T29267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.919264][T29267] ? clear_bhb_loop+0x70/0xc0 [ 1082.919285][T29267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.919303][T29267] RIP: 0033:0x7fef2995e9ce [ 1082.919320][T29267] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1082.919336][T29267] RSP: 002b:00007fef2a8d7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1082.919359][T29267] RAX: ffffffffffffffda RBX: 00007fef2a8d86c0 RCX: 00007fef2995e9ce [ 1082.919373][T29267] RDX: 0000000000000001 RSI: 00007fef2a8d80a0 RDI: 0000000000000004 [ 1082.919384][T29267] RBP: 00007fef2a8d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.919395][T29267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.919407][T29267] R13: 00007fef29c26038 R14: 00007fef29c25fa0 R15: 00007fef29d4fa48 [ 1082.919436][T29267] [ 1083.502484][T26706] team0 (unregistering): Port device team_slave_1 removed [ 1083.556966][T26706] team0 (unregistering): Port device team_slave_0 removed [ 1083.677347][T29281] __nla_validate_parse: 16 callbacks suppressed [ 1083.677368][T29281] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8266'. [ 1083.924889][T29071] Bluetooth: hci6: command tx timeout [ 1084.166892][T29295] xt_hashlimit: overflow, try lower: 0/0 [ 1084.618922][T29314] FAULT_INJECTION: forcing a failure. [ 1084.618922][T29314] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.618955][T29314] CPU: 0 UID: 0 PID: 29314 Comm: syz.6.8274 Tainted: G L syzkaller #0 PREEMPT(full) [ 1084.618980][T29314] Tainted: [L]=SOFTLOCKUP [ 1084.618987][T29314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1084.618998][T29314] Call Trace: [ 1084.619006][T29314] [ 1084.619014][T29314] dump_stack_lvl+0xe8/0x150 [ 1084.619046][T29314] should_fail_ex+0x410/0x560 [ 1084.619073][T29314] ? __alloc_skb+0x1db/0x7a0 [ 1084.619097][T29314] should_failslab+0xa8/0x100 [ 1084.619123][T29314] ? __alloc_skb+0x1db/0x7a0 [ 1084.619146][T29314] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1084.619166][T29314] ? __alloc_skb+0x18d/0x7a0 [ 1084.619191][T29314] ? __alloc_skb+0x1db/0x7a0 [ 1084.619222][T29314] __alloc_skb+0x1db/0x7a0 [ 1084.619251][T29314] netlink_dump+0x1e7/0xee0 [ 1084.619271][T29314] ? __netlink_lookup+0xc6/0x8b0 [ 1084.619302][T29314] ? __pfx_netlink_dump+0x10/0x10 [ 1084.619332][T29314] ? netlink_lookup+0x30/0x200 [ 1084.619351][T29314] ? netlink_lookup+0x30/0x200 [ 1084.619376][T29314] __netlink_dump_start+0x589/0x7b0 [ 1084.619403][T29314] rtnetlink_rcv_msg+0xa48/0xc00 [ 1084.619431][T29314] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 1084.619452][T29314] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1084.619485][T29314] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1084.619509][T29314] ? ref_tracker_free+0x689/0x830 [ 1084.619533][T29314] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1084.619557][T29314] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 1084.619590][T29314] netlink_rcv_skb+0x226/0x4a0 [ 1084.619611][T29314] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1084.619638][T29314] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1084.619672][T29314] ? netlink_deliver_tap+0x2e/0x1b0 [ 1084.619692][T29314] ? netlink_deliver_tap+0x2e/0x1b0 [ 1084.619718][T29314] netlink_unicast+0x7bd/0x940 [ 1084.619747][T29314] netlink_sendmsg+0x813/0xb40 [ 1084.619777][T29314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1084.619804][T29314] ? apparmor_socket_sendmsg+0x98/0x360 [ 1084.619833][T29314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1084.619853][T29314] sock_sendmsg_nosec+0x13a/0x180 [ 1084.619877][T29314] ____sys_sendmsg+0x54e/0x850 [ 1084.619910][T29314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1084.619945][T29314] ? import_iovec+0x73/0xa0 [ 1084.619974][T29314] ___sys_sendmsg+0x2a5/0x360 [ 1084.620000][T29314] ? __lock_acquire+0x747/0x2de0 [ 1084.620025][T29314] ? __pfx____sys_sendmsg+0x10/0x10 [ 1084.620086][T29314] ? __fget_files+0x2a/0x420 [ 1084.620113][T29314] ? __fget_files+0x3a2/0x420 [ 1084.620148][T29314] __x64_sys_sendmsg+0x1b1/0x290 [ 1084.620179][T29314] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1084.620228][T29314] do_syscall_64+0x166/0x520 [ 1084.620253][T29314] ? trace_irq_disable+0x3b/0x140 [ 1084.620273][T29314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.620292][T29314] ? clear_bhb_loop+0x70/0xc0 [ 1084.620316][T29314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.620335][T29314] RIP: 0033:0x7fee3d19e199 [ 1084.620352][T29314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.620368][T29314] RSP: 002b:00007fee3e050028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1084.620388][T29314] RAX: ffffffffffffffda RBX: 00007fee3d425fa0 RCX: 00007fee3d19e199 [ 1084.620402][T29314] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1084.620414][T29314] RBP: 00007fee3e050090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.620427][T29314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.620438][T29314] R13: 00007fee3d426038 R14: 00007fee3d425fa0 R15: 00007fee3d54fa48 [ 1084.620469][T29314] [ 1084.621428][T26706] IPVS: stop unused estimator thread 0... [ 1085.085100][T29326] overlayfs: missing 'lowerdir' [ 1085.116219][ T31] kauditd_printk_skb: 38 callbacks suppressed [ 1085.116238][ T31] audit: type=1326 audit(1791359044.549:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.1.8277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2999e199 code=0x7ffc0000 [ 1085.116497][ T31] audit: type=1326 audit(1791359044.549:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.1.8277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2999e199 code=0x7ffc0000 [ 1085.119502][ T31] audit: type=1326 audit(1791359044.549:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.1.8277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2999e199 code=0x7ffc0000 [ 1085.119550][ T31] audit: type=1326 audit(1791359044.549:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.1.8277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2999e199 code=0x7ffc0000 [ 1085.119589][ T31] audit: type=1326 audit(1791359044.549:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.1.8277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2999e199 code=0x7ffc0000 [ 1085.122472][ T31] audit: type=1326 audit(1791359044.549:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.1.8277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fef2999e199 code=0x7ffc0000 [ 1085.122667][ T31] audit: type=1326 audit(1791359044.549:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.1.8277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2999e199 code=0x7ffc0000 [ 1085.123800][ T31] audit: type=1326 audit(1791359044.549:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.1.8277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2999e199 code=0x7ffc0000 [ 1085.124437][ T31] audit: type=1326 audit(1791359044.549:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.1.8277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2999e199 code=0x7ffc0000 [ 1085.124567][ T31] audit: type=1326 audit(1791359044.549:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.1.8277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2999e199 code=0x7ffc0000 [ 1085.351099][T29207] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1085.388950][T29207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1085.394100][T29207] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1085.423267][T29207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1085.427610][T29207] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1085.443949][T29207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1085.449562][T29207] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1085.464127][T29207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1085.517871][T29343] sctp: [Deprecated]: syz.1.8280 (pid 29343) Use of int in maxseg socket option. [ 1085.517871][T29343] Use struct sctp_assoc_value instead [ 1085.593698][T29347] FAULT_INJECTION: forcing a failure. [ 1085.593698][T29347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.593720][T29347] CPU: 0 UID: 0 PID: 29347 Comm: syz.2.8281 Tainted: G L syzkaller #0 PREEMPT(full) [ 1085.593735][T29347] Tainted: [L]=SOFTLOCKUP [ 1085.593739][T29347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1085.593746][T29347] Call Trace: [ 1085.593750][T29347] [ 1085.593755][T29347] dump_stack_lvl+0xe8/0x150 [ 1085.593775][T29347] should_fail_ex+0x410/0x560 [ 1085.593791][T29347] _copy_to_user+0x31/0xb0 [ 1085.593809][T29347] simple_read_from_buffer+0xe1/0x170 [ 1085.593828][T29347] proc_fail_nth_read+0x1bb/0x230 [ 1085.593839][T29347] ? common_file_perm+0x20e/0x2b0 [ 1085.593855][T29347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1085.593868][T29347] ? rw_verify_area+0x24a/0x4c0 [ 1085.593878][T29347] ? tun_chr_write_iter+0x18a/0x200 [ 1085.593891][T29347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1085.593902][T29347] vfs_read+0x213/0xa80 [ 1085.593916][T29347] ? __pfx___mutex_lock+0x10/0x10 [ 1085.593935][T29347] ? __pfx_vfs_read+0x10/0x10 [ 1085.593946][T29347] ? __fget_files+0x2a/0x420 [ 1085.593964][T29347] ? __fget_files+0x3a2/0x420 [ 1085.593978][T29347] ? __fget_files+0x2a/0x420 [ 1085.594000][T29347] ksys_read+0x150/0x270 [ 1085.594018][T29347] ? __pfx_ksys_read+0x10/0x10 [ 1085.594044][T29347] do_syscall_64+0x166/0x520 [ 1085.594068][T29347] ? trace_irq_disable+0x3b/0x140 [ 1085.594087][T29347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.594107][T29347] ? clear_bhb_loop+0x70/0xc0 [ 1085.594129][T29347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.594142][T29347] RIP: 0033:0x7ff63dd5e9ce [ 1085.594152][T29347] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1085.594162][T29347] RSP: 002b:00007ff63ebd9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1085.594174][T29347] RAX: ffffffffffffffda RBX: 00007ff63ebda6c0 RCX: 00007ff63dd5e9ce [ 1085.594181][T29347] RDX: 000000000000000f RSI: 00007ff63ebda0a0 RDI: 0000000000000004 [ 1085.594191][T29347] RBP: 00007ff63ebda090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.594197][T29347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.594204][T29347] R13: 00007ff63e026038 R14: 00007ff63e025fa0 R15: 00007ff63e14fa48 [ 1085.594220][T29347] [ 1085.844327][T29207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.888216][T29207] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.912763][T26706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.912862][T26706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.930853][T26706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.930969][T26706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.994874][T29071] Bluetooth: hci6: command tx timeout [ 1086.052217][T29207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.117286][T29358] FAULT_INJECTION: forcing a failure. [ 1086.117286][T29358] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.117329][T29358] CPU: 1 UID: 0 PID: 29358 Comm: syz.6.8285 Tainted: G L syzkaller #0 PREEMPT(full) [ 1086.117354][T29358] Tainted: [L]=SOFTLOCKUP [ 1086.117362][T29358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1086.117372][T29358] Call Trace: [ 1086.117380][T29358] [ 1086.117389][T29358] dump_stack_lvl+0xe8/0x150 [ 1086.117419][T29358] should_fail_ex+0x410/0x560 [ 1086.117446][T29358] should_failslab+0xa8/0x100 [ 1086.117472][T29358] __kmalloc_noprof+0xfe/0x720 [ 1086.117494][T29358] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1086.117519][T29358] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1086.117552][T29358] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1086.117585][T29358] genl_family_rcv_msg_doit+0xda/0x340 [ 1086.117616][T29358] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1086.117649][T29358] ? apparmor_capable+0x126/0x170 [ 1086.117672][T29358] ? bpf_lsm_capable+0x9/0x20 [ 1086.117690][T29358] ? security_capable+0x7e/0x2c0 [ 1086.117719][T29358] genl_rcv_msg+0x614/0x7a0 [ 1086.117750][T29358] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1086.117773][T29358] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1086.117790][T29358] ? __pfx_nl80211_abort_scan+0x10/0x10 [ 1086.117810][T29358] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1086.117840][T29358] netlink_rcv_skb+0x226/0x4a0 [ 