last executing test programs: 4m3.029792583s ago: executing program 1 (id=8): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="c1010000000000407f04ffff00000000000109022d0001000000000904000002030000000921000000012218000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0x16, {[@global=@item_4={0x3, 0x1, 0x5}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x2, 0x1, 0x1, '\x00\x00'}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @local=@item_4={0x3, 0x2, 0x9, "90a71301"}, @global=@item_012={0x1, 0x1, 0x1, '\b'}, @main=@item_012={0x1, 0x0, 0x2, "e8"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000380), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000400)={0x2, 0x81, 0x7}) 3m59.930990999s ago: executing program 1 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0xffffffff, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x1, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x0, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0x7b4, 0x1000, 0x0, 0x82, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffefff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0xb, 0x7, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0xff, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7d, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0xa, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xfffffffd, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000640)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000780)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, &(0x7f0000000800)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000840)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt/trace_marker\x00', 0x1, 0x1a) close_range(r7, 0xffffffffffffffff, 0x0) write(r7, 0x0, 0x100000) 3m59.079618289s ago: executing program 1 (id=21): r0 = openat$comedi(0xffffff9c, &(0x7f0000000180)='/dev/comedi1\x00', 0x2002, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='?', 0x1}], 0x1}}], 0x1, 0x20010880) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) syz_clone3(&(0x7f00000005c0)={0x121000, 0x0, 0x0, 0x0, {0x1a}, &(0x7f0000000640), 0x0, 0x0, 0x0}, 0x58) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x2e, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r2}) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f0000000880), 0x4) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000780)={0x1, @pix_mp={0x4, 0x97c1, 0x30314142, 0x8, 0xb, [{0x0, 0x1}, {0x200, 0x4}, {0x9c, 0x8}, {0xff, 0x1}, {0xa80, 0x8}, {0x7fffffff, 0x8}, {0x8, 0x9}, {0x532, 0xae2afdc}], 0xb, 0x5, 0x8, 0x1, 0x6}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1\x00', 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='usbip-vudc.0', 0xc) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000000700)=ANY=[@ANYBLOB="01be57361099490ad54eb7435ae5d7d52ae9d82bbdc08762033da3c035dd3a2af13f98ab005f47732ff65d2444f45c51b50f6bdd0f67f3f780fecdce22a9e055a11b3577583bbb79904eb2e7d88f787b5eec86cef79d39b3e801ff67d2bb2ab5fce3e6968a14"], 0x2) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000140)={0xc, r2}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000280)={0x18}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000001c0)={'8255\x00', [0xf000, 0x6, 0x2, 0xc, 0x90000, 0x9, 0x40000, 0x88f, 0x280ffa, 0xfffffdfc, 0x5, 0x1, 0x1030, 0x1000008, 0x30, 0x40000009, 0xfff7ffa6, 0x3fb, 0x2912, 0xfffffffe, 0x3, 0x9, 0xc, 0x8001, 0x1, 0x0, 0xffff, 0x400018, 0x82, 0x2000006, 0x5]}) 3m57.943591517s ago: executing program 1 (id=24): mkdir(&(0x7f0000000480)='dir0\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='dir0\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x103a42, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000800)='./file1\x00', &(0x7f0000000840), 0x8, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x76, 0x4) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000006c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000700)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000740), 0x0, 0x1041) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001200)=0xdfa, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x6, 0x54888d21, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000100)={0x0, 0x100000}) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000340)={0x0, 0xfffffffa}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='net/dev_mcast\x00') writev(r4, &(0x7f0000000d80)=[{&(0x7f00000008c0)="c6af7cbd07e5d1716f544ea3a39bcc89af8640b8debf770aaad17192f2fc7a2a301d4e8a8141f4168eef9ccb185c6c7387099b41e237ecdc64b4c5b4995ad5fb7fd862b5e38091cff3b4d49aacd54a68ec3c70a487a1f1b81b674c2c3a694f322c74083d8612b7b7c28736c1888e83e6958fb087f37842c9dcdf3391f118ea04dbb0a9a751bf7db05743fe6e8c37c9c1661e4d51bf31a10f3e49555a55c6ebc3f2db9b3a64fe1c3f3d4360419f4cfd3a2754949a51b2dab97de3a77a5d5df414b1ff24879dce6d49c0551a2a37d08ecc503979ed1a", 0xd5}, {&(0x7f00000009c0)="7e2a831161192e991bd2447d7829d0a6bac4e14fde72ff16e35b3c1d4f2a4c68f6dd", 0x22}, {&(0x7f0000000a00)="6eae712143690639ff434e37cdda4e5f7be44c3f11cc5429578aed58c7a6b36112f9a617c6f6621f2f59e880d220d70569fb1fe1e8cca22cefde04f9a2f6ac", 0x3f}, {&(0x7f0000000a40)="34db06e19082b3", 0x7}, {&(0x7f0000000a80)="787ea51c7efee71f9baef30817de46faf4507df1ce75e69a28e51e4fa4d961df4ad7f3205316ac006de3c273e43dddace61b00096555a456eb68d9fb042ee171251647f1ab0529b4fb793989d2d5cd5a510d278b3b9949627652e76d5f6148c22dcf599345355db3cfdc554ea01d0a8014b9f3de45f79d57283d1b668d5efd120d56dd4996c749c36c973712", 0x8c}, {&(0x7f0000000b40)="44d1e97fe26cc54cdf24b0d4d609b2143b4c0ddd69273ac76a31efec8e7f6a5a1927cbe989566774e201c92b1619c0063b032c01ff32681e3bcdd76a9d03386ed3b901a9dbc548f66028d468d47a74dcc3a6af5798708f835c37648516e3f59b4d033f77d57377064b3a09b675d7351661534dcd54c4979b59b5d9d9894d9a4998f418bd57246ddae0c4dec6ae843250dccaf09a7d47c94ef8640448facccc48b1335d76d8ddadf12d4a11e8e0929537d9b0a2c6a6850116b05cb91aa2c8822eebbafdd6a38685d31aad94b406ea7ab0c1e88892dc95a2f78f6e8016190a4a6491e222c81cf243806449c7e2e6e660484ae4f630fc7808d2e4", 0xf9}, {&(0x7f0000000c40)="0f5555e617bb451f9eaf", 0xa}, {&(0x7f0000000c80)="839d384650a5c3539a98d542d44761864422cc13144c1256db980b17907bcf61bce3c9a50c6312d47784bffe3a558bfb7fd03775d76fdb3073d3bacd4f6be20b55b7c08c1b2dbc8034d23043f7988d73d952a50f8e3f562ca119af6e7bcbcca0ab61b0ee0cc177ad8c71eee8f6b7e10d853a4d04ada51065c0ce321a93d664f0820d64c7e11541fcf90612636fea643d00f437ae2f575228e233eb", 0x9b}, {&(0x7f0000000d40)="95f12454e24cf46fc3f4cd8664aab4e38f81affebb097f0a13ddf62fa0aec621af0ab97498609cbdd3acdc8872bc3d", 0x2f}], 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000140)={0x1fe, 0x0, &(0x7f0000000000/0x3000)=nil}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x5, r5, &(0x7f0000000180), 0x6) setpriority(0x1, r5, 0x6) syz_clone(0x20810000, &(0x7f00000001c0)="0a6c69877a6d129ff7e904478a6fcfb5e495bc5bc6620357a60cdd76154c233c2f677c64e35562c34d1e76ed73e9999935834f6bf21425ed25716ba42c309b1b4857face3d1ac0812c94ab5ac6d7ca9f9cd4636b6525068514e91c87a48935de", 0x60, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="e15464dc30a6a355cb732b272c12881b95b05a7408b083bca2ef54ddcc4e7e36c5c35a3a725002fb45acfff0d8de991206bb0b42de09cba344f6c5f898d94d59360f7cc21a390d24b5b5e5fd7100911e01") 3m57.657090844s ago: executing program 1 (id=25): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8901, &(0x7f0000000000)='\b') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)={0x50, 0xb, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x50}}, 0x0) 3m55.169578154s ago: executing program 1 (id=42): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[], 0xfdef) 3m53.654003668s ago: executing program 32 (id=42): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[], 0xfdef) 3m8.745381701s ago: executing program 2 (id=184): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) (fail_nth: 12) 3m7.875252594s ago: executing program 2 (id=186): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'fl512\x00', [0x100, 0x6, 0xf3, 0xc, 0x8, 0x5, 0x79, 0x3, 0x3, 0x100, 0x1000, 0x5, 0x6, 0x80000001, 0x0, 0xfd, 0xfffffffc, 0xf3, 0x10, 0x2, 0x8, 0x0, 0x0, 0x20001e58, 0xffffffff, 0x8000003, 0x6, 0x80000008, 0xa6b5, 0x4, 0xffffffff]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r4, &(0x7f0000000180)={0x0, 0x8000001, 0x3000, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1ffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x227}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c2e, 0x80020, 0x0, 0x312}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) 3m6.014463736s ago: executing program 2 (id=193): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="c1010000000000407f04ffff00000000000109022d0001000000000904000002030000000921000000012218000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0x17, {[@global=@item_4={0x3, 0x1, 0x5}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x1, 0x0, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @local=@item_4={0x3, 0x2, 0x9, "90a71301"}, @global=@item_012={0x1, 0x1, 0x1, '\b'}, @main=@item_012={0x1, 0x0, 0x2, "e8"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000380), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000400)={0x2, 0x81, 0x7}) 3m4.093449206s ago: executing program 2 (id=200): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa8}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @random="a7e97e5efc56", {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x9]}]}, 0x48}, 0x1, 0x0, 0x40000000, 0xc0}, 0x0) 3m3.803214667s ago: executing program 2 (id=203): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)="44401dad54cf1b7d3dc3a96a7a03d11529834f7c5b44545522", 0x19, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000280)=0xd, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @mss={0x2, 0x9}, @sack_perm], 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) memfd_create(0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r1, &(0x7f0000000540)='n', 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300), 0x4) sendto$inet(r0, &(0x7f0000000340)="3c5e2faf780a0e369bb0b6c0c871928fd34b237b0cdb2068ea2b602c1b8d1604b8b44a6c51", 0x25, 0x805, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x3ff, 0x0) ptrace$setregs(0xf, r2, 0x20000002, 0x0) ptrace$cont(0x21, r2, 0x5, 0x10000004) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40a01, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth0_virt_wifi\x00', 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f00000003c0)={'sit0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x5001}) socket$inet_udp(0x2, 0x2, 0x0) 3m3.367651046s ago: executing program 2 (id=207): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x200000002, 0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x2000c001, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x3}, 0xe) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x3, 0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff00000007058102000200070502020002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl(r1, 0x8914, &(0x7f0000000180)="7573623000000000000000000000000003") syz_usb_control_io$hid(r2, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m47.805871622s ago: executing program 33 (id=207): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x200000002, 0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x2000c001, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x3}, 0xe) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x3, 0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff00000007058102000200070502020002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl(r1, 0x8914, &(0x7f0000000180)="7573623000000000000000000000000003") syz_usb_control_io$hid(r2, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m13.717617652s ago: executing program 3 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbff, 0x300000002}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000a01060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060005000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100860000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0) 1m13.519910808s ago: executing program 3 (id=703): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x4, 0x700000000000000}, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000680)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_syzos={0x136, 0xd0, {0x2, 0x100000000, [@nested_amd_invlpga={0x17d, 0x20, {0x2, 0x6038}}, @rdmsr={0x66, 0x18, {0xa09}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x615, 0xfff, 0x40}}, @set_irq_handler={0xc8, 0x20, {0xd, 0x1}}, @wr_crn={0x67, 0xfffffffffffffc50, {0x3, 0x1}}]}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18}], 0x130}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0xc800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r7, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x29c}], 0x1, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000301019e"], 0x38}}, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0x3, 0x11, r5, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x5) ioctl$SG_IO(r10, 0x2285, 0x0) writev(r10, &(0x7f0000000240)=[{&(0x7f0000000280)="aefdda9d240300005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f00000002c0)="a51d484e240000000000f7caaff96b2fc08bfcd111fbdf23ea32db0e8f21d5bc27bd80d85e4475117000ba4294ecbb", 0x2f}, {&(0x7f0000000300)="f2663698d8ab9661b11b5aada2ed772e2df40b277f5f4989c1c2797600ae4882d55d8b98ca7e2728fde7", 0x2a}], 0x3) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r5, r9, 0xe2e20005) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r5, r9, 0xe2e20001) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r5, r9, 0xffffffffffffffff) 1m12.956434371s ago: executing program 0 (id=705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="034886dd010000000000140000006028000001082f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000010000883e"], 0xfdef) (fail_nth: 5) 1m12.388441573s ago: executing program 0 (id=707): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x829, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}, 0x1, 0x0, 0x0, 0x14}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000003000000000400000000000000080000000000000003000000b86b"], 0xd4}}, 0x0) 1m12.272195603s ago: executing program 0 (id=708): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x151) syz_io_uring_setup(0x28b1, &(0x7f0000000840)={0x0, 0x5cfc, 0x100, 0xfffffffe, 0x12}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_NOP128={0x3f, 0x48, 0x0, 0xffffffffffffffff, 0x2, 0x8001, 0x4, 0x0, 0x0, {0x86}}) r4 = syz_open_procfs(0x0, &(0x7f0000000a00)='fdinfo/3\x00') read$qrtrtun(r4, &(0x7f0000000a40)=""/57, 0x39) r5 = memfd_create(&(0x7f0000000300)='\x9d#\x00\xe6Z\x00\xa7\x8c\x12-a\x9bg2\x1b\x18\xc9\r\xd0\xdd\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\xff|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E\x8d\xe7\xec,%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03!a8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\b\x00}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5\x03\x02=\x83\xe5v\x95)\x1d\xaf\n\xc0\xc1\x1d}g\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8\x06\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00@\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9e\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\xcc\x02\x00\x00\xca\x98\xaeS\x92Ew`\xd2\x02\xda\x83=\x88m\x9b\xc6\xabM\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\xf1\xdbX_I\x143\xd6\x92M\xa5\xd1\xddN\xf9iL\t3\xadDz\\\xf4`\x13\xf7\x00\x00\x00\x00\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\x00\x00\x00\x00\xc6\xdd\x1a@\x110=\xd1\x1d3\xc4\x92\xaaL\x17\xfc\xa8i\xa8\xf8\x93]\xe7E(3[\xa2\xccp\xbf\xd0]\x1d\xc42@\x0ea*\x12\xbf8\x1c1\x92\xc6Z\xb3\x81\xf2\xbf\xeb\xe5Wp\xd2^\xb3\x0e\x91k\xc5p\xc2\xe4\xda\xe4\xe0\x1c\xd7\xbf\x82\x01\xfa\xf9\x7f\x13E\x91\x02\xef|\xa6\x1c\x8d]\xb1\xdc,\xac\x13E\x7fBj\xa8o\xbb\xeb`\x9a\v\x9c\x9d\xe4\xe1\xf9\x7fV\x8de\xc7\x93\x02\xfd\xf1i\xd4y\x97+\xd6\x01\x87\x9b\x93X`\xd9\x8c1\xe4\xc2\x99\xbdK$z\x87\n\xb4as\xa0\xdb\xc3\"\xb9\xe8\xa7\x9c\x1a\xebS\xcf\xd4\xd6\xf5\xf9\xb1\x12\x02OL\xc4\xd2\x9a\x7fq\x87\x17\xef\xef\nI#\xad\x1b\x9e\xb03\xfb\x9c]~\x1awi\\\x9adMvz\xea\xf8E\xdb\x0e\xec\xc4og\xa5\xb3,W\xf2\xde\xef\xe4\xb9\xaf\xcbM@\x10\x89\v\xabk\xed\x14\x87,?\xac\xaf\x19\x86\xdaz\x1cJ\xa0\x1cqH\n\xe9u\xb6)\x03\x1e)\x04\xf9;\xc8\xecy\xca\xcfs;\xf1\x02.K\xf7\xf4\xac\xff)V\xf8i\xf2\x0e\x02\x8frYN(Adl\xb1\xd3\x1e\x87\x16\xefv\xb82g?Z\x93\xf4+\xf7\xd0\x1c\x87\xda\xde9\xafnp\x94\ne\x03\xcc\x14A\x16\xd4\xf4\xd2\xc8\xef\xac\xfaz\nh`\xc4\xeb#X\xf89\x94\xafdz5\xf2\x9fj\x05\x1c~UNE\xa7\x88\x11\x1b\xf9\xe4\x12\xdf \xe1\xf3\xd49\xcdn\xd0\xdf\xdc(4o\xff\xf4\x0f]\xb4\xaa\xb9\xf4x\x96\xc9rR', 0x4) lseek(r5, 0xfffffffffffffffe, 0x3) splice(r5, &(0x7f0000000080)=0xffffffffffffffff, r5, &(0x7f0000000200)=0x10001, 0x9, 0x0) r6 = memfd_secret(0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r6, 0xc008551c, &(0x7f0000000280)={0x6, 0x14, [0x4, 0x80000000, 0x9, 0x80000000, 0x0]}) write$rnull_attr(r6, &(0x7f0000000040)='4096', 0x4) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @pix={0x280, 0x1e0, 0x42474752, 0x5, 0x0, 0x10000}}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x206083, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r8) sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)={0x30, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x240040c4) connect$pppl2tp(r7, 0x0, 0x0) open(&(0x7f0000000a80)='./bus\x00', 0x40016b042, 0x2a) syz_open_dev$sg(&(0x7f0000000ac0), 0x0, 0x8401) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000dc0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000e00)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r11}) r12 = syz_open_dev$sndpcmp(0x0, 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r12, 0xc2604111, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000e80)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x24602aa}) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000f00)={'batadv_slave_0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) 1m12.120035549s ago: executing program 3 (id=710): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x1, &(0x7f0000000000)) 1m12.032253156s ago: executing program 4 (id=711): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000043340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000433c0)="110000001000030000000000f4ff0000000000000000", 0x16) 1m12.031441587s ago: executing program 0 (id=712): r0 = add_key$keyring(&(0x7f0000001100), &(0x7f0000001180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000011c0), &(0x7f0000001200)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000012c0), &(0x7f0000001300)={'syz', 0x1}, 0x0, 0x0, r2) add_key(&(0x7f0000001340)='rxrpc\x00', 0x0, &(0x7f0000001380)="0000000000000002ff6900000000006ef829b975b4afa65a1100ecd9df1eaa01000000180000000200020086", 0x2c, r3) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000001140)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000140)='27', 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000e00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) capset(&(0x7f0000000180)={0x19980330}, 0x0) add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000380)="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", 0x559, 0xffffffffffffffff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000300)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000001740)=ANY=[@ANYBLOB="e9f94f66e1bffabf1572d16d67fd654d0e4abf31c5554af0ed946535dde125712f015900f18f7d6b30a75de863f744d7035742555557a65b6d88c5d8e08ae5122e3bc2893ec97cd1f46ca7046a9494d7ea04b749fc21478136e8de4c44d7319153b687e6a74744427f172d8a445c29245f28a1e1c4cc5314a368cbd1e02c014cfc20a2a77ea9732f60ba44c69a10b1e5f74d2ace6a815e5c4df0fb0300beed7d537119798812a51068bf03a1f43b1f881b84e4e65f11", @ANYBLOB="3fc222908cabe1f03741d46218926722ed239551f7c4eda7e2103ee2f830d0109d87feed0f3fb8ba71895005e101d8c73b10d4044160a4a376501f8029e2133fd4bf7a3a5f87ca51b979", @ANYBLOB="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"], 0x324}, 0x1, 0x0, 0x0, 0xc010}, 0x12) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='numa_maps\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000d00)={0x0, 0x0}) capset(&(0x7f0000000d80)={0x20071026, r10}, &(0x7f0000000dc0)={0x4, 0x4, 0x10000, 0xb3e, 0xc, 0xa}) 1m11.709994129s ago: executing program 4 (id=713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000007c0)=0x8001, 