last executing test programs: 1m59.136266847s ago: executing program 3 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = inotify_init() r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de72b149b9476e9000", 0x0, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 1m55.802341718s ago: executing program 3 (id=288): syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a3040904010000010200"], 0x0) 1m54.874523942s ago: executing program 2 (id=297): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000570800024000000001080006400000000208000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000080)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x4b834c18, 0x3, 0xfd, 0x7, 0xa15, 0x0, 0x0, 0xcecbf7e9fc222c82}}, 0x50) 1m54.32410947s ago: executing program 3 (id=302): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000040)=0x5a) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r4, 0x4}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x8a7e, 0x5, 0x206, 0x200, 0xd, 0x1000, 0x0, 0x5, r5}, 0x20) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r4, 0x1}, 0x8) dup(r2) 1m54.001405437s ago: executing program 3 (id=303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000000, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0xc5b0c000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000045000/0x3000)=nil, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='sched\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067f000/0x2000)=nil, &(0x7f00004d1000/0x3000)=nil, 0x2000, 0x2}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x6, 0x3, 0x6, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f00000000c0)) 1m53.949804635s ago: executing program 2 (id=304): syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) (async) 1m53.43853096s ago: executing program 2 (id=308): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) 1m53.148941527s ago: executing program 2 (id=311): syz_usb_connect(0x1, 0x59f, &(0x7f0000000a40)=ANY=[@ANYBLOB="120100021631a7086311000232e10000000109028d"], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40002, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00030015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m52.949219846s ago: executing program 3 (id=314): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r3, 0x7fff}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r3, 0xb}, &(0x7f0000000240)=0x8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000000)="6ed5ee2316422521d2eb83920c1120541b8842f919bff2148f01dc59f77df243aaea11cef39a4738ed08ed7f3280c04d05955073f359207957fee56c962b70c77a4ea17fc13b875c0e468914254750fe1424274718a8339e7d2b729824fe376b", 0x60}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="93afc275031776b57aaf04b28f39faf6b3abc683e7284e2d1615e4f7655ba72621e01270af1473b9959280c18f2b14757fa49ab3a6fd66f3b581b4f22bdc3037d3e8ad13f14240f9ab390fa30caa924374b2afd1924fd4f87996601b7714a5fdd896940728", 0x65}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000000000060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000044010500fe880000000000000000000000000101000004d62b00000002000000ffffffff0000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc000000000000000000000000000001013500000200730001800000040000000700000000000000000000000000000000000000000004d33c00000002000000640101020000000000000000000000000635000002030700050000000300000007000000ac1414aa000000000000000000000000000004d43200000002000000fe8000000000000000000000000000bb0235000010"], 0x1fc}}, 0x0) r7 = socket(0x15, 0x80005, 0x0) getsockopt(r7, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r5) r9 = fanotify_init(0x10, 0x80000) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) fanotify_mark(r9, 0x1, 0x40001019, r10, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000002c0)=0x20) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070200000000fedbdf250100000000000000040007800400048008000100030000000800020001000000"], 0x30}}, 0x20000004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 1m52.417365316s ago: executing program 3 (id=318): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x7d, 0x74, 0x25, 0x10, 0x174f, 0x5212, 0x50af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x5, 0xa0, 0x1, "", [{{0x9, 0x4, 0x7b, 0x4, 0x1, 0xe, 0x1, 0x0, 0xc, [], [{{0x9, 0x5, 0xe, 0x8, 0x8, 0x70, 0x4, 0x6}}]}}]}}]}}, 0x0) (async) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r3, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}, 0x40010) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdb7e}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) ioctl$KDGETKEYCODE(r1, 0x4b4c, 0xffffffffffffffff) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000080)={{0x2, 0x4e24, @multicast2}, {0x306, @random="00fef4f1dc8b"}, 0x4, {0x2, 0x5e23, @empty}, 'bond0\x00'}) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x20000) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040010) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e891a0c70000000000001000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write(r7, &(0x7f0000000240)='m', 0x1) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r9, 0x40045431, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x2}}, 0x20) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 1m51.990278952s ago: executing program 0 (id=322): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) shutdown(r1, 0x2) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x11) 1m51.588342004s ago: executing program 0 (id=324): r0 = socket(0x10, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xe1841, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xe1841, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) close_range(r0, 0xffffffffffffffff, 0x0) 1m51.565785445s ago: executing program 0 (id=325): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0xfffe, 0x7, 0xf, 0x6723, 0xc, "e3cd0ba0912e5513"}) fcntl$lock(r0, 0x25, &(0x7f0000000380)={0x0, 0x2, 0x3, 0x3}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e23, 0x5, @empty, 0x19}}, 0xa1, 0x2}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r4, 0x4}, &(0x7f0000000080)=0x8) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = dup3(r6, r5, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x2, 0x80, 0xfc67}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) fcntl$lock(r5, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x6, 0x67f4, r9}) 1m51.565024479s ago: executing program 2 (id=326): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r3, 0x7fff}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r3, 0xb}, &(0x7f0000000240)=0x8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000000)="6ed5ee2316422521d2eb83920c1120541b8842f919bff2148f01dc59f77df243aaea11cef39a4738ed08ed7f3280c04d05955073f359207957fee56c962b70c77a4ea17fc13b875c0e468914254750fe1424274718a8339e7d2b729824fe376b", 0x60}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="93afc275031776b57aaf04b28f39faf6b3abc683e7284e2d1615e4f7655ba72621e01270af1473b9959280c18f2b14757fa49ab3a6fd66f3b581b4f22bdc3037d3e8ad13f14240f9ab390fa30caa924374b2afd1924fd4f87996601b7714a5fdd896940728", 0x65}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000000000060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000044010500fe880000000000000000000000000101000004d62b00000002000000ffffffff0000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc000000000000000000000000000001013500000200730001800000040000000700000000000000000000000000000000000000000004d33c00000002000000640101020000000000000000000000000635000002030700050000000300000007000000ac1414aa000000000000000000000000000004d43200000002000000fe8000000000000000000000000000bb0235000010"], 0x1fc}}, 0x0) r7 = socket(0x15, 0x80005, 0x0) getsockopt(r7, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r5) r9 = fanotify_init(0x10, 0x80000) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) fanotify_mark(r9, 0x1, 0x40001019, r10, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000002c0)=0x20) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070200000000fedbdf250100000000000000040007800400048008000100030000000800020001000000"], 0x30}}, 0x20000004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 1m51.039278432s ago: executing program 2 (id=330): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) 1m49.743948136s ago: executing program 0 (id=336): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11070000006641cb010052f436dd2a", 0x2a}, {&(0x7f0000000140)="aa1d484e2400000000008133d576983240cb31a5fc97fc294891f7c08bfcd151fba110c30183df23ea32db", 0x2b}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240), 0x2, 0x1}}, 0x20) close(0x3) 1m49.448699557s ago: executing program 0 (id=338): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r3, 0x7fff}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r3, 0xb}, &(0x7f0000000240)=0x8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000000)="6ed5ee2316422521d2eb83920c1120541b8842f919bff2148f01dc59f77df243aaea11cef39a4738ed08ed7f3280c04d05955073f359207957fee56c962b70c77a4ea17fc13b875c0e468914254750fe1424274718a8339e7d2b729824fe376b1dc1d91088d59d9b76cd999b3ff8859b165914fce715742515dffb4e1e8943055b4f8e9cfc8ba919809113c6f592f6ed", 0x90}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="93afc275031776b57aaf04b28f39faf6b3abc683e7284e2d1615e4f7655ba72621e01270af1473b9959280c18f2b14757fa49ab3a6fd66f3b581b4f22bdc3037d3e8ad13f14240f9ab390fa30caa924374b2afd1924fd4f87996601b7714a5fdd896940728", 0x65}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000000000060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000044010500fe880000000000000000000000000101000004d62b00000002000000ffffffff0000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc000000000000000000000000000001013500000200730001800000040000000700000000000000000000000000000000000000000004d33c00000002000000640101020000000000000000000000000635000002030700050000000300000007000000ac1414aa000000000000000000000000000004d43200000002000000fe8000000000000000000000000000bb0235000010"], 0x1fc}}, 0x0) r7 = socket(0x15, 0x80005, 0x0) getsockopt(r7, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r5) r9 = fanotify_init(0x10, 0x80000) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) fanotify_mark(r9, 0x1, 0x40001019, r10, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000002c0)=0x20) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070200000000fedbdf250100000000000000040007800400048008000100030000000800020001000000"], 0x30}}, 0x20000004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 1m48.949220089s ago: executing program 0 (id=341): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x2}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x8, r3, 0x0, 0x2, 0xe6, &(0x7f0000000400)="555f239e051d6017283d1d1745930958f2687f6dd653ad936f333e61e438ea21d19481022a0cf0c78fd82cf3d7b72eba87417e875c194609ec812889dc64a694f5954fa1eea9fd36ceb9a020e04b7e535bc9bd4b85c4476a45691119d9d3cff8222a8364ba2ec38b7c03cd01d3badde23b4834b96c41e4fa89489f0185315f8b362989ec4ad13e99bb044c6a8c4919efd9fe44367983594ac0a202f09923638a7f28056b21835d0482aa76325d1314f4430643e8752da481e0b6342ab405d85009d7e299299d97a982f66c4f01c149497ec50dae0e98c85415ab2a4eac01183fe09bc1df30d3"}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) 1m37.283279859s ago: executing program 32 (id=318): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x7d, 0x74, 0x25, 0x10, 0x174f, 0x5212, 0x50af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x5, 0xa0, 0x1, "", [{{0x9, 0x4, 0x7b, 0x4, 0x1, 0xe, 0x1, 0x0, 0xc, [], [{{0x9, 0x5, 0xe, 0x8, 0x8, 0x70, 0x4, 0x6}}]}}]}}]}}, 0x0) (async) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r3, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}, 0x40010) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdb7e}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) ioctl$KDGETKEYCODE(r1, 0x4b4c, 0xffffffffffffffff) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000080)={{0x2, 0x4e24, @multicast2}, {0x306, @random="00fef4f1dc8b"}, 0x4, {0x2, 0x5e23, @empty}, 'bond0\x00'}) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x20000) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040010) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e891a0c70000000000001000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write(r7, &(0x7f0000000240)='m', 0x1) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r9, 0x40045431, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x2}}, 0x20) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 1m35.948571714s ago: executing program 33 (id=330): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) 1m33.734024741s ago: executing program 34 (id=341): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x2}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x8, r3, 0x0, 0x2, 0xe6, &(0x7f0000000400)="555f239e051d6017283d1d1745930958f2687f6dd653ad936f333e61e438ea21d19481022a0cf0c78fd82cf3d7b72eba87417e875c194609ec812889dc64a694f5954fa1eea9fd36ceb9a020e04b7e535bc9bd4b85c4476a45691119d9d3cff8222a8364ba2ec38b7c03cd01d3badde23b4834b96c41e4fa89489f0185315f8b362989ec4ad13e99bb044c6a8c4919efd9fe44367983594ac0a202f09923638a7f28056b21835d0482aa76325d1314f4430643e8752da481e0b6342ab405d85009d7e299299d97a982f66c4f01c149497ec50dae0e98c85415ab2a4eac01183fe09bc1df30d3"}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) 32.177362794s ago: executing program 1 (id=843): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') close(0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) mknodat(r2, &(0x7f0000000180)='./file0\x00', 0x2, 0x0) symlink(&(0x7f0000000080)='.\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) poll(0x0, 0x0, 0xd4) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) landlock_restrict_self(r0, 0x9) 32.177109356s ago: executing program 1 (id=844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="02010001000001040000000000000000"], 0x10}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x30, 0x0, &(0x7f00000000c0)) shutdown(r3, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xdb1, @empty, 0x25}, 0x1c) r4 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r4, 0x10e, 0x9, 0x0, &(0x7f0000000280)) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x1000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 32.152935376s ago: executing program 1 (id=845): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$tcp_congestion(r0, &(0x7f00000000c0)='scalable\x00', 0x9) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000004000904"], 0x0) 31.909863627s ago: executing program 1 (id=847): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000ffdb05000b00000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x20008800) (fail_nth: 4) 31.756157848s ago: executing program 1 (id=848): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xcb}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044015}, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) memfd_create(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000003c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000180)) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000ffdb05000b00000008000300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x20008800) 31.533048722s ago: executing program 1 (id=849): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/asound/card0/oss_mixer\x00', 0xa01, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0xfff, 0x1, 0x0, 0x2}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x6, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) sync_file_range(0xffffffffffffffff, 0x66e14115, 0x2, 0x6) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9000}, 0x4044) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0003000000", 0x41d) write$proc_mixer(r0, 0x0, 0xffffff30) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/asound/card0/oss_mixer\x00', 0xa01, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0xfff, 0x1, 0x0, 0x2}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x6, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) (async) sync_file_range(0xffffffffffffffff, 0x66e14115, 0x2, 0x6) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9000}, 0x4044) (async) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0003000000", 0x41d) (async) write$proc_mixer(r0, 0x0, 0xffffff30) (async) 8.820967616s ago: executing program 4 (id=938): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600) 8.622361559s ago: executing program 4 (id=939): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x4004850}, 0x20040000) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x40, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="8df05aa70000"], 0x0, 0x0}) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000001c0)=0x2) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000100)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xf}) close(r4) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000940)={0x14, &(0x7f00000007c0)={0x0, 0x1, 0xe7, {0xe7, 0x24, "3b9f579c519c57fd02596c1913686e30e9d2135ccfbee0b0f1aa9a770408da848ce1b62e50b24a586aa2b3a4e57a97efcf252ce41ca55632353f165380cc7ce435811018b478a6b2a731a5659f2970c6e3cd68f776853b2d9834217618333ef171ca9ee89c077d2415bf901618cf890c3cfc5d513dd16bf2cac6f8c1091251026b82065b280571a2ae39e50eae65b78de546ea2a7c655b25b45c58a2b8c71ec3590edd4f2f8b384c45d515f835f9deded9cb43563d5e6ff66ac1db6dd08149445eb324c4451d529c208dbc19802e24656b0ca61f40f4e7e47487d82bfd945d02fba5487388"}}, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00'/10]}, &(0x7f0000000f00)={0x1c, &(0x7f0000000980)=ANY=[@ANYBLOB="4000e80000008557baeb95727be7f3fb7c029b4b80834f7b128b9d0176eec6a734c9b56ea1eabea6c9d8d61ed99bb0503b133ad068fa65cc099a0f255ef1d5dd39471de8fac63b62d97aa3c7560ef94f7a43eada4bd1f14e8a4718b15fcd1b2a57444e7930215df7f9ccccc0863e49154f1d821de17d3772e0dce869a2fbc308461513983962ba07734ed6f54e624e677e821117554f6233f0b1b87ff91e6bfd4772340c95c83479045b54db1ef13464410fc4d98a55340829fdfdd07a8d62107ec7aaec25900db4f98dd2a064509be22c0c29b6b9c85464429ecdfda54500"/238], &(0x7f0000000a80)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000ec0)}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000140)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="6f0546b98ced216a4ccf1ddea6020000006d467eb5b5fb3b262b95bcd0b16c8950a8cfdcb727bb81586832a0eedea9cf53af45022211c4f77f1999e8ad7692f4823711a67d4040e6067d4e83e70b93bf64d0052ce169c06f1b819bf9acf55871b463df0561b96ed342058e87b68bf83588cf62a7736f2baa68123d5715406599a106f8"], 0x0, 0x0}) r6 = getpgrp(0xffffffffffffffff) prlimit64(r6, 0x7, &(0x7f0000000000)={0x200, 0x4}, &(0x7f0000000180)) 6.067616236s ago: executing program 6 (id=947): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x68c00, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x60004}, 0x8010) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x13f, 0x4}}, 0x20) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.042470003s ago: executing program 5 (id=948): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000100)={0x0, 0xe, 0x2, {0x2, 0x22}}, &(0x7f0000000200)={0x0, 0x3, 0x17, @string={0x17, 0x3, "505f952e1382d9a706e642cffa808b2396798559aa"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x5, 0x3a2bb7, 0x262ccf}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0xa3, 0xd, 0x4, 0xfe, 0xe0, 0xfeff, 0x0}) 5.353015362s ago: executing program 6 (id=949): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x7, 0x4e23, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x0, 0x2, 0xfffffffffffffff9, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x4000000001ff, 0x7ffffffffffc, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2b}, 0xa, @in6=@private2, 0x203504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) (fail_nth: 4) 4.961495208s ago: executing program 6 (id=950): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/7, 0x7, 0x0, 0x3d}, @flat=@handle={0x73682a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}}, &(0x7f0000000300)={0x0, 0x3c, 0x40}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 3.562861292s ago: executing program 5 (id=951): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="3c00000058001f00032ae4f9002304000a04d65f080001000201000217d1ae3b70b0406700912deb5b859322340b0100000078f72e230a19fb2bcb1d", 