1086.117861][T29358] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1086.117887][T29358] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1086.117922][T29358] ? down_read+0x2be/0x330 [ 1086.117945][T29358] genl_rcv+0x28/0x40 [ 1086.117967][T29358] netlink_unicast+0x7bd/0x940 [ 1086.117996][T29358] netlink_sendmsg+0x813/0xb40 [ 1086.118024][T29358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1086.118052][T29358] ? apparmor_socket_sendmsg+0x98/0x360 [ 1086.118077][T29358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1086.118097][T29358] sock_sendmsg_nosec+0x13a/0x180 [ 1086.118121][T29358] ____sys_sendmsg+0x54e/0x850 [ 1086.118154][T29358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1086.118189][T29358] ? import_iovec+0x73/0xa0 [ 1086.118218][T29358] ___sys_sendmsg+0x2a5/0x360 [ 1086.118244][T29358] ? __lock_acquire+0x747/0x2de0 [ 1086.118269][T29358] ? __pfx____sys_sendmsg+0x10/0x10 [ 1086.118334][T29358] ? __fget_files+0x2a/0x420 [ 1086.118360][T29358] ? __fget_files+0x3a2/0x420 [ 1086.118395][T29358] __x64_sys_sendmsg+0x1b1/0x290 [ 1086.118425][T29358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1086.118472][T29358] do_syscall_64+0x166/0x520 [ 1086.118498][T29358] ? trace_irq_disable+0x3b/0x140 [ 1086.118518][T29358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.118537][T29358] ? clear_bhb_loop+0x70/0xc0 [ 1086.118559][T29358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.118577][T29358] RIP: 0033:0x7fee3d19e199 [ 1086.118595][T29358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.118612][T29358] RSP: 002b:00007fee3e050028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1086.118632][T29358] RAX: ffffffffffffffda RBX: 00007fee3d425fa0 RCX: 00007fee3d19e199 [ 1086.118646][T29358] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1086.118659][T29358] RBP: 00007fee3e050090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.118671][T29358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.118682][T29358] R13: 00007fee3d426038 R14: 00007fee3d425fa0 R15: 00007fee3d54fa48 [ 1086.118711][T29358] [ 1086.122584][T29207] veth0_vlan: entered promiscuous mode [ 1086.137547][T29207] veth1_vlan: entered promiscuous mode [ 1086.180143][T29207] veth0_macvtap: entered promiscuous mode [ 1086.190076][T29207] veth1_macvtap: entered promiscuous mode [ 1086.239265][T29207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.260250][T29352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.262121][T29207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1086.264093][T29352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.270606][T29352] binder: 29351:29352 ioctl c018620c 0 returned -14 [ 1086.375620][T27208] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.375985][T27208] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.376018][T27208] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.376048][T27208] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.491850][T29364] syz.6.8286 (29364) used greatest stack depth: 18880 bytes left [ 1086.553623][T10880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.553647][T10880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.649669][T27206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.649692][T27206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.739951][T29071] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 1086.739969][T29071] CPU: 0 UID: 0 PID: 29071 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1086.739985][T29071] Tainted: [L]=SOFTLOCKUP [ 1086.739989][T29071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1086.739997][T29071] Workqueue: hci6 hci_rx_work [ 1086.740015][T29071] Call Trace: [ 1086.740019][T29071] [ 1086.740025][T29071] dump_stack_lvl+0xe8/0x150 [ 1086.740043][T29071] sysfs_create_dir_ns+0x271/0x2a0 [ 1086.740057][T29071] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1086.740070][T29071] ? do_raw_spin_unlock+0xf5/0x200 [ 1086.740089][T29071] kobject_add_internal+0x622/0xcd0 [ 1086.740107][T29071] kobject_add+0x163/0x240 [ 1086.740123][T29071] ? __pfx_kobject_add+0x10/0x10 [ 1086.740137][T29071] ? get_device_parent+0x366/0x3a0 [ 1086.740153][T29071] device_add+0x3fa/0xb80 [ 1086.740167][T29071] hci_conn_add_sysfs+0xd5/0x210 [ 1086.740181][T29071] le_conn_complete_evt+0xfe3/0x16d0 [ 1086.740201][T29071] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1086.740217][T29071] ? __mutex_unlock_slowpath+0x731/0x900 [ 1086.740238][T29071] ? skb_pull_data+0xf0/0x200 [ 1086.740252][T29071] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1086.740270][T29071] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1086.740288][T29071] hci_event_packet+0x67a/0xf10 [ 1086.740305][T29071] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1086.740319][T29071] ? __pfx_hci_event_packet+0x10/0x10 [ 1086.740335][T29071] ? replace_chunk+0xb20/0xb80 [ 1086.740354][T29071] ? hci_send_to_monitor+0xe2/0x590 [ 1086.740366][T29071] hci_rx_work+0x3ee/0x1020 [ 1086.740382][T29071] ? process_scheduled_works+0x97a/0x1630 [ 1086.740397][T29071] process_scheduled_works+0xc3d/0x1630 [ 1086.740427][T29071] ? __pfx_process_scheduled_works+0x10/0x10 [ 1086.740444][T29071] ? assign_work+0x3cf/0x5d0 [ 1086.740460][T29071] worker_thread+0xa47/0xfb0 [ 1086.740481][T29071] ? __kthread_parkme+0x71/0x1f0 [ 1086.740502][T29071] kthread+0x38b/0x480 [ 1086.740513][T29071] ? __pfx_worker_thread+0x10/0x10 [ 1086.740526][T29071] ? __pfx_kthread+0x10/0x10 [ 1086.740537][T29071] ret_from_fork+0x514/0xb70 [ 1086.740549][T29071] ? __pfx_ret_from_fork+0x10/0x10 [ 1086.740559][T29071] ? __switch_to+0xc89/0x1420 [ 1086.740575][T29071] ? __pfx_kthread+0x10/0x10 [ 1086.740586][T29071] ret_from_fork_asm+0x1a/0x30 [ 1086.740611][T29071] [ 1086.740652][T29071] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1086.740685][T29071] Bluetooth: hci6: failed to register connection device [ 1086.897010][T29373] fuse: Bad value for 'fd' [ 1086.937524][T29368] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1086.937680][T29368] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1086.937824][T29368] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1086.937988][T29368] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1086.938130][T29368] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1086.938271][T29368] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1086.938325][T29368] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1086.950292][T29368] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1086.994507][T29368] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1087.027281][T29373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.027922][T29373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.034031][T29373] input: syz0 as /devices/virtual/input/input146 [ 1087.713799][T29388] FAULT_INJECTION: forcing a failure. [ 1087.713799][T29388] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.713821][T29388] CPU: 0 UID: 0 PID: 29388 Comm: syz.0.8291 Tainted: G L syzkaller #0 PREEMPT(full) [ 1087.713836][T29388] Tainted: [L]=SOFTLOCKUP [ 1087.713840][T29388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1087.713847][T29388] Call Trace: [ 1087.713851][T29388] [ 1087.713856][T29388] dump_stack_lvl+0xe8/0x150 [ 1087.713876][T29388] should_fail_ex+0x410/0x560 [ 1087.713892][T29388] should_failslab+0xa8/0x100 [ 1087.713907][T29388] ? security_file_alloc+0x34/0x310 [ 1087.713920][T29388] kmem_cache_alloc_noprof+0xa1/0x600 [ 1087.713931][T29388] ? rcu_is_watching+0x16/0xb0 [ 1087.713945][T29388] ? security_file_alloc+0x34/0x310 [ 1087.713960][T29388] security_file_alloc+0x34/0x310 [ 1087.713972][T29388] init_file+0x90/0x2b0 [ 1087.713988][T29388] alloc_empty_file+0x74/0x1d0 [ 1087.714002][T29388] path_openat+0xa2/0x1d60 [ 1087.714016][T29388] ? __lock_acquire+0x747/0x2de0 [ 1087.714042][T29388] do_file_open+0x23e/0x4a0 [ 1087.714067][T29388] ? __pfx_do_file_open+0x10/0x10 [ 1087.714088][T29388] ? _raw_spin_unlock+0x28/0x50 [ 1087.714102][T29388] ? alloc_fd+0x651/0x6c0 [ 1087.714122][T29388] do_sys_openat2+0x115/0x200 [ 1087.714138][T29388] ? __pfx_do_sys_openat2+0x10/0x10 [ 1087.714154][T29388] ? ksys_write+0x242/0x270 [ 1087.714166][T29388] ? __pfx_ksys_write+0x10/0x10 [ 1087.714178][T29388] __x64_sys_openat+0x138/0x170 [ 1087.714194][T29388] do_syscall_64+0x166/0x520 [ 1087.714209][T29388] ? trace_irq_disable+0x3b/0x140 [ 1087.714221][T29388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.714235][T29388] ? clear_bhb_loop+0x70/0xc0 [ 1087.714256][T29388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.714274][T29388] RIP: 0033:0x7f605579e199 [ 1087.714290][T29388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.714306][T29388] RSP: 002b:00007f60539f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1087.714325][T29388] RAX: ffffffffffffffda RBX: 00007f6055a26180 RCX: 00007f605579e199 [ 1087.714338][T29388] RDX: 0000000000000040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1087.714351][T29388] RBP: 00007f60539f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.714363][T29388] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 1087.714372][T29388] R13: 00007f6055a26218 R14: 00007f6055a26180 R15: 00007f6055b4fa48 [ 1087.714387][T29388] [ 1088.392476][T29400] FAULT_INJECTION: forcing a failure. [ 1088.392476][T29400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.392509][T29400] CPU: 0 UID: 0 PID: 29400 Comm: syz.2.8296 Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.392534][T29400] Tainted: [L]=SOFTLOCKUP [ 1088.392541][T29400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1088.392553][T29400] Call Trace: [ 1088.392561][T29400] [ 1088.392569][T29400] dump_stack_lvl+0xe8/0x150 [ 1088.392612][T29400] should_fail_ex+0x410/0x560 [ 1088.392641][T29400] _copy_to_user+0x31/0xb0 [ 1088.392669][T29400] simple_read_from_buffer+0xe1/0x170 [ 1088.392703][T29400] proc_fail_nth_read+0x1bb/0x230 [ 1088.392722][T29400] ? common_file_perm+0x20e/0x2b0 [ 1088.392750][T29400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1088.392773][T29400] ? rw_verify_area+0x24a/0x4c0 [ 1088.392793][T29400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1088.392813][T29400] vfs_read+0x213/0xa80 [ 1088.392836][T29400] ? __pfx___mutex_lock+0x10/0x10 [ 1088.392864][T29400] ? __pfx_vfs_read+0x10/0x10 [ 1088.392884][T29400] ? __fget_files+0x2a/0x420 [ 1088.392915][T29400] ? __fget_files+0x3a2/0x420 [ 1088.392940][T29400] ? __fget_files+0x2a/0x420 [ 1088.392975][T29400] ksys_read+0x150/0x270 [ 1088.392996][T29400] ? __pfx_ksys_read+0x10/0x10 [ 1088.393026][T29400] do_syscall_64+0x166/0x520 [ 1088.393051][T29400] ? trace_irq_disable+0x3b/0x140 [ 1088.393071][T29400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.393090][T29400] ? clear_bhb_loop+0x70/0xc0 [ 1088.393113][T29400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.393132][T29400] RIP: 0033:0x7ff63dd5e9ce [ 1088.393149][T29400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1088.393166][T29400] RSP: 002b:00007ff63ebd9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1088.393187][T29400] RAX: ffffffffffffffda RBX: 00007ff63ebda6c0 RCX: 00007ff63dd5e9ce [ 1088.393201][T29400] RDX: 000000000000000f RSI: 00007ff63ebda0a0 RDI: 0000000000000004 [ 1088.393214][T29400] RBP: 00007ff63ebda090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.393226][T29400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.393237][T29400] R13: 00007ff63e026038 R14: 00007ff63e025fa0 R15: 00007ff63e14fa48 [ 1088.393268][T29400] [ 1088.681691][T29405] netlink: 'syz.0.8298': attribute type 1 has an invalid length. [ 1088.710760][T29405] erspan1: entered allmulticast mode [ 1088.810341][T29410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.815001][T29408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.815425][T29408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.815861][T29410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.897892][T29414] FAULT_INJECTION: forcing a failure. [ 1088.897892][T29414] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.897915][T29414] CPU: 0 UID: 0 PID: 29414 Comm: syz.3.8300 Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.897930][T29414] Tainted: [L]=SOFTLOCKUP [ 1088.897934][T29414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1088.897941][T29414] Call Trace: [ 1088.897945][T29414] [ 