0x4) bind$inet6(r5, &(0x7f0000000800)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000840)=[{{&(0x7f0000000880)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000940)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000980), 0x0, 0x804) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in=@loopback, @in=@remote, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@broadcast, @in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x6c, 0x1, 0x0, 0x4, 0x0, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f0000000040)) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1467000007eb7205000000000000000000002006"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 1m11.324325848s ago: executing program 3 (id=714): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) 1m11.294669078s ago: executing program 0 (id=715): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="fb", 0xffffff5c}, {&(0x7f0000000080)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) ppoll(&(0x7f0000000140)=[{r0, 0x41c}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') pread64(r1, &(0x7f00000001c0)=""/48, 0x30, 0x8) 1m11.175632886s ago: executing program 5 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000715000300686173683a69702c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) 1m11.077989488s ago: executing program 5 (id=717): r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x16f3ba41, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x43}, 0x1c, 0x0, 0x0, 0x0, 0xff97, 0x6400}}], 0x1, 0x4001c00) 1m10.945469387s ago: executing program 4 (id=718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400200000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0) 1m10.88849561s ago: executing program 5 (id=719): r0 = socket(0x2, 0x3, 0xa) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0xfffffff8, 0x2d, 0xfffffffd, 0xc4cf, 0x3, "010000000000000000ff7f0000000d00", 0x9, 0x200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x8) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) 1m10.766446471s ago: executing program 4 (id=720): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000000700)=""/67, 0x43}, {&(0x7f00000009c0)=""/4093, 0xffd}, {&(0x7f00000019c0)=""/151, 0x97}, {&(0x7f0000001a80)=""/109, 0x6d}, {&(0x7f0000001b00)=""/127, 0x7f}], 0x6}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x80003}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x0, 0x0) 1m10.737004186s ago: executing program 5 (id=721): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x58, 0xa, 0x3, "3258c5c0008faa001b0000f4ff4000000000000000e926ba280000000000e7ff", 0x30314142}) 1m10.631186336s ago: executing program 4 (id=722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010"], 0x7c}, 0x1, 0x0, 0x0, 0xd000000}, 0x0) 1m10.629376797s ago: executing program 3 (id=723): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x161) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x2}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000340)="f3aebd6969fa0000000f01d9660f78c4020a1bf7b805008300b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f06", 0x47}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000200)) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x1000000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x22203, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [{0xce, 0x0, 0x1000}, {0x11a, 0x0, 0x47ffffffffffffd}]}) openat(0xffffffffffffffff, 0x0, 0x6ec480, 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000001e80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000001ec0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000f, 0x8010, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000001f00)='asymmetric\x00', &(0x7f0000001f40)={'syz', 0x1}, &(0x7f0000001f80)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 1m10.552127055s ago: executing program 5 (id=724): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x2, 0xa38, [0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x20, 0x88a2, 'veth0_to_bridge\x00', 'sit0\x00', 'bridge_slave_0\x00', 'veth0_vlan\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @random="df0921f6558b", [0xff, 0xff, 0xff, 0xff], 0x0, 0x8b8, 0x8b8, 0x908, [@among={{'among\x00', 0x0, 0x820}, {{@offset=0x28, @zero, 0x2, {[0x8, 0x7, 0x200, 0x7, 0x2c0, 0x5564, 0x6, 0x7f, 0x6, 0x0, 0x6ff8, 0x8, 0x1ff, 0x4e, 0xb, 0x3, 0x6, 0x10000, 0x9, 0xfffffff8, 0x9, 0xa, 0x9, 0x19e, 0x7, 0x3, 0x2, 0xffff1255, 0x4, 0xfffffff7, 0x7fff, 0x7, 0x6, 0x83, 0x7, 0x6, 0x5, 0x7, 0x8, 0xb, 0x7, 0x54d, 0x1, 0xf23, 0x1, 0x8, 0x6, 0x40, 0x9, 0x0, 0x6, 0x200, 0x0, 0x5, 0x30000, 0x6, 0x1364, 0x1, 0x8, 0xf871, 0x5, 0x7, 0x5ee, 0x7, 0x6, 0xe9, 0x5, 0x5, 0x101, 0xfff, 0x8000, 0x7e20, 0x2, 0x5d6, 0x9, 0xf, 0x6, 0x8, 0x1, 0x622a, 0x7486, 0x6, 0xffffffff, 0x77cc2895, 0x7fffffff, 0x7, 0x3, 0x4, 0x6, 0xe0000000, 0x9, 0x8, 0x8, 0x8, 0x3, 0x8, 0x2, 0x64c0c08d, 0xaaf, 0x5, 0xba87, 0x81, 0x1df, 0x3, 0xa22, 0x9b, 0x9, 0x49ff, 0x9, 0x4, 0xc5, 0x5, 0x2, 0x0, 0x3, 0x54c57863, 0x8, 0xf5, 0xdcca, 0xb683, 0x9, 0x5, 0xff, 0x3, 0x0, 0x2, 0x6, 0x5, 0x7, 0x7, 0x3, 0x5, 0xc000000, 0x5, 0xc4, 0x2, 0x3, 0x7, 0xb, 0x3e8, 0x5, 0x8, 0xee, 0x1000, 0xea, 0x6aa, 0x10, 0x6, 0x3, 0x8, 0x6, 0x5, 0x10001, 0x1, 0x9, 0x1, 0x0, 0x3e, 0xba920, 0x2, 0x5b4, 0x7fff, 0x2118, 0x5, 0x1151, 0x4, 0x1, 0x2, 0x400, 0xb9, 0xff, 0x2, 0x9, 0x7, 0xfffffffc, 0x40, 0x1, 0x5, 0x2, 0x38a, 0x3, 0xa, 0x4, 0x0, 0x17d, 0x39c6, 0x8, 0xff, 0x7, 0x3, 0x40, 0x3, 0x6, 0x4, 0x6, 0x6, 0x200, 0x2000, 0x8, 0x7, 0x2, 0x4c, 0xf7a, 0x0, 0x1, 0x80000001, 0x6, 0x2, 0xb56, 0xff, 0x6, 0x4, 0x8001, 0x10001, 0x3, 0x0, 0x7, 0xffff, 0x7, 0x2, 0x800, 0x4, 0xd, 0x7fffffff, 0x2, 0x5f, 0xffffffff, 0x10, 0x0, 0xb, 0x4, 0x4, 0x1, 0x3464, 0x2, 0x0, 0x1, 0x0, 0x401, 0x5, 0x2c9, 0xfffffffc, 0xe, 0x43, 0x1540, 0x4, 0x80, 0x6, 0x4, 0x3ff, 0x464, 0x6a, 0x6, 0x9, 0x2, 0x9, 0x8000], 0xc00}, {[0x5, 0x4, 0x0, 0x7ff, 0x4, 0x9, 0x55dca6e2, 0x5a, 0xc, 0x51, 0xb, 0x2, 0x9, 0x1, 0x7, 0xffffffff, 0x7, 0x7, 0x4, 0x6348, 0xffff, 0x7, 0x4, 0x1bb1, 0x4, 0x7, 0x2, 0x9, 0x2, 0x5, 0x10000, 0x7f, 0x9, 0xdd9, 0xffffffff, 0x1, 0x1e6, 0x8, 0x4f1, 0x4, 0xfffffff7, 0x9, 0x4, 0x8c, 0x5, 0x0, 0x8, 0x10001, 0x2, 0x76, 0x6, 0x40, 0x1000, 0x1, 0x9, 0x6, 0x7, 0x3, 0x7, 0x2, 0xfff, 0x8, 0x0, 0x1, 0x9, 0x800, 0x8b41, 0x8, 0xa50a, 0x3ff, 0xffffff52, 0x7, 0x0, 0x4, 0x9, 0x3e000, 0x40, 0x45, 0x0, 0x9, 0x4, 0x9, 0x2, 0x5, 0xaa, 0x7fffffff, 0x10001, 0x94, 0x9, 0x4, 0x2, 0x80, 0xc, 0x5, 0x3, 0x2d85, 0x4, 0x7, 0x7, 0x7, 0xa, 0x1, 0x9, 0xd98, 0xc, 0x4c, 0x3, 0x9, 0x6, 0xfff, 0x1000, 0x0, 0xfff, 0x4, 0x1, 0x80, 0x7fffffff, 0x1ff, 0x401, 0x3, 0x1a, 0x10000, 0x2, 0x5, 0xfffffff8, 0x1, 0xda0, 0x2, 0xc33, 0x4, 0x4, 0x50000, 0x9, 0x2, 0x0, 0x6, 0x4, 0x9, 0x0, 0x80000001, 0x4707, 0x2, 0x6, 0x8, 0x4, 0x8, 0x0, 0x5, 0xe25, 0x9, 0x6, 0xfb, 0x3ff, 0x9, 0x5, 0x1, 0xe3a, 0x49f, 0xc, 0x401, 0x773c0cea, 0xffffffff, 0x4, 0x9, 0x82, 0x9, 0x8, 0x401, 0x2, 0x7, 0x9a, 0x7, 0x0, 0x80000001, 0x3, 0x1, 0xa663, 0x2, 0xd3f, 0x7, 0x1, 0xa, 0x42b3, 0x0, 0x7, 0xc33, 0x1000, 0x5, 0x0, 0x8, 0x6a, 0x81, 0x2, 0x8d3, 0x1000, 0x9, 0xfffffe00, 0x5, 0x3, 0x6f62, 0xc, 0x0, 0x6, 0x3, 0x0, 0x5, 0x80200000, 0x5, 0x7, 0x0, 0xffffff7f, 0xa6f, 0xc13, 0x0, 0x91, 0x4, 0x7, 0x10001, 0x7, 0x739, 0x7, 0x3, 0x7, 0xa4d0, 0x3, 0x2, 0x4cc5, 0x3, 0x1, 0x0, 0x7, 0x8, 0x7, 0xf, 0xf85, 0x7, 0x3, 0x40000, 0x9, 0x8, 0xa, 0x4, 0x9, 0x4, 0x4, 0x3ff, 0x3, 0x4, 0xbd3, 0x6, 0x6a98, 0x9, 0x2, 0xd35, 0x299, 0x401, 0x1]}}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xf46, 'syz1\x00', {0x7}}}}}, {0x11, 0x20, 0xcdcf60ba08825cd4, 'veth0_to_hsr\x00', 'nicvf0\x00', 'dummy0\x00', 'macsec0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff], @remote, [0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0xab0) 1m10.438295479s ago: executing program 5 (id=725): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000000100)='X', 0x34000, 0xe0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000300)='7', 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xc, 0x6}, 0x9c) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$kcm(0xa, 0x5, 0x0) sendfile(r4, r4, 0x0, 0x4) listen(r3, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) r6 = accept4(r3, 0x0, 0x0, 0x0) close(r6) close(r5) 1m10.347778463s ago: executing program 4 (id=726): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x202c027, &(0x7f00000000c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='net_prio.prioidx\x00', 0x275a, 0x0) syz_open_dev$vcsn(&(0x7f0000000240), 0x6, 0x4100) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8001, 0xfffffffffffff18f, 0x1, 0x0, 0x2, 0x3, 0x1, 0x6, 0x6}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x20010, 0xffffffffffffffff, 0x3a8b2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c020000190001002dc67000ffdbdf2500000000000000000000ffffac1414bbac1414bb0000000000000000000000004e20000bf7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000060000000000000080000000000000000000000000000000fcffffff00000000000000000000000084010500fc000000000000000000000000000004000000053c000000000000000000000000000000000000000000000002350000000200000000000000000000fc7f0000fe8000000000000000000000000000bb000000003c0000000a00000000000000000000000000000000000001fdffffff0403000000080000000800000000000000000000000000000000000000000001000000003200000000000000000000000000000000000000000000000335000001000400080000000000000000000000e0000002000000000000000000000000000100003300000000000000ff020000000000000000000000000001043500000002040000000000bb0a00000000000000000000000000000000000000000000000004d43200000000000000ac1414aa0000000000000000000000000400000002010800fdffffff00000000fe030000ac14141c000000000000000000000000000000003c0000000a000000fe8000000000000000000000000000aa0000000004020000000001000000000000000000"], 0x23c}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r2 = syz_clone(0x120000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r2, 0xc, 0x0, 0x0) 1m10.241771663s ago: executing program 0 (id=727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000007c0)=0x8001, 0x4) bind$inet6(r5, &(0x7f0000000800)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000840)=[{{&(0x7f0000000880)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000940)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000980), 0x0, 0x804) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in=@loopback, @in=@remote, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@broadcast, @in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x6c, 0x1, 0x0, 0x4, 0x0, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f0000000040)) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1467000007eb7205000000000000000000002006"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 1m10.241554453s ago: executing program 3 (id=728): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000400)="580000001400010300000000000000001e000000ffffffff0000000000000000000100"/88, 0x58) 0s ago: executing program 34 (id=727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000007c0)=0x8001, 0x4) bind$inet6(r5, &(0x7f0000000800)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000840)=[{{&(0x7f0000000880)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000940)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000980), 0x0, 0x804) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in=@loopback, @in=@remote, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@broadcast, @in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x6c, 0x1, 0x0, 0x4, 0x0, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f0000000040)) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1467000007eb7205000000000000000000002006"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) kernel console output (not intermixed with test programs): quarantine_put+0xbb/0x1f0 [ 232.702542][ T7966] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 232.702576][ T7966] ? do_vfs_ioctl+0x116f/0x1530 [ 232.702601][ T7966] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 232.702650][ T7966] ? __fget_files+0x2a/0x420 [ 232.702671][ T7966] ? __fget_files+0x2a/0x420 [ 232.702689][ T7966] ? __fget_files+0x2a/0x420 [ 232.702711][ T7966] ? bpf_lsm_file_ioctl+0x9/0x20 [ 232.702732][ T7966] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 232.702753][ T7966] __se_sys_ioctl+0xfc/0x170 [ 232.702778][ T7966] do_syscall_64+0x166/0x520 [ 232.702802][ T7966] ? trace_irq_disable+0x3b/0x140 [ 232.702822][ T7966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.702839][ T7966] ? clear_bhb_loop+0x70/0xc0 [ 232.702859][ T7966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.702875][ T7966] RIP: 0033:0x7ff03679f559 [ 232.702890][ T7966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.702904][ T7966] RSP: 002b:00007ff03760f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.702922][ T7966] RAX: ffffffffffffffda RBX: 00007ff036a25fa0 RCX: 00007ff03679f559 [ 232.702935][ T7966] RDX: 00002000000001c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 232.702951][ T7966] RBP: 00007ff03760f090 R08: 0000000000000000 R09: 0000000000000000 [ 232.702961][ T7966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.702971][ T7966] R13: 00007ff036a26038 R14: 00007ff036a25fa0 R15: 00007ffcf1f24d28 [ 232.702997][ T7966] [ 232.704419][ T7966] comedi comedi1: 8255: I/O port conflict (0xf000,4) [ 233.219773][ T195] usb 6-1: USB disconnect, device number 12 [ 233.600999][ T14] IPVS: starting estimator thread 0... [ 233.691637][ T7988] IPVS: using max 38 ests per chain, 91200 per kthread [ 233.957814][ T7999] tipc: Started in network mode [ 233.957848][ T7999] tipc: Node identity 428e75c71f42, cluster identity 4711 [ 234.016289][ T7999] tipc: Enabled bearer , priority 20 [ 234.018348][ T8002] smc: removing ib device rxe0 [ 234.257499][ T8004] loop5: detected capacity change from 0 to 7 [ 234.355902][ T8004] Dev loop5: unable to read RDB block 7 [ 234.355938][ T8004] loop5: unable to read partition table [ 234.377152][ T8004] loop5: partition table beyond EOD, truncated [ 234.377183][ T8004] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑû) failed (rc=-5) [ 234.566954][ T8002] smbdirect: ib_dev[rxe0] removed [ 234.941104][ T195] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 235.048238][ T8015] : entered promiscuous mode [ 235.071566][ T7103] tipc: Node number set to 1573680583 [ 235.091616][ T195] usb 5-1: New USB device found: idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 235.092453][ T195] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 235.096855][ T195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.096875][ T195] usb 5-1: Product: syz [ 235.096887][ T195] usb 5-1: Manufacturer: syz [ 235.096898][ T195] usb 5-1: SerialNumber: syz [ 235.183543][ T195] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 235.183583][ T195] dvb-usb: bulk message failed: -22 (3/0) [ 235.244908][ T195] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 235.247664][ T195] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 235.247714][ T195] usb 5-1: media controller created [ 235.326457][ T195] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.388789][ T8013] dvb-usb: bulk message failed: -22 (4/0) [ 235.437280][ T8013] openvswitch: netlink: Unexpected mask (mask=100000090, allowed=100010058) [ 235.498223][ T8013] syzkaller1: entered promiscuous mode [ 235.498242][ T8013] syzkaller1: entered allmulticast mode [ 235.609359][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 235.631496][ T195] DVB: Unable to find symbol mt352_attach() [ 235.631510][ T195] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 235.633499][ T195] dvb-usb: bulk message failed: -22 (3/0) [ 235.651253][ T195] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 236.096047][ T8035] netlink: 148 bytes leftover after parsing attributes in process `syz.3.548'. [ 236.096120][ T8035] netlink: 56 bytes leftover after parsing attributes in process `syz.3.548'. [ 236.096133][ T8035] validate_nla: 25 callbacks suppressed [ 236.096143][ T8035] netlink: 'syz.3.548': attribute type 1 has an invalid length. [ 236.249155][ T5793] usb 5-1: USB disconnect, device number 25 [ 236.474126][ T8042] netlink: 'syz.0.549': attribute type 4 has an invalid length. [ 236.474147][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.549'. [ 236.502678][ T5793] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 236.517094][ T8034] can0: slcan on ttyprintk. [ 236.839730][ T8032] can0 (unregistered): slcan off ttyprintk. [ 237.047958][ T8051] openvswitch: netlink: Message has 8 unknown bytes. [ 237.047988][ T8051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.349764][ T5793] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 237.434514][ T8056] FAULT_INJECTION: forcing a failure. [ 237.434514][ T8056] name failslab, interval 1, probability 0, space 0, times 0 [ 237.434541][ T8056] CPU: 0 UID: 0 PID: 8056 Comm: syz.4.552 Not tainted syzkaller #0 PREEMPT(full) [ 237.434560][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 237.434586][ T8056] Call Trace: [ 237.434592][ T8056] [ 237.434603][ T8056] dump_stack_lvl+0xe8/0x150 [ 237.434632][ T8056] should_fail_ex+0x3eb/0x540 [ 237.434663][ T8056] should_failslab+0xa8/0x100 [ 237.434687][ T8056] ? security_inode_alloc+0x39/0x310 [ 237.434712][ T8056] kmem_cache_alloc_noprof+0x9c/0x600 [ 237.434731][ T8056] ? security_inode_alloc+0x39/0x310 [ 237.434761][ T8056] security_inode_alloc+0x39/0x310 [ 237.434787][ T8056] inode_init_always_gfp+0x97e/0xd30 [ 237.434809][ T8056] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 237.434826][ T8056] alloc_inode+0x82/0x1b0 [ 237.434843][ T8056] new_inode+0x1f/0x170 [ 237.434864][ T8056] __debugfs_create_file+0xb8/0x400 [ 237.434884][ T8056] debugfs_create_file_short+0x3f/0x60 [ 237.434903][ T8056] ieee80211_debugfs_recreate_netdev+0x3c9/0x14b0 [ 237.434932][ T8056] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 237.434969][ T8056] drv_remove_interface+0x1e6/0x580 [ 237.434995][ T8056] ieee80211_change_mac+0x905/0x12f0 [ 237.435017][ T8056] ? notifier_call_chain+0x3aa/0x3d0 [ 237.435040][ T8056] netif_set_mac_address+0x309/0x4d0 [ 237.435069][ T8056] ? __pfx_netif_set_mac_address+0x10/0x10 [ 237.435097][ T8056] ? down_write+0x166/0x200 [ 237.435114][ T8056] ? __pfx_down_write+0x10/0x10 [ 237.435131][ T8056] ? __dev_get_by_name+0xe5/0x130 [ 237.435161][ T8056] dev_set_mac_address_user+0x130/0x270 [ 237.435187][ T8056] dev_ioctl+0x7b4/0x1150 [ 237.435213][ T8056] sock_do_ioctl+0x23e/0x320 [ 237.435231][ T8056] ? __pfx_sock_do_ioctl+0x10/0x10 [ 237.435270][ T8056] sock_ioctl+0x57a/0x7e0 [ 237.435296][ T8056] ? __fget_files+0x2a/0x420 [ 237.435314][ T8056] ? __pfx_sock_ioctl+0x10/0x10 [ 237.435339][ T8056] ? __fget_files+0x2a/0x420 [ 237.435357][ T8056] ? __fget_files+0x2a/0x420 [ 237.435379][ T8056] ? bpf_lsm_file_ioctl+0x9/0x20 [ 237.435401][ T8056] ? __pfx_sock_ioctl+0x10/0x10 [ 237.435426][ T8056] __se_sys_ioctl+0xfc/0x170 [ 237.435451][ T8056] do_syscall_64+0x166/0x520 [ 237.435482][ T8056] ? trace_irq_disable+0x3b/0x140 [ 237.435503][ T8056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.435519][ T8056] ? clear_bhb_loop+0x70/0xc0 [ 237.435540][ T8056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.435556][ T8056] RIP: 0033:0x7f13f859f559 [ 237.435572][ T8056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.435586][ T8056] RSP: 002b:00007f13f952f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.435603][ T8056] RAX: ffffffffffffffda RBX: 00007f13f8825fa0 RCX: 00007f13f859f559 [ 237.435616][ T8056] RDX: 0000200000000340 RSI: 0000000000008924 RDI: 0000000000000004 [ 237.435627][ T8056] RBP: 00007f13f952f090 R08: 0000000000000000 R09: 0000000000000000 [ 237.435638][ T8056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.435647][ T8056] R13: 00007f13f8826038 R14: 00007f13f8825fa0 R15: 00007ffca5be3f28 [ 237.435674][ T8056] [ 237.505719][ T5793] usb 4-1: Using ep0 maxpacket: 16 [ 237.586408][ T5793] usb 4-1: New USB device found: idVendor=28bd, idProduct=0071, bcdDevice=0.00 [ 237.586577][ T8056] debugfs: out of free dentries, can not create file 'rc_rateidx_mcs_mask_2ghz' [ 237.623413][ T5793] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.623436][ T5793] usb 4-1: config 0 has no interface number 0 [ 237.623469][ T5793] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.623489][ T5793] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.623519][ T5793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.882657][ T5793] usb 4-1: config 0 descriptor?? [ 238.054019][ T8059] FAULT_INJECTION: forcing a failure. [ 238.054019][ T8059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.054047][ T8059] CPU: 0 UID: 0 PID: 8059 Comm: syz.0.553 Not tainted syzkaller #0 PREEMPT(full) [ 238.054069][ T8059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 238.054080][ T8059] Call Trace: [ 238.054087][ T8059] [ 238.054095][ T8059] dump_stack_lvl+0xe8/0x150 [ 238.054124][ T8059] should_fail_ex+0x3eb/0x540 [ 238.054155][ T8059] _copy_from_user+0x2d/0xb0 [ 238.054172][ T8059] __se_sys_capset+0x23e/0x450 [ 238.054196][ T8059] ? __pfx___se_sys_capset+0x10/0x10 [ 238.054224][ T8059] ? rcu_is_watching+0x16/0xb0 [ 238.054257][ T8059] do_syscall_64+0x166/0x520 [ 238.054283][ T8059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.054300][ T8059] ? clear_bhb_loop+0x70/0xc0 [ 238.054320][ T8059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.054337][ T8059] RIP: 0033:0x7ff03679f559 [ 238.054352][ T8059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.054367][ T8059] RSP: 002b:00007ff03760f028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 238.054384][ T8059] RAX: ffffffffffffffda RBX: 00007ff036a25fa0 RCX: 00007ff03679f559 [ 238.054396][ T8059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 238.054407][ T8059] RBP: 00007ff036836b50 R08: 0000000000000000 R09: 0000000000000000 [ 238.054417][ T8059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.054427][ T8059] R13: 00007ff036a26038 R14: 00007ff036a25fa0 R15: 00007ffcf1f24d28 [ 238.054452][ T8059] [ 238.662147][ T5793] uclogic 0003:28BD:0071.0008: pen parameters not found [ 238.662175][ T5793] uclogic 0003:28BD:0071.0008: interface is invalid, ignoring [ 238.725621][ T8074] process 'syz.4.557' launched './file0' with NULL argv: empty string added [ 238.740507][ T8073] FAULT_INJECTION: forcing a failure. [ 238.740507][ T8073] name failslab, interval 1, probability 0, space 0, times 0 [ 238.740531][ T8073] CPU: 0 UID: 0 PID: 8073 Comm: syz.4.557 Not tainted syzkaller #0 PREEMPT(full) [ 238.740550][ T8073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 238.740560][ T8073] Call Trace: [ 238.740567][ T8073] [ 238.740575][ T8073] dump_stack_lvl+0xe8/0x150 [ 238.740603][ T8073] should_fail_ex+0x3eb/0x540 [ 238.740631][ T8073] should_failslab+0xa8/0x100 [ 238.740656][ T8073] __kmalloc_cache_noprof+0x9e/0x600 [ 238.740676][ T8073] ? init_srcu_struct_fields+0x83/0xbd0 [ 238.740695][ T8073] ? init_srcu_struct_fields+0x83/0xbd0 [ 238.740720][ T8073] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 238.740742][ T8073] init_srcu_struct_fields+0x83/0xbd0 [ 238.740769][ T8073] kvm_dev_ioctl+0x5b9/0x1700 [ 238.740790][ T8073] ? __fget_files+0x2a/0x420 [ 238.740809][ T8073] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 238.740829][ T8073] ? bpf_lsm_file_ioctl+0x9/0x20 [ 238.740850][ T8073] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 238.740866][ T8073] __se_sys_ioctl+0xfc/0x170 [ 238.740892][ T8073] do_syscall_64+0x166/0x520 [ 238.740917][ T8073] ? trace_irq_disable+0x3b/0x140 [ 238.740937][ T8073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.740954][ T8073] ? clear_bhb_loop+0x70/0xc0 [ 238.740974][ T8073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.740990][ T8073] RIP: 0033:0x7f13f859f559 [ 238.741005][ T8073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.741019][ T8073] RSP: 002b:00007f13f952f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.741037][ T8073] RAX: ffffffffffffffda RBX: 00007f13f8825fa0 RCX: 00007f13f859f559 [ 238.741049][ T8073] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 238.741059][ T8073] RBP: 00007f13f8636b50 R08: 0000000000000000 R09: 0000000000000000 [ 238.741070][ T8073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.741079][ T8073] R13: 00007f13f8826038 R14: 00007f13f8825fa0 R15: 00007ffca5be3f28 [ 238.741105][ T8073] [ 238.884511][ T195] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 239.078204][ T195] usb 1-1: New USB device found: idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 239.095441][ T195] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 239.095462][ T195] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 239.123757][ T195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.123781][ T195] usb 1-1: Product: syz [ 239.123792][ T195] usb 1-1: Manufacturer: syz [ 239.123804][ T195] usb 1-1: SerialNumber: syz [ 239.168377][ T195] usb 1-1: config 0 descriptor?? [ 239.187691][ T195] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 239.435545][ T8084] FAULT_INJECTION: forcing a failure. [ 239.435545][ T8084] name failslab, interval 1, probability 0, space 0, times 0 [ 239.435571][ T8084] CPU: 0 UID: 0 PID: 8084 Comm: syz.4.559 Not tainted syzkaller #0 PREEMPT(full) [ 239.435590][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 239.435601][ T8084] Call Trace: [ 239.435608][ T8084] [ 239.435615][ T8084] dump_stack_lvl+0xe8/0x150 [ 239.435647][ T8084] should_fail_ex+0x3eb/0x540 [ 239.435678][ T8084] should_failslab+0xa8/0x100 [ 239.435701][ T8084] ? __kernfs_new_node+0xe6/0x980 [ 239.435728][ T8084] kmem_cache_alloc_noprof+0x9c/0x600 [ 239.435747][ T8084] ? __kernfs_new_node+0xe6/0x980 [ 239.435778][ T8084] __kernfs_new_node+0xe6/0x980 [ 239.435803][ T8084] ? kasan_save_track+0x4f/0x80 [ 239.435823][ T8084] ? __kasan_kmalloc+0x93/0xb0 [ 239.435843][ T8084] ? __kmalloc_cache_noprof+0x31c/0x600 [ 239.435861][ T8084] ? kset_create_and_add+0x5a/0x170 [ 239.435886][ T8084] ? __pfx___kernfs_new_node+0x10/0x10 [ 239.435912][ T8084] ? kernfs_root+0x1c/0x230 [ 239.435941][ T8084] ? kernfs_root+0x1c/0x230 [ 239.435965][ T8084] ? kernfs_root+0x1c/0x230 [ 239.435988][ T8084] ? kernfs_root+0x1c/0x230 [ 239.436015][ T8084] kernfs_create_dir_ns+0xf7/0x220 [ 239.436037][ T8084] sysfs_create_dir_ns+0x12f/0x2a0 [ 239.436061][ T8084] ? kobject_set_name_vargs+0xca/0x110 [ 239.436081][ T8084] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 239.436103][ T8084] ? kobject_set_name+0xe2/0x140 [ 239.436128][ T8084] kobject_add_internal+0x622/0xcd0 [ 239.436154][ T8084] kset_register+0x161/0x230 [ 239.436175][ T8084] kset_create_and_add+0x12d/0x170 [ 239.436198][ T8084] netdev_register_kobject+0x1c1/0x350 [ 239.436221][ T8084] register_netdevice+0x17be/0x2280 [ 239.436259][ T8084] ? __pfx_register_netdevice+0x10/0x10 [ 239.436293][ T8084] ? alloc_netdev_mqs+0xe92/0x1240 [ 239.436312][ T8084] register_netdev+0x40/0x60 [ 239.436337][ T8084] gprs_attach+0x182/0x530 [ 239.436365][ T8084] pep_setsockopt+0x328/0x4b0 [ 239.436397][ T8084] ? __pfx_pep_setsockopt+0x10/0x10 [ 239.436423][ T8084] ? sock_common_setsockopt+0x36/0xc0 [ 239.436442][ T8084] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 239.436462][ T8084] do_sock_setsockopt+0x17c/0x1b0 [ 239.436488][ T8084] __x64_sys_setsockopt+0x13d/0x1b0 [ 239.436514][ T8084] do_syscall_64+0x166/0x520 [ 239.436539][ T8084] ? trace_irq_disable+0x3b/0x140 [ 239.436560][ T8084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.436577][ T8084] ? clear_bhb_loop+0x70/0xc0 [ 239.436597][ T8084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.436614][ T8084] RIP: 0033:0x7f13f859f559 [ 239.436630][ T8084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.436644][ T8084] RSP: 002b:00007f13f952f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 239.436662][ T8084] RAX: ffffffffffffffda RBX: 00007f13f8825fa0 RCX: 00007f13f859f559 [ 239.436674][ T8084] RDX: 0000000000000001 RSI: 0000000000000113 RDI: 0000000000000007 [ 239.436685][ T8084] RBP: 00007f13f8636b50 R08: 0000000000000004 R09: 0000000000000000 [ 239.436695][ T8084] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 239.436706][ T8084] R13: 00007f13f8826038 R14: 00007f13f8825fa0 R15: 00007ffca5be3f28 [ 239.436732][ T8084] [ 239.454941][ T7103] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 239.455106][ T8084] kobject: kobject_add_internal failed for queues (error: -12 parent: gprs0) [ 239.600419][ T7103] usb 6-1: device descriptor read/64, error -71 [ 239.892374][ T7103] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 239.976522][ T8070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.020740][ T7103] usb 6-1: device descriptor read/64, error -71 [ 240.045470][ T8065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.045805][ T8065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.113209][ T8092] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 240.131516][ T7103] usb usb6-port1: attempt power cycle [ 240.160472][ T195] usb 1-1: USB disconnect, device number 27 [ 240.226183][ T10] usb 4-1: USB disconnect, device number 44 [ 240.469783][ T7103] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 240.490448][ T7103] usb 6-1: device descriptor read/8, error -71 [ 240.543018][ T8101] FAULT_INJECTION: forcing a failure. [ 240.543018][ T8101] name failslab, interval 1, probability 0, space 0, times 0 [ 240.543207][ T8101] CPU: 0 UID: 0 PID: 8101 Comm: syz.4.563 Not tainted syzkaller #0 PREEMPT(full) [ 240.543227][ T8101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 240.543237][ T8101] Call Trace: [ 240.543244][ T8101] [ 240.543251][ T8101] dump_stack_lvl+0xe8/0x150 [ 240.543281][ T8101] should_fail_ex+0x3eb/0x540 [ 240.543311][ T8101] should_failslab+0xa8/0x100 [ 240.543334][ T8101] ? __kernfs_new_node+0xe6/0x980 [ 240.543359][ T8101] kmem_cache_alloc_noprof+0x9c/0x600 [ 240.543376][ T8101] ? kstrdup+0x81/0x100 [ 240.543392][ T8101] ? __kernfs_new_node+0xe6/0x980 [ 240.543423][ T8101] __kernfs_new_node+0xe6/0x980 [ 240.543455][ T8101] ? __pfx___kernfs_new_node+0x10/0x10 [ 240.543479][ T8101] ? lock_acquire+0x115/0x350 [ 240.543497][ T8101] ? kernfs_root+0x1c/0x230 [ 240.543526][ T8101] ? kernfs_root+0x1c/0x230 [ 240.543553][ T8101] ? kernfs_root+0x1c/0x230 [ 240.543575][ T8101] ? kernfs_root+0x1c/0x230 [ 240.543602][ T8101] kernfs_new_node+0xeb/0x140 [ 240.543631][ T8101] kernfs_create_link+0xe3/0x240 [ 240.543654][ T8101] sysfs_do_create_link_sd+0x83/0x110 [ 240.543680][ T8101] device_add_class_symlinks+0x1cf/0x240 [ 240.543705][ T8101] device_add+0x467/0xb80 [ 240.543729][ T8101] device_create+0x269/0x300 [ 240.543756][ T8101] ? timer_init_key+0x161/0x2c0 [ 240.543776][ T8101] ? __pfx_device_create+0x10/0x10 [ 240.543800][ T8101] ? ieee80211_roc_setup+0x119/0x1d0 [ 240.543819][ T8101] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 240.543844][ T8101] mac80211_hwsim_new_radio+0x335/0x5990 [ 240.543893][ T8101] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 240.543918][ T8101] ? trace_kmalloc+0x2a/0xf0 [ 240.543942][ T8101] hwsim_new_radio_nl+0xd8b/0xf90 [ 240.543976][ T8101] genl_family_rcv_msg_doit+0x233/0x340 [ 240.544006][ T8101] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 240.544039][ T8101] ? bpf_lsm_capable+0x9/0x20 [ 240.544062][ T8101] ? security_capable+0x7e/0x2c0 [ 240.544089][ T8101] genl_rcv_msg+0x614/0x7a0 [ 240.544117][ T8101] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.544139][ T8101] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 240.544211][ T8101] ? __asan_memcpy+0x40/0x70 [ 240.544234][ T8101] netlink_rcv_skb+0x226/0x4a0 [ 240.544253][ T8101] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.544277][ T8101] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.544306][ T8101] ? down_read+0x2b9/0x320 [ 240.544326][ T8101] genl_rcv+0x28/0x40 [ 240.544346][ T8101] netlink_unicast+0x8ef/0xa80 [ 240.544386][ T8101] netlink_sendmsg+0x7f0/0xb20 [ 240.544410][ T8101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.544431][ T8101] ? aa_sock_msg_perm+0x144/0x210 [ 240.544459][ T8101] ? apparmor_socket_sendmsg+0x98/0x360 [ 240.544481][ T8101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.544499][ T8101] sock_sendmsg_nosec+0x14e/0x190 [ 240.544518][ T8101] ____sys_sendmsg+0x54e/0x850 [ 240.544545][ T8101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.544575][ T8101] ? import_iovec+0x73/0xa0 [ 240.544604][ T8101] ___sys_sendmsg+0x2a6/0x360 [ 240.544624][ T8101] ? __lock_acquire+0x747/0x2de0 [ 240.544647][ T8101] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.544697][ T8101] ? __fget_files+0x3a2/0x420 [ 240.544715][ T8101] ? __fget_files+0x2a/0x420 [ 240.544740][ T8101] __x64_sys_sendmsg+0x1b1/0x290 [ 240.544765][ T8101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.544804][ T8101] do_syscall_64+0x166/0x520 [ 240.544829][ T8101] ? trace_irq_disable+0x3b/0x140 [ 240.544849][ T8101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.544866][ T8101] ? clear_bhb_loop+0x70/0xc0 [ 240.544886][ T8101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.544902][ T8101] RIP: 0033:0x7f13f859f559 [ 240.544918][ T8101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.544932][ T8101] RSP: 002b:00007f13f952f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.544950][ T8101] RAX: ffffffffffffffda RBX: 00007f13f8825fa0 RCX: 00007f13f859f559 [ 240.544962][ T8101] RDX: 0000000004080040 RSI: 0000200000000000 RDI: 0000000000000003 [ 240.544973][ T8101] RBP: 00007f13f952f090 R08: 0000000000000000 R09: 0000000000000000 [ 240.544984][ T8101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.544994][ T8101] R13: 00007f13f8826038 R14: 00007f13f8825fa0 R15: 00007ffca5be3f28 [ 240.545020][ T8101] [ 240.782270][ T7103] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 240.863167][ T7103] usb 6-1: device descriptor read/8, error -71 [ 240.999520][ T7103] usb usb6-port1: unable to enumerate USB device [ 241.103554][ T8102] FAULT_INJECTION: forcing a failure. [ 241.103554][ T8102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.103581][ T8102] CPU: 0 UID: 0 PID: 8102 Comm: syz.3.564 Not tainted syzkaller #0 PREEMPT(full) [ 241.103600][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 241.103611][ T8102] Call Trace: [ 241.103627][ T8102] [ 241.103635][ T8102] dump_stack_lvl+0xe8/0x150 [ 241.103665][ T8102] should_fail_ex+0x3eb/0x540 [ 241.103695][ T8102] _copy_from_user+0x2d/0xb0 [ 241.103713][ T8102] __se_sys_capset+0x23e/0x450 [ 241.103736][ T8102] ? __pfx___se_sys_capset+0x10/0x10 [ 241.103764][ T8102] ? rcu_is_watching+0x16/0xb0 [ 241.103796][ T8102] do_syscall_64+0x166/0x520 [ 241.103822][ T8102] ? trace_irq_disable+0x3b/0x140 [ 241.103842][ T8102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.103859][ T8102] ? clear_bhb_loop+0x70/0xc0 [ 241.103879][ T8102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.103896][ T8102] RIP: 0033:0x7f0608b9f559 [ 241.103911][ T8102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.103926][ T8102] RSP: 002b:00007f06099d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 241.103944][ T8102] RAX: ffffffffffffffda RBX: 00007f0608e25fa0 RCX: 00007f0608b9f559 [ 241.103957][ T8102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 241.103967][ T8102] RBP: 00007f0608c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 241.103977][ T8102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.103987][ T8102] R13: 00007f0608e26038 R14: 00007f0608e25fa0 R15: 00007ffc2167cad8 [ 241.104012][ T8102] [ 241.344152][ T8102] FAULT_INJECTION: forcing a failure. [ 241.344152][ T8102] name failslab, interval 1, probability 0, space 0, times 0 [ 241.344180][ T8102] CPU: 0 UID: 0 PID: 8102 Comm: syz.3.564 Not tainted syzkaller #0 PREEMPT(full) [ 241.344199][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 241.344210][ T8102] Call Trace: [ 241.344224][ T8102] [ 241.344232][ T8102] dump_stack_lvl+0xe8/0x150 [ 241.344261][ T8102] should_fail_ex+0x3eb/0x540 [ 241.344292][ T8102] should_failslab+0xa8/0x100 [ 241.344316][ T8102] ? security_inode_alloc+0x39/0x310 [ 241.344342][ T8102] kmem_cache_alloc_noprof+0x9c/0x600 [ 241.344358][ T8102] ? make_kgid+0x1d1/0x6a0 [ 241.344378][ T8102] ? security_inode_alloc+0x39/0x310 [ 241.344408][ T8102] security_inode_alloc+0x39/0x310 [ 241.344435][ T8102] inode_init_always_gfp+0x97e/0xd30 [ 241.344457][ T8102] ? __pfx_proc_alloc_inode+0x10/0x10 [ 241.344483][ T8102] alloc_inode+0x82/0x1b0 [ 241.344501][ T8102] new_inode+0x1f/0x170 [ 241.344518][ T8102] ? proc_pid_make_inode+0x19/0x130 [ 241.344540][ T8102] proc_pid_make_inode+0x21/0x130 [ 241.344561][ T8102] proc_pident_instantiate+0x6d/0x2a0 [ 241.344585][ T8102] proc_pident_lookup+0x1b7/0x270 [ 241.344610][ T8102] lookup_open+0x94b/0x1970 [ 241.344652][ T8102] path_openat+0x70c/0x20f0 [ 241.344689][ T8102] do_file_open+0x23e/0x4a0 [ 241.344715][ T8102] ? __pfx_do_file_open+0x10/0x10 [ 241.344746][ T8102] ? __pfx_kfree_link+0x10/0x10 [ 241.344772][ T8102] ? _raw_spin_unlock+0x28/0x50 [ 241.344794][ T8102] ? alloc_fd+0x6af/0x760 [ 241.344820][ T8102] do_sys_openat2+0x115/0x200 [ 241.344837][ T8102] ? __se_sys_futex+0x3a8/0x450 [ 241.344863][ T8102] ? __pfx_do_sys_openat2+0x10/0x10 [ 241.344884][ T8102] ? rcu_is_watching+0x16/0xb0 [ 241.344911][ T8102] __x64_sys_openat+0x138/0x170 [ 241.344932][ T8102] do_syscall_64+0x166/0x520 [ 241.344957][ T8102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.344974][ T8102] ? clear_bhb_loop+0x70/0xc0 [ 241.344995][ T8102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.345012][ T8102] RIP: 0033:0x7f0608b5fd8e [ 241.345027][ T8102] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 241.345041][ T8102] RSP: 002b:00007f06099d0ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 241.345059][ T8102] RAX: ffffffffffffffda RBX: 00007f06099d16c0 RCX: 00007f0608b5fd8e [ 241.345071][ T8102] RDX: 0000000000000002 RSI: 00007f06099d0f90 RDI: ffffffffffffff9c [ 241.345083][ T8102] RBP: 00007f0608c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 241.345093][ T8102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.345102][ T8102] R13: 00007f0608e26038 R14: 00007f0608e25fa0 R15: 00007ffc2167cad8 [ 241.345128][ T8102] [ 243.240364][ T8157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.578'. [ 243.357917][ T8159] FAULT_INJECTION: forcing a failure. [ 243.357917][ T8159] name failslab, interval 1, probability 0, space 0, times 0 [ 243.357946][ T8159] CPU: 0 UID: 0 PID: 8159 Comm: syz.5.579 Not tainted syzkaller #0 PREEMPT(full) [ 243.357965][ T8159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 243.357975][ T8159] Call Trace: [ 243.357982][ T8159] [ 243.357989][ T8159] dump_stack_lvl+0xe8/0x150 [ 243.358031][ T8159] should_fail_ex+0x3eb/0x540 [ 243.358060][ T8159] should_failslab+0xa8/0x100 [ 243.358085][ T8159] __kmalloc_noprof+0xf9/0x710 [ 243.358103][ T8159] ? rcu_is_watching+0x16/0xb0 [ 243.358126][ T8159] ? tomoyo_realpath_from_path+0xf2/0x640 [ 243.358151][ T8159] ? tomoyo_realpath_from_path+0xf2/0x640 [ 243.358182][ T8159] tomoyo_realpath_from_path+0xf2/0x640 [ 243.358214][ T8159] ? tomoyo_path_number_perm+0x219/0x5f0 [ 243.358236][ T8159] tomoyo_path_number_perm+0x246/0x5f0 [ 243.358260][ T8159] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 243.358280][ T8159] ? __lock_acquire+0x747/0x2de0 [ 243.358310][ T8159] ? do_futex+0x3e7/0x4e0 [ 243.358349][ T8159] ? __fget_files+0x2a/0x420 [ 243.358370][ T8159] ? __fget_files+0x2a/0x420 [ 243.358389][ T8159] ? __fget_files+0x2a/0x420 [ 243.358410][ T8159] security_file_ioctl+0xc3/0x2a0 [ 243.358432][ T8159] __se_sys_ioctl+0x47/0x170 [ 243.358458][ T8159] do_syscall_64+0x166/0x520 [ 243.358482][ T8159] ? trace_irq_disable+0x3b/0x140 [ 243.358503][ T8159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.358520][ T8159] ? clear_bhb_loop+0x70/0xc0 [ 243.358540][ T8159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.358557][ T8159] RIP: 0033:0x7f122fd9f559 [ 243.358571][ T8159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.358585][ T8159] RSP: 002b:00007f1230bba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.358603][ T8159] RAX: ffffffffffffffda RBX: 00007f1230025fa0 RCX: 00007f122fd9f559 [ 243.358615][ T8159] RDX: 0000200000000440 RSI: 0000000000005423 RDI: 0000000000000003 [ 243.358626][ T8159] RBP: 00007f122fe36b50 R08: 0000000000000000 R09: 0000000000000000 [ 243.358637][ T8159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.358647][ T8159] R13: 00007f1230026038 R14: 00007f1230025fa0 R15: 00007ffdbf387a98 [ 243.358672][ T8159] [ 243.358690][ T8159] ERROR: Out of memory at tomoyo_realpath_from_path. [ 243.675499][ T8160] ISOFS: Unable to identify CD-ROM format. [ 243.870643][ T8166] device-mapper: table: 248:3: verity: Invalid number of feature args (-EINVAL) [ 243.870663][ T8166] device-mapper: ioctl: error adding target to table [ 243.939378][ T8177] FAULT_INJECTION: forcing a failure. [ 243.939378][ T8177] name failslab, interval 1, probability 0, space 0, times 0 [ 243.939445][ T8177] CPU: 0 UID: 0 PID: 8177 Comm: syz.0.582 Not tainted syzkaller #0 PREEMPT(full) [ 243.939464][ T8177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 243.939475][ T8177] Call Trace: [ 243.939481][ T8177] [ 243.939488][ T8177] dump_stack_lvl+0xe8/0x150 [ 243.939517][ T8177] should_fail_ex+0x3eb/0x540 [ 243.939547][ T8177] should_failslab+0xa8/0x100 [ 243.939570][ T8177] ? skb_clone+0x212/0x3a0 [ 243.939594][ T8177] kmem_cache_alloc_noprof+0x9c/0x600 [ 243.939610][ T8177] ? lock_acquire+0x115/0x350 [ 243.939629][ T8177] ? skb_clone+0x212/0x3a0 [ 243.939658][ T8177] skb_clone+0x212/0x3a0 [ 243.939680][ T8177] ? dev_queue_xmit_nit+0x270/0xac0 [ 243.939703][ T8177] dev_queue_xmit_nit+0x28d/0xac0 [ 243.939725][ T8177] ? dev_queue_xmit_nit+0x2d/0xac0 [ 243.939752][ T8177] dev_hard_start_xmit+0x1c1/0x830 [ 243.939777][ T8177] ? validate_xmit_skb+0xfac/0x1a00 [ 243.939811][ T8177] __dev_queue_xmit+0x14d1/0x3920 [ 243.939839][ T8177] ? __dev_queue_xmit+0x29b/0x3920 [ 243.939873][ T8177] ? __asan_memcpy+0x40/0x70 [ 243.939894][ T8177] ? __pfx___dev_queue_xmit+0x10/0x10 [ 243.939921][ T8177] ? skb_partial_csum_set+0xf4/0x350 [ 243.939946][ T8177] ? virtio_net_hdr_to_skb+0x9fd/0x14f0 [ 243.939970][ T8177] ? packet_parse_headers+0x551/0x790 [ 243.939990][ T8177] ? __pfx_packet_parse_headers+0x10/0x10 [ 243.940018][ T8177] ? packet_xmit+0x68/0x330 [ 243.940039][ T8177] packet_sendmsg+0x406f/0x5330 [ 243.940080][ T8177] ? __lock_acquire+0x747/0x2de0 [ 243.940103][ T8177] ? __lock_acquire+0x747/0x2de0 [ 243.940123][ T8177] ? __lock_acquire+0x747/0x2de0 [ 243.940144][ T8177] ? kstrtouint+0x6e/0xe0 [ 243.940170][ T8177] ? __pfx_packet_sendmsg+0x10/0x10 [ 243.940193][ T8177] ? aa_sk_perm+0x6ff/0x8f0 [ 243.940220][ T8177] ? rwsem_del_wake_waiter+0x42/0x2d0 [ 243.940249][ T8177] ? __pfx_aa_sk_perm+0x10/0x10 [ 243.940273][ T8177] ? aa_sock_msg_perm+0x144/0x210 [ 243.940301][ T8177] ? apparmor_socket_sendmsg+0x98/0x360 [ 243.940323][ T8177] ? __pfx_packet_sendmsg+0x10/0x10 [ 243.940347][ T8177] sock_sendmsg_nosec+0x14e/0x190 [ 243.940367][ T8177] __sys_sendto+0x408/0x5a0 [ 243.940387][ T8177] ? ksys_write+0x1e6/0x270 [ 243.940410][ T8177] ? __pfx___sys_sendto+0x10/0x10 [ 243.940428][ T8177] ? __mutex_unlock_slowpath+0x731/0x900 [ 243.940464][ T8177] ? fdget+0x1ac/0x250 [ 243.940492][ T8177] ? __pfx_ksys_write+0x10/0x10 [ 243.940516][ T8177] __x64_sys_sendto+0xde/0x100 [ 243.940539][ T8177] do_syscall_64+0x166/0x520 [ 243.940563][ T8177] ? trace_irq_disable+0x3b/0x140 [ 243.940584][ T8177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.940601][ T8177] ? clear_bhb_loop+0x70/0xc0 [ 243.940621][ T8177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.940638][ T8177] RIP: 0033:0x7ff03679f559 [ 243.940653][ T8177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.940667][ T8177] RSP: 002b:00007ff03760f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 243.940684][ T8177] RAX: ffffffffffffffda RBX: 00007ff036a25fa0 RCX: 00007ff03679f559 [ 243.940697][ T8177] RDX: 0000000000010000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 243.940707][ T8177] RBP: 00007ff03760f090 R08: 0000200000000100 R09: 0000000000000014 [ 243.940719][ T8177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.940728][ T8177] R13: 00007ff036a26038 R14: 00007ff036a25fa0 R15: 00007ffcf1f24d28 [ 243.940754][ T8177] [ 244.361623][ T8180] Device name cannot be null; rc = [-22] [ 244.401752][ T8168] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 244.401774][ T8168] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 244.425247][ T8168] vhci_hcd vhci_hcd.0: Device attached [ 244.463226][ T8182] vhci_hcd: connection closed [ 244.479993][ T14] vhci_hcd vhci_hcd.3: stop threads [ 244.480928][ T14] vhci_hcd vhci_hcd.3: release socket [ 244.480959][ T14] vhci_hcd vhci_hcd.3: disconnect device [ 244.658506][ T8192] FAULT_INJECTION: forcing a failure. [ 244.658506][ T8192] name fail_futex, interval 1, probability 0, space 0, times 0 [ 244.658533][ T8192] CPU: 0 UID: 0 PID: 8192 Comm: syz.5.586 Not tainted syzkaller #0 PREEMPT(full) [ 244.658552][ T8192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 244.658563][ T8192] Call Trace: [ 244.658570][ T8192] [ 244.658577][ T8192] dump_stack_lvl+0xe8/0x150 [ 244.658607][ T8192] should_fail_ex+0x3eb/0x540 [ 244.658637][ T8192] get_futex_key+0x1ab/0x1410 [ 244.658661][ T8192] ? fixup_exception+0x11f8/0x2140 [ 244.658688][ T8192] ? lock_mm_and_find_vma+0x117/0x340 [ 244.658713][ T8192] ? __pfx_get_futex_key+0x10/0x10 [ 244.658743][ T8192] futex_wake+0x119/0x5f0 [ 244.658765][ T8192] ? __pfx_futex_wake+0x10/0x10 [ 244.658781][ T8192] ? irqentry_exit+0x2a0/0x9b0 [ 244.658808][ T8192] ? irqentry_exit+0x2a0/0x9b0 [ 244.658831][ T8192] ? trace_irq_disable+0x3b/0x140 [ 244.658862][ T8192] do_futex+0x458/0x4e0 [ 244.658891][ T8192] ? __pfx_do_futex+0x10/0x10 [ 244.658915][ T8192] ? __asan_memset+0x22/0x50 [ 244.658944][ T8192] ? _copy_from_user+0x4c/0xb0 [ 244.658965][ T8192] __se_sys_futex+0x3a8/0x450 [ 244.658996][ T8192] ? __pfx___se_sys_futex+0x10/0x10 [ 244.659021][ T8192] ? rcu_is_watching+0x16/0xb0 [ 244.659050][ T8192] ? __x64_sys_futex+0x21/0xf0 [ 244.659081][ T8192] do_syscall_64+0x166/0x520 [ 244.659106][ T8192] ? trace_irq_disable+0x3b/0x140 [ 244.659127][ T8192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.659144][ T8192] ? clear_bhb_loop+0x70/0xc0 [ 244.659164][ T8192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.659181][ T8192] RIP: 0033:0x7f122fd9f559 [ 244.659196][ T8192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.659211][ T8192] RSP: 002b:00007f1230bba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 244.659228][ T8192] RAX: ffffffffffffffda RBX: 00007f1230025fa8 RCX: 00007f122fd9f559 [ 244.659240][ T8192] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1230025fac [ 244.659251][ T8192] RBP: 00007f1230025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 244.659262][ T8192] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 244.659273][ T8192] R13: 00007f1230026038 R14: 00007ffdbf3879b0 R15: 00007ffdbf387a98 [ 244.659298][ T8192] [ 244.948794][ T8192] FAULT_INJECTION: forcing a failure. [ 244.948794][ T8192] name failslab, interval 1, probability 0, space 0, times 0 [ 244.948820][ T8192] CPU: 0 UID: 0 PID: 8192 Comm: syz.5.586 Not tainted syzkaller #0 PREEMPT(full) [ 244.948840][ T8192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 244.948850][ T8192] Call Trace: [ 244.948857][ T8192] [ 244.948865][ T8192] dump_stack_lvl+0xe8/0x150 [ 244.948895][ T8192] should_fail_ex+0x3eb/0x540 [ 244.948925][ T8192] should_failslab+0xa8/0x100 [ 244.948958][ T8192] __kmalloc_noprof+0xf9/0x710 [ 244.948976][ T8192] ? rcu_is_watching+0x16/0xb0 [ 244.948999][ T8192] ? tomoyo_realpath_from_path+0xf2/0x640 [ 244.949025][ T8192] ? tomoyo_realpath_from_path+0xf2/0x640 [ 244.949057][ T8192] tomoyo_realpath_from_path+0xf2/0x640 [ 244.949092][ T8192] tomoyo_check_open_permission+0x229/0x470 [ 244.949115][ T8192] ? tomoyo_check_open_permission+0x1d3/0x470 [ 244.949137][ T8192] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 244.949160][ T8192] ? __asan_memset+0x22/0x50 [ 244.949199][ T8192] ? mnt_get_write_access+0x66/0x280 [ 244.949229][ T8192] security_file_open+0xa9/0x240 [ 244.949250][ T8192] do_dentry_open+0x495/0x1360 [ 244.949284][ T8192] vfs_open_consume+0x4a/0x350 [ 244.949310][ T8192] ? path_openat+0x16e1/0x20f0 [ 244.949334][ T8192] path_openat+0x16fc/0x20f0 [ 244.949370][ T8192] do_file_open+0x23e/0x4a0 [ 244.949399][ T8192] ? __pfx_do_file_open+0x10/0x10 [ 244.949429][ T8192] ? __pfx_kfree_link+0x10/0x10 [ 244.949455][ T8192] ? _raw_spin_unlock+0x28/0x50 [ 244.949477][ T8192] ? alloc_fd+0x6af/0x760 [ 244.949503][ T8192] do_sys_openat2+0x115/0x200 [ 244.949519][ T8192] ? __se_sys_futex+0x3a8/0x450 [ 244.949546][ T8192] ? __pfx_do_sys_openat2+0x10/0x10 [ 244.949566][ T8192] ? rcu_is_watching+0x16/0xb0 [ 244.949594][ T8192] __x64_sys_openat+0x138/0x170 [ 244.949615][ T8192] do_syscall_64+0x166/0x520 [ 244.949640][ T8192] ? trace_irq_disable+0x3b/0x140 [ 244.949661][ T8192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.949678][ T8192] ? clear_bhb_loop+0x70/0xc0 [ 244.949699][ T8192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.949716][ T8192] RIP: 0033:0x7f122fd5fd8e [ 244.949731][ T8192] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 244.949746][ T8192] RSP: 002b:00007f1230bb9ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 244.949764][ T8192] RAX: ffffffffffffffda RBX: 00007f1230bba6c0 RCX: 00007f122fd5fd8e [ 244.949777][ T8192] RDX: 0000000000000002 RSI: 00007f1230bb9f90 RDI: ffffffffffffff9c [ 244.949788][ T8192] RBP: 00007f122fe36b50 R08: 0000000000000000 R09: 0000000000000000 [ 244.949798][ T8192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.949808][ T8192] R13: 00007f1230026038 R14: 00007f1230025fa0 R15: 00007ffdbf387a98 [ 244.949834][ T8192] [ 245.014731][ T8192] ERROR: Out of memory at tomoyo_realpath_from_path. [ 245.531372][ T33] audit: type=1400 audit(1793478957.581:3): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=8201 comm="syz.5.589" [ 245.631481][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.591'. [ 245.732355][ T195] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 245.880480][ T195] usb 5-1: New USB device found: idVendor=1e3d, idProduct=2d50, bcdDevice=0.00 [ 245.881956][ T195] usb 5-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 245.881992][ T195] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.882023][ T195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.936125][ T195] usb 5-1: config 0 descriptor?? [ 246.409567][ T195] usb 5-1: string descriptor 0 read error: -71 [ 246.411105][ T195] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 246.443071][ T195] usb 5-1: USB disconnect, device number 26 [ 246.796815][ T8242] FAULT_INJECTION: forcing a failure. [ 246.796815][ T8242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.796901][ T8242] CPU: 0 UID: 0 PID: 8242 Comm: syz.3.598 Not tainted syzkaller #0 PREEMPT(full) [ 246.796920][ T8242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 246.796931][ T8242] Call Trace: [ 246.796937][ T8242] [ 246.796945][ T8242] dump_stack_lvl+0xe8/0x150 [ 246.796975][ T8242] should_fail_ex+0x3eb/0x540 [ 246.797005][ T8242] _copy_from_user+0x2d/0xb0 [ 246.797022][ T8242] __se_sys_capset+0x23e/0x450 [ 246.797046][ T8242] ? __pfx___se_sys_capset+0x10/0x10 [ 246.797074][ T8242] ? rcu_is_watching+0x16/0xb0 [ 246.797106][ T8242] do_syscall_64+0x166/0x520 [ 246.797130][ T8242] ? trace_irq_disable+0x3b/0x140 [ 246.797150][ T8242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.797167][ T8242] ? clear_bhb_loop+0x70/0xc0 [ 246.797187][ T8242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.797203][ T8242] RIP: 0033:0x7f0608b9f559 [ 246.797218][ T8242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.797233][ T8242] RSP: 002b:00007f06099d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 246.797251][ T8242] RAX: ffffffffffffffda RBX: 00007f0608e25fa0 RCX: 00007f0608b9f559 [ 246.797264][ T8242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 246.797274][ T8242] RBP: 00007f0608c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 246.797285][ T8242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.797295][ T8242] R13: 00007f0608e26038 R14: 00007f0608e25fa0 R15: 00007ffc2167cad8 [ 246.797320][ T8242] [ 247.467350][ T8258] fuse: Bad value for 'group_id' [ 247.467366][ T8258] fuse: Bad value for 'group_id' [ 247.484202][ T8258] comedi: valid board names for 8255 driver are: [ 247.484214][ T8258] 8255 [ 247.484220][ T8258] comedi: valid board names for vmk80xx driver are: [ 247.484228][ T8258] vmk80xx [ 247.484234][ T8258] comedi: valid board names for usbduxsigma driver are: [ 247.484242][ T8258] usbduxsigma [ 247.484247][ T8258] comedi: valid board names for usbduxfast driver are: [ 247.484255][ T8258] usbduxfast [ 247.484261][ T8258] comedi: valid board names for usbdux driver are: [ 247.484268][ T8258] usbdux [ 247.484274][ T8258] comedi: valid board names for ni6501 driver are: [ 247.484281][ T8258] ni6501 [ 247.484287][ T8258] comedi: valid board names for dt9812 driver are: [ 247.484294][ T8258] dt9812 [ 247.484299][ T8258] comedi: valid board names for ni_labpc_cs driver are: [ 247.484307][ T8258] ni_labpc_cs [ 247.484312][ T8258] comedi: valid board names for ni_daq_700 driver are: [ 247.484320][ T8258] ni_daq_700 [ 247.484325][ T8258] comedi: valid board names for labpc_pci driver are: [ 247.484333][ T8258] labpc_pci [ 247.484338][ T8258] comedi: valid board names for adl_pci9118 driver are: [ 247.484345][ T8258] pci9118dg [ 247.484351][ T8258] pci9118hg [ 247.484356][ T8258] pci9118hr [ 247.484362][ T8258] comedi: valid board names for 8255_pci driver are: [ 247.484369][ T8258] 8255_pci [ 247.484375][ T8258] comedi: valid board names for s526 driver are: [ 247.484382][ T8258] s526 [ 247.484387][ T8258] comedi: valid board names for multiq3 driver are: [ 247.484394][ T8258] multiq3 [ 247.484400][ T8258] comedi: valid board names for pcmuio driver are: [ 247.484407][ T8258] pcmuio48 [ 247.484413][ T8258] pcmuio96 [ 247.484419][ T8258] comedi: valid board names for pcmmio driver are: [ 247.484426][ T8258] pcmmio [ 247.484431][ T8258] comedi: valid board names for pcmda12 driver are: [ 247.484438][ T8258] pcmda12 [ 247.484444][ T8258] comedi: valid board names for pcmad driver are: [ 247.484451][ T8258] pcmad12 [ 247.484457][ T8258] pcmad16 [ 247.484462][ T8258] comedi: valid board names for ni_labpc driver are: [ 247.484469][ T8258] lab-pc-1200 [ 247.484475][ T8258] lab-pc-1200ai [ 247.484481][ T8258] lab-pc+ [ 247.484486][ T8258] comedi: valid board names for atmio16 driver are: [ 247.484493][ T8258] atmio16 [ 247.484498][ T8258] atmio16d [ 247.484503][ T8258] comedi: valid board names for ni_at_ao driver are: [ 247.484511][ T8258] at-ao-6 [ 247.484516][ T8258] at-ao-10 [ 247.484521][ T8258] comedi: valid board names for ni_at_a2150 driver are: [ 247.484528][ T8258] ni_at_a2150 [ 247.484534][ T8258] comedi: valid board names for adq12b driver are: [ 247.484541][ T8258] adq12b [ 247.484546][ T8258] comedi: valid board names for mpc624 driver are: [ 247.484554][ T8258] mpc624 [ 247.484559][ T8258] comedi: valid board names for c6xdigio driver are: [ 247.484566][ T8258] c6xdigio [ 247.484571][ T8258] comedi: valid board names for aio_iiro_16 driver are: [ 247.484578][ T8258] aio_iiro_16 [ 247.484584][ T8258] comedi: valid board names for aio_aio12_8 driver are: [ 247.484591][ T8258] aio_aio12_8 [ 247.484596][ T8258] aio_ai12_8 [ 247.484602][ T8258] aio_ao12_4 [ 247.484607][ T8258] comedi: valid board names for fl512 driver are: [ 247.484614][ T8258] fl512 [ 247.484619][ T8258] comedi: valid board names for dmm32at driver are: [ 247.484626][ T8258] dmm32at [ 247.484631][ T8258] comedi: valid board names for dt282x driver are: [ 247.484638][ T8258] dt2821 [ 247.484643][ T8258] dt2821-f [ 247.484649][ T8258] dt2821-g [ 247.484654][ T8258] dt2823 [ 247.484660][ T8258] dt2824-pgh [ 247.484676][ T8258] dt2824-pgl [ 247.484682][ T8258] dt2825 [ 247.484687][ T8258] dt2827 [ 247.484692][ T8258] dt2828 [ 247.484698][ T8258] dt2829 [ 247.484703][ T8258] dt21-ez [ 247.484709][ T8258] dt23-ez [ 247.484714][ T8258] dt24-ez [ 247.484720][ T8258] dt24-ez-pgl [ 247.484726][ T8258] comedi: valid board names for dt2817 driver are: [ 247.484733][ T8258] dt2817 [ 247.484738][ T8258] comedi: valid board names for dt2815 driver are: [ 247.484746][ T8258] dt2815 [ 247.484751][ T8258] comedi: valid board names for dt2814 driver are: [ 247.484758][ T8258] dt2814 [ 247.484763][ T8258] comedi: valid board names for dt2811 driver are: [ 247.484770][ T8258] dt2811-pgh [ 247.484776][ T8258] dt2811-pgl [ 247.484781][ T8258] comedi: valid board names for dt2801 driver are: [ 247.484789][ T8258] dt2801 [ 247.484794][ T8258] comedi: valid board names for das6402 driver are: [ 247.484801][ T8258] das6402-12 [ 247.484807][ T8258] das6402-16 [ 247.484813][ T8258] comedi: valid board names for das1800 driver are: [ 247.484820][ T8258] das-1701st [ 247.484826][ T8258] das-1701st-da [ 247.484832][ T8258] das-1702st [ 247.484837][ T8258] das-1702st-da [ 247.484843][ T8258] das-1702hr [ 247.484849][ T8258] das-1702hr-da [ 247.484855][ T8258] das-1701ao [ 247.484860][ T8258] das-1702ao [ 247.484866][ T8258] das-1801st [ 247.484871][ T8258] das-1801st-da [ 247.484877][ T8258] das-1802st [ 247.484883][ T8258] das-1802st-da [ 247.484889][ T8258] das-1802hr [ 247.484894][ T8258] das-1802hr-da [ 247.484901][ T8258] das-1801hc [ 247.484906][ T8258] das-1802hc [ 247.484912][ T8258] das-1801ao [ 247.484917][ T8258] das-1802ao [ 247.484923][ T8258] comedi: valid board names for das800 driver are: [ 247.484931][ T8258] das-800 [ 247.484936][ T8258] cio-das800 [ 247.484941][ T8258] das-801 [ 247.484947][ T8258] cio-das801 [ 247.484952][ T8258] das-802 [ 247.484958][ T8258] cio-das802 [ 247.484964][ T8258] cio-das802/16 [ 247.484970][ T8258] comedi: valid board names for isa-das08 driver are: [ 247.484977][ T8258] isa-das08 [ 247.484982][ T8258] das08-pgm [ 247.484987][ T8258] das08-pgh [ 247.484993][ T8258] das08-pgl [ 247.484998][ T8258] das08-aoh [ 247.485003][ T8258] das08-aol [ 247.485008][ T8258] das08-aom [ 247.485014][ T8258] das08/jr-ao [ 247.485019][ T8258] das08jr-16-ao [ 247.485025][ T8258] pc104-das08 [ 247.485031][ T8258] das08jr/16 [ 247.485036][ T8258] comedi: valid board names for das16m1 driver are: [ 247.485043][ T8258] das16m1 [ 247.485049][ T8258] comedi: valid board names for dac02 driver are: [ 247.485056][ T8258] dac02 [ 247.485061][ T8258] comedi: valid board names for rti802 driver are: [ 247.485068][ T8258] rti802 [ 247.485073][ T8258] comedi: valid board names for rti800 driver are: [ 247.485080][ T8258] rti800 [ 247.485085][ T8258] rti815 [ 247.485090][ T8258] comedi: valid board names for pcm3724 driver are: [ 247.485098][ T8258] pcm3724 [ 247.485103][ T8258] comedi: valid board names for pcl818 driver are: [ 247.485110][ T8258] pcl818l [ 247.485115][ T8258] pcl818h [ 247.485120][ T8258] pcl818hd [ 247.485126][ T8258] pcl818hg [ 247.485131][ T8258] pcl818 [ 247.485136][ T8258] pcl718 [ 247.485141][ T8258] pcm3718 [ 247.485159][ T8258] comedi: valid board names for pcl816 driver are: [ 247.485167][ T8258] pcl816 [ 247.485172][ T8258] pcl814b [ 247.485178][ T8258] comedi: valid board names for pcl812 driver are: [ 247.485185][ T8258] pcl812 [ 247.485190][ T8258] pcl812pg [ 247.485196][ T8258] acl8112pg [ 247.485201][ T8258] acl8112dg [ 247.485207][ T8258] acl8112hg [ 247.485212][ T8258] a821pgl [ 247.485218][ T8258] a821pglnda [ 247.485223][ T8258] a821pgh [ 247.485229][ T8258] a822pgl [ 247.485234][ T8258] a822pgh [ 247.485240][ T8258] a823pgl [ 247.485245][ T8258] a823pgh [ 247.485250][ T8258] pcl813 [ 247.485256][ T8258] pcl813b [ 247.485261][ T8258] acl8113 [ 247.485267][ T8258] iso813 [ 247.485272][ T8258] acl8216 [ 247.485278][ T8258] a826pg [ 247.485283][ T8258] comedi: valid board names for pcl730 driver are: [ 247.485290][ T8258] pcl730 [ 247.485296][ T8258] iso730 [ 247.485302][ T8258] acl7130 [ 247.485307][ T8258] pcm3730 [ 247.485312][ T8258] pcl725 [ 247.485317][ T8258] p8r8dio [ 247.485323][ T8258] acl7225b [ 247.485329][ T8258] p16r16dio [ 247.485334][ T8258] pcl733 [ 247.485340][ T8258] pcl734 [ 247.485345][ T8258] opmm-1616-xt [ 247.485351][ T8258] pearl-mm-p [ 247.485356][ T8258] ir104-pbf [ 247.485362][ T8258] comedi: valid board names for pcl726 driver are: [ 247.485369][ T8258] pcl726 [ 247.485375][ T8258] pcl727 [ 247.485380][ T8258] pcl728 [ 247.485386][ T8258] acl6126 [ 247.485392][ T8258] acl6128 [ 247.485397][ T8258] comedi: valid board names for pcl724 driver are: [ 247.485404][ T8258] pcl724 [ 247.485410][ T8258] pcl722 [ 247.485415][ T8258] pcl731 [ 247.485420][ T8258] acl7122 [ 247.485426][ T8258] acl7124 [ 247.485431][ T8258] pet48dio [ 247.485436][ T8258] pcmio48 [ 247.485442][ T8258] onyx-mm-dio [ 247.485448][ T8258] comedi: valid board names for pcl711 driver are: [ 247.485455][ T8258] pcl711 [ 247.485460][ T8258] pcl711b [ 247.485465][ T8258] acl8112hg [ 247.485471][ T8258] acl8112dg [ 247.485476][ T8258] comedi: valid board names for amplc_pc263 driver are: [ 247.485483][ T8258] pc263 [ 247.485488][ T8258] comedi: valid board names for amplc_pc236 driver are: [ 247.485495][ T8258] pc36at [ 247.485501][ T8258] comedi: valid board names for amplc_dio200 driver are: [ 247.485508][ T8258] pc212e [ 247.485513][ T8258] pc214e [ 247.485518][ T8258] pc215e [ 247.485524][ T8258] pc218e [ 247.485529][ T8258] pc272e [ 247.485534][ T8258] comedi: valid board names for comedi_parport driver are: [ 247.485541][ T8258] comedi_parport [ 247.485547][ T8258] comedi: valid board names for comedi_test driver are: [ 247.485554][ T8258] comedi_test [ 247.485560][ T8258] comedi: valid board names for comedi_bond driver are: [ 247.485567][ T8258] comedi_bond [ 247.500257][ T7103] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 247.619714][ T8249] FAULT_INJECTION: forcing a failure. [ 247.619714][ T8249] name failslab, interval 1, probability 0, space 0, times 0 [ 247.619738][ T8249] CPU: 0 UID: 0 PID: 8249 Comm: syz.5.600 Not tainted syzkaller #0 PREEMPT(full) [ 247.619757][ T8249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 247.619768][ T8249] Call Trace: [ 247.619775][ T8249] [ 247.619781][ T8249] dump_stack_lvl+0xe8/0x150 [ 247.619811][ T8249] should_fail_ex+0x3eb/0x540 [ 247.619842][ T8249] should_failslab+0xa8/0x100 [ 247.619872][ T8249] __kmalloc_noprof+0xf9/0x710 [ 247.619890][ T8249] ? rcu_is_watching+0x16/0xb0 [ 247.619913][ T8249] ? tomoyo_realpath_from_path+0xf2/0x640 [ 247.619948][ T8249] ? tomoyo_realpath_from_path+0xf2/0x640 [ 247.619979][ T8249] tomoyo_realpath_from_path+0xf2/0x640 [ 247.620030][ T8249] ? tomoyo_path_number_perm+0x219/0x5f0 [ 247.620052][ T8249] tomoyo_path_number_perm+0x246/0x5f0 [ 247.620079][ T8249] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 247.620112][ T8249] ? __lock_acquire+0x747/0x2de0 [ 247.620161][ T8249] ? __fget_files+0x2a/0x420 [ 247.620182][ T8249] ? __fget_files+0x2a/0x420 [ 247.620201][ T8249] ? __fget_files+0x2a/0x420 [ 247.620222][ T8249] security_file_ioctl+0xc3/0x2a0 [ 247.620243][ T8249] __se_sys_ioctl+0x47/0x170 [ 247.620268][ T8249] do_syscall_64+0x166/0x520 [ 247.620292][ T8249] ? trace_irq_disable+0x3b/0x140 [ 247.620312][ T8249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.620329][ T8249] ? clear_bhb_loop+0x70/0xc0 [ 247.620349][ T8249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.620365][ T8249] RIP: 0033:0x7f122fd9f1eb [ 247.620381][ T8249] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 247.620396][ T8249] RSP: 002b:00007f1230bb7f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.620413][ T8249] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f122fd9f1eb [ 247.620425][ T8249] RDX: 00007f1230bb8fd0 RSI: 0000000080085502 RDI: 0000000000000006 [ 247.620435][ T8249] RBP: 00007f1230bb8fd0 R08: 0000000000000040 R09: 00007f1230bb7fc8 [ 247.620446][ T8249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 247.620456][ T8249] R13: 0000000800000000 R14: 0000000000000012 R15: 00007f122fe55b2e [ 247.620481][ T8249] [ 247.620488][ T8249] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.828746][ T7103] usb 6-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 248.014749][ T7103] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.147990][ T7103] usb 6-1: config 0 descriptor?? [ 248.308071][ T7103] cp210x 6-1:0.0: cp210x converter detected [ 248.973378][ T8262] sctp: [Deprecated]: syz.3.604 (pid 8262) Use of int in max_burst socket option. [ 248.973378][ T8262] Use struct sctp_assoc_value instead [ 249.095472][ T55] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 249.241307][ T5793] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 249.243885][ T8269] netlink: 'syz.0.606': attribute type 12 has an invalid length. [ 249.370235][ T5793] usb 4-1: device descriptor read/64, error -71 [ 249.609638][ T5793] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 249.744130][ T5793] usb 4-1: device descriptor read/64, error -71 [ 249.811844][ T7103] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 249.811887][ T7103] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 249.847570][ T7103] usb 6-1: cp210x converter now attached to ttyUSB0 [ 249.849891][ T5793] usb usb4-port1: attempt power cycle [ 249.873781][ T7103] usb 6-1: USB disconnect, device number 17 [ 249.910864][ T7103] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 249.911295][ T7103] cp210x 6-1:0.0: device disconnected [ 249.919280][ T8281] device-mapper: table: 248:0: multipath: not enough priority group arguments (-EINVAL) [ 249.919301][ T8281] device-mapper: ioctl: error adding target to table [ 250.219722][ T5793] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 250.239942][ T5793] usb 4-1: device descriptor read/8, error -71 [ 250.335502][ T8291] FAULT_INJECTION: forcing a failure. [ 250.335502][ T8291] name , interval 1, probability 0, space 0, times 1 [ 250.335529][ T8291] CPU: 0 UID: 0 PID: 8291 Comm: syz.4.615 Not tainted syzkaller #0 PREEMPT(full) [ 250.335548][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 250.335559][ T8291] Call Trace: [ 250.335566][ T8291] [ 250.335574][ T8291] dump_stack_lvl+0xe8/0x150 [ 250.335603][ T8291] should_fail_ex+0x3eb/0x540 [ 250.335634][ T8291] null_queue_rq+0x239/0xe70 [ 250.335666][ T8291] blk_mq_try_issue_directly+0x3f4/0x880 [ 250.335695][ T8291] ? __pfx_blk_mq_try_issue_directly+0x10/0x10 [ 250.335724][ T8291] ? blk_account_io_start+0x57c/0x8c0 [ 250.335750][ T8291] blk_mq_submit_bio+0x2250/0x2c40 [ 250.335776][ T8291] ? blk_mq_submit_bio+0x490/0x2c40 [ 250.335807][ T8291] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 250.335830][ T8291] ? blk_cgroup_bio_start+0x5d7/0x670 [ 250.335863][ T8291] ? lock_acquire+0x115/0x350 [ 250.335881][ T8291] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 250.335907][ T8291] ? percpu_ref_put+0x1e/0x230 [ 250.335936][ T8291] ? __submit_bio+0x7e/0x340 [ 250.335962][ T8291] submit_bio_noacct_nocheck+0x2fe/0xb10 [ 250.335990][ T8291] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 250.336030][ T8291] __bread_gfp+0x1df/0x370 [ 250.336048][ T8291] isofs_fill_super+0x5b1/0x25b0 [ 250.336083][ T8291] ? __pfx_isofs_fill_super+0x10/0x10 [ 250.336104][ T8291] ? sb_set_blocksize+0x155/0x240 [ 250.336132][ T8291] ? setup_bdev_super+0x58b/0x680 [ 250.336158][ T8291] get_tree_bdev_flags+0x436/0x500 [ 250.336180][ T8291] ? __pfx_isofs_fill_super+0x10/0x10 [ 250.336201][ T8291] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 250.336232][ T8291] vfs_get_tree+0x92/0x2a0 [ 250.336256][ T8291] do_new_mount+0x325/0xb00 [ 250.336279][ T8291] ? __pfx_do_new_mount+0x10/0x10 [ 250.336299][ T8291] ? ns_capable+0x84/0xe0 [ 250.336321][ T8291] ? path_mount+0x647/0x1050 [ 250.336381][ T8291] ? user_path_at+0xd4/0x160 [ 250.336403][ T8291] __se_sys_mount+0x31d/0x420 [ 250.336427][ T8291] ? __pfx___se_sys_mount+0x10/0x10 [ 250.336451][ T8291] ? __x64_sys_mount+0x20/0xc0 [ 250.336471][ T8291] do_syscall_64+0x166/0x520 [ 250.336496][ T8291] ? trace_irq_disable+0x3b/0x140 [ 250.336518][ T8291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.336542][ T8291] ? clear_bhb_loop+0x70/0xc0 [ 250.336562][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.336580][ T8291] RIP: 0033:0x7f13f859f559 [ 250.336596][ T8291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.336612][ T8291] RSP: 002b:00007f13f952f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.336630][ T8291] RAX: ffffffffffffffda RBX: 00007f13f8825fa0 RCX: 00007f13f859f559 [ 250.336642][ T8291] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 250.336654][ T8291] RBP: 00007f13f8636b50 R08: 0000000000000000 R09: 0000000000000000 [ 250.336664][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.336674][ T8291] R13: 00007f13f8826038 R14: 00007f13f8825fa0 R15: 00007ffca5be3f28 [ 250.336701][ T8291] [ 250.529273][ T5793] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 250.628406][ T5793] usb 4-1: device descriptor read/8, error -71 [ 250.731547][ T5793] usb usb4-port1: unable to enumerate USB device [ 250.908893][ T8300] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 251.709586][ T7103] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 251.766419][ T8319] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 251.860321][ T7103] usb 6-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 251.861473][ T7103] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 251.861493][ T7103] usb 6-1: config 0 has no interface number 0 [ 251.861523][ T7103] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.861543][ T7103] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 251.861563][ T7103] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 251.863423][ T7103] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 251.863444][ T7103] usb 6-1: Product: syz [ 251.863456][ T7103] usb 6-1: SerialNumber: syz [ 251.867089][ T7103] usb 6-1: config 0 descriptor?? [ 251.957919][ T7103] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 251.970601][ T7103] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input15 [ 252.081317][ T5793] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 252.087427][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.087803][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.235845][ T5793] usb 1-1: unable to get BOS descriptor or descriptor too short [ 252.235911][ T5793] usb 1-1: New USB device found: idVendor=0bfd, idProduct=0108, bcdDevice=a1.2e [ 252.237253][ T5793] usb 1-1: config 255 has an invalid interface number: 199 but max is 0 [ 252.237273][ T5793] usb 1-1: config 255 has no interface number 0 [ 252.237303][ T5793] usb 1-1: config 255 interface 199 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 252.237323][ T5793] usb 1-1: config 255 interface 199 has no altsetting 0 [ 252.309567][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.309608][ T5793] usb 1-1: Product: syz [ 252.309620][ T5793] usb 1-1: Manufacturer: syz [ 252.309632][ T5793] usb 1-1: SerialNumber: syz [ 252.317476][ T8322] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 252.318470][ T34] Bluetooth: hci0: Frame reassembly failed (-84) [ 252.443964][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.625'. [ 252.536177][ T5793] kvaser_usb 1-1:255.199: error -ENODEV: Cannot get usb endpoint(s) [ 252.560582][ T5793] usb 1-1: USB disconnect, device number 28 [ 253.345730][ T8341] overlayfs: workdir and upperdir must be separate subtrees [ 253.430580][ T8343] FAULT_INJECTION: forcing a failure. [ 253.430580][ T8343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.430626][ T8343] CPU: 0 UID: 0 PID: 8343 Comm: syz.3.631 Not tainted syzkaller #0 PREEMPT(full) [ 253.430645][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 253.430656][ T8343] Call Trace: [ 253.430663][ T8343] [ 253.430671][ T8343] dump_stack_lvl+0xe8/0x150 [ 253.430701][ T8343] should_fail_ex+0x3eb/0x540 [ 253.430731][ T8343] strncpy_from_user+0x36/0x2c0 [ 253.430763][ T8343] __se_sys_add_key+0xdb/0x420 [ 253.430784][ T8343] ? __pfx___se_sys_add_key+0x10/0x10 [ 253.430807][ T8343] ? __x64_sys_add_key+0x20/0xc0 [ 253.430826][ T8343] do_syscall_64+0x166/0x520 [ 253.430851][ T8343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.430868][ T8343] ? clear_bhb_loop+0x70/0xc0 [ 253.430895][ T8343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.430912][ T8343] RIP: 0033:0x7f0608b9f559 [ 253.430928][ T8343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.430943][ T8343] RSP: 002b:00007f06099d1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 253.430961][ T8343] RAX: ffffffffffffffda RBX: 00007f0608e25fa0 RCX: 00007f0608b9f559 [ 253.430974][ T8343] RDX: 0000200000000380 RSI: 0000000000000000 RDI: 00002000000001c0 [ 253.430985][ T8343] RBP: 00007f0608c36b50 R08: ffffffffffffffff R09: 0000000000000000 [ 253.430997][ T8343] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 253.431007][ T8343] R13: 00007f0608e26038 R14: 00007f0608e25fa0 R15: 00007ffc2167cad8 [ 253.431031][ T8343] [ 253.438763][ T8343] FAULT_INJECTION: forcing a failure. [ 253.438763][ T8343] name failslab, interval 1, probability 0, space 0, times 0 [ 253.438806][ T8343] CPU: 0 UID: 0 PID: 8343 Comm: syz.3.631 Not tainted syzkaller #0 PREEMPT(full) [ 253.438825][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 253.438837][ T8343] Call Trace: [ 253.438843][ T8343] [ 253.438851][ T8343] dump_stack_lvl+0xe8/0x150 [ 253.438881][ T8343] should_fail_ex+0x3eb/0x540 [ 253.438912][ T8343] should_failslab+0xa8/0x100 [ 253.438938][ T8343] ? security_inode_alloc+0x39/0x310 [ 253.438964][ T8343] kmem_cache_alloc_noprof+0x9c/0x600 [ 253.438980][ T8343] ? make_kgid+0x1d1/0x6a0 [ 253.439000][ T8343] ? security_inode_alloc+0x39/0x310 [ 253.439030][ T8343] security_inode_alloc+0x39/0x310 [ 253.439063][ T8343] inode_init_always_gfp+0x97e/0xd30 [ 253.439086][ T8343] ? __pfx_proc_alloc_inode+0x10/0x10 [ 253.439113][ T8343] alloc_inode+0x82/0x1b0 [ 253.439130][ T8343] new_inode+0x1f/0x170 [ 253.439147][ T8343] ? proc_pid_make_inode+0x19/0x130 [ 253.439169][ T8343] proc_pid_make_inode+0x21/0x130 [ 253.439190][ T8343] proc_pident_instantiate+0x6d/0x2a0 [ 253.439214][ T8343] proc_pident_lookup+0x1b7/0x270 [ 253.439240][ T8343] lookup_open+0x94b/0x1970 [ 253.439282][ T8343] path_openat+0x70c/0x20f0 [ 253.439319][ T8343] do_file_open+0x23e/0x4a0 [ 253.439345][ T8343] ? __pfx_do_file_open+0x10/0x10 [ 253.439375][ T8343] ? __pfx_kfree_link+0x10/0x10 [ 253.439401][ T8343] ? _raw_spin_unlock+0x28/0x50 [ 253.439421][ T8343] ? alloc_fd+0x6af/0x760 [ 253.439447][ T8343] do_sys_openat2+0x115/0x200 [ 253.439463][ T8343] ? __se_sys_futex+0x3a8/0x450 [ 253.439488][ T8343] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.439509][ T8343] ? rcu_is_watching+0x16/0xb0 [ 253.439538][ T8343] __x64_sys_openat+0x138/0x170 [ 253.439561][ T8343] do_syscall_64+0x166/0x520 [ 253.439586][ T8343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.439603][ T8343] ? clear_bhb_loop+0x70/0xc0 [ 253.439624][ T8343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.439640][ T8343] RIP: 0033:0x7f0608b5fd8e [ 253.439656][ T8343] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 253.439671][ T8343] RSP: 002b:00007f06099d0ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.439689][ T8343] RAX: ffffffffffffffda RBX: 00007f06099d16c0 RCX: 00007f0608b5fd8e [ 253.439702][ T8343] RDX: 0000000000000002 RSI: 00007f06099d0f90 RDI: ffffffffffffff9c [ 253.439713][ T8343] RBP: 00007f0608c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 253.439724][ T8343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.439734][ T8343] R13: 00007f0608e26038 R14: 00007f0608e25fa0 R15: 00007ffc2167cad8 [ 253.439760][ T8343] [ 254.079946][ T8352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.634'. [ 254.289627][ T4955] Bluetooth: hci0: command 0x1003 tx timeout [ 254.289737][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 254.319896][ T7103] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 254.347123][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 254.348445][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 254.348687][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 254.348877][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 254.349059][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 254.349243][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 254.349492][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 254.349677][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 254.349858][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 254.350050][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 254.391295][ T195] usb 6-1: USB disconnect, device number 18 [ 254.391373][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 254.470555][ T195] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 254.531252][ T7103] usb 4-1: Using ep0 maxpacket: 32 [ 254.534709][ T7103] usb 4-1: unable to get BOS descriptor or descriptor too short [ 254.534748][ T7103] usb 4-1: New USB device found: idVendor=0458, idProduct=7003, bcdDevice=fc.62 [ 254.535592][ T7103] usb 4-1: config 8 has an invalid interface number: 94 but max is 0 [ 254.535610][ T7103] usb 4-1: config 8 has no interface number 0 [ 254.535632][ T7103] usb 4-1: config 8 interface 94 has no altsetting 0 [ 254.537369][ T7103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.537388][ T7103] usb 4-1: Product: syz [ 254.537399][ T7103] usb 4-1: Manufacturer: syz [ 254.537411][ T7103] usb 4-1: SerialNumber: syz [ 254.839125][ T7103] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 254.853148][ T7103] gspca_sn9c2028: read1 error -71 [ 254.853457][ T7103] gspca_sn9c2028: read1 error -71 [ 254.853739][ T7103] gspca_sn9c2028: read1 error -71 [ 254.853794][ T7103] sn9c2028 4-1:8.94: probe with driver sn9c2028 failed with error -71 [ 254.872176][ T7103] usb 4-1: USB disconnect, device number 49 [ 255.323353][ T8371] FAULT_INJECTION: forcing a failure. [ 255.323353][ T8371] name fail_futex, interval 1, probability 0, space 0, times 0 [ 255.323382][ T8371] CPU: 0 UID: 0 PID: 8371 Comm: syz.5.642 Not tainted syzkaller #0 PREEMPT(full) [ 255.323401][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 255.323411][ T8371] Call Trace: [ 255.323418][ T8371] [ 255.323426][ T8371] dump_stack_lvl+0xe8/0x150 [ 255.323455][ T8371] should_fail_ex+0x3eb/0x540 [ 255.323486][ T8371] get_futex_key+0x1ab/0x1410 [ 255.323519][ T8371] ? __pfx_get_futex_key+0x10/0x10 [ 255.323544][ T8371] ? update_se+0x90/0x1080 [ 255.323570][ T8371] futex_wait_setup+0x4a/0x590 [ 255.323592][ T8371] ? __futex_wait+0xdb/0x470 [ 255.323613][ T8371] __futex_wait+0x175/0x470 [ 255.323630][ T8371] ? update_protect_slice+0x45/0x320 [ 255.323652][ T8371] ? __pfx___futex_wait+0x10/0x10 [ 255.323673][ T8371] ? __pfx_futex_wake_mark+0x10/0x10 [ 255.323694][ T8371] ? try_to_wake_up+0x8ce/0x14e0 [ 255.323724][ T8371] futex_wait+0x121/0x390 [ 255.323744][ T8371] ? __pfx_futex_wait+0x10/0x10 [ 255.323776][ T8371] do_futex+0x3e7/0x4e0 [ 255.323809][ T8371] ? __pfx_do_futex+0x10/0x10 [ 255.323832][ T8371] ? __asan_memset+0x22/0x50 [ 255.323858][ T8371] ? _copy_from_user+0x4c/0xb0 [ 255.323878][ T8371] __se_sys_futex+0x3a8/0x450 [ 255.323909][ T8371] ? __pfx___se_sys_futex+0x10/0x10 [ 255.323933][ T8371] ? rcu_is_watching+0x16/0xb0 [ 255.323961][ T8371] ? __x64_sys_futex+0x21/0xf0 [ 255.323988][ T8371] do_syscall_64+0x166/0x520 [ 255.324012][ T8371] ? trace_irq_disable+0x3b/0x140 [ 255.324033][ T8371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.324050][ T8371] ? clear_bhb_loop+0x70/0xc0 [ 255.324070][ T8371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.324086][ T8371] RIP: 0033:0x7f122fd9f559 [ 255.324102][ T8371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.324117][ T8371] RSP: 002b:00007f1230bba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 255.324135][ T8371] RAX: ffffffffffffffda RBX: 00007f1230025fa8 RCX: 00007f122fd9f559 [ 255.324148][ T8371] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1230025fa8 [ 255.324158][ T8371] RBP: 00007f1230025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 255.324169][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.324179][ T8371] R13: 00007f1230026038 R14: 00007ffdbf3879b0 R15: 00007ffdbf387a98 [ 255.324204][ T8371] [ 255.602360][ T8371] FAULT_INJECTION: forcing a failure. [ 255.602360][ T8371] name failslab, interval 1, probability 0, space 0, times 0 [ 255.602386][ T8371] CPU: 0 UID: 0 PID: 8371 Comm: syz.5.642 Not tainted syzkaller #0 PREEMPT(full) [ 255.602406][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 255.602417][ T8371] Call Trace: [ 255.602429][ T8371] [ 255.602436][ T8371] dump_stack_lvl+0xe8/0x150 [ 255.602466][ T8371] should_fail_ex+0x3eb/0x540 [ 255.602498][ T8371] should_failslab+0xa8/0x100 [ 255.602523][ T8371] __kmalloc_noprof+0xf9/0x710 [ 255.602541][ T8371] ? rcu_is_watching+0x16/0xb0 [ 255.602565][ T8371] ? tomoyo_realpath_from_path+0xf2/0x640 [ 255.602591][ T8371] ? tomoyo_realpath_from_path+0xf2/0x640 [ 255.602621][ T8371] tomoyo_realpath_from_path+0xf2/0x640 [ 255.602657][ T8371] tomoyo_check_open_permission+0x229/0x470 [ 255.602679][ T8371] ? tomoyo_check_open_permission+0x1d3/0x470 [ 255.602700][ T8371] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 255.602723][ T8371] ? __asan_memset+0x22/0x50 [ 255.602762][ T8371] ? mnt_get_write_access+0x66/0x280 [ 255.602792][ T8371] security_file_open+0xa9/0x240 [ 255.602813][ T8371] do_dentry_open+0x495/0x1360 [ 255.602858][ T8371] vfs_open_consume+0x4a/0x350 [ 255.602884][ T8371] ? path_openat+0x16e1/0x20f0 [ 255.602909][ T8371] path_openat+0x16fc/0x20f0 [ 255.602945][ T8371] do_file_open+0x23e/0x4a0 [ 255.602972][ T8371] ? __pfx_do_file_open+0x10/0x10 [ 255.603002][ T8371] ? __pfx_kfree_link+0x10/0x10 [ 255.603029][ T8371] ? _raw_spin_unlock+0x28/0x50 [ 255.603051][ T8371] ? alloc_fd+0x6af/0x760 [ 255.603076][ T8371] do_sys_openat2+0x115/0x200 [ 255.603093][ T8371] ? __se_sys_futex+0x3a8/0x450 [ 255.603121][ T8371] ? __pfx_do_sys_openat2+0x10/0x10 [ 255.603142][ T8371] ? rcu_is_watching+0x16/0xb0 [ 255.603169][ T8371] __x64_sys_openat+0x138/0x170 [ 255.603190][ T8371] do_syscall_64+0x166/0x520 [ 255.603214][ T8371] ? trace_irq_disable+0x3b/0x140 [ 255.603235][ T8371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.603252][ T8371] ? clear_bhb_loop+0x70/0xc0 [ 255.603273][ T8371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.603289][ T8371] RIP: 0033:0x7f122fd5fd8e [ 255.603305][ T8371] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 255.603320][ T8371] RSP: 002b:00007f1230bb9ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 255.603341][ T8371] RAX: ffffffffffffffda RBX: 00007f1230bba6c0 RCX: 00007f122fd5fd8e [ 255.603353][ T8371] RDX: 0000000000000002 RSI: 00007f1230bb9f90 RDI: ffffffffffffff9c [ 255.603365][ T8371] RBP: 00007f122fe36b50 R08: 0000000000000000 R09: 0000000000000000 [ 255.603376][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.603386][ T8371] R13: 00007f1230026038 R14: 00007f1230025fa0 R15: 00007ffdbf387a98 [ 255.603412][ T8371] [ 255.603454][ T8371] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.897043][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.897087][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.144945][ T8375] syz.5.644 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 256.144988][ T8375] CPU: 0 UID: 0 PID: 8375 Comm: syz.5.644 Not tainted syzkaller #0 PREEMPT(full) [ 256.145009][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 256.145020][ T8375] Call Trace: [ 256.145026][ T8375] [ 256.145034][ T8375] dump_stack_lvl+0xe8/0x150 [ 256.145064][ T8375] dump_header+0xd3/0x4b0 [ 256.145091][ T8375] oom_kill_process+0x3ab/0x9e0 [ 256.145116][ T8375] out_of_memory+0xfb1/0x13b0 [ 256.145133][ T8375] ? try_charge_memcg+0xc0d/0x15e0 [ 256.145168][ T8375] ? __pfx_out_of_memory+0x10/0x10 [ 256.145186][ T8375] ? do_raw_spin_unlock+0xf5/0x200 [ 256.145220][ T8375] try_charge_memcg+0xcc3/0x15e0 [ 256.145260][ T8375] ? __pfx_try_charge_memcg+0x10/0x10 [ 256.145291][ T8375] ? percpu_ref_tryget+0x15/0x180 [ 256.145327][ T8375] ? __obj_cgroup_charge+0x36/0x2d0 [ 256.145352][ T8375] __obj_cgroup_charge+0x20a/0x2d0 [ 256.145373][ T8375] ? __obj_cgroup_charge+0x36/0x2d0 [ 256.145397][ T8375] __memcg_slab_post_alloc_hook+0x772/0xdb0 [ 256.145436][ T8375] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 256.145454][ T8375] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 256.145472][ T8375] ? shmem_alloc_inode+0x28/0x40 [ 256.145494][ T8375] ? shmem_alloc_inode+0x28/0x40 [ 256.145521][ T8375] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 256.145545][ T8375] shmem_alloc_inode+0x28/0x40 [ 256.145567][ T8375] alloc_inode+0x6a/0x1b0 [ 256.145586][ T8375] new_inode+0x1f/0x170 [ 256.145606][ T8375] shmem_get_inode+0x3a4/0x1030 [ 256.145637][ T8375] ? __pfx_shmem_get_inode+0x10/0x10 [ 256.145659][ T8375] ? from_kgid+0x1c6/0x660 [ 256.145678][ T8375] ? make_vfsuid+0x49/0xa0 [ 256.145707][ T8375] ? generic_permission+0x2ba/0x660 [ 256.145728][ T8375] shmem_mknod+0x17d/0x340 [ 256.145757][ T8375] shmem_mkdir+0x33/0x70 [ 256.145784][ T8375] vfs_mkdir+0x40e/0x630 [ 256.145813][ T8375] filename_mkdirat+0x285/0x510 [ 256.145835][ T8375] ? __might_fault+0xaf/0x130 [ 256.145865][ T8375] ? __pfx_filename_mkdirat+0x10/0x10 [ 256.145892][ T8375] ? do_getname+0x151/0x250 [ 256.145910][ T8375] __se_sys_mkdirat+0x35/0x150 [ 256.145936][ T8375] do_syscall_64+0x166/0x520 [ 256.145966][ T8375] ? trace_irq_disable+0x3b/0x140 [ 256.145988][ T8375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.146005][ T8375] ? clear_bhb_loop+0x70/0xc0 [ 256.146026][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.146043][ T8375] RIP: 0033:0x7f122fd9f559 [ 256.146060][ T8375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.146075][ T8375] RSP: 002b:00007f1230bba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 256.146093][ T8375] RAX: ffffffffffffffda RBX: 00007f1230025fa0 RCX: 00007f122fd9f559 [ 256.146105][ T8375] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 256.146117][ T8375] RBP: 00007f122fe36b50 R08: 0000000000000000 R09: 0000000000000000 [ 256.146127][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.146137][ T8375] R13: 00007f1230026038 R14: 00007f1230025fa0 R15: 00007ffdbf387a98 [ 256.146164][ T8375] [ 256.211258][ T8375] memory: usage 8kB, limit 8kB, failcnt 21 [ 256.211275][ T8375] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 256.211286][ T8375] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 256.211297][ T8375] Memory cgroup stats for /syz5/test: [ 256.211418][ T8375] cache 0 [ 256.211426][ T8375] rss 0 [ 256.211432][ T8375] rss_huge 0 [ 256.211437][ T8375] shmem 0 [ 256.211443][ T8375] mapped_file 0 [ 256.211449][ T8375] dirty 0 [ 256.211454][ T8375] writeback 0 [ 256.211460][ T8375] workingset_refault_anon 0 [ 256.211466][ T8375] workingset_refault_file 0 [ 256.211473][ T8375] swap 0 [ 256.211478][ T8375] swapcached 0 [ 256.211484][ T8375] pgpgin 0 [ 256.211490][ T8375] pgpgout 0 [ 256.211495][ T8375] pgfault 0 [ 256.211501][ T8375] pgmajfault 0 [ 256.211506][ T8375] inactive_anon 0 [ 256.211512][ T8375] active_anon 0 [ 256.211518][ T8375] inactive_file 0 [ 256.211523][ T8375] active_file 0 [ 256.211529][ T8375] unevictable 0 [ 256.211535][ T8375] hierarchical_memory_limit 8192 [ 256.211541][ T8375] hierarchical_memsw_limit 9223372036854771712 [ 256.211548][ T8375] total_cache 0 [ 256.211554][ T8375] total_rss 0 [ 256.211560][ T8375] total_rss_huge 0 [ 256.211565][ T8375] total_shmem 0 [ 256.211571][ T8375] total_mapped_file 0 [ 256.211577][ T8375] total_dirty 0 [ 256.211583][ T8375] total_writeback 0 [ 256.211589][ T8375] total_workingset_refault_anon 0 [ 256.211595][ T8375] total_workingset_refault_file 0 [ 256.211602][ T8375] total_swap 0 [ 256.211607][ T8375] total_swapcached 0 [ 256.211614][ T8375] total_pgpgin 0 [ 256.211619][ T8375] total_pgpgout 0 [ 256.211625][ T8375] total_pgfault 0 [ 256.211631][ T8375] total_pgmajfault 0 [ 256.211637][ T8375] total_inactive_anon 0 [ 256.211643][ T8375] total_active_anon 0 [ 256.211649][ T8375] total_inactive_file 0 [ 256.211656][ T8375] total_active_file 0 [ 256.211662][ T8375] total_unevictable 0 [ 256.211668][ T8375] anon_cost 0 [ 256.211674][ T8375] file_cost 0 [ 256.211684][ T8375] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.644,pid=8373,uid=0 [ 256.211996][ T8375] Memory cgroup out of memory: Killed process 8373 (syz.5.644) total-vm:102280kB, anon-rss:1452kB, file-rss:22868kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 257.174711][ T4967] null_blk: rq ffff8880291fb300 timed out [ 257.174872][ T4967] timeout error, dev nullb0, sector 192 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.184240][ T8291] isofs_fill_super: bread failed, dev=nullb0, iso_blknum=48, block=96 [ 257.395022][ T8395] tmpfs: Bad value for 'mpol' [ 257.629570][ T5793] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 257.760357][ T5793] usb 5-1: device descriptor read/64, error -71 [ 257.843952][ T8397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.652'. [ 257.967713][ T8402] FAULT_INJECTION: forcing a failure. [ 257.967713][ T8402] name failslab, interval 1, probability 0, space 0, times 0 [ 257.967739][ T8402] CPU: 0 UID: 0 PID: 8402 Comm: syz.0.653 Not tainted syzkaller #0 PREEMPT(full) [ 257.967757][ T8402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 257.967768][ T8402] Call Trace: [ 257.967774][ T8402] [ 257.967781][ T8402] dump_stack_lvl+0xe8/0x150 [ 257.967811][ T8402] should_fail_ex+0x3eb/0x540 [ 257.967840][ T8402] should_failslab+0xa8/0x100 [ 257.967863][ T8402] ? skb_clone+0x212/0x3a0 [ 257.967886][ T8402] kmem_cache_alloc_noprof+0x9c/0x600 [ 257.967906][ T8402] ? skb_clone+0x212/0x3a0 [ 257.967934][ T8402] skb_clone+0x212/0x3a0 [ 257.967960][ T8402] __netlink_deliver_tap+0x355/0x6e0 [ 257.967985][ T8402] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.968005][ T8402] netlink_deliver_tap+0x19c/0x1b0 [ 257.968023][ T8402] netlink_dump+0x9a0/0xf20 [ 257.968049][ T8402] ? __pfx_netlink_dump+0x10/0x10 [ 257.968075][ T8402] ? netlink_recvmsg+0x5ce/0xa70 [ 257.968092][ T8402] ? kmem_cache_free+0x182/0x650 [ 257.968116][ T8402] netlink_recvmsg+0x692/0xa70 [ 257.968141][ T8402] ? __pfx_netlink_recvmsg+0x10/0x10 [ 257.968168][ T8402] ? aa_sock_msg_perm+0x144/0x210 [ 257.968195][ T8402] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 257.968214][ T8402] ? security_socket_recvmsg+0x7e/0x2c0 [ 257.968231][ T8402] ? __pfx_netlink_recvmsg+0x10/0x10 [ 257.968250][ T8402] sock_recvmsg+0x196/0x1e0 [ 257.968268][ T8402] ____sys_recvmsg+0x1f8/0x530 [ 257.968298][ T8402] ? __pfx_____sys_recvmsg+0x10/0x10 [ 257.968333][ T8402] ? import_iovec+0x73/0xa0 [ 257.968361][ T8402] ___sys_recvmsg+0x213/0x5a0 [ 257.968388][ T8402] ? __pfx____sys_recvmsg+0x10/0x10 [ 257.968415][ T8402] ? lock_acquire+0x115/0x350 [ 257.968445][ T8402] ? __fget_files+0x2a/0x420 [ 257.968463][ T8402] ? __fget_files+0x3a2/0x420 [ 257.968480][ T8402] ? __fget_files+0x2a/0x420 [ 257.968506][ T8402] __x64_sys_recvmsg+0x1ae/0x290 [ 257.968531][ T8402] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 257.968571][ T8402] do_syscall_64+0x166/0x520 [ 257.968596][ T8402] ? trace_irq_disable+0x3b/0x140 [ 257.968616][ T8402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.968633][ T8402] ? clear_bhb_loop+0x70/0xc0 [ 257.968661][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.968678][ T8402] RIP: 0033:0x7ff03679f559 [ 257.968693][ T8402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.968708][ T8402] RSP: 002b:00007ff03760f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 257.968725][ T8402] RAX: ffffffffffffffda RBX: 00007ff036a25fa0 RCX: 00007ff03679f559 [ 257.968738][ T8402] RDX: 0000000000000020 RSI: 0000200000000780 RDI: 0000000000000003 [ 257.968749][ T8402] RBP: 00007ff03760f090 R08: 0000000000000000 R09: 0000000000000000 [ 257.968760][ T8402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.968770][ T8402] R13: 00007ff036a26038 R14: 00007ff036a25fa0 R15: 00007ffcf1f24d28 [ 257.968795][ T8402] [ 258.017807][ T5793] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 258.221850][ T5793] usb 5-1: device descriptor read/64, error -71 [ 258.329832][ T5793] usb usb5-port1: attempt power cycle [ 258.669690][ T5793] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 258.690997][ T5793] usb 5-1: device descriptor read/8, error -71 [ 258.725606][ T8408] NILFS (nullb0): couldn't find nilfs on the device [ 258.883539][ T8413] nvme_rdma: malformed address passed: malformed:4420 [ 258.923456][ T8412] nvme_rdma: malformed address passed: malformed:4420 [ 258.938468][ T5793] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 258.950649][ T5793] usb 5-1: device descriptor read/8, error -71 [ 259.061434][ T5793] usb usb5-port1: unable to enumerate USB device [ 259.235301][ T8417] befs: (nbd3): No write support. Marking filesystem read-only [ 259.549252][ T8425] netlink: 'syz.3.662': attribute type 12 has an invalid length. [ 259.726953][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.664'. [ 259.726986][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.664'. [ 259.727000][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 259.727011][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 260.100603][ T5651] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 260.250973][ T5651] usb 4-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 260.255322][ T5651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.255344][ T5651] usb 4-1: Product: syz [ 260.255355][ T5651] usb 4-1: Manufacturer: syz [ 260.255367][ T5651] usb 4-1: SerialNumber: syz [ 260.326135][ T8441] FAULT_INJECTION: forcing a failure. [ 260.326135][ T8441] name failslab, interval 1, probability 0, space 0, times 0 [ 260.326161][ T8441] CPU: 0 UID: 0 PID: 8441 Comm: syz.0.669 Not tainted syzkaller #0 PREEMPT(full) [ 260.326180][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 260.326190][ T8441] Call Trace: [ 260.326197][ T8441] [ 260.326205][ T8441] dump_stack_lvl+0xe8/0x150 [ 260.326236][ T8441] should_fail_ex+0x3eb/0x540 [ 260.326267][ T8441] should_failslab+0xa8/0x100 [ 260.326292][ T8441] __kmalloc_noprof+0xf9/0x710 [ 260.326311][ T8441] ? __seq_open_private+0x29/0x1a0 [ 260.326327][ T8441] ? __seq_open_private+0x29/0x1a0 [ 260.326348][ T8441] __seq_open_private+0x29/0x1a0 [ 260.326363][ T8441] ? pid_numa_maps_open+0x18/0xd0 [ 260.326392][ T8441] pid_numa_maps_open+0x2c/0xd0 [ 260.326415][ T8441] ? __pfx_pid_numa_maps_open+0x10/0x10 [ 260.326437][ T8441] do_dentry_open+0x80e/0x1360 [ 260.326471][ T8441] vfs_open_consume+0x4a/0x350 [ 260.326496][ T8441] ? path_openat+0x16e1/0x20f0 [ 260.326521][ T8441] path_openat+0x16fc/0x20f0 [ 260.326556][ T8441] do_file_open+0x23e/0x4a0 [ 260.326582][ T8441] ? __pfx_do_file_open+0x10/0x10 [ 260.326619][ T8441] ? __pfx_kfree_link+0x10/0x10 [ 260.326645][ T8441] ? _raw_spin_unlock+0x28/0x50 [ 260.326667][ T8441] ? alloc_fd+0x6af/0x760 [ 260.326693][ T8441] do_sys_openat2+0x115/0x200 [ 260.326709][ T8441] ? __se_sys_futex+0x3a8/0x450 [ 260.326735][ T8441] ? __pfx_do_sys_openat2+0x10/0x10 [ 260.326755][ T8441] ? rcu_is_watching+0x16/0xb0 [ 260.326782][ T8441] __x64_sys_openat+0x138/0x170 [ 260.326802][ T8441] do_syscall_64+0x166/0x520 [ 260.326826][ T8441] ? trace_irq_disable+0x3b/0x140 [ 260.326848][ T8441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.326866][ T8441] ? clear_bhb_loop+0x70/0xc0 [ 260.326886][ T8441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.326902][ T8441] RIP: 0033:0x7ff03675fd8e [ 260.326917][ T8441] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 260.326932][ T8441] RSP: 002b:00007ff03760eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 260.326949][ T8441] RAX: ffffffffffffffda RBX: 00007ff03760f6c0 RCX: 00007ff03675fd8e [ 260.326961][ T8441] RDX: 0000000000000002 RSI: 00007ff03760ef90 RDI: ffffffffffffff9c [ 260.326973][ T8441] RBP: 00007ff036836b50 R08: 0000000000000000 R09: 0000000000000000 [ 260.326983][ T8441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.326993][ T8441] R13: 00007ff036a26038 R14: 00007ff036a25fa0 R15: 00007ffcf1f24d28 [ 260.327017][ T8441] [ 260.366549][ T5793] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 260.633000][ T5793] usb 6-1: Using ep0 maxpacket: 8 [ 260.649718][ T5793] usb 6-1: New USB device found: idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 260.652547][ T5793] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 260.652571][ T5793] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.652586][ T5793] usb 6-1: config 0 has no interface number 0 [ 260.669317][ T5793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.669338][ T5793] usb 6-1: Product: syz [ 260.669350][ T5793] usb 6-1: Manufacturer: syz [ 260.669361][ T5793] usb 6-1: SerialNumber: syz [ 260.725777][ T5793] usb 6-1: config 0 descriptor?? [ 260.747299][ T5793] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22 [ 260.858915][ T5651] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 260.917753][ T8444] overlayfs: failed to resolve './file0': -2 [ 260.946942][ T8444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.670'. [ 260.966029][ T195] usb 6-1: USB disconnect, device number 19 [ 261.064962][ T8444] kvm: vcpu 0: requested 10 ns lapic timer period limited to 200000 ns [ 261.314862][ T8432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.315300][ T8432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.369960][ T195] usb 4-1: USB disconnect, device number 50 [ 261.432027][ T8450] netlink: 'syz.4.673': attribute type 21 has an invalid length. [ 261.543584][ T8454] FAULT_INJECTION: forcing a failure. [ 261.543584][ T8454] name failslab, interval 1, probability 0, space 0, times 0 [ 261.543608][ T8454] CPU: 0 UID: 0 PID: 8454 Comm: syz.4.675 Not tainted syzkaller #0 PREEMPT(full) [ 261.543627][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 261.543637][ T8454] Call Trace: [ 261.543644][ T8454] [ 261.543651][ T8454] dump_stack_lvl+0xe8/0x150 [ 261.543679][ T8454] should_fail_ex+0x3eb/0x540 [ 261.543709][ T8454] should_failslab+0xa8/0x100 [ 261.543734][ T8454] __kmalloc_cache_noprof+0x9e/0x600 [ 261.543754][ T8454] ? __request_region+0x5f/0x1a0 [ 261.543779][ T8454] ? __request_region+0x5f/0x1a0 [ 261.543809][ T8454] __request_region+0x5f/0x1a0 [ 261.543838][ T8454] __comedi_check_request_region+0xd0/0x260 [ 261.543867][ T8454] dev_8255_attach+0x96c/0xe40 [ 261.543892][ T8454] comedi_device_attach+0x52d/0x720 [ 261.543921][ T8454] comedi_unlocked_ioctl+0x8ef/0x1af0 [ 261.543955][ T8454] ? kasan_quarantine_put+0xbb/0x1f0 [ 261.543974][ T8454] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 261.544008][ T8454] ? do_vfs_ioctl+0x116f/0x1530 [ 261.544033][ T8454] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 261.544083][ T8454] ? __fget_files+0x2a/0x420 [ 261.544104][ T8454] ? __fget_files+0x2a/0x420 [ 261.544122][ T8454] ? __fget_files+0x2a/0x420 [ 261.544143][ T8454] ? bpf_lsm_file_ioctl+0x9/0x20 [ 261.544165][ T8454] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 261.544187][ T8454] __se_sys_ioctl+0xfc/0x170 [ 261.544211][ T8454] do_syscall_64+0x166/0x520 [ 261.544235][ T8454] ? trace_irq_disable+0x3b/0x140 [ 261.544256][ T8454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.544272][ T8454] ? clear_bhb_loop+0x70/0xc0 [ 261.544293][ T8454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.544309][ T8454] RIP: 0033:0x7f13f859f559 [ 261.544324][ T8454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.544352][ T8454] RSP: 002b:00007f13f952f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.544370][ T8454] RAX: ffffffffffffffda RBX: 00007f13f8825fa0 RCX: 00007f13f859f559 [ 261.544383][ T8454] RDX: 00002000000001c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 261.544394][ T8454] RBP: 00007f13f952f090 R08: 0000000000000000 R09: 0000000000000000 [ 261.544405][ T8454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.544415][ T8454] R13: 00007f13f8826038 R14: 00007f13f8825fa0 R15: 00007ffca5be3f28 [ 261.544441][ T8454] [ 261.544452][ T8454] comedi comedi1: 8255: I/O port conflict (0xf000,4) [ 261.890829][ T5651] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 261.891006][ T5651] ath9k_htc: Failed to initialize the device [ 261.897010][ T195] usb 4-1: ath9k_htc: USB layer deinitialized [ 262.131659][ T1122] IPVS: starting estimator thread 0... [ 262.150823][ T8461] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 262.232193][ T8463] IPVS: using max 38 ests per chain, 91200 per kthread [ 262.371162][ T8470] FAULT_INJECTION: forcing a failure. [ 262.371162][ T8470] name fail_futex, interval 1, probability 0, space 0, times 0 [ 262.371190][ T8470] CPU: 0 UID: 0 PID: 8470 Comm: syz.0.682 Not tainted syzkaller #0 PREEMPT(full) [ 262.371210][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 262.371221][ T8470] Call Trace: [ 262.371228][ T8470] [ 262.371236][ T8470] dump_stack_lvl+0xe8/0x150 [ 262.371266][ T8470] should_fail_ex+0x3eb/0x540 [ 262.371297][ T8470] get_futex_key+0x1ab/0x1410 [ 262.371321][ T8470] ? fixup_exception+0x11f8/0x2140 [ 262.371350][ T8470] ? lock_mm_and_find_vma+0x117/0x340 [ 262.371376][ T8470] ? __pfx_get_futex_key+0x10/0x10 [ 262.371406][ T8470] futex_wake+0x119/0x5f0 [ 262.371429][ T8470] ? __pfx_futex_wake+0x10/0x10 [ 262.371445][ T8470] ? irqentry_exit+0x2a0/0x9b0 [ 262.371480][ T8470] ? irqentry_exit+0x2a0/0x9b0 [ 262.371503][ T8470] ? trace_irq_disable+0x3b/0x140 [ 262.371534][ T8470] do_futex+0x458/0x4e0 [ 262.371562][ T8470] ? __pfx_do_futex+0x10/0x10 [ 262.371585][ T8470] ? __asan_memset+0x22/0x50 [ 262.371604][ T8470] ? _copy_from_user+0x4c/0xb0 [ 262.371624][ T8470] __se_sys_futex+0x3a8/0x450 [ 262.371654][ T8470] ? __pfx___se_sys_futex+0x10/0x10 [ 262.371679][ T8470] ? rcu_is_watching+0x16/0xb0 [ 262.371707][ T8470] ? __x64_sys_futex+0x21/0xf0 [ 262.371734][ T8470] do_syscall_64+0x166/0x520 [ 262.371759][ T8470] ? trace_irq_disable+0x3b/0x140 [ 262.371779][ T8470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.371796][ T8470] ? clear_bhb_loop+0x70/0xc0 [ 262.371817][ T8470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.371833][ T8470] RIP: 0033:0x7ff03679f559 [ 262.371849][ T8470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.371863][ T8470] RSP: 002b:00007ff03760f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 