0x3c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 3.508102898s ago: executing program 4 (id=952): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) (fail_nth: 4) 3.151944996s ago: executing program 4 (id=953): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x7, 0x4e23, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x0, 0x2, 0xfffffffffffffff9, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x4000000001ff, 0x7ffffffffffc, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2b}, 0xa, @in6=@private2, 0x203504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x84, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 3.082457015s ago: executing program 5 (id=954): ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000080)=0x3e) (async) readv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f00000000c0)=""/167, 0xa7}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/124, 0x7c}, {&(0x7f0000001200)=""/146, 0x92}], 0x4) (async) r1 = syz_open_procfs(0x0, &(0x7f0000001300)='net/fib_triestat\x00') ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) (async) bind$inet(r1, &(0x7f0000001340)={0x2, 0x4e22, @loopback}, 0x10) (async) r2 = syz_clone(0x21400, &(0x7f0000001380)="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", 0x1000, &(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002400)="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") fcntl$setown(r0, 0x8, r2) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000002500)=0x19c) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000002580)) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) mknodat$loop(0xffffffffffffffff, &(0x7f00000025c0)='./file0\x00', 0x10, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000002700)={&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002640)=[0x0, 0x0], &(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000026c0)=[0x0, 0x0, 0x0], 0x4, 0x2, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000002740)={0x1, r5, 0x3, 0x7, 0xffffffff, 0x7fff, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup(r0, &(0x7f00000027c0)='syz0\x00', 0x200002, 0x0) (async) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000002800)) (async) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000002840)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xdf, 0x56a, 0x9f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x50, 0x7, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0x62b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0xe26d6e5094e4385, 0x4, 0x4, 0x1}}]}}}]}}]}}, &(0x7f0000002940)={0xa, &(0x7f0000002880)={0xa, 0x6, 0x201, 0x10, 0x81, 0x2, 0x40, 0x5}, 0x5, &(0x7f00000028c0)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000002900)=@lang_id={0x4, 0x3, 0x1c09}}]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000002980)={0x3, r4, 0x7, 0x0, 0x9, 0xf84, 0x100}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f00000029c0)={0x3, r5, 0xf5a0, 0xfffffff8, 0x1, 0x10000000, 0x1}) r7 = syz_open_dev$usbfs(&(0x7f0000002a00), 0x9182, 0x40) ioctl$USBDEVFS_RESETEP(r7, 0x80045503, &(0x7f0000002a40)={0x5, 0x1}) (async, rerun: 64) ioctl$FIOCLEX(r7, 0x5451) (async, rerun: 64) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000002b40)={&(0x7f0000002a80)=""/145, 0x91}) (async, rerun: 32) preadv(r7, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/218, 0xda}, {&(0x7f0000002c80)=""/137, 0x89}], 0x2, 0xd9, 0x80) (async, rerun: 32) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000002d80)={0xc136, 0x2, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000002dc0)={0x0, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$DRM_IOCTL_MODE_CURSOR(r8, 0xc01c64a3, &(0x7f0000002e00)={0x1, r4, 0x3, 0x2, 0x8001, 0x2}) 2.939045539s ago: executing program 6 (id=955): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="02010001000001040000000000000000"], 0x10}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.674104438s ago: executing program 4 (id=956): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x68c00, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x60004}, 0x8010) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x13f, 0x4}}, 0x20) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.397416123s ago: executing program 5 (id=957): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2505"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0xf, 0x0, 0x0, 0x0, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="341888"]}]}, 0x20}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@getsa={0x28, 0x12, 0x20, 0x70bd27, 0x25dfdbfd, {@in6=@private0, 0x4d5, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) fsetxattr(r1, &(0x7f0000000080)=@known='trusted.syz\x00', &(0x7f0000000100)='\x00', 0x1, 0x2) r4 = socket(0x1, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x21) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x5, 0xffdff034}, {0x6, 0x27, 0x2, 0x7}]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r5) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) r8 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x34, @empty, 0xe}, 0x1c) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r9, &(0x7f0000006100)=[{{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/204, 0xcc}], 0x1}, 0x6}], 0x1, 0x2000, 0x0) r10 = userfaultfd(0x41ae1995d8db8e0e) pwritev(r10, 0x0, 0x0, 0xf10, 0x400) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000f80), 0x1048400, &(0x7f0000000240)=ANY=[@ANYRESHEX=r9]) ioctl$UI_DEV_DESTROY(r7, 0x5502) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x8000001, @local, 0x5}, 0x1c) 2.095489842s ago: executing program 4 (id=958): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) lseek(r3, 0x289e0cb5, 0x0) setsockopt$inet_int(r2, 0x0, 0x15, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8948, &(0x7f0000000000)={'lo\x00', @ifru_settings={0x8000, 0x2, @te1=&(0x7f0000000100)={0x2, 0x9, 0x1, 0x8}}}) dup3(r1, r0, 0x0) r5 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) close(r5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, 0x0) set_mempolicy_home_node(&(0x7f0000042000/0x2000)=nil, 0x2000, 0x0, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) r7 = socket$kcm(0x23, 0x5, 0x0) listen(r7, 0x65) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r9, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r7, 0x0, 0x0, 0x0) 756.152744ms ago: executing program 5 (id=959): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') fallocate(r2, 0x40, 0x8000, 0x6) (async) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f0000000040)=[{0x43, '\x00', @data=0xec, 0xc3}, {0xa, '\x00', @data=0xf, 0x6}]}) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000480)={0x0, 0x48, &(0x7f0000000340)={&(0x7f0000000400)={0x10, 0x3f2, 0x200, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x20000801}, 0x880) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/crypto\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x11, r4, 0x8000) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0xe, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x24040040) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x4, 0x2}}, './file0\x00'}) fsetxattr$security_evm(r5, &(0x7f0000000280), &(0x7f0000000300)=@sha1={0x1, "706a5fbf34f8825c6d9942ce8949de704e8f76a4"}, 0x15, 0x1) (async) syz_usb_connect$uac2(0x5, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000208c0d0c0040400202030109028c000301008008080b0101010c20060904000000010120000924010300042c000408240a05004000030c24030207030603050300010f2406030506edf100080007000400090401"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ecm(0x4, 0x77, 0x0, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65b2ff0a2c370242c067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRES8=r6, @ANYRES32=r8, @ANYBLOB="010026bd7000ffdb05000b00000008000300"], 0x28}, 0x1, 0x0, 0x0, 0x400c040}, 0x20008800) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x2, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x80, 0xa8, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x88, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x5, 0x0, 0x4}}}}}]}}]}}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cadce18c", @ANYRES16=r10, @ANYBLOB="000826bd7000ffdbdf250c000000080001000100000008000b000600000008000300", @ANYRES32=0x0, @ANYBLOB="08000b000900000008000100000000000800010002000000"], 0x44}}, 0x1800) 435.236385ms ago: executing program 6 (id=960): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x54}, &(0x7f00000000c0)=0x8) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x7, 0x4e23, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x0, 0x2, 0xfffffffffffffff9, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x4000000001ff, 0x7ffffffffffc, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2b}, 0xa, @in6=@private2, 0x203504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001914"], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x0, @name="f4e06b0a1e730e142a5c1e8623218cb8167a99b19faf6797ae55586411baebc8"}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 257.25078ms ago: executing program 5 (id=961): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000004900), 0x80000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x50}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02037f02210000000000000000000000030006000000000002000000ac14142e00000000000000000200010000000000000009007fffffff030005002b00000002000000ac1414aa0000000000000000170008007805"], 0x108}, 0x1, 0x7}, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f0000004a00)={0x48, 0x4, 0x0, 0x0, 0x0, &(0x7f0000004940), 0x2482}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x98}}, './file0\x00'}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) bind$inet(r4, 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000240)={0x40000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x71d4, 0xfffa}, 0xa, [0x6, 0xc95a, 0xfffffff3, 0x9, 0xe, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x8001, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x2, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x8, 0x8, 0x129432e3, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0x8, 0x312, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f33, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x8007f, 0x9, 0x5, 0x935c, 0x4, 0x1, 0x7, 0xb, 0x8, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xd, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x4, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x0, 0x400c8, 0x3, 0x3, 0xfffe, 0x3, 0x9, 0xfd, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x8c, 0x200, 0xffff3441, 0xff]}, 0x45c) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0x5, &(0x7f0000001e80)=0xffffffff, 0x3) setsockopt$inet_int(r7, 0x0, 0x5, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a80)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x800, 0x1, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 0s ago: executing program 6 (id=962): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x50041) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x24, 0x0, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008010}, 0x400c004) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r6, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000000)=0x5, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) listen(r2, 0x74) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) readv(r0, &(0x7f0000001400)=[{&(0x7f0000000080)=""/186, 0xba}, {&(0x7f0000000140)=""/249, 0xf9}, {0x0}], 0x3) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) kernel console output (not intermixed with test programs): 0000000246 R12: 0000000000000001 [ 213.517776][ T7655] R13: 00007fdc00bd6128 R14: 00007fdc00bd6090 R15: 00007ffcd9f39468 [ 213.517811][ T7655] [ 213.814372][ T1191] hsr_slave_0: left promiscuous mode [ 213.849519][ T1191] hsr_slave_1: left promiscuous mode [ 213.850766][ T1191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.850793][ T1191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.890555][ T1191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.890588][ T1191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.089498][ T1191] hsr_slave_0: left promiscuous mode [ 214.109413][ T1191] hsr_slave_1: left promiscuous mode [ 214.110410][ T1191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.110458][ T1191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.150850][ T1191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.150883][ T1191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.256707][ T1191] veth0_macvtap: left promiscuous mode [ 214.256845][ T1191] veth1_vlan: left allmulticast mode [ 214.257061][ T1191] veth1_vlan: left promiscuous mode [ 214.257176][ T1191] veth0_vlan: left promiscuous mode [ 214.370063][ T1191] veth1_macvtap: left promiscuous mode [ 214.370129][ T1191] veth0_macvtap: left promiscuous mode [ 214.370310][ T1191] veth1_vlan: left allmulticast mode [ 214.370530][ T1191] veth1_vlan: left promiscuous mode [ 214.370654][ T1191] veth0_vlan: left promiscuous mode [ 215.061263][ T1191] team0 (unregistering): Port device macvlan1 removed [ 215.282043][ T1191] team0 (unregistering): Port device team_slave_1 removed [ 215.340190][ T1191] team0 (unregistering): Port device team_slave_0 removed [ 215.770119][ T1191] team0 (unregistering): Port device macvlan1 removed [ 216.020260][ T1191] team0 (unregistering): Port device team_slave_1 removed [ 216.060355][ T1191] team0 (unregistering): Port device team_slave_0 removed [ 216.407951][ T5285] 8021q: adding VLAN 0 to HW filter on device eth7 [ 216.496253][ T6893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.889943][ T7673] FAULT_INJECTION: forcing a failure. [ 216.889943][ T7673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.889984][ T7673] CPU: 1 UID: 0 PID: 7673 Comm: syz.1.667 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 216.890010][ T7673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 216.890024][ T7673] Call Trace: [ 216.890032][ T7673] [ 216.890042][ T7673] dump_stack_lvl+0xe8/0x150 [ 216.890076][ T7673] should_fail_ex+0x46b/0x600 [ 216.890116][ T7673] strncpy_from_user+0x36/0x2b0 [ 216.890154][ T7673] do_getname+0x77/0x250 [ 216.890195][ T7673] __se_sys_renameat2+0x43/0x2c0 [ 216.890222][ T7673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.890247][ T7673] do_syscall_64+0x15f/0xf80 [ 216.890278][ T7673] ? trace_irq_disable+0x3b/0x140 [ 216.890313][ T7673] ? clear_bhb_loop+0x40/0x90 [ 216.890341][ T7673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.890363][ T7673] RIP: 0033:0x7fdc0095ce59 [ 216.890384][ T7673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.890403][ T7673] RSP: 002b:00007fdbfebae028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 216.890427][ T7673] RAX: ffffffffffffffda RBX: 00007fdc00bd5fa0 RCX: 00007fdc0095ce59 [ 216.890445][ T7673] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 216.890462][ T7673] RBP: 00007fdbfebae090 R08: 0000000000000002 R09: 0000000000000000 [ 216.890476][ T7673] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 216.890490][ T7673] R13: 00007fdc00bd6038 R14: 00007fdc00bd5fa0 R15: 00007ffcd9f39468 [ 216.890524][ T7673] [ 217.279391][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 218.104498][ T6908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.747352][ T6893] veth0_vlan: entered promiscuous mode [ 219.014830][ T6893] veth1_vlan: entered promiscuous mode [ 219.428599][ T6936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.504876][ T5285] 8021q: adding VLAN 0 to HW filter on device eth8 [ 219.796450][ T6893] veth0_macvtap: entered promiscuous mode [ 219.825674][ T7742] FAULT_INJECTION: forcing a failure. [ 219.825674][ T7742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.825715][ T7742] CPU: 0 UID: 0 PID: 7742 Comm: syz.1.681 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 219.825740][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.825754][ T7742] Call Trace: [ 219.825761][ T7742] [ 219.825770][ T7742] dump_stack_lvl+0xe8/0x150 [ 219.825807][ T7742] should_fail_ex+0x46b/0x600 [ 219.825848][ T7742] _copy_from_iter+0x1d3/0x1670 [ 219.825879][ T7742] ? trace_kmem_cache_alloc+0x29/0xe0 [ 219.825911][ T7742] ? __alloc_skb+0x27d/0x7d0 [ 219.825938][ T7742] ? __pfx__copy_from_iter+0x10/0x10 [ 219.825960][ T7742] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 219.825997][ T7742] ? __alloc_skb+0x27d/0x7d0 [ 219.826030][ T7742] ? netlink_sendmsg+0x650/0xb40 [ 219.826058][ T7742] ? skb_put+0x11b/0x210 [ 219.826088][ T7742] netlink_sendmsg+0x6c0/0xb40 [ 219.826130][ T7742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.826163][ T7742] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 219.826197][ T7742] ? aa_sock_msg_perm+0x122/0x200 [ 219.826223][ T7742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.826254][ T7742] sock_sendmsg_nosec+0x112/0x150 [ 219.826281][ T7742] ____sys_sendmsg+0x55c/0x870 [ 219.826319][ T7742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.826357][ T7742] ? import_iovec+0x73/0xa0 [ 219.826386][ T7742] ___sys_sendmsg+0x2a5/0x360 [ 219.826425][ T7742] ? __lock_acquire+0x6b5/0x2d10 [ 219.826454][ T7742] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.826520][ T7742] ? __fget_files+0x2a/0x420 [ 219.826548][ T7742] ? __fget_files+0x3a6/0x420 [ 219.826587][ T7742] __x64_sys_sendmsg+0x1c3/0x2a0 [ 219.826622][ T7742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.826665][ T7742] ? __pfx_ksys_write+0x10/0x10 [ 219.826696][ T7742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.826720][ T7742] do_syscall_64+0x15f/0xf80 [ 219.826753][ T7742] ? trace_irq_disable+0x3b/0x140 [ 219.826788][ T7742] ? clear_bhb_loop+0x40/0x90 [ 219.826814][ T7742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.826834][ T7742] RIP: 0033:0x7fdc0095ce59 [ 219.826854][ T7742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.826873][ T7742] RSP: 002b:00007fdbfebae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.826898][ T7742] RAX: ffffffffffffffda RBX: 00007fdc00bd5fa0 RCX: 00007fdc0095ce59 [ 219.826915][ T7742] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 219.826929][ T7742] RBP: 00007fdbfebae090 R08: 0000000000000000 R09: 0000000000000000 [ 219.826942][ T7742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.826955][ T7742] R13: 00007fdc00bd6038 R14: 00007fdc00bd5fa0 R15: 00007ffcd9f39468 [ 219.826988][ T7742] [ 220.217062][ T6893] veth1_macvtap: entered promiscuous mode [ 220.395112][ T6908] veth0_vlan: entered promiscuous mode [ 220.574946][ T6893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.583459][ T6908] veth1_vlan: entered promiscuous mode [ 220.755107][ T6893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.846468][ T1130] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.853851][ T1130] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.897032][ T1130] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.940091][ T1130] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.105633][ T6936] veth0_vlan: entered promiscuous mode [ 221.311698][ T6908] veth0_macvtap: entered promiscuous mode [ 221.379929][ T7774] IPVS: Scheduler module ip_vs_ not found [ 221.388195][ T7777] FAULT_INJECTION: forcing a failure. [ 221.388195][ T7777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.388229][ T7777] CPU: 0 UID: 0 PID: 7777 Comm: syz.1.690 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.388252][ T7777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.388264][ T7777] Call Trace: [ 221.388271][ T7777] [ 221.388279][ T7777] dump_stack_lvl+0xe8/0x150 [ 221.388309][ T7777] should_fail_ex+0x46b/0x600 [ 221.388346][ T7777] _copy_to_user+0x31/0xb0 [ 221.388372][ T7777] simple_read_from_buffer+0xe1/0x170 [ 221.388407][ T7777] proc_fail_nth_read+0x1be/0x230 [ 221.388437][ T7777] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.388467][ T7777] ? rw_verify_area+0x2ac/0x4e0 [ 221.388496][ T7777] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.388525][ T7777] vfs_read+0x212/0xa80 [ 221.388562][ T7777] ? __pfx_vfs_read+0x10/0x10 [ 221.388593][ T7777] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 221.388622][ T7777] ? lockdep_hardirqs_on+0x7a/0x110 [ 221.388651][ T7777] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 221.388677][ T7777] ? mutex_lock_nested+0x152/0x1d0 [ 221.388699][ T7777] ? fdget_pos+0x252/0x320 [ 221.388733][ T7777] ksys_read+0x156/0x270 [ 221.388754][ T7777] ? __pfx_ksys_read+0x10/0x10 [ 221.388781][ T7777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.388802][ T7777] do_syscall_64+0x15f/0xf80 [ 221.388829][ T7777] ? trace_irq_disable+0x3b/0x140 [ 221.388858][ T7777] ? clear_bhb_loop+0x40/0x90 [ 221.388882][ T7777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.388902][ T7777] RIP: 0033:0x7fdc0091d68e [ 221.388921][ T7777] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 221.388938][ T7777] RSP: 002b:00007fdbfeb8cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.388961][ T7777] RAX: ffffffffffffffda RBX: 00007fdbfeb8d6c0 RCX: 00007fdc0091d68e [ 221.388975][ T7777] RDX: 000000000000000f RSI: 00007fdbfeb8d0a0 RDI: 0000000000000005 [ 221.388987][ T7777] RBP: 00007fdbfeb8d090 R08: 0000000000000000 R09: 0000000000000000 [ 221.389000][ T7777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.389012][ T7777] R13: 00007fdc00bd6128 R14: 00007fdc00bd6090 R15: 00007ffcd9f39468 [ 221.389042][ T7777] [ 221.512052][ T6908] veth1_macvtap: entered promiscuous mode [ 221.562157][ T6936] veth1_vlan: entered promiscuous mode [ 222.196364][ T5285] 8021q: adding VLAN 0 to HW filter on device eth9 [ 222.305748][ T2588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.305773][ T2588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.337422][ T6908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.440327][ T6908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.537958][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.556793][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.575611][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.578552][ T2588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.578574][ T2588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.602212][ T7791] XFS (nbd1): SB validate failed with error -5. [ 222.644818][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.768804][ T6936] veth0_macvtap: entered promiscuous mode [ 223.056265][ T6936] veth1_macvtap: entered promiscuous mode [ 224.006811][ T6936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.269030][ T6936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.285138][ T2111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.285162][ T2111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.444223][ T1130] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.446020][ T1130] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.446105][ T1130] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.446145][ T1130] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.061166][ T123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.061190][ T123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.185348][ T5285] 8021q: adding VLAN 0 to HW filter on device eth10 [ 225.466518][ T7847] FAULT_INJECTION: forcing a failure. [ 225.466518][ T7847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.466556][ T7847] CPU: 0 UID: 0 PID: 7847 Comm: syz.4.707 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 225.466578][ T7847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.466588][ T7847] Call Trace: [ 225.466595][ T7847] [ 225.466603][ T7847] dump_stack_lvl+0xe8/0x150 [ 225.466632][ T7847] should_fail_ex+0x46b/0x600 [ 225.466671][ T7847] _copy_from_iter+0x1d3/0x1670 [ 225.466700][ T7847] ? trace_kmem_cache_alloc+0x29/0xe0 [ 225.466727][ T7847] ? __alloc_skb+0x27d/0x7d0 [ 225.466751][ T7847] ? __pfx__copy_from_iter+0x10/0x10 [ 225.466770][ T7847] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 225.466797][ T7847] ? __alloc_skb+0x27d/0x7d0 [ 225.466825][ T7847] ? netlink_sendmsg+0x650/0xb40 [ 225.466850][ T7847] ? skb_put+0x11b/0x210 [ 225.466877][ T7847] netlink_sendmsg+0x6c0/0xb40 [ 225.466912][ T7847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.466940][ T7847] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 225.466969][ T7847] ? aa_sock_msg_perm+0x122/0x200 [ 225.466990][ T7847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.467015][ T7847] sock_sendmsg_nosec+0x112/0x150 [ 225.467039][ T7847] ____sys_sendmsg+0x55c/0x870 [ 225.467070][ T7847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.467105][ T7847] ? import_iovec+0x73/0xa0 [ 225.467130][ T7847] ___sys_sendmsg+0x2a5/0x360 [ 225.467157][ T7847] ? __lock_acquire+0x6b5/0x2d10 [ 225.467182][ T7847] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.467241][ T7847] ? __fget_files+0x2a/0x420 [ 225.467264][ T7847] ? __fget_files+0x3a6/0x420 [ 225.467296][ T7847] __x64_sys_sendmsg+0x1c3/0x2a0 [ 225.467326][ T7847] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.467364][ T7847] ? __pfx_ksys_write+0x10/0x10 [ 225.467400][ T7847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.467421][ T7847] do_syscall_64+0x15f/0xf80 [ 225.467448][ T7847] ? clear_bhb_loop+0x40/0x90 [ 225.467470][ T7847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.467488][ T7847] RIP: 0033:0x7f0ff0d3ce59 [ 225.467506][ T7847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.467522][ T7847] RSP: 002b:00007f0feef8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.467542][ T7847] RAX: ffffffffffffffda RBX: 00007f0ff0fb5fa0 RCX: 00007f0ff0d3ce59 [ 225.467555][ T7847] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 225.467567][ T7847] RBP: 00007f0feef8e090 R08: 0000000000000000 R09: 0000000000000000 [ 225.467578][ T7847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.467589][ T7847] R13: 00007f0ff0fb6038 R14: 00007f0ff0fb5fa0 R15: 00007ffe50e95028 [ 225.467618][ T7847] [ 226.553898][ T1489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.553923][ T1489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.638742][ T7866] FAULT_INJECTION: forcing a failure. [ 226.638742][ T7866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.638782][ T7866] CPU: 0 UID: 0 PID: 7866 Comm: syz.1.714 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 226.638807][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.638819][ T7866] Call Trace: [ 226.638827][ T7866] [ 226.638836][ T7866] dump_stack_lvl+0xe8/0x150 [ 226.638867][ T7866] should_fail_ex+0x46b/0x600 [ 226.638906][ T7866] _copy_from_iter+0x1d3/0x1670 [ 226.638939][ T7866] ? trace_kmem_cache_alloc+0x29/0xe0 [ 226.638971][ T7866] ? __alloc_skb+0x27d/0x7d0 [ 226.638997][ T7866] ? __pfx__copy_from_iter+0x10/0x10 [ 226.639019][ T7866] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 226.639052][ T7866] ? __alloc_skb+0x27d/0x7d0 [ 226.639085][ T7866] ? netlink_sendmsg+0x650/0xb40 [ 226.639117][ T7866] ? skb_put+0x11b/0x210 [ 226.639154][ T7866] netlink_sendmsg+0x6c0/0xb40 [ 226.639194][ T7866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.639229][ T7866] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 226.639263][ T7866] ? aa_sock_msg_perm+0x122/0x200 [ 226.639289][ T7866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.639316][ T7866] sock_sendmsg_nosec+0x112/0x150 [ 226.639340][ T7866] ____sys_sendmsg+0x55c/0x870 [ 226.639383][ T7866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.639419][ T7866] ? import_iovec+0x73/0xa0 [ 226.639445][ T7866] ___sys_sendmsg+0x2a5/0x360 [ 226.639471][ T7866] ? __lock_acquire+0x6b5/0x2d10 [ 226.639496][ T7866] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.639563][ T7866] ? __fget_files+0x2a/0x420 [ 226.639591][ T7866] ? __fget_files+0x3a6/0x420 [ 226.639626][ T7866] __x64_sys_sendmsg+0x1c3/0x2a0 [ 226.639659][ T7866] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.639702][ T7866] ? __pfx_ksys_write+0x10/0x10 [ 226.639731][ T7866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.639756][ T7866] do_syscall_64+0x15f/0xf80 [ 226.639788][ T7866] ? trace_irq_disable+0x3b/0x140 [ 226.639822][ T7866] ? clear_bhb_loop+0x40/0x90 [ 226.639848][ T7866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.639871][ T7866] RIP: 0033:0x7fdc0095ce59 [ 226.639893][ T7866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.639912][ T7866] RSP: 002b:00007fdbfebae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.639937][ T7866] RAX: ffffffffffffffda RBX: 00007fdc00bd5fa0 RCX: 00007fdc0095ce59 [ 226.639953][ T7866] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 226.639967][ T7866] RBP: 00007fdbfebae090 R08: 0000000000000000 R09: 0000000000000000 [ 226.639981][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.639995][ T7866] R13: 00007fdc00bd6038 R14: 00007fdc00bd5fa0 R15: 00007ffcd9f39468 [ 226.640028][ T7866] [ 227.002653][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.002696][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.639671][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.399'. [ 227.639715][ T7868] netlink: 244 bytes leftover after parsing attributes in process `syz.5.399'. [ 227.639733][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.399'. [ 227.716800][ T7886] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 228.128253][ T7901] FAULT_INJECTION: forcing a failure. [ 228.128253][ T7901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.128294][ T7901] CPU: 1 UID: 0 PID: 7901 Comm: syz.1.721 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 228.128320][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.128334][ T7901] Call Trace: [ 228.128342][ T7901] [ 228.128351][ T7901] dump_stack_lvl+0xe8/0x150 [ 228.128403][ T7901] should_fail_ex+0x46b/0x600 [ 228.128443][ T7901] _copy_to_user+0x31/0xb0 [ 228.128474][ T7901] video_usercopy+0xe0a/0x1450 [ 228.128513][ T7901] ? __pfx___video_do_ioctl+0x10/0x10 [ 228.128547][ T7901] ? __pfx_video_usercopy+0x10/0x10 [ 228.128589][ T7901] ? __fget_files+0x2a/0x420 [ 228.128621][ T7901] ? __fget_files+0x2a/0x420 [ 228.128649][ T7901] ? __fget_files+0x3a6/0x420 [ 228.128682][ T7901] v4l2_ioctl+0x190/0x1e0 [ 228.128713][ T7901] ? __pfx_v4l2_ioctl+0x10/0x10 [ 228.128741][ T7901] __se_sys_ioctl+0xff/0x170 [ 228.128764][ T7901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.128788][ T7901] do_syscall_64+0x15f/0xf80 [ 228.128819][ T7901] ? trace_irq_disable+0x3b/0x140 [ 228.128854][ T7901] ? clear_bhb_loop+0x40/0x90 [ 228.128879][ T7901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.128900][ T7901] RIP: 0033:0x7fdc0095ce59 [ 228.128922][ T7901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.128940][ T7901] RSP: 002b:00007fdbfebae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.128963][ T7901] RAX: ffffffffffffffda RBX: 00007fdc00bd5fa0 RCX: 00007fdc0095ce59 [ 228.128977][ T7901] RDX: 0000200000000040 RSI: 00000000c008561c RDI: 0000000000000004 [ 228.128991][ T7901] RBP: 00007fdbfebae090 R08: 0000000000000000 R09: 0000000000000000 [ 228.129004][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.129018][ T7901] R13: 00007fdc00bd6038 R14: 00007fdc00bd5fa0 R15: 00007ffcd9f39468 [ 228.129051][ T7901] [ 228.531541][ T7907] FAULT_INJECTION: forcing a failure. [ 228.531541][ T7907] name failslab, interval 1, probability 0, space 0, times 0 [ 228.531580][ T7907] CPU: 0 UID: 0 PID: 7907 Comm: syz.6.722 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 228.531604][ T7907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.531617][ T7907] Call Trace: [ 228.531625][ T7907] [ 228.531634][ T7907] dump_stack_lvl+0xe8/0x150 [ 228.531666][ T7907] should_fail_ex+0x46b/0x600 [ 228.531707][ T7907] should_failslab+0xa8/0x100 [ 228.531731][ T7907] __kmalloc_cache_noprof+0x84/0x690 [ 228.531755][ T7907] ? __inet_diag_dump_start+0x8b/0xbf0 [ 228.531795][ T7907] __inet_diag_dump_start+0x8b/0xbf0 [ 228.531831][ T7907] ? lockdep_hardirqs_on+0x7a/0x110 [ 228.531861][ T7907] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 228.531900][ T7907] __netlink_dump_start+0x469/0x7e0 [ 228.531940][ T7907] inet_diag_handler_cmd+0x1e0/0x2c0 [ 228.531978][ T7907] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 228.532008][ T7907] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 228.532038][ T7907] ? __pfx_inet_diag_dump+0x10/0x10 [ 228.532067][ T7907] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 228.532101][ T7907] ? sock_diag_lock_handler+0x19/0x290 [ 228.532127][ T7907] ? sock_diag_lock_handler+0x19/0x290 [ 228.532160][ T7907] sock_diag_rcv_msg+0x4cc/0x600 [ 228.532193][ T7907] netlink_rcv_skb+0x232/0x4b0 [ 228.532226][ T7907] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 228.532256][ T7907] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.532301][ T7907] ? netlink_deliver_tap+0x2e/0x1b0 [ 228.532332][ T7907] ? netlink_deliver_tap+0x2e/0x1b0 [ 228.532368][ T7907] netlink_unicast+0x780/0x920 [ 228.532418][ T7907] netlink_sendmsg+0x813/0xb40 [ 228.532460][ T7907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.532494][ T7907] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 228.532529][ T7907] ? aa_sock_msg_perm+0x122/0x200 [ 228.532564][ T7907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.532596][ T7907] sock_sendmsg_nosec+0x112/0x150 [ 228.532624][ T7907] sock_write_iter+0x308/0x410 [ 228.532649][ T7907] ? __pfx_sock_write_iter+0x10/0x10 [ 228.532699][ T7907] do_iter_readv_writev+0x62b/0x8d0 [ 228.532727][ T7907] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 228.532761][ T7907] ? rw_verify_area+0x25b/0x4e0 [ 228.532795][ T7907] vfs_writev+0x345/0x9a0 [ 228.532828][ T7907] ? __pfx_vfs_writev+0x10/0x10 [ 228.532868][ T7907] ? __fget_files+0x2a/0x420 [ 228.532899][ T7907] ? __fget_files+0x3a6/0x420 [ 228.532927][ T7907] ? __fget_files+0x2a/0x420 [ 228.532965][ T7907] do_writev+0x15a/0x2e0 [ 228.532993][ T7907] ? __pfx_do_writev+0x10/0x10 [ 228.533027][ T7907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.533052][ T7907] do_syscall_64+0x15f/0xf80 [ 228.533084][ T7907] ? trace_irq_disable+0x3b/0x140 [ 228.533117][ T7907] ? clear_bhb_loop+0x40/0x90 [ 228.533142][ T7907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.533165][ T7907] RIP: 0033:0x7f0ea23bce59 [ 228.533189][ T7907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.533208][ T7907] RSP: 002b:00007f0ea060e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 228.533231][ T7907] RAX: ffffffffffffffda RBX: 00007f0ea2635fa0 RCX: 00007f0ea23bce59 [ 228.533247][ T7907] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 228.533262][ T7907] RBP: 00007f0ea060e090 R08: 0000000000000000 R09: 0000000000000000 [ 228.533276][ T7907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.533290][ T7907] R13: 00007f0ea2636038 R14: 00007f0ea2635fa0 R15: 00007ffc75c398b8 [ 228.533325][ T7907] [ 229.284282][ T5285] 8021q: adding VLAN 0 to HW filter on device eth11 [ 229.351390][ T7928] FAULT_INJECTION: forcing a failure. [ 229.351390][ T7928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.351437][ T7928] CPU: 1 UID: 0 PID: 7928 Comm: syz.1.732 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 229.351462][ T7928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.351475][ T7928] Call Trace: [ 229.351483][ T7928] [ 229.351492][ T7928] dump_stack_lvl+0xe8/0x150 [ 229.351526][ T7928] should_fail_ex+0x46b/0x600 [ 229.351567][ T7928] _copy_from_iter+0x1d3/0x1670 [ 229.351614][ T7928] ? trace_kmem_cache_alloc+0x29/0xe0 [ 229.351645][ T7928] ? __alloc_skb+0x27d/0x7d0 [ 229.351674][ T7928] ? __pfx__copy_from_iter+0x10/0x10 [ 229.351695][ T7928] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 229.351724][ T7928] ? __alloc_skb+0x27d/0x7d0 [ 229.351756][ T7928] ? netlink_sendmsg+0x650/0xb40 [ 229.351786][ T7928] ? skb_put+0x11b/0x210 [ 229.351828][ T7928] netlink_sendmsg+0x6c0/0xb40 [ 229.351870][ T7928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.351912][ T7928] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 229.351947][ T7928] ? aa_sock_msg_perm+0x122/0x200 [ 229.351980][ T7928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.352013][ T7928] sock_sendmsg_nosec+0x112/0x150 [ 229.352041][ T7928] ____sys_sendmsg+0x55c/0x870 [ 229.352080][ T7928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.352122][ T7928] ? import_iovec+0x73/0xa0 [ 229.352151][ T7928] ___sys_sendmsg+0x2a5/0x360 [ 229.352182][ T7928] ? __lock_acquire+0x6b5/0x2d10 [ 229.352211][ T7928] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.352278][ T7928] ? __fget_files+0x2a/0x420 [ 229.352307][ T7928] ? __fget_files+0x3a6/0x420 [ 229.352347][ T7928] __x64_sys_sendmsg+0x1c3/0x2a0 [ 229.352383][ T7928] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.352435][ T7928] ? __pfx_ksys_write+0x10/0x10 [ 229.352474][ T7928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.352499][ T7928] do_syscall_64+0x15f/0xf80 [ 229.352531][ T7928] ? trace_irq_disable+0x3b/0x140 [ 229.352564][ T7928] ? clear_bhb_loop+0x40/0x90 [ 229.352592][ T7928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.352614][ T7928] RIP: 0033:0x7fdc0095ce59 [ 229.352636][ T7928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.352655][ T7928] RSP: 002b:00007fdbfebae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.352680][ T7928] RAX: ffffffffffffffda RBX: 00007fdc00bd5fa0 RCX: 00007fdc0095ce59 [ 229.352697][ T7928] RDX: 0000000000044810 RSI: 0000200000001240 RDI: 0000000000000004 [ 229.352712][ T7928] RBP: 00007fdbfebae090 R08: 0000000000000000 R09: 0000000000000000 [ 229.352726][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.352741][ T7928] R13: 00007fdc00bd6038 R14: 00007fdc00bd5fa0 R15: 00007ffcd9f39468 [ 229.352775][ T7928] [ 229.696387][ T7932] netlink: 32 bytes leftover after parsing attributes in process `syz.4.731'. [ 229.696415][ T7932] netlink: 43 bytes leftover after parsing attributes in process `syz.4.731'. [ 229.696432][ T7932] netlink: 'syz.4.731': attribute type 6 has an invalid length. [ 229.696446][ T7932] netlink: 'syz.4.731': attribute type 5 has an invalid length. [ 229.696459][ T7932] netlink: 43 bytes leftover after parsing attributes in process `syz.4.731'. [ 230.096761][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'. [ 230.199022][ T7949] FAULT_INJECTION: forcing a failure. [ 230.199022][ T7949] name failslab, interval 1, probability 0, space 0, times 0 [ 230.199081][ T7949] CPU: 1 UID: 0 PID: 7949 Comm: syz.1.737 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 230.199107][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.199120][ T7949] Call Trace: [ 230.199134][ T7949] [ 230.199144][ T7949] dump_stack_lvl+0xe8/0x150 [ 230.199177][ T7949] should_fail_ex+0x46b/0x600 [ 230.199216][ T7949] should_failslab+0xa8/0x100 [ 230.199241][ T7949] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 230.199275][ T7949] ? __alloc_skb+0x1d0/0x7d0 [ 230.199302][ T7949] ? lockdep_hardirqs_on+0x7a/0x110 [ 230.199338][ T7949] __alloc_skb+0x1d0/0x7d0 [ 230.199374][ T7949] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 230.199404][ T7949] netlink_sendmsg+0x5d4/0xb40 [ 230.199448][ T7949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.199485][ T7949] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 230.199520][ T7949] ? aa_sock_msg_perm+0x122/0x200 [ 230.199547][ T7949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.199580][ T7949] sock_sendmsg_nosec+0x112/0x150 [ 230.199608][ T7949] ____sys_sendmsg+0x55c/0x870 [ 230.199646][ T7949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.199688][ T7949] ? import_iovec+0x73/0xa0 [ 230.199719][ T7949] ___sys_sendmsg+0x2a5/0x360 [ 230.199751][ T7949] ? __lock_acquire+0x6b5/0x2d10 [ 230.199779][ T7949] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.199848][ T7949] ? __fget_files+0x2a/0x420 [ 230.199877][ T7949] ? __fget_files+0x3a6/0x420 [ 230.199916][ T7949] __x64_sys_sendmsg+0x1c3/0x2a0 [ 230.199950][ T7949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.199993][ T7949] ? __pfx_ksys_write+0x10/0x10 [ 230.200023][ T7949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.200048][ T7949] do_syscall_64+0x15f/0xf80 [ 230.200077][ T7949] ? trace_irq_disable+0x3b/0x140 [ 230.200108][ T7949] ? clear_bhb_loop+0x40/0x90 [ 230.200130][ T7949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.200149][ T7949] RIP: 0033:0x7fdc0095ce59 [ 230.200167][ T7949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.200184][ T7949] RSP: 002b:00007fdbfebae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.200205][ T7949] RAX: ffffffffffffffda RBX: 00007fdc00bd5fa0 RCX: 00007fdc0095ce59 [ 230.200220][ T7949] RDX: 0000000024004052 RSI: 0000200000000140 RDI: 0000000000000004 [ 230.200233][ T7949] RBP: 00007fdbfebae090 R08: 0000000000000000 R09: 0000000000000000 [ 230.200244][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.200255][ T7949] R13: 00007fdc00bd6038 R14: 00007fdc00bd5fa0 R15: 00007ffcd9f39468 [ 230.200285][ T7949] [ 231.717520][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.718180][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.745862][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.749064][ T7997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.769316][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.770030][ T7997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.939530][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 231.979346][ T1889] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 232.097818][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 232.097855][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.097878][ T9] usb 5-1: Product: syz [ 232.097895][ T9] usb 5-1: Manufacturer: syz [ 232.097910][ T9] usb 5-1: SerialNumber: syz [ 232.108553][ T9] usb 5-1: config 0 descriptor?? [ 232.153322][ T1889] usb 7-1: not running at top speed; connect to a high speed hub [ 232.157339][ T1889] usb 7-1: config 3 has an invalid interface number: 40 but max is 3 [ 232.157372][ T1889] usb 7-1: config 3 has an invalid interface number: 163 but max is 3 [ 232.157395][ T1889] usb 7-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 232.157415][ T1889] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 232.157435][ T1889] usb 7-1: config 3 has an invalid interface number: 18 but max is 3 [ 232.157459][ T1889] usb 7-1: config 3 has an invalid interface number: 17 but max is 3 [ 232.157481][ T1889] usb 7-1: config 3 has an invalid interface number: 80 but max is 3 [ 232.157503][ T1889] usb 7-1: config 3 has 5 interfaces, different from the descriptor's value: 4 [ 232.157525][ T1889] usb 7-1: config 3 has no interface number 0 [ 232.157542][ T1889] usb 7-1: config 3 has no interface number 1 [ 232.157560][ T1889] usb 7-1: config 3 has no interface number 2 [ 232.157577][ T1889] usb 7-1: config 3 has no interface number 3 [ 232.157595][ T1889] usb 7-1: config 3 has no interface number 4 [ 232.157696][ T1889] usb 7-1: config 3 interface 40 altsetting 3 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 232.157730][ T1889] usb 7-1: config 3 interface 40 altsetting 3 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 232.157759][ T1889] usb 7-1: config 3 interface 40 altsetting 3 endpoint 0x86 has an invalid bInterval 153, changing to 4 [ 232.157789][ T1889] usb 7-1: config 3 interface 40 altsetting 3 endpoint 0x86 has invalid maxpacket 42116, setting to 1023 [ 232.157818][ T1889] usb 7-1: config 3 interface 40 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 232.157863][ T1889] usb 7-1: config 3 interface 163 altsetting 1 endpoint 0x4 has invalid maxpacket 959, setting to 64 [ 232.157892][ T1889] usb 7-1: config 3 interface 163 altsetting 1 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 232.157941][ T1889] usb 7-1: config 3 interface 163 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 232.157966][ T1889] usb 7-1: config 3 interface 163 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 232.157994][ T1889] usb 7-1: config 3 interface 163 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 232.158018][ T1889] usb 7-1: config 3 interface 163 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 232.158041][ T1889] usb 7-1: config 3 interface 163 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 232.158066][ T1889] usb 7-1: config 3 interface 163 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 232.158128][ T1889] usb 7-1: config 3 interface 18 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 232.158153][ T1889] usb 7-1: config 3 interface 18 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 232.158179][ T1889] usb 7-1: config 3 interface 18 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 232.158202][ T1889] usb 7-1: config 3 interface 18 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 232.158227][ T1889] usb 7-1: config 3 interface 18 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 232.158254][ T1889] usb 7-1: config 3 interface 18 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 232.163594][ T1889] usb 7-1: config 3 interface 18 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 232.163624][ T1889] usb 7-1: config 3 interface 18 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 232.163651][ T1889] usb 7-1: config 3 interface 18 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 232.163690][ T1889] usb 7-1: config 3 interface 17 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 232.163712][ T1889] usb 7-1: config 3 interface 17 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 232.163735][ T1889] usb 7-1: config 3 interface 17 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 232.163757][ T1889] usb 7-1: config 3 interface 17 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 232.163779][ T1889] usb 7-1: config 3 interface 17 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 232.163799][ T1889] usb 7-1: config 3 interface 17 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 232.163826][ T1889] usb 7-1: too many endpoints for config 3 interface 80 altsetting 103: 97, using maximum allowed: 30 [ 232.163864][ T1889] usb 7-1: config 3 interface 80 altsetting 103 has a duplicate endpoint with address 0x6, skipping [ 232.163888][ T1889] usb 7-1: config 3 interface 80 altsetting 103 has 1 endpoint descriptor, different from the interface descriptor's value: 97 [ 232.163917][ T1889] usb 7-1: config 3 interface 40 has no altsetting 0 [ 232.163934][ T1889] usb 7-1: config 3 interface 163 has no altsetting 0 [ 232.163951][ T1889] usb 7-1: config 3 interface 18 has no altsetting 0 [ 232.163968][ T1889] usb 7-1: config 3 interface 17 has no altsetting 0 [ 232.163985][ T1889] usb 7-1: config 3 interface 80 has no altsetting 0 [ 232.188020][ T1889] usb 7-1: Dual-Role OTG device on HNP port [ 232.193939][ T1889] usb 7-1: New USB device found, idVendor=0411, idProduct=0005, bcdDevice=2b.b8 [ 232.193970][ T1889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.193990][ T1889] usb 7-1: Product: syz [ 232.194005][ T1889] usb 7-1: Manufacturer: 㰁 [ 232.194019][ T1889] usb 7-1: SerialNumber: syz [ 232.253271][ T7992] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 232.556447][ T9] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 232.557301][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 232.704979][ T9] usb 5-1: USB disconnect, device number 2 [ 232.975904][ T1889] pegasus 7-1:3.40: Missing or invalid endpoints [ 233.024586][ T1889] pegasus 7-1:3.163: Missing or invalid endpoints [ 233.040278][ T1889] pegasus 7-1:3.18: Missing or invalid endpoints [ 233.084188][ T1889] pegasus 7-1:3.17: Missing or invalid endpoints [ 233.085102][ T1889] rndis_host 7-1:3.17: More than one union descriptor, skipping ... [ 233.085115][ T1889] rndis_host 7-1:3.17: More than one union descriptor, skipping ... [ 233.085133][ T1889] rndis_host 7-1:3.17: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 233.128956][ T1889] pegasus 7-1:3.80: Missing or invalid endpoints [ 233.198217][ T1889] usb 7-1: USB disconnect, device number 2 [ 233.238709][ T8021] FAULT_INJECTION: forcing a failure. [ 233.238709][ T8021] name failslab, interval 1, probability 0, space 0, times 0 [ 233.238748][ T8021] CPU: 1 UID: 0 PID: 8021 Comm: syz.1.756 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 233.238775][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.238788][ T8021] Call Trace: [ 233.238797][ T8021] [ 233.238805][ T8021] dump_stack_lvl+0xe8/0x150 [ 233.238837][ T8021] should_fail_ex+0x46b/0x600 [ 233.238879][ T8021] should_failslab+0xa8/0x100 [ 233.238903][ T8021] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 233.238937][ T8021] ? __alloc_skb+0x1d0/0x7d0 [ 233.238964][ T8021] ? lockdep_hardirqs_on+0x7a/0x110 [ 233.239001][ T8021] __alloc_skb+0x1d0/0x7d0 [ 233.239035][ T8021] netlink_sendmsg+0x5d4/0xb40 [ 233.239077][ T8021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.239111][ T8021] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 233.239151][ T8021] ? aa_sock_msg_perm+0x122/0x200 [ 233.239177][ T8021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.239206][ T8021] sock_sendmsg_nosec+0x112/0x150 [ 233.239233][ T8021] ____sys_sendmsg+0x55c/0x870 [ 233.239271][ T8021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.239310][ T8021] ? import_iovec+0x73/0xa0 [ 233.239339][ T8021] ___sys_sendmsg+0x2a5/0x360 [ 233.239370][ T8021] ? __lock_acquire+0x6b5/0x2d10 [ 233.239407][ T8021] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.239473][ T8021] ? __fget_files+0x2a/0x420 [ 233.239501][ T8021] ? __fget_files+0x3a6/0x420 [ 233.239537][ T8021] __x64_sys_sendmsg+0x1c3/0x2a0 [ 233.239572][ T8021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.239613][ T8021] ? __pfx_ksys_write+0x10/0x10 [ 233.239642][ T8021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.239666][ T8021] do_syscall_64+0x15f/0xf80 [ 233.239697][ T8021] ? trace_irq_disable+0x3b/0x140 [ 233.239728][ T8021] ? clear_bhb_loop+0x40/0x90 [ 233.239753][ T8021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.239775][ T8021] RIP: 0033:0x7fdc0095ce59 [ 233.239796][ T8021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.239816][ T8021] RSP: 002b:00007fdbfeb8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.239840][ T8021] RAX: ffffffffffffffda RBX: 00007fdc00bd6090 RCX: 00007fdc0095ce59 [ 233.239856][ T8021] RDX: 000000002c048010 RSI: 0000200000003740 RDI: 0000000000000003 [ 233.239871][ T8021] RBP: 00007fdbfeb8d090 R08: 0000000000000000 R09: 0000000000000000 [ 233.239885][ T8021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.239898][ T8021] R13: 00007fdc00bd6128 R14: 00007fdc00bd6090 R15: 00007ffcd9f39468 [ 233.239929][ T8021] [ 233.269744][ T5285] 8021q: adding VLAN 0 to HW filter on device eth12 [ 234.135305][ T32] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 234.279360][ T32] usb 7-1: device descriptor read/64, error -71 [ 234.530972][ T32] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 234.669791][ T32] usb 7-1: device descriptor read/64, error -71 [ 234.757714][ T8061] FAULT_INJECTION: forcing a failure. [ 234.757714][ T8061] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 234.757754][ T8061] CPU: 0 UID: 0 PID: 8061 Comm: syz.1.767 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 234.757778][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 234.757791][ T8061] Call Trace: [ 234.757799][ T8061] [ 234.757808][ T8061] dump_stack_lvl+0xe8/0x150 [ 234.757842][ T8061] should_fail_ex+0x46b/0x600 [ 234.757879][ T8061] prepare_alloc_pages+0x22a/0x6b0 [ 234.757908][ T8061] __alloc_frozen_pages_noprof+0x12f/0x380 [ 234.757936][ T8061] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 234.757965][ T8061] ? __pfx_policy_nodemask+0x10/0x10 [ 234.757994][ T8061] ? rcu_is_watching+0x15/0xb0 [ 234.758023][ T8061] alloc_pages_mpol+0xd1/0x380 [ 234.758051][ T8061] alloc_pages_noprof+0xd2/0x2f0 [ 234.758077][ T8061] kvm_vm_ioctl_create_vcpu+0x144/0x970 [ 234.758125][ T8061] kvm_vm_ioctl+0x896/0xd50 [ 234.758156][ T8061] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 234.758202][ T8061] ? kasan_quarantine_put+0xbb/0x1f0 [ 234.758243][ T8061] ? tomoyo_path_number_perm+0x219/0x630 [ 234.758268][ T8061] ? tomoyo_path_number_perm+0x219/0x630 [ 234.758294][ T8061] ? do_vfs_ioctl+0x117b/0x1540 [ 234.758325][ T8061] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 234.758383][ T8061] ? __fget_files+0x2a/0x420 [ 234.758412][ T8061] ? __fget_files+0x2a/0x420 [ 234.758437][ T8061] ? __fget_files+0x3a6/0x420 [ 234.758461][ T8061] ? __fget_files+0x2a/0x420 [ 234.758492][ T8061] ? bpf_lsm_file_ioctl+0x9/0x20 [ 234.758517][ T8061] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 234.758545][ T8061] __se_sys_ioctl+0xff/0x170 [ 234.758567][ T8061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.758591][ T8061] do_syscall_64+0x15f/0xf80 [ 234.758622][ T8061] ? trace_irq_disable+0x3b/0x140 [ 234.758656][ T8061] ? clear_bhb_loop+0x40/0x90 [ 234.758683][ T8061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.758705][ T8061] RIP: 0033:0x7fdc0095ce59 [ 234.758727][ T8061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.758745][ T8061] RSP: 002b:00007fdbfebae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.758769][ T8061] RAX: ffffffffffffffda RBX: 00007fdc00bd5fa0 RCX: 00007fdc0095ce59 [ 234.758786][ T8061] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 234.758800][ T8061] RBP: 00007fdbfebae090 R08: 0000000000000000 R09: 0000000000000000 [ 234.758813][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.758826][ T8061] R13: 00007fdc00bd6038 R14: 00007fdc00bd5fa0 R15: 00007ffcd9f39468 [ 234.758860][ T8061] [ 234.810634][ T32] usb usb7-port1: attempt power cycle [ 235.390007][ T32] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 235.410449][ T32] usb 7-1: device descriptor read/8, error -71 [ 235.561481][ T5713] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 235.649669][ T32] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 235.671561][ T32] usb 7-1: device descriptor read/8, error -71 [ 235.706811][ T8078] FAULT_INJECTION: forcing a failure. [ 235.706811][ T8078] name failslab, interval 1, probability 0, space 0, times 0 [ 235.706851][ T8078] CPU: 0 UID: 0 PID: 8078 Comm: syz.5.772 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 235.706883][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.706898][ T8078] Call Trace: [ 235.706907][ T8078] [ 235.706916][ T8078] dump_stack_lvl+0xe8/0x150 [ 235.706950][ T8078] should_fail_ex+0x46b/0x600 [ 235.706992][ T8078] should_failslab+0xa8/0x100 [ 235.707018][ T8078] __kvmalloc_node_noprof+0x170/0x8e0 [ 235.707041][ T8078] ? vmx_vcpu_pi_load+0x141/0x850 [ 235.707070][ T8078] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 235.707103][ T8078] __kvm_mmu_topup_memory_cache+0x463/0x610 [ 235.707132][ T8078] ? __lock_acquire+0x6b5/0x2d10 [ 235.707157][ T8078] mmu_topup_memory_caches+0x21/0x170 [ 235.707185][ T8078] kvm_mmu_load+0x9d/0x2320 [ 235.707213][ T8078] ? vmx_vcpu_load+0x1b0/0x260 [ 235.707234][ T8078] ? kvm_arch_vcpu_load+0x1f6/0xab0 [ 235.707259][ T8078] ? kvm_arch_vcpu_load+0x7e0/0xab0 [ 235.707286][ T8078] ? kvm_vcpu_pre_fault_memory+0x15b/0x460 [ 235.707319][ T8078] ? kvm_vcpu_pre_fault_memory+0x15b/0x460 [ 235.707362][ T8078] kvm_arch_vcpu_pre_fault_memory+0x642/0x6f0 [ 235.707396][ T8078] kvm_vcpu_pre_fault_memory+0x228/0x460 [ 235.707434][ T8078] ? kvm_vcpu_pre_fault_memory+0x15b/0x460 [ 235.707472][ T8078] kvm_vcpu_ioctl+0x8aa/0xfe0 [ 235.707510][ T8078] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 235.707564][ T8078] ? __fget_files+0x2a/0x420 [ 235.707607][ T8078] ? bpf_lsm_file_ioctl+0x9/0x20 [ 235.707634][ T8078] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 235.707666][ T8078] __se_sys_ioctl+0xff/0x170 [ 235.707689][ T8078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.707714][ T8078] do_syscall_64+0x15f/0xf80 [ 235.707746][ T8078] ? trace_irq_disable+0x3b/0x140 [ 235.707780][ T8078] ? clear_bhb_loop+0x40/0x90 [ 235.707807][ T8078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.707829][ T8078] RIP: 0033:0x7fa99a4dce59 [ 235.707850][ T8078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.707870][ T8078] RSP: 002b:00007fa998736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.707895][ T8078] RAX: ffffffffffffffda RBX: 00007fa99a755fa0 RCX: 00007fa99a4dce59 [ 235.707912][ T8078] RDX: 00002000000000c0 RSI: 00000000c040aed5 RDI: 0000000000000005 [ 235.707926][ T8078] RBP: 00007fa998736090 R08: 0000000000000000 R09: 0000000000000000 [ 235.707940][ T8078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.707953][ T8078] R13: 00007fa99a756038 R14: 00007fa99a755fa0 R15: 00007ffff1c5b708 [ 235.707990][ T8078] [ 235.776509][ T5713] usb 5-1: device descriptor read/64, error -71 [ 235.805945][ T32] usb usb7-port1: unable to enumerate USB device [ 236.059366][ T5713] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 236.189791][ T5713] usb 5-1: device descriptor read/64, error -71 [ 236.314600][ T5713] usb usb5-port1: attempt power cycle [ 236.689554][ T5713] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 236.712546][ T5713] usb 5-1: device descriptor read/8, error -71 [ 236.951327][ T5713] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 236.970161][ T5713] usb 5-1: device descriptor read/8, error -71 [ 237.079581][ T8131] FAULT_INJECTION: forcing a failure. [ 237.079581][ T8131] name failslab, interval 1, probability 0, space 0, times 0 [ 237.079619][ T8131] CPU: 1 UID: 0 PID: 8131 Comm: syz.1.791 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 237.079641][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.079650][ T8131] Call Trace: [ 237.079655][ T8131] [ 237.079661][ T8131] dump_stack_lvl+0xe8/0x150 [ 237.079681][ T8131] should_fail_ex+0x46b/0x600 [ 237.079705][ T8131] should_failslab+0xa8/0x100 [ 237.079719][ T8131] __kmalloc_noprof+0xdf/0x7b0 [ 237.079737][ T8131] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 237.079756][ T8131] ? sock_kmalloc+0xd6/0x160 [ 237.079766][ T8131] ? lockdep_hardirqs_on+0x7a/0x110 [ 237.079786][ T8131] sock_kmalloc+0xd6/0x160 [ 237.079800][ T8131] ip6_mc_msfilter+0x6fa/0xeb0 [ 237.079822][ T8131] ipv6_set_mcast_msfilter+0x25e/0x310 [ 237.079843][ T8131] do_ipv6_setsockopt+0x12ee/0x3150 [ 237.079862][ T8131] ? get_pid_task+0x20/0x1f0 [ 237.079880][ T8131] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 237.079900][ T8131] ? get_pid_task+0x20/0x1f0 [ 237.079912][ T8131] ? get_pid_task+0x20/0x1f0 [ 237.079930][ T8131] ? __lock_acquire+0x6b5/0x2d10 [ 237.079955][ T8131] ? aa_sk_perm+0x703/0x950 [ 237.079970][ T8131] ? __fget_files+0x2a/0x420 [ 237.079990][ T8131] ? __pfx_aa_sk_perm+0x10/0x10 [ 237.080005][ T8131] ? aa_sock_opt_perm+0x131/0x1f0 [ 237.080022][ T8131] ipv6_setsockopt+0x59/0x170 [ 237.080040][ T8131] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 237.080057][ T8131] do_sock_setsockopt+0x17c/0x1b0 [ 237.080078][ T8131] __x64_sys_setsockopt+0x143/0x1b0 [ 237.080097][ T8131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.080111][ T8131] do_syscall_64+0x15f/0xf80 [ 237.080133][ T8131] ? clear_bhb_loop+0x40/0x90 [ 237.080149][ T8131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.080161][ T8131] RIP: 0033:0x7fdc0095ce59 [ 237.080174][ T8131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.080185][ T8131] RSP: 002b:00007fdbfebae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.080200][ T8131] RAX: ffffffffffffffda RBX: 00007fdc00bd5fa0 RCX: 00007fdc0095ce59 [ 237.080210][ T8131] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000003 [ 237.080223][ T8131] RBP: 00007fdbfebae090 R08: 0000000000000110 R09: 0000000000000000 [ 237.080231][ T8131] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 237.080239][ T8131] R13: 00007fdc00bd6038 R14: 00007fdc00bd5fa0 R15: 00007ffcd9f39468 [ 237.080258][ T8131] [ 237.109398][ T5713] usb usb5-port1: unable to enumerate USB device [ 238.626511][ T8177] netlink: 156 bytes leftover after parsing attributes in process `syz.4.802'. [ 239.017476][ T8185] FAT-fs (nullb0): bogus number of reserved sectors [ 239.017505][ T8185] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 239.202274][ T8188] pim6reg: entered allmulticast mode [ 239.234207][ T8179] input: syz1 as /devices/virtual/input/input9 [ 239.365100][ T8191] pim6reg: left allmulticast mode [ 239.539357][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 239.677565][ T9] usb 5-1: device descriptor read/64, error -71 [ 239.909872][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 240.039384][ T9] usb 5-1: device