1088.897950][T29414] dump_stack_lvl+0xe8/0x150 [ 1088.897970][T29414] should_fail_ex+0x410/0x560 [ 1088.897986][T29414] should_failslab+0xa8/0x100 [ 1088.898001][T29414] ? skb_clone+0x212/0x3a0 [ 1088.898012][T29414] kmem_cache_alloc_noprof+0xa1/0x600 [ 1088.898032][T29414] ? skb_clone+0x212/0x3a0 [ 1088.898045][T29414] skb_clone+0x212/0x3a0 [ 1088.898054][T29414] ? nfnetlink_rcv+0x4b0/0x28c0 [ 1088.898066][T29414] nfnetlink_rcv+0x4de/0x28c0 [ 1088.898078][T29414] ? __dev_queue_xmit+0x29b/0x3920 [ 1088.898092][T29414] ? __local_bh_enable_ip+0xd6/0x140 [ 1088.898106][T29414] ? lockdep_hardirqs_on+0x7b/0x110 [ 1088.898122][T29414] ? __dev_queue_xmit+0x29b/0x3920 [ 1088.898132][T29414] ? __local_bh_enable_ip+0xd6/0x140 [ 1088.898145][T29414] ? __dev_queue_xmit+0x29b/0x3920 [ 1088.898155][T29414] ? __dev_queue_xmit+0x1efb/0x3920 [ 1088.898165][T29414] ? do_syscall_64+0x166/0x520 [ 1088.898181][T29414] ? __dev_queue_xmit+0x29b/0x3920 [ 1088.898196][T29414] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1088.898213][T29414] ? ref_tracker_free+0x689/0x830 [ 1088.898228][T29414] ? __pfx_ref_tracker_free+0x10/0x10 [ 1088.898246][T29414] ? __skb_clone+0x449/0x6c0 [ 1088.898259][T29414] ? skb_clone+0x246/0x3a0 [ 1088.898270][T29414] ? __netlink_deliver_tap+0x811/0x860 [ 1088.898281][T29414] ? netlink_deliver_tap+0x2e/0x1b0 [ 1088.898295][T29414] ? netlink_deliver_tap+0x2e/0x1b0 [ 1088.898306][T29414] ? netlink_deliver_tap+0x2e/0x1b0 [ 1088.898320][T29414] netlink_unicast+0x7bd/0x940 [ 1088.898335][T29414] netlink_sendmsg+0x813/0xb40 [ 1088.898351][T29414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1088.898366][T29414] ? apparmor_socket_sendmsg+0x98/0x360 [ 1088.898382][T29414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1088.898392][T29414] sock_sendmsg_nosec+0x13a/0x180 [ 1088.898406][T29414] ____sys_sendmsg+0x54e/0x850 [ 1088.898425][T29414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1088.898445][T29414] ? import_iovec+0x73/0xa0 [ 1088.898461][T29414] ___sys_sendmsg+0x2a5/0x360 [ 1088.898476][T29414] ? __lock_acquire+0x747/0x2de0 [ 1088.898490][T29414] ? __pfx____sys_sendmsg+0x10/0x10 [ 1088.898524][T29414] ? __fget_files+0x2a/0x420 [ 1088.898540][T29414] ? __fget_files+0x3a2/0x420 [ 1088.898560][T29414] __x64_sys_sendmsg+0x1b1/0x290 [ 1088.898577][T29414] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1088.898602][T29414] do_syscall_64+0x166/0x520 [ 1088.898617][T29414] ? trace_irq_disable+0x3b/0x140 [ 1088.898628][T29414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.898638][T29414] ? clear_bhb_loop+0x70/0xc0 [ 1088.898651][T29414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.898660][T29414] RIP: 0033:0x7fad9ab9e199 [ 1088.898671][T29414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.898680][T29414] RSP: 002b:00007fad9baa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1088.898692][T29414] RAX: ffffffffffffffda RBX: 00007fad9ae25fa0 RCX: 00007fad9ab9e199 [ 1088.898699][T29414] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1088.898706][T29414] RBP: 00007fad9baa7090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.898713][T29414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.898719][T29414] R13: 00007fad9ae26038 R14: 00007fad9ae25fa0 R15: 00007fad9af4fa48 [ 1088.898735][T29414] [ 1088.955082][T29071] Bluetooth: hci4: command 0x0c1a tx timeout [ 1088.955118][T29071] Bluetooth: hci2: command 0x0c1a tx timeout [ 1088.955143][T29071] Bluetooth: hci1: command 0x0c1a tx timeout [ 1088.955165][T29071] Bluetooth: hci0: command 0x0c1a tx timeout [ 1088.955188][T29071] Bluetooth: hci3: command 0x0c1a tx timeout [ 1088.955248][T11731] Bluetooth: hci6: command 0x0c1a tx timeout [ 1089.458741][T29423] pim6reg1: entered promiscuous mode [ 1089.458756][T29423] pim6reg1: entered allmulticast mode [ 1090.160954][ T5708] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1090.161025][ T5708] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 1090.165752][ T5708] usb 4-1: USB disconnect, device number 96 [ 1090.475341][ T5708] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1090.605005][ T5708] usb 4-1: device descriptor read/64, error -71 [ 1090.844954][ T5708] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1090.974979][ T5708] usb 4-1: device descriptor read/64, error -71 [ 1091.035125][T11731] Bluetooth: hci6: command 0x0c1a tx timeout [ 1091.085225][ T5708] usb usb4-port1: attempt power cycle [ 1091.425179][ T5708] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1091.445909][ T5708] usb 4-1: device descriptor read/8, error -71 [ 1091.497777][T29458] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8313'. [ 1091.655643][T29464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8312'. [ 1091.685108][ T5708] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1091.707488][ T5708] usb 4-1: device descriptor read/8, error -71 [ 1091.746514][T29458] could not allocate digest TFM handle hmac(sha256-neon) [ 1091.817725][ T5708] usb usb4-port1: unable to enumerate USB device [ 1092.871321][T29479] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8319'. [ 1093.071229][T29481] overlayfs: missing 'lowerdir' [ 1093.078167][ T31] kauditd_printk_skb: 46 callbacks suppressed [ 1093.078184][ T31] audit: type=1326 audit(1791359052.509:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29480 comm="syz.2.8321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1093.078411][ T31] audit: type=1326 audit(1791359052.509:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29480 comm="syz.2.8321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1093.078657][ T31] audit: type=1326 audit(1791359052.509:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29480 comm="syz.2.8321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1093.078889][ T31] audit: type=1326 audit(1791359052.509:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29480 comm="syz.2.8321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1093.079075][ T31] audit: type=1326 audit(1791359052.509:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29480 comm="syz.2.8321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1093.079319][ T31] audit: type=1326 audit(1791359052.509:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29480 comm="syz.2.8321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1093.079561][ T31] audit: type=1326 audit(1791359052.509:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29480 comm="syz.2.8321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1093.079757][ T31] audit: type=1326 audit(1791359052.509:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29480 comm="syz.2.8321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1093.079934][ T31] audit: type=1326 audit(1791359052.509:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29480 comm="syz.2.8321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1093.080604][ T31] audit: type=1326 audit(1791359052.509:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29480 comm="syz.2.8321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1093.138517][T11731] Bluetooth: hci6: command 0x0c1a tx timeout [ 1093.520317][T26706] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.731052][T26706] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.792485][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1093.804156][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1093.815666][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1093.816923][T29493] syzkaller0: entered promiscuous mode [ 1093.816941][T29493] syzkaller0: entered allmulticast mode [ 1093.817256][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1093.823847][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1093.829205][T29493] tipc: Enabled bearer , priority 0 [ 1093.835280][T29493] tipc: Resetting bearer [ 1093.875135][T29492] tipc: Resetting bearer [ 1093.887179][ T5708] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1093.922999][T29492] tipc: Disabling bearer [ 1093.958875][T26706] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.035743][ T5708] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1094.036952][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.036980][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.037015][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.039620][ T5708] usb 4-1: config 0 descriptor?? [ 1094.107314][T26706] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.124279][T29497] syzkaller0: entered promiscuous mode [ 1094.124300][T29497] syzkaller0: entered allmulticast mode [ 1094.406463][T29506] netlink: 'syz.2.8330': attribute type 21 has an invalid length. [ 1094.406485][T29506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8330'. [ 1094.443637][T26706] bridge_slave_0: left allmulticast mode [ 1094.443755][T26706] bridge_slave_0: left promiscuous mode [ 1094.443956][T26706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.455547][ T5708] usbhid 4-1:0.0: can't add hid device: -32 [ 1094.455640][ T5708] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1094.482980][T29506] netlink: 'syz.2.8330': attribute type 21 has an invalid length. [ 1094.483002][T29506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8330'. [ 1094.773839][T26706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.784699][T26706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.798630][T26706] bond0 (unregistering): Released all slaves [ 1094.946912][T27207] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1094.946979][T27207] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1094.947008][T27207] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1094.947036][T27207] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.061343][T29495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.061539][T29495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.061683][T29495] bridge_slave_0: entered allmulticast mode [ 1095.063415][T29495] bridge_slave_0: entered promiscuous mode [ 1095.091741][T29495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.091833][T29495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.092637][T29495] bridge_slave_1: entered allmulticast mode [ 1095.116836][T29495] bridge_slave_1: entered promiscuous mode [ 1095.125277][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1095.186548][T29495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.190917][T29495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.195027][T11731] Bluetooth: hci6: command 0x0c1a tx timeout [ 1095.217850][T29495] team0: Port device team_slave_0 added [ 1095.220557][T29495] team0: Port device team_slave_1 added [ 1095.274447][T29495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.274464][T29495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.274486][T29495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.276837][T29495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.276849][T29495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.276872][T29495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.366725][T26706] hsr_slave_0: left promiscuous mode [ 1095.372409][T26706] hsr_slave_1: left promiscuous mode [ 1095.372942][T26706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1095.372955][T26706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.373496][T26706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.373513][T26706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.393268][T26706] veth1_macvtap: left promiscuous mode [ 1095.393304][T26706] veth0_macvtap: left promiscuous mode [ 1095.393426][T26706] veth1_vlan: left promiscuous mode [ 1095.393488][T26706] veth0_vlan: left promiscuous mode [ 1095.637961][T26706] team0 (unregistering): Port device team_slave_1 removed [ 1095.644745][T26706] team0 (unregistering): Port device team_slave_0 removed [ 1095.774203][T29532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1095.920617][T11731] Bluetooth: hci3: command tx timeout [ 1096.016665][T29495] hsr_slave_0: entered promiscuous mode [ 1096.017611][T29495] hsr_slave_1: entered promiscuous mode [ 1096.018260][T29495] debugfs: 'hsr0' already exists in 'hsr' [ 1096.018280][T29495] Cannot create hsr debugfs directory [ 