last executing test programs: 2m41.679753577s ago: executing program 2 (id=1031): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001400fd0f74867080fbdbdf2502186d00", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x538, 0x208, 0x3f0, 0x208, 0x2d8, 0x208, 0x668, 0x668, 0x668, 0x668, 0x668, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffffff, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 'vlan0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x5e, 0x65, 0x8, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x81, 0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, @mcast2, [0xffffffff, 0xffffffff, 0xff000000], [0x0, 0xffffffff, 0xff, 0xff000000], 'veth1_to_bond\x00', 'wlan1\x00', {0xff}, {0xff}, 0x0, 0x0, 0x3, 0x40}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x22, 0x0, 0xfff9}}}, {{@ipv6={@empty, @local, [0x0, 0xff000000, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xffffff00, 0xff000000], 'veth1_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x88, 0x7, 0x2, 0x2}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0xe000, @ipv4=@multicast1, 0x4e23}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [], 'veth0_to_batadv\x00', 'bond0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x7, 0x52}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@multicast1, 0x19, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x103) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10) shutdown(r6, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtclass={0x58, 0x28, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {0xd, 0xfff2}, {0x5, 0x6}}, [@tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x5}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x80, 0x6b}}, @tclass_kind_options=@c_clsact={0xb}]}, 0x58}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f0000000140)={0x1, 'netpci0\x00', {}, 0x8}) 2m40.173235912s ago: executing program 2 (id=1034): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto(r1, &(0x7f0000000100)="0700bad5da0f7abb94ae529561beed4fbbaba97564c5f39e644541bd3a45cb9835bb2bff7fb568c90f15682d1efb94ac44443ff43aeecb3f5641f57198628519f8fb26ff23ad9413c2fef9d765ff2079940ce299bfb474772f2e6e153a474d5a6391b0", 0xfffffffffffffe68, 0x404c8d5, 0x0, 0xfffffeeb) sendmmsg$inet(r1, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000800)='&', 0x1}], 0x1}}], 0x1, 0x4000000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) (async, rerun: 64) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) setpgid(r5, r5) (async) setpgid(0x0, r5) (async) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000180)='./file0\x00', 0xe00008da) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') r7 = mq_open(&(0x7f0000000000)='*&&!}).+:)(-:#@},(^\x00', 0x2, 0x42, &(0x7f0000000180)={0x0, 0x3, 0xffffffff, 0x8}) mq_notify(r7, &(0x7f0000000440)={0x0, 0x3c, 0x1, @thr={&(0x7f0000000340)="2efca969c0dbe677ba149ce8cf5e8e3d6c39943f66f14af8392b1f0b4dcf477918b6c31ea152b90f3ab495c2b0485c10decbd8ab3d7bae53f9c6641c3de59b00ea1cde2fa4c12bf68ac380b36699fc6650c4844ea60a3e94c769fc4c64d72eee68da31b9ff7f9c63a3b362619ef2865c226b79fee87d1888b342dc9c2c10804314f70c784143a72b823f17dc7a83cc45a705a6422bf0d050", &(0x7f0000000400)="c61890fff2dd998653ca10d2ce34f85d0af1fcffc1e96d8e181eedfbf307155cba1dcca305"}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) syslog(0xa, &(0x7f0000000200)=""/115, 0x73) (async) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2m38.719665784s ago: executing program 2 (id=1039): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x121000, 0x8) linkat(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000400000008000000010900001d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000300000000"], 0x50) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x2c, r2, 0x11, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x40000) (async) iopl(0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c01020301090212"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x7a) getdents(r5, &(0x7f00000000c0)=""/32, 0x20) (async) getdents(r5, 0xfffffffffffffffd, 0x58) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x24, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x17, 0x0, 0x0, @u64=0x12000000000000}, @typed={0x4, 0x1d}]}, 0x24}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r6, 0xc038586b, &(0x7f00000003c0)={r4, &(0x7f00000001c0)='m]#^-%!\x00', 0x105000, &(0x7f0000000300)={@align=0x2, {0x19, 0x8, 0x1, 0x9}}, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x5}) (async) ioctl$TIOCSIG(r6, 0x40045436, 0x2) 2m34.856013418s ago: executing program 2 (id=1046): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x701, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x10, 0x0, 0x9, 0x1, {{0xd, 0x4, 0x3, 0x1, 0x34, 0x64, 0x0, 0x6, 0x2b, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x14, 0x54, 0x3, 0x5, [{@rand_addr=0x64010102, 0xdd1b}, {@rand_addr=0x64010101, 0xc1d}]}, @end, @generic={0x0, 0xb, "3486a55435ae1e338e"}]}}}}}) sendto$packet(r0, &(0x7f00000004c0)="e68363ea9be1fbcdcd5f63679e01c4934e22300c57a8dd59c71ad27ecda882ffbbff1e49d9c9ff1b6c0ec35923c10c352c47e2c60241f5e6343b922699aa633bd2d0d1647926731e51622d6fb0c8658dffc6eda34cce45156441cd7844ecf1e811c01479ec7d32d1e0f1c20342263175b0109d4cfc3ac5e1f6d8d70e394ba83e06883f072a1696a0d1c52d18ffd25ed288b143cce95bc4eec1868966354d67d42b029897af676879be77838784a863a0d0b2eaee8260f5f65c3e2eceb82d4044816c2b5716289629", 0xc8, 0x42811, &(0x7f0000000680)={0x11, 0x17, r4, 0x1, 0xe3, 0x6, @multicast}, 0x14) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000240), 0x10) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001ffffe50000b74283e4a4b68fcd28c956034e00000a000000910a00000000000095000000006c0000"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7f8}, 0x94) 2m32.925741627s ago: executing program 2 (id=1050): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x1d, &(0x7f0000000000)=0x1, 0x4) 2m32.749450114s ago: executing program 2 (id=1053): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705"], 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) (async) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f00000001c0), 0x2}, {0x3, &(0x7f0000000040)=0x1, 0x2}], 0x2, 0x0, 0x0, 0x0) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 2m17.186090928s ago: executing program 32 (id=1053): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705"], 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) (async) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f00000001c0), 0x2}, {0x3, &(0x7f0000000040)=0x1, 0x2}], 0x2, 0x0, 0x0, 0x0) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 1m27.262315926s ago: executing program 5 (id=1213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_gettime(r2, &(0x7f00000003c0)) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000d80)={0x1, [{0x3, 0x0, 0xa40, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0xe0, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0xca, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x140, 0x0}, {0x1, 0x0, 0xfffffffd, 0x0}, {0x1, 0x0, 0xffffffbc, 0x0}, {0x3, 0x0, 0xffffffff, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x8, 0x0, &(0x7f0000000040)="cb"}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) write$UHID_INPUT(r7, &(0x7f0000000e40)={0x8, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x15, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x26) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000012c0)=r9, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c000280050001000000000006000340000000000800074000000000040006"], 0xa0}, 0x1, 0x0, 0x0, 0x44044081}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000"], 0xac}}, 0x0) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x800}, &(0x7f0000000080)=0x8) socket$alg(0x26, 0x5, 0x0) 1m25.237645454s ago: executing program 5 (id=1219): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) mremap(&(0x7f000063d000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000063d000/0x2000)=nil) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x19, 0x0, &(0x7f0000003900)) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getparam(0xffffffffffffffff, 0x0) write$cgroup_pid(r2, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) 1m20.033692568s ago: executing program 5 (id=1224): syz_usb_connect$uac1(0x3, 0x7e, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x4249, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x3, 0x1, 0x4, 0xd0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x16}, [@selector_unit={0x5, 0x24, 0x5, 0x5, 0x9}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x5, "aa33"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x9, 0x7, {0x7, 0x25, 0x1, 0x8, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x4, 0x7, {0x7, 0x25, 0x1, 0x0, 0x6, 0x1}}}}}}}}]}}, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0xa) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) 1m16.808399549s ago: executing program 5 (id=1233): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x80000001}}, './file0\x00'}) mkdirat(r0, &(0x7f00000000c0)='./file0/../file0\x00', 0x130) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount(&(0x7f0000000100)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)='adfs\x00', 0x202008, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x809, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x91, &(0x7f0000000240)=""/145, 0x0, 0x38}, 0x94) syz_usb_connect(0x0, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202020040dd04058000000102030109024900010100c0320904000003020a0000152412000174f03dbd1ec14470a3677134c9f55437072413010001"], 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000140)={0x0, 0x4, 0x6, "9f048358fbbf"}, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x80000001}}, './file0\x00'}) (async) mkdirat(r0, &(0x7f00000000c0)='./file0/../file0\x00', 0x130) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) mount(&(0x7f0000000100)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)='adfs\x00', 