last executing test programs: 5m28.001344922s ago: executing program 4 (id=1523): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) pwritev2(r2, 0x0, 0x0, 0xb, 0x9, 0x12) ioctl$sock_x25_SIOCDELRT(r1, 0x8917, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xfe1c, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000fdffffff0108000000000000000001000004050005040137d2df4318e2920a6173683a6e65742c69666163650000050005000200000005000500030000"], 0x40}}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006"], 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x80082102, &(0x7f0000000080)={0x0, 0x0, r5}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x4}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfffffe3b, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x8840) 5m27.668204578s ago: executing program 4 (id=1527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x100, 0x4, &(0x7f0000000500)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2b40, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x18, 0x0, 0x5) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5m26.538529678s ago: executing program 4 (id=1531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 3) 5m26.368496466s ago: executing program 4 (id=1533): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x2, 0x3}}, 0x10, 0x0}, 0x0) 5m26.134519096s ago: executing program 4 (id=1535): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', './file1/../file0', [{0x20, 'cgr\x01\x00 \x00q\xc84\x04\x04'}]}, 0x21) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000540)="aa2e07a43ecaa4f030dff111e923219d3a5a00904a9bce005907230e8f75cfc68bd31e61698c6114ffdd856898d814b616a5ac0827c8b021fbb1fa832462ea175ae6dae31e42bbb3ce3469c6323fe898175fd9331455266e5f70a167d59e2a4a3dad4a44311f4c69292d304b2dd0e09872e408c6f25a2aed49c6c5a60debbce6c7b743a9124b", 0x86}], 0x1) write$UHID_INPUT(r3, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffd7b, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="01002cbd70100400000008000000080009000200000008000c00a80a000008000b"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) mount$bpf(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000240), 0x40, &(0x7f0000000600)) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x6636dbc53fe3ab10) fcntl$setlease(r4, 0x400, 0x0) 5m25.813389296s ago: executing program 4 (id=1538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x68}}, 0x0) (fail_nth: 3) 3m0.490444345s ago: executing program 3 (id=2131): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (fail_nth: 3) 2m57.131943455s ago: executing program 3 (id=2153): socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x35, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 2m57.086576867s ago: executing program 3 (id=2154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 2m55.705915292s ago: executing program 3 (id=2158): syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d38461", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef2860", 0x5c}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9", 0x38}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794", 0xb4}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m53.743586375s ago: executing program 3 (id=2164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) unshare(0x28020480) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) copy_file_range(r4, 0x0, r4, 0x0, 0xb, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x260080d4}, 0xc0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000010401"], 0x30}}, 0x24004000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x80000) 2m52.059383236s ago: executing program 3 (id=2165): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) write$vga_arbiter(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010800000000000c000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000010000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000380)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x240408dd}, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) waitid(0x1, r5, 0x0, 0x61000006, 0x0) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={0x0}) ptrace$ARCH_SHSTK_STATUS(0x1e, r5, &(0x7f0000000300), 0x5005) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000840)="a6", 0x1, 0x240080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x4}, 0x1c) 2m35.727317486s ago: executing program 32 (id=2165): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) write$vga_arbiter(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010800000000000c000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000010000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000380)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x240408dd}, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) waitid(0x1, r5, 0x0, 0x61000006, 0x0) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={0x0}) ptrace$ARCH_SHSTK_STATUS(0x1e, r5, &(0x7f0000000300), 0x5005) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000840)="a6", 0x1, 0x240080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x4}, 0x1c) 10.221321102s ago: executing program 1 (id=2965): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2151090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x200000010001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 9.900864064s ago: executing program 1 (id=2968): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) getpgrp(0x0) socket$key(0xf, 0x3, 0x2) fstatfs(0xffffffffffffffff, &(0x7f0000000400)=""/152) r1 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000022) close(0x3) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/rt_acct\x00') r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/hibernate_compression_threads', 0x40, 0x40) preadv(r3, &(0x7f0000002880)=[{&(0x7f0000000680)=""/246, 0xf6}], 0x1, 0x6, 0x8) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="024005"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) read$FUSE(r2, &(0x7f0000002340)={0x2020}, 0x2020) 7.379795452s ago: executing program 1 (id=2987): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000200)={0xc000, 0x3000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000002280), 0x20002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0xfb}]}) userfaultfd(0x801) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000380)={0x40000000}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x9, 0xb, 0x6, 0xff}, 0x3c, [0x7fffffff, 0xc95a, 0x3, 0x8, 0x80, 0x2, 0x3, 0x1010007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x3, 0x8, 0xff, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x400003e, 0x8c, 0x6, 0x2, 0x0, 0x5, 0x4, 0x8, 0x400, 0x84, 0x1, 0x5, 0x6, 0x8, 0x1, 0x1, 0x40], [0x10000007, 0x8001, 0x8000012f, 0x6, 0x5, 0x2, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x200, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x7, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x6, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x3, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x0, 0x43, 0x9], [0x9, 0x1000a, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x6, 0xeaaa, 0x6, 0x10000005, 0x0, 0x6, 0x8, 0x0, 0x86, 0x3, 0x7fffffff, 0x3e7, 0xb, 0x80, 0x2, 0x40, 0x9, 0x2000000c, 0x2, 0x6d02, 0x6, 0x2, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xd, 0xc2, 0x2, 0x3, 0x7ff, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x14, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x4, 0x2, 0x2, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0x5c08a237, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x2, 0x226, 0x5, 0x5, 0x1, 0x30b1d68f, 0xa1f, 0x8000, 0x800, 0x1, 0x6c1b, 0x0, 0x3, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343d, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x1000}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x46, 0x0, 0x0, 0x3, 0x4, 0x8}, {0x10, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x20, 0x9, 0x1, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0xfe}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 6.562590819s ago: executing program 2 (id=3000): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x414000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x123f41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) write$binfmt_aout(r4, &(0x7f0000000280)=ANY=[], 0xff2e) r7 = fsopen(0x0, 0x1) r8 = fsmount(r7, 0x0, 0x6) fchdir(r8) 5.305973383s ago: executing program 2 (id=3005): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_dev$ublk_chdev(&(0x7f0000000040), 0x0, 0xc080) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x42, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x3, 0x346, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x181}}}, &(0x7f0000000280)=0x0) r3 = syz_ublk_setup_io_uring(0x27a6, &(0x7f00000002c0)={0x0, 0x31f8, 0x80000, 0x0, 0x3a4}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) r4 = syz_open_dev$mtd(&(0x7f0000000140), 0x31, 0x54900) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x1, 'dvmrp0\x00', {}, 0x5}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002ebd700e000600001400000018000180140002006e657464657673696d30000000000000050019000000000308001500f1ffff01050018"], 0x44}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) ioctl$MEMWRITEOOB(r4, 0xc0104d03, &(0x7f0000001e40)={0x17c, 0x92, &(0x7f0000001d80)="797a446f2ce49d3403a89cdd4dcc21d3d4d0ea41dbd4aa74506b6454cf1aafdd9fddeb0a8ee9a655d6e128746f0532c41ea26aaa10700cd9accd75fc0f9d1ab924baef4d6a82d746a21147c67d7562b0b22c125d14b30444e33e44fa70a5375203db0e950d9613345949723256bcb61756f16f0fb55e232bddf492ff0b03cd1dd83e12580237344f4a1dfea77da767d6f488"}) syz_ublk_setup_io_uring(0x7aa, &(0x7f0000000480)={0x0, 0xa046, 0x1000, 0x1, 0x2c8}, &(0x7f0000001e80), &(0x7f0000000540), &(0x7f0000000580)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000b80)={{r0, &(0x7f0000000840)='!\\\x00', 0x40883, &(0x7f0000000880)={@align=0x81, {0x0, 0x9, 0x9, 0x428}}, 0x9, &(0x7f00000008c0)={@_ha_fsid}, &(0x7f0000000900)=0x785}, 0x2, &(0x7f0000000b40)=[{0x2, 0x6, &(0x7f0000000940)=']]#\x00', &(0x7f0000000980)="800d2017cc6335d204ca3be8b8c642b756f9fc784155a37bf59f3f71fd51bf87e66ba982517981bb990c0b991cecc41fe215061b76cbe8b248f7d66e6443f0d892021fdf8ca595f451579f9d14603f580678097dc01bda811de6e995", 0x5c, 0x1a}, {0x2, 0x5, &(0x7f0000000a00)='$\x00', &(0x7f0000000a40)="b40680b80c09307d5400d3072fb6fc10b1788644632096bf4c5f2f62b7370b3c329ef6d97b7f064f8e4a997c7e9652d2933c797e4ae966d48734843ac8b8096772fdddc96ce293a93644898aeccdd0e55e517812461a2eece624cd1b5c361537515ad1dd41567b200f1e82a6fb879b2795505f78d1e496c613298d75b7b7b5175459ff5c1ec4fd41dfb64dfe064bcab7a149dd978cb161a7671f186f8baf3264b2c38c52730cfc927fe72e14717451ba39daeac9ec91458c133451190a43d33b3cebddd240d1e5252bacdbbbbfb2063053d7c848a0a3cf5d34591f308f1448913ac3", 0xe2, 0x28}]}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r1, r2, &(0x7f0000000400)={0x0, 0x3e83, 0x80, 0x2, 0x6e, 0x0, r3}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcb71, 0x4060, 0x1, 0x76}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9853, 0x4, 0x0, 0x1ef}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb01e, 0x80, 0x1, 0x239}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4195, 0x1, 0x1, 0x15b}}], 0x4, &(0x7f0000001c00)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r8, '\x00', {0x1, 0xeab, 0x0, &(0x7f0000000c00)=@buf_4k="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"}}, 0xfffffffffffffffd) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r10 = landlock_create_ruleset(&(0x7f00000000c0)={0x8152, 0xa, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r10, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r11 = io_uring_setup(0x5908, &(0x7f0000001c80)={0x0, 0x2000316d, 0x0, 0x2, 0x374, 0x0, r9}) io_uring_setup(0x4d5f, &(0x7f0000001d00)={0x0, 0x1c16, 0x20, 0x3, 0x284, 0x0, r11}) landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1, 0x0, 0xa400}, 0x30, 0x0) 5.192364541s ago: executing program 2 (id=3006): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.065937527s ago: executing program 1 (id=3007): mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x5, 0x5, 0x0) 4.957302839s ago: executing program 1 (id=3008): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, 0x0) syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) r0 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r0, r0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x24, 0x3}, {0x7f, 0x3}, {0x9}, {0x4, 0x6}], "39529cd3b99a4d47"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000801}, 0x80d0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r5], 0x1c}}, 0x0) recvmmsg$unix(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x34000, 0x0) r6 = syz_open_dev$dri(0x0, 0xb, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, 0x0) 4.603521381s ago: executing program 2 (id=3013): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) r1 = accept$nfc_llcp(r0, 0x0, &(0x7f00000000c0)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x28) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace', 0x404801, 0x4) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f00000001c0)) sendto(r4, &(0x7f0000000200)="e370aa096cb17872dcd2b1d128879145f2a2160f49864d1fb1761c1726e40c8c753429f440d2b749bc2a1a2b8f952c7e633cbb0e8fe7205aee782a05dd0d7ed75ed1142d6d35", 0x46, 0x801, &(0x7f0000000280)=@qipcrtr={0x2a, 0x2, 0x3fff}, 0x80) sendto(r0, &(0x7f0000000300)="c4a596218867e40f1e83a8de1eb4466ad99a0aad6fd89a39c93817a68788e86e38576eb9a6f07df4af711153359e822b6692dbd7156dabd752f4049027caec94ed5e95dada88b467a5b410db90efbf7522c236aa4fd6437585c0dfac935a4d6961e2f1c0fd1637000205217f16172ce29ae329d47cbcb56752", 0x79, 0x4004811, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x1, 0x4, 0x1, 0x2}}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f0000000400)="325d50143b3cdf8848d35281ff0acab20b6aac1d7aeb66e196a96f8716304de4dd74f08b9b30467d2f061b3fca57f4ff2cb016d4ec4c8c88e2b93fcfad1afcb118d46856d3ef28ca07faa27385f81901e20b09bc28f8d48dc051a080aff745a0e61371b4d906170f0bd21e277d9e1409f63ccbb8bf77503ee3fab206ed15359c5ca4c8a267e3cd44aa0633a2dde4687bf49f520651214d0d84a9740f70b661212482569ea03c5d83f0ad75ae4c06d4de5262ce1048287a0d31dbec448d16024462697a57d9d200a53fc346f51fb00abd2ab0d24d92e1d1736e1cb014289c25ca48", &(0x7f0000000500)=""/13, &(0x7f0000000540)="0fab935bac9ea0da6921e2b94ef62b5f3af2bacdc5f40fc2f67a990420c772deffe65f8c426effb4f96a3c02e1de155b87d61d5b4a21b2638a0c45317c40422a5ea193c2e3c85d14bd8fe6e0a2030e0c192e012ea3d0104a97153bf99c220bfd02a4f9e023dc3a8f30db0c153a0d1dab52e5338a37a0035b55bcf19af0dd82e64cb7c52faeff865516b51481a63d4688ffa8", &(0x7f0000000600)="d1562d72a4bf1e41a83c4eb7e23dd8b4c61fc749099e41cda4617b4708509d542a44c8779a774731240568", 0x8, r4, 0x4}, 0x38) r5 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000006c0)={0x0, 0x3, 0x0, [0x0, 0x40, 0x0, 0x0, 0x100000000], [0x8001, 0xfffe00000, 0x8000, 0x0, 0x8, 0x3, 0x100, 0x4d4, 0x3, 0x9, 0xe, 0x4, 0xb3, 0x4, 0x5, 0x5, 0x4, 0x8000000000000001, 0x5, 0x2, 0xb0, 0x3, 0x40, 0x80, 0x4, 0x3, 0x10, 0x2, 0xfffffffffffffffe, 0x80e3, 0x6, 0x10000, 0x6, 0x5, 0x2, 0xfff, 0xe3e, 0xfffffffffffffff7, 0xff, 0x6, 0xfff, 0x6, 0x401, 0x6, 0x401, 0x8ef8, 0x3, 0x87e5, 0x2040000, 0xc5, 0xfffffffffffffbff, 0xc, 0x7fffffff, 0x8000000000000000, 0x77247502, 0x2, 0xfffffffffffffffd, 0x8, 0x80, 0x10000, 0x9, 0x8000000000000001, 0x5, 0x1d, 0x210, 0x50000000, 0x8, 0x3, 0xb69, 0xb0f, 0xd44e3a4000000000, 0xa3, 0x1, 0x2, 0x2, 0x0, 0x7, 0x3a7, 0x6, 0x3ff, 0xfffffffffffff638, 0x1000, 0x200, 0xe3c2, 0x6, 0x2, 0x9, 0xfff, 0xc, 0x0, 0xc, 0x138b, 0x80000001, 0x7, 0x1ff, 0x97, 0x7fffffffffffffff, 0x741a, 0x8, 0x200, 0xffff, 0x3, 0xfffffffffffffffd, 0x7, 0x1, 0x2, 0x0, 0x200, 0x1000, 0x98e0, 0xfff, 0x8001, 0x8, 0x8, 0x9, 0x9, 0xffffffff, 0x4, 0x9, 0x4, 0x9]}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b00)={r6, 0xa, 0x8, 0x1}) r8 = socket$inet6(0xa, 0xa, 0x9) sendto(r8, &(0x7f0000000f00)="9b", 0x1, 0x80, &(0x7f0000000f40)=@caif, 0x80) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000fc0)={0x1c, 0x17, 0x11, 0x1e, 0x5, 0x5, 0x3, 0xc2, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000001000)={0x1, 0x8}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000001080)={0x800, 0x0, '\x00', 0x0, &(0x7f0000001040)}) sendmsg$NFT_BATCH(r4, &(0x7f0000001400)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000013c0)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x220, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x2a4}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) sendto(r8, &(0x7f0000001440)="472a268c7e557833f01c0d3f01160050d6ffd1d89610ec5d27c158e1285aeeb901639d3e8e8acb5ec934a9b19a714e031f9e3902677b8cdc3002530f62dc125e8347f5ee787ae5465923eed75a372828e34bb7ca027b7d6b8b4a7044207e21a8e13644c44e721a77c86eb3a4572eca30b4258fd89225bee0a5f1276d02d7a5c272c6210d0edbcf3fa2be031243b5f6f815abf443c19d2ac81678ace3a5e0abd0be10f5a6b05d20a32ec181636c10ad836789a14770455bc5d9d18d4399647b8ba86b01d9309436d4e3", 0xc9, 0x4, &(0x7f0000001540)=@hci={0x1f, 0x2, 0x1}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000015c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2a}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000001600)={0xaa, 0x265}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000001640)={r3, 0x6}, 0x8) openat$cgroup_ro(r4, &(0x7f0000001680)='blkio.bfq.dequeue\x00', 0x0, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r9, 0x800448d3, &(0x7f00000016c0)={@any, 0x401, 0x4, 0xc, 0x4, 