1096.568876][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1096.590193][T29495] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1096.592974][T29495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1096.593815][T29495] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1096.617531][T29495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1096.618328][T29495] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1096.621712][T29495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1096.622583][T29495] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1096.647963][T29495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1096.715517][ T5708] usb 4-1: USB disconnect, device number 101 [ 1096.854187][T29495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.881944][T29495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.890467][T27208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.890572][T27208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.907080][T27207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.907177][T27207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.082438][T29577] FAULT_INJECTION: forcing a failure. [ 1097.082438][T29577] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.082472][T29577] CPU: 1 UID: 0 PID: 29577 Comm: syz.3.8338 Tainted: G L syzkaller #0 PREEMPT(full) [ 1097.082496][T29577] Tainted: [L]=SOFTLOCKUP [ 1097.082504][T29577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1097.082514][T29577] Call Trace: [ 1097.082522][T29577] [ 1097.082531][T29577] dump_stack_lvl+0xe8/0x150 [ 1097.082568][T29577] should_fail_ex+0x410/0x560 [ 1097.082600][T29577] should_failslab+0xa8/0x100 [ 1097.082624][T29577] ? skb_clone+0x212/0x3a0 [ 1097.082647][T29577] kmem_cache_alloc_noprof+0xa1/0x600 [ 1097.082668][T29577] ? skb_clone+0x212/0x3a0 [ 1097.082691][T29577] skb_clone+0x212/0x3a0 [ 1097.082712][T29577] __netlink_deliver_tap+0x413/0x860 [ 1097.082743][T29577] ? netlink_deliver_tap+0x2e/0x1b0 [ 1097.082774][T29577] netlink_deliver_tap+0x19c/0x1b0 [ 1097.082795][T29577] netlink_unicast+0x781/0x940 [ 1097.082823][T29577] netlink_sendmsg+0x813/0xb40 [ 1097.082860][T29577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1097.082898][T29577] ? apparmor_socket_sendmsg+0x98/0x360 [ 1097.082921][T29577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1097.082940][T29577] sock_sendmsg_nosec+0x13a/0x180 [ 1097.082965][T29577] ____sys_sendmsg+0x54e/0x850 [ 1097.082994][T29577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1097.083028][T29577] ? import_iovec+0x73/0xa0 [ 1097.083055][T29577] ___sys_sendmsg+0x2a5/0x360 [ 1097.083084][T29577] ? __lock_acquire+0x747/0x2de0 [ 1097.083106][T29577] ? __pfx____sys_sendmsg+0x10/0x10 [ 1097.083161][T29577] ? __fget_files+0x2a/0x420 [ 1097.083186][T29577] ? __fget_files+0x3a2/0x420 [ 1097.083221][T29577] __x64_sys_sendmsg+0x1b1/0x290 [ 1097.083250][T29577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1097.083299][T29577] do_syscall_64+0x166/0x520 [ 1097.083324][T29577] ? trace_irq_disable+0x3b/0x140 [ 1097.083343][T29577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.083363][T29577] ? clear_bhb_loop+0x70/0xc0 [ 1097.083386][T29577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.083404][T29577] RIP: 0033:0x7fad9ab9e199 [ 1097.083422][T29577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.083438][T29577] RSP: 002b:00007fad9baa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1097.083459][T29577] RAX: ffffffffffffffda RBX: 00007fad9ae25fa0 RCX: 00007fad9ab9e199 [ 1097.083473][T29577] RDX: 0000000000004814 RSI: 0000200000000100 RDI: 0000000000000004 [ 1097.083485][T29577] RBP: 00007fad9baa7090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.083498][T29577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.083509][T29577] R13: 00007fad9ae26038 R14: 00007fad9ae25fa0 R15: 00007fad9af4fa48 [ 1097.083538][T29577] [ 1097.093756][T29495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.201248][T29495] veth0_vlan: entered promiscuous mode [ 1097.231477][T29495] veth1_vlan: entered promiscuous mode [ 1097.272121][T29553] FAULT_INJECTION: forcing a failure. [ 1097.272121][T29553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.272155][T29553] CPU: 0 UID: 0 PID: 29553 Comm: syz.1.8335 Tainted: G L syzkaller #0 PREEMPT(full) [ 1097.272181][T29553] Tainted: [L]=SOFTLOCKUP [ 1097.272188][T29553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1097.272198][T29553] Call Trace: [ 1097.272206][T29553] [ 1097.272214][T29553] dump_stack_lvl+0xe8/0x150 [ 1097.272252][T29553] should_fail_ex+0x410/0x560 [ 1097.272280][T29553] _copy_to_iter+0x1e4/0x1810 [ 1097.272306][T29553] ? do_raw_spin_lock+0x12b/0x2f0 [ 1097.272337][T29553] ? __pfx__copy_to_iter+0x10/0x10 [ 1097.272360][T29553] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1097.272386][T29553] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1097.272410][T29553] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 1097.272433][T29553] __skb_datagram_iter+0xf8/0x980 [ 1097.272450][T29553] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 1097.272473][T29553] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1097.272500][T29553] skb_copy_datagram_iter+0xb5/0x240 [ 1097.272522][T29553] packet_recvmsg+0x70c/0x1690 [ 1097.272553][T29553] ? aa_file_perm+0x18b/0x15f0 [ 1097.272582][T29553] ? __pfx_packet_recvmsg+0x10/0x10 [ 1097.272605][T29553] ? __pfx_aa_sk_perm+0x10/0x10 [ 1097.272630][T29553] ? aa_sock_msg_perm+0x144/0x210 [ 1097.272658][T29553] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1097.272682][T29553] ? security_socket_recvmsg+0x7e/0x2c0 [ 1097.272700][T29553] ? __pfx_packet_recvmsg+0x10/0x10 [ 1097.272722][T29553] sock_recvmsg+0x196/0x1e0 [ 1097.272746][T29553] sock_read_iter+0x22a/0x2f0 [ 1097.272768][T29553] ? __pfx_sock_read_iter+0x10/0x10 [ 1097.272794][T29553] ? bpf_lsm_file_permission+0x9/0x20 [ 1097.272818][T29553] ? security_file_permission+0x75/0x260 [ 1097.272845][T29553] vfs_read+0x595/0xa80 [ 1097.272871][T29553] ? __pfx_vfs_read+0x10/0x10 [ 1097.272897][T29553] ? __fget_files+0x2a/0x420 [ 1097.272930][T29553] ksys_read+0x150/0x270 [ 1097.272949][T29553] ? __pfx_ksys_read+0x10/0x10 [ 1097.272976][T29553] do_syscall_64+0x166/0x520 [ 1097.273001][T29553] ? trace_irq_disable+0x3b/0x140 [ 1097.273021][T29553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.273040][T29553] ? clear_bhb_loop+0x70/0xc0 [ 1097.273061][T29553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.273078][T29553] RIP: 0033:0x7fef2999e199 [ 1097.273095][T29553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.273112][T29553] RSP: 002b:00007fef2a8d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1097.273131][T29553] RAX: ffffffffffffffda RBX: 00007fef29c25fa0 RCX: 00007fef2999e199 [ 1097.273145][T29553] RDX: 0000000000002020 RSI: 00002000000016c0 RDI: 0000000000000003 [ 1097.273156][T29553] RBP: 00007fef2a8d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.273168][T29553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.273178][T29553] R13: 00007fef29c26038 R14: 00007fef29c25fa0 R15: 00007fef29d4fa48 [ 1097.273207][T29553] [ 1097.350213][T29495] veth0_macvtap: entered promiscuous mode [ 1097.369852][T29495] veth1_macvtap: entered promiscuous mode [ 1097.461613][T29495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.498132][T29495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1097.575057][T27208] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.575312][T27208] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.575601][T27208] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.575632][T27208] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.687848][T29585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.695906][T29585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.749386][T29585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1097.901740][T27208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.901762][T27208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.972174][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1097.989479][T27204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.989499][T27204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.995249][T11731] Bluetooth: hci3: command tx timeout [ 1098.233907][T29601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8342'. [ 1098.233942][T29601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8342'. [ 1098.450332][T29608] can: request_module (can-proto-4) failed. [ 1098.459922][T29617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.462241][T29617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.645013][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1098.671480][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1098.806038][ T10] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1098.810987][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.811017][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.811055][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.824422][ T10] usb 8-1: config 0 descriptor?? [ 1098.922013][T29634] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.8348'. [ 1099.184103][T29641] overlayfs: option "workdir=/536" is useless in a non-upper mount, ignore [ 1099.184136][T29641] overlayfs: missing 'lowerdir' [ 1099.185542][T29641] fuse: Bad value for 'fd' [ 1099.209993][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 1099.210031][ T31] audit: type=1326 audit(1791359058.639:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29640 comm="syz.2.8351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1099.210075][ T31] audit: type=1326 audit(1791359058.639:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29640 comm="syz.2.8351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1099.210113][ T31] audit: type=1326 audit(1791359058.639:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29640 comm="syz.2.8351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1099.210174][ T31] audit: type=1326 audit(1791359058.639:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29640 comm="syz.2.8351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1099.210211][ T31] audit: type=1326 audit(1791359058.639:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29640 comm="syz.2.8351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1099.210247][ T31] audit: type=1326 audit(1791359058.639:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29640 comm="syz.2.8351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1099.210284][ T31] audit: type=1326 audit(1791359058.639:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29640 comm="syz.2.8351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1099.210342][ T31] audit: type=1326 audit(1791359058.639:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29640 comm="syz.2.8351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1099.211900][ T31] audit: type=1326 audit(1791359058.639:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29640 comm="syz.2.8351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1099.211954][ T31] audit: type=1326 audit(1791359058.639:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29640 comm="syz.2.8351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd9e199 code=0x7ffc0000 [ 1099.261203][ T10] usbhid 8-1:0.0: can't add hid device: -32 [ 1099.261520][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 1099.511825][T29644] FAULT_INJECTION: forcing a failure. [ 1099.511825][T29644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1099.511858][T29644] CPU: 1 UID: 0 PID: 29644 Comm: syz.2.8352 Tainted: G L syzkaller #0 PREEMPT(full) [ 1099.511884][T29644] Tainted: [L]=SOFTLOCKUP [ 1099.511902][T29644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1099.511913][T29644] Call Trace: [ 1099.511921][T29644] [ 1099.511930][T29644] dump_stack_lvl+0xe8/0x150 [ 1099.511961][T29644] should_fail_ex+0x410/0x560 [ 1099.511989][T29644] _copy_from_iter+0x1d3/0x1660 [ 1099.512017][T29644] ? __alloc_skb+0x27a/0x7a0 [ 1099.512043][T29644] ? __alloc_skb+0x27a/0x7a0 [ 1099.512069][T29644] ? __alloc_skb+0x27a/0x7a0 [ 1099.512093][T29644] ? __pfx__copy_from_iter+0x10/0x10 [ 1099.512113][T29644] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1099.512133][T29644] ? __alloc_skb+0x27a/0x7a0 [ 1099.512155][T29644] ? __alloc_skb+0x27a/0x7a0 [ 1099.512184][T29644] ? netlink_sendmsg+0x650/0xb40 [ 1099.512205][T29644] ? skb_put+0x112/0x210 [ 