last executing test programs: 7.938873364s ago: executing program 3 (id=2066): r0 = syz_ublk_setup_io_uring(0x2b59, &(0x7f0000000040)={0x0, 0x30b9, 0x0, 0x8000002, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000002d00)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000180)={0x0, 0x989680}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f0000000280)={0x0, 0x6818, 0x8, 0x2, 0x4f, 0x0, r0}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc3fe, 0x2000, 0x0, 0xe8, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x75f0, 0x4000, 0x1, 0xb2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2d7f, 0x4, 0x0, 0x83e3, 0x0, r0}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2178, 0x8000, 0x1, 0x9c, 0x0, r0}}], 0x4, &(0x7f0000001d00)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r4, '\x00', {0x1, 0x4e2, 0x0, &(0x7f0000000d00)=@buf_4k="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"}}, &(0x7f0000001d80)) r7 = socket$kcm(0x29, 0x7, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r6, 0x24, &(0x7f0000001dc0)={0x8, 0x0, '\x00', @zc_export={r7}}, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000240), 0x5046591a, 0x109040) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c643c, &(0x7f0000000300)={0x0, 0x1000000}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r12, &(0x7f0000000980)=[{{&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)="13", 0x1}], 0x1}}], 0x1, 0x800) shutdown(r12, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) syz_ublk_setup_queues(r11, r5, &(0x7f0000003100)={0x0, 0x1, 0x0, 0x1, 0x1000254}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0xc0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x400, 0x0, 0x1, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$sock_SIOCBRDELBR(r12, 0x89a1, &(0x7f00000003c0)='lo\x00') socket$inet6_sctp(0xa, 0x1, 0x84) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000340)=0x13e) r13 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r13, 0x5452, &(0x7f00000001c0)=0x1) close_range(r13, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) r14 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r14, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbfi\xd9\r\x8d\x9f\xbe\x0ei\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x50, 0x46]}, 0x35) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 6.959978841s ago: executing program 3 (id=2073): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002000000086a05ba004000010203010902240800000080010904000c0203010309092107000c0122670209058103000401000f"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0xf0, 0xd7, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xc7, 0x2, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x7bf, 0x3, 0xfa, 0x6}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xc, 0x5, 0x0, 0xff, 0xc}, 0x3d, &(0x7f0000000100)={0x5, 0xf, 0x3d, 0x3, [@ptm_cap={0x3}, @generic={0x19, 0x10, 0x3, "50b0bd76f622bb82eeedd0ea9a45aa576c1530059a65"}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x7fffffe, 0xf00, 0x1, [0x7f8000, 0xff00c0, 0xffc000, 0xffc00f]}]}, 0x3, [{0xe7, &(0x7f0000000400)=@string={0xe7, 0x3, "7a0d3a7f65535085ab700add595b64c7980bc1e845c00c373a29020688f70fb585e664233c4e27aab97950aa4404f7051fba1e6d41e192b12a133477dc7b73fa7d4e94037989cdd6cd91a3dd33fcf2e835275375367b6054739cc30c127fd7e09249a21a75e7fdfa050f3ab1aa4cf5de9fa321dcc9aa9acaf188ce68e661ba40cf4a5d9d85c46291f6ab640117ee03ff21a19584ba780b9653ad3628b3ec2522f7eede896ba0dc512bc683826c6be5fade43ff72cfdc24eda3a9dc999442d0b79319a377ba85d6cafe05bc250a89b46424183571d6509028c0c4b0336f4262c5b92b5f5c0f"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1401}}]}) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usbip_server_init(0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private2, 0x0, r6}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000040)={@private2, r6}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="3a8d04005a100000080004004400"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 5.560853209s ago: executing program 4 (id=2089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x70bd2c, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="475f99ce6ab9f0164d18380000830604010200000000000000000a0000010800054000000fa60500010001000000060006405ae5736a000500000a000200000007ff02000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x81}, {0x8, 0xc}]}, 0x14, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, &(0x7f0000000080)={0x0}) sigaltstack(&(0x7f0000000380)={0x0, 0x3}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000005c0)={0xffffff07, 0x6, "22590a37c8e2d3f458ee5ed83af35c32d4869cadf26264b04173abf0ba771192", 0x0, 0x3922, 0xf, 0x2, 0x8, 0x5, 0x7, 0x6, [0x6, 0xc5f7, 0xb]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x11, 0x70c9, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x68, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@rr={0x7, 0xf, 0xb1, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x9}}, 0x20) syz_usb_control_io$sierra_net(r2, &(0x7f00000003c0)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="000b0200000002"], 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, r5, 0x2b, 0x0, @void}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) 4.882247467s ago: executing program 4 (id=2091): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x4, [0x0, 0x0, 0x8b, 0xc]}}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 4.417211523s ago: executing program 4 (id=2093): syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x4081ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) sendfile(r1, r1, 0x0, 0x1002000ff) (fail_nth: 2) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.311732226s ago: executing program 3 (id=2094): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2b, 0x107, 0x70bd2d, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x4, [0x0, 0x0, 0x8b, 0xc]}}) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xffffff7f) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.256331368s ago: executing program 3 (id=2095): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) (async, rerun: 64) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) socket$inet(0x2, 0x4000000000000001, 0x0) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x145a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/stat\x00') (rerun: 64) fchdir(r1) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$packet(0x11, 0xa, 0x300) r2 = socket$inet6(0xa, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10001}, 0x1c) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) (async, rerun: 64) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (rerun: 64) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) (async, rerun: 64) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) (async, rerun: 64) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000242f00fc00000000e5ff000000000000000000ff020000000000000000000000000001242081000000000000000800000086dd080088be86ddffff10000000010000000000e7ffffffffffffff000000000800655800"/130], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee4, 0x8031, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x4, 0x2) r5 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.359296646s ago: executing program 2 (id=2099): r0 = syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00') openat(r0, &(0x7f0000000900)='auth.unix.ip/channel\x00', 0x101000, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c4}, 0x20008000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x0) 3.180893326s ago: executing program 2 (id=2100): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0x980000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 3.083098299s ago: executing program 2 (id=2101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x70bd2c, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="475f99ce6ab9f0164d18380000830604010200000000000000000a0000010800054000000fa60500010001000000060006405ae5736a000500000a000200000007ff02000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x81}, {0x8, 0xc}]}, 0x14, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, &(0x7f0000000080)={0x0}) sigaltstack(&(0x7f0000000380)={0x0, 0x3}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000005c0)={0xffffff07, 0x6, "22590a37c8e2d3f458ee5ed83af35c32d4869cadf26264b04173abf0ba771192", 0x0, 0x3922, 0xf, 0x2, 0x8, 0x5, 0x7, 0x6, [0x6, 0xc5f7, 0xb]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x11, 0x70c9, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x68, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@rr={0x7, 0xf, 0xb1, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x9}}, 0x20) syz_usb_control_io$sierra_net(r2, &(0x7f00000003c0)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="000b0200000002"], 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, r5, 0x2b, 0x0, @void}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) 3.01906906s ago: executing program 0 (id=2102): r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f00000001c0)={r1, &(0x7f0000000040)='\xff\xff\xff\xff\xff\xff', 0x4000, &(0x7f0000000080)={@_ha_fsid={[0x6, 0x9]}, {0x1, 0xff81, 0x0, 0x2574}}, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0x297}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r2, 0x5, 0xe, 0x0, &(0x7f0000000900)="0101000071a78326c799dbe888a8", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r3) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) 2.945667514s ago: executing program 1 (id=2103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000003000008000000180001801400020069705f767469300000000000000000003159d38d993eec7f5e390327eb315cdbc7ce081525f24903c717781d67c2301a72649b21d7cb9a1ffe5e761668d19cbe5412cbf720958394b740e84134b04996e002c25e3debd796955ed2538b66c47b5022befcae9dfce945fc28a1c7b74584d65efe97ee83d2de4a495e801f"], 0x2c}}, 0x0) 2.85465371s ago: executing program 1 (id=2104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000024000380200000800800034000000003"], 0xd4}}, 0x4000840) 2.844390698s ago: executing program 0 (id=2105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000024000380200000800800034000000003"], 0xd4}}, 0x4000840) (fail_nth: 2) 2.728804762s ago: executing program 1 (id=2106): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000"], 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001940)="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", 0x559, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000001c0)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r3}) keyctl$KEYCTL_MOVE(0x1e, r3, r2, r1, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x2) 2.54112079s ago: executing program 0 (id=2107): socket$unix(0x1, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) ioctl$NBD_DO_IT(r0, 0xab03) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_emit_vhci(&(0x7f0000002a40)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x60, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4f4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r2], 0x18}}, 0x20048000) r6 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x7, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x246, 0x0, "ee8b0e650906a96ecc137a7fb980e989db9e8bb141a879488f651a8de213eb94cd46e19d9e65a01802000000000000006556dd38ea6c029607462029add09240005c6776267517308a3d40aa00"}, 0xd8) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0xc0000000, 0x10001, 0x400, 0x4, 0x800}, {0xa, 0xa, 0xf3e4, 0x9, 0x9}]}) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x40) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000c47000/0x2000)=nil}) 2.32881108s ago: executing program 2 (id=2108): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39}}) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r1, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac03}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x6, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffff8, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x590, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x391a0b76, 0x2, 0x8000, 0x10, 0x5, 0x7, 0x1, 0x10, 0xb8, 0x6, 0x80000001, 0x8001, 0x3, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0xe, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x1, 0x20, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x2, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0xfffffffb]}, 0x45c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.926325532s ago: executing program 1 (id=2109): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x3, [0x0, 0x8b, 0xc]}}) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r1, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac03}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x6, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffff8, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x590, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x391a0b76, 0x2, 0x8000, 0x10, 0x5, 0x7, 0x1, 0x10, 0xb8, 0x6, 0x80000001, 0x8001, 0x3, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0xe, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x1, 0x20, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x2, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0xfffffffb]}, 0x45c) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000340)={&(0x7f00000002c0)=[{0x8000000000000001, 0x3, 0x8, 0x4}, {0x9, 0xfffffffffffffff7, 0x8, 0x100000001}, {0xffffffffffffffff, 0x3ff, 0x6ecd, 0xffffffffffffffff}, {0x4, 0x9, 0xff0, 0x9}], 0x4, 0x20, 0x100, 0xfffffffffffffe01}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.122454537s ago: executing program 2 (id=2110): r0 = syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00') openat(r0, &(0x7f0000000900)='auth.unix.ip/channel\x00', 0x101000, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0x20008000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x0) 1.000792397s ago: executing program 4 (id=2111): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x44, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xf9d690b100bbf911}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x40) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 992.577469ms ago: executing program 0 (id=2112): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x44, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xf9d690b100bbf911}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x40) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) (fail_nth: 2) 927.132382ms ago: executing program 2 (id=2113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4004ae52, 0x0) syz_usb_connect$uac2(0x0, 0xa1, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000086d04500840000102030109028f00030101800708"], 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xff, 0x0, 0x3, 0x200}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000140)) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000022a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x6ff, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r8, r9, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x9}, {0xfffffd19}], r8}, 0x18, 0x2) waitid(0x1, r3, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 669.109124ms ago: executing program 0 (id=2114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 497.085833ms ago: executing program 4 (id=2115): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 494.214555ms ago: executing program 1 (id=2116): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000480)=0x3fd, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15, 0x12000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0xffe, {0x1, 0x191}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) syz_open_dev$video(&(0x7f00000000c0), 0x95, 0x50002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 473.515015ms ago: executing program 3 (id=2117): socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000002080), 0x40241, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x1000) (async) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x406000, 0x0) r2 = openat$kvm(0x0, &(0x7f0000001040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) close(r3) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2) close(r3) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000001c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5a90a000f01c40f019c09000f01c2", 0x65}], 0x1, 0x7d, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000001000)={{0x1, 0x1, 0x18, r6}, './file2\x00'}) pipe(&(0x7f0000001080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, 0x0, 0x400000, 0x0) (async, rerun: 64) syz_emit_ethernet(0x2006, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) (rerun: 32) 348.573261ms ago: executing program 4 (id=2118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x70bd2c, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="475f99ce6ab9f0164d18380000830604010200000000000000000a0000010800054000000fa60500010001000000060006405ae5736a000500000a000200000007ff02000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x81}, {0x8, 0xc}]}, 0x14, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, &(0x7f0000000080)={0x0}) sigaltstack(&(0x7f0000000380)={0x0, 0x3}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000005c0)={0xffffff07, 0x6, "22590a37c8e2d3f458ee5ed83af35c32d4869cadf26264b04173abf0ba771192", 0x0, 0x3922, 0xf, 0x2, 0x8, 0x5, 0x7, 0x6, [0x6, 0xc5f7, 0xb]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x11, 