0x202008, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x809, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x91, &(0x7f0000000240)=""/145, 0x0, 0x38}, 0x94) (async) syz_usb_connect(0x0, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202020040dd04058000000102030109024900010100c0320904000003020a0000152412000174f03dbd1ec14470a3677134c9f55437072413010001"], 0x0) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000140)={0x0, 0x4, 0x6, "9f048358fbbf"}, 0x0, 0x0}) (async) 1m13.927071338s ago: executing program 5 (id=1238): mount(0x0, 0x0, 0x0, 0x2002404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1m6.113661215s ago: executing program 5 (id=1253): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x701, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x10, 0x0, 0x9, 0x1, {{0xd, 0x4, 0x3, 0x1, 0x34, 0x64, 0x0, 0x6, 0x2b, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x14, 0x54, 0x3, 0x5, [{@rand_addr=0x64010102, 0xdd1b}, {@rand_addr=0x64010101, 0xc1d}]}, @end, @generic={0x0, 0xb, "3486a55435ae1e338e"}]}}}}}) sendto$packet(r0, &(0x7f00000004c0)="e68363ea9be1fbcdcd5f63679e01c4934e22300c57a8dd59c71ad27ecda882ffbbff1e49d9c9ff1b6c0ec35923c10c352c47e2c60241f5e6343b922699aa633bd2d0d1647926731e51622d6fb0c8658dffc6eda34cce45156441cd7844ecf1e811c01479ec7d32d1e0f1c20342263175b0109d4cfc3ac5e1f6d8d70e394ba83e06883f072a1696a0d1c52d18ffd25ed288b143cce95bc4eec1868966354d67d42b029897af676879be77838784a863a0d0b2eaee8260f5f65c3e2eceb82d4044816c2b5716289629", 0xc8, 0x42811, &(0x7f0000000680)={0x11, 0x17, r4, 0x1, 0xe3, 0x6, @multicast}, 0x14) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000240), 0x10) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001ffffe50000b74283e4a4b68fcd28c956034e00000a000000910a00000000000095000000006c0000"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7f8}, 0x94) 1m4.591384671s ago: executing program 33 (id=1253): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x701, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x10, 0x0, 0x9, 0x1, {{0xd, 0x4, 0x3, 0x1, 0x34, 0x64, 0x0, 0x6, 0x2b, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x14, 0x54, 0x3, 0x5, [{@rand_addr=0x64010102, 0xdd1b}, {@rand_addr=0x64010101, 0xc1d}]}, @end, @generic={0x0, 0xb, "3486a55435ae1e338e"}]}}}}}) sendto$packet(r0, &(0x7f00000004c0)="e68363ea9be1fbcdcd5f63679e01c4934e22300c57a8dd59c71ad27ecda882ffbbff1e49d9c9ff1b6c0ec35923c10c352c47e2c60241f5e6343b922699aa633bd2d0d1647926731e51622d6fb0c8658dffc6eda34cce45156441cd7844ecf1e811c01479ec7d32d1e0f1c20342263175b0109d4cfc3ac5e1f6d8d70e394ba83e06883f072a1696a0d1c52d18ffd25ed288b143cce95bc4eec1868966354d67d42b029897af676879be77838784a863a0d0b2eaee8260f5f65c3e2eceb82d4044816c2b5716289629", 0xc8, 0x42811, &(0x7f0000000680)={0x11, 0x17, r4, 0x1, 0xe3, 0x6, @multicast}, 0x14) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000240), 0x10) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001ffffe50000b74283e4a4b68fcd28c956034e00000a000000910a00000000000095000000006c0000"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7f8}, 0x94) 11.39265072s ago: executing program 1 (id=1349): r0 = socket$kcm(0x10, 0x4, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x40040) (async) sendmsg$kcm(r0, &(0x7f0000001680)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @empty}, 0x0, 0x2, 0x0, 0x1}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000100)="f7dbdfc8dbe5678b38c417dd6429c2542ce50f9d84711f9b7e5a9196fb53a80f1c20b40fbc2652375b1527ea3467f924eff3c8ce2e481834e4f9a3a00f23ead87f8b6af87e53d2c3bf3998f50a68211a331ea3e8a93affc9d60f487f153386b3a2d1ab16b40aef2c5bb46af05b6c7843cc6fc9c8612fcb624e4671183017f7eaf2c3cbb4ade8ee37369ec536e816ec01a0c2ba2a083a1fed5969af28ceec9e5ac404a53cce365e09aa37be1c2922402c3f7f51981a5972edb794a7132beb4541842d57342e61dac2ccceaf9b7841779789eb627dc2040a37509531", 0xdb}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f00000016c0)="fca268a186736e5396464bf632159cb4b1ad3418e41fbdb2da4dd87813bc6d2dc7695516e3666aeb5d14dffcf15b107a834ed5cb9dabd806", 0x38}, {&(0x7f0000001280)="19b32313daaa608cba78f7412e07b887f66ba7e908cc43d7f63c1557990e2da245de173493945b57e1de7f6eb763d2cc776bcbc66695241d725a06eb8bb1739c845e0ba88e767914ca7a90527d266ba6b92bfd5361c6917737f60f66cfb62c659ff7210c47f1a3dc75d19589cfdba1c9b1c516f7a647c756f25aca9eb44ca702705e", 0x82}, {&(0x7f0000001340)="57a2efcc75c2ef9c99c773181902c89c355dbba8454ca396e777351adbc164317805efa91f647bf22dbda996754b8ba35329edc58448c010521699ff673f90c590bd05c7b16d6c1462ee5faf4a3c0a37516185a6867e0bf8c9202ee11b59efb7a2781d2143090c7315868b72abbf889d00e289634a88f3bbeddd6e06cd61e37538d135d64eb1b8", 0x87}], 0x5, &(0x7f0000001480)=[{0x40, 0x10c, 0x0, "a825e09a7ad6dae2a78c16aeaa23707460fc0127b97f86c99f36cc98b539f82ff3bbfacd1ed1ba7740aeb3"}, {0x88, 0x108, 0xfff, "9acc1743379bd7f7de2f23a40b16ffda4f77bbcafd598861ca2ff7a204f35bc1e1461acdd3d83cf99391f2cdeda062071519b7fb438cac8a8fdb0770d4f46d78158ea86efe664d2004f8b022edb61189d2f1be7844a9a7ad74d996afacc44a3413a1346904814fcb27911a5d9b8cfff5d8a4"}, {0xd0, 0x115, 0xfff, "5bfe01af643bf20da398fa3b78a05bce81e380833ab5981b3ca371e785b1321146a9e3f5146198f828086a01c06fd591a9fad8157ebe0b0deceea9f9c3f8c91dd0ff5a6da591479a9a46403d15d53855d719fb2a799f7ae1529f249e177877e0c6cd0df84340c75cdf3b55941eafdb7491f89a850c6493010a50dc955ea757e2fdcdabd350293650b0b6852a14eee804963b26bedff2ee9828926fd67052acc49ef646f761c49641317f9edf8691b03196a19ff97aad612e2f1ed813"}, {0x30, 0x118, 0x8, "9067a91fe596c793214890f1d7213637e5777a189a944b2e48595dcab4"}], 0x1c8}, 0x20000080) 10.951788692s ago: executing program 1 (id=1354): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='!=', 0x2) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x21) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000006c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000002100), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) mq_notify(0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r5, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000340)=""/175, 0xaf}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3000000000001c0000060a010400000000000000000100000008000b4000000000d81b04"], 0x1c74}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRESHEX=r0, @ANYBLOB="000000002000000008001b00000000001c001a80180002801400018008001700010000000800", @ANYRESOCT=0x0], 0x44}}, 0x0) 9.54992949s ago: executing program 1 (id=1357): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x54, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0xb7b6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x3, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x4, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x1a0fadaf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x3, 0x0, 0x0, 0xfffffffc, 0x1, 0x2, 0xfffff986, 0xfffffffe], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000, 0x5, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x2, 0x20, 0x0, 0x5, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x2, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x1000000, 0x0, 0xffffffff, 0x0, 0x2, 0x10, 0x5, 0xfffffffe, 0x1, 0x1, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x2, 0x0, 0x20, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000028c0)={0x2020}, 0x2020) 9.209155814s ago: executing program 1 (id=1358): syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x57e, 0x201e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x8, 0xa1, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0xf31}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x80, 0x5, 0xf}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x80, 0x8, 0x5, 0x8, 0x3}, 0x29, &(0x7f0000000300)={0x5, 0xf, 0x29, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x44, 0xc5, 0x1000}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x8cfc, 0xf00, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x16, 0x6, 0x4}]}, 0x2, [{0x0, 0x0}, {0xf5, &(0x7f0000000700)=@string={0xf5, 0x3, "53df90cc32df8447c7809310e892940181548112fda1a30193be9640a07a232980d723687d92fd99d2751756b9da9ec2d08375d6a1e2abdfe9052f6b869b49129c9c60f81020a3ce149769bc62d39f28995d20525ffcf16ef1c5f2455a12b00fde1deba86cf30c44684debc302b157f067100a071650258fca3dc6552e2fb1a902b43ab66d63a21c5fc4c9b878202eeb7576cd32b12ff33d23a845841e9e6fc8a2a81e63c24fad5e7026d5f19f8a1b5eac22e000055363bf7e8d0e93012549823da5eff139a89b4ee5a54026cb6d7b1bd70d6f116658ce046c2bbb6c887d570b4dacaab0c5230dd805e7bdaaa20714837284f4"}}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x19, &(0x7f0000000600)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @generic={0x7, 0x7, 0x0, 0xf03, 0x6}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @btf_id={0x18, 0x12a6c5cb1bb1029d, 0x3, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x92e}, @jmp={0x5, 0x1, 0x6, 0x4, 0x8, 0x18, 0x1}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="1100000000000000", @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYBLOB="adcbf398c9ddd8119df749f079185d16a6b504ff6fdedebc186412fc9344a20dc9fbb868146e113becb9d8b65f71ca704a5e52a2e86fba05103373d45b974019b97eacc835bd87ec9b305ccd37a0ff1d182de986dc69a63f89f953c7f033bb0c6d411545f7651915f8f53db265601b2fbd7efa869ca57a220352246d71534ea9c35f36692b2c7e1be502240649e4d844bfbc5feb6805", @ANYRES64=0x0], 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="bc83d7b65457eb0b50b4e3ad9d530b61b92365ee14182b53d8ef91e0eec46873a9eda92e546abc0b315b3ff13b", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket(0xa, 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x2, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000400)=[0xffffffff], 0x1) bind(0xffffffffffffffff, &(0x7f0000000500)=@in={0x2, 0x1a85, @loopback=0x0}, 0x10) listen(0xffffffffffffffff, 0xa) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x11, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./dir0\x00', 0x1ff) mount(&(0x7f0000003100)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000003000)='./dir0\x00', &(0x7f0000003200)='ceph\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r9, &(0x7f00000000c0), 0x0) 9.153618233s ago: executing program 0 (id=1359): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000000)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x2, &(0x7f0000000480)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="4c000000090601080000000000000000070000000900020073797a31000000000500010007000000040007"], 0x4c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000ffff00"}) r6 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r6, 0x4, 0x102800) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket(0x2c, 0x800, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a320000000014000000110001"], 0xc0}}, 0x0) close(r8) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) 6.408914863s ago: executing program 0 (id=1364): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) writev(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) r2 = getpgrp(0xffffffffffffffff) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00010028bd7000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB='7'], 0x1c}, 0x1, 0x0, 0x0, 0x2408c495}, 0x20040800) bind$rds(r5, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\xe6\xdf\x92\b\xdc\xcc\xf0CM\x92\xbe\xe4\xb3,t\xf1\xf0\xcb\a\x97\xb2\xdd\xcd\x9dP\x9e\xd7\xe3/\xd2$#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xd4\xaa\x00\x00\x00\x00\xbc\x93Uo\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG\xd953\xb66\f\xe1\xaf;\x01\xaal\xa6\xa6z\xa7o\f<\\\x90\xc2x\x82\xc2[\xb5\xc2L\xb6\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\X', &(0x7f0000000880)='R\x8d\xe9\x1a\xe0\x04\x00\x00\x00\x00\x00\x00\x00s\x03l\x8c\x11kSg\x03\x14 \'_\v/\xe0\xb0A\rx\x19\xe8\xf6sU\xfe<\xef\xc9\x12\xc25\xf8A\t\xdb\xb7\x88\xeeT\x80\x00\x00\x00=-\xe0\xf9\xff\xd2/x\x86i9\xcb@\xfa-\x19Q\x00\x90\x04\'J\xf8\xdfs\xad\xe6dS\x98\xeb\x89p\xd6)\xe8\x94d\x9dv.3\x9b\x81\x8e\x10\xca\xbc\x888', 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x74, 0x0, &(0x7f00000010c0)) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000580)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', &(0x7f0000000640)='y', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 5.334999005s ago: executing program 4 (id=1367): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x54, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0xb7b6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x3, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x4, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x1a0fadaf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x3, 0x0, 0x0, 0xfffffffc, 0x1, 0x2, 0xfffff986, 0xfffffffe], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000, 0x5, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x2, 0x20, 0x0, 0x5, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x2, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x1000000, 0x0, 0xffffffff, 0x0, 0x2, 0x10, 0x5, 0xfffffffe, 0x1, 0x1, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x2, 0x0, 0x20, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000028c0)={0x2020}, 0x2020) 5.279681589s ago: executing program 1 (id=1368): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045503, &(0x7f0000002a40)) r1 = fsmount(0xffffffffffffffff, 0x0, 0xa) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/241, 0xf1, 0x0, &(0x7f0000000240)=""/142, 0x8e}, &(0x7f0000000340)=0x40) io_uring_setup(0x4455, &(0x7f0000000ac0)={0x0, 0x6d46, 0x2, 0x0, 0x268, 0x0, r1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(0xffffffffffffffff) read(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x41555856, 0x3, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_opts(r6, 0x0, 0x0, &(0x7f0000000280)=""/4096, 0x0) 5.137819947s ago: executing program 3 (id=1369): mmap$IORING_OFF_SQ_RING(0x0, 0x3ff, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0xa, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4000}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x4, &(0x7f0000000080)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/vlan/config\x00') read$snddsp(r4, &(0x7f0000000240)=""/231, 0xe7) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0xc1}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) ioctl$UFFDIO_COPY(r5, 0x4010aa0a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3ff, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x801) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0xa, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4000}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_buf(r3, 0x0, 0x4, &(0x7f0000000080)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/vlan/config\x00') (async) read$snddsp(r4, &(0x7f0000000240)=""/231, 0xe7) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0xc1}) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) (async) ioctl$UFFDIO_COPY(r5, 0x4010aa0a, 0x0) (async) 5.038317726s ago: executing program 4 (id=1370): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000000)={0x1, [[0x7fff, 0x3, 0x6, 0xd, 0xffffffff, 0x3, 0x0, 0x800], [0x0, 0x8000000, 0x0, 0x0, 0xc000, 0x444d, 0x4], [0x40000004, 0x5, 0xfffffffe, 0x0, 0xfffffffe, 0xa, 0xffffffff]], '\x00', [{}, {0x0, 0x400}, {0xfffeffff, 0x2}, {0x0, 0x1}, {0xb0a, 0x6}, {0xffffffff, 0x9}, {0x20004, 0x8}, {0x9}, {0x5, 0x200000}, {0x164, 0xffff}, {0x8, 0x80001}], '\x00', 0x80000001, 0x0, 0x0, 0x2, 0x0, 0x35}) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000181000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x10000080000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0xfc, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002200)={@flat=@handle={0x73682a85, 0xb, 0x1}, @ptr={0x70742a85, 0x7fffc, 0x0, 0x50, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3e}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='./dev/nullb1\x00', &(0x7f0000000480)='./mnt\x00', 0x0, 0x0, 0x0) 4.388612624s ago: executing program 3 (id=1371): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='!=', 0x2) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x21) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000006c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000002100), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000002240)={0x0, 0xffffffffffffffa7, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r0, @ANYBLOB="0100af091ac1180c7b60af000200c5ffffffffffffff0900000000182b4a5a9d1e9af300000000b2b515a0a345f4c054f089e88c066bc4e7f759acbad9fdbe10bc9749187d841768ef6ca1296076929e1b637b702f78785d8df9868096cfaa17a13d6b9c0cc9961cde5650ccd2c1145f94951dd3e79c1b621b07c008d33a7d08217a35dea382d0bfc3ced7808c3216406be4b3d7f2"], 0x24}, 0x1, 0x0, 0x0, 0x4800c}, 0x0) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) mq_notify(0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r7, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000340)=""/175, 0xaf}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3000000000001c0000060a010400000000000000000100000008000b4000000000d81b04"], 0x1c74}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRESHEX=r0, @ANYBLOB="000000002000000008001b00000000001c001a80180002801400018008001700010000000800", @ANYRESOCT=0x0], 0x44}}, 0x0) 3.075465821s ago: executing program 4 (id=1372): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x26}}, 0x0) 2.968529622s ago: executing program 3 (id=1373): r0 = io_uring_setup(0x44d4, &(0x7f0000000200)={0x0, 0x59e2, 0x1000, 0x3, 0x20f}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000003c0)=[{0x0, 0x0, 0x0}], 0x1) (fail_nth: 2) 2.616102711s ago: executing program 4 (id=1374): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xcb) (fail_nth: 2) 2.25283312s ago: executing program 3 (id=1375): r0 = syz_create_resource$binfmt(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) chmod(&(0x7f0000000140)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x21) unlink(&(0x7f0000000080)='./tracing\x00') execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2.094266883s ago: executing program 4 (id=1376): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000f5ffffffffffb6080000000000007b8af8ff00000000bca263000000000002000000f8ffffffb703000008000000b70400000100000085000000330000d31a4a2d3b06e839758a009500000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1a0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000300)='r:test/event1 ./file0:0x0 arg2=%bx', 0x22) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', 0x0, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x4, &(0x7f0000000400)={0x0, '\x00\x00\x00\x00\x00\t\x00'}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/acpi/parameters/trace_method_name\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='_', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x4}, 0x8) writev(r6, &(0x7f0000004140)=[{&(0x7f0000002f40)='o', 0x1}], 0x1) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x7c}}, 0x2000c450) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x24e}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000380)=r10, 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "f9"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bind$inet(r8, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r8, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) sendto$rxrpc(r2, &(0x7f0000000240)="b49f3964e54e2bb6c70f4e834710d692731a20de96b9f3acf25e6ddfa7eae8445ded70cca3aff0c269976fbfedb3e00521b51797c79ce664d145de99bef4d6850931a5a08c1ccc205eb48be8459da580d615", 0x52, 0x4c040, &(0x7f0000000340)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, 0x24) 1.687692508s ago: executing program 3 (id=1377): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x538, 0x208, 0x3f0, 0x208, 0x2d8, 0x208, 0x668, 0x668, 0x668, 0x668, 0x668, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffffff, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 'vlan0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x5e, 0x65, 0x8, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x81, 0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, @mcast2, [0xffffffff, 0xffffffff, 0xff000000], [0x0, 0xffffffff, 0xff, 0xff000000], 'veth1_to_bond\x00', 'wlan1\x00', {0xff}, {0xff}, 0x0, 0x0, 0x3, 0x40}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x22, 