262.371881][ T8470] RAX: ffffffffffffffda RBX: 00007ff036a25fa8 RCX: 00007ff03679f559 [ 262.371893][ T8470] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff036a25fac [ 262.371904][ T8470] RBP: 00007ff036a25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 262.371916][ T8470] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 262.371926][ T8470] R13: 00007ff036a26038 R14: 00007ffcf1f24c40 R15: 00007ffcf1f24d28 [ 262.371951][ T8470] [ 262.656015][ T8470] FAULT_INJECTION: forcing a failure. [ 262.656015][ T8470] name failslab, interval 1, probability 0, space 0, times 0 [ 262.656041][ T8470] CPU: 0 UID: 0 PID: 8470 Comm: syz.0.682 Not tainted syzkaller #0 PREEMPT(full) [ 262.656060][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 262.656071][ T8470] Call Trace: [ 262.656078][ T8470] [ 262.656085][ T8470] dump_stack_lvl+0xe8/0x150 [ 262.656118][ T8470] should_fail_ex+0x3eb/0x540 [ 262.656150][ T8470] should_failslab+0xa8/0x100 [ 262.656175][ T8470] ? security_inode_alloc+0x39/0x310 [ 262.656201][ T8470] kmem_cache_alloc_noprof+0x9c/0x600 [ 262.656218][ T8470] ? make_kgid+0x1d1/0x6a0 [ 262.656238][ T8470] ? security_inode_alloc+0x39/0x310 [ 262.656268][ T8470] security_inode_alloc+0x39/0x310 [ 262.656304][ T8470] inode_init_always_gfp+0x97e/0xd30 [ 262.656326][ T8470] ? __pfx_proc_alloc_inode+0x10/0x10 [ 262.656353][ T8470] alloc_inode+0x82/0x1b0 [ 262.656371][ T8470] new_inode+0x1f/0x170 [ 262.656388][ T8470] ? proc_pid_make_inode+0x19/0x130 [ 262.656410][ T8470] proc_pid_make_inode+0x21/0x130 [ 262.656431][ T8470] proc_pident_instantiate+0x6d/0x2a0 [ 262.656455][ T8470] proc_pident_lookup+0x1b7/0x270 [ 262.656481][ T8470] lookup_open+0x94b/0x1970 [ 262.656523][ T8470] path_openat+0x70c/0x20f0 [ 262.656560][ T8470] do_file_open+0x23e/0x4a0 [ 262.656586][ T8470] ? __pfx_do_file_open+0x10/0x10 [ 262.656616][ T8470] ? __pfx_kfree_link+0x10/0x10 [ 262.656643][ T8470] ? _raw_spin_unlock+0x28/0x50 [ 262.656665][ T8470] ? alloc_fd+0x6af/0x760 [ 262.656700][ T8470] do_sys_openat2+0x115/0x200 [ 262.656717][ T8470] ? __se_sys_futex+0x3a8/0x450 [ 262.656743][ T8470] ? __pfx_do_sys_openat2+0x10/0x10 [ 262.656764][ T8470] ? rcu_is_watching+0x16/0xb0 [ 262.656792][ T8470] __x64_sys_openat+0x138/0x170 [ 262.656813][ T8470] do_syscall_64+0x166/0x520 [ 262.656837][ T8470] ? trace_irq_disable+0x3b/0x140 [ 262.656859][ T8470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.656876][ T8470] ? clear_bhb_loop+0x70/0xc0 [ 262.656896][ T8470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.656913][ T8470] RIP: 0033:0x7ff03675fd8e [ 262.656928][ T8470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 262.656943][ T8470] RSP: 002b:00007ff03760eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 262.656961][ T8470] RAX: ffffffffffffffda RBX: 00007ff03760f6c0 RCX: 00007ff03675fd8e [ 262.656973][ T8470] RDX: 0000000000000002 RSI: 00007ff03760ef90 RDI: ffffffffffffff9c [ 262.656984][ T8470] RBP: 00007ff036836b50 R08: 0000000000000000 R09: 0000000000000000 [ 262.656995][ T8470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.657005][ T8470] R13: 00007ff036a26038 R14: 00007ff036a25fa0 R15: 00007ffcf1f24d28 [ 262.657031][ T8470] [ 263.181095][ T8481] comedi comedi1: 8255: I/O base address not correctly aligned [ 263.303513][ T8478] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 263.400422][ T195] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 263.550388][ T195] usb 1-1: Using ep0 maxpacket: 16 [ 263.550951][ T195] usb 1-1: New USB device found: idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 263.551870][ T195] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.551888][ T195] usb 1-1: config 0 has no interface number 0 [ 263.557424][ T195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.557446][ T195] usb 1-1: Product: syz [ 263.557457][ T195] usb 1-1: Manufacturer: syz [ 263.557468][ T195] usb 1-1: SerialNumber: syz [ 263.622055][ T195] usb 1-1: config 0 descriptor?? [ 263.640120][ T195] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 263.725704][ T8491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.690'. [ 263.886895][ T8501] mmap: syz.4.693 (8501) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 263.939170][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.950585][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.046230][ T8509] FAULT_INJECTION: forcing a failure. [ 264.046230][ T8509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.046260][ T8509] CPU: 0 UID: 0 PID: 8509 Comm: syz.3.695 Not tainted syzkaller #0 PREEMPT(full) [ 264.046287][ T8509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 264.046298][ T8509] Call Trace: [ 264.046305][ T8509] [ 264.046313][ T8509] dump_stack_lvl+0xe8/0x150 [ 264.046345][ T8509] should_fail_ex+0x3eb/0x540 [ 264.046375][ T8509] _copy_from_user+0x2d/0xb0 [ 264.046392][ T8509] __se_sys_capset+0x23e/0x450 [ 264.046417][ T8509] ? __pfx___se_sys_capset+0x10/0x10 [ 264.046445][ T8509] ? rcu_is_watching+0x16/0xb0 [ 264.046478][ T8509] do_syscall_64+0x166/0x520 [ 264.046504][ T8509] ? trace_irq_disable+0x3b/0x140 [ 264.046525][ T8509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.046542][ T8509] ? clear_bhb_loop+0x70/0xc0 [ 264.046562][ T8509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.046579][ T8509] RIP: 0033:0x7f0608b9f559 [ 264.046595][ T8509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.046610][ T8509] RSP: 002b:00007f06099d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 264.046628][ T8509] RAX: ffffffffffffffda RBX: 00007f0608e25fa0 RCX: 00007f0608b9f559 [ 264.046641][ T8509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 264.046651][ T8509] RBP: 00007f0608c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 264.046662][ T8509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.046672][ T8509] R13: 00007f0608e26038 R14: 00007f0608e25fa0 R15: 00007ffc2167cad8 [ 264.046697][ T8509] [ 264.255013][ T195] gspca_spca1528: reg_w err -71 [ 264.270344][ T195] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 264.289296][ T195] usb 1-1: USB disconnect, device number 29 [ 264.324494][ T8509] FAULT_INJECTION: forcing a failure. [ 264.324494][ T8509] name failslab, interval 1, probability 0, space 0, times 0 [ 264.324522][ T8509] CPU: 0 UID: 0 PID: 8509 Comm: syz.3.695 Not tainted syzkaller #0 PREEMPT(full) [ 264.324543][ T8509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 264.324555][ T8509] Call Trace: [ 264.324563][ T8509] [ 264.324571][ T8509] dump_stack_lvl+0xe8/0x150 [ 264.324603][ T8509] should_fail_ex+0x3eb/0x540 [ 264.324638][ T8509] should_failslab+0xa8/0x100 [ 264.324664][ T8509] ? security_inode_alloc+0x39/0x310 [ 264.324696][ T8509] kmem_cache_alloc_noprof+0x9c/0x600 [ 264.324717][ T8509] ? __pfx_make_kgid+0x10/0x10 [ 264.324737][ T8509] ? security_inode_alloc+0x39/0x310 [ 264.324771][ T8509] security_inode_alloc+0x39/0x310 [ 264.324801][ T8509] inode_init_always_gfp+0x97e/0xd30 [ 264.324826][ T8509] ? __pfx_proc_alloc_inode+0x10/0x10 [ 264.324855][ T8509] alloc_inode+0x82/0x1b0 [ 264.324876][ T8509] new_inode+0x1f/0x170 [ 264.324894][ T8509] ? proc_pid_make_inode+0x19/0x130 [ 264.324918][ T8509] proc_pid_make_inode+0x21/0x130 [ 264.324941][ T8509] proc_pident_instantiate+0x6d/0x2a0 [ 264.324969][ T8509] proc_pident_lookup+0x1b7/0x270 [ 264.324997][ T8509] __lookup_slow+0x1fb/0x2f0 [ 264.325022][ T8509] lookup_slow+0x59/0x80 [ 264.325044][ T8509] link_path_walk+0xd83/0x19a0 [ 264.325081][ T8509] path_openat+0x1b7/0x20f0 [ 264.325123][ T8509] do_file_open+0x23e/0x4a0 [ 264.325152][ T8509] ? __pfx_do_file_open+0x10/0x10 [ 264.325194][ T8509] ? __pfx_kfree_link+0x10/0x10 [ 264.325225][ T8509] ? _raw_spin_unlock+0x28/0x50 [ 264.325251][ T8509] ? alloc_fd+0x6af/0x760 [ 264.325281][ T8509] do_sys_openat2+0x115/0x200 [ 264.325300][ T8509] ? __se_sys_futex+0x3a8/0x450 [ 264.325329][ T8509] ? __pfx_do_sys_openat2+0x10/0x10 [ 264.325353][ T8509] ? rcu_is_watching+0x16/0xb0 [ 264.325383][ T8509] __x64_sys_openat+0x138/0x170 [ 264.325410][ T8509] do_syscall_64+0x166/0x520 [ 264.325437][ T8509] ? trace_irq_disable+0x3b/0x140 [ 264.325462][ T8509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.325481][ T8509] ? clear_bhb_loop+0x70/0xc0 [ 264.325505][ T8509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.325524][ T8509] RIP: 0033:0x7f0608b5fd8e [ 264.325541][ T8509] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 264.325558][ T8509] RSP: 002b:00007f06099d0ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 264.325578][ T8509] RAX: ffffffffffffffda RBX: 00007f06099d16c0 RCX: 00007f0608b5fd8e [ 264.325592][ T8509] RDX: 0000000000000002 RSI: 00007f06099d0f90 RDI: ffffffffffffff9c [ 264.325604][ T8509] RBP: 00007f0608c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 264.325616][ T8509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.325627][ T8509] R13: 00007f0608e26038 R14: 00007f0608e25fa0 R15: 00007ffc2167cad8 [ 264.325656][ T8509] [ 264.741026][ T8512] gfs2: path_lookup on gid_map returned error -2 [ 264.833271][ T8516] FAULT_INJECTION: forcing a failure. [ 264.833271][ T8516] name failslab, interval 1, probability 0, space 0, times 0 [ 264.833295][ T8516] CPU: 0 UID: 0 PID: 8516 Comm: syz.3.697 Not tainted syzkaller #0 PREEMPT(full) [ 264.833314][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 264.833324][ T8516] Call Trace: [ 264.833331][ T8516] [ 264.833338][ T8516] dump_stack_lvl+0xe8/0x150 [ 264.833367][ T8516] should_fail_ex+0x3eb/0x540 [ 264.833397][ T8516] should_failslab+0xa8/0x100 [ 264.833422][ T8516] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 264.833442][ T8516] ? __kasan_kmalloc+0x93/0xb0 [ 264.833464][ T8516] ? snd_timer_instance_new+0x6a/0x260 [ 264.833481][ T8516] ? snd_timer_instance_new+0x6a/0x260 [ 264.833498][ T8516] ? __kmalloc_cache_noprof+0x148/0x600 [ 264.833520][ T8516] kstrdup+0x42/0x100 [ 264.833537][ T8516] snd_timer_instance_new+0x6a/0x260 [ 264.833556][ T8516] snd_seq_timer_open+0x23e/0x620 [ 264.833585][ T8516] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 264.833620][ T8516] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 264.833646][ T8516] snd_seq_queue_alloc+0x3ba/0x740 [ 264.833673][ T8516] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 264.833693][ T8516] snd_seq_oss_open+0x657/0xf80 [ 264.833716][ T8516] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 264.833759][ T8516] ? rcu_is_watching+0x16/0xb0 [ 264.833782][ T8516] ? trace_contention_end+0x3d/0x140 [ 264.833820][ T8516] ? __pfx___mutex_lock+0x10/0x10 [ 264.833849][ T8516] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 264.833868][ T8516] ? __pfx_free_devinfo+0x10/0x10 [ 264.833884][ T8516] ? do_raw_spin_unlock+0xf5/0x200 [ 264.833912][ T8516] ? soundcore_open+0x2da/0x490 [ 264.833933][ T8516] odev_open+0x67/0xa0 [ 264.833952][ T8516] chrdev_open+0x4d9/0x600 [ 264.833978][ T8516] ? __pfx_chrdev_open+0x10/0x10 [ 264.834001][ T8516] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 264.834025][ T8516] ? devcgroup_check_permission+0x31/0x8f0 [ 264.834046][ T8516] ? __pfx_chrdev_open+0x10/0x10 [ 264.834069][ T8516] do_dentry_open+0x80e/0x1360 [ 264.834102][ T8516] vfs_open_consume+0x4a/0x350 [ 264.834126][ T8516] ? path_openat+0x16e1/0x20f0 [ 264.834150][ T8516] path_openat+0x16fc/0x20f0 [ 264.834186][ T8516] do_file_open+0x23e/0x4a0 [ 264.834212][ T8516] ? __pfx_do_file_open+0x10/0x10 [ 264.834254][ T8516] ? _raw_spin_unlock+0x28/0x50 [ 264.834275][ T8516] ? alloc_fd+0x6af/0x760 [ 264.834300][ T8516] do_sys_openat2+0x115/0x200 [ 264.834319][ T8516] ? __pfx_do_sys_openat2+0x10/0x10 [ 264.834336][ T8516] ? ksys_write+0x242/0x270 [ 264.834358][ T8516] ? __pfx_ksys_write+0x10/0x10 [ 264.834381][ T8516] __x64_sys_openat+0x138/0x170 [ 264.834402][ T8516] do_syscall_64+0x166/0x520 [ 264.834426][ T8516] ? trace_irq_disable+0x3b/0x140 [ 264.834446][ T8516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.834463][ T8516] ? clear_bhb_loop+0x70/0xc0 [ 264.834484][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.834500][ T8516] RIP: 0033:0x7f0608b9f559 [ 264.834515][ T8516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.834530][ T8516] RSP: 002b:00007f06099d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 264.834547][ T8516] RAX: ffffffffffffffda RBX: 00007f0608e25fa0 RCX: 00007f0608b9f559 [ 264.834560][ T8516] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffffff [ 264.834571][ T8516] RBP: 00007f06099d1090 R08: 0000000000000000 R09: 0000000000000000 [ 264.834582][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.834592][ T8516] R13: 00007f0608e26038 R14: 00007f0608e25fa0 R15: 00007ffc2167cad8 [ 264.834618][ T8516] [ 265.435804][ T8525] netlink: 'syz.3.701': attribute type 2 has an invalid length. [ 265.597270][ T8528] FAULT_INJECTION: forcing a failure. [ 265.597270][ T8528] name failslab, interval 1, probability 0, space 0, times 0 [ 265.597295][ T8528] CPU: 0 UID: 0 PID: 8528 Comm: syz.0.702 Not tainted syzkaller #0 PREEMPT(full) [ 265.597314][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 265.597325][ T8528] Call Trace: [ 265.597331][ T8528] [ 265.597338][ T8528] dump_stack_lvl+0xe8/0x150 [ 265.597368][ T8528] should_fail_ex+0x3eb/0x540 [ 265.597397][ T8528] should_failslab+0xa8/0x100 [ 265.597422][ T8528] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 265.597442][ T8528] ? __d_alloc+0x37/0x820 [ 265.597460][ T8528] ? __d_alloc+0x37/0x820 [ 265.597485][ T8528] __d_alloc+0x37/0x820 [ 265.597508][ T8528] d_alloc+0x4b/0x190 [ 265.597525][ T8528] ? lookup_one_qstr_excl+0xc4/0x360 [ 265.597549][ T8528] lookup_one_qstr_excl+0xd8/0x360 [ 265.597569][ T8528] ? lookup_noperm_common+0x245/0x430 [ 265.597590][ T8528] start_dirop+0x5c/0x90 [ 265.597608][ T8528] simple_start_creating+0xcc/0x110 [ 265.597629][ T8528] ? __pfx_simple_start_creating+0x10/0x10 [ 265.597651][ T8528] ? do_raw_spin_unlock+0xf5/0x200 [ 265.597677][ T8528] ? mntput+0x65/0xc0 [ 265.597706][ T8528] debugfs_start_creating+0xca/0x1b0 [ 265.597727][ T8528] __debugfs_create_file+0x6f/0x400 [ 265.597746][ T8528] debugfs_create_file_short+0x3f/0x60 [ 265.597765][ T8528] ieee80211_debugfs_recreate_netdev+0x401/0x14b0 [ 265.597796][ T8528] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 265.597833][ T8528] drv_remove_interface+0x1e6/0x580 [ 265.597860][ T8528] ieee80211_change_mac+0x905/0x12f0 [ 265.597881][ T8528] ? notifier_call_chain+0x3aa/0x3d0 [ 265.597904][ T8528] netif_set_mac_address+0x309/0x4d0 [ 265.597934][ T8528] ? __pfx_netif_set_mac_address+0x10/0x10 [ 265.597962][ T8528] ? down_write+0x166/0x200 [ 265.597979][ T8528] ? __pfx_down_write+0x10/0x10 [ 265.597997][ T8528] ? __dev_get_by_name+0xe5/0x130 [ 265.598034][ T8528] dev_set_mac_address_user+0x130/0x270 [ 265.598060][ T8528] dev_ioctl+0x7b4/0x1150 [ 265.598085][ T8528] sock_do_ioctl+0x23e/0x320 [ 265.598104][ T8528] ? __pfx_sock_do_ioctl+0x10/0x10 [ 265.598144][ T8528] sock_ioctl+0x57a/0x7e0 [ 265.598169][ T8528] ? __fget_files+0x2a/0x420 [ 265.598187][ T8528] ? __pfx_sock_ioctl+0x10/0x10 [ 265.598212][ T8528] ? __fget_files+0x2a/0x420 [ 265.598231][ T8528] ? __fget_files+0x2a/0x420 [ 265.598252][ T8528] ? bpf_lsm_file_ioctl+0x9/0x20 [ 265.598274][ T8528] ? __pfx_sock_ioctl+0x10/0x10 [ 265.598300][ T8528] __se_sys_ioctl+0xfc/0x170 [ 265.598325][ T8528] do_syscall_64+0x166/0x520 [ 265.598349][ T8528] ? trace_irq_disable+0x3b/0x140 [ 265.598370][ T8528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.598387][ T8528] ? clear_bhb_loop+0x70/0xc0 [ 265.598408][ T8528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.598424][ T8528] RIP: 0033:0x7ff03679f559 [ 265.598440][ T8528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.598454][ T8528] RSP: 002b:00007ff03760f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.598472][ T8528] RAX: ffffffffffffffda RBX: 00007ff036a25fa0 RCX: 00007ff03679f559 [ 265.598485][ T8528] RDX: 0000200000000340 RSI: 0000000000008924 RDI: 0000000000000004 [ 265.598496][ T8528] RBP: 00007ff03760f090 R08: 0000000000000000 R09: 0000000000000000 [ 265.598507][ T8528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.598517][ T8528] R13: 00007ff036a26038 R14: 00007ff036a25fa0 R15: 00007ffcf1f24d28 [ 265.598544][ T8528] [ 266.157799][ T8534] FAULT_INJECTION: forcing a failure. [ 266.157799][ T8534] name failslab, interval 1, probability 0, space 0, times 0 [ 266.157826][ T8534] CPU: 0 UID: 0 PID: 8534 Comm: syz.4.704 Not tainted syzkaller #0 PREEMPT(full) [ 266.157847][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 266.157857][ T8534] Call Trace: [ 266.157864][ T8534] [ 266.157872][ T8534] dump_stack_lvl+0xe8/0x150 [ 266.157903][ T8534] should_fail_ex+0x3eb/0x540 [ 266.157933][ T8534] should_failslab+0xa8/0x100 [ 266.157959][ T8534] __kmalloc_cache_noprof+0x9e/0x600 [ 266.157978][ T8534] ? __kmalloc_cache_noprof+0x148/0x600 [ 266.157996][ T8534] ? sctp_auth_init+0x1f3/0x400 [ 266.158022][ T8534] ? sctp_auth_init+0x1f3/0x400 [ 266.158059][ T8534] sctp_auth_init+0x1f3/0x400 [ 266.158089][ T8534] sctp_setsockopt_auth_supported+0x302/0x530 [ 266.158120][ T8534] sctp_setsockopt+0x599/0x12c0 [ 266.158137][ T8534] ? sock_common_setsockopt+0x36/0xc0 [ 266.158156][ T8534] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 266.158176][ T8534] do_sock_setsockopt+0x17c/0x1b0 [ 266.158200][ T8534] __x64_sys_setsockopt+0x13d/0x1b0 [ 266.158226][ T8534] do_syscall_64+0x166/0x520 [ 266.158250][ T8534] ? trace_irq_disable+0x3b/0x140 [ 266.158271][ T8534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.158288][ T8534] ? clear_bhb_loop+0x70/0xc0 [ 266.158308][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.158324][ T8534] RIP: 0033:0x7f13f859f559 [ 266.158340][ T8534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.158355][ T8534] RSP: 002b:00007f13f952f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 266.158373][ T8534] RAX: ffffffffffffffda RBX: 00007f13f8825fa0 RCX: 00007f13f859f559 [ 266.158385][ T8534] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000005 [ 266.158395][ T8534] RBP: 00007f13f8636b50 R08: 0000000000000008 R09: 0000000000000000 [ 266.158405][ T8534] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 266.158416][ T8534] R13: 00007f13f8826038 R14: 00007f13f8825fa0 R15: 00007ffca5be3f28 [ 266.158442][ T8534] [ 266.174506][ T8535] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x2 [ 266.207721][ T8531] netlink: 36 bytes leftover after parsing attributes in process `syz.3.703'. [ 266.700547][ T8541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.707'. [ 266.842785][ T8542] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x2 [ 267.085588][ T8553] FAULT_INJECTION: forcing a failure. [ 267.085588][ T8553] name fail_futex, interval 1, probability 0, space 0, times 0 [ 267.085615][ T8553] CPU: 0 UID: 0 PID: 8553 Comm: syz.0.712 Not tainted syzkaller #0 PREEMPT(full) [ 267.085639][ T8553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 267.085650][ T8553] Call Trace: [ 267.085657][ T8553] [ 267.085665][ T8553] dump_stack_lvl+0xe8/0x150 [ 267.085694][ T8553] should_fail_ex+0x3eb/0x540 [ 267.085724][ T8553] get_futex_key+0x1ab/0x1410 [ 267.085755][ T8553] ? ip4_datagram_release_cb+0x976/0xbe0 [ 267.085776][ T8553] ? __pfx_get_futex_key+0x10/0x10 [ 267.085806][ T8553] futex_wake+0x119/0x5f0 [ 267.085826][ T8553] ? rcu_is_watching+0x16/0xb0 [ 267.085850][ T8553] ? __pfx_futex_wake+0x10/0x10 [ 267.085874][ T8553] ? nf_setsockopt+0x221/0x290 [ 267.085903][ T8553] do_futex+0x458/0x4e0 [ 267.085933][ T8553] ? __pfx_do_futex+0x10/0x10 [ 267.085965][ T8553] __se_sys_futex+0x3a8/0x450 [ 267.086003][ T8553] ? __pfx___se_sys_futex+0x10/0x10 [ 267.086035][ T8553] ? __x64_sys_futex+0x21/0xf0 [ 267.086063][ T8553] do_syscall_64+0x166/0x520 [ 267.086088][ T8553] ? trace_irq_disable+0x3b/0x140 [ 267.086109][ T8553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.086126][ T8553] ? clear_bhb_loop+0x70/0xc0 [ 267.086147][ T8553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.086163][ T8553] RIP: 0033:0x7ff03679f559 [ 267.086179][ T8553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.086194][ T8553] RSP: 002b:00007ff03760f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 267.086212][ T8553] RAX: ffffffffffffffda RBX: 00007ff036a25fa8 RCX: 00007ff03679f559 [ 267.086224][ T8553] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff036a25fac [ 267.086235][ T8553] RBP: 00007ff036a25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 267.086247][ T8553] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 