descriptor read/64, error -71 [ 240.108070][ T8215] FAULT_INJECTION: forcing a failure. [ 240.108070][ T8215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.108096][ T8215] CPU: 0 UID: 0 PID: 8215 Comm: syz.1.819 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 240.108112][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.108120][ T8215] Call Trace: [ 240.108125][ T8215] [ 240.108131][ T8215] dump_stack_lvl+0xe8/0x150 [ 240.108153][ T8215] should_fail_ex+0x46b/0x600 [ 240.108188][ T8215] _copy_to_user+0x31/0xb0 [ 240.108206][ T8215] simple_read_from_buffer+0xe1/0x170 [ 240.108227][ T8215] proc_fail_nth_read+0x1be/0x230 [ 240.108247][ T8215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.108267][ T8215] ? rw_verify_area+0x2ac/0x4e0 [ 240.108286][ T8215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.108311][ T8215] vfs_read+0x212/0xa80 [ 240.108335][ T8215] ? __pfx_vfs_read+0x10/0x10 [ 240.108355][ T8215] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 240.108374][ T8215] ? lockdep_hardirqs_on+0x7a/0x110 [ 240.108393][ T8215] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 240.108411][ T8215] ? mutex_lock_nested+0x152/0x1d0 [ 240.108424][ T8215] ? fdget_pos+0x252/0x320 [ 240.108447][ T8215] ksys_read+0x156/0x270 [ 240.108460][ T8215] ? __pfx_ksys_read+0x10/0x10 [ 240.108476][ T8215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.108490][ T8215] do_syscall_64+0x15f/0xf80 [ 240.108509][ T8215] ? clear_bhb_loop+0x40/0x90 [ 240.108524][ T8215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.108537][ T8215] RIP: 0033:0x7fdc0091d68e [ 240.108549][ T8215] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 240.108561][ T8215] RSP: 002b:00007fdbfebadfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.108576][ T8215] RAX: ffffffffffffffda RBX: 00007fdbfebae6c0 RCX: 00007fdc0091d68e [ 240.108586][ T8215] RDX: 000000000000000f RSI: 00007fdbfebae0a0 RDI: 0000000000000005 [ 240.108593][ T8215] RBP: 00007fdbfebae090 R08: 0000000000000000 R09: 0000000000000000 [ 240.108601][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.108609][ T8215] R13: 00007fdc00bd6038 R14: 00007fdc00bd5fa0 R15: 00007ffcd9f39468 [ 240.108627][ T8215] [ 240.151625][ T9] usb usb5-port1: attempt power cycle [ 240.363591][ T8222] FAULT_INJECTION: forcing a failure. [ 240.363591][ T8222] name failslab, interval 1, probability 0, space 0, times 0 [ 240.363631][ T8222] CPU: 1 UID: 0 PID: 8222 Comm: syz.1.822 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 240.363657][ T8222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.363671][ T8222] Call Trace: [ 240.363680][ T8222] [ 240.363689][ T8222] dump_stack_lvl+0xe8/0x150 [ 240.363722][ T8222] should_fail_ex+0x46b/0x600 [ 240.363760][ T8222] should_failslab+0xa8/0x100 [ 240.363786][ T8222] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 240.363820][ T8222] ? __alloc_skb+0x1d0/0x7d0 [ 240.363846][ T8222] ? lockdep_hardirqs_on+0x7a/0x110 [ 240.363885][ T8222] __alloc_skb+0x1d0/0x7d0 [ 240.363918][ T8222] netlink_sendmsg+0x5d4/0xb40 [ 240.363960][ T8222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.363996][ T8222] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 240.364031][ T8222] ? aa_sock_msg_perm+0x122/0x200 [ 240.364057][ T8222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.364087][ T8222] sock_sendmsg_nosec+0x112/0x150 [ 240.364115][ T8222] ____sys_sendmsg+0x55c/0x870 [ 240.364151][ T8222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.364193][ T8222] ? import_iovec+0x73/0xa0 [ 240.364223][ T8222] ___sys_sendmsg+0x2a5/0x360 [ 240.364254][ T8222] ? __lock_acquire+0x6b5/0x2d10 [ 240.364280][ T8222] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.364359][ T8222] ? __fget_files+0x2a/0x420 [ 240.364388][ T8222] ? __fget_files+0x3a6/0x420 [ 240.364427][ T8222] __x64_sys_sendmsg+0x1c3/0x2a0 [ 240.364460][ T8222] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.364503][ T8222] ? __pfx_ksys_write+0x10/0x10 [ 240.364533][ T8222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.364558][ T8222] do_syscall_64+0x15f/0xf80 [ 240.364587][ T8222] ? trace_irq_disable+0x3b/0x140 [ 240.364620][ T8222] ? clear_bhb_loop+0x40/0x90 [ 240.364647][ T8222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.364668][ T8222] RIP: 0033:0x7fdc0095ce59 [ 240.364689][ T8222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.364708][ T8222] RSP: 002b:00007fdbfebae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.364732][ T8222] RAX: ffffffffffffffda RBX: 00007fdc00bd5fa0 RCX: 00007fdc0095ce59 [ 240.364748][ T8222] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000003 [ 240.364763][ T8222] RBP: 00007fdbfebae090 R08: 0000000000000000 R09: 0000000000000000 [ 240.364776][ T8222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.364789][ T8222] R13: 00007fdc00bd6038 R14: 00007fdc00bd5fa0 R15: 00007ffcd9f39468 [ 240.364822][ T8222] [ 240.509299][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 240.531430][ T9] usb 5-1: device descriptor read/8, error -71 [ 240.781863][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 240.815449][ T9] usb 5-1: device descriptor read/8, error -71 [ 240.922870][ T9] usb usb5-port1: unable to enumerate USB device [ 241.108171][ T8236] FAULT_INJECTION: forcing a failure. [ 241.108171][ T8236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.108212][ T8236] CPU: 1 UID: 0 PID: 8236 Comm: syz.1.829 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 241.108237][ T8236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.108250][ T8236] Call Trace: [ 241.108259][ T8236] [ 241.108269][ T8236] dump_stack_lvl+0xe8/0x150 [ 241.108302][ T8236] should_fail_ex+0x46b/0x600 [ 241.108352][ T8236] _copy_from_user+0x2d/0xb0 [ 241.108381][ T8236] ___sys_sendmsg+0x1c6/0x360 [ 241.108414][ T8236] ? __lock_acquire+0x6b5/0x2d10 [ 241.108444][ T8236] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.108515][ T8236] ? __fget_files+0x2a/0x420 [ 241.108543][ T8236] ? __fget_files+0x3a6/0x420 [ 241.108584][ T8236] __x64_sys_sendmsg+0x1c3/0x2a0 [ 241.108621][ T8236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.108663][ T8236] ? __pfx_ksys_write+0x10/0x10 [ 241.108695][ T8236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.108719][ T8236] do_syscall_64+0x15f/0xf80 [ 241.108750][ T8236] ? trace_irq_disable+0x3b/0x140 [ 241.108784][ T8236] ? clear_bhb_loop+0x40/0x90 [ 241.108812][ T8236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.108834][ T8236] RIP: 0033:0x7fdc0095ce59 [ 241.108854][ T8236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.108874][ T8236] RSP: 002b:00007fdbfebae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.108898][ T8236] RAX: ffffffffffffffda RBX: 00007fdc00bd5fa0 RCX: 00007fdc0095ce59 [ 241.108915][ T8236] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 241.108930][ T8236] RBP: 00007fdbfebae090 R08: 0000000000000000 R09: 0000000000000000 [ 241.108944][ T8236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.108958][ T8236] R13: 00007fdc00bd6038 R14: 00007fdc00bd5fa0 R15: 00007ffcd9f39468 [ 241.108997][ T8236] [ 241.639439][ T5713] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 241.821480][ T5713] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 241.824093][ T5713] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 241.824148][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.824161][ T5713] usb 2-1: Product: syz [ 241.824171][ T5713] usb 2-1: Manufacturer: syz [ 241.824180][ T5713] usb 2-1: SerialNumber: syz [ 241.999746][ T61] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 242.075371][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.076012][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.165829][ T8258] FAULT_INJECTION: forcing a failure. [ 242.165829][ T8258] name failslab, interval 1, probability 0, space 0, times 0 [ 242.165868][ T8258] CPU: 1 UID: 0 PID: 8258 Comm: syz.4.834 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 242.165894][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.165908][ T8258] Call Trace: [ 242.165916][ T8258] [ 242.165927][ T8258] dump_stack_lvl+0xe8/0x150 [ 242.165961][ T8258] should_fail_ex+0x46b/0x600 [ 242.166002][ T8258] should_failslab+0xa8/0x100 [ 242.166026][ T8258] kmem_cache_alloc_noprof+0x87/0x680 [ 242.166070][ T8258] ? rcu_is_watching+0x15/0xb0 [ 242.166096][ T8258] ? security_file_alloc+0x34/0x310 [ 242.166135][ T8258] security_file_alloc+0x34/0x310 [ 242.166170][ T8258] init_file+0x96/0x2d0 [ 242.166200][ T8258] alloc_empty_file+0x74/0x1d0 [ 242.166228][ T8258] path_openat+0x11b/0x3960 [ 242.166259][ T8258] ? try_to_take_rt_mutex+0x840/0xb00 [ 242.166286][ T8258] ? arch_stack_walk+0xfb/0x150 [ 242.166327][ T8258] ? __lock_acquire+0x6b5/0x2d10 [ 242.166356][ T8258] ? __pfx_path_openat+0x10/0x10 [ 242.166380][ T8258] ? kasan_save_track+0x4f/0x80 [ 242.166406][ T8258] ? kasan_save_track+0x3e/0x80 [ 242.166434][ T8258] ? __kasan_slab_alloc+0x6c/0x80 [ 242.166475][ T8258] ? do_raw_spin_lock+0x12b/0x2f0 [ 242.166529][ T8258] do_file_open+0x23e/0x4a0 [ 242.166550][ T8258] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 242.166584][ T8258] ? __pfx_do_file_open+0x10/0x10 [ 242.166616][ T8258] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 242.166663][ T8258] ? alloc_fd+0x679/0x6f0 [ 242.166703][ T8258] do_sys_openat2+0x115/0x200 [ 242.166736][ T8258] ? __pfx_do_sys_openat2+0x10/0x10 [ 242.166766][ T8258] ? ksys_write+0x248/0x270 [ 242.166788][ T8258] ? __pfx_ksys_write+0x10/0x10 [ 242.166814][ T8258] __x64_sys_openat+0x138/0x170 [ 242.166847][ T8258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.166871][ T8258] do_syscall_64+0x15f/0xf80 [ 242.166902][ T8258] ? trace_irq_disable+0x3b/0x140 [ 242.166937][ T8258] ? clear_bhb_loop+0x40/0x90 [ 242.166964][ T8258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.166986][ T8258] RIP: 0033:0x7f0ff0cfd68e [ 242.167008][ T8258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 242.167028][ T8258] RSP: 002b:00007f0feef6cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 242.167061][ T8258] RAX: ffffffffffffffda RBX: 00007f0feef6d6c0 RCX: 00007f0ff0cfd68e [ 242.167078][ T8258] RDX: 0000000000044001 RSI: 00007f0feef6cc00 RDI: ffffffffffffff9c [ 242.167092][ T8258] RBP: 00007f0feef6cc00 R08: 0000000000000000 R09: 0000000000000000 [ 242.167106][ T8258] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 242.167120][ T8258] R13: 00007f0ff0fb6128 R14: 00007f0ff0fb6090 R15: 00007ffe50e95028 [ 242.167154][ T8258] [ 242.636526][ T5713] usb 2-1: USB disconnect, device number 11 [ 242.764334][ T8264] FAULT_INJECTION: forcing a failure. [ 242.764334][ T8264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.764385][ T8264] CPU: 1 UID: 0 PID: 8264 Comm: syz.1.837 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 242.764410][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.764506][ T8264] Call Trace: [ 242.764515][ T8264] [ 242.764523][ T8264] dump_stack_lvl+0xe8/0x150 [ 242.764557][ T8264] should_fail_ex+0x46b/0x600 [ 242.764596][ T8264] _copy_to_user+0x31/0xb0 [ 242.764626][ T8264] simple_read_from_buffer+0xe1/0x170 [ 242.764662][ T8264] proc_fail_nth_read+0x1be/0x230 [ 242.764699][ T8264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.764734][ T8264] ? rw_verify_area+0x2ac/0x4e0 [ 242.764767][ T8264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.764797][ T8264] vfs_read+0x212/0xa80 [ 242.764838][ T8264] ? __pfx_vfs_read+0x10/0x10 [ 242.764875][ T8264] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 242.764907][ T8264] ? lockdep_hardirqs_on+0x7a/0x110 [ 242.764938][ T8264] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 242.764968][ T8264] ? mutex_lock_nested+0x152/0x1d0 [ 242.764991][ T8264] ? fdget_pos+0x252/0x320 [ 242.765028][ T8264] ksys_read+0x156/0x270 [ 242.765050][ T8264] ? __pfx_ksys_read+0x10/0x10 [ 242.765078][ T8264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.765102][ T8264] do_syscall_64+0x15f/0xf80 [ 242.765131][ T8264] ? trace_irq_disable+0x3b/0x140 [ 242.765163][ T8264] ? clear_bhb_loop+0x40/0x90 [ 242.765187][ T8264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.765206][ T8264] RIP: 0033:0x7fdc0091d68e [ 242.765227][ T8264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 242.765243][ T8264] RSP: 002b:00007fdbfebadfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.765265][ T8264] RAX: ffffffffffffffda RBX: 00007fdbfebae6c0 RCX: 00007fdc0091d68e [ 242.765280][ T8264] RDX: 000000000000000f RSI: 00007fdbfebae0a0 RDI: 0000000000000005 [ 242.765292][ T8264] RBP: 00007fdbfebae090 R08: 0000000000000000 R09: 0000000000000000 [ 242.765331][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.765343][ T8264] R13: 00007fdc00bd6038 R14: 00007fdc00bd5fa0 R15: 00007ffcd9f39468 [ 242.765373][ T8264] [ 242.834569][ T32] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 242.900053][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.839'. [ 243.004675][ T8037] udevd[8037]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.119353][ T32] usb 5-1: device descriptor read/64, error -71 [ 243.169426][ T7881] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 243.323571][ T7881] usb 7-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 243.323605][ T7881] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.326514][ T7881] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 243.326547][ T7881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 243.326570][ T7881] usb 7-1: SerialNumber: syz [ 243.376027][ T32] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 243.509749][ T32] usb 5-1: device descriptor read/64, error -71 [ 243.591798][ T7881] usb 7-1: 0:2 : does not exist [ 243.591880][ T7881] usb 7-1: unit 5: unexpected type 0x0a [ 243.601295][ T8286] FAULT_INJECTION: forcing a failure. [ 243.601295][ T8286] name failslab, interval 1, probability 0, space 0, times 0 [ 243.601339][ T8286] CPU: 0 UID: 0 PID: 8286 Comm: syz.1.847 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 243.601363][ T8286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.601375][ T8286] Call Trace: [ 243.601382][ T8286] [ 243.601390][ T8286] dump_stack_lvl+0xe8/0x150 [ 243.601421][ T8286] should_fail_ex+0x46b/0x600 [ 243.601459][ T8286] should_failslab+0xa8/0x100 [ 243.601481][ T8286] __kmalloc_noprof+0xdf/0x7b0 [ 243.601511][ T8286] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 243.601544][ T8286] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 243.601577][ T8286] genl_family_rcv_msg_doit+0xd9/0x330 [ 243.601600][ T8286] ? __asan_memcpy+0x40/0x70 [ 243.601629][ T8286] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 243.601661][ T8286] ? apparmor_capable+0x126/0x170 [ 243.601691][ T8286] ? bpf_lsm_capable+0x9/0x20 [ 243.601715][ T8286] ? security_capable+0x7e/0x2c0 [ 243.601744][ T8286] genl_rcv_msg+0x61c/0x7a0 [ 243.601773][ T8286] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.601795][ T8286] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 243.601820][ T8286] ? __pfx_nl802154_set_short_addr+0x10/0x10 [ 243.601846][ T8286] ? __pfx_nl802154_post_doit+0x10/0x10 [ 243.601885][ T8286] netlink_rcv_skb+0x232/0x4b0 [ 243.601915][ T8286] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.601940][ T8286] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 243.601981][ T8286] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.602009][ T8286] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.602042][ T8286] genl_rcv+0x28/0x40 [ 243.602068][ T8286] netlink_unicast+0x780/0x920 [ 243.602107][ T8286] netlink_sendmsg+0x813/0xb40 [ 243.602145][ T8286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.602176][ T8286] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 243.602207][ T8286] ? aa_sock_msg_perm+0x122/0x200 [ 243.602232][ T8286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.602260][ T8286] sock_sendmsg_nosec+0x112/0x150 [ 243.602287][ T8286] ____sys_sendmsg+0x55c/0x870 [ 243.602329][ T8286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.602367][ T8286] ? import_iovec+0x73/0xa0 [ 243.602395][ T8286] ___sys_sendmsg+0x2a5/0x360 [ 243.602422][ T8286] ? __lock_acquire+0x6b5/0x2d10 [ 243.602448][ T8286] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.602513][ T8286] ? __fget_files+0x2a/0x420 [ 243.602538][ T8286] ? __fget_files+0x3a6/0x420 [ 243.602575][ T8286] __x64_sys_sendmsg+0x1c3/0x2a0 [ 243.602607][ T8286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.602644][ T8286] ? __pfx_ksys_write+0x10/0x10 [ 243.602674][ T8286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.602697][ T8286] do_syscall_64+0x15f/0xf80 [ 243.602724][ T8286] ? trace_irq_disable+0x3b/0x140 [ 243.602754][ T8286] ? clear_bhb_loop+0x40/0x90 [ 243.602779][ T8286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.602798][ T8286] RIP: 0033:0x7fdc0095ce59 [ 243.602818][ T8286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.602835][ T8286] RSP: 002b:00007fdbfebae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.602857][ T8286] RAX: ffffffffffffffda RBX: 00007fdc00bd5fa0 RCX: 00007fdc0095ce59 [ 243.602872][ T8286] RDX: 0000000020008800 RSI: 0000200000000540 RDI: 0000000000000005 [ 243.602901][ T8286] RBP: 00007fdbfebae090 R08: 0000000000000000 R09: 0000000000000000 [ 243.602914][ T8286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.602926][ T8286] R13: 00007fdc00bd6038 R14: 00007fdc00bd5fa0 R15: 00007ffcd9f39468 [ 243.602958][ T8286] [ 243.619652][ T32] usb usb5-port1: attempt power cycle [ 243.849747][ T7881] usb 7-1: USB disconnect, device number 7 [ 243.986505][ T8037] udevd[8037]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.105549][ T8293] netlink: 'syz.1.849': attribute type 7 has an invalid length. [ 244.280907][ T32] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 244.312692][ T32] usb 5-1: device descriptor read/8, error -71 [ 244.594059][ T32] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 244.595191][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.653620][ T32] usb 5-1: device descriptor read/8, error -71 [ 244.676548][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.678323][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.697413][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.698370][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.773771][ T32] usb usb5-port1: unable to enumerate USB device [ 245.571722][ T8319] FAULT_INJECTION: forcing a failure. [ 245.571722][ T8319] name failslab, interval 1, probability 0, space 0, times 0 [ 245.571763][ T8319] CPU: 1 UID: 0 PID: 8319 Comm: syz.4.856 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 245.571789][ T8319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.571802][ T8319] Call Trace: [ 245.571811][ T8319] [ 245.571821][ T8319] dump_stack_lvl+0xe8/0x150 [ 245.571856][ T8319] should_fail_ex+0x46b/0x600 [ 245.571897][ T8319] should_failslab+0xa8/0x100 [ 245.571922][ T8319] __kmalloc_cache_noprof+0x84/0x690 [ 245.571945][ T8319] ? drm_atomic_commit_alloc+0xa9/0x100 [ 245.571974][ T8319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.572002][ T8319] drm_atomic_commit_alloc+0xa9/0x100 [ 245.572033][ T8319] drm_mode_atomic_ioctl+0x4ae/0xdd0 [ 245.572068][ T8319] ? do_raw_spin_lock+0x12b/0x2f0 [ 245.572115][ T8319] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 245.572164][ T8319] ? rt_spin_unlock+0x14f/0x200 [ 245.572192][ T8319] ? rt_spin_unlock+0x160/0x200 [ 245.572219][ T8319] ? drm_is_current_master+0x1a2/0x210 [ 245.572242][ T8319] drm_ioctl_kernel+0x2e2/0x3b0 [ 245.572274][ T8319] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 245.572315][ T8319] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 245.572352][ T8319] drm_ioctl+0x6c0/0xb80 [ 245.572383][ T8319] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 245.572420][ T8319] ? __pfx_drm_ioctl+0x10/0x10 [ 245.572460][ T8319] ? __fget_files+0x2a/0x420 [ 245.572491][ T8319] ? bpf_lsm_file_ioctl+0x9/0x20 [ 245.572517][ T8319] ? __pfx_drm_ioctl+0x10/0x10 [ 245.572544][ T8319] __se_sys_ioctl+0xff/0x170 [ 245.572572][ T8319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.572597][ T8319] do_syscall_64+0x15f/0xf80 [ 245.572629][ T8319] ? trace_irq_disable+0x3b/0x140 [ 245.572664][ T8319] ? clear_bhb_loop+0x40/0x90 [ 245.572692][ T8319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.572714][ T8319] RIP: 0033:0x7f0ff0d3ce59 [ 245.572736][ T8319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.572758][ T8319] RSP: 002b:00007f0feef8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.572782][ T8319] RAX: ffffffffffffffda RBX: 00007f0ff0fb5fa0 RCX: 00007f0ff0d3ce59 [ 245.572800][ T8319] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000f [ 245.572815][ T8319] RBP: 00007f0feef8e090 R08: 0000000000000000 R09: 0000000000000000 [ 245.572828][ T8319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.572842][ T8319] R13: 00007f0ff0fb6038 R14: 00007f0ff0fb5fa0 R15: 00007ffe50e95028 [ 245.572877][ T8319] [ 245.940619][ T8323] FAULT_INJECTION: forcing a failure. [ 245.940619][ T8323] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 245.940660][ T8323] CPU: 0 UID: 0 PID: 8323 Comm: syz.4.858 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 245.940684][ T8323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.940697][ T8323] Call Trace: [ 245.940705][ T8323] [ 245.940715][ T8323] dump_stack_lvl+0xe8/0x150 [ 245.940738][ T8323] should_fail_ex+0x46b/0x600 [ 245.940762][ T8323] prepare_alloc_pages+0x22a/0x6b0 [ 245.940786][ T8323] __alloc_frozen_pages_noprof+0x12f/0x380 [ 245.940803][ T8323] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 245.940820][ T8323] ? __pfx_policy_nodemask+0x10/0x10 [ 245.940834][ T8323] ? __lock_acquire+0x6b5/0x2d10 [ 245.940852][ T8323] alloc_pages_mpol+0xd1/0x380 [ 245.940868][ T8323] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 245.940884][ T8323] vma_alloc_folio_noprof+0xe1/0x1e0 [ 245.940899][ T8323] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 245.940914][ T8323] ? __pte_offset_map+0x29/0x200 [ 245.940936][ T8323] do_pte_missing+0x822/0x2940 [ 245.940955][ T8323] ? handle_mm_fault+0xed/0x14d0 [ 245.940977][ T8323] handle_mm_fault+0xdc4/0x14d0 [ 245.940999][ T8323] ? handle_mm_fault+0xed/0x14d0 [ 245.941020][ T8323] ? __pfx_handle_mm_fault+0x10/0x10 [ 245.941040][ T8323] ? follow_page_pte+0xbe2/0xe60 [ 245.941072][ T8323] ? __pfx_follow_page_pte+0x10/0x10 [ 245.941097][ T8323] __get_user_pages+0x16d4/0x2620 [ 245.941122][ T8323] ? __gup_longterm_locked+0xc4e/0x1630 [ 245.941152][ T8323] __gup_longterm_locked+0xdcf/0x1630 [ 245.941173][ T8323] ? lock_acquire+0x106/0x350 [ 245.941189][ T8323] ? sanity_check_pinned_pages+0x7a8/0x870 [ 245.941212][ T8323] gup_fast_fallback+0x1cfd/0x2040 [ 245.941250][ T8323] ? __pfx_gup_fast_fallback+0x10/0x10 [ 245.941270][ T8323] ? is_valid_gup_args+0x11f/0x200 [ 245.941289][ T8323] ? pin_user_pages_fast+0x4d/0xb0 [ 245.941312][ T8323] rds_info_getsockopt+0x20e/0x400 [ 245.941332][ T8323] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 245.941349][ T8323] ? __might_fault+0xaf/0x130 [ 245.941363][ T8323] ? rds_getsockopt+0x2bf/0x500 [ 245.941383][ T8323] ? __pfx_rds_getsockopt+0x10/0x10 [ 245.941403][ T8323] do_sock_getsockopt+0x51d/0x7e0 [ 245.941425][ T8323] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 245.941453][ T8323] ? __fget_files+0x3a6/0x420 [ 245.941470][ T8323] ? __fget_files+0x2a/0x420 [ 245.941491][ T8323] __x64_sys_getsockopt+0x1aa/0x250 [ 245.941513][ T8323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.941527][ T8323] do_syscall_64+0x15f/0xf80 [ 245.941544][ T8323] ? trace_irq_disable+0x3b/0x140 [ 245.941564][ T8323] ? clear_bhb_loop+0x40/0x90 [ 245.941580][ T8323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.941592][ T8323] RIP: 0033:0x7f0ff0d3ce59 [ 245.941605][ T8323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.941616][ T8323] RSP: 002b:00007f0feef8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 245.941631][ T8323] RAX: ffffffffffffffda RBX: 00007f0ff0fb5fa0 RCX: 00007f0ff0d3ce59 [ 245.941641][ T8323] RDX: 000000000000271b RSI: 0000200000000114 RDI: 0000000000000003 [ 245.941649][ T8323] RBP: 00007f0feef8e090 R08: 0000200000000040 R09: 0000000000000000 [ 245.941657][ T8323] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 245.941665][ T8323] R13: 00007f0ff0fb6038 R14: 00007f0ff0fb5fa0 R15: 00007ffe50e95028 [ 245.941684][ T8323] [ 245.961992][ T7881] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 246.165708][ T7881] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.165738][ T7881] usb 6-1: config 0 has no interface number 0 [ 246.165798][ T7881] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.165824][ T7881] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.165846][ T7881] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.165886][ T7881] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 246.165918][ T7881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.235450][ T7881] usb 6-1: config 0 descriptor?? [ 246.889531][ T61] Bluetooth: hci0: command tx timeout [ 246.940029][ T7881] uclogic 0003:28BD:0042.0006: failed retrieving string descriptor #100: -71 [ 246.940102][ T7881] uclogic 0003:28BD:0042.0006: failed retrieving pen parameters: -71 [ 246.940121][ T7881] uclogic 0003:28BD:0042.0006: pen probing failed: -71 [ 246.940139][ T7881] uclogic 0003:28BD:0042.0006: failed probing parameters: -71 [ 246.940259][ T7881] uclogic 0003:28BD:0042.0006: probe with driver uclogic failed with error -71 [ 246.999920][ T7881] usb 6-1: USB disconnect, device number 2 [ 247.356651][ T2111] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.746392][ T8356] netlink: 60 bytes leftover after parsing attributes in process `syz.6.864'. [ 247.747634][ T8356] netlink: 60 bytes leftover after parsing attributes in process `syz.6.864'. [ 248.510465][ T2111] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.814337][ T8370] netlink: 248 bytes leftover after parsing attributes in process `syz.6.869'. [ 248.963192][ T61] Bluetooth: hci0: command tx timeout [ 249.687626][ T2111] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.730563][ T8368] syz.5.868 (8368): drop_caches: 2 [ 250.706338][ T8403] FAULT_INJECTION: forcing a failure. [ 250.706338][ T8403] name failslab, interval 1, probability 0, space 0, times 0 [ 250.706377][ T8403] CPU: 0 UID: 0 PID: 8403 Comm: syz.5.873 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 250.706410][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.706423][ T8403] Call Trace: [ 250.706433][ T8403] [ 250.706442][ T8403] dump_stack_lvl+0xe8/0x150 [ 250.706476][ T8403] should_fail_ex+0x46b/0x600 [ 250.706515][ T8403] should_failslab+0xa8/0x100 [ 250.706540][ T8403] __kmalloc_noprof+0xdf/0x7b0 [ 250.706575][ T8403] ? tomoyo_init_log+0x1aaf/0x1fb0 [ 250.706610][ T8403] tomoyo_init_log+0x1aaf/0x1fb0 [ 250.706660][ T8403] ? __pfx_tomoyo_init_log+0x10/0x10 [ 250.706687][ T8403] ? tomoyo_profile+0x11/0x50 [ 250.706715][ T8403] ? tomoyo_domain_quota_is_ok+0x42b/0x570 [ 250.706756][ T8403] tomoyo_supervisor+0x353/0x1570 [ 250.706795][ T8403] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 250.706833][ T8403] ? trace_kmalloc+0x2a/0xf0 [ 250.706868][ T8403] ? __kmalloc_noprof+0x408/0x7b0 [ 250.706899][ T8403] ? tomoyo_encode2+0x27f/0x530 [ 250.706923][ T8403] ? tomoyo_check_unix_acl+0xcd/0x140 [ 250.706952][ T8403] ? tomoyo_check_acl+0x386/0x400 [ 250.706986][ T8403] ? __pfx_tomoyo_check_unix_acl+0x10/0x10 [ 250.707019][ T8403] tomoyo_check_unix_address+0x549/0x7f0 [ 250.707065][ T8403] ? tomoyo_check_unix_address+0x167/0x7f0 [ 250.707094][ T8403] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 250.707137][ T8403] ? __might_fault+0xaf/0x130 [ 250.707165][ T8403] tomoyo_socket_connect_permission+0x1b1/0x290 [ 250.707203][ T8403] security_socket_connect+0xc0/0x280 [ 250.707236][ T8403] __sys_connect+0x24f/0x450 [ 250.707268][ T8403] ? __pfx___sys_connect+0x10/0x10 [ 250.707307][ T8403] ? __pfx_ksys_write+0x10/0x10 [ 250.707334][ T8403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.707358][ T8403] __x64_sys_connect+0x7a/0x90 [ 250.707389][ T8403] do_syscall_64+0x15f/0xf80 [ 250.707419][ T8403] ? trace_irq_disable+0x3b/0x140 [ 250.707453][ T8403] ? clear_bhb_loop+0x40/0x90 [ 250.707480][ T8403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.707501][ T8403] RIP: 0033:0x7fa99a4dce59 [ 250.707522][ T8403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.707541][ T8403] RSP: 002b:00007fa998736028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 250.707566][ T8403] RAX: ffffffffffffffda RBX: 00007fa99a755fa0 RCX: 00007fa99a4dce59 [ 250.707581][ T8403] RDX: 000000000000006e RSI: 0000200000004d00 RDI: 0000000000000003 [ 250.707594][ T8403] RBP: 00007fa998736090 R08: 0000000000000000 R09: 0000000000000000 [ 250.707606][ T8403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.707619][ T8403] R13: 00007fa99a756038 R14: 00007fa99a755fa0 R15: 00007ffff1c5b708 [ 250.707653][ T8403] [ 250.714581][ T2111] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.053297][ T61] Bluetooth: hci0: command tx timeout [ 251.317502][ T8411] FAULT_INJECTION: forcing a failure. [ 251.317502][ T8411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.317540][ T8411] CPU: 0 UID: 0 PID: 8411 Comm: syz.4.874 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 251.317568][ T8411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.317581][ T8411] Call Trace: [ 251.317589][ T8411] [ 251.317598][ T8411] dump_stack_lvl+0xe8/0x150 [ 251.317631][ T8411] should_fail_ex+0x46b/0x600 [ 251.317674][ T8411] _copy_to_user+0x31/0xb0 [ 251.317705][ T8411] simple_read_from_buffer+0xe1/0x170 [ 251.317743][ T8411] proc_fail_nth_read+0x1be/0x230 [ 251.317775][ T8411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.317807][ T8411] ? rw_verify_area+0x2ac/0x4e0 [ 251.317840][ T8411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.317870][ T8411] vfs_read+0x212/0xa80 [ 251.317912][ T8411] ? __pfx_vfs_read+0x10/0x10 [ 251.317947][ T8411] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 251.317982][ T8411] ? lockdep_hardirqs_on+0x7a/0x110 [ 251.318014][ T8411] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 251.318044][ T8411] ? mutex_lock_nested+0x152/0x1d0 [ 251.318068][ T8411] ? fdget_pos+0x252/0x320 [ 251.318109][ T8411] ksys_read+0x156/0x270 [ 251.318133][ T8411] ? __pfx_ksys_read+0x10/0x10 [ 251.318164][ T8411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.318188][ T8411] do_syscall_64+0x15f/0xf80 [ 251.318219][ T8411] ? trace_irq_disable+0x3b/0x140 [ 251.318254][ T8411] ? clear_bhb_loop+0x40/0x90 [ 251.318291][ T8411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.318314][ T8411] RIP: 0033:0x7f0ff0cfd68e [ 251.318336][ T8411] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.318356][ T8411] RSP: 002b:00007f0feef8dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.318380][ T8411] RAX: ffffffffffffffda RBX: 00007f0feef8e6c0 RCX: 00007f0ff0cfd68e [ 251.318396][ T8411] RDX: 000000000000000f RSI: 00007f0feef8e0a0 RDI: 0000000000000003 [ 251.318410][ T8411] RBP: 00007f0feef8e090 R08: 0000000000000000 R09: 0000000000000000 [ 251.318424][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.318438][ T8411] R13: 00007f0ff0fb6038 R14: 00007f0ff0fb5fa0 R15: 00007ffe50e95028 [ 251.318473][ T8411] [ 251.951865][ T7881] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 252.120726][ T7881] usb 7-1: Using ep0 maxpacket: 16 [ 252.123219][ T7881] usb 7-1: config 0 has an invalid interface number: 61 but max is 0 [ 252.123250][ T7881] usb 7-1: config 0 has no interface number 0 [ 252.123292][ T7881] usb 7-1: config 0 interface 61 has no altsetting 0 [ 252.126304][ T7881] usb 7-1: New USB device found, idVendor=093b, idProduct=0904, bcdDevice= 0.01 [ 252.126338][ T7881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.126362][ T7881] usb 7-1: Product: syz [ 252.126378][ T7881] usb 7-1: Manufacturer: syz [ 252.126395][ T7881] usb 7-1: SerialNumber: syz [ 252.237213][ T7881] usb 7-1: config 0 descriptor?? [ 252.522229][ T7881] usb 7-1: USB disconnect, device number 8 [ 252.956664][ T8443] FAULT_INJECTION: forcing a failure. [ 252.956664][ T8443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.956702][ T8443] CPU: 1 UID: 0 PID: 8443 Comm: syz.5.881 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.956726][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.956739][ T8443] Call Trace: [ 252.956747][ T8443] [ 252.956755][ T8443] dump_stack_lvl+0xe8/0x150 [ 252.956796][ T8443] should_fail_ex+0x46b/0x600 [ 252.956839][ T8443] _copy_from_iter+0x1d3/0x1670 [ 252.956870][ T8443] ? trace_kmem_cache_alloc+0x29/0xe0 [ 252.956900][ T8443] ? __alloc_skb+0x27d/0x7d0 [ 252.956928][ T8443] ? __pfx__copy_from_iter+0x10/0x10 [ 252.956950][ T8443] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 252.956979][ T8443] ? __alloc_skb+0x27d/0x7d0 [ 252.957011][ T8443] ? netlink_sendmsg+0x650/0xb40 [ 252.957054][ T8443] ? skb_put+0x11b/0x210 [ 252.957088][ T8443] netlink_sendmsg+0x6c0/0xb40 [ 252.957131][ T8443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.957168][ T8443] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 252.957204][ T8443] ? aa_sock_msg_perm+0x122/0x200 [ 252.957232][ T8443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.957265][ T8443] sock_sendmsg_nosec+0x112/0x150 [ 252.957294][ T8443] ____sys_sendmsg+0x55c/0x870 [ 252.957334][ T8443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.957377][ T8443] ? import_iovec+0x73/0xa0 [ 252.957408][ T8443] ___sys_sendmsg+0x2a5/0x360 [ 252.957440][ T8443] ? __lock_acquire+0x6b5/0x2d10 [ 252.957470][ T8443] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.957540][ T8443] ? __fget_files+0x2a/0x420 [ 252.957570][ T8443] ? __fget_files+0x3a6/0x420 [ 252.957611][ T8443] __x64_sys_sendmsg+0x1c3/0x2a0 [ 252.957647][ T8443] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.957691][ T8443] ? __pfx_ksys_write+0x10/0x10 [ 252.957722][ T8443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.957747][ T8443] do_syscall_64+0x15f/0xf80 [ 252.957779][ T8443] ? trace_irq_disable+0x3b/0x140 [ 252.957813][ T8443] ? clear_bhb_loop+0x40/0x90 [ 252.957841][ T8443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.957863][ T8443] RIP: 0033:0x7fa99a4dce59 [ 252.957885][ T8443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.957905][ T8443] RSP: 002b:00007fa998736028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.957931][ T8443] RAX: ffffffffffffffda RBX: 00007fa99a755fa0 RCX: 00007fa99a4dce59 [ 252.957947][ T8443] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 252.957962][ T8443] RBP: 00007fa998736090 R08: 0000000000000000 R09: 0000000000000000 [ 252.957976][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.957990][ T8443] R13: 00007fa99a756038 R14: 00007fa99a755fa0 R15: 00007ffff1c5b708 [ 252.958033][ T8443] [ 253.122218][ T5627] Bluetooth: hci0: command tx timeout [ 253.468140][ T8304] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.468541][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.468899][ T8304] bridge_slave_0: entered allmulticast mode [ 253.501809][ T8304] bridge_slave_0: entered promiscuous mode [ 253.649357][ T1889] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 253.783577][ T8304] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.787200][ T8304] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.787519][ T8304] bridge_slave_1: entered allmulticast mode [ 253.803586][ T8304] bridge_slave_1: entered promiscuous mode [ 253.823333][ T1889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.823370][ T1889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.823410][ T1889] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 253.823437][ T1889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.888777][ T1889] usb 6-1: config 0 descriptor?? [ 254.050105][ T2111] bridge_slave_1: left allmulticast mode [ 254.050145][ T2111] bridge_slave_1: left promiscuous mode [ 254.050499][ T2111] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.281579][ T2111] bridge_slave_0: left allmulticast mode [ 254.281619][ T2111] bridge_slave_0: left promiscuous mode [ 254.281924][ T2111] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.076459][ T8485] FAULT_INJECTION: forcing a failure. [ 256.076459][ T8485] name failslab, interval 1, probability 0, space 0, times 0 [ 256.076485][ T8485] CPU: 0 UID: 0 PID: 8485 Comm: syz.6.892 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 256.076501][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.076509][ T8485] Call Trace: [ 256.076514][ T8485] [ 256.076520][ T8485] dump_stack_lvl+0xe8/0x150 [ 256.076541][ T8485] should_fail_ex+0x46b/0x600 [ 256.076565][ T8485] should_failslab+0xa8/0x100 [ 256.076583][ T8485] __kmalloc_cache_noprof+0x84/0x690 [ 256.076596][ T8485] ? drm_atomic_commit_alloc+0xa9/0x100 [ 256.076612][ T8485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.076628][ T8485] drm_atomic_commit_alloc+0xa9/0x100 [ 256.076645][ T8485] drm_mode_atomic_ioctl+0x4ae/0xdd0 [ 256.076665][ T8485] ? do_raw_spin_lock+0x12b/0x2f0 [ 256.076691][ T8485] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 256.076729][ T8485] ? rt_spin_unlock+0x14f/0x200 [ 256.076757][ T8485] ? rt_spin_unlock+0x160/0x200 [ 256.076779][ T8485] ? drm_is_current_master+0x1a2/0x210 [ 256.076793][ T8485] drm_ioctl_kernel+0x2e2/0x3b0 [ 256.076812][ T8485] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 256.076832][ T8485] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 256.076854][ T8485] drm_ioctl+0x6c0/0xb80 [ 256.076873][ T8485] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 256.076895][ T8485] ? __pfx_drm_ioctl+0x10/0x10 [ 256.076919][ T8485] ? __fget_files+0x2a/0x420 [ 256.076938][ T8485] ? bpf_lsm_file_ioctl+0x9/0x20 [ 256.076954][ T8485] ? __pfx_drm_ioctl+0x10/0x10 [ 256.076970][ T8485] __se_sys_ioctl+0xff/0x170 [ 256.076983][ T8485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.076996][ T8485] do_syscall_64+0x15f/0xf80 [ 256.077017][ T8485] ? trace_irq_disable+0x3b/0x140 [ 256.077037][ T8485] ? clear_bhb_loop+0x40/0x90 [ 256.077052][ T8485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.077065][ T8485] RIP: 0033:0x7f0ea23bce59 [ 256.077077][ T8485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.077088][ T8485] RSP: 002b:00007f0ea060e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.077103][ T8485] RAX: ffffffffffffffda RBX: 00007f0ea2635fa0 RCX: 00007f0ea23bce59 [ 256.077112][ T8485] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 256.077121][ T8485] RBP: 00007f0ea060e090 R08: 0000000000000000 R09: 0000000000000000 [ 256.077129][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.077136][ T8485] R13: 00007f0ea2636038 R14: 00007f0ea2635fa0 R15: 00007ffc75c398b8 [ 256.077155][ T8485] [ 256.121097][ T2111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.169970][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.170085][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.363088][ T2111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.391795][ T2111] bond0 (unregistering): Released all slaves [ 256.457344][ T8462] syz_tun: entered allmulticast mode [ 256.524522][ T1889] usbhid 6-1:0.0: can't add hid device: -71 [ 256.524663][ T1889] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 256.549953][ T1889] usb 6-1: USB disconnect, device number 3 [ 256.651087][ T8304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.711209][ T8304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.169259][ T5713] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 257.367918][ T5713] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 257.367951][ T5713] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.367972][ T5713] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 257.367995][ T5713] usb 6-1: config 1 has no interface number 1 [ 257.368056][ T5713] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 257.390835][ T5713] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.390868][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.390888][ T5713] usb 6-1: Product: syz [ 257.390902][ T5713] usb 6-1: Manufacturer: syz [ 257.390917][ T5713] usb 6-1: SerialNumber: syz [ 257.746128][ T8499] tmpfs: Bad value for 'mpol' [ 257.787327][ T8490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.795958][ T8490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.817398][ T8304] team0: Port device team_slave_0 added [ 257.969322][ T5713] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 257.969389][ T5713] usb 6-1: MIDIStreaming interface descriptor not found [ 257.977704][ T8304] team0: Port device team_slave_1 added [ 258.758540][ T5713] usb 6-1: USB disconnect, device number 4 [ 259.087554][ T7850] udevd[7850]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.288652][ T8304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.288667][ T8304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.288685][ T8304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.393115][ T8304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.393135][ T8304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.393166][ T8304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.833500][ T2111] hsr_slave_0: left promiscuous mode [ 259.872095][ T2111] hsr_slave_1: left promiscuous mode [ 259.874778][ T2111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.874808][ T2111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.929548][ T2111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.929580][ T2111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.385779][ T2111] veth1_macvtap: left promiscuous mode [ 260.385894][ T2111] veth0_macvtap: left promiscuous mode [ 260.387928][ T2111] veth1_vlan: left promiscuous mode [ 260.388143][ T2111] veth0_vlan: left promiscuous mode [ 261.962668][ T8581] FAULT_INJECTION: forcing a failure. [ 261.962668][ T8581] name failslab, interval 1, probability 0, space 0, times 0 [ 261.962704][ T8581] CPU: 0 UID: 0 PID: 8581 Comm: syz.4.914 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 261.962727][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.962738][ T8581] Call Trace: [ 261.962745][ T8581] [ 261.962752][ T8581] dump_stack_lvl+0xe8/0x150 [ 261.962781][ T8581] should_fail_ex+0x46b/0x600 [ 261.962838][ T8581] should_failslab+0xa8/0x100 [ 261.962858][ T8581] kmem_cache_alloc_noprof+0x87/0x680 [ 261.962885][ T8581] ? rcu_is_watching+0x15/0xb0 [ 261.962904][ T8581] ? security_file_alloc+0x34/0x310 [ 261.962936][ T8581] security_file_alloc+0x34/0x310 [ 261.962965][ T8581] init_file+0x96/0x2d0 [ 261.962997][ T8581] alloc_empty_file+0x74/0x1d0 [ 261.963021][ T8581] path_openat+0x11b/0x3960 [ 261.963047][ T8581] ? try_to_take_rt_mutex+0x840/0xb00 [ 261.963069][ T8581] ? arch_stack_walk+0xfb/0x150 [ 261.963104][ T8581] ? __lock_acquire+0x6b5/0x2d10 [ 261.963130][ T8581] ? __pfx_path_openat+0x10/0x10 [ 261.963151][ T8581] ? kasan_save_track+0x4f/0x80 [ 261.963175][ T8581] ? kasan_save_track+0x3e/0x80 [ 261.963198][ T8581] ? __kasan_slab_alloc+0x6c/0x80 [ 261.963230][ T8581] ? do_raw_spin_lock+0x12b/0x2f0 [ 261.963263][ T8581] do_file_open+0x23e/0x4a0 [ 261.963279][ T8581] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 261.963307][ T8581] ? __pfx_do_file_open+0x10/0x10 [ 261.963331][ T8581] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 261.963370][ T8581] ? alloc_fd+0x679/0x6f0 [ 261.963402][ T8581] do_sys_openat2+0x115/0x200 [ 261.963429][ T8581] ? __pfx_do_sys_openat2+0x10/0x10 [ 261.963452][ T8581] ? ksys_write+0x248/0x270 [ 261.963471][ T8581] ? __pfx_ksys_write+0x10/0x10 [ 261.963491][ T8581] __x64_sys_openat+0x138/0x170 [ 261.963518][ T8581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.963538][ T8581] do_syscall_64+0x15f/0xf80 [ 261.963564][ T8581] ? trace_irq_disable+0x3b/0x140 [ 261.963592][ T8581] ? clear_bhb_loop+0x40/0x90 [ 261.963615][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.963633][ T8581] RIP: 0033:0x7f0ff0d3ce59 [ 261.963652][ T8581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.963668][ T8581] RSP: 002b:00007f0feef8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 261.963688][ T8581] RAX: ffffffffffffffda RBX: 00007f0ff0fb5fa0 RCX: 00007f0ff0d3ce59 [ 261.963702][ T8581] RDX: 0000000000007a44 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 261.963714][ T8581] RBP: 00007f0feef8e090 R08: 0000000000000000 R09: 0000000000000000 [ 261.963726][ T8581] R10: 0000000000001700 R11: 0000000000000246 R12: 0000000000000001 [ 261.963737][ T8581] R13: 00007f0ff0fb6038 R14: 00007f0ff0fb5fa0 R15: 00007ffe50e95028 [ 261.963767][ T8581] [ 262.265648][ T2111] team0 (unregistering): Port device team_slave_1 removed [ 262.412793][ T8583] FAULT_INJECTION: forcing a failure. [ 262.412793][ T8583] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 262.412840][ T8583] CPU: 0 UID: 0 PID: 8583 Comm: syz.4.915 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 262.412867][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.412880][ T8583] Call Trace: [ 262.412889][ T8583] [ 262.412899][ T8583] dump_stack_lvl+0xe8/0x150 [ 262.412934][ T8583] should_fail_ex+0x46b/0x600 [ 262.412977][ T8583] prepare_alloc_pages+0x22a/0x6b0 [ 262.413010][ T8583] __alloc_frozen_pages_noprof+0x12f/0x380 [ 262.413041][ T8583] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 262.413072][ T8583] ? __pfx_policy_nodemask+0x10/0x10 [ 262.413098][ T8583] ? __lock_acquire+0x6b5/0x2d10 [ 262.413130][ T8583] alloc_pages_mpol+0xd1/0x380 [ 262.413160][ T8583] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 262.413189][ T8583] vma_alloc_folio_noprof+0xe1/0x1e0 [ 262.413217][ T8583] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 262.413244][ T8583] ? __pte_offset_map+0x29/0x200 [ 262.413299][ T8583] do_pte_missing+0x822/0x2940 [ 262.413334][ T8583] ? handle_mm_fault+0xed/0x14d0 [ 262.413373][ T8583] handle_mm_fault+0xdc4/0x14d0 [ 262.413413][ T8583] ? handle_mm_fault+0xed/0x14d0 [ 262.413453][ T8583] ? __pfx_handle_mm_fault+0x10/0x10 [ 262.413504][ T8583] ? __lock_acquire+0x6b5/0x2d10 [ 262.413534][ T8583] ? lock_mm_and_find_vma+0xa7/0x340 [ 262.413564][ T8583] do_user_addr_fault+0x75b/0x1340 [ 262.413611][ T8583] exc_page_fault+0x6a/0xc0 [ 262.413645][ T8583] asm_exc_page_fault+0x26/0x30 [ 262.413668][ T8583] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 262.413696][ T8583] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 262.413716][ T8583] RSP: 0018:ffffc900068179f8 EFLAGS: 00050202 [ 262.413737][ T8583] RAX: ffffffff84b45201 RBX: ffff88803a0b4000 RCX: 00000000000007bf [ 262.413754][ T8583] RDX: 0000000000000000 RSI: ffff88803a0b4000 RDI: 0000200000002980 [ 262.413770][ T8583] RBP: ffffc90006817b78 R08: ffff88803a0b47be R09: 1ffff110074168f7 [ 262.413786][ T8583] R10: dffffc0000000000 R11: ffffed10074168f8 R12: 1ffff92000d02faf [ 262.413803][ T8583] R13: 0000200000002980 R14: ffffc90006817d88 R15: 00000000000007bf [ 262.413829][ T8583] ? _copy_to_iter+0x1c1/0x17d0 [ 262.413861][ T8583] _copy_to_iter+0x255/0x17d0 [ 262.413889][ T8583] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 262.413923][ T8583] ? lockdep_hardirqs_on+0x7a/0x110 [ 262.413955][ T8583] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 262.413989][ T8583] ? reacquire_held_locks+0x104/0x190 [ 262.414015][ T8583] ? rt_spin_lock+0x1e0/0x400 [ 262.414040][ T8583] ? __pfx__copy_to_iter+0x10/0x10 [ 262.414064][ T8583] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 262.414093][ T8583] ? rt_spin_unlock+0x14f/0x200 [ 262.414124][ T8583] ? rt_spin_unlock+0x160/0x200 [ 262.414153][ T8583] seq_read_iter+0xbf6/0xe20 [ 262.414201][ T8583] proc_reg_read_iter+0x1bf/0x290 [ 262.414239][ T8583] vfs_read+0x58b/0xa80 [ 262.414291][ T8583] ? __pfx_vfs_read+0x10/0x10 [ 262.414329][ T8583] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 262.414361][ T8583] ? lockdep_hardirqs_on+0x7a/0x110 [ 262.414396][ T8583] ? mutex_lock_nested+0x152/0x1d0 [ 262.414421][ T8583] ? fdget_pos+0x252/0x320 [ 262.414462][ T8583] ksys_read+0x156/0x270 [ 262.414487][ T8583] ? __pfx_ksys_read+0x10/0x10 [ 262.414519][ T8583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.414545][ T8583] do_syscall_64+0x15f/0xf80 [ 262.414577][ T8583] ? trace_irq_disable+0x3b/0x140 [ 262.414613][ T8583] ? clear_bhb_loop+0x40/0x90 [ 262.414641][ T8583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.414664][ T8583] RIP: 0033:0x7f0ff0d3ce59 [ 262.414684][ T8583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.414704][ T8583] RSP: 002b:00007f0feef8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.414726][ T8583] RAX: ffffffffffffffda RBX: 00007f0ff0fb5fa0 RCX: 00007f0ff0d3ce59 [ 262.414743][ T8583] RDX: 0000000000002020 RSI: 0000200000002980 RDI: 0000000000000004 [ 262.414759][ T8583] RBP: 00007f0feef8e090 R08: 0000000000000000 R09: 0000000000000000 [ 262.414774][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.414787][ T8583] R13: 00007f0ff0fb6038 R14: 00007f0ff0fb5fa0 R15: 00007ffe50e95028 [ 262.414824][ T8583] [ 262.496772][ T2111] team0 (unregistering): Port device team_slave_0 removed [ 263.064283][ T8589] block nbd4: shutting down sockets [ 263.635747][ T8304] hsr_slave_0: entered promiscuous mode [ 263.656598][ T8304] hsr_slave_1: entered promiscuous mode [ 263.667583][ T8304] debugfs: 'hsr0' already exists in 'hsr' [ 263.667613][ T8304] Cannot create hsr debugfs directory [ 264.987958][ T8631] xt_l2tp: wrong L2TP version: 1 [ 265.658735][ T8650] FAULT_INJECTION: forcing a failure. [ 265.658735][ T8650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.658772][ T8650] CPU: 1 UID: 0 PID: 8650 Comm: syz.4.932 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 265.658793][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 265.658804][ T8650] Call Trace: [ 265.658811][ T8650] [ 265.658819][ T8650] dump_stack_lvl+0xe8/0x150 [ 265.658848][ T8650] should_fail_ex+0x46b/0x600 [ 265.658883][ T8650] _copy_from_iter+0x1d3/0x1670 [ 265.658911][ T8650] ? trace_kmem_cache_alloc+0x29/0xe0 [ 265.658937][ T8650] ? __alloc_skb+0x27d/0x7d0 [ 265.658971][ T8650] ? __pfx__copy_from_iter+0x10/0x10 [ 265.658989][ T8650] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 265.659015][ T8650] ? __alloc_skb+0x27d/0x7d0 [ 265.659042][ T8650] ? netlink_sendmsg+0x650/0xb40 [ 265.659069][ T8650] ? skb_put+0x11b/0x210 [ 265.659097][ T8650] netlink_sendmsg+0x6c0/0xb40 [ 265.659137][ T8650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.659167][ T8650] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 265.659195][ T8650] ? aa_sock_msg_perm+0x122/0x200 [ 265.659217][ T8650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.659242][ T8650] sock_sendmsg_nosec+0x112/0x150 [ 265.659267][ T8650] ____sys_sendmsg+0x55c/0x870 [ 265.659300][ T8650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.659334][ T8650] ? import_iovec+0x73/0xa0 [ 265.659359][ T8650] ___sys_sendmsg+0x2a5/0x360 [ 265.659383][ T8650] ? __lock_acquire+0x6b5/0x2d10 [ 265.659407][ T8650] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.659466][ T8650] ? __fget_files+0x2a/0x420 [ 265.659489][ T8650] ? __fget_files+0x3a6/0x420 [ 265.659522][ T8650] __x64_sys_sendmsg+0x1c3/0x2a0 [ 265.659553][ T8650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.659589][ T8650] ? __pfx_ksys_write+0x10/0x10 [ 265.659614][ T8650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.659633][ T8650] do_syscall_64+0x15f/0xf80 [ 265.659658][ T8650] ? trace_irq_disable+0x3b/0x140 [ 265.659686][ T8650] ? clear_bhb_loop+0x40/0x90 [ 265.659708][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.659725][ T8650] RIP: 0033:0x7f0ff0d3ce59 [ 265.659743][ T8650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.659760][ T8650] RSP: 002b:00007f0feef8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.659781][ T8650] RAX: ffffffffffffffda RBX: 00007f0ff0fb5fa0 RCX: 00007f0ff0d3ce59 [ 265.659793][ T8650] RDX: 0000000000008000 RSI: 0000200000000340 RDI: 0000000000000003 [ 265.659805][ T8650] RBP: 00007f0feef8e090 R08: 0000000000000000 R09: 0000000000000000 [ 265.659816][ T8650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.659827][ T8650] R13: 00007f0ff0fb6038 R14: 00007f0ff0fb5fa0 R15: 00007ffe50e95028 [ 265.659855][ T8650] [ 266.914273][ T5730] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 267.060862][ T5730] usb 7-1: Using ep0 maxpacket: 16 [ 267.066427][ T5730] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 267.066462][ T5730] usb 7-1: New USB device strings: Mfr=84, Product=2, SerialNumber=3 [ 267.066483][ T5730] usb 7-1: Product: syz [ 267.066497][ T5730] usb 7-1: Manufacturer: syz [ 267.066511][ T5730] usb 7-1: SerialNumber: syz [ 267.121150][ T5730] usb 7-1: config 0 descriptor?? [ 267.140221][ T5730] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 267.142198][ T5730] usb 7-1: Detected FT4233HP [ 267.326305][ T5730] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 267.326965][ T5730] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 267.351211][ T5713] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 267.390309][ T5730] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 267.403195][ T5730] usb 7-1: USB disconnect, device number 9 [ 267.435563][ T8691] FAULT_INJECTION: forcing a failure. [ 267.435563][ T8691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.435604][ T8691] CPU: 1 UID: 0 PID: 8691 Comm: syz.5.941 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 267.435632][ T8691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.435645][ T8691] Call Trace: [ 267.435654][ T8691] [ 267.435663][ T8691] dump_stack_lvl+0xe8/0x150 [ 267.435699][ T8691] should_fail_ex+0x46b/0x600 [ 267.435740][ T8691] strncpy_from_user+0x36/0x2b0 [ 267.435775][ T8691] do_getname+0x77/0x250 [ 267.435806][ T8691] do_sys_openat2+0xcc/0x200 [ 267.435839][ T8691] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.435869][ T8691] ? exc_page_fault+0x6a/0xc0 [ 267.435906][ T8691] ? do_user_addr_fault+0xc6f/0x1340 [ 267.435937][ T8691] __x64_sys_openat+0x138/0x170 [ 267.435966][ T8691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.435984][ T8691] do_syscall_64+0x15f/0xf80 [ 267.436008][ T8691] ? trace_irq_disable+0x3b/0x140 [ 267.436037][ T8691] ? clear_bhb_loop+0x40/0x90 [ 267.436064][ T8691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.436086][ T8691] RIP: 0033:0x7fa99a49d68e [ 267.436107][ T8691] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 267.436127][ T8691] RSP: 002b:00007fa998735b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 267.436152][ T8691] RAX: ffffffffffffffda RBX: 00007fa9987366c0 RCX: 00007fa99a49d68e [ 267.436170][ T8691] RDX: 0000000000020600 RSI: 00007fa998735c00 RDI: ffffffffffffff9c [ 267.436185][ T8691] RBP: 00007fa998735c00 R08: 0000000000000000 R09: 0000000000000000 [ 267.436231][ T8691] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 267.436246][ T8691] R13: 00007fa99a756038 R14: 00007fa99a755fa0 R15: 00007ffff1c5b708 [ 267.436280][ T8691] [ 267.501942][ T5713] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 267.501973][ T5713] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 267.504535][ T5713] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 267.504562][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.504582][ T5713] usb 5-1: Product: syz [ 267.504596][ T5713] usb 5-1: Manufacturer: syz [ 267.504611][ T5713] usb 5-1: SerialNumber: syz [ 267.858586][ T5730] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 267.860746][ T5713] usb 5-1: config 0 descriptor?? [ 267.884649][ T5730] ftdi_sio 7-1:0.0: device disconnected [ 268.054909][ T5713] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 268.263101][ T8703] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.945' sets config #0 [ 268.878080][ T8714] FAULT_INJECTION: forcing a failure. [ 268.878080][ T8714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.878122][ T8714] CPU: 0 UID: 0 PID: 8714 Comm: syz.6.946 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 268.878152][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 268.878166][ T8714] Call Trace: [ 268.878175][ T8714] [ 268.878184][ T8714] dump_stack_lvl+0xe8/0x150 [ 268.878220][ T8714] should_fail_ex+0x46b/0x600 [ 268.878261][ T8714] _copy_to_user+0x31/0xb0 [ 268.878292][ T8714] simple_read_from_buffer+0xe1/0x170 [ 268.878328][ T8714] proc_fail_nth_read+0x1be/0x230 [ 268.878364][ T8714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.878399][ T8714] ? rw_verify_area+0x2ac/0x4e0 [ 268.878431][ T8714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.878464][ T8714] vfs_read+0x212/0xa80 [ 268.878508][ T8714] ? __pfx_vfs_read+0x10/0x10 [ 268.878544][ T8714] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 268.878576][ T8714] ? lockdep_hardirqs_on+0x7a/0x110 [ 268.878608][ T8714] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 268.878640][ T8714] ? mutex_lock_nested+0x152/0x1d0 [ 268.878664][ T8714] ? fdget_pos+0x252/0x320 [ 268.878704][ T8714] ksys_read+0x156/0x270 [ 268.878726][ T8714] ? __pfx_ksys_read+0x10/0x10 [ 268.878761][ T8714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.878787][ T8714] do_syscall_64+0x15f/0xf80 [ 268.878818][ T8714] ? trace_irq_disable+0x3b/0x140 [ 268.878853][ T8714] ? clear_bhb_loop+0x40/0x90 [ 268.878881][ T8714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.878903][ T8714] RIP: 0033:0x7f0ea237d68e [ 268.878924][ T8714] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 268.878952][ T8714] RSP: 002b:00007f0ea05ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 268.878978][ T8714] RAX: ffffffffffffffda RBX: 00007f0ea05ed6c0 RCX: 00007f0ea237d68e [ 268.878995][ T8714] RDX: 000000000000000f RSI: 00007f0ea05ed0a0 RDI: 0000000000000003 [ 268.879009][ T8714] RBP: 00007f0ea05ed090 R08: 0000000000000000 R09: 0000000000000000 [ 268.879024][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.879038][ T8714] R13: 00007f0ea2636128 R14: 00007f0ea2636090 R15: 00007ffc75c398b8 [ 268.879072][ T8714] [ 269.457304][ T8715] veth1_macvtap: left promiscuous mode [ 269.497570][ T8715] macsec0: entered allmulticast mode [ 269.647831][ T8682] veth1_macvtap: entered promiscuous mode [ 269.647924][ T8682] veth1_macvtap: entered allmulticast mode [ 269.651935][ T8682] macsec0: left allmulticast mode [ 269.651965][ T8682] veth1_macvtap: left allmulticast mode [ 270.091134][ T32] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 270.168467][ T8727] FAULT_INJECTION: forcing a failure. [ 270.168467][ T8727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.168505][ T8727] CPU: 0 UID: 0 PID: 8727 Comm: syz.6.949 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 270.168529][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.168543][ T8727] Call Trace: [ 270.168552][ T8727] [ 270.168561][ T8727] dump_stack_lvl+0xe8/0x150 [ 270.168593][ T8727] should_fail_ex+0x46b/0x600 [ 270.168633][ T8727] _copy_to_user+0x31/0xb0 [ 270.168664][ T8727] simple_read_from_buffer+0xe1/0x170 [ 270.168697][ T8727] proc_fail_nth_read+0x1be/0x230 [ 270.168730][ T8727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 270.168762][ T8727] ? rw_verify_area+0x2ac/0x4e0 [ 270.168795][ T8727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 270.168827][ T8727] vfs_read+0x212/0xa80 [ 270.168867][ T8727] ? __pfx_vfs_read+0x10/0x10 [ 270.168900][ T8727] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 270.168932][ T8727] ? lockdep_hardirqs_on+0x7a/0x110 [ 270.168961][ T8727] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 270.168990][ T8727] ? mutex_lock_nested+0x152/0x1d0 [ 270.169013][ T8727] ? fdget_pos+0x252/0x320 [ 270.169050][ T8727] ksys_read+0x156/0x270 [ 270.169074][ T8727] ? __pfx_ksys_read+0x10/0x10 [ 270.169104][ T8727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.169135][ T8727] do_syscall_64+0x15f/0xf80 [ 270.169164][ T8727] ? trace_irq_disable+0x3b/0x140 [ 270.169205][ T8727] ? clear_bhb_loop+0x40/0x90 [ 270.169231][ T8727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.169253][ T8727] RIP: 0033:0x7f0ea237d68e [ 270.169274][ T8727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 270.169294][ T8727] RSP: 002b:00007f0ea060dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 270.169318][ T8727] RAX: ffffffffffffffda RBX: 00007f0ea060e6c0 RCX: 00007f0ea237d68e [ 270.169334][ T8727] RDX: 000000000000000f RSI: 00007f0ea060e0a0 RDI: 0000000000000006 [ 270.169348][ T8727] RBP: 00007f0ea060e090 R08: 0000000000000000 R09: 0000000000000000 [ 270.169361][ T8727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.169374][ T8727] R13: 