1099.512232][T29644] netlink_sendmsg+0x6c0/0xb40 [ 1099.512261][T29644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1099.512289][T29644] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1099.512315][T29644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1099.512335][T29644] sock_sendmsg_nosec+0x13a/0x180 [ 1099.512359][T29644] ____sys_sendmsg+0x54e/0x850 [ 1099.512391][T29644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1099.512427][T29644] ? import_iovec+0x73/0xa0 [ 1099.512454][T29644] ___sys_sendmsg+0x2a5/0x360 [ 1099.512481][T29644] ? __lock_acquire+0x747/0x2de0 [ 1099.512505][T29644] ? __pfx____sys_sendmsg+0x10/0x10 [ 1099.512562][T29644] ? __fget_files+0x2a/0x420 [ 1099.512588][T29644] ? __fget_files+0x3a2/0x420 [ 1099.512623][T29644] __x64_sys_sendmsg+0x1b1/0x290 [ 1099.512653][T29644] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1099.512699][T29644] do_syscall_64+0x166/0x520 [ 1099.512726][T29644] ? trace_irq_disable+0x3b/0x140 [ 1099.512745][T29644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.512764][T29644] ? clear_bhb_loop+0x70/0xc0 [ 1099.512787][T29644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.512805][T29644] RIP: 0033:0x7ff63dd9e199 [ 1099.512824][T29644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.512840][T29644] RSP: 002b:00007ff63ebda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.512860][T29644] RAX: ffffffffffffffda RBX: 00007ff63e025fa0 RCX: 00007ff63dd9e199 [ 1099.512875][T29644] RDX: 0000000020040084 RSI: 0000200000000740 RDI: 0000000000000003 [ 1099.512895][T29644] RBP: 00007ff63ebda090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.512907][T29644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.512918][T29644] R13: 00007ff63e026038 R14: 00007ff63e025fa0 R15: 00007ff63e14fa48 [ 1099.512946][T29644] [ 1100.062578][T29663] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8357'. [ 1100.083325][T11731] Bluetooth: hci3: command tx timeout [ 1100.205600][T14037] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1100.377582][T29654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1100.395683][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1100.416946][T14037] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1100.419226][T14037] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1100.419248][T14037] usb 4-1: can't read configurations, error -71 [ 1100.950905][ T10] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 1100.968248][ T10] hid-generic 0000:0000:0000.0056: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1101.283192][T29680] FAULT_INJECTION: forcing a failure. [ 1101.283192][T29680] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1101.283392][T29680] CPU: 0 UID: 0 PID: 29680 Comm: syz.3.8361 Tainted: G L syzkaller #0 PREEMPT(full) [ 1101.283420][T29680] Tainted: [L]=SOFTLOCKUP [ 1101.283428][T29680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1101.283440][T29680] Call Trace: [ 1101.283448][T29680] [ 1101.283457][T29680] dump_stack_lvl+0xe8/0x150 [ 1101.283489][T29680] should_fail_ex+0x410/0x560 [ 1101.283518][T29680] prepare_alloc_pages+0x223/0x600 [ 1101.283548][T29680] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1101.283575][T29680] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1101.283601][T29680] ? __pfx_policy_nodemask+0x10/0x10 [ 1101.283624][T29680] ? kmem_cache_alloc_noprof+0xe1/0x600 [ 1101.283644][T29680] ? stack_depot_save_flags+0x33/0x7f0 [ 1101.283668][T29680] ? __pfx___css_rstat_updated+0x10/0x10 [ 1101.283693][T29680] alloc_pages_mpol+0x21e/0x390 [ 1101.283724][T29680] folio_alloc_mpol_noprof+0x39/0x160 [ 1101.283752][T29680] shmem_alloc_and_add_folio+0x43e/0xf60 [ 1101.283778][T29680] ? filemap_get_entry+0xcd/0x3f0 [ 1101.283819][T29680] ? __pfx_filemap_get_entry+0x10/0x10 [ 1101.283845][T29680] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1101.283879][T29680] ? shmem_allowable_huge_orders+0x61e/0x6c0 [ 1101.283910][T29680] shmem_get_folio_gfp+0x5da/0x16d0 [ 1101.283952][T29680] shmem_fault+0x179/0x390 [ 1101.283986][T29680] __do_fault+0x138/0x2a0 [ 1101.284008][T29680] do_pte_missing+0x684/0x34b0 [ 1101.284034][T29680] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1101.284066][T29680] handle_mm_fault+0x1a53/0x3750 [ 1101.284104][T29680] ? handle_mm_fault+0xf1/0x3750 [ 1101.284141][T29680] ? __pfx_handle_mm_fault+0x10/0x10 [ 1101.284186][T29680] ? lock_mm_and_find_vma+0xa7/0x340 [ 1101.284209][T29680] do_user_addr_fault+0x746/0x1340 [ 1101.284245][T29680] exc_page_fault+0x6a/0xc0 [ 1101.284273][T29680] asm_exc_page_fault+0x26/0x30 [ 1101.284292][T29680] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 1101.284314][T29680] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 68 04 00 66 2e 0f 1f [ 1101.284331][T29680] RSP: 0018:ffffc90003a5f768 EFLAGS: 00050202 [ 1101.284349][T29680] RAX: ffffffff84dfb500 RBX: 0000000000000004 RCX: 0000000000000004 [ 1101.284362][T29680] RDX: 0000000000000000 RSI: ffffc90003a5f860 RDI: 00002000000007c0 [ 1101.284376][T29680] RBP: ffffc90003a5faa0 R08: 0000000000000003 R09: 0000000000000004 [ 1101.284388][T29680] R10: dffffc0000000000 R11: fffff5200074bf0c R12: 00002000000007c4 [ 1101.284402][T29680] R13: 00007ffffffff000 R14: ffffc90003a5f860 R15: 00002000000007c0 [ 1101.284424][T29680] ? _copy_to_user+0x10/0xb0 [ 1101.284455][T29680] _copy_to_user+0x8a/0xb0 [ 1101.284482][T29680] do_ipv6_getsockopt+0x1034/0x2510 [ 1101.284500][T29680] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 1101.284537][T29680] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 1101.284562][T29680] ? rcu_is_watching+0x16/0xb0 [ 1101.284585][T29680] ? trace_sched_exit_tp+0x3a/0x130 [ 1101.284610][T29680] ? __schedule+0x17f1/0x58f0 [ 1101.284643][T29680] ? begin_current_label_crit_section+0x2a3/0x830 [ 1101.284674][T29680] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 1101.284710][T29680] ? aa_inet_opt_perm+0xae4/0xcf0 [ 1101.284746][T29680] ipv6_getsockopt+0xbd/0x2c0 [ 1101.284767][T29680] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 1101.284784][T29680] ? lock_acquire+0x115/0x350 [ 1101.284830][T29680] ? get_pid_task+0x20/0x1f0 [ 1101.284853][T29680] rawv6_getsockopt+0x380/0x680 [ 1101.284884][T29680] ? lock_acquire+0x115/0x350 [ 1101.284904][T29680] ? __pfx_rawv6_getsockopt+0x10/0x10 [ 1101.284947][T29680] ? sock_common_getsockopt+0x2d/0xb0 [ 1101.284972][T29680] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1101.284996][T29680] do_sock_getsockopt+0x51d/0x7e0 [ 1101.285030][T29680] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1101.285073][T29680] ? __fget_files+0x3a2/0x420 [ 1101.285099][T29680] ? __fget_files+0x2a/0x420 [ 1101.285131][T29680] __x64_sys_getsockopt+0x1a4/0x240 [ 1101.285167][T29680] do_syscall_64+0x166/0x520 [ 1101.285192][T29680] ? trace_irq_disable+0x3b/0x140 [ 1101.285212][T29680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.285230][T29680] ? clear_bhb_loop+0x70/0xc0 [ 1101.285253][T29680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.285271][T29680] RIP: 0033:0x7fad9ab9e199 [ 1101.285287][T29680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.285302][T29680] RSP: 002b:00007fad9ba86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1101.285321][T29680] RAX: ffffffffffffffda RBX: 00007fad9ae26090 RCX: 00007fad9ab9e199 [ 1101.285335][T29680] RDX: 000000000000003e RSI: 0000000000000029 RDI: 0000000000000005 [ 1101.285346][T29680] RBP: 00007fad9ba86090 R08: 00002000000007c0 R09: 0000000000000000 [ 1101.285358][T29680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.285370][T29680] R13: 00007fad9ae26128 R14: 00007fad9ae26090 R15: 00007fad9af4fa48 [ 1101.285400][T29680] [ 1101.292512][T29686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8362'. [ 1101.550612][T14037] usb 8-1: USB disconnect, device number 2 [ 1101.622962][T11731] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1101.624472][T11731] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1101.631265][T29689] loop8: detected capacity change from 0 to 16384 [ 1101.998000][T29691] loop8: detected capacity change from 16384 to 16383 [ 1102.155658][T11731] Bluetooth: hci3: command tx timeout [ 1102.225406][ T5708] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1102.290314][T29707] FAULT_INJECTION: forcing a failure. [ 1102.290314][T29707] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.290336][T29707] CPU: 0 UID: 0 PID: 29707 Comm: syz.0.8368 Tainted: G L syzkaller #0 PREEMPT(full) [ 1102.290351][T29707] Tainted: [L]=SOFTLOCKUP [ 1102.290355][T29707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1102.290362][T29707] Call Trace: [ 1102.290367][T29707] [ 1102.290372][T29707] dump_stack_lvl+0xe8/0x150 [ 1102.290392][T29707] should_fail_ex+0x410/0x560 [ 1102.290409][T29707] should_failslab+0xa8/0x100 [ 1102.290424][T29707] ? skb_clone+0x212/0x3a0 [ 1102.290435][T29707] kmem_cache_alloc_noprof+0xa1/0x600 [ 1102.290448][T29707] ? skb_clone+0x212/0x3a0 [ 1102.290461][T29707] skb_clone+0x212/0x3a0 [ 1102.290470][T29707] ? nfnetlink_rcv+0x4b0/0x28c0 [ 1102.290482][T29707] nfnetlink_rcv+0x4de/0x28c0 [ 1102.290494][T29707] ? __dev_queue_xmit+0x29b/0x3920 [ 1102.290507][T29707] ? __local_bh_enable_ip+0xd6/0x140 [ 1102.290521][T29707] ? lockdep_hardirqs_on+0x7b/0x110 [ 1102.290536][T29707] ? __dev_queue_xmit+0x29b/0x3920 [ 1102.290546][T29707] ? __local_bh_enable_ip+0xd6/0x140 [ 1102.290559][T29707] ? __dev_queue_xmit+0x29b/0x3920 [ 1102.290568][T29707] ? __dev_queue_xmit+0x1efb/0x3920 [ 1102.290579][T29707] ? do_syscall_64+0x166/0x520 [ 1102.290595][T29707] ? __dev_queue_xmit+0x29b/0x3920 [ 1102.290609][T29707] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1102.290627][T29707] ? ref_tracker_free+0x689/0x830 [ 1102.290642][T29707] ? __pfx_ref_tracker_free+0x10/0x10 [ 1102.290660][T29707] ? __skb_clone+0x449/0x6c0 [ 1102.290673][T29707] ? skb_clone+0x246/0x3a0 [ 1102.290684][T29707] ? __netlink_deliver_tap+0x811/0x860 [ 1102.290695][T29707] ? netlink_deliver_tap+0x2e/0x1b0 [ 1102.290710][T29707] ? netlink_deliver_tap+0x2e/0x1b0 [ 1102.290721][T29707] ? netlink_deliver_tap+0x2e/0x1b0 [ 1102.290734][T29707] netlink_unicast+0x7bd/0x940 [ 1102.290749][T29707] netlink_sendmsg+0x813/0xb40 [ 1102.290773][T29707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1102.290789][T29707] ? apparmor_socket_sendmsg+0x98/0x360 [ 1102.290803][T29707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1102.290814][T29707] sock_sendmsg_nosec+0x13a/0x180 [ 1102.290828][T29707] ____sys_sendmsg+0x54e/0x850 [ 1102.290846][T29707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1102.290866][T29707] ? import_iovec+0x73/0xa0 [ 1102.290882][T29707] ___sys_sendmsg+0x2a5/0x360 [ 1102.290897][T29707] ? __lock_acquire+0x747/0x2de0 [ 1102.290911][T29707] ? __pfx____sys_sendmsg+0x10/0x10 [ 1102.290944][T29707] ? __fget_files+0x2a/0x420 [ 1102.290959][T29707] ? __fget_files+0x3a2/0x420 [ 1102.290979][T29707] __x64_sys_sendmsg+0x1b1/0x290 [ 1102.290996][T29707] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1102.291022][T29707] do_syscall_64+0x166/0x520 [ 1102.291036][T29707] ? trace_irq_disable+0x3b/0x140 [ 1102.291048][T29707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.291059][T29707] ? clear_bhb_loop+0x70/0xc0 [ 1102.291071][T29707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.291081][T29707] RIP: 0033:0x7f605579e199 [ 1102.291092][T29707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.291101][T29707] RSP: 002b:00007f60565a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1102.291113][T29707] RAX: ffffffffffffffda RBX: 00007f6055a25fa0 RCX: 00007f605579e199 [ 1102.291120][T29707] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1102.291127][T29707] RBP: 00007f60565a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.291133][T29707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.291139][T29707] R13: 00007f6055a26038 R14: 00007f6055a25fa0 R15: 00007f6055b4fa48 [ 1102.291155][T29707] [ 1102.375784][ T5708] usb 4-1: Using ep0 maxpacket: 16 [ 1102.377438][ T5708] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1102.378486][ T5708] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 1102.378508][ T5708] usb 4-1: config 0 has no interface number 0 [ 1102.378545][ T5708] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 14129, setting to 64 [ 1102.382303][ T5708] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1102.382316][ T5708] usb 4-1: Product: syz [ 1102.382324][ T5708] usb 4-1: Manufacturer: syz [ 1102.382331][ T5708] usb 4-1: SerialNumber: syz [ 1102.393057][ T5708] usb 4-1: config 0 descriptor?? [ 1102.405285][ T5708] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 1102.405667][ T5708] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 1102.405735][ T5708] keyspan 4-1:0.107: unsupported endpoint type 0 [ 1102.412778][ T5708] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 1102.422815][ T5708] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1102.429212][ T5708] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 1102.433052][T29696] ip_tables: iptables: counters copy to user failed while replacing table [ 1102.437622][ T5708] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1102.441537][ T5708] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 1102.446964][ T5708] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1102.458001][ T5708] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 1102.462126][ T5708] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1102.496776][T29710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8369'. [ 1102.501531][T29710] netlink: 'syz.0.8369': attribute type 7 has an invalid length. [ 1102.501548][T29710] netlink: 'syz.0.8369': attribute type 5 has an invalid length. [ 1102.501560][T29710] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8369'. [ 1102.968155][T29714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.985221][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.161822][T29721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.163388][T29721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.539321][T29731] overlayfs: option "workdir=/6" is useless in a non-upper mount, ignore [ 1104.539343][T29731] overlayfs: missing 'lowerdir' [ 1104.541086][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 1104.541101][ T31] audit: type=1326 audit(1791359063.969:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29730 comm="syz.7.8376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fe99e199 code=0x7ffc0000 [ 1104.541511][ T31] audit: type=1326 audit(1791359063.969:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29730 comm="syz.7.8376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fe99e199 code=0x7ffc0000 [ 1104.541554][ T31] audit: type=1326 audit(1791359063.969:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29730 comm="syz.7.8376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fe99e199 code=0x7ffc0000 [ 1104.541592][ T31] audit: type=1326 audit(1791359063.969:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29730 comm="syz.7.8376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fe99e199 code=0x7ffc0000 [ 1104.541634][ T31] audit: type=1326 audit(1791359063.969:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29730 comm="syz.7.8376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f37fe99e199 code=0x7ffc0000 [ 1104.541762][ T31] audit: type=1326 audit(1791359063.969:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29730 comm="syz.7.8376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fe99e199 code=0x7ffc0000 [ 1104.542164][ T31] audit: type=1326 audit(1791359063.969:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29730 comm="syz.7.8376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fe99e199 code=0x7ffc0000 [ 1104.542203][ T31] audit: type=1326 audit(1791359063.969:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29730 comm="syz.7.8376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fe99e199 code=0x7ffc0000 [ 1104.542241][ T31] audit: type=1326 audit(1791359063.969:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29730 comm="syz.7.8376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fe99e199 code=0x7ffc0000 [ 1104.542278][ T31] audit: type=1326 audit(1791359063.969:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29730 comm="syz.7.8376" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f37fe99e199 code=0x7ffc0000 [ 1104.703951][T28494] usb 4-1: USB disconnect, device number 104 [ 1104.712118][T28494] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1104.721223][T28494] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1104.735851][T28494] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1104.751902][T28494] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1104.761274][T28494] keyspan 4-1:0.107: device disconnected [ 1104.882127][T29734] FAULT_INJECTION: forcing a failure. [ 1104.882127][T29734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1104.882151][T29734] CPU: 0 UID: 0 PID: 29734 Comm: syz.7.8377 Tainted: G L syzkaller #0 PREEMPT(full) [ 1104.882166][T29734] Tainted: [L]=SOFTLOCKUP [ 1104.882170][T29734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1104.882176][T29734] Call Trace: [ 1104.882181][T29734] [ 1104.882186][T29734] dump_stack_lvl+0xe8/0x150 [ 1104.882206][T29734] should_fail_ex+0x410/0x560 [ 1104.882223][T29734] _copy_from_user+0x2d/0xb0 [ 1104.882240][T29734] ___sys_sendmsg+0x1c6/0x360 [ 1104.882256][T29734] ? __lock_acquire+0x747/0x2de0 [ 1104.882270][T29734] ? __pfx____sys_sendmsg+0x10/0x10 [ 1104.882285][T29734] ? __lock_acquire+0x747/0x2de0 [ 1104.882298][T29734] ? kstrtouint+0x6e/0xe0 [ 1104.882328][T29734] __sys_sendmmsg+0x273/0x4d0 [ 1104.882346][T29734] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1104.882367][T29734] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1104.882396][T29734] ? ksys_write+0x242/0x270 [ 1104.882408][T29734] ? __pfx_ksys_write+0x10/0x10 [ 1104.882421][T29734] __x64_sys_sendmmsg+0xa0/0xc0 [ 1104.882432][T29734] do_syscall_64+0x166/0x520 [ 1104.882447][T29734] ? trace_irq_disable+0x3b/0x140 [ 1104.882458][T29734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.882469][T29734] ? clear_bhb_loop+0x70/0xc0 [ 1104.882481][T29734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.882492][T29734] RIP: 0033:0x7f37fe99e199 [ 1104.882502][T29734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.882511][T29734] RSP: 002b:00007f37ff7fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1104.882523][T29734] RAX: ffffffffffffffda RBX: 00007f37fec25fa0 RCX: 00007f37fe99e199 [ 1104.882531][T29734] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1104.882538][T29734] RBP: 00007f37ff7fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.882545][T29734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.882551][T29734] R13: 00007f37fec26038 R14: 00007f37fec25fa0 R15: 00007f37fed4fa48 [ 1104.882566][T29734] [ 1105.182964][T29742] FAULT_INJECTION: forcing a failure. [ 1105.182964][T29742] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.182987][T29742] CPU: 0 UID: 0 PID: 29742 Comm: syz.3.8380 Tainted: G L syzkaller #0 PREEMPT(full) [ 1105.183002][T29742] Tainted: [L]=SOFTLOCKUP [ 1105.183006][T29742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1105.183012][T29742] Call Trace: [ 1105.183017][T29742] [ 1105.183022][T29742] dump_stack_lvl+0xe8/0x150 [ 1105.183043][T29742] should_fail_ex+0x410/0x560 [ 1105.183059][T29742] should_failslab+0xa8/0x100 [ 1105.183074][T29742] ? ovs_flow_alloc+0x24/0x1f0 [ 1105.183086][T29742] kmem_cache_alloc_noprof+0xa1/0x600 [ 1105.183098][T29742] ? ovs_flow_alloc+0x24/0x1f0 [ 1105.183113][T29742] ovs_flow_alloc+0x24/0x1f0 [ 1105.183125][T29742] ovs_flow_cmd_new+0x28b/0xea0 [ 1105.183141][T29742] ? __kasan_kmalloc+0x93/0xb0 [ 1105.183156][T29742] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1105.183193][T29742] ? __kmalloc_noprof+0x38c/0x720 [ 1105.183206][T29742] ? __nla_parse+0x40/0x60 [ 1105.183222][T29742] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1105.183238][T29742] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1105.183256][T29742] genl_family_rcv_msg_doit+0x233/0x340 [ 1105.183274][T29742] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1105.183295][T29742] ? bpf_lsm_capable+0x9/0x20 [ 1105.183306][T29742] ? security_capable+0x7e/0x2c0 [ 1105.183323][T29742] genl_rcv_msg+0x614/0x7a0 [ 1105.183340][T29742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1105.183354][T29742] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1105.183374][T29742] netlink_rcv_skb+0x226/0x4a0 [ 1105.183387][T29742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1105.183402][T29742] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1105.183420][T29742] ? down_read+0x2be/0x330 [ 1105.183433][T29742] genl_rcv+0x28/0x40 [ 1105.183454][T29742] netlink_unicast+0x7bd/0x940 [ 1105.183481][T29742] netlink_sendmsg+0x813/0xb40 [ 1105.183508][T29742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1105.183536][T29742] ? apparmor_socket_sendmsg+0x98/0x360 [ 1105.183552][T29742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1105.183564][T29742] sock_sendmsg_nosec+0x13a/0x180 [ 1105.183578][T29742] ____sys_sendmsg+0x54e/0x850 [ 1105.183597][T29742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1105.183617][T29742] ? import_iovec+0x73/0xa0 [ 1105.183634][T29742] ___sys_sendmsg+0x2a5/0x360 [ 1105.183649][T29742] ? __lock_acquire+0x747/0x2de0 [ 1105.183663][T29742] ? __pfx____sys_sendmsg+0x10/0x10 [ 1105.183696][T29742] ? __fget_files+0x2a/0x420 [ 1105.183711][T29742] ? __fget_files+0x3a2/0x420 [ 1105.183731][T29742] __x64_sys_sendmsg+0x1b1/0x290 [ 1105.183749][T29742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1105.183775][T29742] do_syscall_64+0x166/0x520 [ 1105.183790][T29742] ? trace_irq_disable+0x3b/0x140 [ 1105.183801][T29742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.183811][T29742] ? clear_bhb_loop+0x70/0xc0 [ 1105.183824][T29742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.183837][T29742] RIP: 0033:0x7fad9ab9e199 [ 1105.183847][T29742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1105.183856][T29742] RSP: 002b:00007fad9baa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1105.183868][T29742] RAX: ffffffffffffffda RBX: 00007fad9ae25fa0 RCX: 00007fad9ab9e199 [ 1105.183876][T29742] RDX: 000000000000c044 RSI: 0000200000000100 RDI: 0000000000000003 [ 1105.183882][T29742] RBP: 00007fad9baa7090 R08: 0000000000000000 R09: 0000000000000000 [ 1105.183889][T29742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.183896][T29742] R13: 00007fad9ae26038 R14: 00007fad9ae25fa0 R15: 00007fad9af4fa48 [ 1105.183911][T29742] [ 1105.287207][T29745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8381'. [ 1105.348445][T29747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8382'. [ 1105.348472][T29747] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8382'. [ 1105.439626][ T30] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1105.560708][T29753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8384'. [ 1105.626860][T29755] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8385'. [ 1105.648610][ T30] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1105.648657][ T30] usb 8-1: New USB device found, idVendor=0582, idProduct=4201, bcdDevice= 0.40 [ 1105.649849][ T30] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.649871][ T30] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1105.652185][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.652207][ T30] usb 8-1: Product: syz [ 1105.652221][ T30] usb 8-1: Manufacturer: syz [ 1105.652235][ T30] usb 8-1: SerialNumber: syz [ 1105.662479][T29755] openvswitch: netlink: Unexpected mask (mask=40010, allowed=10058) [ 1105.748366][T29758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8386'. [ 1105.754138][T29758] netlink: 'syz.3.8386': attribute type 10 has an invalid length. [ 1105.754151][T29758] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8386'. [ 1105.807522][T29760] overlayfs: option "workdir=/454" is useless in a non-upper mount, ignore [ 1105.807554][T29760] overlayfs: missing 'lowerdir' [ 1105.913923][ T30] usb 8-1: unit 2 not found! [ 1105.913948][ T30] usb 8-1: unit 240 not found! [ 1105.958557][ T30] usb 8-1: USB disconnect, device number 3 [ 1105.977548][T21216] udevd[21216]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1106.145511][ T25] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1106.278317][T29767] nfs: Unknown parameter '' [ 1106.304845][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 1106.312564][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1106.312602][ T25] usb 4-1: too many configurations: 196, using maximum allowed: 8 [ 1106.334747][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1106.335037][ T25] usb 4-1: can't read configurations, error -61 [ 1106.420680][T29778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8394'. [ 1106.466006][ T25] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1106.573937][T29780] netlink: 'syz.7.8395': attribute type 10 has an invalid length. [ 1106.574236][T29780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.574909][T29780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.581402][T29780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.581519][T29780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.581783][T29780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.581896][T29780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.587192][T29780] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1106.650955][T29787] syzkaller0: entered promiscuous mode [ 1106.650969][T29787] syzkaller0: entered allmulticast mode [ 1106.654852][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 1106.659022][T29787] simple: /dev/video#_3 [ 1106.659038][T29787] simple: /dev/video#_6 [ 1106.659048][T29787] simple: /dev/video#_9 [ 1106.659057][T29787] simple: /dev/video#_12 [ 1106.659067][T29787] simple: /dev/video#_15 [ 1106.659076][T29787] simple: /dev/video#_18 [ 1106.659085][T29787] simple: /dev/video#_21 [ 1106.659094][T29787] simple: /dev/video#_24 [ 1106.659104][T29787] simple: /dev/video#_27 [ 1106.659113][T29787] simple: /dev/video#_30 [ 1106.659121][T29787] simple: /dev/video#_33 [ 1106.659130][T29787] simple: /dev/video#_36 [ 1106.659139][T29787] simple: /dev/video#_39 [ 1106.659148][T29787] simple: /dev/video#_42 [ 1106.659158][T29787] simple: /dev/video#_45 [ 1106.659166][T29787] simple: /dev/video#_48 [ 1106.659175][T29787] simple: /dev/video#_51 [ 1106.659184][T29787] simple: /dev/video#_54 [ 1106.659193][T29787] simple: /dev/video#_57 [ 1106.659202][T29787] simple: /dev/video#_60 [ 1106.659210][T29787] simple: /dev/video#_63 [ 1106.659218][T29787] simple: /dev/video#_66 [ 1106.659227][T29787] simple: /dev/video#_69 [ 1106.659236][T29787] simple: /dev/video#_72 [ 1106.659245][T29787] simple: /dev/video#_75 [ 1106.659254][T29787] simple: /dev/video#_78 [ 1106.659271][T29787] simple: /dev/video#_81 [ 1106.659280][T29787] simple: /dev/video#_84 [ 1106.659290][T29787] simple: /dev/video#_87 [ 1106.659316][T29787] simple: /dev/video#_90 [ 1106.659326][T29787] simple: /dev/video#_93 [ 1106.659335][T29787] simple: /dev/video#_96 [ 1106.659346][T29787] TC_ACT_REPEAT abuse ? [ 1106.666440][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1106.666478][ T25] usb 4-1: too many configurations: 196, using maximum allowed: 8 [ 1106.716250][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1106.716288][ T25] usb 4-1: can't read configurations, error -61 [ 1106.716543][ T25] usb usb4-port1: attempt power cycle [ 1106.981570][T29792] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1106.981650][T29792] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1106.982742][T29792] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1106.982891][T29792] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1106.983072][T29792] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1106.983381][T29792] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1106.983462][T29792] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1107.013664][T29792] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1107.051772][T29798] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1107.124897][ T25] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1107.155601][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 1107.156241][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1107.156277][ T25] usb 4-1: too many configurations: 196, using maximum allowed: 8 [ 1107.158787][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1107.158820][ T25] usb 4-1: can't read configurations, error -61 [ 1107.163009][T29795] batman_adv: batadv0: Adding interface: gretap2 [ 1107.163023][T29795] batman_adv: batadv0: The MTU of interface gretap2 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.163431][T29795] batman_adv: batadv0: Interface activated: gretap2 [ 1107.295064][ T25] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1107.316586][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 1107.317099][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1107.317135][ T25] usb 4-1: too many configurations: 196, using maximum allowed: 8 [ 1107.318436][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1107.318469][ T25] usb 4-1: can't read configurations, error -61 [ 1107.320593][ T25] usb usb4-port1: unable to enumerate USB device [ 1107.592396][T29803] FAULT_INJECTION: forcing a failure. [ 1107.592396][T29803] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.592419][T29803] CPU: 1 UID: 0 PID: 29803 Comm: syz.2.8401 Tainted: G L syzkaller #0 PREEMPT(full) [ 1107.592433][T29803] Tainted: [L]=SOFTLOCKUP [ 1107.592438][T29803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1107.592444][T29803] Call Trace: [ 1107.592449][T29803] [ 1107.592454][T29803] dump_stack_lvl+0xe8/0x150 [ 1107.592474][T29803] should_fail_ex+0x410/0x560 [ 1107.592491][T29803] should_failslab+0xa8/0x100 [ 1107.592508][T29803] __kmalloc_noprof+0xfe/0x720 [ 1107.592519][T29803] ? rcu_is_watching+0x16/0xb0 [ 1107.592534][T29803] ? tomoyo_realpath_from_path+0xef/0x640 [ 1107.592549][T29803] ? tomoyo_realpath_from_path+0xef/0x640 [ 1107.592568][T29803] tomoyo_realpath_from_path+0xef/0x640 [ 1107.592591][T29803] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1107.592604][T29803] tomoyo_path_number_perm+0x246/0x5f0 [ 1107.592619][T29803] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1107.592631][T29803] ? __lock_acquire+0x747/0x2de0 [ 1107.592650][T29803] ? hook_file_ioctl+0x1f2/0x600 [ 1107.592674][T29803] ? __fget_files+0x2a/0x420 [ 1107.592692][T29803] ? __fget_files+0x2a/0x420 [ 1107.592706][T29803] ? __fget_files+0x3a2/0x420 [ 1107.592721][T29803] ? __fget_files+0x2a/0x420 [ 1107.592743][T29803] security_file_ioctl+0xc3/0x2a0 [ 1107.592765][T29803] __se_sys_ioctl+0x47/0x170 [ 1107.592787][T29803] do_syscall_64+0x166/0x520 [ 1107.592811][T29803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.592829][T29803] ? clear_bhb_loop+0x70/0xc0 [ 1107.592850][T29803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.592861][T29803] RIP: 0033:0x7ff63dd9e199 [ 1107.592871][T29803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.592881][T29803] RSP: 002b:00007ff63ebda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1107.592893][T29803] RAX: ffffffffffffffda RBX: 00007ff63e025fa0 RCX: 00007ff63dd9e199 [ 1107.592901][T29803] RDX: 0000200000000200 RSI: 00000000000089a0 RDI: 0000000000000003 [ 1107.592908][T29803] RBP: 00007ff63ebda090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.592915][T29803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.592921][T29803] R13: 00007ff63e026038 R14: 00007ff63e025fa0 R15: 00007ff63e14fa48 [ 1107.592937][T29803] [ 1107.592942][T29803] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1107.803543][T29808] FAULT_INJECTION: forcing a failure. [ 1107.803543][T29808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1107.803659][T29808] CPU: 1 UID: 0 PID: 29808 Comm: syz.1.8403 Tainted: G L syzkaller #0 PREEMPT(full) [ 1107.803685][T29808] Tainted: [L]=SOFTLOCKUP [ 1107.803691][T29808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1107.803702][T29808] Call Trace: [ 1107.803710][T29808] [ 1107.803718][T29808] dump_stack_lvl+0xe8/0x150 [ 1107.803749][T29808] should_fail_ex+0x410/0x560 [ 1107.803777][T29808] _copy_from_iter+0x1d3/0x1660 [ 1107.803810][T29808] ? __pfx__copy_from_iter+0x10/0x10 [ 1107.803831][T29808] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 1107.803851][T29808] ? netlink_sendmsg+0x5d4/0xb40 [ 1107.803871][T29808] ? netlink_sendmsg+0x5d4/0xb40 [ 1107.803896][T29808] ? netlink_sendmsg+0x650/0xb40 [ 1107.803914][T29808] ? skb_put+0x112/0x210 [ 1107.803942][T29808] netlink_sendmsg+0x6c0/0xb40 [ 1107.803970][T29808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.804009][T29808] ? apparmor_socket_sendmsg+0x98/0x360 [ 1107.804034][T29808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.804053][T29808] sock_sendmsg_nosec+0x13a/0x180 [ 1107.804077][T29808] ____sys_sendmsg+0x54e/0x850 [ 1107.804108][T29808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1107.804143][T29808] ? import_iovec+0x73/0xa0 [ 1107.804171][T29808] ___sys_sendmsg+0x2a5/0x360 [ 1107.804196][T29808] ? __lock_acquire+0x747/0x2de0 [ 1107.804227][T29808] ? __pfx____sys_sendmsg+0x10/0x10 [ 1107.804283][T29808] ? __fget_files+0x2a/0x420 [ 1107.804308][T29808] ? __fget_files+0x3a2/0x420 [ 1107.804342][T29808] __x64_sys_sendmsg+0x1b1/0x290 [ 1107.804371][T29808] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1107.804416][T29808] do_syscall_64+0x166/0x520 [ 1107.804442][T29808] ? trace_irq_disable+0x3b/0x140 [ 1107.804461][T29808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.804480][T29808] ? clear_bhb_loop+0x70/0xc0 [ 1107.804501][T29808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.804519][T29808] RIP: 0033:0x7fef2999e199 [ 1107.804536][T29808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.804551][T29808] RSP: 002b:00007fef2a8d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1107.804571][T29808] RAX: ffffffffffffffda RBX: 00007fef29c25fa0 RCX: 00007fef2999e199 [ 1107.804585][T29808] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1107.804597][T29808] RBP: 00007fef2a8d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.804608][T29808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.804618][T29808] R13: 00007fef29c26038 R14: 00007fef29c25fa0 R15: 00007fef29d4fa48 [ 1107.804647][T29808] [ 1107.818481][T28494] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1108.127062][T28494] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1108.147181][T28494] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.147212][T28494] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.147249][T28494] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.190132][T28494] usb 8-1: config 0 descriptor?? [ 1108.288238][T29817] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1108.288398][T29817] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1108.288556][T29817] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1108.288619][T29817] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1108.289883][T29817] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1108.290042][T29817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1108.317551][T29819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.319901][T29819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.607548][T28494] usbhid 8-1:0.0: can't add hid device: -32 [ 1108.607649][T28494] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 1109.167558][T29828] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8410'. [ 1109.856110][T29838] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1109.998110][ T32] INFO: task kworker/1:6:5688 blocked for more than 143 seconds. [ 1109.998138][ T32] Tainted: G L syzkaller #0 [ 1109.998150][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1109.998159][ T32] task:kworker/1:6 state:D stack:21248 pid:5688 tgid:5688 ppid:2 task_flags:0x4288160 flags:0x00080000 [ 1109.998212][ T32] Workqueue: usb_hub_wq hub_event [ 1109.998242][ T32] Call Trace: [ 1109.998249][ T32] [ 1109.998261][ T32] __schedule+0x17db/0x58f0 [ 1109.998289][ T32] ? __lock_acquire+0x747/0x2de0 [ 1109.998316][ T32] ? __lock_acquire+0x747/0x2de0 [ 1109.998351][ T32] ? __pfx___schedule+0x10/0x10 [ 1109.998390][ T32] ? schedule+0x90/0x2b0 [ 1109.998416][ T32] schedule+0x164/0x2b0 [ 1109.998442][ T32] schedule_timeout+0xc0/0x2c0 [ 1109.998462][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1109.998483][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1109.998517][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1109.998542][ T32] ? wait_for_completion+0x272/0x5e0 [ 1109.998567][ T32] wait_for_completion+0x2ca/0x5e0 [ 1109.998605][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 1109.998635][ T32] ? kobject_put+0x50f/0x550 [ 1109.998658][ T32] i2c_del_adapter+0x292/0x440 [ 1109.998686][ T32] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1109.998705][ T32] ? kfree+0x4d/0x650 [ 1109.998728][ T32] dvb_usb_i2c_exit+0x64/0xb0 [ 1109.998755][ T32] dvb_usb_device_exit+0x1cb/0x350 [ 1109.998780][ T32] ? __pfx_rpm_resume+0x10/0x10 [ 1109.998804][ T32] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 1109.998834][ T32] ? usb_disable_interface+0x39a/0x3d0 [ 1109.998862][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1109.998891][ T32] usb_unbind_interface+0x295/0x9f0 [ 1109.998917][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1109.998946][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1109.998970][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1109.999829][ T32] device_release_driver_internal+0x4f5/0x880 [ 1109.999870][ T32] bus_remove_device+0x444/0x560 [ 1109.999897][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 1109.999923][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1109.999951][ T32] device_del+0x524/0x8f0 [ 1109.999984][ T32] ? __pfx_device_del+0x10/0x10 [ 1110.000008][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1110.000044][ T32] usb_disable_device+0x3d4/0x8d0 [ 1110.000079][ T32] usb_disconnect+0x346/0x9a0 [ 1110.000111][ T32] hub_event+0x1bbb/0x4d30 [ 1110.000136][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1110.000176][ T32] ? register_lock_class+0x31/0x2e0 [ 1110.000226][ T32] ? __pfx_hub_event+0x10/0x10 [ 1110.000259][ T32] ? rcu_is_watching+0x16/0xb0 [ 1110.000282][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1110.000308][ T32] process_scheduled_works+0xc3d/0x1630 [ 1110.000361][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1110.000399][ T32] ? assign_work+0x3cf/0x5d0 [ 1110.000428][ T32] worker_thread+0xa47/0xfb0 [ 1110.000478][ T32] kthread+0x38b/0x480 [ 1110.000498][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1110.000521][ T32] ? __pfx_kthread+0x10/0x10 [ 1110.000542][ T32] ret_from_fork+0x514/0xb70 [ 1110.000563][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1110.000582][ T32] ? __switch_to+0xc89/0x1420 [ 1110.000610][ T32] ? __pfx_kthread+0x10/0x10 [ 1110.000631][ T32] ret_from_fork_asm+0x1a/0x30 [ 1110.000674][ T32] [ 1110.000773][ T32] [ 1110.000773][ T32] Showing all locks held in the system: [ 1110.000785][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1110.000799][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1110.000868][ T32] locks held by getty/5368: 2, on CPU#0: [ 1110.000882][ T32] #0: ffff88803603d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1110.000927][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1110.000982][ T32] locks held by kworker/1:6/5688: 5, on CPU#1: [ 1110.000996][ T32] #0: ffff888021efa540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.001047][ T32] #1: ffffc900045bfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.001098][ T32] #2: ffff8880297cb1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1110.001148][ T32] #3: ffff888076e681d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 1110.001195][ T32] #4: ffff88805297e1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1110.001257][ T32] locks held by kworker/u8:2/27206: 3, last CPU#1: [ 1110.001271][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.001321][ T32] #1: ffffc900033cfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1110.001371][ T32] #2: ffff88807eebd258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1110.001526][ T32] locks held by syz.2.8411/29834: 4, last CPU#1: [ 1110.001541][ T32] #0: ffff8880778362b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1110.001597][ T32] #1: ffff8880284ee460 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1110.001646][ T32] #2: ffff888042ae4480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1110.001697][ T32] #3: ffff888077741b48 (kn->active#57){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1110.001753][ T32] locks held by syz.3.8412/29838: 2, last CPU#0: [ 1110.001767][ T32] #0: ffff888022fc6540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1110.001811][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1110.001865][ T32] [ 1110.001871][ T32] ============================================= [ 1110.001871][ T32] [ 1110.001880][ T32] NMI backtrace for cpu 0 [ 1110.001894][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.001919][ T32] Tainted: [L]=SOFTLOCKUP [ 1110.001927][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1110.001938][ T32] Call Trace: [ 1110.001946][ T32] [ 1110.001954][ T32] dump_stack_lvl+0xe8/0x150 [ 1110.001982][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1110.002006][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1110.002038][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1110.002064][ T32] sys_info+0x135/0x170 [ 1110.002085][ T32] watchdog+0xfd7/0x1030 [ 1110.002113][ T32] ? watchdog+0x1c7/0x1030 [ 1110.002138][ T32] kthread+0x38b/0x480 [ 1110.002156][ T32] ? __pfx_watchdog+0x10/0x10 [ 1110.002174][ T32] ? __pfx_kthread+0x10/0x10 [ 1110.002193][ T32] ret_from_fork+0x514/0xb70 [ 1110.002214][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1110.002231][ T32] ? __switch_to+0xc89/0x1420 [ 1110.002258][ T32] ? __pfx_kthread+0x10/0x10 [ 1110.002277][ T32] ret_from_fork_asm+0x1a/0x30 [ 1110.002316][ T32] [ 1110.002323][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1110.002355][ C1] NMI backtrace for cpu 1 [ 1110.002371][ C1] CPU: 1 UID: 0 PID: 29834 Comm: syz.2.8411 Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.002397][ C1] Tainted: [L]=SOFTLOCKUP [ 1110.002404][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1110.002416][ C1] RIP: 0010:unwind_get_return_address+0x6/0x90 [ 1110.002442][ C1] Code: 13 c0 00 4c 89 f7 4c 89 fe e9 29 ff ff ff e8 91 44 6f 0a 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 [ 1110.002459][ C1] RSP: 0018:ffffc9000343e3d8 EFLAGS: 00000202 [ 1110.002475][ C1] RAX: 00000000f2242e01 RBX: ffffc9000343e4a0 RCX: 0000000000000046 [ 1110.002489][ C1] RDX: ffffc9000343e401 RSI: ffffffff8e69fd9a RDI: ffffc9000343e3e8 [ 1110.002504][ C1] RBP: ffffc9000343e470 R08: ffffc9000343e680 R09: 0000000000000000 [ 1110.002518][ C1] R10: ffffc9000343e438 R11: fffff52000687c89 R12: ffff88807e783e80 [ 1110.002533][ C1] R13: 1ffff1100fcf088f R14: ffffffff81b2c490 R15: ffffc9000343e3e8 [ 1110.002548][ C1] FS: 00007ff63eb986c0(0000) GS:ffff888124dc6000(0000) knlGS:0000000000000000 [ 1110.002564][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1110.002578][ C1] CR2: 0000000000000000 CR3: 0000000079160000 CR4: 00000000003526f0 [ 1110.002594][ C1] Call Trace: [ 1110.002601][ C1] [ 1110.002609][ C1] arch_stack_walk+0xfb/0x150 [ 1110.002633][ C1] ? free_unref_folios+0xdc2/0x14e0 [ 1110.002655][ C1] stack_trace_save+0xa9/0x100 [ 1110.002673][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1110.002697][ C1] save_stack+0x122/0x230 [ 1110.002720][ C1] ? __pfx_save_stack+0x10/0x10 [ 1110.002748][ C1] ? page_ext_put+0x97/0xc0 [ 1110.002772][ C1] __reset_page_owner+0x71/0x1f0 [ 1110.002795][ C1] free_unref_folios+0xdc2/0x14e0 [ 1110.002818][ C1] ? folio_unqueue_deferred_split+0x92/0x230 [ 1110.002850][ C1] shrink_folio_list+0x4a2d/0x5250 [ 1110.002892][ C1] ? __pfx_shrink_folio_list+0x10/0x10 [ 1110.002914][ C1] ? __pfx___css_rstat_updated+0x10/0x10 [ 1110.002954][ C1] ? lock_acquire+0x115/0x350 [ 1110.002972][ C1] ? try_to_inc_min_seq+0x6db/0x750 [ 1110.002998][ C1] ? evict_folios+0x250/0x3fb0 [ 1110.003018][ C1] evict_folios+0x3055/0x3fb0 [ 1110.003051][ C1] ? evict_folios+0x250/0x3fb0 [ 1110.003072][ C1] ? __pfx_evict_folios+0x10/0x10 [ 1110.003091][ C1] ? lock_acquire+0x115/0x350 [ 1110.003116][ C1] ? __lock_acquire+0x747/0x2de0 [ 1110.003138][ C1] ? __lock_acquire+0x747/0x2de0 [ 1110.003162][ C1] try_to_shrink_lruvec+0xe3b/0x1340 [ 1110.003183][ C1] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1110.003217][ C1] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 1110.003242][ C1] ? blk_start_plug+0x6e/0x1b0 [ 1110.003267][ C1] shrink_lruvec+0x54f/0x2ce0 [ 1110.003293][ C1] ? __lock_acquire+0x747/0x2de0 [ 1110.003318][ C1] ? __pfx_zswap_shrinker_count+0x10/0x10 [ 1110.003349][ C1] ? __pfx_shrink_lruvec+0x10/0x10 [ 1110.003373][ C1] ? __lock_acquire+0x747/0x2de0 [ 1110.003394][ C1] ? __lock_acquire+0x747/0x2de0 [ 1110.003416][ C1] ? shrink_slab+0x1e9/0x1220 [ 1110.003443][ C1] ? lock_acquire+0x115/0x350 [ 1110.003470][ C1] ? page_counter_calculate_protection+0x188/0x470 [ 1110.003492][ C1] ? mem_cgroup_iter+0x3b/0x440 [ 1110.003511][ C1] shrink_node+0xa9b/0x3e30 [ 1110.003549][ C1] ? __pfx_shrink_node+0x10/0x10 [ 1110.003571][ C1] ? __lock_acquire+0x747/0x2de0 [ 1110.003597][ C1] do_try_to_free_pages+0x6a3/0x1990 [ 1110.003631][ C1] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 1110.003656][ C1] ? trace_contention_end+0x3d/0x140 [ 1110.003684][ C1] try_to_free_mem_cgroup_pages+0x30d/0x830 [ 1110.003710][ C1] ? mem_cgroup_resize_max+0x36e/0x470 [ 1110.003735][ C1] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 1110.003760][ C1] ? __mutex_unlock_slowpath+0x731/0x900 [ 1110.003796][ C1] ? page_counter_set_max+0x65/0x170 [ 1110.003816][ C1] mem_cgroup_resize_max+0x23c/0x470 [ 1110.003846][ C1] mem_cgroup_write+0x1a6/0x230 [ 1110.003868][ C1] ? __pfx_mem_cgroup_write+0x10/0x10 [ 1110.003896][ C1] ? kernfs_root+0x1c/0x230 [ 1110.003914][ C1] ? kernfs_root+0x1c/0x230 [ 1110.003933][ C1] ? kernfs_root+0x1ea/0x230 [ 1110.003952][ C1] ? __pfx_mem_cgroup_write+0x10/0x10 [ 1110.003973][ C1] cgroup_file_write+0x331/0x8f0 [ 1110.004003][ C1] ? __pfx_cgroup_file_write+0x10/0x10 [ 1110.004031][ C1] ? __kmalloc_noprof+0x38c/0x720 [ 1110.004056][ C1] ? __pfx_cgroup_file_write+0x10/0x10 [ 1110.004082][ C1] kernfs_fop_write_iter+0x3a4/0x540 [ 1110.004109][ C1] vfs_write+0x612/0xba0 [ 1110.004130][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1110.004152][ C1] ? __fget_files+0x2a/0x420 [ 1110.004183][ C1] ksys_write+0x150/0x270 [ 1110.004202][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1110.004225][ C1] do_syscall_64+0x166/0x520 [ 1110.004252][ C1] ? trace_irq_disable+0x3b/0x140 [ 1110.004272][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.004292][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1110.004312][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.004331][ C1] RIP: 0033:0x7ff63dd9e199 [ 1110.004347][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.004363][ C1] RSP: 002b:00007ff63eb98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1110.004381][ C1] RAX: ffffffffffffffda RBX: 00007ff63e026180 RCX: 00007ff63dd9e199 [ 1110.004396][ C1] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 1110.004408][ C1] RBP: 00007ff63de358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1110.004420][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1110.004432][ C1] R13: 00007ff63e026218 R14: 00007ff63e026180 R15: 00007ff63e14fa48 [ 1110.004455][ C1] [ 1110.086896][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1111.233799][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1111.244478][ T32] Tainted: [L]=SOFTLOCKUP [ 1111.248795][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1111.258853][ T32] Call Trace: [ 1111.262140][ T32] [ 1111.265073][ T32] vpanic+0x56d/0xa60 [ 1111.269069][ T32] ? __pfx___schedule+0x10/0x10 [ 1111.273929][ T32] ? __pfx_vpanic+0x10/0x10 [ 1111.278455][ T32] panic+0xc5/0xd0 [ 1111.282192][ T32] ? __pfx_panic+0x10/0x10 [ 1111.286622][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1111.292079][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1111.297455][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1111.303621][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1111.309799][ T32] watchdog+0x1030/0x1030 [ 1111.314142][ T32] ? watchdog+0x1c7/0x1030 [ 1111.318556][ T32] kthread+0x38b/0x480 [ 1111.322620][ T32] ? __pfx_watchdog+0x10/0x10 [ 1111.327291][ T32] ? __pfx_kthread+0x10/0x10 [ 1111.331894][ T32] ret_from_fork+0x514/0xb70 [ 1111.336488][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1111.341605][ T32] ? __switch_to+0xc89/0x1420 [ 1111.346295][ T32] ? __pfx_kthread+0x10/0x10 [ 1111.350887][ T32] ret_from_fork_asm+0x1a/0x30 [ 1111.355683][ T32] [ 1111.358965][ T32] Kernel Offset: disabled [ 1111.363280][ T32] Rebooting in 86400 seconds..