0x3f, "cec8015c0dc3af5e6bac1962a6359445815e4a934a8d516bdaa88c9b3b9a28c706644d19dcbb695ecc0249dbfb8596da0b3418988a52857274fcdcef7fbd0dd8646c4b77e4d9c25068951995665f06010bd47b01b5ded730944420efdfafe8f57c293b31f8056145410eeafc76bb3a520be4bdef9724dd0d5622281fd9391934"}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001780)={r4, 0x81, 0xfff, 0x4}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000017c0)={r7, "5c26c73669e377c37ffa1bd5b43c8948"}) r10 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000027c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0xe0, &(0x7f0000002840)={[{0xda, 0x4e00, "d4e875554b704a805ad6b676b22208d471e224ba0c822c1797f146d2e8a096102a2beb47dc1bb5b6987158e0e192883805cb502101b08912f45ff02f4899d0a7bde5db378d934c3fa614fcb3164fdd4ea0f78debc44aa224143ba294217107bd6ce70f483b0abcd362dea6cd474123c3edb3ffd4e7dff2f2f29eeb743fe6263cc7ff6f092563a95a611bfedba2cee53ed43b2dfa50eaa13da62ae13cc0138cbc933bb27cf5a28f20b184f34c736628a48aa984f4bc78d2555cbe60f36a85e04e02ac023edc46a539ff710eee1b2926583327483ac99922936b7f"}]}) 1.955003902s ago: executing program 0 (id=3024): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120110010000004079000118400001020301090224000101ff50090904000701030101000921ff0f770122b10f09058103"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="bf7e1346268cc218c30854"], 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000380)={0x0, 0x0, {[0x8, 0x7, 0x4, 0x4, 0x40000077, 0x8, 0xec0a, 0x7fffffff]}}) 1.900688388s ago: executing program 0 (id=3025): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x68}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0xb4) syz_open_dev$media(&(0x7f0000000380), 0x13, 0x0) syz_ublk_setup_io_uring(0x8007514, &(0x7f00000002c0)={0x0, 0x3a29, 0x40, 0x2, 0x158}, &(0x7f0000000100), 0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x4004510d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x88}}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000180000042bbd7000ffdbdf250a101008fe04fe0b001000000c00090000000403", @ANYRES32=r4, @ANYBLOB="dbc4bd9bbd531688c0e54a81d62b4b7618635d399c7aab75fd189dac5b9ee46ac005f140a4b9eb055a0597aec29891f02ca9671dbedef2c9a910563f014ac489178cae50"], 0x28}, 0x1, 0x0, 0x0, 0x2004c051}, 0x40) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x100) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r6, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000380)={0x28, 0x2, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000340)}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) 1.812579493s ago: executing program 2 (id=3026): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x204, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, 0x1410, 0x1, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0xc0) 1.760516665s ago: executing program 0 (id=3027): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) (fail_nth: 4) 1.259084673s ago: executing program 0 (id=3028): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/tcp6\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xe) mount$9p_fd(0x11, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.151722621s ago: executing program 2 (id=3029): socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002a9785000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580), 0x8c001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRWALK(r3, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x5}, 0xf) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x509d, 0x10000, 0x2, 0x3c}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd608, 0x800, 0x3, 0x2eb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3de6, 0x10, 0x2, 0x3bb}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9ed, 0x80000, 0x2, 0x3a7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5656, 0x40, 0x1, 0x1a1, 0x0, r2}}], 0x4, &(0x7f00000019c0)={0x2e, 0x38, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xfff}, 0x0, 0x0, '\x00', {0x4, 0xcae, 0x0, &(0x7f00000009c0)=@buf_1k="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"}}, &(0x7f0000001a40)) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xd000, 0x0, 0x15c, 0x0, r4}) r5 = timerfd_create(0x1, 0x80000) r6 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x3}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r8, 0x0, 0x30, &(0x7f0000000340)=""/224, &(0x7f00000001c0)=0xe0) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000}) bpf$LINK_DETACH(0x22, &(0x7f0000000680)=r7, 0x4) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000200)=0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) 1.133361025s ago: executing program 1 (id=3030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x0, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r6, &(0x7f0000001000), 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140020001000010000000000000000000500000a1400"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, &(0x7f0000000100)) 1.046696366s ago: executing program 0 (id=3031): syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d38461", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9", 0x38}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794", 0xb4}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 0 (id=3032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) kernel console output (not intermixed with test programs): yo_path_number_perm+0x219/0x5f0 [ 625.549713][T13384] ? tomoyo_path_number_perm+0x219/0x5f0 [ 625.549732][T13384] ? __pfx_kcm_ioctl+0x10/0x10 [ 625.549755][T13384] ? do_vfs_ioctl+0x1184/0x1550 [ 625.549781][T13384] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 625.549807][T13384] sock_do_ioctl+0x101/0x320 [ 625.549827][T13384] ? __pfx_sock_do_ioctl+0x10/0x10 [ 625.549841][T13384] ? hook_file_ioctl+0x1f3/0x600 [ 625.549864][T13384] ? __asan_memset+0x22/0x50 [ 625.549885][T13384] ? smack_file_ioctl+0x263/0x360 [ 625.549913][T13384] sock_ioctl+0x57d/0x7f0 [ 625.549936][T13384] ? __pfx_sock_ioctl+0x10/0x10 [ 625.549953][T13384] ? __fget_files+0x2a/0x420 [ 625.549970][T13384] ? __fget_files+0x3a8/0x420 [ 625.549983][T13384] ? __fget_files+0x2a/0x420 [ 625.549998][T13384] ? bpf_lsm_file_ioctl+0x9/0x20 [ 625.550018][T13384] ? __pfx_sock_ioctl+0x10/0x10 [ 625.550034][T13384] __se_sys_ioctl+0xff/0x170 [ 625.550050][T13384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.550066][T13384] do_syscall_64+0x174/0x580 [ 625.550086][T13384] ? trace_irq_disable+0x3b/0x140 [ 625.550106][T13384] ? clear_bhb_loop+0x40/0x90 [ 625.550123][T13384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.550137][T13384] RIP: 0033:0x7fd6aee7de59 [ 625.550152][T13384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.550163][T13384] RSP: 002b:00007fd6ad0d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.550179][T13384] RAX: ffffffffffffffda RBX: 00007fd6af105fa0 RCX: 00007fd6aee7de59 [ 625.550189][T13384] RDX: 0000200000000180 RSI: 00000000000089e0 RDI: 0000000000000005 [ 625.550198][T13384] RBP: 00007fd6ad0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 625.550206][T13384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.550215][T13384] R13: 00007fd6af106038 R14: 00007fd6af105fa0 R15: 00007ffc4f747808 [ 625.550249][T13384] [ 625.945211][T13381] tipc: Started in network mode [ 625.945242][T13381] tipc: Node identity ac14140d, cluster identity 4711 [ 626.164300][T13381] tipc: Enabled bearer , priority 10 [ 626.350979][T13391] ±ÿ: renamed from lo (while UP) [ 626.404498][T13393] FAULT_INJECTION: forcing a failure. [ 626.404498][T13393] name failslab, interval 1, probability 0, space 0, times 0 [ 626.404532][T13393] CPU: 1 UID: 0 PID: 13393 Comm: syz.0.2617 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 626.404555][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 626.404567][T13393] Call Trace: [ 626.404575][T13393] [ 626.404584][T13393] dump_stack_lvl+0xe8/0x150 [ 626.404616][T13393] should_fail_ex+0x467/0x600 [ 626.404647][T13393] should_failslab+0xa8/0x100 [ 626.404669][T13393] __kmalloc_noprof+0xfe/0x780 [ 626.404686][T13393] ? rcu_is_watching+0x15/0xb0 [ 626.404708][T13393] ? tomoyo_realpath_from_path+0xef/0x640 [ 626.404730][T13393] ? tomoyo_realpath_from_path+0xef/0x640 [ 626.404757][T13393] tomoyo_realpath_from_path+0xef/0x640 [ 626.404784][T13393] ? tomoyo_path_number_perm+0x219/0x5f0 [ 626.404810][T13393] tomoyo_path_number_perm+0x246/0x5f0 [ 626.404839][T13393] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 626.404865][T13393] ? __lock_acquire+0x683/0x2ce0 [ 626.404894][T13393] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 626.404919][T13393] ? hook_file_ioctl+0x1f3/0x600 [ 626.404939][T13393] ? lockdep_hardirqs_on+0x7a/0x110 [ 626.404979][T13393] ? __fget_files+0x2a/0x420 [ 626.405001][T13393] ? __fget_files+0x2a/0x420 [ 626.405020][T13393] ? __fget_files+0x3a8/0x420 [ 626.405036][T13393] ? __fget_files+0x2a/0x420 [ 626.405057][T13393] security_file_ioctl+0xc3/0x2a0 [ 626.405078][T13393] __se_sys_ioctl+0x47/0x170 [ 626.405098][T13393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.405117][T13393] do_syscall_64+0x174/0x580 [ 626.405140][T13393] ? trace_irq_disable+0x3b/0x140 [ 626.405165][T13393] ? clear_bhb_loop+0x40/0x90 [ 626.405196][T13393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.405214][T13393] RIP: 0033:0x7f712d5ede59 [ 626.405231][T13393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.405245][T13393] RSP: 002b:00007f712b846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 626.405262][T13393] RAX: ffffffffffffffda RBX: 00007f712d875fa0 RCX: 00007f712d5ede59 [ 626.405275][T13393] RDX: 0000200000000480 RSI: 000000004048aecb RDI: 0000000000000006 [ 626.405286][T13393] RBP: 00007f712b846090 R08: 0000000000000000 R09: 0000000000000000 [ 626.405296][T13393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.405306][T13393] R13: 00007f712d876038 R14: 00007f712d875fa0 R15: 00007ffe1be4c678 [ 626.405335][T13393] [ 626.441318][T13393] ERROR: Out of memory at tomoyo_realpath_from_path. [ 626.673440][T13399] FAULT_INJECTION: forcing a failure. [ 626.673440][T13399] name failslab, interval 1, probability 0, space 0, times 0 [ 626.673474][T13399] CPU: 0 UID: 0 PID: 13399 Comm: syz.1.2618 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 626.673495][T13399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 626.673506][T13399] Call Trace: [ 626.673514][T13399] [ 626.673520][T13399] dump_stack_lvl+0xe8/0x150 [ 626.673543][T13399] should_fail_ex+0x467/0x600 [ 626.673563][T13399] should_failslab+0xa8/0x100 [ 626.673577][T13399] __kmalloc_noprof+0xfe/0x780 [ 626.673588][T13399] ? rds_message_alloc+0x47/0x200 [ 626.673688][T13399] ? rds_message_alloc+0x47/0x200 [ 626.673707][T13399] rds_message_alloc+0x47/0x200 [ 626.673728][T13399] rds_sendmsg+0xcaf/0x20e0 [ 626.673764][T13399] ? __pfx_rds_sendmsg+0x10/0x10 [ 626.673778][T13399] ? __lock_acquire+0x683/0x2ce0 [ 626.673792][T13399] ? __lock_acquire+0x683/0x2ce0 [ 626.673804][T13399] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 626.673819][T13399] ? __kernel_text_address+0xd/0x30 [ 626.673830][T13399] ? unwind_get_return_address+0x4d/0x90 [ 626.673843][T13399] ? __pfx_rds_sendmsg+0x10/0x10 [ 626.673855][T13399] sock_sendmsg_nosec+0x13a/0x180 [ 626.673887][T13399] ____sys_sendmsg+0x565/0x870 [ 626.673899][T13399] ? __might_fault+0xaf/0x130 [ 626.673913][T13399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 626.673928][T13399] ? import_iovec+0x73/0xa0 [ 626.673942][T13399] ___sys_sendmsg+0x2a5/0x360 [ 626.673951][T13399] ? __lock_acquire+0x683/0x2ce0 [ 626.673963][T13399] ? __pfx____sys_sendmsg+0x10/0x10 [ 626.673990][T13399] ? __fget_files+0x2a/0x420 [ 626.674000][T13399] ? __fget_files+0x3a8/0x420 [ 626.674015][T13399] __x64_sys_sendmsg+0x1b7/0x290 [ 626.674027][T13399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 626.674046][T13399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.674057][T13399] do_syscall_64+0x174/0x580 [ 626.674072][T13399] ? trace_irq_disable+0x3b/0x140 [ 626.674090][T13399] ? clear_bhb_loop+0x40/0x90 [ 626.674103][T13399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.674113][T13399] RIP: 0033:0x7fd6aee7de59 [ 626.674124][T13399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.674133][T13399] RSP: 002b:00007fd6ad0d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.674146][T13399] RAX: ffffffffffffffda RBX: 00007fd6af105fa0 RCX: 00007fd6aee7de59 [ 626.674154][T13399] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 626.674160][T13399] RBP: 00007fd6ad0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 626.674167][T13399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.674173][T13399] R13: 00007fd6af106038 R14: 00007fd6af105fa0 R15: 00007ffc4f747808 [ 626.674189][T13399] [ 628.001137][ T5619] Bluetooth: hci5: command tx timeout [ 628.387876][ T5728] tipc: Node number set to 2886997005 [ 628.999597][T13432] FAULT_INJECTION: forcing a failure. [ 628.999597][T13432] name failslab, interval 1, probability 0, space 0, times 0 [ 628.999707][T13432] CPU: 0 UID: 0 PID: 13432 Comm: syz.0.2629 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 628.999731][T13432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 628.999743][T13432] Call Trace: [ 628.999752][T13432] [ 628.999762][T13432] dump_stack_lvl+0xe8/0x150 [ 628.999796][T13432] should_fail_ex+0x467/0x600 [ 628.999828][T13432] should_failslab+0xa8/0x100 [ 628.999852][T13432] __kmalloc_noprof+0xfe/0x780 [ 628.999872][T13432] ? ceph_monc_init+0x148/0xb10 [ 628.999952][T13432] ? ceph_monc_init+0x148/0xb10 [ 628.999990][T13432] ceph_monc_init+0x148/0xb10 [ 629.000014][T13432] ? ceph_messenger_init+0x490/0x750 [ 629.000074][T13432] ceph_create_client+0x225/0x310 [ 629.000108][T13432] ceph_get_tree+0x1ca/0x1a40 [ 629.000164][T13432] ? cap_capable+0x123/0x460 [ 629.000183][T13432] ? safesetid_security_capable+0xa9/0x1a0 [ 629.000209][T13432] vfs_get_tree+0x92/0x2a0 [ 629.000235][T13432] vfs_cmd_create+0xa2/0x200 [ 629.000324][T13432] __se_sys_fsconfig+0x6bf/0x810 [ 629.000356][T13432] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 629.000381][T13432] ? ksys_write+0x248/0x270 [ 629.000405][T13432] ? __pfx_ksys_write+0x10/0x10 [ 629.000433][T13432] ? __x64_sys_fsconfig+0x20/0xc0 [ 629.000456][T13432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.000477][T13432] do_syscall_64+0x174/0x580 [ 629.000502][T13432] ? trace_irq_disable+0x3b/0x140 [ 629.000530][T13432] ? clear_bhb_loop+0x40/0x90 [ 629.000554][T13432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.000572][T13432] RIP: 0033:0x7f712d5ede59 [ 629.000592][T13432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.000608][T13432] RSP: 002b:00007f712b825028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 629.000629][T13432] RAX: ffffffffffffffda RBX: 00007f712d876090 RCX: 00007f712d5ede59 [ 629.000644][T13432] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 629.000656][T13432] RBP: 00007f712b825090 R08: 0000000000000000 R09: 0000000000000000 [ 629.000668][T13432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.000680][T13432] R13: 00007f712d876128 R14: 00007f712d876090 R15: 00007ffe1be4c678 [ 629.000711][T13432] [ 629.984821][T13445] sg_write: data in/out 548864/136 bytes for SCSI command 0x0-- guessing data in; [ 629.984821][T13445] program syz.2.2633 not setting count and/or reply_len properly [ 630.029707][T12537] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 630.168625][ T5619] Bluetooth: hci5: command tx timeout [ 630.531715][T12537] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 630.640076][T12537] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 630.736052][T12537] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 630.820731][T13452] FAULT_INJECTION: forcing a failure. [ 630.820731][T13452] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 630.820786][T13452] CPU: 0 UID: 0 PID: 13452 Comm: syz.0.2637 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 630.820810][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 630.820822][T13452] Call Trace: [ 630.820830][T13452] [ 630.820839][T13452] dump_stack_lvl+0xe8/0x150 [ 630.820872][T13452] should_fail_ex+0x467/0x600 [ 630.820904][T13452] prepare_alloc_pages+0x223/0x690 [ 630.820933][T13452] __alloc_frozen_pages_noprof+0x12f/0x380 [ 630.820958][T13452] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 630.820984][T13452] ? __pfx_policy_nodemask+0x10/0x10 [ 630.821013][T13452] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 630.821044][T13452] alloc_pages_mpol+0xce/0x280 [ 630.821070][T13452] alloc_pages_noprof+0xd2/0x2f0 [ 630.821094][T13452] get_free_pages_noprof+0xf/0x80 [ 630.821115][T13452] __kasan_populate_vmalloc+0x38/0x1c0 [ 630.821148][T13452] alloc_vmap_area+0xd1a/0x1420 [ 630.821190][T13452] ? __pfx_alloc_vmap_area+0x10/0x10 [ 630.821215][T13452] ? __kmalloc_cache_node_noprof+0x47b/0x6a0 [ 630.821237][T13452] ? __get_vm_area_node+0x136/0x300 [ 630.821260][T13452] ? __get_vm_area_node+0x136/0x300 [ 630.821290][T13452] __get_vm_area_node+0x1f2/0x300 [ 630.821320][T13452] __vmalloc_node_range_noprof+0x358/0x1730 [ 630.821347][T13452] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 630.821376][T13452] ? finish_task_switch+0x15d/0xc60 [ 630.821466][T13452] ? lock_acquire+0x106/0x350 [ 630.821500][T13452] ? lockdep_hardirqs_on+0x7a/0x110 [ 630.821527][T13452] ? rcu_is_watching+0x15/0xb0 [ 630.821553][T13452] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 630.821579][T13452] ? __schedule+0x16f2/0x5500 [ 630.821613][T13452] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 630.821631][T13452] __vmalloc_noprof+0xd2/0x120 [ 630.821656][T13452] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 630.821679][T13452] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 630.821697][T13452] ? bpf_prog_alloc+0x2a/0x1a0 [ 630.821719][T13452] bpf_prog_alloc+0x3c/0x1a0 [ 630.821741][T13452] bpf_prog_load+0x7f8/0x1c00 [ 630.821773][T13452] ? __pfx_bpf_prog_load+0x10/0x10 [ 630.821792][T13452] ? irqentry_exit+0x218/0x8f0 [ 630.821831][T13452] ? __sys_bpf+0xcf3/0xd90 [ 630.821855][T13452] __sys_bpf+0xd0d/0xd90 [ 630.821881][T13452] ? __pfx___sys_bpf+0x10/0x10 [ 630.821904][T13452] ? __pfx___schedule+0x10/0x10 [ 630.821930][T13452] ? rt_mutex_slowunlock+0x219/0x460 [ 630.821975][T13452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.822002][T13452] __x64_sys_bpf+0xba/0xd0 [ 630.822028][T13452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.822047][T13452] do_syscall_64+0x174/0x580 [ 630.822074][T13452] ? clear_bhb_loop+0x40/0x90 [ 630.822096][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.822115][T13452] RIP: 0033:0x7f712d5ede59 [ 630.822134][T13452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.822150][T13452] RSP: 002b:00007f712b804028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 630.822170][T13452] RAX: ffffffffffffffda RBX: 00007f712d876180 RCX: 00007f712d5ede59 [ 630.822185][T13452] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 630.822198][T13452] RBP: 00007f712b804090 R08: 0000000000000000 R09: 0000000000000000 [ 630.822211][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.822223][T13452] R13: 00007f712d876218 R14: 00007f712d876180 R15: 00007ffe1be4c678 [ 630.822254][T13452] [ 630.822436][T13452] warn_alloc: 1 callbacks suppressed [ 630.822469][T13452] syz.0.2637: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 630.822692][T13452] CPU: 0 UID: 0 PID: 13452 Comm: syz.0.2637 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 630.822715][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 630.822726][T13452] Call Trace: [ 630.822734][T13452] [ 630.822741][T13452] dump_stack_lvl+0xe8/0x150 [ 630.822770][T13452] warn_alloc+0x24c/0x270 [ 630.822790][T13452] ? kasan_quarantine_put+0xbb/0x1f0 [ 630.822820][T13452] ? __pfx_warn_alloc+0x10/0x10 [ 630.822841][T13452] ? __get_vm_area_node+0x20b/0x300 [ 630.822871][T13452] ? __get_vm_area_node+0x20b/0x300 [ 630.822924][T13452] __vmalloc_node_range_noprof+0x37d/0x1730 [ 630.822951][T13452] ? finish_task_switch+0x15d/0xc60 [ 630.822969][T13452] ? lock_acquire+0x106/0x350 [ 630.823001][T13452] ? lockdep_hardirqs_on+0x7a/0x110 [ 630.823028][T13452] ? rcu_is_watching+0x15/0xb0 [ 630.823053][T13452] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 630.823078][T13452] ? __schedule+0x16f2/0x5500 [ 630.823112][T13452] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 630.823130][T13452] __vmalloc_noprof+0xd2/0x120 [ 630.823156][T13452] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 630.823179][T13452] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 630.823197][T13452] ? bpf_prog_alloc+0x2a/0x1a0 [ 630.823218][T13452] bpf_prog_alloc+0x3c/0x1a0 [ 630.823240][T13452] bpf_prog_load+0x7f8/0x1c00 [ 630.823271][T13452] ? __pfx_bpf_prog_load+0x10/0x10 [ 630.823289][T13452] ? irqentry_exit+0x218/0x8f0 [ 630.823328][T13452] ? __sys_bpf+0xcf3/0xd90 [ 630.823353][T13452] __sys_bpf+0xd0d/0xd90 [ 630.823385][T13452] ? __pfx___sys_bpf+0x10/0x10 [ 630.823407][T13452] ? __pfx___schedule+0x10/0x10 [ 630.823434][T13452] ? rt_mutex_slowunlock+0x219/0x460 [ 630.823479][T13452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.823506][T13452] __x64_sys_bpf+0xba/0xd0 [ 630.823531][T13452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.823552][T13452] do_syscall_64+0x174/0x580 [ 630.823578][T13452] ? clear_bhb_loop+0x40/0x90 [ 630.823601][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.823619][T13452] RIP: 0033:0x7f712d5ede59 [ 630.823642][T13452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.823657][T13452] RSP: 002b:00007f712b804028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 630.823676][T13452] RAX: ffffffffffffffda RBX: 00007f712d876180 RCX: 00007f712d5ede59 [ 630.823691][T13452] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 630.823704][T13452] RBP: 00007f712b804090 R08: 0000000000000000 R09: 0000000000000000 [ 630.823716][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.823728][T13452] R13: 00007f712d876218 R14: 00007f712d876180 R15: 00007ffe1be4c678 [ 630.823759][T13452] [ 630.823796][T13452] Mem-Info: [ 630.823847][T13452] active_anon:987 inactive_anon:15822 isolated_anon:0 [ 630.823847][T13452] active_file:23426 inactive_file:40597 isolated_file:0 [ 630.823847][T13452] unevictable:768 dirty:310 writeback:25 [ 630.823847][T13452] slab_reclaimable:12189 slab_unreclaimable:101525 [ 630.823847][T13452] mapped:39603 shmem:10807 pagetables:1576 [ 630.823847][T13452] sec_pagetables:0 bounce:0 [ 630.823847][T13452] kernel_misc_reclaimable:0 [ 630.823847][T13452] free:1294985 free_pcp:2693 free_cma:0 [ 630.823921][T13452] Node 0 active_anon:3948kB inactive_anon:63288kB active_file:93496kB inactive_file:162388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158412kB dirty:1240kB writeback:100kB shmem:41692kB kernel_stack:13204kB pagetables:6164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 630.823995][T13452] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 630.824065][T13452] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 630.824166][T13452] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 630.824357][T13452] Node 0 DMA32 free:1230520kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3948kB inactive_anon:63288kB active_file:93496kB inactive_file:162388kB unevictable:1536kB writepending:1240kB zspages:0kB present:3129332kB managed:2560752kB mlocked:0kB bounce:0kB free_pcp:10752kB local_pcp:4428kB free_cma:0kB [ 630.824469][T13452] lowmem_reserve[]: 0 0 1 1 1 [ 630.824646][T13452] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1860kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 630.824745][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 630.824922][T13452] Node 1 Normal free:3934060kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 630.825022][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 630.825198][T13452] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 630.825740][T13452] Node 0 DMA32: 136*4kB (UE) 330*8kB (UME) 200*16kB (U) 516*32kB (UM) 350*64kB (UME) 187*128kB (UME) 84*256kB (UME) 46*512kB (UM) 24*1024kB (UME) 7*2048kB (ME) 263*4096kB (UM) = 1230448kB [ 630.826443][T13452] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 630.826847][T13452] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 5*16kB (UM) 4*32kB (UM) 4*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3934060kB [ 630.827569][T13452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 630.827608][T13452] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 630.827646][T13452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 630.827684][T13452] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 630.827721][T13452] 74826 total pagecache pages [ 630.827752][T13452] 0 pages in swap cache [ 630.827789][T13452] Free swap = 124996kB [ 630.827827][T13452] Total swap = 124996kB [ 630.827856][T13452] 2097051 pages RAM [ 630.827886][T13452] 0 pages HighMem/MovableOnly [ 630.827924][T13452] 424783 pages reserved [ 630.827952][T13452] 0 pages cma reserved [ 634.324597][T12537] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 634.376721][T12537] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 634.587367][T12537] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 634.739810][T12537] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 636.088807][T13545] FAULT_INJECTION: forcing a failure. [ 636.088807][T13545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.088837][T13545] CPU: 1 UID: 0 PID: 13545 Comm: syz.0.2654 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 636.088854][T13545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 636.088863][T13545] Call Trace: [ 636.088869][T13545] [ 636.088876][T13545] dump_stack_lvl+0xe8/0x150 [ 636.088905][T13545] should_fail_ex+0x467/0x600 [ 636.088932][T13545] _copy_from_user+0x2d/0xb0 [ 636.088950][T13545] copy_from_sockptr_offset+0x66/0xa0 [ 636.088973][T13545] do_tcp_getsockopt+0xd9d/0x2980 [ 636.088998][T13545] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 636.089012][T13545] ? sock_recv_errqueue+0x590/0x5e0 [ 636.089030][T13545] ? is_bpf_text_address+0x26/0x2b0 [ 636.089048][T13545] ? kernel_text_address+0xa5/0xe0 [ 636.089062][T13545] ? __kernel_text_address+0xd/0x30 [ 636.089074][T13545] ? unwind_get_return_address+0x4d/0x90 [ 636.089090][T13545] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 636.089194][T13545] ? __lock_acquire+0x683/0x2ce0 [ 636.089211][T13545] ? _parse_integer_limit+0x192/0x1e0 [ 636.089235][T13545] ? __lock_acquire+0x683/0x2ce0 [ 636.089250][T13545] ? kstrtouint+0x6e/0xe0 [ 636.089269][T13545] ? get_pid_task+0x20/0x1f0 [ 636.089290][T13545] ? __lock_acquire+0x683/0x2ce0 [ 636.089320][T13545] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 636.089339][T13545] tcp_getsockopt+0x83/0x130 [ 636.089355][T13545] ? sock_recv_errqueue+0x590/0x5e0 [ 636.089373][T13545] ? sock_recv_errqueue+0x590/0x5e0 [ 636.089403][T13545] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 636.089423][T13545] do_sock_getsockopt+0x51d/0x7e0 [ 636.089451][T13545] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 636.089483][T13545] ? __fget_files+0x3a8/0x420 [ 636.089497][T13545] ? __fget_files+0x2a/0x420 [ 636.089516][T13545] __x64_sys_getsockopt+0x1aa/0x250 [ 636.089534][T13545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.089549][T13545] do_syscall_64+0x174/0x580 [ 636.089569][T13545] ? trace_irq_disable+0x3b/0x140 [ 636.089594][T13545] ? clear_bhb_loop+0x40/0x90 [ 636.089615][T13545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.089632][T13545] RIP: 0033:0x7f712d5ede59 [ 636.089649][T13545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.089663][T13545] RSP: 002b:00007f712b846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 636.089681][T13545] RAX: ffffffffffffffda RBX: 00007f712d875fa0 RCX: 00007f712d5ede59 [ 636.089693][T13545] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 636.089703][T13545] RBP: 00007f712b846090 R08: 0000200000000140 R09: 0000000000000000 [ 636.089719][T13545] R10: 00002000000013c0 R11: 0000000000000246 R12: 0000000000000001 [ 636.089731][T13545] R13: 00007f712d876038 R14: 00007f712d875fa0 R15: 00007ffe1be4c678 [ 636.089762][T13545] [ 636.741125][ T3112] bridge_slave_1: left allmulticast mode [ 636.741160][ T3112] bridge_slave_1: left promiscuous mode [ 636.741404][ T3112] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.912531][ T3112] bridge_slave_0: left allmulticast mode [ 636.916829][ T3112] bridge_slave_0: left promiscuous mode [ 636.917100][ T3112] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.141032][ T5619] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 637.512856][T13584] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2669'. [ 637.628454][ T5728] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 637.764537][ T5728] usb 2-1: device descriptor read/64, error -71 [ 638.074427][ T5728] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 639.558531][ T5728] usb 2-1: device descriptor read/64, error -71 [ 639.568636][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 639.568711][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 639.596104][T13585] FAULT_INJECTION: forcing a failure. [ 639.596104][T13585] name fail_futex, interval 1, probability 0, space 0, times 1 [ 639.596134][T13585] CPU: 0 UID: 0 PID: 13585 Comm: syz.0.2669 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 639.596164][T13585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 639.596175][T13585] Call Trace: [ 639.596183][T13585] [ 639.596191][T13585] dump_stack_lvl+0xe8/0x150 [ 639.596222][T13585] should_fail_ex+0x467/0x600 [ 639.596253][T13585] get_futex_key+0x8e1/0x1580 [ 639.596369][T13585] ? __pfx_get_futex_key+0x10/0x10 [ 639.596388][T13585] ? __lock_acquire+0x683/0x2ce0 [ 639.596409][T13585] ? __lock_acquire+0x683/0x2ce0 [ 639.596433][T13585] futex_wake+0x119/0x600 [ 639.596488][T13585] ? __pfx_futex_wake+0x10/0x10 [ 639.596510][T13585] ? do_raw_spin_lock+0x12b/0x2f0 [ 639.596550][T13585] do_futex+0x458/0x4e0 [ 639.596576][T13585] ? __pfx_do_futex+0x10/0x10 [ 639.596602][T13585] ? __might_fault+0xaf/0x130 [ 639.596624][T13585] mm_release+0x101/0x290 [ 639.596648][T13585] exit_mm+0x50/0x240 [ 639.596676][T13585] do_exit+0x6cd/0x2360 [ 639.596699][T13585] ? lockdep_hardirqs_on+0x7a/0x110 [ 639.596725][T13585] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 639.596754][T13585] ? __pfx_do_exit+0x10/0x10 [ 639.596779][T13585] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 639.596798][T13585] ? rt_spin_lock+0x1e0/0x400 [ 639.596825][T13585] ? rt_spin_unlock+0x157/0x200 [ 639.596848][T13585] do_group_exit+0x22d/0x2f0 [ 639.596872][T13585] ? rt_spin_unlock+0x163/0x200 [ 639.596894][T13585] get_signal+0x121b/0x12c0 [ 639.596935][T13585] arch_do_signal_or_restart+0xbb/0x860 [ 639.597013][T13585] ? fput+0xa0/0xd0 [ 639.597038][T13585] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 639.597060][T13585] ? __x64_sys_recvmsg+0x260/0x290 [ 639.597099][T13585] exit_to_user_mode_loop+0x104/0x730 [ 639.597140][T13585] ? rcu_is_watching+0x15/0xb0 [ 639.597169][T13585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.597189][T13585] do_syscall_64+0x353/0x580 [ 639.597214][T13585] ? trace_irq_disable+0x3b/0x140 [ 639.597241][T13585] ? clear_bhb_loop+0x40/0x90 [ 639.597263][T13585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.597281][T13585] RIP: 0033:0x7f712d5ede59 [ 639.597299][T13585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.597314][T13585] RSP: 002b:00007f712b825028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 639.597334][T13585] RAX: fffffffffffffe00 RBX: 00007f712d876090 RCX: 00007f712d5ede59 [ 639.597348][T13585] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000003 [ 639.597361][T13585] RBP: 00007f712b825090 R08: 0000000000000000 R09: 0000000000000000 [ 639.597373][T13585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.597385][T13585] R13: 00007f712d876128 R14: 00007f712d876090 R15: 00007ffe1be4c678 [ 639.597416][T13585] [ 639.692756][ T5728] usb usb2-port1: attempt power cycle [ 640.062032][ T5728] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 640.084244][ T5728] usb 2-1: device descriptor read/8, error -71 [ 640.100946][ T3112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.180338][ T3112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.225874][ T3112] bond0 (unregistering): Released all slaves [ 640.347754][ T5728] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 640.362022][ T5728] usb 2-1: device descriptor read/8, error -71 [ 640.480902][ T5728] usb usb2-port1: unable to enumerate USB device [ 640.855498][T13283] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.855620][T13283] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.855844][T13283] bridge_slave_0: entered allmulticast mode [ 640.858295][T13283] bridge_slave_0: entered promiscuous mode [ 640.864320][T13283] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.864416][T13283] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.864552][T13283] bridge_slave_1: entered allmulticast mode [ 640.866413][T13283] bridge_slave_1: entered promiscuous mode [ 642.434721][ T3112] hsr_slave_0: left promiscuous mode [ 642.479929][ T3112] hsr_slave_1: left promiscuous mode [ 642.480887][ T3112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.515091][ T3112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.712122][ T1847] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 642.883121][ T1847] usb 2-1: Using ep0 maxpacket: 16 [ 642.885654][ T1847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 642.885686][ T1847] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 642.885711][ T1847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 642.885723][ T1847] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 642.944867][ T1847] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 642.944896][ T1847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.944917][ T1847] usb 2-1: Product: syz [ 642.944930][ T1847] usb 2-1: Manufacturer: syz [ 642.944945][ T1847] usb 2-1: SerialNumber: syz [ 642.971145][ T1847] usb 2-1: config 0 descriptor?? [ 642.972501][T13621] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 643.045031][ C0] port100 2-1:0.0: NFC: Urb failure (status -71) [ 643.097294][ T1847] port100 2-1:0.0: NFC: Could not get supported command types [ 643.432707][ T5619] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 643.578779][ T3112] team0 (unregistering): Port device team_slave_1 removed [ 643.646869][ T3112] team0 (unregistering): Port device team_slave_0 removed [ 644.065653][T11641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 644.093617][T11641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 644.104051][T11641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 644.107807][T11641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 644.109295][T11641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 644.464255][ T5793] usb 2-1: USB disconnect, device number 49 [ 644.657474][T13283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.715289][T13283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.792752][T13283] team0: Port device team_slave_0 added [ 644.806222][T13283] team0: Port device team_slave_1 added [ 