0x70c9, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x68, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@rr={0x7, 0xf, 0xb1, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x9}}, 0x20) syz_usb_control_io$sierra_net(r2, &(0x7f00000003c0)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="000b0200000002"], 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, r5, 0x2b, 0x0, @void}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) 283.164273ms ago: executing program 0 (id=2119): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000"], 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001940)="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", 0x559, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000001c0)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r3}) keyctl$KEYCTL_MOVE(0x1e, r3, r2, r1, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x2) 148.160944ms ago: executing program 3 (id=2120): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="03070000ba00000000000000feefffff"], 0xc8) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$null(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x5, 0x0, [{0x9a7, 0x0, 0x100}, {0xb65, 0x0, 0x4}, {0xb55, 0x0, 0x3}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x7, 0x1, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x3, 0x10, 0x0, 0x3, 0x1], 0xeeee8000, 0x140640}) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000340)={[0x7, 0x7, 0x7, 0x4000000000000e52, 0x800010000004, 0x5459, 0x1041, 0x8000000000000000, 0x8, 0x400000001, 0x4, 0x10000fffffffe, 0x3, 0x40000000006, 0x8000000000005, 0x4000000800040069], 0x1000}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r8, 0x5) r9 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r9, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r9, 0x2) close(r8) syz_emit_ethernet(0x7c, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a70002", 0x46, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9900, [], "0080"}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x80000003, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 0s ago: executing program 1 (id=2121): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) accept4$inet(r0, 0x0, &(0x7f00000002c0), 0x80000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa0100fd}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000240)=0x7) ioctl$PPPIOCATTCHAN(r3, 0x40047457, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$alg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020044}, 0x28000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$FIONCLEX(r1, 0x5450) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) read$FUSE(r0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000030a00ee0000000000000000050000000900030073795e7a3000000000140000001100010000000000000000000000000a"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95b, 0x1, 0x8, 0x7fffffff, 0x2, 0xa, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x5, 0x3, 0x0, 0x5, 0x24, 0x1, 0x0, 0x3c5b, 0x4, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0x10008, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x4, 0x0, 0x0, 0x80008071, 0x7, 0x1a, 0xd, 0x407, 0x5, 0x3a, 0x8f, 0x4006, 0x3, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x964a, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x3, 0x2f, 0x10, 0x315, 0xd, 0xea2, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x80, 0x6, 0x0, 0xff, 0x3, 0x1000005, 0x5f31, 0xd, 0x5, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x8, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0xc, 0x5, 0x3, 0x4, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x3, 0x1, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x2, 0xb, 0x5, 0x10002, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x4, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x14a, 0xa5, 0x5, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x802, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2005, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x4000057, 0x451, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x85, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x19, 0xfffffffe, 0x80000003, 0x6, 0x0, 0xc8, 0x9, 0xfffff000, 0x10003, 0x3, 0x7e, 0xfd, 0x8009602, 0x7, 0xaf, 0x8, 0x0, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x1000, 0xfffffffc, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x8, 0xfff]}, 0x45c) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) clock_gettime(0x9, &(0x7f0000000280)) kernel console output (not intermixed with test programs): hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 629.306287][T12205] veth1_vlan: left promiscuous mode [ 629.312301][T12205] veth1_vlan: entered promiscuous mode [ 629.317160][T12205] veth1_macvtap: left promiscuous mode [ 629.318382][T12205] veth0_macvtap: left promiscuous mode [ 629.319564][T12205] veth0_macvtap: entered promiscuous mode [ 629.322584][T12205] veth1_macvtap: entered promiscuous mode [ 629.332378][T12205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 629.333513][T12205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 629.334685][T12205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 629.335811][T12205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 629.343010][T12205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 629.346165][T12205] 8021q: adding VLAN 0 to HW filter on device bond2 [ 629.353656][T12205] 8021q: adding VLAN 0 to HW filter on device bond3 [ 629.355617][T12205] 8021q: adding VLAN 0 to HW filter on device bond5 [ 629.378754][ T293] bond5: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 629.415008][ T293] bond5: (slave veth0_to_bond): making interface the new active one [ 629.415032][ T293] veth0_to_bond: entered promiscuous mode [ 629.415295][ T293] veth0_to_bond: entered allmulticast mode [ 629.418019][ T293] bond5: active interface up! [ 629.441646][ T3311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.442606][ T3311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.442644][ T3311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.442676][ T3311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.605888][ T1509] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.606053][ T1509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.609332][ T1509] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.609410][ T1509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.766971][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1894'. [ 629.853451][T12217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1895'. [ 629.894441][T12219] FAULT_INJECTION: forcing a failure. [ 629.894441][T12219] name failslab, interval 1, probability 0, space 0, times 0 [ 629.894477][T12219] CPU: 1 UID: 0 PID: 12219 Comm: syz.2.1896 Not tainted syzkaller #0 PREEMPT(full) [ 629.894500][T12219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 629.894513][T12219] Call Trace: [ 629.894523][T12219] [ 629.894533][T12219] dump_stack_lvl+0xe8/0x150 [ 629.894569][T12219] should_fail_ex+0x410/0x560 [ 629.894597][T12219] ? __alloc_skb+0x1db/0x7a0 [ 629.894622][T12219] should_failslab+0xa8/0x100 [ 629.894650][T12219] ? __alloc_skb+0x1db/0x7a0 [ 629.894673][T12219] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 629.894705][T12219] ? __alloc_skb+0x18d/0x7a0 [ 629.894731][T12219] ? __alloc_skb+0x1db/0x7a0 [ 629.894763][T12219] __alloc_skb+0x1db/0x7a0 [ 629.894805][T12219] netlink_sendmsg+0x5d4/0xb40 [ 629.894838][T12219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.894868][T12219] ? apparmor_socket_sendmsg+0x98/0x360 [ 629.894895][T12219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.894915][T12219] sock_sendmsg_nosec+0x13a/0x180 [ 629.894941][T12219] ____sys_sendmsg+0x54e/0x850 [ 629.894977][T12219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.895024][T12219] ___sys_sendmsg+0x2a5/0x360 [ 629.895051][T12219] ? __lock_acquire+0x747/0x2de0 [ 629.895078][T12219] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.895106][T12219] ? get_pid_task+0x20/0x1f0 [ 629.895135][T12219] ? get_pid_task+0x20/0x1f0 [ 629.895153][T12219] ? get_pid_task+0x20/0x1f0 [ 629.895206][T12219] ? __fget_files+0x2a/0x420 [ 629.895233][T12219] ? __fget_files+0x3a2/0x420 [ 629.895272][T12219] __sys_sendmsg+0x177/0x240 [ 629.895303][T12219] ? __pfx___sys_sendmsg+0x10/0x10 [ 629.895352][T12219] __do_fast_syscall_32+0x27a/0x6a0 [ 629.895382][T12219] ? do_fast_syscall_32+0x33/0x70 [ 629.895409][T12219] ? asm_int80_emulation+0x1a/0x20 [ 629.895434][T12219] ? do_int80_emulation+0x299/0x500 [ 629.895461][T12219] ? trace_irq_disable+0x3b/0x140 [ 629.895487][T12219] do_fast_syscall_32+0x33/0x70 [ 629.895516][T12219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 629.895540][T12219] RIP: 0023:0xf706f0ec [ 629.895559][T12219] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 629.895575][T12219] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 629.895598][T12219] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 629.895612][T12219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 629.895623][T12219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 629.895635][T12219] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 629.895647][T12219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 629.895675][T12219] [ 630.076767][ T9] usb 4-1: USB disconnect, device number 124 [ 630.131967][T12221] FAULT_INJECTION: forcing a failure. [ 630.131967][T12221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.131999][T12221] CPU: 0 UID: 0 PID: 12221 Comm: syz.1.1897 Not tainted syzkaller #0 PREEMPT(full) [ 630.132019][T12221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 630.132030][T12221] Call Trace: [ 630.132038][T12221] [ 630.132047][T12221] dump_stack_lvl+0xe8/0x150 [ 630.132079][T12221] should_fail_ex+0x410/0x560 [ 630.132105][T12221] _copy_to_user+0x31/0xb0 [ 630.132133][T12221] simple_read_from_buffer+0xe1/0x170 [ 630.132164][T12221] proc_fail_nth_read+0x1bb/0x230 [ 630.132184][T12221] ? common_file_perm+0x20e/0x2b0 [ 630.132210][T12221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 630.132233][T12221] ? rw_verify_area+0x24a/0x4c0 [ 630.132261][T12221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 630.132279][T12221] vfs_read+0x213/0xa80 [ 630.132313][T12221] ? __pfx_vfs_read+0x10/0x10 [ 630.132342][T12221] ? do_sys_openat2+0x14e/0x200 [ 630.132362][T12221] ? kmem_cache_free+0x182/0x650 [ 630.132386][T12221] ? rcu_is_watching+0x16/0xb0 [ 630.132417][T12221] ksys_read+0x150/0x270 [ 630.132441][T12221] ? do_sock_setsockopt+0x185/0x1b0 [ 630.132474][T12221] ? __pfx_ksys_read+0x10/0x10 [ 630.132503][T12221] ? asm_int80_emulation+0x1a/0x20 [ 630.132527][T12221] do_int80_emulation+0x198/0x500 [ 630.132552][T12221] ? trace_irq_disable+0x3b/0x140 [ 630.132571][T12221] ? asm_int80_emulation+0x1a/0x20 [ 630.132589][T12221] ? clear_bhb_loop+0x70/0xc0 [ 630.132607][T12221] ? clear_bhb_loop+0x70/0xc0 [ 630.132638][T12221] asm_int80_emulation+0x1a/0x20 [ 630.132656][T12221] RIP: 0023:0xf71975ab [ 630.132674][T12221] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 630.132690][T12221] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 630.132712][T12221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54565d0 [ 630.132725][T12221] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 630.132737][T12221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 630.132748][T12221] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 630.132760][T12221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 630.132788][T12221] [ 630.573094][T12235] FAULT_INJECTION: forcing a failure. [ 630.573094][T12235] name failslab, interval 1, probability 0, space 0, times 0 [ 630.573127][T12235] CPU: 0 UID: 0 PID: 12235 Comm: syz.1.1903 Not tainted syzkaller #0 PREEMPT(full) [ 630.573148][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 630.573159][T12235] Call Trace: [ 630.573169][T12235] [ 630.573178][T12235] dump_stack_lvl+0xe8/0x150 [ 630.573211][T12235] should_fail_ex+0x410/0x560 [ 630.573240][T12235] should_failslab+0xa8/0x100 [ 630.573267][T12235] __kmalloc_noprof+0xfe/0x720 [ 630.573288][T12235] ? tomoyo_encode+0x2ad/0x570 [ 630.573313][T12235] ? tomoyo_encode+0x2ad/0x570 [ 630.573346][T12235] tomoyo_encode+0x2ad/0x570 [ 630.573378][T12235] tomoyo_realpath_from_path+0x5fa/0x640 [ 630.573415][T12235] ? tomoyo_path_number_perm+0x219/0x5f0 [ 630.573438][T12235] tomoyo_path_number_perm+0x246/0x5f0 [ 630.573464][T12235] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 630.573486][T12235] ? __lock_acquire+0x747/0x2de0 [ 630.573522][T12235] ? hook_file_ioctl_compat+0x1f2/0x600 [ 630.573567][T12235] ? __fget_files+0x2a/0x420 [ 630.573598][T12235] ? __fget_files+0x3a2/0x420 [ 630.573623][T12235] ? __fget_files+0x2a/0x420 [ 630.573653][T12235] security_file_ioctl_compat+0xc3/0x2a0 [ 630.573677][T12235] __ia32_compat_sys_ioctl+0x139/0x950 [ 630.573703][T12235] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 630.573726][T12235] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 630.573753][T12235] ? __fget_files+0x3a2/0x420 [ 630.573786][T12235] ? fput+0xa0/0xd0 [ 630.573810][T12235] ? ksys_write+0x242/0x270 [ 630.573852][T12235] __do_fast_syscall_32+0x27a/0x6a0 [ 630.573880][T12235] ? do_fast_syscall_32+0x33/0x70 [ 630.573905][T12235] ? asm_int80_emulation+0x1a/0x20 [ 630.573924][T12235] ? do_int80_emulation+0x299/0x500 [ 630.573949][T12235] ? trace_irq_disable+0x3b/0x140 [ 630.573973][T12235] do_fast_syscall_32+0x33/0x70 [ 630.574000][T12235] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 630.574024][T12235] RIP: 0023:0xf7f980ec [ 630.574042][T12235] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 630.574068][T12235] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 630.574090][T12235] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005411 [ 630.574103][T12235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 630.574115][T12235] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 630.574127][T12235] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 630.574139][T12235] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 630.574174][T12235] [ 630.579840][T12235] ERROR: Out of memory at tomoyo_realpath_from_path. [ 631.012972][T12248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1908'. [ 631.310454][T12254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.324490][T12254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.327223][T12254] FAULT_INJECTION: forcing a failure. [ 631.327223][T12254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.327254][T12254] CPU: 1 UID: 0 PID: 12254 Comm: syz.1.1910 Not tainted syzkaller #0 PREEMPT(full) [ 631.327292][T12254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 631.327305][T12254] Call Trace: [ 631.327315][T12254] [ 631.327324][T12254] dump_stack_lvl+0xe8/0x150 [ 631.327360][T12254] should_fail_ex+0x410/0x560 [ 631.327391][T12254] _copy_to_user+0x31/0xb0 [ 631.327421][T12254] simple_read_from_buffer+0xe1/0x170 [ 631.327454][T12254] proc_fail_nth_read+0x1bb/0x230 [ 631.327474][T12254] ? common_file_perm+0x20e/0x2b0 [ 631.327500][T12254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.327514][T12254] ? rw_verify_area+0x24a/0x4c0 [ 631.327531][T12254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.327543][T12254] vfs_read+0x213/0xa80 [ 631.327566][T12254] ? __pfx___mutex_lock+0x10/0x10 [ 631.327584][T12254] ? __pfx_vfs_read+0x10/0x10 [ 631.327604][T12254] ? __fget_files+0x2a/0x420 [ 631.327622][T12254] ? __fget_files+0x3a2/0x420 [ 631.327636][T12254] ? __fget_files+0x2a/0x420 [ 631.327656][T12254] ksys_read+0x150/0x270 [ 631.327674][T12254] ? __pfx_ksys_read+0x10/0x10 [ 631.327693][T12254] ? asm_int80_emulation+0x1a/0x20 [ 631.327708][T12254] do_int80_emulation+0x198/0x500 [ 631.327724][T12254] ? trace_irq_disable+0x3b/0x140 [ 631.327736][T12254] ? asm_int80_emulation+0x1a/0x20 [ 631.327747][T12254] ? clear_bhb_loop+0x70/0xc0 [ 631.327758][T12254] ? clear_bhb_loop+0x70/0xc0 [ 631.327776][T12254] asm_int80_emulation+0x1a/0x20 [ 631.327788][T12254] RIP: 0023:0xf71975ab [ 631.327814][T12254] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 631.327824][T12254] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 631.327840][T12254] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54565d0 [ 631.327849][T12254] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 631.327856][T12254] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 631.327863][T12254] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 631.327871][T12254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 631.327889][T12254] [ 631.502173][T12256] bridge5: entered promiscuous mode [ 631.502194][T12256] bridge5: entered allmulticast mode [ 631.775834][T12259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.776351][T12259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.960676][ T44] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 632.005585][T12270] FAULT_INJECTION: forcing a failure. [ 632.005585][T12270] name failslab, interval 1, probability 0, space 0, times 0 [ 632.005621][T12270] CPU: 0 UID: 0 PID: 12270 Comm: syz.0.1917 Not tainted syzkaller #0 PREEMPT(full) [ 632.005644][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 632.005657][T12270] Call Trace: [ 632.005666][T12270] [ 632.005675][T12270] dump_stack_lvl+0xe8/0x150 [ 632.005711][T12270] should_fail_ex+0x410/0x560 [ 632.005743][T12270] should_failslab+0xa8/0x100 [ 