0x0, 0xfff9}}}, {{@ipv6={@empty, @local, [0x0, 0xff000000, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xffffff00, 0xff000000], 'veth1_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x88, 0x7, 0x2, 0x2}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0xe000, @ipv4=@multicast1, 0x4e23}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [], 'veth0_to_batadv\x00', 'bond0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x7, 0x52}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@multicast1, 0x19, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod(&(0x7f0000000040)='./file0\x00', 0xc000, 0x3ff) 1.456155218s ago: executing program 4 (id=1378): syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x57e, 0x201e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x8, 0xa1, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0xf31}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x80, 0x5, 0xf}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x80, 0x8, 0x5, 0x8, 0x3}, 0x29, &(0x7f0000000300)={0x5, 0xf, 0x29, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x44, 0xc5, 0x1000}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x8cfc, 0xf00, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x16, 0x6, 0x4}]}, 0x2, [{0x0, 0x0}, {0xf5, &(0x7f0000000700)=@string={0xf5, 0x3, "53df90cc32df8447c7809310e892940181548112fda1a30193be9640a07a232980d723687d92fd99d2751756b9da9ec2d08375d6a1e2abdfe9052f6b869b49129c9c60f81020a3ce149769bc62d39f28995d20525ffcf16ef1c5f2455a12b00fde1deba86cf30c44684debc302b157f067100a071650258fca3dc6552e2fb1a902b43ab66d63a21c5fc4c9b878202eeb7576cd32b12ff33d23a845841e9e6fc8a2a81e63c24fad5e7026d5f19f8a1b5eac22e000055363bf7e8d0e93012549823da5eff139a89b4ee5a54026cb6d7b1bd70d6f116658ce046c2bbb6c887d570b4dacaab0c5230dd805e7bdaaa20714837284f4"}}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x19, &(0x7f0000000600)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @generic={0x7, 0x7, 0x0, 0xf03, 0x6}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @btf_id={0x18, 0x12a6c5cb1bb1029d, 0x3, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x92e}, @jmp={0x5, 0x1, 0x6, 0x4, 0x8, 0x18, 0x1}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="1100000000000000", @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYBLOB="adcbf398c9ddd8119df749f079185d16a6b504ff6fdedebc186412fc9344a20dc9fbb868146e113becb9d8b65f71ca704a5e52a2e86fba05103373d45b974019b97eacc835bd87ec9b305ccd37a0ff1d182de986dc69a63f89f953c7f033bb0c6d411545f7651915f8f53db265601b2fbd7efa869ca57a220352246d71534ea9c35f36692b2c7e1be502240649e4d844bfbc5feb6805", @ANYRES64=0x0], 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="bc83d7b65457eb0b50b4e3ad9d530b61b92365ee14182b53d8ef91e0eec46873a9eda92e546abc0b315b3ff13b", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 1.136872272s ago: executing program 0 (id=1379): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) read$usbmon(r0, &(0x7f0000000140)=""/47, 0x2f) 238.85696ms ago: executing program 0 (id=1380): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xcb) 238.170124ms ago: executing program 1 (id=1381): mount(0x0, 0x0, 0x0, 0x2002404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) rt_sigqueueinfo(r0, 0x25, &(0x7f0000000280)={0x29, 0xd}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000000061114c000000000085000000180000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) 234.372671ms ago: executing program 3 (id=1382): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000400)='!=', 0x2) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x21) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000006c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000002100), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000002240)={0x0, 0xffffffffffffffa7, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r0, @ANYBLOB="0100af091ac1180c7b60af000200c5ffffffffffffff0900000000182b4a5a9d1e9af300000000b2b515a0a345f4c054f089e88c066bc4e7f759acbad9fdbe10bc9749187d841768ef6ca1296076929e1b637b702f78785d8df9868096cfaa17a13d6b9c0cc9961cde5650ccd2c1145f94951dd3e79c1b621b07c008d33a7d08217a35dea382d0bfc3ced7808c3216406be4b3d7f2"], 0x24}, 0x1, 0x0, 0x0, 0x4800c}, 0x0) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) mq_notify(0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r7, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000340)=""/175, 0xaf}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3000000000001c0000060a010400000000000000000100000008000b4000000000d81b04"], 0x1c74}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRESHEX=r0, @ANYBLOB="000000002000000008001b00000000001c001a80180002801400018008001700010000000800", @ANYRESOCT=0x0], 0x44}}, 0x0) 69.122919ms ago: executing program 0 (id=1383): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x26}}, 0x0) 0s ago: executing program 0 (id=1384): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2a580, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) mkdir(0x0, 0xfe7c07a8874f64cc) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000700)={0xa, 0x4e20, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r5 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040710429030001010200010902190001010080"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000e40)={0x2c, &(0x7f0000000c40)={0x40, 0x0, 0x1, "81"}, 0x0, 0x0, 0x0, 0x0}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xfffe}, &(0x7f0000000040)=0x20) ppoll(&(0x7f0000000380)=[{r3, 0x100}], 0x1, &(0x7f00000003c0)={0x77359400}, &(0x7f0000001080)={[0x4f8]}, 0x2) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x101100) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0x0) r7 = io_uring_setup(0x3585, &(0x7f00000005c0)={0x0, 0xa1ac, 0x200, 0x3, 0x17f}) r8 = syz_io_uring_setup(0xeac, &(0x7f0000000540)={0x0, 0xffffffff, 0x40000, 0x3, 0x1db, 0x0, r7}, &(0x7f0000000500)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r8, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r12 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x9, 0x0, 0x4}) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) kernel console output (not intermixed with test programs): a5c6038 R14: 00007f673a5c5fa0 R15: 00007ffc333ede48 [ 533.706830][ T9476] [ 534.034713][ T5712] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 534.034766][ T9] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 534.035393][ T9] dvb_usb_dibusb_mb 5-1:255.168: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 534.045550][ T5712] dvb_usb_dibusb_mb 4-1:255.168: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 534.133577][ T9481] FAULT_INJECTION: forcing a failure. [ 534.133577][ T9481] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 534.147672][ T9481] CPU: 1 UID: 0 PID: 9481 Comm: syz.1.1074 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 534.147705][ T9481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.147719][ T9481] Call Trace: [ 534.147728][ T9481] [ 534.147738][ T9481] dump_stack_lvl+0xe8/0x150 [ 534.147778][ T9481] should_fail_ex+0x46b/0x600 [ 534.147817][ T9481] prepare_alloc_pages+0x223/0x650 [ 534.147862][ T9481] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 534.147897][ T9481] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 534.147932][ T9481] ? __pfx_policy_nodemask+0x10/0x10 [ 534.147968][ T9481] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 534.148007][ T9481] alloc_pages_mpol+0xd4/0x280 [ 534.148043][ T9481] alloc_pages_noprof+0xd2/0x2f0 [ 534.148078][ T9481] get_free_pages_noprof+0xf/0x80 [ 534.148108][ T9481] __kasan_populate_vmalloc+0x38/0x1c0 [ 534.148137][ T9481] ? rt_spin_unlock+0x165/0x200 [ 534.148171][ T9481] alloc_vmap_area+0xd1a/0x1420 [ 534.148212][ T9481] ? __pfx_alloc_vmap_area+0x10/0x10 [ 534.148237][ T9481] ? __get_vm_area_node+0x155/0x2f0 [ 534.148267][ T9481] __get_vm_area_node+0x200/0x2f0 [ 534.148299][ T9481] __vmalloc_node_range_noprof+0x343/0x1540 [ 534.148325][ T9481] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 534.148383][ T9481] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 534.148411][ T9481] ? kernel_text_address+0xa5/0xe0 [ 534.148442][ T9481] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 534.148470][ T9481] __vmalloc_noprof+0xd2/0x120 [ 534.148496][ T9481] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 534.148528][ T9481] bpf_prog_alloc_no_stats+0x47/0x560 [ 534.148561][ T9481] ? bpf_prog_alloc+0x2a/0x1a0 [ 534.148592][ T9481] bpf_prog_alloc+0x3c/0x1a0 [ 534.148624][ T9481] bpf_prog_load+0x7f8/0x1c20 [ 534.148669][ T9481] ? __pfx_bpf_prog_load+0x10/0x10 [ 534.148726][ T9481] __sys_bpf+0xd0d/0xd90 [ 534.148765][ T9481] ? __pfx___sys_bpf+0x10/0x10 [ 534.148797][ T9481] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 534.148827][ T9481] ? rt_mutex_slowunlock+0x219/0x460 [ 534.148887][ T9481] ? ksys_write+0x248/0x270 [ 534.148914][ T9481] ? __pfx_ksys_write+0x10/0x10 [ 534.148944][ T9481] __x64_sys_bpf+0xba/0xd0 [ 534.148975][ T9481] do_syscall_64+0x166/0x520 [ 534.148997][ T9481] ? trace_irq_disable+0x3b/0x140 [ 534.149023][ T9481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.149045][ T9481] ? clear_bhb_loop+0x70/0xc0 [ 534.149071][ T9481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.149093][ T9481] RIP: 0033:0x7f673a33e159 [ 534.149114][ T9481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.149133][ T9481] RSP: 002b:00007f6738596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 534.149157][ T9481] RAX: ffffffffffffffda RBX: 00007f673a5c5fa0 RCX: 00007f673a33e159 [ 534.149173][ T9481] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 534.149188][ T9481] RBP: 00007f6738596090 R08: 0000000000000000 R09: 0000000000000000 [ 534.149202][ T9481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.149215][ T9481] R13: 00007f673a5c6038 R14: 00007f673a5c5fa0 R15: 00007ffc333ede48 [ 534.149248][ T9481] [ 534.149320][ T9481] syz.1.1074: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 534.149390][ T9481] CPU: 1 UID: 0 PID: 9481 Comm: syz.1.1074 