644.921535][T13283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.921552][T13283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.921581][T13283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.971122][T13283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.971140][T13283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.971168][T13283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.105608][T13283] hsr_slave_0: entered promiscuous mode [ 645.111715][T13283] hsr_slave_1: entered promiscuous mode [ 645.647790][T13659] input: syz1 as /devices/virtual/input/input32 [ 646.500854][ T5619] Bluetooth: hci1: command tx timeout [ 646.516933][ T37] audit: type=1326 audit(2000000106.250:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13685 comm="syz.0.2690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712d5ede59 code=0x7ffc0000 [ 646.516968][ T37] audit: type=1326 audit(2000000106.278:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13685 comm="syz.0.2690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712d5ede59 code=0x7ffc0000 [ 646.516990][ T37] audit: type=1326 audit(2000000106.278:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13685 comm="syz.0.2690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712d5ede59 code=0x7ffc0000 [ 646.518856][ T37] audit: type=1326 audit(2000000106.278:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13685 comm="syz.0.2690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712d5ede59 code=0x7ffc0000 [ 646.519490][T13686] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 646.519499][T13686] audit: out of memory in audit_log_start [ 646.519686][ T37] audit: type=1326 audit(2000000106.278:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13685 comm="syz.0.2690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f712d5ae68e code=0x7ffc0000 [ 646.519712][ T37] audit: type=1326 audit(2000000106.278:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13685 comm="syz.0.2690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f712d5ae68e code=0x7ffc0000 [ 646.520490][ T37] audit: type=1326 audit(2000000106.278:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13685 comm="syz.0.2690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712d5ede59 code=0x7ffc0000 [ 646.520516][ T37] audit: type=1326 audit(2000000106.278:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13685 comm="syz.0.2690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f712d5ae68e code=0x7ffc0000 [ 648.749695][ T5619] Bluetooth: hci1: command tx timeout [ 648.834329][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 651.113672][ T5619] Bluetooth: hci1: command tx timeout [ 651.187095][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2710'. [ 651.187117][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2710'. [ 651.514227][T13757] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 651.875348][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 652.017974][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2722'. [ 652.019234][T13778] FAULT_INJECTION: forcing a failure. [ 652.019234][T13778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.019264][T13778] CPU: 0 UID: 0 PID: 13778 Comm: syz.1.2722 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 652.019287][T13778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 652.019298][T13778] Call Trace: [ 652.019306][T13778] [ 652.019315][T13778] dump_stack_lvl+0xe8/0x150 [ 652.019349][T13778] should_fail_ex+0x467/0x600 [ 652.019382][T13778] _copy_from_iter+0x1d3/0x1660 [ 652.019412][T13778] ? rcu_is_watching+0x15/0xb0 [ 652.019436][T13778] ? trace_kmem_cache_alloc+0x29/0xe0 [ 652.019472][T13778] ? __pfx__copy_from_iter+0x10/0x10 [ 652.019503][T13778] ? __alloc_skb+0x276/0x7a0 [ 652.019527][T13778] ? __alloc_skb+0x276/0x7a0 [ 652.019556][T13778] ? netlink_sendmsg+0x650/0xb40 [ 652.019576][T13778] ? skb_put+0x112/0x210 [ 652.019604][T13778] netlink_sendmsg+0x6c0/0xb40 [ 652.019632][T13778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.019653][T13778] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 652.019680][T13778] ? __kernel_text_address+0xd/0x30 [ 652.019699][T13778] ? unwind_get_return_address+0x4d/0x90 [ 652.019724][T13778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.019742][T13778] sock_sendmsg_nosec+0x13a/0x180 [ 652.019769][T13778] ____sys_sendmsg+0x565/0x870 [ 652.019787][T13778] ? __might_fault+0xaf/0x130 [ 652.019812][T13778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 652.019838][T13778] ? import_iovec+0x73/0xa0 [ 652.019858][T13778] ___sys_sendmsg+0x2a5/0x360 [ 652.019875][T13778] ? __lock_acquire+0x683/0x2ce0 [ 652.019898][T13778] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.019950][T13778] ? __fget_files+0x2a/0x420 [ 652.019969][T13778] ? __fget_files+0x3a8/0x420 [ 652.019994][T13778] __x64_sys_sendmsg+0x1b7/0x290 [ 652.020016][T13778] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 652.020052][T13778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.020071][T13778] do_syscall_64+0x174/0x580 [ 652.020098][T13778] ? clear_bhb_loop+0x40/0x90 [ 652.020120][T13778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.020137][T13778] RIP: 0033:0x7fd6aee7de59 [ 652.020155][T13778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.020170][T13778] RSP: 002b:00007fd6ad0d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.020189][T13778] RAX: ffffffffffffffda RBX: 00007fd6af105fa0 RCX: 00007fd6aee7de59 [ 652.020202][T13778] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 652.020213][T13778] RBP: 00007fd6ad0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 652.020224][T13778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.020234][T13778] R13: 00007fd6af106038 R14: 00007fd6af105fa0 R15: 00007ffc4f747808 [ 652.020263][T13778] [ 652.330968][T13782] FAULT_INJECTION: forcing a failure. [ 652.330968][T13782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.330989][T13782] CPU: 1 UID: 0 PID: 13782 Comm: syz.1.2725 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 652.331006][T13782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 652.331017][T13782] Call Trace: [ 652.331024][T13782] [ 652.331032][T13782] dump_stack_lvl+0xe8/0x150 [ 652.331061][T13782] should_fail_ex+0x467/0x600 [ 652.331081][T13782] _copy_to_user+0x31/0xb0 [ 652.331094][T13782] simple_read_from_buffer+0xe1/0x170 [ 652.331108][T13782] proc_fail_nth_read+0x1be/0x230 [ 652.331122][T13782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 652.331135][T13782] ? rw_verify_area+0x250/0x4d0 [ 652.331148][T13782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 652.331158][T13782] vfs_read+0x219/0xa90 [ 652.331174][T13782] ? __pfx_vfs_read+0x10/0x10 [ 652.331187][T13782] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 652.331203][T13782] ? lockdep_hardirqs_on+0x7a/0x110 [ 652.331218][T13782] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 652.331232][T13782] ? mutex_lock_nested+0x152/0x1d0 [ 652.331243][T13782] ? fdget_pos+0x252/0x320 [ 652.331258][T13782] ksys_read+0x156/0x270 [ 652.331271][T13782] ? __pfx_ksys_read+0x10/0x10 [ 652.331287][T13782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.331298][T13782] do_syscall_64+0x174/0x580 [ 652.331313][T13782] ? trace_irq_disable+0x3b/0x140 [ 652.331331][T13782] ? clear_bhb_loop+0x40/0x90 [ 652.331344][T13782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.331354][T13782] RIP: 0033:0x7fd6aee3e68e [ 652.331365][T13782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 652.331374][T13782] RSP: 002b:00007fd6ad0d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 652.331385][T13782] RAX: ffffffffffffffda RBX: 00007fd6ad0d66c0 RCX: 00007fd6aee3e68e [ 652.331393][T13782] RDX: 000000000000000f RSI: 00007fd6ad0d60a0 RDI: 0000000000000004 [ 652.331400][T13782] RBP: 00007fd6ad0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 652.331406][T13782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.331412][T13782] R13: 00007fd6af106038 R14: 00007fd6af105fa0 R15: 00007ffc4f747808 [ 652.331428][T13782] [ 653.339915][ T5619] Bluetooth: hci1: command tx timeout [ 655.526365][T13828] FAULT_INJECTION: forcing a failure. [ 655.526365][T13828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.526399][T13828] CPU: 0 UID: 0 PID: 13828 Comm: syz.1.2739 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 655.526422][T13828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 655.526433][T13828] Call Trace: [ 655.526441][T13828] [ 655.526449][T13828] dump_stack_lvl+0xe8/0x150 [ 655.526481][T13828] should_fail_ex+0x467/0x600 [ 655.526511][T13828] _copy_from_user+0x2d/0xb0 [ 655.526533][T13828] ___sys_sendmsg+0x1c6/0x360 [ 655.526552][T13828] ? __lock_acquire+0x683/0x2ce0 [ 655.526577][T13828] ? __pfx____sys_sendmsg+0x10/0x10 [ 655.526629][T13828] ? __fget_files+0x2a/0x420 [ 655.526647][T13828] ? __fget_files+0x3a8/0x420 [ 655.526676][T13828] __x64_sys_sendmsg+0x1b7/0x290 [ 655.526698][T13828] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 655.526733][T13828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.526753][T13828] do_syscall_64+0x174/0x580 [ 655.526778][T13828] ? trace_irq_disable+0x3b/0x140 [ 655.526805][T13828] ? clear_bhb_loop+0x40/0x90 [ 655.526828][T13828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.526847][T13828] RIP: 0033:0x7fd6aee7de59 [ 655.526864][T13828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.526880][T13828] RSP: 002b:00007fd6ad0d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.526901][T13828] RAX: ffffffffffffffda RBX: 00007fd6af105fa0 RCX: 00007fd6aee7de59 [ 655.526916][T13828] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 655.526928][T13828] RBP: 00007fd6ad0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 655.526941][T13828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.526953][T13828] R13: 00007fd6af106038 R14: 00007fd6af105fa0 R15: 00007ffc4f747808 [ 655.526984][T13828] [ 655.997496][T13835] FAULT_INJECTION: forcing a failure. [ 655.997496][T13835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.997529][T13835] CPU: 0 UID: 0 PID: 13835 Comm: syz.1.2742 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 655.997553][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 655.997564][T13835] Call Trace: [ 655.997573][T13835] [ 655.997582][T13835] dump_stack_lvl+0xe8/0x150 [ 655.997616][T13835] should_fail_ex+0x467/0x600 [ 655.997648][T13835] _copy_to_user+0x31/0xb0 [ 655.997672][T13835] simple_read_from_buffer+0xe1/0x170 [ 655.997698][T13835] proc_fail_nth_read+0x1be/0x230 [ 655.997722][T13835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 655.997744][T13835] ? rw_verify_area+0x250/0x4d0 [ 655.997768][T13835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 655.997787][T13835] vfs_read+0x219/0xa90 [ 655.997817][T13835] ? __pfx_vfs_read+0x10/0x10 [ 655.997841][T13835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 655.997869][T13835] ? lockdep_hardirqs_on+0x7a/0x110 [ 655.997895][T13835] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 655.997919][T13835] ? mutex_lock_nested+0x152/0x1d0 [ 655.997939][T13835] ? fdget_pos+0x252/0x320 [ 655.997966][T13835] ksys_read+0x156/0x270 [ 655.997990][T13835] ? __pfx_ksys_read+0x10/0x10 [ 655.998019][T13835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.998040][T13835] do_syscall_64+0x174/0x580 [ 655.998068][T13835] ? clear_bhb_loop+0x40/0x90 [ 655.998091][T13835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.998109][T13835] RIP: 0033:0x7fd6aee3e68e [ 655.998127][T13835] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 655.998143][T13835] RSP: 002b:00007fd6ad093fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 655.998163][T13835] RAX: ffffffffffffffda RBX: 00007fd6ad0946c0 RCX: 00007fd6aee3e68e [ 655.998178][T13835] RDX: 000000000000000f RSI: 00007fd6ad0940a0 RDI: 0000000000000006 [ 655.998190][T13835] RBP: 00007fd6ad094090 R08: 0000000000000000 R09: 0000000000000000 [ 655.998202][T13835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.998214][T13835] R13: 00007fd6af106218 R14: 00007fd6af106180 R15: 00007ffc4f747808 [ 655.998259][T13835] [ 658.527489][ T5735] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 658.560160][T13636] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.560321][T13636] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.560510][T13636] bridge_slave_0: entered allmulticast mode [ 658.565246][T13636] bridge_slave_0: entered promiscuous mode [ 658.687722][ T5735] usb 2-1: Using ep0 maxpacket: 8 [ 658.690124][ T5735] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 658.690166][ T5735] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 658.690205][ T5735] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 658.690232][ T5735] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 658.690258][ T5735] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.690283][ T5735] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 658.690309][ T5735] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 658.690336][ T5735] usb 2-1: config 168 interface 0 has no altsetting 0 [ 658.691720][ T5735] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 658.691757][ T5735] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 658.691795][ T5735] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 658.691823][ T5735] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 658.691849][ T5735] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.691875][ T5735] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 658.691901][ T5735] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 658.691929][ T5735] usb 2-1: config 168 interface 0 has no altsetting 0 [ 658.693159][ T5735] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 658.693194][ T5735] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 658.693240][ T5735] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 658.693267][ T5735] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 658.693293][ T5735] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.693316][ T5735] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 658.693342][ T5735] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 658.693369][ T5735] usb 2-1: config 168 interface 0 has no altsetting 0 [ 658.696838][ T5735] usb 2-1: string descriptor 0 read error: -22 [ 658.696987][ T5735] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 658.697011][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.037168][ T5735] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 659.293671][ T5735] usb 2-1: USB disconnect, device number 50 [ 659.439096][T13943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.580191][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2771'. [ 659.639463][T13636] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.639594][T13636] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.639819][T13636] bridge_slave_1: entered allmulticast mode [ 659.645856][T13636] bridge_slave_1: entered promiscuous mode [ 660.099210][T13636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.104079][T13636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.381739][T13636] team0: Port device team_slave_0 added [ 660.384946][T13636] team0: Port device team_slave_1 added [ 660.532887][T13636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.532904][T13636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.532926][T13636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.536691][T13986] FAULT_INJECTION: forcing a failure. [ 660.536691][T13986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.536722][T13986] CPU: 0 UID: 0 PID: 13986 Comm: syz.0.2786 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 660.536744][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 660.536755][T13986] Call Trace: [ 660.536762][T13986] [ 660.536771][T13986] dump_stack_lvl+0xe8/0x150 [ 660.536804][T13986] should_fail_ex+0x467/0x600 [ 660.536835][T13986] _copy_from_user+0x2d/0xb0 [ 660.536857][T13986] ___sys_sendmsg+0x1c6/0x360 [ 660.536876][T13986] ? __lock_acquire+0x683/0x2ce0 [ 660.536901][T13986] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.536963][T13986] ? __fget_files+0x2a/0x420 [ 660.536981][T13986] ? __fget_files+0x3a8/0x420 [ 660.537008][T13986] __x64_sys_sendmsg+0x1b7/0x290 [ 660.537030][T13986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 660.537065][T13986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.537087][T13986] do_syscall_64+0x174/0x580 [ 660.537112][T13986] ? trace_irq_disable+0x3b/0x140 [ 660.537139][T13986] ? clear_bhb_loop+0x40/0x90 [ 660.537163][T13986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.537181][T13986] RIP: 0033:0x7f712d5ede59 [ 660.537200][T13986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.537216][T13986] RSP: 002b:00007f712b846028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.537236][T13986] RAX: ffffffffffffffda RBX: 00007f712d875fa0 RCX: 00007f712d5ede59 [ 660.537251][T13986] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 660.537263][T13986] RBP: 00007f712b846090 R08: 0000000000000000 R09: 0000000000000000 [ 660.537277][T13986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.537289][T13986] R13: 00007f712d876038 R14: 00007f712d875fa0 R15: 00007ffe1be4c678 [ 660.537319][T13986] [ 660.557766][ T5793] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 660.592446][T13636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.592463][T13636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.592490][T13636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.728773][ T5793] usb 2-1: Using ep0 maxpacket: 8 [ 660.762380][ T5793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.762454][ T5793] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 660.762482][ T5793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 660.762509][ T5793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 660.762538][ T5793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 660.762564][ T5793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 660.762587][ T5793] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 660.854579][ T5793] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 660.854610][ T5793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.854632][ T5793] usb 2-1: Product: syz [ 660.854646][ T5793] usb 2-1: Manufacturer: syz [ 660.854661][ T5793] usb 2-1: SerialNumber: syz [ 660.975295][T13996] FAULT_INJECTION: forcing a failure. [ 660.975295][T13996] name failslab, interval 1, probability 0, space 0, times 0 [ 660.975330][T13996] CPU: 1 UID: 0 PID: 13996 Comm: syz.2.2790 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 660.975353][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 660.975365][T13996] Call Trace: [ 660.975373][T13996] [ 660.975381][T13996] dump_stack_lvl+0xe8/0x150 [ 660.975414][T13996] should_fail_ex+0x467/0x600 [ 660.975446][T13996] should_failslab+0xa8/0x100 [ 660.975471][T13996] __kmalloc_noprof+0xfe/0x780 [ 660.975490][T13996] ? sock_kmalloc+0xd6/0x160 [ 660.975508][T13996] ? sock_kmalloc+0xd6/0x160 [ 660.975533][T13996] sock_kmalloc+0xd6/0x160 [ 660.975556][T13996] ____sys_sendmsg+0x1c8/0x870 [ 660.975584][T13996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.975611][T13996] ? import_iovec+0x73/0xa0 [ 660.975633][T13996] ___sys_sendmsg+0x2a5/0x360 [ 660.975651][T13996] ? __lock_acquire+0x683/0x2ce0 [ 660.975675][T13996] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.975696][T13996] ? kstrtouint+0x6e/0xe0 [ 660.975743][T13996] ? __fget_files+0x2a/0x420 [ 660.975761][T13996] ? __fget_files+0x3a8/0x420 [ 660.975787][T13996] __sys_sendmmsg+0x279/0x4d0 [ 660.975815][T13996] ? __pfx___sys_sendmmsg+0x10/0x10 [ 660.975841][T13996] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 660.975876][T13996] ? ksys_write+0x248/0x270 [ 660.975900][T13996] ? __pfx_ksys_write+0x10/0x10 [ 660.975928][T13996] __x64_sys_sendmmsg+0xa0/0xc0 [ 660.975947][T13996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.975966][T13996] do_syscall_64+0x174/0x580 [ 660.975990][T13996] ? trace_irq_disable+0x3b/0x140 [ 660.976018][T13996] ? clear_bhb_loop+0x40/0x90 [ 660.976040][T13996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.976065][T13996] RIP: 0033:0x7fac735fde59 [ 660.976082][T13996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.976099][T13996] RSP: 002b:00007fac71856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 660.976120][T13996] RAX: ffffffffffffffda RBX: 00007fac73885fa0 RCX: 00007fac735fde59 [ 660.976134][T13996] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000003 [ 660.976147][T13996] RBP: 00007fac71856090 R08: 0000000000000000 R09: 0000000000000000 [ 660.976159][T13996] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 660.976170][T13996] R13: 00007fac73886038 R14: 00007fac73885fa0 R15: 00007fff939c4eb8 [ 660.976208][T13996] [ 661.245162][ T5793] usb 2-1: config 0 descriptor?? [ 661.245994][T13978] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 661.268548][ T5793] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 661.268812][ T5793] ati_remote 2-1:0.0: probe with driver ati_remote failed with error -5 [ 661.496625][T14011] FAULT_INJECTION: forcing a failure. [ 661.496625][T14011] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 661.496659][T14011] CPU: 1 UID: 0 PID: 14011 Comm: syz.2.2795 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 661.496682][T14011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 661.496694][T14011] Call Trace: [ 661.496702][T14011] [ 661.496710][T14011] dump_stack_lvl+0xe8/0x150 [ 661.496743][T14011] should_fail_ex+0x467/0x600 [ 661.496774][T14011] prepare_alloc_pages+0x223/0x690 [ 661.496802][T14011] __alloc_frozen_pages_noprof+0x12f/0x380 [ 661.496827][T14011] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 661.496852][T14011] ? __pfx_policy_nodemask+0x10/0x10 [ 661.496875][T14011] ? reacquire_held_locks+0x104/0x190 [ 661.496906][T14011] alloc_pages_mpol+0xce/0x280 [ 661.496931][T14011] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 661.496956][T14011] swap_cache_alloc_folio+0x1ac/0x5a0 [ 661.496989][T14011] read_swap_cache_async+0xe4/0x210 [ 661.497017][T14011] ? __pfx_read_swap_cache_async+0x10/0x10 [ 661.497045][T14011] ? swapin_walk_pmd_entry+0x2b4/0x540 [ 661.497071][T14011] swapin_walk_pmd_entry+0x2dd/0x540 [ 661.497098][T14011] ? __pfx_swapin_walk_pmd_entry+0x10/0x10 [ 661.497121][T14011] ? __lock_acquire+0x683/0x2ce0 [ 661.497158][T14011] walk_pgd_range+0xece/0x1c80 [ 661.497218][T14011] ? __pfx_walk_pgd_range+0x10/0x10 [ 661.497245][T14011] ? is_bpf_text_address+0x292/0x2b0 [ 661.497265][T14011] ? is_bpf_text_address+0x26/0x2b0 [ 661.497288][T14011] __walk_page_range+0x16d/0x730 [ 661.497312][T14011] ? __kernel_text_address+0xd/0x30 [ 661.497330][T14011] ? unwind_get_return_address+0x4d/0x90 [ 661.497357][T14011] ? __lock_acquire+0x683/0x2ce0 [ 661.497384][T14011] walk_page_range_vma_unsafe+0x309/0x410 [ 661.497416][T14011] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 661.497445][T14011] ? do_raw_spin_lock+0x12b/0x2f0 [ 661.497473][T14011] ? walk_page_range_vma+0x6b/0x90 [ 661.497499][T14011] madvise_vma_behavior+0x1353/0x42b0 [ 661.497528][T14011] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 661.497547][T14011] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 661.497571][T14011] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 661.497596][T14011] ? try_to_take_rt_mutex+0x842/0xb00 [ 661.497617][T14011] ? up_write+0x5a/0x190 [ 661.497733][T14011] ? __lock_acquire+0x683/0x2ce0 [ 661.497755][T14011] ? __lock_acquire+0x683/0x2ce0 [ 661.497781][T14011] ? __lock_acquire+0x683/0x2ce0 [ 661.497807][T14011] ? do_raw_spin_lock+0x12b/0x2f0 [ 661.497834][T14011] ? unwind_next_frame+0x8f/0x2550 [ 661.497860][T14011] ? is_bpf_text_address+0x26/0x2b0 [ 661.497895][T14011] ? mas_prev_slot+0xb79/0xc00 [ 661.497936][T14011] ? find_vma_prev+0x123/0x1b0 [ 661.497964][T14011] ? __pfx_find_vma_prev+0x10/0x10 [ 661.497998][T14011] ? __lock_acquire+0x683/0x2ce0 [ 661.498024][T14011] madvise_walk_vmas+0x576/0xb00 [ 661.498052][T14011] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 661.498077][T14011] ? blk_start_plug+0x6e/0x1b0 [ 661.498144][T14011] madvise_do_behavior+0x385/0x540 [ 661.498170][T14011] ? __pfx_madvise_do_behavior+0x10/0x10 [ 661.498188][T14011] ? down_read+0x156/0x200 [ 661.498232][T14011] do_madvise+0x26f/0x330 [ 661.498260][T14011] ? __pfx_do_madvise+0x10/0x10 [ 661.498290][T14011] ? __pfx_ksys_write+0x10/0x10 [ 661.498313][T14011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.498331][T14011] __x64_sys_madvise+0xa6/0xc0 [ 661.498348][T14011] do_syscall_64+0x174/0x580 [ 661.498370][T14011] ? clear_bhb_loop+0x40/0x90 [ 661.498388][T14011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.498403][T14011] RIP: 0033:0x7fac735fde59 [ 661.498418][T14011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.498430][T14011] RSP: 002b:00007fac71814028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 661.498447][T14011] RAX: ffffffffffffffda RBX: 00007fac73886180 RCX: 00007fac735fde59 [ 661.498458][T14011] RDX: 0000000000000003 RSI: 0000000000600000 RDI: 0000200000000000 [ 661.498468][T14011] RBP: 00007fac71814090 R08: 0000000000000000 R09: 0000000000000000 [ 661.498478][T14011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.498487][T14011] R13: 00007fac73886218 R14: 00007fac73886180 R15: 00007fff939c4eb8 [ 661.498511][T14011] [ 662.384773][T14014] FAULT_INJECTION: forcing a failure. [ 662.384773][T14014] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 662.384822][T14014] CPU: 0 UID: 0 PID: 14014 Comm: syz.0.2799 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 662.384844][T14014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 662.384856][T14014] Call Trace: [ 662.384863][T14014] [ 662.384871][T14014] dump_stack_lvl+0xe8/0x150 [ 662.384902][T14014] should_fail_ex+0x467/0x600 [ 662.384935][T14014] prepare_alloc_pages+0x223/0x690 [ 662.384962][T14014] __alloc_frozen_pages_noprof+0x12f/0x380 [ 662.384984][T14014] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 662.385010][T14014] ? __pfx_policy_nodemask+0x10/0x10 [ 662.385031][T14014] ? lockdep_hardirqs_on+0x7a/0x110 [ 662.385059][T14014] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 662.385085][T14014] alloc_pages_mpol+0xce/0x280 [ 662.385109][T14014] alloc_pages_noprof+0xd2/0x2f0 [ 662.385132][T14014] get_free_pages_noprof+0xf/0x80 [ 662.385153][T14014] __kasan_populate_vmalloc+0x38/0x1c0 [ 662.385178][T14014] ? rt_spin_unlock+0x163/0x200 [ 662.385200][T14014] alloc_vmap_area+0xd1a/0x1420 [ 662.385240][T14014] ? __pfx_alloc_vmap_area+0x10/0x10 [ 662.385264][T14014] ? __kmalloc_cache_node_noprof+0x47b/0x6a0 [ 662.385285][T14014] ? __get_vm_area_node+0x136/0x300 [ 662.385308][T14014] ? __get_vm_area_node+0x136/0x300 [ 662.385338][T14014] __get_vm_area_node+0x1f2/0x300 [ 662.385368][T14014] __vmalloc_node_range_noprof+0x358/0x1730 [ 662.385395][T14014] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 662.385422][T14014] ? is_bpf_text_address+0x26/0x2b0 [ 662.385460][T14014] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 662.385484][T14014] ? is_bpf_text_address+0x26/0x2b0 [ 662.385506][T14014] ? kernel_text_address+0xa5/0xe0 [ 662.385531][T14014] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 662.385549][T14014] __vmalloc_noprof+0xd2/0x120 [ 662.385574][T14014] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 662.385602][T14014] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 662.385621][T14014] ? bpf_prog_alloc+0x2a/0x1a0 [ 662.385641][T14014] bpf_prog_alloc+0x3c/0x1a0 [ 662.385663][T14014] bpf_prog_load+0x7f8/0x1c00 [ 662.385693][T14014] ? __pfx_bpf_prog_load+0x10/0x10 [ 662.385736][T14014] __sys_bpf+0xd0d/0xd90 [ 662.385761][T14014] ? __pfx___sys_bpf+0x10/0x10 [ 662.385783][T14014] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 662.385812][T14014] ? rt_mutex_slowunlock+0x219/0x460 [ 662.385851][T14014] ? ksys_write+0x248/0x270 [ 662.385875][T14014] ? __pfx_ksys_write+0x10/0x10 [ 662.385901][T14014] __x64_sys_bpf+0xba/0xd0 [ 662.385927][T14014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.385948][T14014] do_syscall_64+0x174/0x580 [ 662.385972][T14014] ? trace_irq_disable+0x3b/0x140 [ 662.385997][T14014] ? clear_bhb_loop+0x40/0x90 [ 662.386017][T14014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.386035][T14014] RIP: 0033:0x7f712d5ede59 [ 662.386053][T14014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.386067][T14014] RSP: 002b:00007f712b846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 662.386087][T14014] RAX: ffffffffffffffda RBX: 00007f712d875fa0 RCX: 00007f712d5ede59 [ 662.386101][T14014] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 662.386113][T14014] RBP: 00007f712b846090 R08: 0000000000000000 R09: 0000000000000000 [ 662.386124][T14014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.386133][T14014] R13: 00007f712d876038 R14: 00007f712d875fa0 R15: 00007ffe1be4c678 [ 662.386160][T14014] [ 662.386487][T14014] syz.0.2799: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 662.386547][T14014] CPU: 0 UID: 0 PID: 14014 Comm: syz.0.2799 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 662.386568][T14014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 662.386579][T14014] Call Trace: [ 662.386586][T14014] [ 662.386593][T14014] dump_stack_lvl+0xe8/0x150 [ 662.386630][T14014] warn_alloc+0x24c/0x270 [ 662.386649][T14014] ? kasan_quarantine_put+0xbb/0x1f0 [ 662.386676][T14014] ? __pfx_warn_alloc+0x10/0x10 [ 662.386697][T14014] ? __get_vm_area_node+0x20b/0x300 [ 662.386726][T14014] ? __get_vm_area_node+0x20b/0x300 [ 662.386757][T14014] __vmalloc_node_range_noprof+0x37d/0x1730 [ 662.386788][T14014] ? is_bpf_text_address+0x26/0x2b0 [ 662.386823][T14014] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 662.386846][T14014] ? is_bpf_text_address+0x26/0x2b0 [ 662.386867][T14014] ? kernel_text_address+0xa5/0xe0 [ 662.386891][T14014] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 662.386908][T14014] __vmalloc_noprof+0xd2/0x120 [ 662.386933][T14014] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 662.386953][T14014] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 662.386970][T14014] ? bpf_prog_alloc+0x2a/0x1a0 [ 662.386989][T14014] bpf_prog_alloc+0x3c/0x1a0 [ 662.387010][T14014] bpf_prog_load+0x7f8/0x1c00 [ 662.387038][T14014] ? __pfx_bpf_prog_load+0x10/0x10 [ 662.387079][T14014] __sys_bpf+0xd0d/0xd90 [ 662.387103][T14014] ? __pfx___sys_bpf+0x10/0x10 [ 662.387123][T14014] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 662.387152][T14014] ? rt_mutex_slowunlock+0x219/0x460 [ 662.387189][T14014] ? ksys_write+0x248/0x270 [ 662.387211][T14014] ? __pfx_ksys_write+0x10/0x10 [ 662.387237][T14014] __x64_sys_bpf+0xba/0xd0 [ 662.387264][T14014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.387285][T14014] do_syscall_64+0x174/0x580 [ 662.387308][T14014] ? trace_irq_disable+0x3b/0x140 [ 662.387333][T14014] ? clear_bhb_loop+0x40/0x90 [ 662.387356][T14014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.387373][T14014] RIP: 0033:0x7f712d5ede59 [ 662.387395][T14014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.387408][T14014] RSP: 002b:00007f712b846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 662.387426][T14014] RAX: ffffffffffffffda RBX: 00007f712d875fa0 RCX: 00007f712d5ede59 [ 662.387439][T14014] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 662.387452][T14014] RBP: 00007f712b846090 R08: 0000000000000000 R09: 0000000000000000 [ 662.387464][T14014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.387476][T14014] R13: 00007f712d876038 R14: 00007f712d875fa0 R15: 00007ffe1be4c678 [ 662.387507][T14014] [ 662.387514][T14014] Mem-Info: [ 662.387524][T14014] active_anon:200 inactive_anon:5728 isolated_anon:0 [ 662.387524][T14014] active_file:24544 inactive_file:41227 isolated_file:0 [ 662.387524][T14014] unevictable:768 dirty:214 writeback:0 [ 662.387524][T14014] slab_reclaimable:12603 slab_unreclaimable:103104 [ 662.387524][T14014] mapped:31088 shmem:1301 pagetables:1412 [ 662.387524][T14014] sec_pagetables:0 bounce:0 [ 662.387524][T14014] kernel_misc_reclaimable:0 [ 662.387524][T14014] free:1298686 free_pcp:4818 free_cma:0 [ 662.387573][T14014] Node 0 active_anon:800kB inactive_anon:22912kB active_file:97968kB inactive_file:164908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124352kB dirty:856kB writeback:0kB shmem:3668kB kernel_stack:13020kB pagetables:5508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 662.387626][T14014] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 662.387663][T14014] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 662.387731][T14014] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 662.387762][T14014] Node 0 DMA32 free:1245324kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:800kB inactive_anon:22912kB active_file:97968kB inactive_file:164908kB unevictable:1536kB writepending:856kB zspages:12kB present:3129332kB managed:2560752kB mlocked:0kB bounce:0kB free_pcp:19252kB local_pcp:17632kB free_cma:0kB [ 662.387815][T14014] lowmem_reserve[]: 0 0 1 1 1 [ 662.387840][T14014] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1860kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 662.387893][T14014] lowmem_reserve[]: 0 0 0 0 0 [ 662.387922][T14014] Node 1 Normal free:3934060kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 662.388006][T14014] lowmem_reserve[]: 0 0 0 0 0 [ 662.388036][T14014] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 662.388140][T14014] Node 0 DMA32: 1451*4kB (UME) 1252*8kB (UME) 1034*16kB (UME) 849*32kB (UME) 423*64kB (UME) 136*128kB (UME) 58*256kB (UM) 46*512kB (UM) 15*1024kB (UM) 5*2048kB (ME) 263*4096kB (UM) = 1245260kB [ 662.388279][T14014] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 662.388367][T14014] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 5*16kB (UM) 4*32kB (UM) 4*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3934060kB [ 662.388504][T14014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 662.388520][T14014] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 662.388535][T14014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 662.388550][T14014] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 662.388566][T14014] 67070 total pagecache pages [ 662.388573][T14014] 2 pages in swap cache [ 662.388580][T14014] Free swap = 124996kB [ 662.388587][T14014] Total swap = 124996kB [ 662.388601][T14014] 2097051 pages RAM [ 662.388607][T14014] 0 pages HighMem/MovableOnly [ 662.388615][T14014] 424783 pages reserved [ 662.388621][T14014] 0 pages cma reserved [ 662.457613][T14017] FAULT_INJECTION: forcing a failure. [ 662.457613][T14017] name failslab, interval 1, probability 0, space 0, times 0 [ 662.457646][T14017] CPU: 0 UID: 0 PID: 14017 Comm: syz.2.2798 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 662.457668][T14017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 662.457679][T14017] Call Trace: [ 662.457687][T14017] [ 662.457695][T14017] dump_stack_lvl+0xe8/0x150 [ 662.457736][T14017] should_fail_ex+0x467/0x600 [ 662.457766][T14017] should_failslab+0xa8/0x100 [ 662.457790][T14017] __kmalloc_noprof+0xfe/0x780 [ 662.457809][T14017] ? sock_kmalloc+0xd6/0x160 [ 