632.005769][T12270] ? dst_alloc+0x105/0x170 [ 632.005864][T12270] kmem_cache_alloc_noprof+0xa1/0x600 [ 632.005898][T12270] ? dst_alloc+0x105/0x170 [ 632.005925][T12270] dst_alloc+0x105/0x170 [ 632.005951][T12270] xfrm_lookup_with_ifid+0x7c8/0x1db0 [ 632.006007][T12270] ? ip6_dst_lookup_tail+0x2a4/0x1610 [ 632.006083][T12270] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 632.006115][T12270] ? sk_dst_check+0x25/0x480 [ 632.006146][T12270] xfrm_lookup_route+0x3c/0x1c0 [ 632.006174][T12270] ip6_sk_dst_lookup_flow+0x800/0xa50 [ 632.006200][T12270] ? get_random_u32+0x13a/0x8b0 [ 632.006275][T12270] ? get_random_u32+0x4ce/0x8b0 [ 632.006298][T12270] ? udpv6_sendmsg+0x1898/0x2610 [ 632.006327][T12270] udpv6_sendmsg+0x1a98/0x2610 [ 632.006368][T12270] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 632.006396][T12270] ? udp_lib_get_port+0x177b/0x1c60 [ 632.006448][T12270] ? inet_send_prepare+0x1b4/0x260 [ 632.006476][T12270] ? lockdep_hardirqs_on+0x7b/0x110 [ 632.006502][T12270] ? inet_send_prepare+0x1b4/0x260 [ 632.006520][T12270] ? __local_bh_enable_ip+0xd6/0x140 [ 632.006556][T12270] ? inet_send_prepare+0x1b4/0x260 [ 632.006580][T12270] ? inet6_sendmsg+0xe4/0x120 [ 632.006601][T12270] ? __pfx_inet6_sendmsg+0x10/0x10 [ 632.006619][T12270] sock_sendmsg_nosec+0x90/0x180 [ 632.006643][T12270] __sys_sendto+0x408/0x5a0 [ 632.006675][T12270] ? __pfx___sys_sendto+0x10/0x10 [ 632.006713][T12270] ? __fget_files+0x3a2/0x420 [ 632.006752][T12270] ? ksys_write+0x242/0x270 [ 632.006788][T12270] __ia32_sys_sendto+0xdd/0x100 [ 632.006818][T12270] __do_fast_syscall_32+0x27a/0x6a0 [ 632.006846][T12270] ? do_fast_syscall_32+0x33/0x70 [ 632.006872][T12270] ? asm_int80_emulation+0x1a/0x20 [ 632.006891][T12270] ? do_int80_emulation+0x299/0x500 [ 632.006913][T12270] ? trace_irq_disable+0x3b/0x140 [ 632.006938][T12270] do_fast_syscall_32+0x33/0x70 [ 632.006965][T12270] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 632.006988][T12270] RIP: 0023:0xf70af0ec [ 632.007006][T12270] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 632.007023][T12270] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 632.007046][T12270] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 632.007059][T12270] RDX: 0000000000000000 RSI: 000000000400ad81 RDI: 0000000080000080 [ 632.007072][T12270] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 632.007084][T12270] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 632.007096][T12270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 632.007127][T12270] [ 632.155903][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 632.172294][ T44] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 632.217853][ T44] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 632.220382][T12272] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 632.286713][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 632.286733][ T30] audit: type=1326 audit(1790470331.785:14486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12271 comm="syz.0.1918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 632.287088][ T30] audit: type=1326 audit(1790470331.785:14487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12271 comm="syz.0.1918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 632.287818][ T30] audit: type=1326 audit(1790470331.785:14488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12271 comm="syz.0.1918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 632.292503][ T30] audit: type=1326 audit(1790470331.795:14489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12271 comm="syz.0.1918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 632.297885][ T30] audit: type=1326 audit(1790470331.795:14490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12271 comm="syz.0.1918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 632.297937][ T30] audit: type=1326 audit(1790470331.795:14491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12271 comm="syz.0.1918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 632.308378][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.308406][ T44] usb 4-1: Product: syz [ 632.308420][ T44] usb 4-1: Manufacturer: syz [ 632.308430][ T44] usb 4-1: SerialNumber: syz [ 632.549144][ T44] usb 4-1: config 0 descriptor?? [ 632.559970][ T44] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 632.560544][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 632.584202][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 632.584931][ T44] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 632.584967][ T44] usb 4-1: media controller created [ 632.623994][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 632.658504][ T44] usb 4-1: selecting invalid altsetting 7 [ 632.658528][ T44] cxusb: set interface failed [ 632.658541][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 632.757965][T12269] FAULT_INJECTION: forcing a failure. [ 632.757965][T12269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.758000][T12269] CPU: 0 UID: 0 PID: 12269 Comm: syz.4.1916 Not tainted syzkaller #0 PREEMPT(full) [ 632.758023][T12269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 632.758036][T12269] Call Trace: [ 632.758045][T12269] [ 632.758054][T12269] dump_stack_lvl+0xe8/0x150 [ 632.758092][T12269] should_fail_ex+0x410/0x560 [ 632.758121][T12269] _copy_to_user+0x31/0xb0 [ 632.758150][T12269] simple_read_from_buffer+0xe1/0x170 [ 632.758192][T12269] proc_fail_nth_read+0x1bb/0x230 [ 632.758211][T12269] ? common_file_perm+0x20e/0x2b0 [ 632.758238][T12269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.758262][T12269] ? rw_verify_area+0x24a/0x4c0 [ 632.758292][T12269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.758311][T12269] vfs_read+0x213/0xa80 [ 632.758345][T12269] ? __pfx___mutex_lock+0x10/0x10 [ 632.758373][T12269] ? __pfx_vfs_read+0x10/0x10 [ 632.758404][T12269] ? __fget_files+0x2a/0x420 [ 632.758434][T12269] ? __fget_files+0x3a2/0x420 [ 632.758457][T12269] ? __fget_files+0x2a/0x420 [ 632.758490][T12269] ksys_read+0x150/0x270 [ 632.758520][T12269] ? __pfx_ksys_read+0x10/0x10 [ 632.758554][T12269] ? asm_int80_emulation+0x1a/0x20 [ 632.758579][T12269] do_int80_emulation+0x198/0x500 [ 632.758605][T12269] ? trace_irq_disable+0x3b/0x140 [ 632.758625][T12269] ? asm_int80_emulation+0x1a/0x20 [ 632.758643][T12269] ? clear_bhb_loop+0x70/0xc0 [ 632.758664][T12269] ? clear_bhb_loop+0x70/0xc0 [ 632.758687][T12269] asm_int80_emulation+0x1a/0x20 [ 632.758706][T12269] RIP: 0023:0xf71375ab [ 632.758723][T12269] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 632.758739][T12269] RSP: 002b:00000000f53d54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 632.758761][T12269] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d55d0 [ 632.758774][T12269] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 632.758786][T12269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 632.758798][T12269] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 632.758809][T12269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 632.758841][T12269] [ 632.806425][T12278] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1920'. [ 632.906433][ T44] DVB: Unable to find symbol lgdt330x_attach() [ 632.906504][ T44] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 632.951609][T12261] dvb-usb: bulk message failed: -22 (4/0) [ 632.951634][T12261] cxusb: i2c read failed [ 633.203001][ T44] rc_core: IR keymap rc-dvico-portable not found [ 633.203024][ T44] Registered IR keymap rc-empty [ 633.207130][ T44] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 633.209888][ T44] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input20 [ 633.244793][ T44] dvb-usb: schedule remote query interval to 100 msecs. [ 633.244820][ T44] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 633.257593][T12287] FAULT_INJECTION: forcing a failure. [ 633.257593][T12287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.257624][T12287] CPU: 0 UID: 0 PID: 12287 Comm: syz.4.1922 Not tainted syzkaller #0 PREEMPT(full) [ 633.257645][T12287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 633.257656][T12287] Call Trace: [ 633.257664][T12287] [ 633.257673][T12287] dump_stack_lvl+0xe8/0x150 [ 633.257712][T12287] should_fail_ex+0x410/0x560 [ 633.257739][T12287] _copy_from_iter+0x1d3/0x1660 [ 633.257761][T12287] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 633.257787][T12287] ? __pfx_policy_nodemask+0x10/0x10 [ 633.257810][T12287] ? lock_acquire+0x115/0x350 [ 633.257829][T12287] ? __pfx__copy_from_iter+0x10/0x10 [ 633.257853][T12287] ? alloc_pages_mpol+0x256/0x390 [ 633.257884][T12287] copy_page_from_iter+0x219/0x2d0 [ 633.257909][T12287] tun_get_user+0x1c16/0x44d0 [ 633.257934][T12287] ? tun_get_user+0x70a/0x44d0 [ 633.257970][T12287] ? aa_file_perm+0x4ed/0x15f0 [ 633.257993][T12287] ? __pfx_tun_get_user+0x10/0x10 [ 633.258015][T12287] ? __lock_acquire+0x747/0x2de0 [ 633.258047][T12287] ? ref_tracker_alloc+0x341/0x4b0 [ 633.258068][T12287] ? lock_acquire+0x115/0x350 [ 633.258087][T12287] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 633.258111][T12287] ? lock_acquire+0x115/0x350 [ 633.258129][T12287] ? tun_get+0x1c/0x2f0 [ 633.258154][T12287] ? tun_get+0x1c/0x2f0 [ 633.258173][T12287] ? tun_get+0x1c/0x2f0 [ 633.258197][T12287] tun_chr_write_iter+0x113/0x200 [ 633.258219][T12287] vfs_write+0x612/0xba0 [ 633.258253][T12287] ? __pfx_vfs_write+0x10/0x10 [ 633.258289][T12287] ? __fget_files+0x2a/0x420 [ 633.258321][T12287] ksys_write+0x150/0x270 [ 633.258349][T12287] ? __pfx_ksys_write+0x10/0x10 [ 633.258379][T12287] ? asm_int80_emulation+0x1a/0x20 [ 633.258403][T12287] do_int80_emulation+0x198/0x500 [ 633.258428][T12287] ? trace_irq_disable+0x3b/0x140 [ 633.258446][T12287] ? asm_int80_emulation+0x1a/0x20 [ 633.258464][T12287] ? clear_bhb_loop+0x70/0xc0 [ 633.258483][T12287] ? clear_bhb_loop+0x70/0xc0 [ 633.258508][T12287] asm_int80_emulation+0x1a/0x20 [ 633.258527][T12287] RIP: 0023:0xf71375ab [ 633.258544][T12287] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 633.258561][T12287] RSP: 002b:00000000f53f644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 633.258581][T12287] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000200 [ 633.258594][T12287] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000000 [ 633.258611][T12287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 633.258624][T12287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 633.258637][T12287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 633.258668][T12287] [ 633.329754][ T5687] usb 4-1: USB disconnect, device number 125 [ 633.608629][ T5687] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 633.687397][T12294] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 633.739320][ T30] audit: type=1326 audit(1790470333.235:14492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12293 comm="syz.0.1935" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 633.741549][ T30] audit: type=1326 audit(1790470333.245:14493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12293 comm="syz.0.1935" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 633.747813][ T30] audit: type=1326 audit(1790470333.245:14494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12293 comm="syz.0.1935" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 633.747862][ T30] audit: type=1326 audit(1790470333.245:14495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12293 comm="syz.0.1935" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 634.054593][T12304] FAULT_INJECTION: forcing a failure. [ 634.054593][T12304] name failslab, interval 1, probability 0, space 0, times 0 [ 634.054619][T12304] CPU: 0 UID: 0 PID: 12304 Comm: syz.3.1928 Not tainted syzkaller #0 PREEMPT(full) [ 634.054634][T12304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 634.054642][T12304] Call Trace: [ 634.054647][T12304] [ 634.054654][T12304] dump_stack_lvl+0xe8/0x150 [ 634.054681][T12304] should_fail_ex+0x410/0x560 [ 634.054698][T12304] ? __alloc_skb+0x1db/0x7a0 [ 634.054713][T12304] should_failslab+0xa8/0x100 [ 634.054733][T12304] ? __alloc_skb+0x1db/0x7a0 [ 634.054746][T12304] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 634.054763][T12304] ? __alloc_skb+0x18d/0x7a0 [ 634.054778][T12304] ? __alloc_skb+0x1db/0x7a0 [ 634.054795][T12304] __alloc_skb+0x1db/0x7a0 [ 634.054812][T12304] alloc_skb_with_frags+0xc6/0x760 [ 634.054877][T12304] ? __lock_acquire+0x747/0x2de0 [ 634.054895][T12304] sock_alloc_send_pskb+0x878/0x990 [ 634.054916][T12304] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 634.054937][T12304] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 634.054956][T12304] ? dev_get_by_index+0x22/0x2d0 [ 634.054985][T12304] ? dev_get_by_index+0x22/0x2d0 [ 634.055000][T12304] packet_sendmsg+0x33a6/0x5150 [ 634.055075][T12304] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 634.055095][T12304] ? __lock_acquire+0x747/0x2de0 [ 634.055111][T12304] ? __lock_acquire+0x747/0x2de0 [ 634.055128][T12304] ? kstrtouint+0x6e/0xe0 [ 634.055142][T12304] ? __pfx_packet_sendmsg+0x10/0x10 [ 634.055154][T12304] ? aa_sk_perm+0x713/0x900 [ 634.055171][T12304] ? percpu_is_read_locked+0x130/0x190 [ 634.055187][T12304] ? __pfx_aa_sk_perm+0x10/0x10 [ 634.055202][T12304] ? aa_sock_msg_perm+0x144/0x210 [ 634.055220][T12304] ? apparmor_socket_sendmsg+0x98/0x360 [ 634.055234][T12304] ? __pfx_packet_sendmsg+0x10/0x10 [ 634.055246][T12304] sock_sendmsg_nosec+0x13a/0x180 [ 634.055261][T12304] __sys_sendto+0x408/0x5a0 [ 634.055279][T12304] ? __pfx___sys_sendto+0x10/0x10 [ 634.055300][T12304] ? __fget_files+0x3a2/0x420 [ 634.055322][T12304] ? ksys_write+0x242/0x270 [ 634.055343][T12304] __ia32_sys_sendto+0xdd/0x100 [ 634.055359][T12304] __do_fast_syscall_32+0x27a/0x6a0 [ 634.055376][T12304] ? do_fast_syscall_32+0x33/0x70 [ 634.055391][T12304] ? asm_int80_emulation+0x1a/0x20 [ 634.055402][T12304] ? do_int80_emulation+0x299/0x500 [ 634.055417][T12304] ? trace_irq_disable+0x3b/0x140 [ 634.055432][T12304] do_fast_syscall_32+0x33/0x70 [ 634.055447][T12304] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 634.055461][T12304] RIP: 0023:0xf6fff0ec [ 634.055474][T12304] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 634.055485][T12304] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 634.055500][T12304] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 634.055512][T12304] RDX: 000000000000000e RSI: 0000000004000000 RDI: 0000000080000140 [ 634.055520][T12304] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 634.055528][T12304] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 634.055535][T12304] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 634.055556][T12304] [ 634.729429][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'. [ 634.734823][T12314] FAULT_INJECTION: forcing a failure. [ 634.734823][T12314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.734854][T12314] CPU: 0 UID: 0 PID: 12314 Comm: syz.2.1932 Not tainted syzkaller #0 PREEMPT(full) [ 634.734875][T12314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 634.734886][T12314] Call Trace: [ 634.734895][T12314] [ 634.734903][T12314] dump_stack_lvl+0xe8/0x150 [ 634.734936][T12314] should_fail_ex+0x410/0x560 [ 634.734963][T12314] _copy_from_iter+0x1d3/0x1660 [ 634.734985][T12314] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 634.735010][T12314] ? __pfx_policy_nodemask+0x10/0x10 [ 634.735035][T12314] ? lock_acquire+0x115/0x350 [ 634.735054][T12314] ? __pfx__copy_from_iter+0x10/0x10 [ 634.735078][T12314] ? alloc_pages_mpol+0x256/0x390 [ 634.735109][T12314] copy_page_from_iter+0x219/0x2d0 [ 634.735135][T12314] tun_get_user+0x1c16/0x44d0 [ 634.735158][T12314] ? tun_get_user+0x70a/0x44d0 [ 634.735194][T12314] ? aa_file_perm+0x4ed/0x15f0 [ 634.735226][T12314] ? __pfx_tun_get_user+0x10/0x10 [ 634.735249][T12314] ? __lock_acquire+0x747/0x2de0 [ 634.735281][T12314] ? ref_tracker_alloc+0x341/0x4b0 [ 634.735302][T12314] ? lock_acquire+0x115/0x350 [ 634.735321][T12314] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 634.735345][T12314] ? lock_acquire+0x115/0x350 [ 634.735364][T12314] ? tun_get+0x1c/0x2f0 [ 634.735388][T12314] ? tun_get+0x1c/0x2f0 [ 634.735407][T12314] ? tun_get+0x1c/0x2f0 [ 634.735431][T12314] tun_chr_write_iter+0x113/0x200 [ 634.735454][T12314] vfs_write+0x612/0xba0 [ 634.735487][T12314] ? __pfx_vfs_write+0x10/0x10 [ 634.735530][T12314] ? __fget_files+0x2a/0x420 [ 634.735569][T12314] ksys_write+0x150/0x270 [ 634.735597][T12314] ? __pfx_ksys_write+0x10/0x10 [ 634.735626][T12314] ? asm_int80_emulation+0x1a/0x20 [ 634.735650][T12314] do_int80_emulation+0x198/0x500 [ 634.735677][T12314] ? trace_irq_disable+0x3b/0x140 [ 634.735695][T12314] ? asm_int80_emulation+0x1a/0x20 [ 634.735712][T12314] ? clear_bhb_loop+0x70/0xc0 [ 634.735729][T12314] ? clear_bhb_loop+0x70/0xc0 [ 634.735751][T12314] asm_int80_emulation+0x1a/0x20 [ 634.735770][T12314] RIP: 0023:0xf71a75ab [ 634.735788][T12314] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 634.735803][T12314] RSP: 002b:00000000f545d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 634.735824][T12314] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000200 [ 634.735838][T12314] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000000 [ 634.735849][T12314] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 634.735860][T12314] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 634.735872][T12314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 634.735900][T12314] [ 635.455799][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1939'. [ 