00007f0ea2636038 R14: 00007f0ea2635fa0 R15: 00007ffc75c398b8 [ 270.169407][ T8727] [ 270.292336][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 270.292387][ T32] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 270.292410][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.368596][ T32] usb 6-1: config 0 descriptor?? [ 270.372148][ T8723] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 270.714040][ T8304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 270.739351][ T1889] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 270.784516][ T8304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 270.791434][ T8304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 270.800567][ T32] hid (null): invalid report_count 34169 [ 270.872314][ T8304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 270.899322][ T1889] usb 7-1: Using ep0 maxpacket: 16 [ 270.915582][ T8304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 270.924532][ T1889] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 270.924562][ T1889] usb 7-1: config 1 has no interface number 0 [ 270.924614][ T1889] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 270.924643][ T1889] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 270.924669][ T1889] usb 7-1: config 1 interface 105 has no altsetting 0 [ 270.941105][ T1889] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 270.941139][ T1889] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 270.941162][ T1889] usb 7-1: Product: syz [ 270.941177][ T1889] usb 7-1: Manufacturer: syz [ 270.941201][ T1889] usb 7-1: SerialNumber: syz [ 271.059662][ T8729] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 271.059771][ T8729] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 271.086045][ T32] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 271.086080][ T32] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 271.086105][ T32] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 271.086129][ T32] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 271.086153][ T32] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 271.086176][ T32] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 271.086208][ T32] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 271.086250][ T32] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 271.086275][ T32] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 271.086299][ T32] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 271.088282][ T32] asus 0003:0B05:1ABE.0007: invalid report_count 34169 [ 271.088303][ T32] asus 0003:0B05:1ABE.0007: item 0 2 1 9 parsing failed [ 271.089013][ T32] asus 0003:0B05:1ABE.0007: Asus hid parse failed: -22 [ 271.095762][ T32] asus 0003:0B05:1ABE.0007: probe with driver asus failed with error -22 [ 271.190673][ T8304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.198695][ T8304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 271.324552][ T5713] usb 5-1: USB disconnect, device number 15 [ 271.351213][ T32] usb 6-1: USB disconnect, device number 5 [ 271.426527][ T8304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 271.468310][ T8729] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 271.468495][ T8729] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 271.693410][ T8729] binder: 8728:8729 ioctl c0306201 200000000240 returned -11 [ 271.718347][ T1889] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 271.718662][ T1889] aqc111 7-1:1.105: probe with driver aqc111 failed with error -71 [ 271.812930][ T1889] usb 7-1: USB disconnect, device number 10 [ 272.064378][ T8746] netlink: 32 bytes leftover after parsing attributes in process `syz.5.951'. [ 272.115687][ T8748] binder: BINDER_SET_CONTEXT_MGR already set [ 272.115704][ T8748] binder: 8747:8748 ioctl 4018620d 200000000040 returned -16 [ 272.122678][ T8748] FAULT_INJECTION: forcing a failure. [ 272.122678][ T8748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.122712][ T8748] CPU: 1 UID: 0 PID: 8748 Comm: syz.4.952 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 272.122735][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 272.122746][ T8748] Call Trace: [ 272.122774][ T8748] [ 272.122782][ T8748] dump_stack_lvl+0xe8/0x150 [ 272.122812][ T8748] should_fail_ex+0x46b/0x600 [ 272.122847][ T8748] _copy_to_user+0x31/0xb0 [ 272.122875][ T8748] binder_ioctl_write_read+0x9985/0xa490 [ 272.122905][ T8748] ? is_bpf_text_address+0x26/0x2b0 [ 272.122940][ T8748] ? __kernel_text_address+0xd/0x30 [ 272.122982][ T8748] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 272.123011][ T8748] ? stack_depot_save_flags+0x33/0x810 [ 272.123049][ T8748] ? do_raw_spin_lock+0x12b/0x2f0 [ 272.123088][ T8748] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 272.123117][ T8748] ? lockdep_hardirqs_on+0x7a/0x110 [ 272.123149][ T8748] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 272.123177][ T8748] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 272.123207][ T8748] ? reacquire_held_locks+0x104/0x190 [ 272.123230][ T8748] ? rt_spin_lock+0x1e0/0x400 [ 272.123253][ T8748] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 272.123279][ T8748] ? rt_spin_unlock+0x14f/0x200 [ 272.123310][ T8748] ? binder_get_thread+0x177/0x6d0 [ 272.123339][ T8748] binder_ioctl+0x426/0x1b10 [ 272.123365][ T8748] ? tomoyo_path_number_perm+0x219/0x630 [ 272.123387][ T8748] ? tomoyo_path_number_perm+0x219/0x630 [ 272.123410][ T8748] ? do_vfs_ioctl+0x117b/0x1540 [ 272.123431][ T8748] ? __pfx_binder_ioctl+0x10/0x10 [ 272.123456][ T8748] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 272.123508][ T8748] ? __fget_files+0x2a/0x420 [ 272.123537][ T8748] ? __fget_files+0x2a/0x420 [ 272.123561][ T8748] ? __fget_files+0x3a6/0x420 [ 272.123585][ T8748] ? __fget_files+0x2a/0x420 [ 272.123613][ T8748] ? bpf_lsm_file_ioctl+0x9/0x20 [ 272.123637][ T8748] ? __pfx_binder_ioctl+0x10/0x10 [ 272.123662][ T8748] __se_sys_ioctl+0xff/0x170 [ 272.123681][ T8748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.123703][ T8748] do_syscall_64+0x15f/0xf80 [ 272.123730][ T8748] ? trace_irq_disable+0x3b/0x140 [ 272.123759][ T8748] ? clear_bhb_loop+0x40/0x90 [ 272.123782][ T8748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.123802][ T8748] RIP: 0033:0x7f0ff0d3ce59 [ 272.123821][ T8748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.123837][ T8748] RSP: 002b:00007f0feef8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.123858][ T8748] RAX: ffffffffffffffda RBX: 00007f0ff0fb5fa0 RCX: 00007f0ff0d3ce59 [ 272.123872][ T8748] RDX: 0000200000000240 RSI: 00000000c0306201 RDI: 0000000000000005 [ 272.123885][ T8748] RBP: 00007f0feef8e090 R08: 0000000000000000 R09: 0000000000000000 [ 272.123897][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.123909][ T8748] R13: 00007f0ff0fb6038 R14: 00007f0ff0fb5fa0 R15: 00007ffe50e95028 [ 272.123938][ T8748] [ 272.136878][ T8748] binder: 8747:8748 ioctl c0306201 200000000240 returned -14 [ 273.051320][ T8304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.107931][ T8768] netlink: 260 bytes leftover after parsing attributes in process `syz.5.957'. [ 273.170665][ T8304] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.235939][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.236171][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.334435][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.334621][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.169283][ T7881] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 275.217802][ T8796] netlink: 40 bytes leftover after parsing attributes in process `syz.6.960'. [ 275.880096][ T8304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.375774][ T8776] netlink: 'syz.4.958': attribute type 2 has an invalid length. [ 276.416355][ T8304] veth0_vlan: entered promiscuous mode [ 276.607280][ T8304] veth1_vlan: entered promiscuous mode [ 276.674077][ C0] [ 276.674092][ C0] ====================================================== [ 276.674103][ C0] WARNING: possible circular locking dependency detected [ 276.674114][ C0] syzkaller #0 Not tainted [ 276.674126][ C0] ------------------------------------------------------ [ 276.674135][ C0] syz.4.958/8779 is trying to acquire lock: [ 276.674149][ C0] ffff88803277d160 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 276.674228][ C0] [ 276.674228][ C0] but task is already holding lock: [ 276.674236][ C0] ffff88803277da20 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 276.674289][ C0] [ 276.674289][ C0] which lock already depends on the new lock. [ 276.674289][ C0] [ 276.674297][ C0] [ 276.674297][ C0] the existing dependency chain (in reverse order) is: [ 276.674306][ C0] [ 276.674306][ C0] -> #1 (slock-AF_PHONET){+...}-{3:3}: [ 276.674337][ C0] rt_spin_lock+0x83/0x400 [ 276.674362][ C0] __sk_receive_skb+0x1f1/0x9e0 [ 276.674386][ C0] phonet_rcv+0x781/0xc40 [ 276.674408][ C0] process_backlog+0x5e1/0xc60 [ 276.674432][ C0] __napi_poll+0xab/0x550 [ 276.674454][ C0] net_rx_action+0x696/0xe00 [ 276.674479][ C0] handle_softirqs+0x1de/0x6d0 [ 276.674508][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 276.674537][ C0] netif_rx+0xb9/0xf0 [ 276.674566][ C0] pn_send+0x62a/0x8e0 [ 276.674586][ C0] pn_skb_send+0x218/0x530 [ 276.674606][ C0] pipe_snd_status+0x1f1/0x320 [ 276.674634][ C0] pipe_do_rcv+0xf15/0x16a0 [ 276.674658][ C0] __sk_receive_skb+0x962/0x9e0 [ 276.674682][ C0] pep_do_rcv+0x685/0xaa0 [ 276.674705][ C0] __release_sock+0x2a9/0x3d0 [ 276.674724][ C0] release_sock+0x1be/0x290 [ 276.674747][ C0] pep_sock_accept+0xd47/0x11e0 [ 276.674770][ C0] pn_socket_accept+0xc1/0x310 [ 276.674788][ C0] do_accept+0x6ca/0x930 [ 276.674812][ C0] __sys_accept4+0x139/0x230 [ 276.674837][ C0] __x64_sys_accept4+0x9a/0xb0 [ 276.674863][ C0] do_syscall_64+0x15f/0xf80 [ 276.674892][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.674912][ C0] [ 276.674912][ C0] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 276.674946][ C0] __lock_acquire+0x15a5/0x2d10 [ 276.674969][ C0] lock_acquire+0x106/0x350 [ 276.674988][ C0] rt_spin_lock_nested+0x81/0x3f0 [ 276.675008][ C0] __sk_receive_skb+0x1bf/0x9e0 [ 276.675030][ C0] pep_do_rcv+0x685/0xaa0 [ 276.675049][ C0] __sk_receive_skb+0x962/0x9e0 [ 276.675068][ C0] phonet_rcv+0x781/0xc40 [ 276.675087][ C0] process_backlog+0x5e1/0xc60 [ 276.675109][ C0] __napi_poll+0xab/0x550 [ 276.675126][ C0] net_rx_action+0x696/0xe00 [ 276.675147][ C0] handle_softirqs+0x1de/0x6d0 [ 276.675188][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 276.675211][ C0] netif_rx+0xb9/0xf0 [ 276.675237][ C0] pn_send+0x62a/0x8e0 [ 276.675256][ C0] pn_skb_send+0x218/0x530 [ 276.675276][ C0] pipe_snd_status+0x1f1/0x320 [ 276.675298][ C0] pipe_grant_credits+0x10d/0x200 [ 276.675319][ C0] pipe_handler_do_rcv+0x17a5/0x2030 [ 276.675345][ C0] pep_do_rcv+0x5d6/0xaa0 [ 276.675369][ C0] __release_sock+0x2a9/0x3d0 [ 276.675385][ C0] release_sock+0x1be/0x290 [ 276.675406][ C0] pn_socket_connect+0x713/0xba0 [ 276.675423][ C0] __sys_connect+0x315/0x450 [ 276.675450][ C0] __x64_sys_connect+0x7a/0x90 [ 276.675476][ C0] do_syscall_64+0x15f/0xf80 [ 276.675508][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.675529][ C0] [ 276.675529][ C0] other info that might help us debug this: [ 276.675529][ C0] [ 276.675536][ C0] Possible unsafe locking scenario: [ 276.675536][ C0] [ 276.675542][ C0] CPU0 CPU1 [ 276.675549][ C0] ---- ---- [ 276.675556][ C0] lock(slock-AF_PHONET); [ 276.675572][ C0] lock(slock-AF_PHONET/1); [ 276.675593][ C0] lock(slock-AF_PHONET); [ 276.675609][ C0] lock(slock-AF_PHONET/1); [ 276.675628][ C0] [ 276.675628][ C0] *** DEADLOCK *** [ 276.675628][ C0] [ 276.675633][ C0] 6 locks held by syz.4.958/8779: [ 276.675646][ C0] #0: ffff88805e53c098 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pn_socket_connect+0x29a/0xba0 [ 276.675695][ C0] #1: ffffffff8e1ca240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 276.675756][ C0] #2: ffffffff8e1ca240 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 276.675809][ C0] #3: ffff88803277da20 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 276.675861][ C0] #4: ffffffff8e1ca240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 276.675913][ C0] #5: ffff88803277dad8 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40 [ 276.675962][ C0] [ 276.675962][ C0] stack backtrace: [ 276.675976][ C0] CPU: 0 UID: 0 PID: 8779 Comm: syz.4.958 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 276.676000][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.676013][ C0] Call Trace: [ 276.676021][ C0] [ 276.676030][ C0] dump_stack_lvl+0xe8/0x150 [ 276.676059][ C0] print_circular_bug+0x2e1/0x300 [ 276.676088][ C0] check_noncircular+0x12e/0x150 [ 276.676119][ C0] __lock_acquire+0x15a5/0x2d10 [ 276.676144][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 276.676186][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 276.676213][ C0] lock_acquire+0x106/0x350 [ 276.676233][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 276.676260][ C0] ? sk_filter_trim_cap+0x8f1/0xce0 [ 276.676284][ C0] rt_spin_lock_nested+0x81/0x3f0 [ 276.676307][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 276.676330][ C0] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 276.676347][ C0] ? __lock_acquire+0x6b5/0x2d10 [ 276.676368][ C0] ? __pfx_rt_spin_lock_nested+0x10/0x10 [ 276.676393][ C0] ? rt_spin_lock+0x1e0/0x400 [ 276.676420][ C0] __sk_receive_skb+0x1bf/0x9e0 [ 276.676451][ C0] pep_do_rcv+0x685/0xaa0 [ 276.676477][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 276.676503][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 276.676527][ C0] ? phonet_rcv+0x781/0xc40 [ 276.676547][ C0] __sk_receive_skb+0x962/0x9e0 [ 276.676573][ C0] phonet_rcv+0x781/0xc40 [ 276.676594][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 276.676629][ C0] ? __pfx_phonet_rcv+0x10/0x10 [ 276.676652][ C0] ? process_backlog+0x271/0xc60 [ 276.676676][ C0] ? process_backlog+0x271/0xc60 [ 276.676702][ C0] ? __pfx_phonet_rcv+0x10/0x10 [ 276.676724][ C0] process_backlog+0x5e1/0xc60 [ 276.676758][ C0] __napi_poll+0xab/0x550 [ 276.676783][ C0] net_rx_action+0x696/0xe00 [ 276.676816][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 276.676841][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 276.676871][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 276.676899][ C0] ? enqueue_to_backlog+0x340/0xcb0 [ 276.676923][ C0] handle_softirqs+0x1de/0x6d0 [ 276.676956][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 276.676986][ C0] netif_rx+0xb9/0xf0 [ 276.677015][ C0] pn_send+0x62a/0x8e0 [ 276.677040][ C0] pn_skb_send+0x218/0x530 [ 276.677065][ C0] pipe_snd_status+0x1f1/0x320 [ 276.677090][ C0] ? netif_rx+0xb9/0xf0 [ 276.677122][ C0] ? __pfx_pipe_snd_status+0x10/0x10 [ 276.677153][ C0] pipe_grant_credits+0x10d/0x200 [ 276.677190][ C0] pipe_handler_do_rcv+0x17a5/0x2030 [ 276.677223][ C0] ? __pfx_pipe_handler_do_rcv+0x10/0x10 [ 276.677253][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 276.677287][ C0] pep_do_rcv+0x5d6/0xaa0 [ 276.677314][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 276.677341][ C0] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 276.677371][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 276.677403][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 276.677428][ C0] __release_sock+0x2a9/0x3d0 [ 276.677450][ C0] ? __release_sock+0xa4/0x3d0 [ 276.677472][ C0] release_sock+0x1be/0x290 [ 276.677498][ C0] ? release_sock+0x2f/0x290 [ 276.677525][ C0] pn_socket_connect+0x713/0xba0 [ 276.677550][ C0] ? __pfx_pn_socket_connect+0x10/0x10 [ 276.677572][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 276.677595][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 276.677631][ C0] ? hook_socket_connect+0x107/0x190 [ 276.677657][ C0] ? bpf_lsm_socket_connect+0x9/0x20 [ 276.677682][ C0] __sys_connect+0x315/0x450 [ 276.677712][ C0] ? __pfx___sys_connect+0x10/0x10 [ 276.677744][ C0] ? rcu_is_watching+0x15/0xb0 [ 276.677773][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.677796][ C0] __x64_sys_connect+0x7a/0x90 [ 276.677825][ C0] do_syscall_64+0x15f/0xf80 [ 276.677856][ C0] ? trace_irq_disable+0x3b/0x140 [ 276.677890][ C0] ? clear_bhb_loop+0x40/0x90 [ 276.677913][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.677935][ C0] RIP: 0033:0x7f0ff0d3ce59 [ 276.677955][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.677975][ C0] RSP: 002b:00007f0feef4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 276.678000][ C0] RAX: ffffffffffffffda RBX: 00007f0ff0fb6180 RCX: 00007f0ff0d3ce59 [ 276.678016][ C0] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 000000000000000c [ 276.678031][ C0] RBP: 00007f0ff0dd2d6f R08: 0000000000000000 R09: 0000000000000000 [ 276.678046][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.678059][ C0] R13: 00007f0ff0fb6218 R14: 00007f0ff0fb6180 R15: 00007ffe50e95028 [ 276.678083][ C0] [ 276.742810][ T8304] veth0_macvtap: entered promiscuous mode [ 276.773895][ T8304] veth1_macvtap: entered promiscuous mode [ 276.822315][ T8304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.842191][ T8304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.866701][ T2111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.866747][ T2111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.866781][ T2111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.866812][ T2111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.332544][ T8304] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 278.100995][ T6908] syz_tun (unregistering): left allmulticast mode [ 279.091318][ T1129] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.350414][ T1129] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.570632][ T1129] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.800352][ T1129] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.179637][ T1129] bridge_slave_1: left allmulticast mode [ 280.179668][ T1129] bridge_slave_1: left promiscuous mode [ 280.179865][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.359703][ T1129] bridge_slave_0: left allmulticast mode [ 280.359725][ T1129] bridge_slave_0: left promiscuous mode [ 280.359855][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.079752][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.160290][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.200941][ T1129] bond0 (unregistering): Released all slaves [ 281.221223][ T5285] 8021q: adding VLAN 0 to HW filter on device eth13 [ 281.771745][ T5285] 8021q: adding VLAN 0 to HW filter on device eth14 [ 282.251778][ T5285] 8021q: adding VLAN 0 to HW filter on device eth15 [ 282.549329][ T1129] hsr_slave_0: left promiscuous mode [ 282.589334][ T1129] hsr_slave_1: left promiscuous mode [ 282.589820][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.589835][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.630089][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.630115][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.689675][ T1129] veth1_macvtap: left promiscuous mode [ 282.689715][ T1129] veth0_macvtap: left promiscuous mode [ 282.689799][ T1129] veth1_vlan: left promiscuous mode [ 282.689928][ T1129] veth0_vlan: left promiscuous mode [ 283.199927][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 283.239921][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 283.332386][ T5285] 8021q: adding VLAN 0 to HW filter on device eth16 [ 284.630383][ T1129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.840353][ T1129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.070926][ T1129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.310391][ T1129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.691026][ T1129] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.754247][ T5285] 8021q: adding VLAN 0 to HW filter on device eth17 [ 285.991660][ T1129] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.031052][ T5285] 8021q: adding VLAN 0 to HW filter on device eth18 [ 286.270975][ T1129] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.310817][ T5285] 8021q: adding VLAN 0 to HW filter on device eth19 [ 286.550974][ T1129] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.591020][ T5285] 8021q: adding VLAN 0 to HW filter on device eth20