662.457828][T14017] ? sock_kmalloc+0xd6/0x160 [ 662.457853][T14017] sock_kmalloc+0xd6/0x160 [ 662.457874][T14017] skcipher_recvmsg+0x564/0xe10 [ 662.457913][T14017] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 662.457932][T14017] ? __lock_acquire+0x683/0x2ce0 [ 662.457955][T14017] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 662.457978][T14017] ? security_socket_recvmsg+0x7e/0x2c0 [ 662.458004][T14017] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 662.458024][T14017] sock_recvmsg+0x196/0x1e0 [ 662.458051][T14017] ____sys_recvmsg+0x1f2/0x4b0 [ 662.458079][T14017] ? __pfx_____sys_recvmsg+0x10/0x10 [ 662.458112][T14017] ? import_iovec+0x73/0xa0 [ 662.458137][T14017] ___sys_recvmsg+0x213/0x5a0 [ 662.458162][T14017] ? __pfx____sys_recvmsg+0x10/0x10 [ 662.458185][T14017] ? __fget_files+0x2a/0x420 [ 662.458219][T14017] ? __fget_files+0x3a8/0x420 [ 662.458246][T14017] __x64_sys_recvmsg+0x1b4/0x290 [ 662.458268][T14017] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 662.458303][T14017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.458323][T14017] do_syscall_64+0x174/0x580 [ 662.458351][T14017] ? clear_bhb_loop+0x40/0x90 [ 662.458374][T14017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.458392][T14017] RIP: 0033:0x7fac735fde59 [ 662.458410][T14017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.458425][T14017] RSP: 002b:00007fac71856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 662.458445][T14017] RAX: ffffffffffffffda RBX: 00007fac73885fa0 RCX: 00007fac735fde59 [ 662.458459][T14017] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 662.458472][T14017] RBP: 00007fac71856090 R08: 0000000000000000 R09: 0000000000000000 [ 662.458483][T14017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.458495][T14017] R13: 00007fac73886038 R14: 00007fac73885fa0 R15: 00007fff939c4eb8 [ 662.458525][T14017] [ 662.622436][T13636] hsr_slave_0: entered promiscuous mode [ 662.628422][T13636] hsr_slave_1: entered promiscuous mode [ 662.632706][T13636] debugfs: 'hsr0' already exists in 'hsr' [ 662.632737][T13636] Cannot create hsr debugfs directory [ 662.643445][ T1847] usb 2-1: USB disconnect, device number 51 [ 663.440648][T14027] random: crng reseeded on system resumption [ 665.386803][T14056] FAULT_INJECTION: forcing a failure. [ 665.386803][T14056] name failslab, interval 1, probability 0, space 0, times 0 [ 665.386834][T14056] CPU: 0 UID: 0 PID: 14056 Comm: syz.0.2810 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 665.386856][T14056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 665.386867][T14056] Call Trace: [ 665.386874][T14056] [ 665.386882][T14056] dump_stack_lvl+0xe8/0x150 [ 665.386914][T14056] should_fail_ex+0x467/0x600 [ 665.386945][T14056] should_failslab+0xa8/0x100 [ 665.386970][T14056] __kmalloc_noprof+0xfe/0x780 [ 665.386993][T14056] ? sock_kmalloc+0xd6/0x160 [ 665.387012][T14056] ? sock_kmalloc+0xd6/0x160 [ 665.387037][T14056] sock_kmalloc+0xd6/0x160 [ 665.387058][T14056] skcipher_recvmsg+0x564/0xe10 [ 665.387096][T14056] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 665.387115][T14056] ? __lock_acquire+0x683/0x2ce0 [ 665.387136][T14056] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 665.387159][T14056] ? security_socket_recvmsg+0x7e/0x2c0 [ 665.387185][T14056] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 665.387206][T14056] sock_recvmsg+0x196/0x1e0 [ 665.387232][T14056] ____sys_recvmsg+0x1f2/0x4b0 [ 665.387261][T14056] ? __pfx_____sys_recvmsg+0x10/0x10 [ 665.387295][T14056] ? import_iovec+0x73/0xa0 [ 665.387318][T14056] ___sys_recvmsg+0x213/0x5a0 [ 665.387341][T14056] ? __pfx____sys_recvmsg+0x10/0x10 [ 665.387364][T14056] ? __fget_files+0x2a/0x420 [ 665.387407][T14056] ? __fget_files+0x3a8/0x420 [ 665.387436][T14056] __x64_sys_recvmsg+0x1b4/0x290 [ 665.387458][T14056] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 665.387494][T14056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.387514][T14056] do_syscall_64+0x174/0x580 [ 665.387540][T14056] ? trace_irq_disable+0x3b/0x140 [ 665.387567][T14056] ? clear_bhb_loop+0x40/0x90 [ 665.387588][T14056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.387605][T14056] RIP: 0033:0x7f712d5ede59 [ 665.387622][T14056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.387637][T14056] RSP: 002b:00007f712b846028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 665.387656][T14056] RAX: ffffffffffffffda RBX: 00007f712d875fa0 RCX: 00007f712d5ede59 [ 665.387668][T14056] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 665.387679][T14056] RBP: 00007f712b846090 R08: 0000000000000000 R09: 0000000000000000 [ 665.387691][T14056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.387702][T14056] R13: 00007f712d876038 R14: 00007f712d875fa0 R15: 00007ffe1be4c678 [ 665.387731][T14056] [ 665.824822][T13283] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 666.637825][T13283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 666.791717][T13283] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 668.747835][T13283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 668.782099][T13283] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 668.830744][T13283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 668.864361][ T1847] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 669.878571][ T1847] usb 2-1: Using ep0 maxpacket: 8 [ 669.885922][ T1847] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.885981][ T1847] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 669.886008][ T1847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 669.886034][ T1847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 669.886062][ T1847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 669.886087][ T1847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 669.886107][ T1847] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 669.889083][ T1847] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 669.889110][ T1847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.889130][ T1847] usb 2-1: Product: syz [ 669.889143][ T1847] usb 2-1: Manufacturer: syz [ 669.889157][ T1847] usb 2-1: SerialNumber: syz [ 669.904551][ T1847] usb 2-1: config 0 descriptor?? [ 669.908945][T14080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 669.918193][ T1847] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 669.918458][ T1847] ati_remote 2-1:0.0: probe with driver ati_remote failed with error -5 [ 670.097700][T13283] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 670.162229][T13283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 670.211901][ T820] usb 2-1: USB disconnect, device number 52 [ 670.453553][ T3112] bridge_slave_1: left allmulticast mode [ 670.453588][ T3112] bridge_slave_1: left promiscuous mode [ 670.453836][ T3112] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.427679][ T3112] bridge_slave_0: left allmulticast mode [ 671.427774][ T3112] bridge_slave_0: left promiscuous mode [ 671.428250][ T3112] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.788569][T14110] random: crng reseeded on system resumption [ 675.615437][ T3112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.734153][ T3112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.843024][ T3112] bond0 (unregistering): Released all slaves [ 676.115990][ T5735] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 676.298447][ T5735] usb 3-1: device descriptor read/64, error -71 [ 676.587520][ T5735] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 676.605895][ T3112] hsr_slave_0: left promiscuous mode [ 676.640388][ T3112] hsr_slave_1: left promiscuous mode [ 676.641175][ T3112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.673317][ T3112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.725841][ T5735] usb 3-1: device descriptor read/64, error -71 [ 676.843683][ T5735] usb usb3-port1: attempt power cycle [ 677.206760][ T5735] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 677.235130][ T5735] usb 3-1: device descriptor read/8, error -71 [ 677.484555][ T5735] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 677.512725][ T5735] usb 3-1: device descriptor read/8, error -71 [ 677.623685][ T5735] usb usb3-port1: unable to enumerate USB device [ 677.944715][ T3112] team0 (unregistering): Port device team_slave_1 removed [ 678.041004][ T3112] team0 (unregistering): Port device team_slave_0 removed [ 678.053949][T14200] FAULT_INJECTION: forcing a failure. [ 678.053949][T14200] name failslab, interval 1, probability 0, space 0, times 0 [ 678.053982][T14200] CPU: 1 UID: 0 PID: 14200 Comm: syz.0.2863 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 678.054004][T14200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 678.054015][T14200] Call Trace: [ 678.054024][T14200] [ 678.054031][T14200] dump_stack_lvl+0xe8/0x150 [ 678.054065][T14200] should_fail_ex+0x467/0x600 [ 678.054096][T14200] should_failslab+0xa8/0x100 [ 678.054120][T14200] __kmalloc_noprof+0xfe/0x780 [ 678.054140][T14200] ? sock_kmalloc+0xd6/0x160 [ 678.054158][T14200] ? sock_kmalloc+0xd6/0x160 [ 678.054182][T14200] sock_kmalloc+0xd6/0x160 [ 678.054204][T14200] skcipher_recvmsg+0x564/0xe10 [ 678.054250][T14200] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 678.054269][T14200] ? __lock_acquire+0x683/0x2ce0 [ 678.054293][T14200] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 678.054316][T14200] ? security_socket_recvmsg+0x7e/0x2c0 [ 678.054342][T14200] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 678.054363][T14200] sock_recvmsg+0x196/0x1e0 [ 678.054390][T14200] ____sys_recvmsg+0x1f2/0x4b0 [ 678.054417][T14200] ? __pfx_____sys_recvmsg+0x10/0x10 [ 678.054451][T14200] ? import_iovec+0x73/0xa0 [ 678.054474][T14200] ___sys_recvmsg+0x213/0x5a0 [ 678.054499][T14200] ? __pfx____sys_recvmsg+0x10/0x10 [ 678.054522][T14200] ? __fget_files+0x2a/0x420 [ 678.054557][T14200] ? __fget_files+0x3a8/0x420 [ 678.054585][T14200] __x64_sys_recvmsg+0x1b4/0x290 [ 678.054606][T14200] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 678.054643][T14200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.054664][T14200] do_syscall_64+0x174/0x580 [ 678.054687][T14200] ? trace_irq_disable+0x3b/0x140 [ 678.054714][T14200] ? clear_bhb_loop+0x40/0x90 [ 678.054738][T14200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.054756][T14200] RIP: 0033:0x7f712d5ede59 [ 678.054774][T14200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.054789][T14200] RSP: 002b:00007f712b846028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 678.054809][T14200] RAX: ffffffffffffffda RBX: 00007f712d875fa0 RCX: 00007f712d5ede59 [ 678.054824][T14200] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 678.054836][T14200] RBP: 00007f712b846090 R08: 0000000000000000 R09: 0000000000000000 [ 678.054848][T14200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.054860][T14200] R13: 00007f712d876038 R14: 00007f712d875fa0 R15: 00007ffe1be4c678 [ 678.054890][T14200] [ 678.881678][T14209] FAULT_INJECTION: forcing a failure. [ 678.881678][T14209] name failslab, interval 1, probability 0, space 0, times 0 [ 678.881957][T14209] CPU: 0 UID: 0 PID: 14209 Comm: syz.0.2867 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 678.881981][T14209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 678.881992][T14209] Call Trace: [ 678.882000][T14209] [ 678.882015][T14209] dump_stack_lvl+0xe8/0x150 [ 678.882048][T14209] should_fail_ex+0x467/0x600 [ 678.882080][T14209] should_failslab+0xa8/0x100 [ 678.882103][T14209] kmem_cache_alloc_noprof+0xa4/0x650 [ 678.882130][T14209] ? alloc_empty_file+0x5b/0x1d0 [ 678.882155][T14209] ? alloc_empty_file+0x5b/0x1d0 [ 678.882185][T14209] alloc_empty_file+0x5b/0x1d0 [ 678.882212][T14209] path_openat+0x8f/0x3850 [ 678.882241][T14209] ? kasan_save_track+0x3e/0x80 [ 678.882257][T14209] ? __kasan_slab_alloc+0x6c/0x80 [ 678.882275][T14209] ? kmem_cache_alloc_noprof+0x355/0x650 [ 678.882299][T14209] ? do_getname+0x2e/0x250 [ 678.882321][T14209] ? do_sys_openat2+0xcc/0x200 [ 678.882338][T14209] ? __x64_sys_openat+0x138/0x170 [ 678.882354][T14209] ? do_syscall_64+0x174/0x580 [ 678.882380][T14209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.882417][T14209] do_file_open+0x23e/0x4a0 [ 678.882437][T14209] ? lockdep_hardirqs_on+0x7a/0x110 [ 678.882465][T14209] ? __pfx_do_file_open+0x10/0x10 [ 678.882502][T14209] ? alloc_fd+0x654/0x6d0 [ 678.882537][T14209] do_sys_openat2+0x115/0x200 [ 678.882554][T14209] ? lockdep_hardirqs_on+0x7a/0x110 [ 678.882578][T14209] ? __pfx_do_sys_openat2+0x10/0x10 [ 678.882601][T14209] ? rcu_is_watching+0x15/0xb0 [ 678.882625][T14209] __x64_sys_openat+0x138/0x170 [ 678.882645][T14209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.882663][T14209] do_syscall_64+0x174/0x580 [ 678.882688][T14209] ? clear_bhb_loop+0x40/0x90 [ 678.882711][T14209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.882729][T14209] RIP: 0033:0x7f712d5ae68e [ 678.882748][T14209] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 678.882791][T14209] RSP: 002b:00007f712b824ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 678.882812][T14209] RAX: ffffffffffffffda RBX: 00007f712b8256c0 RCX: 00007f712d5ae68e [ 678.882826][T14209] RDX: 0000000000000002 RSI: 00007f712b824f90 RDI: ffffffffffffff9c [ 678.882839][T14209] RBP: 00007f712b825090 R08: 0000000000000000 R09: 0000000000000000 [ 678.882851][T14209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.882863][T14209] R13: 00007f712d876128 R14: 00007f712d876090 R15: 00007ffe1be4c678 [ 678.882893][T14209] [ 679.337704][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 680.074822][T14226] FAULT_INJECTION: forcing a failure. [ 680.074822][T14226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.074856][T14226] CPU: 0 UID: 0 PID: 14226 Comm: syz.0.2873 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 680.074879][T14226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 680.074891][T14226] Call Trace: [ 680.074899][T14226] [ 680.074908][T14226] dump_stack_lvl+0xe8/0x150 [ 680.074941][T14226] should_fail_ex+0x467/0x600 [ 680.074973][T14226] _copy_from_iter+0x1d3/0x1660 [ 680.075003][T14226] ? rcu_is_watching+0x15/0xb0 [ 680.075025][T14226] ? trace_kmem_cache_alloc+0x29/0xe0 [ 680.075056][T14226] ? __pfx__copy_from_iter+0x10/0x10 [ 680.075081][T14226] ? __alloc_skb+0x276/0x7a0 [ 680.075106][T14226] ? __alloc_skb+0x276/0x7a0 [ 680.075135][T14226] ? netlink_sendmsg+0x650/0xb40 [ 680.075154][T14226] ? skb_put+0x112/0x210 [ 680.075182][T14226] netlink_sendmsg+0x6c0/0xb40 [ 680.075210][T14226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.075231][T14226] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 680.075258][T14226] ? __kernel_text_address+0xd/0x30 [ 680.075277][T14226] ? unwind_get_return_address+0x4d/0x90 [ 680.075299][T14226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.075318][T14226] sock_sendmsg_nosec+0x13a/0x180 [ 680.075345][T14226] ____sys_sendmsg+0x565/0x870 [ 680.075364][T14226] ? __might_fault+0xaf/0x130 [ 680.075389][T14226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 680.075417][T14226] ? import_iovec+0x73/0xa0 [ 680.075440][T14226] ___sys_sendmsg+0x2a5/0x360 [ 680.075457][T14226] ? __lock_acquire+0x683/0x2ce0 [ 680.075480][T14226] ? __pfx____sys_sendmsg+0x10/0x10 [ 680.075533][T14226] ? __fget_files+0x2a/0x420 [ 680.075557][T14226] ? __fget_files+0x3a8/0x420 [ 680.075586][T14226] __x64_sys_sendmsg+0x1b7/0x290 [ 680.075608][T14226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 680.075647][T14226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.075668][T14226] do_syscall_64+0x174/0x580 [ 680.075694][T14226] ? trace_irq_disable+0x3b/0x140 [ 680.075721][T14226] ? clear_bhb_loop+0x40/0x90 [ 680.075744][T14226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.075762][T14226] RIP: 0033:0x7f712d5ede59 [ 680.075781][T14226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.075797][T14226] RSP: 002b:00007f712b846028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.075817][T14226] RAX: ffffffffffffffda RBX: 00007f712d875fa0 RCX: 00007f712d5ede59 [ 680.075832][T14226] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 680.075844][T14226] RBP: 00007f712b846090 R08: 0000000000000000 R09: 0000000000000000 [ 680.075856][T14226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.075868][T14226] R13: 00007f712d876038 R14: 00007f712d875fa0 R15: 00007ffe1be4c678 [ 680.075899][T14226] [ 680.469267][T14232] FAULT_INJECTION: forcing a failure. [ 680.469267][T14232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.469301][T14232] CPU: 1 UID: 0 PID: 14232 Comm: syz.1.2875 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 680.469322][T14232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 680.469334][T14232] Call Trace: [ 680.469341][T14232] [ 680.469349][T14232] dump_stack_lvl+0xe8/0x150 [ 680.469382][T14232] should_fail_ex+0x467/0x600 [ 680.469413][T14232] _copy_to_iter+0x1e4/0x1810 [ 680.469440][T14232] ? __pfx_seq_printf+0x10/0x10 [ 680.469466][T14232] ? softnet_seq_show+0x75/0x4c0 [ 680.469601][T14232] ? softnet_seq_show+0x75/0x4c0 [ 680.469626][T14232] ? __pfx__copy_to_iter+0x10/0x10 [ 680.469652][T14232] ? softnet_seq_show+0x386/0x4c0 [ 680.469683][T14232] ? softnet_get_online+0x15f/0x200 [ 680.469712][T14232] seq_read_iter+0xaaf/0xcb0 [ 680.469750][T14232] proc_reg_read_iter+0x1bf/0x290 [ 680.469777][T14232] vfs_read+0x59e/0xa90 [ 680.469810][T14232] ? __pfx_vfs_read+0x10/0x10 [ 680.469835][T14232] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 680.469862][T14232] ? lockdep_hardirqs_on+0x7a/0x110 [ 680.469888][T14232] ? mutex_lock_nested+0x152/0x1d0 [ 