635.549734][T12335] program syz.2.1939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 635.606596][T12330] 8021q: adding VLAN 0 to HW filter on device bond5 [ 635.620705][T12334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.624432][T12334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.769770][T12335] 8021q: adding VLAN 0 to HW filter on device bond5 [ 635.789980][T12335] bond5: (slave ipip0): The slave device specified does not support setting the MAC address [ 635.798945][T12335] bond5: (slave ipip0): Error -95 calling set_mac_address [ 635.832703][T12350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.833179][T12350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.834606][T12348] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x32314247, 8, 0, 0, 0) [ 636.435247][ T3387] IPVS: starting estimator thread 0... [ 636.519076][T12362] netlink: 'syz.0.1950': attribute type 21 has an invalid length. [ 636.522744][T12363] IPVS: using max 45 ests per chain, 108000 per kthread [ 636.999743][T12379] FAULT_INJECTION: forcing a failure. [ 636.999743][T12379] name failslab, interval 1, probability 0, space 0, times 0 [ 636.999768][T12379] CPU: 1 UID: 0 PID: 12379 Comm: syz.0.1957 Not tainted syzkaller #0 PREEMPT(full) [ 636.999783][T12379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 636.999790][T12379] Call Trace: [ 636.999796][T12379] [ 636.999802][T12379] dump_stack_lvl+0xe8/0x150 [ 636.999824][T12379] should_fail_ex+0x410/0x560 [ 636.999843][T12379] should_failslab+0xa8/0x100 [ 636.999858][T12379] ? dst_alloc+0x105/0x170 [ 636.999870][T12379] kmem_cache_alloc_noprof+0xa1/0x600 [ 636.999890][T12379] ? dst_alloc+0x105/0x170 [ 636.999905][T12379] dst_alloc+0x105/0x170 [ 636.999916][T12379] ? ip_check_mc_rcu+0x407/0x7c0 [ 636.999934][T12379] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 637.000019][T12379] ? ip_route_output_key_hash+0xd8/0x2a0 [ 637.000033][T12379] ip_route_output_key_hash+0x18d/0x2a0 [ 637.000048][T12379] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 637.000063][T12379] ? lock_acquire+0x115/0x350 [ 637.000081][T12379] ip_route_output_flow+0x2a/0x150 [ 637.000114][T12379] ? security_sk_classify_flow+0x6d/0x150 [ 637.000147][T12379] udp_sendmsg+0x144a/0x2140 [ 637.000172][T12379] ? __pfx_udp_sendmsg+0x10/0x10 [ 637.000189][T12379] ? __pfx___up_read+0x10/0x10 [ 637.000209][T12379] ? current_check_autobind_udp_socket+0x271/0x5b0 [ 637.000242][T12379] ? aa_sock_msg_perm+0xfc/0x210 [ 637.000256][T12379] ? sock_rps_record_flow+0x19/0x350 [ 637.000270][T12379] ? inet_sendmsg+0x23e/0x320 [ 637.000281][T12379] ? apparmor_socket_sendmsg+0x98/0x360 [ 637.000295][T12379] ? __pfx_inet_sendmsg+0x10/0x10 [ 637.000310][T12379] sock_sendmsg_nosec+0x10e/0x180 [ 637.000326][T12379] ____sys_sendmsg+0x54e/0x850 [ 637.000346][T12379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.000371][T12379] ___sys_sendmsg+0x2a5/0x360 [ 637.000386][T12379] ? __lock_acquire+0x747/0x2de0 [ 637.000401][T12379] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.000420][T12379] ? kstrtoull+0x137/0x1d0 [ 637.000448][T12379] ? __fget_files+0x2a/0x420 [ 637.000463][T12379] ? __fget_files+0x3a2/0x420 [ 637.000490][T12379] __sys_sendmmsg+0x2de/0x4d0 [ 637.000510][T12379] ? __pfx___sys_sendmmsg+0x10/0x10 [ 637.000543][T12379] ? fput+0xa0/0xd0 [ 637.000562][T12379] ? ksys_write+0x242/0x270 [ 637.000596][T12379] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 637.000621][T12379] __do_fast_syscall_32+0x27a/0x6a0 [ 637.000650][T12379] ? do_fast_syscall_32+0x33/0x70 [ 637.000675][T12379] ? asm_int80_emulation+0x1a/0x20 [ 637.000695][T12379] ? do_int80_emulation+0x299/0x500 [ 637.000719][T12379] ? trace_irq_disable+0x3b/0x140 [ 637.000744][T12379] do_fast_syscall_32+0x33/0x70 [ 637.000772][T12379] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 637.000797][T12379] RIP: 0023:0xf70af0ec [ 637.000817][T12379] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 637.000835][T12379] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 637.000858][T12379] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080007fc0 [ 637.000873][T12379] RDX: 000000000800001d RSI: 000000000000001c RDI: 0000000000000000 [ 637.000887][T12379] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 637.000900][T12379] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 637.000913][T12379] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 637.000946][T12379] [ 637.128547][T12382] FAULT_INJECTION: forcing a failure. [ 637.128547][T12382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.128579][T12382] CPU: 0 UID: 0 PID: 12382 Comm: syz.2.1956 Not tainted syzkaller #0 PREEMPT(full) [ 637.128600][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 637.128611][T12382] Call Trace: [ 637.128620][T12382] [ 637.128628][T12382] dump_stack_lvl+0xe8/0x150 [ 637.128661][T12382] should_fail_ex+0x410/0x560 [ 637.128688][T12382] _copy_from_iter+0x1d3/0x1660 [ 637.128722][T12382] ? __pfx__copy_from_iter+0x10/0x10 [ 637.128741][T12382] ? trace_kmalloc+0x2a/0xf0 [ 637.128764][T12382] ? __kmalloc_noprof+0x38c/0x720 [ 637.128782][T12382] ? __kmalloc_noprof+0x1ab/0x720 [ 637.128798][T12382] ? kernfs_fop_write_iter+0x157/0x540 [ 637.128828][T12382] kernfs_fop_write_iter+0x19a/0x540 [ 637.128856][T12382] vfs_write+0x612/0xba0 [ 637.128891][T12382] ? __pfx_vfs_write+0x10/0x10 [ 637.128927][T12382] ? __fget_files+0x2a/0x420 [ 637.128960][T12382] ksys_write+0x150/0x270 [ 637.128988][T12382] ? __pfx_ksys_write+0x10/0x10 [ 637.129025][T12382] __do_fast_syscall_32+0x27a/0x6a0 [ 637.129051][T12382] ? do_fast_syscall_32+0x33/0x70 [ 637.129075][T12382] ? asm_int80_emulation+0x1a/0x20 [ 637.129093][T12382] ? do_int80_emulation+0x299/0x500 [ 637.129115][T12382] ? trace_irq_disable+0x3b/0x140 [ 637.129139][T12382] do_fast_syscall_32+0x33/0x70 [ 637.129163][T12382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 637.129185][T12382] RIP: 0023:0xf706f0ec [ 637.129202][T12382] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 637.129217][T12382] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 637.129238][T12382] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 637.129259][T12382] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 637.129270][T12382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 637.129281][T12382] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 637.129293][T12382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 637.129323][T12382] [ 637.625113][T12386] cifs: Unknown parameter 'f,' [ 637.648686][T12387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.649719][T12387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.950492][T12396] FAULT_INJECTION: forcing a failure. [ 637.950492][T12396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.950517][T12396] CPU: 1 UID: 0 PID: 12396 Comm: syz.2.1963 Not tainted syzkaller #0 PREEMPT(full) [ 637.950532][T12396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 637.950539][T12396] Call Trace: [ 637.950545][T12396] [ 637.950556][T12396] dump_stack_lvl+0xe8/0x150 [ 637.950590][T12396] should_fail_ex+0x410/0x560 [ 637.950621][T12396] _copy_to_user+0x31/0xb0 [ 637.950650][T12396] simple_read_from_buffer+0xe1/0x170 [ 637.950682][T12396] proc_fail_nth_read+0x1bb/0x230 [ 637.950702][T12396] ? common_file_perm+0x20e/0x2b0 [ 637.950729][T12396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 637.950753][T12396] ? rw_verify_area+0x24a/0x4c0 [ 637.950783][T12396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 637.950803][T12396] vfs_read+0x213/0xa80 [ 637.950836][T12396] ? __pfx___mutex_lock+0x10/0x10 [ 637.950863][T12396] ? __pfx_vfs_read+0x10/0x10 [ 637.950893][T12396] ? __fget_files+0x2a/0x420 [ 637.950923][T12396] ? __fget_files+0x3a2/0x420 [ 637.950948][T12396] ? __fget_files+0x2a/0x420 [ 637.950981][T12396] ksys_read+0x150/0x270 [ 637.951011][T12396] ? __pfx_ksys_read+0x10/0x10 [ 637.951043][T12396] ? asm_int80_emulation+0x1a/0x20 [ 637.951069][T12396] do_int80_emulation+0x198/0x500 [ 637.951092][T12396] ? trace_irq_disable+0x3b/0x140 [ 637.951110][T12396] ? asm_int80_emulation+0x1a/0x20 [ 637.951129][T12396] ? clear_bhb_loop+0x70/0xc0 [ 637.951148][T12396] ? clear_bhb_loop+0x70/0xc0 [ 637.951172][T12396] asm_int80_emulation+0x1a/0x20 [ 637.951190][T12396] RIP: 0023:0xf71a75ab [ 637.951209][T12396] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 637.951226][T12396] RSP: 002b:00000000f545d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 637.951248][T12396] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545d5d0 [ 637.951263][T12396] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 637.951274][T12396] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 637.951286][T12396] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 637.951299][T12396] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 637.951331][T12396] [ 638.517534][T12411] FAULT_INJECTION: forcing a failure. [ 638.517534][T12411] name failslab, interval 1, probability 0, space 0, times 0 [ 638.517570][T12411] CPU: 0 UID: 0 PID: 12411 Comm: syz.4.1969 Not tainted syzkaller #0 PREEMPT(full) [ 638.517594][T12411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 638.517606][T12411] Call Trace: [ 638.517615][T12411] [ 638.517625][T12411] dump_stack_lvl+0xe8/0x150 [ 638.517661][T12411] should_fail_ex+0x410/0x560 [ 638.517691][T12411] should_failslab+0xa8/0x100 [ 638.517717][T12411] __kmalloc_cache_noprof+0xa3/0x600 [ 638.517739][T12411] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 638.517766][T12411] ? l2cap_chan_create+0x51/0x790 [ 638.517846][T12411] ? l2cap_chan_create+0x51/0x790 [ 638.517871][T12411] l2cap_chan_create+0x51/0x790 [ 638.517896][T12411] lowpan_control_write+0x4e5/0x970 [ 638.517951][T12411] ? __pfx_lowpan_control_write+0x10/0x10 [ 638.517979][T12411] ? __pfx___debugfs_file_get+0x10/0x10 [ 638.518060][T12411] full_proxy_write+0x127/0x1f0 [ 638.518085][T12411] ? __pfx_full_proxy_write+0x10/0x10 [ 638.518106][T12411] vfs_write+0x296/0xba0 [ 638.518146][T12411] ? __pfx_vfs_write+0x10/0x10 [ 638.518178][T12411] ? __fget_files+0x2a/0x420 [ 638.518210][T12411] ? __fget_files+0x3a2/0x420 [ 638.518237][T12411] ? __fget_files+0x2a/0x420 [ 638.518274][T12411] ksys_write+0x150/0x270 [ 638.518304][T12411] ? __pfx_ksys_write+0x10/0x10 [ 638.518344][T12411] __do_fast_syscall_32+0x27a/0x6a0 [ 638.518373][T12411] ? do_fast_syscall_32+0x33/0x70 [ 638.518400][T12411] ? asm_int80_emulation+0x1a/0x20 [ 638.518420][T12411] ? do_int80_emulation+0x299/0x500 [ 638.518449][T12411] ? trace_irq_disable+0x3b/0x140 [ 638.518483][T12411] do_fast_syscall_32+0x33/0x70 [ 638.518510][T12411] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 638.518533][T12411] RIP: 0023:0xf7f330ec [ 638.518552][T12411] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 638.518569][T12411] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 638.518592][T12411] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 638.518606][T12411] RDX: 000000000000001b RSI: 0000000000000000 RDI: 0000000000000000 [ 638.518618][T12411] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 638.518629][T12411] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 638.518642][T12411] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 638.518674][T12411] [ 638.603542][ T5619] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 638.627825][T12415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.628277][T12415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.638795][T12415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.649707][T12415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.667525][T12415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.668933][T12415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.840856][ T5619] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 638.852558][ T5619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.857105][ T5619] usb 3-1: config 0 descriptor?? [ 639.036566][T12421] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 639.098827][ T5619] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 639.261210][T12428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.274010][T12428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.446557][ T5619] [drm:udl_init] *ERROR* Selecting channel failed [ 639.552322][ T5619] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 639.552351][ T5619] [drm] Initialized udl on minor 1 [ 639.553791][T12436] FAULT_INJECTION: forcing a failure. [ 639.553791][T12436] name failslab, interval 1, probability 0, space 0, times 0 [ 639.553823][T12436] CPU: 0 UID: 0 PID: 12436 Comm: syz.1.1980 Not tainted syzkaller #0 PREEMPT(full) [ 639.553846][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 639.553860][T12436] Call Trace: [ 639.553869][T12436] [ 639.553878][T12436] dump_stack_lvl+0xe8/0x150 [ 639.553914][T12436] should_fail_ex+0x410/0x560 [ 639.553941][T12436] should_failslab+0xa8/0x100 [ 639.553965][T12436] __kmalloc_noprof+0xfe/0x720 [ 639.553984][T12436] ? lockdep_hardirqs_on+0x7b/0x110 [ 639.554010][T12436] ? l2tp_session_create+0x42/0xd10 [ 639.554099][T12436] ? l2tp_session_create+0x42/0xd10 [ 639.554120][T12436] ? l2tp_v3_session_get+0x93/0x7b0 [ 639.554147][T12436] l2tp_session_create+0x42/0xd10 [ 639.554173][T12436] pppol2tp_connect+0xc68/0x18b0 [ 639.554194][T12436] ? get_pid_task+0x20/0x1f0 [ 639.554212][T12436] ? get_pid_task+0x20/0x1f0 [ 639.554241][T12436] ? __pfx_pppol2tp_connect+0x10/0x10 [ 639.554261][T12436] ? lock_acquire+0x115/0x350 [ 639.554287][T12436] ? __pfx_aa_sk_perm+0x10/0x10 [ 639.554316][T12436] ? apparmor_socket_connect+0x13e/0x210 [ 639.554343][T12436] ? bpf_lsm_socket_connect+0x9/0x20 [ 639.554374][T12436] __sys_connect+0x316/0x450 [ 639.554403][T12436] ? __pfx___sys_connect+0x10/0x10 [ 639.554452][T12436] __ia32_sys_connect+0x7a/0x90 [ 639.554477][T12436] __do_fast_syscall_32+0x27a/0x6a0 [ 639.554502][T12436] ? do_fast_syscall_32+0x33/0x70 [ 639.554524][T12436] ? asm_int80_emulation+0x1a/0x20 [ 639.554542][T12436] ? do_int80_emulation+0x299/0x500 [ 639.554564][T12436] ? trace_irq_disable+0x3b/0x140 [ 639.554587][T12436] do_fast_syscall_32+0x33/0x70 [ 639.554613][T12436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 639.554637][T12436] RIP: 0023:0xf7f980ec [ 639.554661][T12436] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 639.554678][T12436] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 639.554700][T12436] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 639.554715][T12436] RDX: 0000000000000032 RSI: 0000000000000000 RDI: 0000000000000000 [ 639.554728][T12436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 639.554740][T12436] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 639.554753][T12436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 639.554783][T12436] [ 639.636574][ T5716] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 639.684301][ T5619] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 639.836290][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 639.836310][ T30] audit: type=1326 audit(1790470339.335:14500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12437 comm="syz.1.1981" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 639.840254][ T30] audit: type=1326 audit(1790470339.335:14501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12437 comm="syz.1.1981" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 639.854046][ T30] audit: type=1326 audit(1790470339.355:14502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12437 comm="syz.1.1981" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=302 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 639.854101][ T30] audit: type=1326 audit(1790470339.355:14503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12437 comm="syz.1.1981" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 639.854141][ T30] audit: type=1326 audit(1790470339.355:14504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12437 comm="syz.1.1981" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 639.856398][ T30] audit: type=1326 audit(1790470339.355:14505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12437 comm="syz.1.1981" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 639.856443][ T30] audit: type=1326 audit(1790470339.355:14506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12437 comm="syz.1.1981" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 639.856483][ T30] audit: type=1326 audit(1790470339.355:14507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12437 comm="syz.1.1981" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 639.858839][ T30] audit: type=1326 audit(1790470339.355:14508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12437 comm="syz.1.1981" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 639.858883][ T30] audit: type=1326 audit(1790470339.355:14509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12437 comm="syz.1.1981" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 639.935363][ T5716] usb 4-1: Using ep0 maxpacket: 8 [ 639.984915][ T5716] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 640.109334][T12444] netlink: 'syz.4.1983': attribute type 11 has an invalid length. [ 640.112180][ T5716] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 640.112205][ T5716] usb 4-1: config 0 has no interface number 0 [ 640.112247][ T5716] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 640.112292][ T5716] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 640.112318][ T5716] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 640.112342][ T5716] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 640.112385][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.209131][ T5619] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 640.227656][ T5716] usb 4-1: config 0 descriptor?? [ 640.239927][ T5619] usb 3-1: USB disconnect, device number 110 [ 640.262972][ T5716] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 640.380975][T12449] netlink: 'syz.1.1985': attribute type 11 has an invalid length. [ 640.479410][T12453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.479903][T12453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.501150][T12453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1987'. [ 640.588586][T12459] FAULT_INJECTION: forcing a failure. [ 640.588586][T12459] name failslab, interval 1, probability 0, space 0, times 0 [ 640.588623][T12459] CPU: 1 UID: 0 PID: 12459 Comm: syz.1.1988 Not tainted syzkaller #0 PREEMPT(full) [ 640.588658][T12459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 640.588670][T12459] Call Trace: [ 640.588680][T12459] [ 640.588689][T12459] dump_stack_lvl+0xe8/0x150 [ 640.588724][T12459] should_fail_ex+0x410/0x560 [ 640.588756][T12459] ? __alloc_skb+0x1db/0x7a0 [ 640.588781][T12459] should_failslab+0xa8/0x100 [ 640.588807][T12459] ? __alloc_skb+0x1db/0x7a0 [ 640.588830][T12459] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 640.588859][T12459] ? __alloc_skb+0x18d/0x7a0 [ 640.588885][T12459] ? __alloc_skb+0x1db/0x7a0 [ 640.588916][T12459] __alloc_skb+0x1db/0x7a0 [ 640.588945][T12459] alloc_skb_with_frags+0xc6/0x760 [ 640.588975][T12459] ? __lock_acquire+0x747/0x2de0 [ 640.589004][T12459] sock_alloc_send_pskb+0x878/0x990 [ 640.589055][T12459] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 640.589088][T12459] ? j1939_sk_sendmsg+0x5c5/0x12d0 [ 640.589201][T12459] ? __local_bh_enable_ip+0xd6/0x140 [ 640.589235][T12459] j1939_sk_sendmsg+0x6ac/0x12d0 [ 640.589284][T12459] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 640.589320][T12459] ? apparmor_socket_sendmsg+0x98/0x360 [ 640.589347][T12459] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 640.589375][T12459] sock_sendmsg_nosec+0x13a/0x180 [ 640.589402][T12459] ____sys_sendmsg+0x54e/0x850 [ 640.589439][T12459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 640.589486][T12459] ___sys_sendmsg+0x2a5/0x360 [ 640.589512][T12459] ? __lock_acquire+0x747/0x2de0 [ 640.589537][T12459] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.589570][T12459] ? kstrtoull+0x137/0x1d0 [ 640.589622][T12459] ? __fget_files+0x2a/0x420 [ 640.589660][T12459] ? __fget_files+0x3a2/0x420 [ 640.589697][T12459] __sys_sendmmsg+0x2de/0x4d0 [ 640.589732][T12459] ? __pfx___sys_sendmmsg+0x10/0x10 [ 640.589790][T12459] ? fput+0xa0/0xd0 [ 640.589817][T12459] ? ksys_write+0x242/0x270 [ 640.589855][T12459] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 640.589880][T12459] __do_fast_syscall_32+0x27a/0x6a0 [ 640.589909][T12459] ? do_fast_syscall_32+0x33/0x70 [ 640.589934][T12459] ? asm_int80_emulation+0x1a/0x20 [ 640.589953][T12459] ? do_int80_emulation+0x299/0x500 [ 640.589977][T12459] ? trace_irq_disable+0x3b/0x140 [ 640.590003][T12459] do_fast_syscall_32+0x33/0x70 [ 640.590032][T12459] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 640.590056][T12459] RIP: 0023:0xf7f980ec [ 640.590076][T12459] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 640.590094][T12459] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 640.590115][T12459] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 640.590130][T12459] RDX: 0000000000000001 RSI: 0000000004000041 RDI: 0000000000000000 [ 640.590141][T12459] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 640.590153][T12459] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 640.590164][T12459] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 640.590196][T12459] [ 640.787846][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 640.787914][ T9] usb 4-1: USB disconnect, device number 126 [ 641.045503][T12469] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x32314247, 8, 0, 0, 0) [ 641.127457][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1992'. [ 641.182907][T12475] program syz.0.1992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 641.188857][T12471] 8021q: adding VLAN 0 to HW filter on device bond6 [ 641.253315][T12475] 8021q: adding VLAN 0 to HW filter on device bond6 [ 641.253733][T12475] bond6: (slave ipip0): The slave device specified does not support setting the MAC address [ 641.259884][T12475] bond6: (slave ipip0): Error -95 calling set_mac_address [ 641.461159][ T5619] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 641.610649][ T5619] usb 3-1: Using ep0 maxpacket: 8 [ 641.611819][ T5619] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 641.614021][ T5619] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 641.614073][ T5619] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 641.614098][ T5619] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 641.614119][ T5619] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 641.614140][ T5619] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.614182][ T5619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.849646][ T5619] usb 3-1: usb_control_msg returned -32 [ 641.849702][ T5619] usbtmc 3-1:16.0: can't read capabilities [ 642.270193][T12490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.271163][T12490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.318939][ T9] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 642.469408][T12496] FAULT_INJECTION: forcing a failure. [ 642.469408][T12496] name failslab, interval 1, probability 0, space 0, times 0 [ 642.469446][T12496] CPU: 1 UID: 0 PID: 12496 Comm: syz.3.2000 Not tainted syzkaller #0 PREEMPT(full) [ 642.469470][T12496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 642.469483][T12496] Call Trace: [ 642.469493][T12496] [ 642.469503][T12496] dump_stack_lvl+0xe8/0x150 [ 642.469540][T12496] should_fail_ex+0x410/0x560 [ 642.469570][T12496] ? __alloc_skb+0x1db/0x7a0 [ 642.469606][T12496] should_failslab+0xa8/0x100 [ 642.469635][T12496] ? __alloc_skb+0x1db/0x7a0 [ 642.469658][T12496] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 642.469688][T12496] ? __alloc_skb+0x18d/0x7a0 [ 642.469714][T12496] ? __alloc_skb+0x1db/0x7a0 [ 642.469745][T12496] __alloc_skb+0x1db/0x7a0 [ 642.469775][T12496] netlink_sendmsg+0x5d4/0xb40 [ 642.469808][T12496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.469837][T12496] ? apparmor_socket_sendmsg+0x98/0x360 [ 642.469864][T12496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.469883][T12496] sock_sendmsg_nosec+0x13a/0x180 [ 642.469915][T12496] ____sys_sendmsg+0x54e/0x850 [ 642.469952][T12496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.469999][T12496] ___sys_sendmsg+0x2a5/0x360 [ 642.470027][T12496] ? __lock_acquire+0x747/0x2de0 [ 642.470054][T12496] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.470082][T12496] ? get_pid_task+0x20/0x1f0 [ 642.470102][T12496] ? get_pid_task+0x20/0x1f0 [ 642.470119][T12496] ? get_pid_task+0x20/0x1f0 [ 642.470171][T12496] ? __fget_files+0x2a/0x420 [ 642.470199][T12496] ? __fget_files+0x3a2/0x420 [ 642.470237][T12496] __sys_sendmsg+0x177/0x240 [ 642.470269][T12496] ? __pfx___sys_sendmsg+0x10/0x10 [ 642.470317][T12496] __do_fast_syscall_32+0x27a/0x6a0 [ 642.470349][T12496] ? do_fast_syscall_32+0x33/0x70 [ 642.470377][T12496] ? asm_int80_emulation+0x1a/0x20 [ 642.470397][T12496] ? do_int80_emulation+0x299/0x500 [ 642.470430][T12496] do_fast_syscall_32+0x33/0x70 [ 642.470459][T12496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 642.470484][T12496] RIP: 0023:0xf6fff0ec [ 642.470504][T12496] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 642.470523][T12496] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 642.470546][T12496] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 642.470561][T12496] RDX: 0000000004040140 RSI: 0000000000000000 RDI: 0000000000000000 [ 642.470573][T12496] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 642.470585][T12496] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 642.470632][T12496] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 642.470664][T12496] [ 642.891355][T12504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.895403][T12504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.016244][T12506] FAULT_INJECTION: forcing a failure. [ 643.016244][T12506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.016270][T12506] CPU: 0 UID: 0 PID: 12506 Comm: syz.3.2004 Not tainted syzkaller #0 PREEMPT(full) [ 643.016285][T12506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 643.016292][T12506] Call Trace: [ 643.016298][T12506] [ 643.016304][T12506] dump_stack_lvl+0xe8/0x150 [ 643.016327][T12506] should_fail_ex+0x410/0x560 [ 643.016346][T12506] _copy_to_user+0x31/0xb0 [ 643.016362][T12506] simple_read_from_buffer+0xe1/0x170 [ 643.016382][T12506] proc_fail_nth_read+0x1bb/0x230 [ 643.016394][T12506] ? common_file_perm+0x20e/0x2b0 [ 643.016422][T12506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 643.016436][T12506] ? rw_verify_area+0x24a/0x4c0 [ 643.016453][T12506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 643.016465][T12506] vfs_read+0x213/0xa80 [ 643.016484][T12506] ? __pfx___mutex_lock+0x10/0x10 [ 643.016500][T12506] ? __pfx_vfs_read+0x10/0x10 [ 643.016517][T12506] ? __fget_files+0x2a/0x420 [ 643.016535][T12506] ? __fget_files+0x3a2/0x420 [ 643.016550][T12506] ? __fget_files+0x2a/0x420 [ 643.016570][T12506] ksys_read+0x150/0x270 [ 643.016587][T12506] ? __pfx_ksys_read+0x10/0x10 [ 643.016606][T12506] ? asm_int80_emulation+0x1a/0x20 [ 643.016621][T12506] do_int80_emulation+0x198/0x500 [ 643.016636][T12506] ? trace_irq_disable+0x3b/0x140 [ 643.016649][T12506] ? asm_int80_emulation+0x1a/0x20 [ 643.016660][T12506] ? clear_bhb_loop+0x70/0xc0 [ 643.016671][T12506] ? clear_bhb_loop+0x70/0xc0 [ 643.016686][T12506] asm_int80_emulation+0x1a/0x20 [ 643.016697][T12506] RIP: 0023:0xf71375ab [ 643.016709][T12506] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 643.016720][T12506] RSP: 002b:00000000f53ed4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 643.016735][T12506] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53ed5d0 [ 643.016744][T12506] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 643.016751][T12506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 643.016759][T12506] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 643.016766][T12506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 643.016784][T12506] [ 643.284660][T12514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2007'. [ 643.339315][T12518] program syz.3.2007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 643.342703][T12514] 8021q: adding VLAN 0 to HW filter on device bond5 [ 643.401702][T12514] 8021q: adding VLAN 0 to HW filter on device bond5 [ 643.406925][T12514] bond5: (slave ipip0): The slave device specified does not support setting the MAC address [ 643.408135][T12514] bond5: (slave ipip0): Error -95 calling set_mac_address [ 643.734596][T12527] netlink: 'syz.4.2009': attribute type 10 has an invalid length. [ 643.739713][T12527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 643.761028][T12527] team0: Port device netdevsim1 added [ 643.777448][T12527] netlink: 'syz.4.2009': attribute type 10 has an invalid length. [ 643.795844][T12527] team0: Port device netdevsim1 removed [ 643.801700][T12527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 643.827398][T12527] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 644.222632][ T5619] usb 3-1: USB disconnect, device number 111 [ 644.693997][T12547] FAULT_INJECTION: forcing a failure. [ 644.693997][T12547] name failslab, interval 1, probability 0, space 0, times 0 [ 644.694033][T12547] CPU: 1 UID: 0 PID: 12547 Comm: syz.1.2018 Not tainted syzkaller #0 PREEMPT(full) [ 644.694057][T12547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 644.694070][T12547] Call Trace: [ 644.694078][T12547] [ 644.694088][T12547] dump_stack_lvl+0xe8/0x150 [ 644.694123][T12547] should_fail_ex+0x410/0x560 [ 644.694152][T12547] ? __alloc_skb+0x1db/0x7a0 [ 644.694178][T12547] should_failslab+0xa8/0x100 [ 644.694205][T12547] ? __alloc_skb+0x1db/0x7a0 [ 644.694227][T12547] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 644.694259][T12547] ? __alloc_skb+0x18d/0x7a0 [ 644.694284][T12547] ? __alloc_skb+0x1db/0x7a0 [ 644.694316][T12547] __alloc_skb+0x1db/0x7a0 [ 644.694346][T12547] netlink_sendmsg+0x5d4/0xb40 [ 644.694377][T12547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.694407][T12547] ? apparmor_socket_sendmsg+0x98/0x360 [ 644.694433][T12547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.694452][T12547] sock_sendmsg_nosec+0x13a/0x180 [ 644.694478][T12547] ____sys_sendmsg+0x54e/0x850 [ 644.694516][T12547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.694562][T12547] ___sys_sendmsg+0x2a5/0x360 [ 644.694590][T12547] ? __lock_acquire+0x747/0x2de0 [ 644.694616][T12547] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.694643][T12547] ? get_pid_task+0x20/0x1f0 [ 644.694662][T12547] ? get_pid_task+0x20/0x1f0 [ 644.694679][T12547] ? get_pid_task+0x20/0x1f0 [ 644.694721][T12547] ? __fget_files+0x2a/0x420 [ 644.694737][T12547] ? __fget_files+0x3a2/0x420 [ 644.694758][T12547] __sys_sendmsg+0x177/0x240 [ 644.694775][T12547] ? __pfx___sys_sendmsg+0x10/0x10 [ 644.694801][T12547] __do_fast_syscall_32+0x27a/0x6a0 [ 644.694819][T12547] ? do_fast_syscall_32+0x33/0x70 [ 644.694834][T12547] ? asm_int80_emulation+0x1a/0x20 [ 644.694845][T12547] ? do_int80_emulation+0x299/0x500 [ 644.694860][T12547] ? trace_irq_disable+0x3b/0x140 [ 644.694874][T12547] do_fast_syscall_32+0x33/0x70 [ 644.694890][T12547] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.694904][T12547] RIP: 0023:0xf7f980ec [ 644.694916][T12547] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 644.694927][T12547] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 644.694942][T12547] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 644.694951][T12547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 644.694958][T12547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 644.694965][T12547] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 644.694973][T12547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 644.694997][T12547] [ 645.010775][ T5688] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 645.082207][T12553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.084287][T12553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.160995][ T5688] usb 3-1: Using ep0 maxpacket: 8 [ 645.289707][T12545] netlink: 'syz.2.2017': attribute type 10 has an invalid length. [ 645.289735][T12545] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2017'. [ 645.307443][ T3269] IPVS: starting estimator thread 0... [ 645.456289][T12562] IPVS: using max 25 ests per chain, 60000 per kthread [ 645.584372][T12566] FAULT_INJECTION: forcing a failure. [ 645.584372][T12566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.584404][T12566] CPU: 1 UID: 0 PID: 12566 Comm: syz.0.2024 Not tainted syzkaller #0 PREEMPT(full) [ 645.584419][T12566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 645.584427][T12566] Call Trace: [ 645.584433][T12566] [ 645.584439][T12566] dump_stack_lvl+0xe8/0x150 [ 645.584470][T12566] should_fail_ex+0x410/0x560 [ 645.584498][T12566] _copy_from_user+0x2d/0xb0 [ 645.584525][T12566] move_addr_to_kernel+0x7e/0x160 [ 645.584549][T12566] get_compat_msghdr+0x3db/0x4c0 [ 645.584568][T12566] ? __pfx_get_compat_msghdr+0x10/0x10 [ 645.584587][T12566] ___sys_sendmsg+0x201/0x360 [ 645.584603][T12566] ? __lock_acquire+0x747/0x2de0 [ 645.584621][T12566] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.584647][T12566] ? get_pid_task+0x20/0x1f0 [ 645.584667][T12566] ? get_pid_task+0x20/0x1f0 [ 645.584684][T12566] ? get_pid_task+0x20/0x1f0 [ 645.584726][T12566] ? __fget_files+0x2a/0x420 [ 645.584742][T12566] ? __fget_files+0x3a2/0x420 [ 645.584762][T12566] __sys_sendmsg+0x177/0x240 [ 645.584784][T12566] ? __pfx___sys_sendmsg+0x10/0x10 [ 645.584830][T12566] __do_fast_syscall_32+0x27a/0x6a0 [ 645.584862][T12566] ? do_fast_syscall_32+0x33/0x70 [ 645.584882][T12566] ? asm_int80_emulation+0x1a/0x20 [ 645.584893][T12566] ? do_int80_emulation+0x299/0x500 [ 645.584908][T12566] ? trace_irq_disable+0x3b/0x140 [ 645.584922][T12566] do_fast_syscall_32+0x33/0x70 [ 645.584944][T12566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 645.584967][T12566] RIP: 0023:0xf70af0ec [ 645.584995][T12566] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 645.585011][T12566] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 645.585033][T12566] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 645.585042][T12566] RDX: 0000000000008050 RSI: 0000000000000000 RDI: 0000000000000000 [ 645.585049][T12566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 645.585057][T12566] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 645.585064][T12566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 645.585082][T12566] [ 645.798125][T12557] netlink: 'syz.3.2022': attribute type 21 has an invalid length. [ 646.016357][T12570] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 646.019519][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 