267.086257][ T8553] R13: 00007ff036a26038 R14: 00007ffcf1f24c40 R15: 00007ffcf1f24d28 [ 267.086283][ T8553] [ 267.342747][ T8553] FAULT_INJECTION: forcing a failure. [ 267.342747][ T8553] name failslab, interval 1, probability 0, space 0, times 0 [ 267.342773][ T8553] CPU: 0 UID: 0 PID: 8553 Comm: syz.0.712 Not tainted syzkaller #0 PREEMPT(full) [ 267.342792][ T8553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 267.342803][ T8553] Call Trace: [ 267.342810][ T8553] [ 267.342818][ T8553] dump_stack_lvl+0xe8/0x150 [ 267.342847][ T8553] should_fail_ex+0x3eb/0x540 [ 267.342877][ T8553] ? __pfx_proc_alloc_inode+0x10/0x10 [ 267.342904][ T8553] should_failslab+0xa8/0x100 [ 267.342928][ T8553] ? __pfx_proc_alloc_inode+0x10/0x10 [ 267.342953][ T8553] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 267.342974][ T8553] ? proc_alloc_inode+0x2a/0xc0 [ 267.343006][ T8553] ? proc_alloc_inode+0x2a/0xc0 [ 267.343036][ T8553] ? __pfx_proc_alloc_inode+0x10/0x10 [ 267.343062][ T8553] proc_alloc_inode+0x2a/0xc0 [ 267.343090][ T8553] alloc_inode+0x6a/0x1b0 [ 267.343109][ T8553] new_inode+0x1f/0x170 [ 267.343125][ T8553] ? proc_pid_make_inode+0x19/0x130 [ 267.343146][ T8553] proc_pid_make_inode+0x21/0x130 [ 267.343167][ T8553] proc_task_instantiate+0x54/0x2b0 [ 267.343198][ T8553] proc_task_lookup+0x354/0x4c0 [ 267.343225][ T8553] __lookup_slow+0x1fb/0x2f0 [ 267.343248][ T8553] lookup_slow+0x59/0x80 [ 267.343267][ T8553] link_path_walk+0x131a/0x19a0 [ 267.343300][ T8553] path_openat+0x1b7/0x20f0 [ 267.343337][ T8553] do_file_open+0x23e/0x4a0 [ 267.343364][ T8553] ? __pfx_do_file_open+0x10/0x10 [ 267.343393][ T8553] ? __pfx_kfree_link+0x10/0x10 [ 267.343420][ T8553] ? _raw_spin_unlock+0x28/0x50 [ 267.343442][ T8553] ? alloc_fd+0x6af/0x760 [ 267.343468][ T8553] do_sys_openat2+0x115/0x200 [ 267.343485][ T8553] ? __se_sys_futex+0x3a8/0x450 [ 267.343512][ T8553] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.343532][ T8553] ? rcu_is_watching+0x16/0xb0 [ 267.343560][ T8553] __x64_sys_openat+0x138/0x170 [ 267.343581][ T8553] do_syscall_64+0x166/0x520 [ 267.343606][ T8553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.343623][ T8553] ? clear_bhb_loop+0x70/0xc0 [ 267.343644][ T8553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.343661][ T8553] RIP: 0033:0x7ff03675fd8e [ 267.343677][ T8553] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 267.343692][ T8553] RSP: 002b:00007ff03760eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 267.343710][ T8553] RAX: ffffffffffffffda RBX: 00007ff03760f6c0 RCX: 00007ff03675fd8e [ 267.343723][ T8553] RDX: 0000000000000002 RSI: 00007ff03760ef90 RDI: ffffffffffffff9c [ 267.343734][ T8553] RBP: 00007ff036836b50 R08: 0000000000000000 R09: 0000000000000000 [ 267.343745][ T8553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.343754][ T8553] R13: 00007ff036a26038 R14: 00007ff036a25fa0 R15: 00007ffcf1f24d28 [ 267.343780][ T8553] [ 267.906621][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.716'. [ 268.215348][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 268.772631][ T8588] FAULT_INJECTION: forcing a failure. [ 268.772631][ T8588] name failslab, interval 1, probability 0, space 0, times 0 [ 268.772657][ T8588] CPU: 0 UID: 0 PID: 8588 Comm: syz.5.725 Not tainted syzkaller #0 PREEMPT(full) [ 268.772676][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 268.772687][ T8588] Call Trace: [ 268.772694][ T8588] [ 268.772701][ T8588] dump_stack_lvl+0xe8/0x150 [ 268.772731][ T8588] should_fail_ex+0x3eb/0x540 [ 268.772762][ T8588] should_failslab+0xa8/0x100 [ 268.772786][ T8588] ? sctp_chunkify+0x5a/0x260 [ 268.772802][ T8588] kmem_cache_alloc_noprof+0x9c/0x600 [ 268.772820][ T8588] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 268.772836][ T8588] ? __alloc_skb+0x27a/0x7a0 [ 268.772857][ T8588] ? sctp_chunkify+0x5a/0x260 [ 268.772877][ T8588] sctp_chunkify+0x5a/0x260 [ 268.772895][ T8588] _sctp_make_chunk+0x122/0x290 [ 268.772914][ T8588] sctp_make_heartbeat+0xc4/0x500 [ 268.772939][ T8588] ? lock_acquire+0x115/0x350 [ 268.772962][ T8588] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 268.772991][ T8588] ? is_bpf_text_address+0x26/0x2b0 [ 268.773020][ T8588] ? is_bpf_text_address+0x292/0x2b0 [ 268.773045][ T8588] ? is_bpf_text_address+0x26/0x2b0 [ 268.773074][ T8588] sctp_sf_do_prm_requestheartbeat+0x2e/0x280 [ 268.773100][ T8588] sctp_do_sm+0x239/0x5dd0 [ 268.773122][ T8588] ? arch_stack_walk+0xfb/0x150 [ 268.773140][ T8588] ? __pfx_sctp_pname+0x10/0x10 [ 268.773171][ T8588] ? stack_trace_save+0xa9/0x100 [ 268.773189][ T8588] ? __pfx_sctp_do_sm+0x10/0x10 [ 268.773258][ T8588] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 268.773283][ T8588] sctp_apply_peer_addr_params+0xd4/0x1880 [ 268.773317][ T8588] sctp_setsockopt_peer_addr_params+0x6be/0x980 [ 268.773353][ T8588] sctp_setsockopt+0x759/0x12c0 [ 268.773370][ T8588] ? sock_common_setsockopt+0x36/0xc0 [ 268.773389][ T8588] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 268.773409][ T8588] do_sock_setsockopt+0x17c/0x1b0 [ 268.773436][ T8588] __x64_sys_setsockopt+0x13d/0x1b0 [ 268.773462][ T8588] do_syscall_64+0x166/0x520 [ 268.773487][ T8588] ? trace_irq_disable+0x3b/0x140 [ 268.773508][ T8588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.773525][ T8588] ? clear_bhb_loop+0x70/0xc0 [ 268.773545][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.773561][ T8588] RIP: 0033:0x7f122fd9f559 [ 268.773577][ T8588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.773592][ T8588] RSP: 002b:00007f1230bba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 268.773610][ T8588] RAX: ffffffffffffffda RBX: 00007f1230025fa0 RCX: 00007f122fd9f559 [ 268.773622][ T8588] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 268.773633][ T8588] RBP: 00007f122fe36b50 R08: 000000000000009c R09: 0000000000000000 [ 268.773644][ T8588] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 268.773654][ T8588] R13: 00007f1230026038 R14: 00007f1230025fa0 R15: 00007ffdbf387a98 [ 268.773680][ T8588] [ 269.120734][ T8588] lo speed is unknown, defaulting to 1000 [ 269.121676][ T8588] lo speed is unknown, defaulting to 1000 [ 269.127848][ T8588] lo speed is unknown, defaulting to 1000 [ 275.799417][ C0] sched: DL replenish lagged too much [ 276.371767][ C0] sl0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20480 ms [ 276.371861][ C0] sl0: transmit timed out, driver error? [ 279.200406][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 300.345440][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 317.484471][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.490199][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 338.451114][ C0] sl0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20690 ms [ 338.451144][ C0] sl0: transmit timed out, driver error? [ 378.932574][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.938450][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 399.251544][ C0] sl0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20080 ms [ 399.251577][ C0] sl0: transmit timed out, driver error? [ 438.297093][ T36] INFO: task syz.4.726:8594 blocked for more than 150 seconds. [ 438.297119][ T36] Not tainted syzkaller #0 [ 438.297128][ T36] Blocked by coredump. [ 438.297133][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.297140][ T36] task:syz.4.726 state:D stack:28808 pid:8594 tgid:8589 ppid:5924 task_flags:0x40044c flags:0x00080002 [ 438.297211][ T36] Call Trace: [ 438.297217][ T36] [ 438.297230][ T36] __schedule+0x17dd/0x5830 [ 438.297282][ T36] ? __pfx___schedule+0x10/0x10 [ 438.297312][ T36] ? schedule+0x90/0x2b0 [ 438.297337][ T36] schedule+0x164/0x2b0 [ 438.297362][ T36] schedule_preempt_disabled+0x13/0x30 [ 438.297385][ T36] rwsem_down_read_slowpath+0x6d8/0x980 [ 438.297404][ T36] ? rwsem_down_read_slowpath+0x58a/0x980 [ 438.297426][ T36] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 438.297467][ T36] down_read+0x97/0x320 [ 438.297482][ T36] ? sched_cache_exit_mm+0xef/0x190 [ 438.297510][ T36] exit_mm+0x77/0x240 [ 438.297538][ T36] do_exit+0x6a8/0x2360 [ 438.297569][ T36] ? __pfx_do_exit+0x10/0x10 [ 438.297598][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 438.297631][ T36] do_group_exit+0x22d/0x2f0 [ 438.297646][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.297671][ T36] get_signal+0x136a/0x1430 [ 438.297708][ T36] arch_do_signal_or_restart+0xbb/0x860 [ 438.297739][ T36] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 438.297779][ T36] exit_to_user_mode_loop+0x10e/0x770 [ 438.297804][ T36] ? rcu_is_watching+0x16/0xb0 [ 438.297831][ T36] do_syscall_64+0x328/0x520 [ 438.297856][ T36] ? trace_irq_disable+0x3b/0x140 [ 438.297878][ T36] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.297896][ T36] ? clear_bhb_loop+0x70/0xc0 [ 438.297916][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.297938][ T36] RIP: 0033:0x7f13f859f559 [ 438.297953][ T36] RSP: 002b:00007f13f950e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 438.297970][ T36] RAX: fffffffffffffe00 RBX: 00007f13f8826098 RCX: 00007f13f859f559 [ 438.297982][ T36] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f13f8826098 [ 438.297993][ T36] RBP: 00007f13f8826090 R08: 0000000000000000 R09: 0000000000000000 [ 438.298005][ T36] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.298014][ T36] R13: 00007f13f8826128 R14: 00007ffca5be3e40 R15: 00007ffca5be3f28 [ 438.298046][ T36] [ 438.298060][ T36] [ 438.298060][ T36] Showing all locks held in the system: [ 438.298070][ T36] locks held by kworker/u8:0/13: 6, last CPU#0: [ 438.298089][ T36] #0: ffff88802169e948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.298141][ T36] #1: ffffc90000127c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.298186][ T36] #2: ffff888035fd2100 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 438.298230][ T36] #3: ffff888035fc8cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 438.298269][ T36] #4: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 438.298309][ T36] #5: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0 [ 438.298353][ T36] locks held by kworker/u8:1/14: 4, last CPU#0: [ 438.298364][ T36] #0: ffff88807f7c2948 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.298412][ T36] #1: ffffc90000137c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.298463][ T36] #2: ffff88807e7c1480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 438.298503][ T36] #3: ffff88807cc6c888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 438.298545][ T36] locks held by kworker/u8:2/34: 3, last CPU#0: [ 438.298557][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.298600][ T36] #1: ffffc90000aa7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.298645][ T36] #2: ffff88807ce9f258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 438.298689][ T36] locks held by khungtaskd/36: 1, last CPU#0: [ 438.298700][ T36] #0: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 438.298742][ T36] locks held by kworker/u8:3/53: 3, last CPU#0: [ 438.298753][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.298795][ T36] #1: ffffc90000bd7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.298840][ T36] #2: ffff8880792e5258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 438.298884][ T36] locks held by kworker/u8:4/64: 2, last CPU#0: [ 438.298895][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.298938][ T36] #1: ffffc9000205fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.298982][ T36] locks held by kworker/u8:5/65: 3, last CPU#0: [ 438.298993][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.299036][ T36] #1: ffffc9000207fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.299079][ T36] #2: ffff88802c5bd258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 438.299122][ T36] locks held by kswapd0/92: 2, last CPU#0: [ 438.299133][ T36] #0: ffffffff90294f60 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xa53/0x3a20 [ 438.299170][ T36] #1: ffff888035352100 (&type->s_umount_key#53){++++}-{4:4}, at: super_cache_scan+0x94/0x4a0 [ 438.299218][ T36] locks held by kworker/u8:6/153: 3, last CPU#0: [ 438.299230][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.299272][ T36] #1: ffffc90002eafc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.305642][ T36] #2: ffff88802c0fa258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 438.305699][ T36] locks held by kworker/u8:7/982: 1, last CPU#0: [ 438.305711][ T36] #0: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 438.305752][ T36] locks held by kworker/u8:8/1009: 3, last CPU#0: [ 438.305764][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.305808][ T36] #1: ffffc90005027c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.305853][ T36] #2: ffff88807712f258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 438.305894][ T36] locks held by kworker/u8:9/1034: 3, last CPU#0: [ 438.305906][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.305949][ T36] #1: ffffc90005107c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.305994][ T36] #2: ffff88807be34258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 438.306041][ T36] locks held by kworker/u8:10/1122: 2, last CPU#0: [ 438.306053][ T36] #0: ffff88813fe63948 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.306096][ T36] #1: ffffc90005427c40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.306155][ T36] locks held by kworker/R-bat_e/3231: 2, last CPU#0: [ 438.306166][ T36] #0: ffff888033df0948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.306210][ T36] #1: ffffc9000ecbfc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.306254][ T36] locks held by kworker/u9:1/4955: 5, on CPU#0: [ 438.306266][ T36] #0: ffff888022bef148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.306310][ T36] #1: ffffc90006cf7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.306354][ T36] #2: ffff88807ef24f28 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 438.306391][ T36] #3: ffff88807ef240b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 438.306433][ T36] #4: ffffffff90160aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 438.306487][ T36] locks held by klogd/4994: 1, last CPU#0: [ 438.306498][ T36] #0: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 438.306536][ T36] locks held by udevd/5005: 3, last CPU#0: [ 438.306548][ T36] #0: ffff888035e76478 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 438.306594][ T36] #1: ffff888035f588a0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 438.306648][ T36] #2: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 438.306688][ T36] locks held by dhcpcd/5299: 2, last CPU#0: [ 438.306699][ T36] #0: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 438.306738][ T36] #1: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 438.306780][ T36] locks held by crond/5378: 2, last CPU#0: [ 438.306792][ T36] #0: ffffffff90907b98 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 438.306834][ T36] #1: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 438.306874][ T36] locks held by getty/5395: 2, on CPU#1: [ 438.306886][ T36] #0: ffff8880378dc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 438.306933][ T36] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 438.306977][ T36] locks held by syz-executor/5626: 2, last CPU#0: [ 438.306988][ T36] #0: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 438.307028][ T36] #1: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 438.307069][ T36] locks held by syz-executor/5639: 2, last CPU#0: [ 438.307080][ T36] #0: ffff888034176540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 438.307126][ T36] #1: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 438.307171][ T36] locks held by kworker/0:3/5651: 2, last CPU#0: [ 438.307183][ T36] #0: ffff88813fe21d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.307227][ T36] #1: ffffc9000438fc40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.307278][ T36] locks held by kworker/u8:11/6806: 2, last CPU#0: [ 438.307290][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.307333][ T36] #1: ffffc900069c7c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.307378][ T36] locks held by kworker/u8:12/6808: 4, last CPU#0: [ 438.307390][ T36] #0: ffff888023ac3148 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.307437][ T36] #1: ffffc900069e7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 438.307487][ T36] #2: ffff888022331480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 438.307527][ T36] #3: ffff88807cc68d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 438.307566][ T36] locks held by syz-executor/6954: 2, last CPU#0: [ 438.307578][ T36] #0: ffffffff90907b98 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 438.307618][ T36] #1: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 438.307663][ T36] locks held by syz.5.725/8588: 3, last CPU#0: [ 438.307674][ T36] #0: ffffffff9c2e8588 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40 [ 438.307722][ T36] #1: ffffffff9140b6e8 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42b/0x650 [ 438.307768][ T36] #2: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 438.307813][ T36] locks held by syz.4.726/8589: 1, on CPU#0: [ 438.307825][ T36] #0: ffff88807d124cc0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70 [ 438.307872][ T36] locks held by syz.4.726/8590: 4, last CPU#0: [ 438.307883][ T36] #0: ffffffff9023a5b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x470 [ 438.307924][ T36] #1: ffff88807d124cc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18a/0x1e10 [ 438.307960][ T36] #2: ffff88807c990340 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x277/0x1e10 [ 438.308005][ T36] #3: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 438.308045][ T36] locks held by syz.4.726/8594: 1, on CPU#0: [ 438.308057][ T36] #0: ffff88807d124cc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x77/0x240 [ 438.308103][ T36] locks held by syz.0.727/8595: 2, last CPU#0: [ 438.308115][ T36] #0: ffff88807d125900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 438.308161][ T36] #1: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 438.308206][ T36] locks held by syz-executor/8596: 1, last CPU#0: [ 438.308217][ T36] #0: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 438.308259][ T36] [ 438.308264][ T36] ============================================= [ 438.308264][ T36] [ 438.308282][ T36] NMI backtrace for cpu 0 [ 438.308296][ T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 438.308314][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 438.308324][ T36] Call Trace: [ 438.308331][ T36] [ 438.308338][ T36] dump_stack_lvl+0xe8/0x150 [ 438.308363][ T36] nmi_cpu_backtrace+0x274/0x2d0 [ 438.308385][ T36] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 438.308413][ T36] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 438.308437][ T36] sys_info+0x135/0x170 [ 438.308462][ T36] watchdog+0x1073/0x10f0 [ 438.308488][ T36] ? watchdog+0x209/0x10f0 [ 438.308513][ T36] kthread+0x38b/0x480 [ 438.308530][ T36] ? __pfx_watchdog+0x10/0x10 [ 438.308548][ T36] ? __pfx_kthread+0x10/0x10 [ 438.308565][ T36] ret_from_fork+0x514/0xb70 [ 438.308584][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 438.308600][ T36] ? __switch_to+0xc78/0x1410 [ 438.308625][ T36] ? __pfx_kthread+0x10/0x10 [ 438.308642][ T36] ret_from_fork_asm+0x1a/0x30 [ 438.308679][ T36] [ 438.308693][ T36] Kernel panic - not syncing: hung_task: blocked tasks [ 439.729348][ T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 439.738467][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 439.748549][ T36] Call Trace: [ 439.751844][ T36] [ 439.754841][ T36] vpanic+0x26f/0x710 [ 439.758858][ T36] panic+0xc5/0xd0 [ 439.762689][ T36] ? __pfx_panic+0x10/0x10 [ 439.767132][ T36] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 439.772267][ T36] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 439.778440][ T36] watchdog+0x10e7/0x10f0 [ 439.782820][ T36] ? watchdog+0x209/0x10f0 [ 439.787266][ T36] kthread+0x38b/0x480 [ 439.791339][ T36] ? __pfx_watchdog+0x10/0x10 [ 439.796025][ T36] ? __pfx_kthread+0x10/0x10 [ 439.800629][ T36] ret_from_fork+0x514/0xb70 [ 439.805231][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 439.810363][ T36] ? __switch_to+0xc78/0x1410 [ 439.815061][ T36] ? __pfx_kthread+0x10/0x10 [ 439.819663][ T36] ret_from_fork_asm+0x1a/0x30 [ 439.824484][ T36] [ 439.827585][ T36] Kernel Offset: disabled [ 439.831936][ T36] Rebooting in 86400 seconds..