680.469907][T14232] ? fdget_pos+0x252/0x320 [ 680.469934][T14232] ksys_read+0x156/0x270 [ 680.469958][T14232] ? __pfx_ksys_read+0x10/0x10 [ 680.469987][T14232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.470008][T14232] do_syscall_64+0x174/0x580 [ 680.470031][T14232] ? trace_irq_disable+0x3b/0x140 [ 680.470058][T14232] ? clear_bhb_loop+0x40/0x90 [ 680.470081][T14232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.470107][T14232] RIP: 0033:0x7fd6aee7de59 [ 680.470125][T14232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.470141][T14232] RSP: 002b:00007fd6ad0d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 680.470161][T14232] RAX: ffffffffffffffda RBX: 00007fd6af105fa0 RCX: 00007fd6aee7de59 [ 680.470176][T14232] RDX: 0000000000002020 RSI: 00002000000006c0 RDI: 0000000000000003 [ 680.470187][T14232] RBP: 00007fd6ad0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 680.470200][T14232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.470211][T14232] R13: 00007fd6af106038 R14: 00007fd6af105fa0 R15: 00007ffc4f747808 [ 680.470242][T14232] [ 680.853350][T13283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.060056][T13283] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.108807][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.108947][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.148592][ T849] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.148721][ T849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.700189][ T5741] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 682.897844][ T5741] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.897873][ T5741] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 682.907922][ T5741] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 682.907952][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 682.907973][ T5741] usb 3-1: SerialNumber: syz [ 683.179061][ T5741] usb 3-1: 0:2 : does not exist [ 683.384976][ T5741] usb 3-1: USB disconnect, device number 67 [ 683.593124][T14213] udevd[14213]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.208845][ T820] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 684.516187][ T820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.516214][ T820] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 684.517602][ T820] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 684.517628][ T820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 684.517650][ T820] usb 3-1: SerialNumber: syz [ 686.329959][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 686.482460][T14322] FAULT_INJECTION: forcing a failure. [ 686.482460][T14322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.482493][T14322] CPU: 0 UID: 0 PID: 14322 Comm: syz.0.2904 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 686.482516][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 686.482528][T14322] Call Trace: [ 686.482536][T14322] [ 686.482545][T14322] dump_stack_lvl+0xe8/0x150 [ 686.482579][T14322] should_fail_ex+0x467/0x600 [ 686.482610][T14322] _copy_from_iter+0x1d3/0x1660 [ 686.482640][T14322] ? rcu_is_watching+0x15/0xb0 [ 686.482663][T14322] ? trace_kmem_cache_alloc+0x29/0xe0 [ 686.482693][T14322] ? __pfx__copy_from_iter+0x10/0x10 [ 686.482733][T14322] ? __alloc_skb+0x276/0x7a0 [ 686.482758][T14322] ? __alloc_skb+0x276/0x7a0 [ 686.482787][T14322] ? netlink_sendmsg+0x650/0xb40 [ 686.482806][T14322] ? skb_put+0x112/0x210 [ 686.482834][T14322] netlink_sendmsg+0x6c0/0xb40 [ 686.482862][T14322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.482883][T14322] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 686.482908][T14322] ? __kernel_text_address+0xd/0x30 [ 686.482926][T14322] ? unwind_get_return_address+0x4d/0x90 [ 686.482949][T14322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.482967][T14322] sock_sendmsg_nosec+0x13a/0x180 [ 686.482994][T14322] ____sys_sendmsg+0x565/0x870 [ 686.483012][T14322] ? __might_fault+0xaf/0x130 [ 686.483037][T14322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 686.483074][T14322] ? import_iovec+0x73/0xa0 [ 686.483097][T14322] ___sys_sendmsg+0x2a5/0x360 [ 686.483115][T14322] ? __lock_acquire+0x683/0x2ce0 [ 686.483138][T14322] ? __pfx____sys_sendmsg+0x10/0x10 [ 686.483189][T14322] ? __fget_files+0x2a/0x420 [ 686.483208][T14322] ? __fget_files+0x3a8/0x420 [ 686.483236][T14322] __x64_sys_sendmsg+0x1b7/0x290 [ 686.483258][T14322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 686.483295][T14322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.483316][T14322] do_syscall_64+0x174/0x580 [ 686.483342][T14322] ? trace_irq_disable+0x3b/0x140 [ 686.483369][T14322] ? clear_bhb_loop+0x40/0x90 [ 686.483391][T14322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.483410][T14322] RIP: 0033:0x7f712d5ede59 [ 686.483427][T14322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.483443][T14322] RSP: 002b:00007f712b846028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.483464][T14322] RAX: ffffffffffffffda RBX: 00007f712d875fa0 RCX: 00007f712d5ede59 [ 686.483478][T14322] RDX: 0000000002000044 RSI: 0000200000000280 RDI: 0000000000000003 [ 686.483492][T14322] RBP: 00007f712b846090 R08: 0000000000000000 R09: 0000000000000000 [ 686.483504][T14322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.483516][T14322] R13: 00007f712d876038 R14: 00007f712d875fa0 R15: 00007ffe1be4c678 [ 686.483547][T14322] [ 686.733599][T11641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 686.859585][T11641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 686.871700][T11641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 686.885380][T11641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 686.911362][T11641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 687.303908][ T820] usb 3-1: 0:2 : does not exist [ 689.352079][ T5619] Bluetooth: hci0: command tx timeout [ 690.132972][ T820] usb 3-1: USB disconnect, device number 68 [ 690.261998][T14354] tmpfs: Bad value for 'mpol' [ 690.264362][T14354] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2908'. [ 690.494397][T14358] FAULT_INJECTION: forcing a failure. [ 690.494397][T14358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.494453][T14358] CPU: 0 UID: 0 PID: 14358 Comm: syz.0.2907 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 690.494476][T14358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 690.494488][T14358] Call Trace: [ 690.494496][T14358] [ 690.494505][T14358] dump_stack_lvl+0xe8/0x150 [ 690.494538][T14358] should_fail_ex+0x467/0x600 [ 690.494570][T14358] _copy_from_user+0x2d/0xb0 [ 690.494592][T14358] __copy_msghdr+0x390/0x590 [ 690.494618][T14358] ___sys_sendmsg+0x213/0x360 [ 690.494636][T14358] ? __lock_acquire+0x683/0x2ce0 [ 690.494661][T14358] ? __pfx____sys_sendmsg+0x10/0x10 [ 690.494714][T14358] ? __fget_files+0x2a/0x420 [ 690.494732][T14358] ? __fget_files+0x3a8/0x420 [ 690.494760][T14358] __sys_sendmmsg+0x279/0x4d0 [ 690.494784][T14358] ? __pfx___sys_sendmmsg+0x10/0x10 [ 690.494832][T14358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.494860][T14358] __x64_sys_sendmmsg+0xa0/0xc0 [ 690.494880][T14358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.494899][T14358] do_syscall_64+0x174/0x580 [ 690.494927][T14358] ? clear_bhb_loop+0x40/0x90 [ 690.494950][T14358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.494969][T14358] RIP: 0033:0x7f712d5ede59 [ 690.494987][T14358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.495003][T14358] RSP: 002b:00007f712b804028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 690.495024][T14358] RAX: ffffffffffffffda RBX: 00007f712d876180 RCX: 00007f712d5ede59 [ 690.495039][T14358] RDX: 3284b164842c97f7 RSI: 0000200000000c40 RDI: 0000000000000008 [ 690.495052][T14358] RBP: 00007f712b804090 R08: 0000000000000000 R09: 0000000000000000 [ 690.495065][T14358] R10: 0000000000008014 R11: 0000000000000246 R12: 0000000000000001 [ 690.495078][T14358] R13: 00007f712d876218 R14: 00007f712d876180 R15: 00007ffe1be4c678 [ 690.495108][T14358] [ 690.509530][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2907'. [ 691.160448][T14310] udevd[14310]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 691.549115][ T5619] Bluetooth: hci0: command tx timeout [ 691.974760][ T5735] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 692.171927][ T5735] usb 2-1: config 3 interface 0 has no altsetting 0 [ 692.192437][ T5735] usb 2-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=d0.db [ 692.192468][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.192489][ T5735] usb 2-1: Product: syz [ 692.192503][ T5735] usb 2-1: Manufacturer: syz [ 692.192518][ T5735] usb 2-1: SerialNumber: syz [ 695.732637][T14360] syz.1.2908 (14360) used greatest stack depth: 17392 bytes left [ 695.757666][ T5619] Bluetooth: hci0: command tx timeout [ 696.185562][ T5735] usb 2-1: USB disconnect, device number 53 [ 697.506941][T13636] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 697.564182][T13636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 697.976588][ T5619] Bluetooth: hci3: adv larger than maximum supported [ 697.976666][ T5619] Bluetooth: hci3: Malformed LE Event: 0x0d [ 697.977084][T11641] Bluetooth: hci0: command tx timeout [ 698.748144][T14495] Bluetooth: MGMT ver 1.23 [ 699.462016][T13636] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 699.465693][ T5793] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 699.512914][T13636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 699.544988][T13636] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 699.580439][T13636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 699.613310][T13636] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 699.636868][ T5793] usb 3-1: Using ep0 maxpacket: 32 [ 699.653400][ T5793] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 699.653421][ T5793] usb 3-1: config 0 has no interface number 0 [ 699.656713][ T5793] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 699.656742][ T5793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.656763][ T5793] usb 3-1: Product: syz [ 699.656777][ T5793] usb 3-1: Manufacturer: syz [ 699.656792][ T5793] usb 3-1: SerialNumber: syz [ 699.659085][T13636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 699.725895][ T5793] usb 3-1: config 0 descriptor?? [ 699.738111][ T5793] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 699.883661][T14518] FAULT_INJECTION: forcing a failure. [ 699.883661][T14518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.883711][T14518] CPU: 1 UID: 0 PID: 14518 Comm: syz.0.2957 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 699.883739][T14518] Tainted: [L]=SOFTLOCKUP [ 699.883749][T14518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 699.883761][T14518] Call Trace: [ 699.883768][T14518] [ 699.883778][T14518] dump_stack_lvl+0xe8/0x150 [ 699.883811][T14518] should_fail_ex+0x467/0x600 [ 699.883841][T14518] _copy_from_user+0x2d/0xb0 [ 699.883863][T14518] packet_setsockopt+0x9d1/0x1510 [ 699.883891][T14518] ? __pfx_packet_setsockopt+0x10/0x10 [ 699.883918][T14518] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 699.883945][T14518] ? lockdep_hardirqs_on+0x7a/0x110 [ 699.883974][T14518] ? __fget_files+0x2a/0x420 [ 699.884001][T14518] ? __fget_files+0x2a/0x420 [ 699.884020][T14518] ? __fget_files+0x2a/0x420 [ 699.884035][T14518] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 699.884060][T14518] ? __pfx_packet_setsockopt+0x10/0x10 [ 699.884081][T14518] do_sock_setsockopt+0x17c/0x1b0 [ 699.884114][T14518] __x64_sys_setsockopt+0x143/0x1b0 [ 699.884142][T14518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.884162][T14518] do_syscall_64+0x174/0x580 [ 699.884189][T14518] ? clear_bhb_loop+0x40/0x90 [ 699.884211][T14518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.884230][T14518] RIP: 0033:0x7f712d5ede59 [ 699.884248][T14518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.884263][T14518] RSP: 002b:00007f712b846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 699.884284][T14518] RAX: ffffffffffffffda RBX: 00007f712d875fa0 RCX: 00007f712d5ede59 [ 699.884298][T14518] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 699.884311][T14518] RBP: 00007f712b846090 R08: 0000000000000010 R09: 0000000000000000 [ 699.884323][T14518] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 699.884343][T14518] R13: 00007f712d876038 R14: 00007f712d875fa0 R15: 00007ffe1be4c678 [ 699.884372][T14518] [ 699.935819][ T5735] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 700.120470][ T5793] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 700.128234][ T5735] usb 2-1: Using ep0 maxpacket: 16 [ 700.134140][ T5735] usb 2-1: unable to get BOS descriptor or descriptor too short [ 700.136821][ T5735] usb 2-1: config 1 has an invalid interface number: 78 but max is 0 [ 700.136843][ T5735] usb 2-1: config 1 has no interface number 0 [ 700.136888][ T5735] usb 2-1: config 1 interface 78 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 700.136914][ T5735] usb 2-1: config 1 interface 78 has no altsetting 0 [ 700.159418][T14497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.164860][T14497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.207926][ T5793] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 700.209341][ T5735] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice=df.57 [ 700.209375][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.209395][ T5735] usb 2-1: Product: syz [ 700.209408][ T5735] usb 2-1: Manufacturer: syz [ 700.209420][ T5735] usb 2-1: SerialNumber: syz [ 700.285833][T14512] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 700.513956][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2953'. [ 700.514201][T14508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2953'. [ 700.514227][T14508] netlink: 'syz.1.2953': attribute type 13 has an invalid length. [ 700.514238][T14508] netlink: 'syz.1.2953': attribute type 14 has an invalid length. [ 700.723356][ T5735] spcp8x5 2-1:1.78: SPCP8x5 converter detected [ 700.749165][ T5735] usb 2-1: SPCP8x5 converter now attached to ttyUSB2 [ 700.769010][ T5735] usb 2-1: USB disconnect, device number 54 [ 700.832941][ T5735] SPCP8x5 ttyUSB2: SPCP8x5 converter now disconnected from ttyUSB2 [ 700.835827][ T5735] spcp8x5 2-1:1.78: device disconnected [ 701.107744][T14540] FAULT_INJECTION: forcing a failure. [ 701.107744][T14540] name failslab, interval 1, probability 0, space 0, times 0 [ 701.107775][T14540] CPU: 1 UID: 0 PID: 14540 Comm: syz.0.2964 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 701.107799][T14540] Tainted: [L]=SOFTLOCKUP [ 701.107804][T14540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 701.107812][T14540] Call Trace: [ 701.107817][T14540] [ 701.107824][T14540] dump_stack_lvl+0xe8/0x150 [ 701.107853][T14540] should_fail_ex+0x467/0x600 [ 701.107880][T14540] should_failslab+0xa8/0x100 [ 701.107900][T14540] __kmalloc_noprof+0xfe/0x780 [ 701.107914][T14540] ? rcu_is_watching+0x15/0xb0 [ 701.107932][T14540] ? tomoyo_realpath_from_path+0xef/0x640 [ 701.107950][T14540] ? tomoyo_realpath_from_path+0xef/0x640 [ 701.107970][T14540] tomoyo_realpath_from_path+0xef/0x640 [ 701.107995][T14540] tomoyo_mount_permission+0x3e9/0x9e0 [ 701.108010][T14540] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 701.108028][T14540] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 701.108041][T14540] ? kasan_save_track+0x4f/0x80 [ 701.108090][T14540] ? kasan_quarantine_put+0xbb/0x1f0 [ 701.108114][T14540] security_sb_mount+0xe4/0x320 [ 701.108134][T14540] path_mount+0xbc/0x1040 [ 701.108158][T14540] ? user_path_at+0xd4/0x160 [ 701.108175][T14540] __se_sys_mount+0x31d/0x420 [ 701.108192][T14540] ? __pfx___se_sys_mount+0x10/0x10 [ 701.108209][T14540] ? __x64_sys_mount+0x20/0xc0 [ 701.108227][T14540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.108247][T14540] do_syscall_64+0x174/0x580 [ 701.108271][T14540] ? trace_irq_disable+0x3b/0x140 [ 701.108297][T14540] ? clear_bhb_loop+0x40/0x90 [ 701.108316][T14540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.108332][T14540] RIP: 0033:0x7f712d5ede59 [ 701.108348][T14540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.108362][T14540] RSP: 002b:00007f712b846028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 701.108382][T14540] RAX: ffffffffffffffda RBX: 00007f712d875fa0 RCX: 00007f712d5ede59 [ 701.108393][T14540] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 701.108404][T14540] RBP: 00007f712b846090 R08: 0000000000000000 R09: 0000000000000000 [ 701.108416][T14540] R10: 0000000000989046 R11: 0000000000000246 R12: 0000000000000001 [ 701.108427][T14540] R13: 00007f712d876038 R14: 00007f712d875fa0 R15: 00007ffe1be4c678 [ 701.108464][T14540] [ 701.108537][T14540] ERROR: Out of memory at tomoyo_realpath_from_path. [ 701.451610][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 701.455657][ T5728] usb 3-1: USB disconnect, device number 69 [ 701.517081][ T5728] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 701.605582][ T5728] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 701.611318][ T5728] quatech2 3-1:0.51: device disconnected [ 702.297540][ T1847] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 702.477419][ T1847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 702.477454][ T1847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.477493][ T1847] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 702.477516][ T1847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.498815][ T1847] usb 2-1: config 0 descriptor?? [ 703.050416][ T1847] hid_parser_main: 11 callbacks suppressed [ 703.050507][ T1847] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 