646.019538][ T30] audit: type=1326 audit(1790470345.515:14525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.2.2027" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 646.019906][ T30] audit: type=1326 audit(1790470345.515:14526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.2.2027" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 646.020415][ T30] audit: type=1326 audit(1790470345.515:14527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.2.2027" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 646.021426][ T30] audit: type=1326 audit(1790470345.525:14528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.2.2027" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 646.022088][ T30] audit: type=1326 audit(1790470345.525:14529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.2.2027" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 646.023950][ T30] audit: type=1326 audit(1790470345.525:14530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.2.2027" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 646.025583][ T30] audit: type=1326 audit(1790470345.525:14531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.2.2027" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 646.025816][ T30] audit: type=1326 audit(1790470345.525:14532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.2.2027" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 646.026063][ T30] audit: type=1326 audit(1790470345.525:14533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.2.2027" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 646.027507][ T30] audit: type=1326 audit(1790470345.525:14534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.2.2027" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 646.341442][ T5716] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 646.362494][T12581] tipc: Started in network mode [ 646.362515][T12581] tipc: Node identity ac14140f, cluster identity 4711 [ 646.365407][T12581] tipc: New replicast peer: 255.255.255.255 [ 646.366629][T12581] tipc: Enabled bearer , priority 10 [ 646.368563][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2031'. [ 646.406143][T12581] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 646.406143][T12581] Please contact the netfilter-devel mailing list or update your nftables rules. [ 646.507485][ T5716] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 646.519949][ T5716] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.520014][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.547634][ T5716] usb 4-1: config 0 descriptor?? [ 646.561237][ T5716] pwc: Askey VC010 type 2 USB webcam detected. [ 646.607757][T12578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2030'. [ 646.669117][T12587] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 646.740033][T12590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.741072][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2030'. [ 646.743699][T12582] netlink: 'syz.0.2030': attribute type 13 has an invalid length. [ 646.767039][T12590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.809361][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 646.809390][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 646.839790][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 646.959129][T12596] FAULT_INJECTION: forcing a failure. [ 646.959129][T12596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.959163][T12596] CPU: 1 UID: 0 PID: 12596 Comm: syz.0.2037 Not tainted syzkaller #0 PREEMPT(full) [ 646.959186][T12596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 646.959198][T12596] Call Trace: [ 646.959207][T12596] [ 646.959216][T12596] dump_stack_lvl+0xe8/0x150 [ 646.959255][T12596] should_fail_ex+0x410/0x560 [ 646.959284][T12596] _copy_from_user+0x2d/0xb0 [ 646.959312][T12596] kstrtouint_from_user+0xd6/0x180 [ 646.959336][T12596] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 646.959368][T12596] ? lock_acquire+0x115/0x350 [ 646.959394][T12596] proc_fail_nth_write+0x8e/0x210 [ 646.959417][T12596] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 646.959446][T12596] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 646.959466][T12596] vfs_write+0x296/0xba0 [ 646.959504][T12596] ? __pfx_vfs_write+0x10/0x10 [ 646.959535][T12596] ? __fget_files+0x2a/0x420 [ 646.959567][T12596] ? __fget_files+0x3a2/0x420 [ 646.959602][T12596] ? __fget_files+0x2a/0x420 [ 646.959638][T12596] ksys_write+0x150/0x270 [ 646.959671][T12596] ? __pfx_ksys_write+0x10/0x10 [ 646.959706][T12596] ? asm_int80_emulation+0x1a/0x20 [ 646.959733][T12596] do_int80_emulation+0x198/0x500 [ 646.959761][T12596] ? asm_int80_emulation+0x1a/0x20 [ 646.959780][T12596] ? clear_bhb_loop+0x70/0xc0 [ 646.959800][T12596] ? clear_bhb_loop+0x70/0xc0 [ 646.959825][T12596] asm_int80_emulation+0x1a/0x20 [ 646.959845][T12596] RIP: 0023:0xf71e75ab [ 646.959865][T12596] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 646.959883][T12596] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 646.959905][T12596] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f549d5d0 [ 646.959919][T12596] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 646.959932][T12596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 646.959944][T12596] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 646.959958][T12596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 646.959991][T12596] [ 646.974382][ T5716] pwc: recv_control_msg error -32 req 02 val 2b00 [ 646.975481][ T5716] pwc: recv_control_msg error -32 req 02 val 2700 [ 646.995786][ T5716] pwc: recv_control_msg error -32 req 02 val 2c00 [ 647.000882][ T5716] pwc: recv_control_msg error -32 req 04 val 1000 [ 647.009264][ T5716] pwc: recv_control_msg error -32 req 04 val 1300 [ 647.030868][ T5716] pwc: recv_control_msg error -32 req 04 val 1400 [ 647.062342][ T5716] pwc: recv_control_msg error -32 req 02 val 2000 [ 647.091917][ T5716] pwc: recv_control_msg error -32 req 02 val 2100 [ 647.117668][ T5716] pwc: recv_control_msg error -32 req 04 val 1500 [ 647.151062][ T5716] pwc: recv_control_msg error -32 req 02 val 2500 [ 647.184134][ T5716] pwc: recv_control_msg error -32 req 02 val 2400 [ 647.209143][ T5716] pwc: recv_control_msg error -32 req 02 val 2600 [ 647.235953][ T5716] pwc: recv_control_msg error -32 req 02 val 2900 [ 647.262837][ T5716] pwc: recv_control_msg error -32 req 02 val 2800 [ 647.289512][T12603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.290070][T12603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.306206][T12601] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 647.401840][T12601] kvm [12600]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 647.404310][T12601] kvm [12600]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 647.491469][ T10] tipc: Node number set to 2886997007 [ 647.526028][ T5716] pwc: recv_control_msg error -71 req 04 val 1200 [ 647.572952][ T5716] pwc: Registered as video103. [ 647.588215][ T5716] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 647.614115][ T5716] usb 4-1: USB disconnect, device number 127 [ 647.940490][T12616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.956313][T12616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.251783][T12621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2046'. [ 648.634775][T12627] FAULT_INJECTION: forcing a failure. [ 648.634775][T12627] name failslab, interval 1, probability 0, space 0, times 0 [ 648.634804][T12627] CPU: 1 UID: 0 PID: 12627 Comm: syz.3.2047 Not tainted syzkaller #0 PREEMPT(full) [ 648.634826][T12627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 648.634839][T12627] Call Trace: [ 648.634848][T12627] [ 648.634857][T12627] dump_stack_lvl+0xe8/0x150 [ 648.634891][T12627] should_fail_ex+0x410/0x560 [ 648.634910][T12627] ? __alloc_skb+0x1db/0x7a0 [ 648.634926][T12627] should_failslab+0xa8/0x100 [ 648.634941][T12627] ? __alloc_skb+0x1db/0x7a0 [ 648.634958][T12627] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 648.634986][T12627] ? __alloc_skb+0x18d/0x7a0 [ 648.635010][T12627] ? __alloc_skb+0x1db/0x7a0 [ 648.635039][T12627] __alloc_skb+0x1db/0x7a0 [ 648.635062][T12627] netlink_sendmsg+0x5d4/0xb40 [ 648.635084][T12627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.635101][T12627] ? apparmor_socket_sendmsg+0x18b/0x360 [ 648.635123][T12627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.635142][T12627] sock_sendmsg_nosec+0x13a/0x180 [ 648.635166][T12627] ____sys_sendmsg+0x54e/0x850 [ 648.635198][T12627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 648.635228][T12627] ___sys_sendmsg+0x2a5/0x360 [ 648.635243][T12627] ? __lock_acquire+0x747/0x2de0 [ 648.635258][T12627] ? __pfx____sys_sendmsg+0x10/0x10 [ 648.635279][T12627] ? get_pid_task+0x20/0x1f0 [ 648.635299][T12627] ? get_pid_task+0x20/0x1f0 [ 648.635315][T12627] ? get_pid_task+0x20/0x1f0 [ 648.635364][T12627] ? __fget_files+0x2a/0x420 [ 648.635381][T12627] ? __fget_files+0x3a2/0x420 [ 648.635402][T12627] __sys_sendmsg+0x177/0x240 [ 648.635419][T12627] ? __pfx___sys_sendmsg+0x10/0x10 [ 648.635462][T12627] __do_fast_syscall_32+0x27a/0x6a0 [ 648.635490][T12627] ? do_fast_syscall_32+0x33/0x70 [ 648.635515][T12627] ? asm_int80_emulation+0x1a/0x20 [ 648.635530][T12627] ? do_int80_emulation+0x299/0x500 [ 648.635551][T12627] ? trace_irq_disable+0x3b/0x140 [ 648.635566][T12627] do_fast_syscall_32+0x33/0x70 [ 648.635584][T12627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 648.635607][T12627] RIP: 0023:0xf6fff0ec [ 648.635627][T12627] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 648.635643][T12627] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 648.635665][T12627] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 648.635679][T12627] RDX: 0000000024000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 648.635688][T12627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 648.635696][T12627] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 648.635703][T12627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 648.635721][T12627] [ 649.330713][T12641] FAULT_INJECTION: forcing a failure. [ 649.330713][T12641] name failslab, interval 1, probability 0, space 0, times 0 [ 649.330749][T12641] CPU: 1 UID: 0 PID: 12641 Comm: syz.2.2051 Not tainted syzkaller #0 PREEMPT(full) [ 649.330772][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 649.330785][T12641] Call Trace: [ 649.330794][T12641] [ 649.330804][T12641] dump_stack_lvl+0xe8/0x150 [ 649.330840][T12641] should_fail_ex+0x410/0x560 [ 649.330868][T12641] ? __alloc_skb+0x1db/0x7a0 [ 649.330894][T12641] should_failslab+0xa8/0x100 [ 649.330920][T12641] ? __alloc_skb+0x1db/0x7a0 [ 649.330942][T12641] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 649.330972][T12641] ? __alloc_skb+0x18d/0x7a0 [ 649.330997][T12641] ? __alloc_skb+0x1db/0x7a0 [ 649.331033][T12641] __alloc_skb+0x1db/0x7a0 [ 649.331063][T12641] netlink_sendmsg+0x5d4/0xb40 [ 649.331094][T12641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.331124][T12641] ? apparmor_socket_sendmsg+0x18b/0x360 [ 649.331151][T12641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.331170][T12641] sock_sendmsg_nosec+0x13a/0x180 [ 649.331196][T12641] ____sys_sendmsg+0x54e/0x850 [ 649.331228][T12641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.331274][T12641] ___sys_sendmsg+0x2a5/0x360 [ 649.331301][T12641] ? __lock_acquire+0x747/0x2de0 [ 649.331338][T12641] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.331363][T12641] ? get_pid_task+0x20/0x1f0 [ 649.331384][T12641] ? get_pid_task+0x20/0x1f0 [ 649.331402][T12641] ? get_pid_task+0x20/0x1f0 [ 649.331454][T12641] ? __fget_files+0x2a/0x420 [ 649.331481][T12641] ? __fget_files+0x3a2/0x420 [ 649.331517][T12641] __sys_sendmsg+0x177/0x240 [ 649.331548][T12641] ? __pfx___sys_sendmsg+0x10/0x10 [ 649.331597][T12641] __do_fast_syscall_32+0x27a/0x6a0 [ 649.331627][T12641] ? do_fast_syscall_32+0x33/0x70 [ 649.331653][T12641] ? asm_int80_emulation+0x1a/0x20 [ 649.331673][T12641] ? do_int80_emulation+0x299/0x500 [ 649.331699][T12641] ? trace_irq_disable+0x3b/0x140 [ 649.331724][T12641] do_fast_syscall_32+0x33/0x70 [ 649.331752][T12641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 649.331776][T12641] RIP: 0023:0xf706f0ec [ 649.331795][T12641] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 649.331813][T12641] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 649.331835][T12641] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 649.331850][T12641] RDX: 0000000024000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 649.331862][T12641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 649.331874][T12641] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 649.331886][T12641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 649.331916][T12641] [ 649.830711][T12650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.831204][T12650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.179210][T12654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.179705][T12654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.231908][ T5688] usb 3-1: unable to get BOS descriptor or descriptor too short [ 650.231966][ T5688] usb 3-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 650.232990][ T5688] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 650.233015][ T5688] usb 3-1: chopping to 0 config(s) [ 650.233045][ T5688] usb 3-1: can't read configurations, error -32 [ 650.360000][T12657] FAULT_INJECTION: forcing a failure. [ 650.360000][T12657] name failslab, interval 1, probability 0, space 0, times 0 [ 650.360046][T12657] CPU: 1 UID: 0 PID: 12657 Comm: syz.3.2056 Not tainted syzkaller #0 PREEMPT(full) [ 650.360070][T12657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 650.360083][T12657] Call Trace: [ 650.360092][T12657] [ 650.360102][T12657] dump_stack_lvl+0xe8/0x150 [ 650.360138][T12657] should_fail_ex+0x410/0x560 [ 650.360168][T12657] ? __alloc_skb+0x1db/0x7a0 [ 650.360193][T12657] should_failslab+0xa8/0x100 [ 650.360222][T12657] ? __alloc_skb+0x1db/0x7a0 [ 650.360245][T12657] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 650.360277][T12657] ? __alloc_skb+0x18d/0x7a0 [ 650.360303][T12657] ? __alloc_skb+0x1db/0x7a0 [ 650.360336][T12657] __alloc_skb+0x1db/0x7a0 [ 650.360366][T12657] pfkey_sendmsg+0x20c/0x11d0 [ 650.360411][T12657] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 650.360445][T12657] ? aa_sk_perm+0x713/0x900 [ 650.360475][T12657] ? __lock_acquire+0x747/0x2de0 [ 650.360500][T12657] ? __pfx_aa_sk_perm+0x10/0x10 [ 650.360526][T12657] ? aa_sock_msg_perm+0x144/0x210 [ 650.360560][T12657] ? apparmor_socket_sendmsg+0x98/0x360 [ 650.360584][T12657] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 650.360609][T12657] sock_sendmsg_nosec+0x13a/0x180 [ 650.360634][T12657] ____sys_sendmsg+0x54e/0x850 [ 650.360666][T12657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.360710][T12657] ___sys_sendmsg+0x2a5/0x360 [ 650.360735][T12657] ? __lock_acquire+0x747/0x2de0 [ 650.360760][T12657] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.360787][T12657] ? get_pid_task+0x20/0x1f0 [ 650.360807][T12657] ? get_pid_task+0x20/0x1f0 [ 650.360825][T12657] ? get_pid_task+0x20/0x1f0 [ 650.360876][T12657] ? __fget_files+0x2a/0x420 [ 650.360903][T12657] ? __fget_files+0x3a2/0x420 [ 650.360941][T12657] __sys_sendmsg+0x177/0x240 [ 650.360972][T12657] ? __pfx___sys_sendmsg+0x10/0x10 [ 650.361028][T12657] __do_fast_syscall_32+0x27a/0x6a0 [ 650.361058][T12657] ? do_fast_syscall_32+0x33/0x70 [ 650.361084][T12657] ? asm_int80_emulation+0x1a/0x20 [ 650.361104][T12657] ? do_int80_emulation+0x299/0x500 [ 650.361130][T12657] ? trace_irq_disable+0x3b/0x140 [ 650.361155][T12657] do_fast_syscall_32+0x33/0x70 [ 650.361182][T12657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 650.361204][T12657] RIP: 0023:0xf6fff0ec [ 650.361223][T12657] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 650.361240][T12657] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 650.361262][T12657] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 650.361277][T12657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 650.361289][T12657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 650.361301][T12657] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 650.361313][T12657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 650.361344][T12657] [ 650.363006][ T5688] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 650.500948][ T5688] usb 3-1: device descriptor read/64, error -32 [ 650.526570][T12659] FAULT_INJECTION: forcing a failure. [ 650.526570][T12659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.526600][T12659] CPU: 0 UID: 0 PID: 12659 Comm: syz.0.2057 Not tainted syzkaller #0 PREEMPT(full) [ 650.526621][T12659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 650.526632][T12659] Call Trace: [ 650.526640][T12659] [ 650.526648][T12659] dump_stack_lvl+0xe8/0x150 [ 650.526681][T12659] should_fail_ex+0x410/0x560 [ 650.526708][T12659] _copy_to_user+0x31/0xb0 [ 650.526734][T12659] simple_read_from_buffer+0xe1/0x170 [ 650.526765][T12659] proc_fail_nth_read+0x1bb/0x230 [ 650.526782][T12659] ? common_file_perm+0x20e/0x2b0 [ 650.526807][T12659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 650.526828][T12659] ? rw_verify_area+0x24a/0x4c0 [ 650.526855][T12659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 650.526873][T12659] vfs_read+0x213/0xa80 [ 650.526903][T12659] ? __pfx___mutex_lock+0x10/0x10 [ 650.526928][T12659] ? __pfx_vfs_read+0x10/0x10 [ 650.526955][T12659] ? __fget_files+0x2a/0x420 [ 650.526983][T12659] ? __fget_files+0x3a2/0x420 [ 650.527006][T12659] ? __fget_files+0x2a/0x420 [ 650.527038][T12659] ksys_read+0x150/0x270 [ 650.527084][T12659] ? __pfx_ksys_read+0x10/0x10 [ 650.527114][T12659] ? asm_int80_emulation+0x1a/0x20 [ 650.527138][T12659] do_int80_emulation+0x198/0x500 [ 650.527161][T12659] ? trace_irq_disable+0x3b/0x140 [ 650.527183][T12659] ? asm_int80_emulation+0x1a/0x20 [ 650.527200][T12659] ? clear_bhb_loop+0x70/0xc0 [ 650.527218][T12659] ? clear_bhb_loop+0x70/0xc0 [ 650.527240][T12659] asm_int80_emulation+0x1a/0x20 [ 650.527257][T12659] RIP: 0023:0xf71e75ab [ 650.527274][T12659] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 650.527289][T12659] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 650.527310][T12659] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f549d5d0 [ 650.527323][T12659] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 650.527333][T12659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 650.527344][T12659] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 650.527355][T12659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 650.527383][T12659] [ 650.612664][ T5688] usb usb3-port1: attempt power cycle [ 650.857355][T12663] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 650.942510][T12667] FAULT_INJECTION: forcing a failure. [ 650.942510][T12667] name failslab, interval 1, probability 0, space 0, times 0 [ 650.942546][T12667] CPU: 0 UID: 0 PID: 12667 Comm: syz.0.2060 Not tainted syzkaller #0 PREEMPT(full) [ 650.942569][T12667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 650.942587][T12667] Call Trace: [ 650.942596][T12667] [ 650.942605][T12667] dump_stack_lvl+0xe8/0x150 [ 650.942641][T12667] should_fail_ex+0x410/0x560 [ 650.942669][T12667] ? __alloc_skb+0x1db/0x7a0 [ 650.942695][T12667] should_failslab+0xa8/0x100 [ 650.942723][T12667] ? __alloc_skb+0x1db/0x7a0 [ 650.942746][T12667] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 650.942777][T12667] ? __alloc_skb+0x18d/0x7a0 [ 650.942803][T12667] ? __alloc_skb+0x1db/0x7a0 [ 650.942833][T12667] __alloc_skb+0x1db/0x7a0 [ 650.942862][T12667] netlink_sendmsg+0x5d4/0xb40 [ 650.942894][T12667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.942923][T12667] ? apparmor_socket_sendmsg+0x98/0x360 [ 650.942947][T12667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.942966][T12667] sock_sendmsg_nosec+0x13a/0x180 [ 650.942992][T12667] ____sys_sendmsg+0x54e/0x850 [ 650.943024][T12667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.943068][T12667] ___sys_sendmsg+0x2a5/0x360 [ 650.943094][T12667] ? __lock_acquire+0x747/0x2de0 [ 650.943120][T12667] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.943146][T12667] ? get_pid_task+0x20/0x1f0 [ 650.943165][T12667] ? get_pid_task+0x20/0x1f0 [ 650.943182][T12667] ? get_pid_task+0x20/0x1f0 [ 650.943233][T12667] ? __fget_files+0x2a/0x420 [ 650.943259][T12667] ? __fget_files+0x3a2/0x420 [ 650.943297][T12667] __sys_sendmsg+0x177/0x240 [ 650.943326][T12667] ? __pfx___sys_sendmsg+0x10/0x10 [ 650.943382][T12667] __do_fast_syscall_32+0x27a/0x6a0 [ 650.943411][T12667] ? do_fast_syscall_32+0x33/0x70 [ 650.943437][T12667] ? asm_int80_emulation+0x1a/0x20 [ 650.943457][T12667] ? do_int80_emulation+0x299/0x500 [ 650.943481][T12667] ? trace_irq_disable+0x3b/0x140 [ 650.943506][T12667] do_fast_syscall_32+0x33/0x70 [ 650.943532][T12667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 650.943556][T12667] RIP: 0023:0xf70af0ec [ 650.943576][T12667] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 650.943594][T12667] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 650.943618][T12667] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 650.943632][T12667] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 650.943645][T12667] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 650.943657][T12667] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 650.943670][T12667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 650.943700][T12667] [ 650.952046][ T5688] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 650.973389][ T5688] usb 3-1: device descriptor read/8, error -32 [ 651.069048][T12670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.072715][T12670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.212427][ T5688] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 651.231842][ T5688] usb 3-1: device descriptor read/8, error -32 [ 651.237600][T12673] FAULT_INJECTION: forcing a failure. [ 651.237600][T12673] name failslab, interval 1, probability 0, space 0, times 0 [ 651.237630][T12673] CPU: 0 UID: 0 PID: 12673 Comm: syz.3.2063 Not tainted syzkaller #0 PREEMPT(full) [ 651.237650][T12673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 651.237662][T12673] Call Trace: [ 651.237670][T12673] [ 651.237678][T12673] dump_stack_lvl+0xe8/0x150 [ 651.237710][T12673] should_fail_ex+0x410/0x560 [ 651.237736][T12673] ? __alloc_skb+0x1db/0x7a0 [ 651.237758][T12673] should_failslab+0xa8/0x100 [ 651.237782][T12673] ? __alloc_skb+0x1db/0x7a0 [ 651.237802][T12673] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 651.237829][T12673] ? __alloc_skb+0x18d/0x7a0 [ 651.237851][T12673] ? __alloc_skb+0x1db/0x7a0 [ 651.237878][T12673] __alloc_skb+0x1db/0x7a0 [ 651.237904][T12673] netlink_sendmsg+0x5d4/0xb40 [ 651.237937][T12673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.237963][T12673] ? apparmor_socket_sendmsg+0x98/0x360 [ 651.237987][T12673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.238004][T12673] sock_sendmsg_nosec+0x13a/0x180 [ 651.238026][T12673] ____sys_sendmsg+0x54e/0x850 [ 651.238055][T12673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.238095][T12673] ___sys_sendmsg+0x2a5/0x360 [ 651.238119][T12673] ? __lock_acquire+0x747/0x2de0 [ 651.238142][T12673] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.238166][T12673] ? get_pid_task+0x20/0x1f0 [ 651.238183][T12673] ? get_pid_task+0x20/0x1f0 [ 651.238199][T12673] ? get_pid_task+0x20/0x1f0 [ 651.238244][T12673] ? __fget_files+0x2a/0x420 [ 651.238267][T12673] ? __fget_files+0x3a2/0x420 [ 651.238299][T12673] __sys_sendmsg+0x177/0x240 [ 651.238333][T12673] ? __pfx___sys_sendmsg+0x10/0x10 [ 651.238376][T12673] __do_fast_syscall_32+0x27a/0x6a0 [ 651.238402][T12673] ? do_fast_syscall_32+0x33/0x70 [ 651.238425][T12673] ? asm_int80_emulation+0x1a/0x20 [ 651.238443][T12673] ? do_int80_emulation+0x299/0x500 [ 651.238466][T12673] ? trace_irq_disable+0x3b/0x140 [ 651.238488][T12673] do_fast_syscall_32+0x33/0x70 [ 651.238512][T12673] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 651.238533][T12673] RIP: 0023:0xf6fff0ec [ 651.238551][T12673] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 651.238566][T12673] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 651.238587][T12673] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 651.238600][T12673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 651.238611][T12673] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 651.238622][T12673] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 651.238633][T12673] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 651.238660][T12673] [ 651.302024][T12663] kvm [12660]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 651.307794][T12663] kvm [12660]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 651.331505][T12670] netlink: 'syz.1.2061': attribute type 10 has an invalid length. [ 651.331526][T12670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2061'. [ 651.342136][ T5688] usb usb3-port1: unable to enumerate USB device [ 651.978805][T12686] binder: 12685:12686 ioctl c0306201 80000640 returned -22 [ 652.169253][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 652.169276][ T30] audit: type=1326 audit(1790470351.665:14551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.3.2066" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 652.169409][ T30] audit: type=1326 audit(1790470351.665:14552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.3.2066" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 652.265358][ T30] audit: type=1326 audit(1790470351.755:14553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.3.2066" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=302 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 652.265397][ T30] audit: type=1326 audit(1790470351.755:14554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.3.2066" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 652.265421][ T30] audit: type=1326 audit(1790470351.755:14555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.3.2066" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 652.265444][ T30] audit: type=1326 audit(1790470351.765:14556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.3.2066" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 652.265467][ T30] audit: type=1326 audit(1790470351.765:14557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.3.2066" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 652.265491][ T30] audit: type=1326 audit(1790470351.765:14558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.3.2066" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 652.271772][ T30] audit: type=1326 audit(1790470351.775:14559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.3.2066" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 652.271821][ T30] audit: type=1326 audit(1790470351.775:14560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.3.2066" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 652.474230][T12690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.477912][T12690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.598088][T12692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2069'. [ 652.607795][T12692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2069'. [ 652.608134][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2069'. [ 652.643082][T12699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.643594][T12699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.080679][ T5688] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 653.161474][T12717] fuse: Bad value for 'user_id' [ 653.161499][T12717] fuse: Bad value for 'user_id' [ 653.235550][ T5688] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 653.240969][ T5688] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.241023][ T5688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.259987][ T5688] usb 4-1: config 0 descriptor?? [ 653.278099][ T5688] pwc: Askey VC010 type 2 USB webcam detected. [ 653.345591][T12724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.346088][T12724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.400455][T12724] netlink: 'syz.1.2080': attribute type 10 has an invalid length. [ 653.400481][T12724] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2080'. [ 653.468066][ T5688] pwc: send_video_command error -71 [ 653.468081][ T5688] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 653.468158][ T5688] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 653.473662][ T5688] usb 4-1: USB disconnect, device number 2 [ 653.910927][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 654.063462][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 654.064807][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.064874][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.073121][ T10] usb 4-1: config 0 descriptor?? [ 654.091498][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 654.196328][T12741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.196969][T12741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.224535][T12743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.226210][T12743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.478216][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 654.489522][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 654.497234][T12705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.506491][T12705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.507329][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 654.509533][T12705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.531062][T12705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.533707][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 654.538159][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 654.539556][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 654.543957][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 654.548900][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 654.756106][T12705] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 654.756135][T12705] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 654.756249][T12705] vhci_hcd vhci_hcd.0: Device attached [ 654.827180][T12748] vhci_hcd: connection closed [ 654.831568][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 654.833365][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 654.834248][ T13] vhci_hcd vhci_hcd.3: stop threads [ 654.834273][ T13] vhci_hcd vhci_hcd.3: release socket [ 654.834294][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 654.834364][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 654.835812][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 654.838222][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 654.839741][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 654.841737][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 654.875838][ T10] pwc: Registered as video103. [ 654.886898][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 654.922298][ T10] usb 4-1: USB disconnect, device number 3 [ 655.094484][T12756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.098962][T12756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.136755][T12754] FAULT_INJECTION: forcing a failure. [ 655.136755][T12754] name failslab, interval 1, probability 0, space 0, times 0 [ 655.136800][T12754] CPU: 0 UID: 0 PID: 12754 Comm: syz.4.2091 Not tainted syzkaller #0 PREEMPT(full) [ 655.136822][T12754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 655.136836][T12754] Call Trace: [ 655.136845][T12754] [ 655.136854][T12754] dump_stack_lvl+0xe8/0x150 [ 655.136890][T12754] should_fail_ex+0x410/0x560 [ 655.136918][T12754] ? __alloc_skb+0x1db/0x7a0 [ 655.136943][T12754] should_failslab+0xa8/0x100 [ 655.136969][T12754] ? __alloc_skb+0x1db/0x7a0 [ 655.136991][T12754] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 655.137020][T12754] ? __alloc_skb+0x18d/0x7a0 [ 655.137043][T12754] ? __alloc_skb+0x1db/0x7a0 [ 655.137071][T12754] __alloc_skb+0x1db/0x7a0 [ 655.137098][T12754] audit_log_start+0x1b3/0xa10 [ 655.137132][T12754] ? __pfx_audit_log_start+0x10/0x10 [ 655.137163][T12754] ? get_pid_task+0x20/0x1f0 [ 655.137184][T12754] ? get_pid_task+0x20/0x1f0 [ 655.137211][T12754] audit_seccomp+0x63/0x190 [ 655.137234][T12754] ? clear_bhb_loop+0x70/0xc0 [ 655.137254][T12754] ? clear_bhb_loop+0xe/0xc0 [ 655.137276][T12754] __seccomp_filter+0xd14/0x1de0 [ 655.137314][T12754] ? __pfx___seccomp_filter+0x10/0x10 [ 655.137339][T12754] ? __mutex_unlock_slowpath+0x731/0x900 [ 655.137369][T12754] ? __fget_files+0x2a/0x420 [ 655.137397][T12754] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 655.137423][T12754] ? __fget_files+0x3a2/0x420 [ 655.137466][T12754] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 655.137494][T12754] __do_fast_syscall_32+0x235/0x6a0 [ 655.137522][T12754] ? do_fast_syscall_32+0x33/0x70 [ 655.137545][T12754] ? asm_int80_emulation+0x1a/0x20 [ 655.137565][T12754] ? do_int80_emulation+0x299/0x500 [ 655.137591][T12754] ? trace_irq_disable+0x3b/0x140 [ 655.137616][T12754] do_fast_syscall_32+0x33/0x70 [ 655.137644][T12754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 655.137667][T12754] RIP: 0023:0xf7f330ec [ 655.137686][T12754] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 655.137704][T12754] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 655.137727][T12754] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000000ae80 [ 655.137741][T12754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 655.137753][T12754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 655.137775][T12754] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 655.137786][T12754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 655.137816][T12754] [ 655.491180][T12764] FAULT_INJECTION: forcing a failure. [ 655.491180][T12764] name failslab, interval 1, probability 0, space 0, times 0 [ 655.491217][T12764] CPU: 1 UID: 0 PID: 12764 Comm: syz.4.2093 Not tainted syzkaller #0 PREEMPT(full) [ 655.491240][T12764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 655.491253][T12764] Call Trace: [ 655.491262][T12764] [ 655.491272][T12764] dump_stack_lvl+0xe8/0x150 [ 655.491306][T12764] should_fail_ex+0x410/0x560 [ 655.491341][T12764] should_failslab+0xa8/0x100 [ 655.491370][T12764] __kmalloc_noprof+0xfe/0x720 [ 655.491393][T12764] ? __kmalloc_cache_noprof+0x14d/0x600 [ 655.491426][T12764] ? alloc_pipe_info+0x1f9/0x4c0 [ 655.491447][T12764] ? alloc_pipe_info+0x1f9/0x4c0 [ 655.491475][T12764] alloc_pipe_info+0x1f9/0x4c0 [ 655.491502][T12764] splice_direct_to_actor+0xa41/0xcb0 [ 655.491541][T12764] ? get_pid_task+0x20/0x1f0 [ 655.491570][T12764] ? get_pid_task+0x20/0x1f0 [ 655.491591][T12764] ? __pfx_aa_file_perm+0x10/0x10 [ 655.491622][T12764] ? __pfx_direct_splice_actor+0x10/0x10 [ 655.491651][T12764] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 