703.050539][ T1847] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 703.050567][ T1847] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 703.050594][ T1847] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 703.050620][ T1847] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 703.052561][ T1847] elan 0003:04F3:0755.0008: failed to start in urb: -90 [ 703.066041][ T1847] elan 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 703.374697][ T1847] usb 2-1: USB disconnect, device number 55 [ 703.529307][T14600] netlink: 'syz.2.2979': attribute type 1 has an invalid length. [ 703.586353][T14603] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2979'. [ 703.686276][T14600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 703.860196][T14600] bond2: (slave ip6gretap0): making interface the new active one [ 703.893856][T14600] bond2: (slave ip6gretap0): Enslaving as an active interface with an up link [ 703.947091][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 703.947160][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 703.977697][T13636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.251887][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 704.251903][ T37] audit: type=1326 audit(2000000160.302:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14623 comm="syz.1.2987" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6aee7de59 code=0x0 [ 704.366747][T14627] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 704.437693][T14315] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.439148][T14315] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.439338][T14315] bridge_slave_0: entered allmulticast mode [ 704.442087][T14315] bridge_slave_0: entered promiscuous mode [ 704.477487][T14315] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.477857][T14315] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.478061][T14315] bridge_slave_1: entered allmulticast mode [ 704.483775][T14315] bridge_slave_1: entered promiscuous mode [ 704.897518][T14315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.983019][T14315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.450906][T11641] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 706.048441][ T1671] bridge_slave_1: left allmulticast mode [ 706.048479][ T1671] bridge_slave_1: left promiscuous mode [ 706.048735][ T1671] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.348437][ T1671] bridge_slave_0: left allmulticast mode [ 706.348460][ T1671] bridge_slave_0: left promiscuous mode [ 706.348617][ T1671] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.424049][T14664] FAULT_INJECTION: forcing a failure. [ 706.424049][T14664] name failslab, interval 1, probability 0, space 0, times 0 [ 706.424084][T14664] CPU: 0 UID: 0 PID: 14664 Comm: syz.0.3004 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 706.424109][T14664] Tainted: [L]=SOFTLOCKUP [ 706.424115][T14664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 706.424127][T14664] Call Trace: [ 706.424135][T14664] [ 706.424143][T14664] dump_stack_lvl+0xe8/0x150 [ 706.424175][T14664] should_fail_ex+0x467/0x600 [ 706.424204][T14664] should_failslab+0xa8/0x100 [ 706.424226][T14664] kmem_cache_alloc_noprof+0xa4/0x650 [ 706.424254][T14664] ? do_getname+0x2e/0x250 [ 706.424275][T14664] ? do_getname+0x2e/0x250 [ 706.424302][T14664] do_getname+0x2e/0x250 [ 706.424322][T14664] ? getname_flags+0x11/0x20 [ 706.424357][T14664] __x64_sys_newstat+0x107/0x1e0 [ 706.424383][T14664] ? __pfx___x64_sys_newstat+0x10/0x10 [ 706.424425][T14664] ? __pfx_ksys_write+0x10/0x10 [ 706.424450][T14664] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 706.424472][T14664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.424492][T14664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.424512][T14664] do_syscall_64+0x174/0x580 [ 706.424538][T14664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.424557][T14664] ? clear_bhb_loop+0x40/0x90 [ 706.424580][T14664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.424598][T14664] RIP: 0033:0x7f712d5ede59 [ 706.424616][T14664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.424633][T14664] RSP: 002b:00007f712b846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 706.424654][T14664] RAX: ffffffffffffffda RBX: 00007f712d875fa0 RCX: 00007f712d5ede59 [ 706.424668][T14664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 706.424680][T14664] RBP: 00007f712b846090 R08: 0000000000000000 R09: 0000000000000000 [ 706.424693][T14664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.424704][T14664] R13: 00007f712d876038 R14: 00007f712d875fa0 R15: 00007ffe1be4c678 [ 706.424735][T14664] [ 706.762056][T14679] FAULT_INJECTION: forcing a failure. [ 706.762056][T14679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.762080][T14679] CPU: 1 UID: 0 PID: 14679 Comm: syz.0.3010 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 706.762096][T14679] Tainted: [L]=SOFTLOCKUP [ 706.762100][T14679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 706.762107][T14679] Call Trace: [ 706.762111][T14679] [ 706.762117][T14679] dump_stack_lvl+0xe8/0x150 [ 706.762138][T14679] should_fail_ex+0x467/0x600 [ 706.762157][T14679] _copy_from_user+0x2d/0xb0 [ 706.762169][T14679] ___sys_sendmsg+0x1c6/0x360 [ 706.762184][T14679] ? __pfx____sys_sendmsg+0x10/0x10 [ 706.762204][T14679] ? vfs_write+0x9e0/0xbb0 [ 706.762224][T14679] ? do_sys_openat2+0x14e/0x200 [ 706.762237][T14679] __x64_sys_sendmsg+0x1b7/0x290 [ 706.762249][T14679] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 706.762267][T14679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.762278][T14679] do_syscall_64+0x174/0x580 [ 706.762295][T14679] ? trace_irq_disable+0x3b/0x140 [ 706.762311][T14679] ? clear_bhb_loop+0x40/0x90 [ 706.762324][T14679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.762334][T14679] RIP: 0033:0x7f712d5ede59 [ 706.762353][T14679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.762362][T14679] RSP: 002b:00007f712b846028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.762373][T14679] RAX: ffffffffffffffda RBX: 00007f712d875fa0 RCX: 00007f712d5ede59 [ 706.762381][T14679] RDX: 0000000000040044 RSI: 00002000000096c0 RDI: 0000000000000003 [ 706.762388][T14679] RBP: 00007f712b846090 R08: 0000000000000000 R09: 0000000000000000 [ 706.762395][T14679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.762401][T14679] R13: 00007f712d876038 R14: 00007f712d875fa0 R15: 00007ffe1be4c678 [ 706.762417][T14679] [ 706.828530][ T5793] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 707.011785][ T5793] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 707.011814][ T5793] usb 2-1: config 0 has no interface number 0 [ 707.014015][ T5793] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 707.014044][ T5793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.014064][ T5793] usb 2-1: Product: syz [ 707.014074][ T5793] usb 2-1: Manufacturer: syz [ 707.014082][ T5793] usb 2-1: SerialNumber: syz [ 707.030132][ T5793] usb 2-1: config 0 descriptor?? [ 707.332128][T14693] netlink: 'syz.0.3015': attribute type 1 has an invalid length. [ 707.333972][T14693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3015'. [ 707.359989][T14675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.360541][T14675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.395544][ T820] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 707.579364][ T820] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 707.579394][ T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.579473][ T820] usb 3-1: Product: syz [ 707.579488][ T820] usb 3-1: Manufacturer: syz [ 707.579503][ T820] usb 3-1: SerialNumber: syz [ 707.697903][ T820] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 708.133606][ T1671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.205511][ T5741] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 708.255288][ T1671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.276298][ T1671] bond0 (unregistering): Released all slaves [ 708.339301][T13636] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.502059][T14315] team0: Port device team_slave_0 added [ 708.512832][T14315] team0: Port device team_slave_1 added [ 708.793756][T14315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.793851][T14315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.793879][T14315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.806379][T14315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.806396][T14315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.806494][T14315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.797439][T14723] FAULT_INJECTION: forcing a failure. [ 709.797439][T14723] name failslab, interval 1, probability 0, space 0, times 0 [ 709.797476][T14723] CPU: 0 UID: 0 PID: 14723 Comm: syz.0.3027 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 709.797504][T14723] Tainted: [L]=SOFTLOCKUP [ 709.797511][T14723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 709.797523][T14723] Call Trace: [ 709.797531][T14723] [ 709.797547][T14723] dump_stack_lvl+0xe8/0x150 [ 709.797581][T14723] should_fail_ex+0x467/0x600 [ 709.797614][T14723] should_failslab+0xa8/0x100 [ 709.797638][T14723] kmem_cache_alloc_noprof+0xa4/0x650 [ 709.797664][T14723] ? security_inode_alloc+0x39/0x310 [ 709.797686][T14723] ? security_inode_alloc+0x39/0x310 [ 709.797715][T14723] security_inode_alloc+0x39/0x310 [ 709.797741][T14723] inode_init_always_gfp+0x983/0xd40 [ 709.797775][T14723] ? __pfx_sock_alloc_inode+0x10/0x10 [ 709.797798][T14723] alloc_inode+0x82/0x1b0 [ 709.797825][T14723] __sock_create+0x12d/0x9d0 [ 709.797846][T14723] ? crng_make_state+0x315/0x5d0 [ 709.797884][T14723] udp_sock_create6+0xd2/0x650 [ 709.797910][T14723] ? __pfx_udp_sock_create6+0x10/0x10 [ 709.797939][T14723] ? rxrpc_lookup_local+0xce3/0x1640 [ 709.798043][T14723] rxrpc_lookup_local+0xd59/0x1640 [ 709.798066][T14723] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 709.798102][T14723] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 709.798134][T14723] ? __local_bh_enable+0x1e1/0x2f0 [ 709.798163][T14723] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 709.798192][T14723] rxrpc_sendmsg+0x34b/0x6b0 [ 709.798248][T14723] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 709.798272][T14723] sock_sendmsg_nosec+0x13a/0x180 [ 709.798297][T14723] ____sys_sendmsg+0x565/0x870 [ 709.798316][T14723] ? __might_fault+0xaf/0x130 [ 709.798342][T14723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.798371][T14723] ? import_iovec+0x73/0xa0 [ 709.798396][T14723] ___sys_sendmsg+0x2a5/0x360 [ 709.798414][T14723] ? __lock_acquire+0x683/0x2ce0 [ 709.798437][T14723] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.798492][T14723] ? __fget_files+0x2a/0x420 [ 709.798510][T14723] ? __fget_files+0x3a8/0x420 [ 709.798547][T14723] __x64_sys_sendmsg+0x1b7/0x290 [ 709.798569][T14723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 709.798608][T14723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.798629][T14723] do_syscall_64+0x174/0x580 [ 709.798653][T14723] ? trace_irq_disable+0x3b/0x140 [ 709.798680][T14723] ? clear_bhb_loop+0x40/0x90 [ 709.798703][T14723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.798722][T14723] RIP: 0033:0x7f712d5ede59 [ 709.798741][T14723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.798757][T14723] RSP: 002b:00007f712b846028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.798776][T14723] RAX: ffffffffffffffda RBX: 00007f712d875fa0 RCX: 00007f712d5ede59 [ 709.798790][T14723] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 709.798802][T14723] RBP: 00007f712b846090 R08: 0000000000000000 R09: 0000000000000000 [ 709.798815][T14723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.798826][T14723] R13: 00007f712d876038 R14: 00007f712d875fa0 R15: 00007ffe1be4c678 [ 709.798858][T14723] [ 709.885105][ T5741] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 709.907198][T14723] socket: no more sockets [ 710.952544][ T5793] asix 2-1:0.251: probe with driver asix failed with error -71 [ 711.003606][ T5793] usb 2-1: USB disconnect, device number 56 [ 711.378633][T14733] random: crng reseeded on system resumption [ 713.151840][ T36] usb 3-1: USB disconnect, device number 70 [ 713.922384][ T5741] ath9k_htc: Failed to initialize the device [ 713.964865][ T36] usb 3-1: ath9k_htc: USB layer deinitialized [ 714.193848][ T5793] =========================================================[ 714.193848][ T5793] ================================================================== [ 714.193927][ T5793] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 714.194018][ T5793] Read of size 8 at addr ffffc9000f69a008 by task kworker/1:6/5793 [ 714.194035][ T5793] [ 714.194079][ T5793] CPU: 1 UID: 0 PID: 5793 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 714.194142][ T5793] Tainted: [L]=SOFTLOCKUP [ 714.194149][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 714.194162][ T5793] Workqueue: usb_hub_wq hub_event [ 714.194239][ T5793] Call Trace: [ 714.194248][ T5793] [ 714.194257][ T5793] dump_stack_lvl+0xe8/0x150 [ 714.194284][ T5793] print_address_description+0x55/0x1e0 [ 714.194311][ T5793] ? __list_add_valid_or_report+0x4e/0x130 [ 714.194335][ T5793] print_report+0x58/0x70 [ 714.194358][ T5793] kasan_report+0x117/0x150 [ 714.194380][ T5793] ? __list_add_valid_or_report+0x4e/0x130 [ 714.194409][ T5793] __list_add_valid_or_report+0x4e/0x130 [ 714.194436][ T5793] kcov_remote_stop+0x457/0x680 [ 714.194520][ T5793] hub_event+0x4789/0x4cf0 [ 714.194549][ T5793] ? __lock_acquire+0x683/0x2ce0 [ 714.194569][ T5793] ? register_lock_class+0x31/0x2e0 [ 714.194598][ T5793] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 714.194624][ T5793] ? __pfx_hub_event+0x10/0x10 [ 714.194648][ T5793] ? process_scheduled_works+0xa20/0x14e0 [ 714.194672][ T5793] ? rcu_is_watching+0x15/0xb0 [ 714.194694][ T5793] ? process_scheduled_works+0xa20/0x14e0 [ 714.194714][ T5793] process_scheduled_works+0xa8e/0x14e0 [ 714.194747][ T5793] ? __pfx_process_scheduled_works+0x10/0x10 [ 714.194770][ T5793] ? assign_work+0x3cf/0x5d0 [ 714.194792][ T5793] worker_thread+0xa47/0xfb0 [ 714.194826][ T5793] kthread+0x388/0x470 [ 714.194875][ T5793] ? __pfx_worker_thread+0x10/0x10 [ 714.194895][ T5793] ? __pfx_kthread+0x10/0x10 [ 714.194919][ T5793] ret_from_fork+0x514/0xb70 [ 714.194948][ T5793] ? __pfx_ret_from_fork+0x10/0x10 [ 714.194972][ T5793] ? __switch_to+0xc89/0x1420 [ 714.194996][ T5793] ? __pfx_kthread+0x10/0x10 [ 714.195020][ T5793] ret_from_fork_asm+0x1a/0x30 [ 714.195045][ T5793] [ 714.195053][ T5793] [ 714.195058][ T5793] The buggy address belongs to a vmalloc virtual mapping [ 714.195101][ T5793] Memory state around the buggy address: [ 714.195118][ T5793] ffffc9000f699f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 714.195131][ T5793] ffffc9000f699f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 714.195144][ T5793] >ffffc9000f69a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 714.195153][ T5793] ^ [ 714.195163][ T5793] ffffc9000f69a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 714.195175][ T5793] ffffc9000f69a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 714.195185][ T5793] ================================================================== [ 714.570264][ T5793] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 714.570280][ T5793] CPU: 1 UID: 0 PID: 5793 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 714.570297][ T5793] Tainted: [L]=SOFTLOCKUP [ 714.570301][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 714.570309][ T5793] Workqueue: usb_hub_wq hub_event [ 714.570330][ T5793] Call Trace: [ 714.570334][ T5793] [ 714.570340][ T5793] vpanic+0x56c/0xa60 [ 714.570355][ T5793] ? __pfx_vpanic+0x10/0x10 [ 714.570366][ T5793] ? __pfx___schedule+0x10/0x10 [ 714.570381][ T5793] panic+0xc5/0xd0 [ 714.570390][ T5793] ? __pfx_panic+0x10/0x10 [ 714.570399][ T5793] ? preempt_schedule_thunk+0x16/0x40 [ 714.570414][ T5793] ? __list_add_valid_or_report+0x4e/0x130 [ 714.570430][ T5793] check_panic_on_warn+0x89/0xb0 [ 714.570447][ T5793] ? __list_add_valid_or_report+0x4e/0x130 [ 714.570461][ T5793] end_report+0x73/0x170 [ 714.570473][ T5793] ? __list_add_valid_or_report+0x4e/0x130 [ 714.570487][ T5793] kasan_report+0x128/0x150 [ 714.570498][ T5793] ? __list_add_valid_or_report+0x4e/0x130 [ 714.570514][ T5793] __list_add_valid_or_report+0x4e/0x130 [ 714.570529][ T5793] kcov_remote_stop+0x457/0x680 [ 714.570546][ T5793] hub_event+0x4789/0x4cf0 [ 714.570562][ T5793] ? __lock_acquire+0x683/0x2ce0 [ 714.570573][ T5793] ? register_lock_class+0x31/0x2e0 [ 714.570588][ T5793] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 714.570602][ T5793] ? __pfx_hub_event+0x10/0x10 [ 714.570617][ T5793] ? process_scheduled_works+0xa20/0x14e0 [ 714.570635][ T5793] ? rcu_is_watching+0x15/0xb0 [ 714.570648][ T5793] ? process_scheduled_works+0xa20/0x14e0 [ 714.570659][ T5793] process_scheduled_works+0xa8e/0x14e0 [ 714.570676][ T5793] ? __pfx_process_scheduled_works+0x10/0x10 [ 714.570688][ T5793] ? assign_work+0x3cf/0x5d0 [ 714.570699][ T5793] worker_thread+0xa47/0xfb0 [ 714.570716][ T5793] kthread+0x388/0x470 [ 714.570731][ T5793] ? __pfx_worker_thread+0x10/0x10 [ 714.570742][ T5793] ? __pfx_kthread+0x10/0x10 [ 714.570756][ T5793] ret_from_fork+0x514/0xb70 [ 714.570772][ T5793] ? __pfx_ret_from_fork+0x10/0x10 [ 714.570786][ T5793] ? __switch_to+0xc89/0x1420 [ 714.570799][ T5793] ? __pfx_kthread+0x10/0x10 [ 714.570813][ T5793] ret_from_fork_asm+0x1a/0x30 [ 714.570826][ T5793] [ 714.571096][ T5793] Kernel Offset: disabled