655.491693][T12764] do_splice_direct+0x195/0x290 [ 655.491726][T12764] ? __pfx_do_splice_direct+0x10/0x10 [ 655.491757][T12764] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 655.491779][T12764] ? bpf_lsm_file_permission+0x9/0x20 [ 655.491815][T12764] ? security_file_permission+0x75/0x260 [ 655.491839][T12764] ? rw_verify_area+0x203/0x4c0 [ 655.491872][T12764] do_sendfile+0x52e/0x7c0 [ 655.491906][T12764] ? __pfx_do_sendfile+0x10/0x10 [ 655.491927][T12764] ? ksys_write+0x242/0x270 [ 655.491962][T12764] ? __ia32_compat_sys_sendfile+0x180/0x1d0 [ 655.491991][T12764] __do_fast_syscall_32+0x27a/0x6a0 [ 655.492021][T12764] ? do_fast_syscall_32+0x33/0x70 [ 655.492049][T12764] ? asm_int80_emulation+0x1a/0x20 [ 655.492068][T12764] ? do_int80_emulation+0x299/0x500 [ 655.492095][T12764] ? trace_irq_disable+0x3b/0x140 [ 655.492122][T12764] do_fast_syscall_32+0x33/0x70 [ 655.492150][T12764] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 655.492185][T12764] RIP: 0023:0xf7f330ec [ 655.492204][T12764] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 655.492220][T12764] RSP: 002b:00000000f539350c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 655.492244][T12764] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000004 [ 655.492257][T12764] RDX: 0000000000000000 RSI: 00000000002000ff RDI: 0000000000000000 [ 655.492270][T12764] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 655.492282][T12764] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 655.492293][T12764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 655.492322][T12764] [ 655.780751][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 655.942801][ T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 655.944932][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.944980][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 655.944994][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 655.945007][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 655.945031][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.062527][T12776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.063982][T12776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.162687][T12776] netlink: 'syz.1.2096': attribute type 10 has an invalid length. [ 656.162707][T12776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2096'. [ 656.801668][T12786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.807772][T12786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.952354][T12793] FAULT_INJECTION: forcing a failure. [ 656.952354][T12793] name failslab, interval 1, probability 0, space 0, times 0 [ 656.952390][T12793] CPU: 1 UID: 0 PID: 12793 Comm: syz.0.2105 Not tainted syzkaller #0 PREEMPT(full) [ 656.952412][T12793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 656.952425][T12793] Call Trace: [ 656.952434][T12793] [ 656.952444][T12793] dump_stack_lvl+0xe8/0x150 [ 656.952479][T12793] should_fail_ex+0x410/0x560 [ 656.952508][T12793] ? __alloc_skb+0x1db/0x7a0 [ 656.952531][T12793] should_failslab+0xa8/0x100 [ 656.952557][T12793] ? __alloc_skb+0x1db/0x7a0 [ 656.952578][T12793] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 656.952606][T12793] ? __alloc_skb+0x18d/0x7a0 [ 656.952630][T12793] ? __alloc_skb+0x1db/0x7a0 [ 656.952660][T12793] __alloc_skb+0x1db/0x7a0 [ 656.952690][T12793] netlink_sendmsg+0x5d4/0xb40 [ 656.952724][T12793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.952754][T12793] ? apparmor_socket_sendmsg+0x98/0x360 [ 656.952790][T12793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.952810][T12793] sock_sendmsg_nosec+0x13a/0x180 [ 656.952835][T12793] ____sys_sendmsg+0x54e/0x850 [ 656.952866][T12793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.952911][T12793] ___sys_sendmsg+0x2a5/0x360 [ 656.952937][T12793] ? __lock_acquire+0x747/0x2de0 [ 656.952964][T12793] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.952989][T12793] ? get_pid_task+0x20/0x1f0 [ 656.953008][T12793] ? get_pid_task+0x20/0x1f0 [ 656.953025][T12793] ? get_pid_task+0x20/0x1f0 [ 656.953073][T12793] ? __fget_files+0x2a/0x420 [ 656.953098][T12793] ? __fget_files+0x3a2/0x420 [ 656.953136][T12793] __sys_sendmsg+0x177/0x240 [ 656.953165][T12793] ? __pfx___sys_sendmsg+0x10/0x10 [ 656.953213][T12793] __do_fast_syscall_32+0x27a/0x6a0 [ 656.953241][T12794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2104'. [ 656.953242][T12793] ? do_fast_syscall_32+0x33/0x70 [ 656.953270][T12794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2104'. [ 656.953269][T12793] ? asm_int80_emulation+0x1a/0x20 [ 656.953288][T12793] ? do_int80_emulation+0x299/0x500 [ 656.953313][T12793] ? trace_irq_disable+0x3b/0x140 [ 656.953337][T12793] do_fast_syscall_32+0x33/0x70 [ 656.953364][T12793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 656.953386][T12793] RIP: 0023:0xf70af0ec [ 656.953406][T12793] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 656.953423][T12793] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 656.953444][T12793] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 656.953458][T12793] RDX: 0000000004000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 656.953470][T12793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 656.953483][T12793] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 656.953495][T12793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 656.953526][T12793] [ 657.169517][T12796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.173573][T12796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.484678][T12802] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 657.543161][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 657.543183][ T30] audit: type=1326 audit(1790470357.045:14616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.2.2108" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 657.543232][ T30] audit: type=1326 audit(1790470357.045:14617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.2.2108" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 657.611365][ T30] audit: type=1326 audit(1790470357.105:14618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.2.2108" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 657.637695][ T30] audit: type=1326 audit(1790470357.105:14619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.2.2108" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 657.639203][ T30] audit: type=1326 audit(1790470357.135:14620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.2.2108" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 657.639691][ T30] audit: type=1326 audit(1790470357.135:14621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.2.2108" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 657.665940][ T30] audit: type=1326 audit(1790470357.165:14622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.2.2108" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 657.691263][ T30] audit: type=1326 audit(1790470357.185:14623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.2.2108" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 657.890238][T12802] kvm [12801]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 657.891895][T12802] kvm [12801]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 657.937957][T12805] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 658.002167][ T30] audit: type=1326 audit(1790470357.505:14624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12804 comm="syz.1.2109" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 658.002468][ T30] audit: type=1326 audit(1790470357.505:14625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12804 comm="syz.1.2109" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 658.824904][T12812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2112'. [ 658.854159][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2111'. [ 658.919889][T12815] FAULT_INJECTION: forcing a failure. [ 658.919889][T12815] name failslab, interval 1, probability 0, space 0, times 0 [ 658.919927][T12815] CPU: 0 UID: 0 PID: 12815 Comm: syz.0.2112 Not tainted syzkaller #0 PREEMPT(full) [ 658.919950][T12815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 658.919963][T12815] Call Trace: [ 658.919972][T12815] [ 658.919982][T12815] dump_stack_lvl+0xe8/0x150 [ 658.920019][T12815] should_fail_ex+0x410/0x560 [ 658.920048][T12815] ? __alloc_skb+0x1db/0x7a0 [ 658.920073][T12815] should_failslab+0xa8/0x100 [ 658.920101][T12815] ? __alloc_skb+0x1db/0x7a0 [ 658.920124][T12815] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 658.920155][T12815] ? __alloc_skb+0x18d/0x7a0 [ 658.920179][T12815] ? __alloc_skb+0x1db/0x7a0 [ 658.920208][T12815] __alloc_skb+0x1db/0x7a0 [ 658.920235][T12815] netlink_sendmsg+0x5d4/0xb40 [ 658.920266][T12815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.920296][T12815] ? apparmor_socket_sendmsg+0x98/0x360 [ 658.920320][T12815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.920339][T12815] sock_sendmsg_nosec+0x13a/0x180 [ 658.920366][T12815] ____sys_sendmsg+0x54e/0x850 [ 658.920400][T12815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 658.920445][T12815] ___sys_sendmsg+0x2a5/0x360 [ 658.920473][T12815] ? __lock_acquire+0x747/0x2de0 [ 658.920500][T12815] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.920532][T12815] ? kstrtoull+0x137/0x1d0 [ 658.920577][T12815] ? __fget_files+0x2a/0x420 [ 658.920603][T12815] ? __fget_files+0x3a2/0x420 [ 658.920640][T12815] __sys_sendmmsg+0x2de/0x4d0 [ 658.920675][T12815] ? __pfx___sys_sendmmsg+0x10/0x10 [ 658.920731][T12815] ? fput+0xa0/0xd0 [ 658.920757][T12815] ? ksys_write+0x242/0x270 [ 658.920795][T12815] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 658.920831][T12815] __do_fast_syscall_32+0x27a/0x6a0 [ 658.920861][T12815] ? do_fast_syscall_32+0x33/0x70 [ 658.920888][T12815] ? asm_int80_emulation+0x1a/0x20 [ 658.920907][T12815] ? do_int80_emulation+0x299/0x500 [ 658.920933][T12815] ? trace_irq_disable+0x3b/0x140 [ 658.920959][T12815] do_fast_syscall_32+0x33/0x70 [ 658.920987][T12815] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 658.921011][T12815] RIP: 0023:0xf70af0ec [ 658.921031][T12815] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 658.921049][T12815] RSP: 002b:00000000f547c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 658.921072][T12815] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000140 [ 658.921087][T12815] RDX: 0000000004924b68 RSI: 0000000000000000 RDI: 0000000000000000 [ 658.921100][T12815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 658.921113][T12815] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 658.921125][T12815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 658.921155][T12815] [ 659.194750][T12818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.201450][T12818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.284178][ T10] usb 4-1: USB disconnect, device number 4 [ 659.311513][T12824] fuse: Bad value for 'fd' [ 659.384944][T12818] netlink: 'syz.2.2113': attribute type 10 has an invalid length. [ 659.384969][T12818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2113'. [ 659.385727][T12832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.386237][T12832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.527989][T12836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.529378][T12836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.748141][T12839] [ 659.750505][T12839] ====================================================== [ 659.757566][T12839] WARNING: possible circular locking dependency detected [ 659.764656][T12839] syzkaller #0 Not tainted [ 659.769066][T12839] ------------------------------------------------------ [ 659.776078][T12839] syz.3.2120/12839 is trying to acquire lock: [ 659.782161][T12839] ffff88806a246e68 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xca0 [ 659.793681][T12839] [ 659.793681][T12839] but task is already holding lock: [ 659.801069][T12839] ffff88806a240260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 659.810172][T12839] [ 659.810172][T12839] which lock already depends on the new lock. [ 659.810172][T12839] [ 659.820572][T12839] [ 659.820572][T12839] the existing dependency chain (in reverse order) is: [ 659.829590][T12839] [ 659.829590][T12839] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 659.837404][T12839] lock_sock_nested+0x41/0x100 [ 659.842685][T12839] smc_listen_out+0xd4/0x3d0 [ 659.847795][T12839] smc_listen_work+0x81d/0x1410 [ 659.853175][T12839] process_scheduled_works+0xc3d/0x1630 [ 659.859263][T12839] worker_thread+0xa47/0xfb0 [ 659.864369][T12839] kthread+0x38b/0x480 [ 659.868950][T12839] ret_from_fork+0x514/0xb70 [ 659.874067][T12839] ret_from_fork_asm+0x1a/0x30 [ 659.879381][T12839] [ 659.879381][T12839] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 659.889539][T12839] __lock_acquire+0x164c/0x2de0 [ 659.894923][T12839] lock_acquire+0x115/0x350 [ 659.899975][T12839] __flush_work+0x74c/0xca0 [ 659.904996][T12839] __cancel_work_sync+0xbf/0x110 [ 659.910457][T12839] smc_clcsock_release+0x60/0xf0 [ 659.915992][T12839] __smc_release+0x64e/0x7c0 [ 659.921368][T12839] smc_close_non_accepted+0xd5/0x1f0 [ 659.927205][T12839] smc_close_active+0xb30/0xf20 [ 659.932576][T12839] __smc_release+0x9c/0x7c0 [ 659.937595][T12839] smc_release+0x2c5/0x550 [ 659.942538][T12839] __sock_release+0xa0/0x1f0 [ 659.947647][T12839] sock_close+0x1c/0x30 [ 659.952347][T12839] __fput+0x418/0xa50 [ 659.956877][T12839] fput_close_sync+0x11f/0x240 [ 659.962348][T12839] __ia32_sys_close+0x7e/0x110 [ 659.967639][T12839] __do_fast_syscall_32+0x27a/0x6a0 [ 659.973377][T12839] do_fast_syscall_32+0x33/0x70 [ 659.978760][T12839] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 659.985617][T12839] [ 659.985617][T12839] other info that might help us debug this: [ 659.985617][T12839] [ 659.995843][T12839] Possible unsafe locking scenario: [ 659.995843][T12839] [ 660.003360][T12839] CPU0 CPU1 [ 660.008764][T12839] ---- ---- [ 660.014337][T12839] lock(sk_lock-AF_SMC/1); [ 660.018856][T12839] lock((work_completion)(&new_smc->smc_listen_work)); [ 660.028314][T12839] lock(sk_lock-AF_SMC/1); [ 660.035351][T12839] lock((work_completion)(&new_smc->smc_listen_work)); [ 660.042301][T12839] [ 660.042301][T12839] *** DEADLOCK *** [ 660.042301][T12839] [ 660.050441][T12839] locks held by syz.3.2120/12839: 3, last CPU#0: [ 660.056840][T12839] #0: ffff888077114180 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 660.067435][T12839] #1: ffff88806a240260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 660.076851][T12839] #2: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xca0 [ 660.086089][T12839] [ 660.086089][T12839] stack backtrace: [ 660.091981][T12839] CPU: 0 UID: 0 PID: 12839 Comm: syz.3.2120 Not tainted syzkaller #0 PREEMPT(full) [ 660.101364][T12839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 660.111440][T12839] Call Trace: [ 660.114730][T12839] [ 660.117669][T12839] dump_stack_lvl+0xe8/0x150 [ 660.122279][T12839] print_circular_bug+0x2e2/0x300 [ 660.127330][T12839] check_noncircular+0x12f/0x150 [ 660.132283][T12839] __lock_acquire+0x164c/0x2de0 [ 660.137142][T12839] ? do_raw_spin_unlock+0xf5/0x200 [ 660.142275][T12839] lock_acquire+0x115/0x350 [ 660.146793][T12839] ? __flush_work+0x101/0xca0 [ 660.151481][T12839] ? __flush_work+0x101/0xca0 [ 660.156172][T12839] __flush_work+0x74c/0xca0 [ 660.160686][T12839] ? __flush_work+0x101/0xca0 [ 660.165370][T12839] ? __flush_work+0x101/0xca0 [ 660.170059][T12839] ? __pfx___flush_work+0x10/0x10 [ 660.175101][T12839] ? __pfx_wq_barrier_func+0x10/0x10 [ 660.180399][T12839] ? __cancel_work_sync+0x5c/0x110 [ 660.185523][T12839] __cancel_work_sync+0xbf/0x110 [ 660.190476][T12839] smc_clcsock_release+0x60/0xf0 [ 660.195427][T12839] __smc_release+0x64e/0x7c0 [ 660.200022][T12839] smc_close_non_accepted+0xd5/0x1f0 [ 660.205313][T12839] smc_close_active+0xb30/0xf20 [ 660.210172][T12839] ? __pfx_sock_def_readable+0x10/0x10 [ 660.215636][T12839] __smc_release+0x9c/0x7c0 [ 660.220140][T12839] ? __local_bh_enable_ip+0xd6/0x140 [ 660.225531][T12839] smc_release+0x2c5/0x550 [ 660.229957][T12839] __sock_release+0xa0/0x1f0 [ 660.234558][T12839] ? __pfx_sock_close+0x10/0x10 [ 660.239439][T12839] sock_close+0x1c/0x30 [ 660.243643][T12839] __fput+0x418/0xa50 [ 660.247651][T12839] fput_close_sync+0x11f/0x240 [ 660.252442][T12839] ? __pfx_fput_close_sync+0x10/0x10 [ 660.257759][T12839] ? do_raw_spin_unlock+0xf5/0x200 [ 660.262894][T12839] __ia32_sys_close+0x7e/0x110 [ 660.267666][T12839] __do_fast_syscall_32+0x27a/0x6a0 [ 660.272876][T12839] ? do_fast_syscall_32+0x33/0x70 [ 660.277916][T12839] ? irqentry_exit+0x10f/0x910 [ 660.282695][T12839] ? trace_irq_disable+0x3b/0x140 [ 660.287725][T12839] do_fast_syscall_32+0x33/0x70 [ 660.292584][T12839] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 660.298920][T12839] RIP: 0023:0xf6fff0ec [ 660.302991][T12839] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 660.322600][T12839] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000006 [ 660.331031][T12839] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000000 [ 660.339004][T12839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 660.346978][T12839] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 660.354951][T12839] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 660.362934][T12839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 660.370916][T12839] [ 660.383218][T12845] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1a