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 534.149413][ T9481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.149424][ T9481] Call Trace: [ 534.149432][ T9481] [ 534.149441][ T9481] dump_stack_lvl+0xe8/0x150 [ 534.149474][ T9481] warn_alloc+0x24d/0x270 [ 534.149502][ T9481] ? lockdep_hardirqs_on+0x7b/0x110 [ 534.149529][ T9481] ? __pfx_warn_alloc+0x10/0x10 [ 534.149555][ T9481] ? kfree+0x1c5/0x6d0 [ 534.149584][ T9481] ? __get_vm_area_node+0x219/0x2f0 [ 534.149617][ T9481] __vmalloc_node_range_noprof+0x36b/0x1540 [ 534.149673][ T9481] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 534.149700][ T9481] ? kernel_text_address+0xa5/0xe0 [ 534.149731][ T9481] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 534.149758][ T9481] __vmalloc_noprof+0xd2/0x120 [ 534.149782][ T9481] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 534.149816][ T9481] bpf_prog_alloc_no_stats+0x47/0x560 [ 534.149852][ T9481] ? bpf_prog_alloc+0x2a/0x1a0 [ 534.149884][ T9481] bpf_prog_alloc+0x3c/0x1a0 [ 534.149916][ T9481] bpf_prog_load+0x7f8/0x1c20 [ 534.149958][ T9481] ? __pfx_bpf_prog_load+0x10/0x10 [ 534.150016][ T9481] __sys_bpf+0xd0d/0xd90 [ 534.150054][ T9481] ? __pfx___sys_bpf+0x10/0x10 [ 534.150086][ T9481] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 534.150116][ T9481] ? rt_mutex_slowunlock+0x219/0x460 [ 534.150168][ T9481] ? ksys_write+0x248/0x270 [ 534.150194][ T9481] ? __pfx_ksys_write+0x10/0x10 [ 534.150224][ T9481] __x64_sys_bpf+0xba/0xd0 [ 534.150254][ T9481] do_syscall_64+0x166/0x520 [ 534.150277][ T9481] ? trace_irq_disable+0x3b/0x140 [ 534.150303][ T9481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.150324][ T9481] ? clear_bhb_loop+0x70/0xc0 [ 534.150348][ T9481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.150369][ T9481] RIP: 0033:0x7f673a33e159 [ 534.150388][ T9481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.150404][ T9481] RSP: 002b:00007f6738596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 534.150426][ T9481] RAX: ffffffffffffffda RBX: 00007f673a5c5fa0 RCX: 00007f673a33e159 [ 534.150440][ T9481] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 534.150453][ T9481] RBP: 00007f6738596090 R08: 0000000000000000 R09: 0000000000000000 [ 534.150466][ T9481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.150479][ T9481] R13: 00007f673a5c6038 R14: 00007f673a5c5fa0 R15: 00007ffc333ede48 [ 534.150513][ T9481] [ 534.150521][ T9481] Mem-Info: [ 534.150530][ T9481] active_anon:187 inactive_anon:6828 isolated_anon:0 [ 534.150530][ T9481] active_file:27820 inactive_file:40173 isolated_file:0 [ 534.150530][ T9481] unevictable:0 dirty:362 writeback:0 [ 534.150530][ T9481] slab_reclaimable:12203 slab_unreclaimable:100690 [ 534.150530][ T9481] mapped:32353 shmem:1619 pagetables:1344 [ 534.150530][ T9481] sec_pagetables:0 bounce:0 [ 534.150530][ T9481] kernel_misc_reclaimable:0 [ 534.150530][ T9481] free:1301877 free_pcp:3109 free_cma:0 [ 534.150585][ T9481] Node 0 active_anon:748kB inactive_anon:27312kB active_file:110904kB inactive_file:160692kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129244kB dirty:1444kB writeback:0kB shmem:6476kB kernel_stack:14628kB pagetables:5240kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 534.150637][ T9481] Node 1 active_anon:0kB inactive_anon:0kB active_file:376kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 534.150686][ T9481] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 534.150748][ T9481] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 534.150789][ T9481] Node 0 DMA32 free:1262524kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:748kB inactive_anon:27312kB active_file:110904kB inactive_file:160692kB unevictable:0kB writepending:1444kB zspages:0kB present:3129332kB managed:2558864kB mlocked:0kB bounce:0kB free_pcp:12412kB local_pcp:7932kB free_cma:0kB [ 534.150862][ T9481] lowmem_reserve[]: 0 0 1 1 1 [ 534.150901][ T9481] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1816kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 534.150960][ T9481] lowmem_reserve[]: 0 0 0 0 0 [ 534.150999][ T9481] Node 1 Normal free:3929624kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:376kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 534.151060][ T9481] lowmem_reserve[]: 0 0 0 0 0 [ 534.151100][ T9481] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 534.151232][ T9481] Node 0 DMA32: 632*4kB (UE) 212*8kB (UE) 1045*16kB (UM) 887*32kB (UME) 588*64kB (UME) 306*128kB (UME) 157*256kB (UM) 47*512kB (M) 25*1024kB (UME) 11*2048kB (ME) 250*4096kB (UM) = 1262512kB [ 534.151412][ T9481] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 534.151524][ T9481] Node 1 Normal: 2*4kB (M) 2*8kB (U) 10*16kB (UM) 7*32kB (U) 8*64kB (UM) 3*128kB (U) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 957*4096kB (M) = 3929624kB [ 534.151700][ T9481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.151718][ T9481] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 534.151736][ T9481] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.151752][ T9481] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 534.151769][ T9481] 69608 total pagecache pages [ 534.151777][ T9481] 0 pages in swap cache [ 534.151785][ T9481] Free swap = 124996kB [ 534.151793][ T9481] Total swap = 124996kB [ 534.151802][ T9481] 2097051 pages RAM [ 534.151810][ T9481] 0 pages HighMem/MovableOnly [ 534.151817][ T9481] 425265 pages reserved [ 534.151825][ T9481] 0 pages cma reserved [ 534.474617][ T4963] udevd[4963]: worker [8742] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 535.416420][ T9] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 535.453681][ T9] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 535.453912][ T9] dvb_usb_dibusb_mb 5-1:255.126: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 535.492512][ T9] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 535.502135][ T9] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 535.502365][ T9] dvb_usb_dibusb_mb 5-1:255.43: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 535.503365][ T5332] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 535.503587][ T5332] dvb_usb_dibusb_mb 2-1:255.168: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 535.531438][ T5332] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 535.534572][ T5332] usb 2-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 535.534598][ T5332] usb 2-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 535.539569][ T9] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 535.682085][ T5712] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 537.738233][ T9520] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1085'. [ 539.436791][ T9526] FAULT_INJECTION: forcing a failure. [ 539.436791][ T9526] name failslab, interval 1, probability 0, space 0, times 0 [ 539.436891][ T9526] CPU: 0 UID: 0 PID: 9526 Comm: syz.4.1088 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 539.436916][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 539.436926][ T9526] Call Trace: [ 539.436932][ T9526] [ 539.436941][ T9526] dump_stack_lvl+0xe8/0x150 [ 539.436974][ T9526] should_fail_ex+0x46b/0x600 [ 539.437002][ T9526] should_failslab+0xa8/0x100 [ 539.437030][ T9526] kmem_cache_alloc_node_noprof+0xac/0x660 [ 539.437055][ T9526] ? __alloc_skb+0x1db/0x7a0 [ 539.437076][ T9526] ? __alloc_skb+0x1db/0x7a0 [ 539.437104][ T9526] __alloc_skb+0x1db/0x7a0 [ 539.437130][ T9526] netlink_sendmsg+0x5d4/0xb40 [ 539.437158][ T9526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.437179][ T9526] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 539.437206][ T9526] ? __kernel_text_address+0xd/0x30 [ 539.437227][ T9526] ? unwind_get_return_address+0x4d/0x90 [ 539.437253][ T9526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.437270][ T9526] sock_sendmsg_nosec+0x13a/0x180 [ 539.437294][ T9526] ____sys_sendmsg+0x565/0x870 [ 539.437328][ T9526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.437361][ T9526] ? import_iovec+0x73/0xa0 [ 539.437387][ T9526] ___sys_sendmsg+0x2a5/0x360 [ 539.437411][ T9526] ? __lock_acquire+0x6df/0x2e40 [ 539.437442][ T9526] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.437501][ T9526] ? __fget_files+0x2a/0x420 [ 539.437519][ T9526] ? __fget_files+0x3a8/0x420 [ 539.437547][ T9526] __x64_sys_sendmsg+0x1b7/0x290 [ 539.437575][ T9526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 539.437620][ T9526] do_syscall_64+0x166/0x520 [ 539.437642][ T9526] ? trace_irq_disable+0x3b/0x140 [ 539.437664][ T9526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.437683][ T9526] ? clear_bhb_loop+0x70/0xc0 [ 539.437706][ T9526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.437724][ T9526] RIP: 0033:0x7f559a51e159 [ 539.437742][ T9526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.437768][ T9526] RSP: 002b:00007f5598776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.437790][ T9526] RAX: ffffffffffffffda RBX: 00007f559a7a5fa0 RCX: 00007f559a51e159 [ 539.437804][ T9526] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 539.437816][ T9526] RBP: 00007f5598776090 R08: 0000000000000000 R09: 0000000000000000 [ 539.437828][ T9526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.437840][ T9526] R13: 00007f559a7a6038 R14: 00007f559a7a5fa0 R15: 00007ffde5cf2de8 [ 539.437869][ T9526] [ 539.678621][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 539.678646][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 539.829578][ T5703] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 539.995323][ T5703] usb 1-1: Using ep0 maxpacket: 8 [ 539.997238][ T5703] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 540.008061][ T5703] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.008118][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.105479][ T5703] kobil_sct 1-1:1.0: required endpoints missing [ 540.293537][ T9532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.294281][ T9532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.328895][ T5727] usb 1-1: USB disconnect, device number 24 [ 540.481495][ T9543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.845335][ T5727] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 542.995410][ T5727] usb 1-1: Using ep0 maxpacket: 16 [ 543.003230][ T5727] usb 1-1: New USB device found, idVendor=10b8, idProduct=0bb8, bcdDevice=68.5c [ 543.004709][ T5727] usb 1-1: config 255 has an invalid interface number: 168 but max is 2 [ 543.004739][ T5727] usb 1-1: config 255 has an invalid interface number: 126 but max is 2 [ 543.004771][ T5727] usb 1-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 543.004791][ T5727] usb 1-1: config 255 has an invalid interface number: 43 but max is 2 [ 543.004811][ T5727] usb 1-1: config 255 has an invalid interface number: 14 but max is 2 [ 543.004832][ T5727] usb 1-1: config 255 has 4 interfaces, different from the descriptor's value: 3 [ 543.004853][ T5727] usb 1-1: config 255 has no interface number 0 [ 543.004870][ T5727] usb 1-1: config 255 has no interface number 1 [ 543.004886][ T5727] usb 1-1: config 255 has no interface number 2 [ 543.004901][ T5727] usb 1-1: config 255 has no interface number 3 [ 543.004995][ T5727] usb 1-1: config 255 interface 168 altsetting 155 has an invalid descriptor for endpoint zero, skipping [ 543.005020][ T5727] usb 1-1: config 255 interface 168 altsetting 155 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 543.005047][ T5727] usb 1-1: config 255 interface 168 altsetting 155 has an invalid descriptor for endpoint zero, skipping [ 543.005070][ T5727] usb 1-1: config 255 interface 168 altsetting 155 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 543.005101][ T5727] usb 1-1: too many endpoints for config 255 interface 126 altsetting 222: 210, using maximum allowed: 30 [ 543.005140][ T5727] usb 1-1: config 255 interface 126 altsetting 222 has a duplicate endpoint with address 0x4, skipping [ 543.005164][ T5727] usb 1-1: config 255 interface 126 altsetting 222 has an endpoint descriptor with address 0x53, changing to 0x3 [ 543.185357][ T5727] usb 1-1: config 255 interface 126 altsetting 222 has a duplicate endpoint with address 0x3, skipping [ 543.185391][ T5727] usb 1-1: config 255 interface 126 altsetting 222 has a duplicate endpoint with address 0x3, skipping [ 543.185416][ T5727] usb 1-1: config 255 interface 126 altsetting 222 has a duplicate endpoint with address 0x9, skipping [ 543.185440][ T5727] usb 1-1: config 255 interface 126 altsetting 222 has 6 endpoint descriptors, different from the interface descriptor's value: 210 [ 543.185497][ T5727] usb 1-1: config 255 interface 14 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 543.185522][ T5727] usb 1-1: config 255 interface 14 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 543.185544][ T5727] usb 1-1: config 255 interface 168 has no altsetting 0 [ 543.185563][ T5727] usb 1-1: config 255 interface 126 has no altsetting 0 [ 543.185582][ T5727] usb 1-1: config 255 interface 43 has no altsetting 0 [ 543.185601][ T5727] usb 1-1: config 255 interface 14 has no altsetting 0 [ 543.299191][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.310082][ T5727] usb 1-1: Product: syz [ 543.310108][ T5727] usb 1-1: Manufacturer: ᐇ [ 543.310122][ T5727] usb 1-1: SerialNumber: syz [ 543.696351][ T9574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.720298][ T9574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.277939][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 545.361110][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 545.373201][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 545.414154][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 545.425819][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 546.234717][ T5727] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 546.760646][ T9610] FAULT_INJECTION: forcing a failure. [ 546.760646][ T9610] name failslab, interval 1, probability 0, space 0, times 0 [ 546.760786][ T9610] CPU: 1 UID: 0 PID: 9610 Comm: syz.1.1108 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 546.760810][ T9610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 546.760820][ T9610] Call Trace: [ 546.760827][ T9610] [ 546.760834][ T9610] dump_stack_lvl+0xe8/0x150 [ 546.760867][ T9610] should_fail_ex+0x46b/0x600 [ 546.760896][ T9610] should_failslab+0xa8/0x100 [ 546.760925][ T9610] kmem_cache_alloc_node_noprof+0xac/0x660 [ 546.760949][ T9610] ? __alloc_skb+0x1db/0x7a0 [ 546.760971][ T9610] ? __alloc_skb+0x1db/0x7a0 [ 546.760999][ T9610] __alloc_skb+0x1db/0x7a0 [ 546.761025][ T9610] netlink_sendmsg+0x5d4/0xb40 [ 546.761053][ T9610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.761074][ T9610] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 546.761101][ T9610] ? __kernel_text_address+0xd/0x30 [ 546.761122][ T9610] ? unwind_get_return_address+0x4d/0x90 [ 546.761147][ T9610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.761163][ T9610] sock_sendmsg_nosec+0x13a/0x180 [ 546.761187][ T9610] ____sys_sendmsg+0x565/0x870 [ 546.761220][ T9610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.761254][ T9610] ? import_iovec+0x73/0xa0 [ 546.761281][ T9610] ___sys_sendmsg+0x2a5/0x360 [ 546.761305][ T9610] ? __lock_acquire+0x6df/0x2e40 [ 546.761332][ T9610] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.761394][ T9610] ? __fget_files+0x2a/0x420 [ 546.761411][ T9610] ? __fget_files+0x3a8/0x420 [ 546.761439][ T9610] __x64_sys_sendmsg+0x1b7/0x290 [ 546.761467][ T9610] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 546.761512][ T9610] do_syscall_64+0x166/0x520 [ 546.761533][ T9610] ? trace_irq_disable+0x3b/0x140 [ 546.761555][ T9610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.761574][ T9610] ? clear_bhb_loop+0x70/0xc0 [ 546.761597][ T9610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.761615][ T9610] RIP: 0033:0x7f673a33e159 [ 546.761632][ T9610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.761647][ T9610] RSP: 002b:00007f6738596028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.761668][ T9610] RAX: ffffffffffffffda RBX: 00007f673a5c5fa0 RCX: 00007f673a33e159 [ 546.761681][ T9610] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 546.761693][ T9610] RBP: 00007f6738596090 R08: 0000000000000000 R09: 0000000000000000 [ 546.761713][ T9610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.761725][ T9610] R13: 00007f673a5c6038 R14: 00007f673a5c5fa0 R15: 00007ffc333ede48 [ 546.761755][ T9610] [ 546.971937][ T37] kauditd_printk_skb: 196 callbacks suppressed [ 546.971959][ T37] audit: type=1326 audit(1788682986.877:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.0.1109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 546.987485][ T37] audit: type=1326 audit(1788682986.897:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.0.1109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 546.987538][ T37] audit: type=1326 audit(1788682986.897:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.0.1109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 547.024323][ T37] audit: type=1326 audit(1788682986.927:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.0.1109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 547.024381][ T37] audit: type=1326 audit(1788682986.927:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.0.1109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 547.024421][ T37] audit: type=1326 audit(1788682986.927:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.0.1109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 547.024462][ T37] audit: type=1326 audit(1788682986.927:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.0.1109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 547.027767][ T37] audit: type=1326 audit(1788682986.937:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.0.1109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 547.027838][ T37] audit: type=1326 audit(1788682986.937:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.0.1109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 547.028600][ T37] audit: type=1326 audit(1788682986.937:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.0.1109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 547.651308][ T9619] FAULT_INJECTION: forcing a failure. [ 547.651308][ T9619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.653104][ T9619] CPU: 1 UID: 0 PID: 9619 Comm: syz.1.1110 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 547.653130][ T9619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.653141][ T9619] Call Trace: [ 547.653148][ T9619] [ 547.653157][ T9619] dump_stack_lvl+0xe8/0x150 [ 547.653191][ T9619] should_fail_ex+0x46b/0x600 [ 547.653218][ T9619] _copy_from_user+0x2d/0xb0 [ 547.653242][ T9619] bpf_test_init+0xd8/0x150 [ 547.653337][ T9619] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 547.653380][ T9619] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 547.653412][ T9619] ? __fget_files+0x2a/0x420 [ 547.653437][ T9619] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 547.653465][ T9619] bpf_prog_test_run+0x2cb/0x340 [ 547.653496][ T9619] __sys_bpf+0xa22/0xd90 [ 547.653529][ T9619] ? __pfx___sys_bpf+0x10/0x10 [ 547.653556][ T9619] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 547.653584][ T9619] ? rt_mutex_slowunlock+0x219/0x460 [ 547.653629][ T9619] ? ksys_write+0x248/0x270 [ 547.653652][ T9619] ? __pfx_ksys_write+0x10/0x10 [ 547.653677][ T9619] __x64_sys_bpf+0xba/0xd0 [ 547.653704][ T9619] do_syscall_64+0x166/0x520 [ 547.653725][ T9619] ? trace_irq_disable+0x3b/0x140 [ 547.653747][ T9619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.653766][ T9619] ? clear_bhb_loop+0x70/0xc0 [ 547.653798][ T9619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.653816][ T9619] RIP: 0033:0x7f673a33e159 [ 547.653835][ T9619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.653851][ T9619] RSP: 002b:00007f6738596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.653873][ T9619] RAX: ffffffffffffffda RBX: 00007f673a5c5fa0 RCX: 00007f673a33e159 [ 547.653886][ T9619] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 547.653899][ T9619] RBP: 00007f6738596090 R08: 0000000000000000 R09: 0000000000000000 [ 547.653911][ T9619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.653927][ T9619] R13: 00007f673a5c6038 R14: 00007f673a5c5fa0 R15: 00007ffc333ede48 [ 547.653958][ T9619] [ 547.990562][ T5601] Bluetooth: hci5: command tx timeout [ 549.847043][ T9592] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.854800][ T9592] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.855027][ T9592] bridge_slave_0: entered allmulticast mode [ 549.872555][ T9592] bridge_slave_0: entered promiscuous mode [ 549.886808][ T9592] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.894380][ T9592] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.894597][ T9592] bridge_slave_1: entered allmulticast mode [ 549.914568][ T9592] bridge_slave_1: entered promiscuous mode [ 550.052264][ T9592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.065399][ T5601] Bluetooth: hci5: command tx timeout [ 550.077236][ T9592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.140959][ T9592] team0: Port device team_slave_0 added [ 550.151815][ T9592] team0: Port device team_slave_1 added [ 550.212764][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.220277][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.220315][ T9592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.223069][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.223087][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.223116][ T9592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.743094][ T9592] hsr_slave_0: entered promiscuous mode [ 550.763146][ T9592] hsr_slave_1: entered promiscuous mode [ 550.862427][ T9592] debugfs: 'hsr0' already exists in 'hsr' [ 550.862541][ T9592] Cannot create hsr debugfs directory [ 552.838261][ T5601] Bluetooth: hci5: command tx timeout [ 553.255788][ T9686] FAULT_INJECTION: forcing a failure. [ 553.255788][ T9686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.269671][ T9686] CPU: 0 UID: 0 PID: 9686 Comm: syz.3.1125 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 553.269703][ T9686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 553.269716][ T9686] Call Trace: [ 553.269724][ T9686] [ 553.269734][ T9686] dump_stack_lvl+0xe8/0x150 [ 553.269769][ T9686] should_fail_ex+0x46b/0x600 [ 553.269798][ T9686] _copy_from_user+0x2d/0xb0 [ 553.269824][ T9686] copy_from_sockptr+0x5e/0x90 [ 553.269931][ T9686] packet_setsockopt+0x754/0x1510 [ 553.269957][ T9686] ? __pfx_packet_setsockopt+0x10/0x10 [ 553.269988][ T9686] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 553.270036][ T9686] ? __fget_files+0x2a/0x420 [ 553.270060][ T9686] ? __fget_files+0x2a/0x420 [ 553.270079][ T9686] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 553.270108][ T9686] ? __pfx_packet_setsockopt+0x10/0x10 [ 553.270131][ T9686] do_sock_setsockopt+0x17c/0x1b0 [ 553.270163][ T9686] __x64_sys_setsockopt+0x143/0x1b0 [ 553.270199][ T9686] do_syscall_64+0x166/0x520 [ 553.270220][ T9686] ? trace_irq_disable+0x3b/0x140 [ 553.270243][ T9686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.270264][ T9686] ? clear_bhb_loop+0x70/0xc0 [ 553.270308][ T9686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.270328][ T9686] RIP: 0033:0x7f2d3215e159 [ 553.270348][ T9686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.270364][ T9686] RSP: 002b:00007f2d30395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 553.270388][ T9686] RAX: ffffffffffffffda RBX: 00007f2d323e6090 RCX: 00007f2d3215e159 [ 553.270403][ T9686] RDX: 000000000000000c RSI: 0000000000000107 RDI: 0000000000000006 [ 553.270415][ T9686] RBP: 00007f2d30395090 R08: 0000000000000004 R09: 0000000000000000 [ 553.270428][ T9686] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.270442][ T9686] R13: 00007f2d323e6128 R14: 00007f2d323e6090 R15: 00007fffbe952fc8 [ 553.270474][ T9686] [ 553.784177][ T9592] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 553.891474][ T9592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 553.901279][ T9592] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 554.019395][ T9592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 554.029032][ T9592] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 554.090159][ T9592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 554.104798][ T9592] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 554.143549][ T9592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.158352][ T37] kauditd_printk_skb: 107 callbacks suppressed [ 554.158450][ T37] audit: type=1326 audit(1788682994.067:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.0.1131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 554.161442][ T37] audit: type=1326 audit(1788682994.067:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.0.1131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 554.161779][ T37] audit: type=1326 audit(1788682994.067:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.0.1131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 554.213322][ T37] audit: type=1326 audit(1788682994.117:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.0.1131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 554.213708][ T37] audit: type=1326 audit(1788682994.117:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.0.1131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 554.213951][ T37] audit: type=1326 audit(1788682994.117:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.0.1131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fded6dedec2 code=0x7ffc0000 [ 554.214321][ T37] audit: type=1326 audit(1788682994.117:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.0.1131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fded6dedf57 code=0x7ffc0000 [ 554.215059][ T37] audit: type=1326 audit(1788682994.117:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.0.1131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fded6daae51 code=0x7ffc0000 [ 554.227122][ T37] audit: type=1326 audit(1788682994.137:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.0.1131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fded6deef49 code=0x7ffc0000 [ 554.227178][ T37] audit: type=1326 audit(1788682994.137:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.0.1131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fded6daaebb code=0x7ffc0000 [ 554.517376][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fa58000: rx timeout, send abort [ 554.807890][ T9592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.875499][ T5601] Bluetooth: hci5: command tx timeout [ 555.014206][ T9592] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.031906][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fa58000: abort rx timeout. Force session deactivation [ 555.131000][ T8462] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.131220][ T8462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.164192][ T8462] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.164430][ T8462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.961532][ T9592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.971519][ T9755] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 560.349290][ T9760] bond2: (slave veth0_to_bond): making interface the new active one [ 560.361705][ T9760] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 560.536392][ T9768] netlink: 'syz.3.1144': attribute type 4 has an invalid length. [ 560.727990][ T9771] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 562.112622][ T9789] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1147'. [ 564.109427][ T9592] veth0_vlan: entered promiscuous mode [ 565.220473][ T9592] veth1_vlan: entered promiscuous mode [ 565.276494][ T9592] veth0_macvtap: entered promiscuous mode [ 565.289731][ T9592] veth1_macvtap: entered promiscuous mode [ 565.313074][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.320284][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.291374][ T37] kauditd_printk_skb: 293 callbacks suppressed [ 566.291398][ T37] audit: type=1326 audit(1788683006.197:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9813 comm="syz.3.1156" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d3215e159 code=0x0 [ 566.327601][ T8471] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.328912][ T8471] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.328950][ T8471] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.328986][ T8471] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.644002][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.652260][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.132328][ T8460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.132436][ T8460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.426076][ T9833] 9p: Bad value for 'rfdno' [ 569.318460][ T9838] FAULT_INJECTION: forcing a failure. [ 569.318460][ T9838] name failslab, interval 1, probability 0, space 0, times 0 [ 569.318558][ T9838] CPU: 1 UID: 0 PID: 9838 Comm: syz.0.1161 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 569.318587][ T9838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 569.318600][ T9838] Call Trace: [ 569.318610][ T9838] [ 569.318620][ T9838] dump_stack_lvl+0xe8/0x150 [ 569.318661][ T9838] should_fail_ex+0x46b/0x600 [ 569.318695][ T9838] ? sock_alloc_inode+0x2c/0x1a0 [ 569.318723][ T9838] should_failslab+0xa8/0x100 [ 569.318759][ T9838] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 569.318791][ T9838] ? sock_alloc_inode+0x2c/0x1a0 [ 569.318821][ T9838] ? __pfx_sock_alloc_inode+0x10/0x10 [ 569.318845][ T9838] sock_alloc_inode+0x2c/0x1a0 [ 569.318869][ T9838] ? __pfx_sock_alloc_inode+0x10/0x10 [ 569.318891][ T9838] alloc_inode+0x6a/0x1b0 [ 569.318927][ T9838] __sock_create+0x12d/0x9d0 [ 569.318963][ T9838] __sys_socket+0xd6/0x1b0 [ 569.319016][ T9838] __x64_sys_socket+0x7a/0x90 [ 569.319043][ T9838] do_syscall_64+0x166/0x520 [ 569.319070][ T9838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.319093][ T9838] ? clear_bhb_loop+0x70/0xc0 [ 569.319121][ T9838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.319144][ T9838] RIP: 0033:0x7fded6dee159 [ 569.319166][ T9838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.319186][ T9838] RSP: 002b:00007fded5046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 569.319213][ T9838] RAX: ffffffffffffffda RBX: 00007fded7075fa0 RCX: 00007fded6dee159 [ 569.319230][ T9838] RDX: 0000000000000073 RSI: 0000000000000002 RDI: 000000000000000a [ 569.319244][ T9838] RBP: 00007fded6e85024 R08: 0000000000000000 R09: 0000000000000000 [ 569.319258][ T9838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.319272][ T9838] R13: 00007fded7076038 R14: 00007fded7075fa0 R15: 00007ffec80ad9e8 [ 569.319308][ T9838] [ 569.319336][ T9838] socket: no more sockets [ 569.576106][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.576181][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.654891][ T9859] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 572.730312][ T37] audit: type=1326 audit(1788683012.637:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9873 comm="syz.1.1171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673a33e159 code=0x7ffc0000 [ 572.730378][ T37] audit: type=1326 audit(1788683012.637:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9873 comm="syz.1.1171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673a33e159 code=0x7ffc0000 [ 572.731678][ T37] audit: type=1326 audit(1788683012.637:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9873 comm="syz.1.1171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673a33e159 code=0x7ffc0000 [ 572.731734][ T37] audit: type=1326 audit(1788683012.637:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9873 comm="syz.1.1171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673a33e159 code=0x7ffc0000 [ 572.731784][ T37] audit: type=1326 audit(1788683012.637:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9873 comm="syz.1.1171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673a33e159 code=0x7ffc0000 [ 572.797388][ T37] audit: type=1326 audit(1788683012.687:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9873 comm="syz.1.1171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f673a33e159 code=0x7ffc0000 [ 572.797527][ T37] audit: type=1326 audit(1788683012.687:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9873 comm="syz.1.1171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673a33e159 code=0x7ffc0000 [ 572.797578][ T37] audit: type=1326 audit(1788683012.687:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9873 comm="syz.1.1171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673a33e159 code=0x7ffc0000 [ 572.861656][ T37] audit: type=1326 audit(1788683012.767:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9873 comm="syz.1.1171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673a33e159 code=0x7ffc0000 [ 572.865393][ T37] audit: type=1326 audit(1788683012.767:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9873 comm="syz.1.1171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f673a33e159 code=0x7ffc0000 [ 573.587600][ T9882] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1171'. [ 574.369698][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 574.370599][ T9890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1172'. [ 574.752652][ T9895] FAULT_INJECTION: forcing a failure. [ 574.752652][ T9895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.768346][ T9895] CPU: 0 UID: 0 PID: 9895 Comm: syz.1.1175 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 574.768377][ T9895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 574.768390][ T9895] Call Trace: [ 574.768399][ T9895] [ 574.768408][ T9895] dump_stack_lvl+0xe8/0x150 [ 574.768444][ T9895] should_fail_ex+0x46b/0x600 [ 574.768475][ T9895] _copy_to_user+0x31/0xb0 [ 574.768504][ T9895] simple_read_from_buffer+0xe1/0x170 [ 574.768533][ T9895] proc_fail_nth_read+0x1be/0x230 [ 574.768561][ T9895] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 574.768589][ T9895] ? rw_verify_area+0x250/0x4d0 [ 574.768615][ T9895] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 574.768639][ T9895] vfs_read+0x219/0xa90 [ 574.768672][ T9895] ? __pfx_vfs_read+0x10/0x10 [ 574.768698][ T9895] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 574.768729][ T9895] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 574.768753][ T9895] ? mutex_lock_nested+0x152/0x1d0 [ 574.768781][ T9895] ? fdget_pos+0x252/0x320 [ 574.768813][ T9895] ksys_read+0x156/0x270 [ 574.768840][ T9895] ? __pfx_ksys_read+0x10/0x10 [ 574.768863][ T9895] ? __pfx_blkdev_ioctl+0x10/0x10 [ 574.768936][ T9895] do_syscall_64+0x166/0x520 [ 574.768959][ T9895] ? trace_irq_disable+0x3b/0x140 [ 574.768985][ T9895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.769006][ T9895] ? clear_bhb_loop+0x70/0xc0 [ 574.769031][ T9895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.769052][ T9895] RIP: 0033:0x7f673a2fe98e [ 574.769083][ T9895] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 574.769102][ T9895] RSP: 002b:00007f6738595fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 574.769127][ T9895] RAX: ffffffffffffffda RBX: 00007f67385966c0 RCX: 00007f673a2fe98e [ 574.769143][ T9895] RDX: 000000000000000f RSI: 00007f67385960a0 RDI: 0000000000000004 [ 574.769157][ T9895] RBP: 00007f6738596090 R08: 0000000000000000 R09: 0000000000000000 [ 574.769172][ T9895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.769185][ T9895] R13: 00007f673a5c6038 R14: 00007f673a5c5fa0 R15: 00007ffc333ede48 [ 574.769222][ T9895] [ 574.823114][ T9899] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1174'. [ 574.823150][ T9899] openvswitch: netlink: Flow key attr not present in new flow. [ 575.205748][ T8309] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 575.360185][ T8309] usb 6-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice= 1.00 [ 575.362479][ T8309] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.362506][ T8309] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 575.373819][ T8309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 575.373847][ T8309] usb 6-1: Product: syz [ 575.373861][ T8309] usb 6-1: Manufacturer: syz [ 579.020302][ T9929] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1183'. [ 579.402246][ T5703] usb 6-1: USB disconnect, device number 2 [ 582.191477][ T9971] FAULT_INJECTION: forcing a failure. [ 582.191477][ T9971] name failslab, interval 1, probability 0, space 0, times 0 [ 582.191612][ T9971] CPU: 1 UID: 0 PID: 9971 Comm: syz.3.1192 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 582.191636][ T9971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 582.191649][ T9971] Call Trace: [ 582.191658][ T9971] [ 582.191668][ T9971] dump_stack_lvl+0xe8/0x150 [ 582.191707][ T9971] should_fail_ex+0x46b/0x600 [ 582.191738][ T9971] should_failslab+0xa8/0x100 [ 582.191772][ T9971] kmem_cache_alloc_node_noprof+0xac/0x660 [ 582.191799][ T9971] ? __alloc_skb+0x1db/0x7a0 [ 582.191825][ T9971] ? __alloc_skb+0x1db/0x7a0 [ 582.191858][ T9971] __alloc_skb+0x1db/0x7a0 [ 582.191887][ T9971] netlink_sendmsg+0x5d4/0xb40 [ 582.191920][ T9971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.191943][ T9971] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 582.191974][ T9971] ? __kernel_text_address+0xd/0x30 [ 582.191999][ T9971] ? unwind_get_return_address+0x4d/0x90 [ 582.192028][ T9971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.192047][ T9971] sock_sendmsg_nosec+0x13a/0x180 [ 582.192075][ T9971] ____sys_sendmsg+0x565/0x870 [ 582.192115][ T9971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 582.192155][ T9971] ? import_iovec+0x73/0xa0 [ 582.192186][ T9971] ___sys_sendmsg+0x2a5/0x360 [ 582.192214][ T9971] ? __lock_acquire+0x6df/0x2e40 [ 582.192245][ T9971] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.192313][ T9971] ? __fget_files+0x2a/0x420 [ 582.192334][ T9971] ? __fget_files+0x3a8/0x420 [ 582.192371][ T9971] __x64_sys_sendmsg+0x1b7/0x290 [ 582.192412][ T9971] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 582.192465][ T9971] do_syscall_64+0x166/0x520 [ 582.192490][ T9971] ? trace_irq_disable+0x3b/0x140 [ 582.192515][ T9971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.192537][ T9971] ? clear_bhb_loop+0x70/0xc0 [ 582.192564][ T9971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.192585][ T9971] RIP: 0033:0x7f2d3215e159 [ 582.192606][ T9971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.192624][ T9971] RSP: 002b:00007f2d303b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.192650][ T9971] RAX: ffffffffffffffda RBX: 00007f2d323e5fa0 RCX: 00007f2d3215e159 [ 582.192666][ T9971] RDX: 0000000000044844 RSI: 0000200000000340 RDI: 0000000000000003 [ 582.192680][ T9971] RBP: 00007f2d303b6090 R08: 0000000000000000 R09: 0000000000000000 [ 582.192694][ T9971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.192707][ T9971] R13: 00007f2d323e6038 R14: 00007f2d323e5fa0 R15: 00007fffbe952fc8 [ 582.192742][ T9971] [ 582.486772][ T5703] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 585.832699][ T4963] udevd[4963]: worker [8753] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 585.834350][ T4963] udevd[4963]: worker [8862] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 586.714572][ T9993] netlink: 'syz.1.1199': attribute type 3 has an invalid length. [ 588.425435][ T5601] Bluetooth: hci3: Malformed Event: 0x13 [ 592.594831][T10038] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1209'. [ 592.948802][T10035] FAULT_INJECTION: forcing a failure. [ 592.948802][T10035] name failslab, interval 1, probability 0, space 0, times 0 [ 592.948905][T10035] CPU: 0 UID: 0 PID: 10035 Comm: syz.4.1210 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 592.948930][T10035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 592.948940][T10035] Call Trace: [ 592.948948][T10035] [ 592.948955][T10035] dump_stack_lvl+0xe8/0x150 [ 592.948987][T10035] should_fail_ex+0x46b/0x600 [ 592.949011][T10035] ? __d_alloc+0x37/0x6f0 [ 592.949032][T10035] should_failslab+0xa8/0x100 [ 592.949060][T10035] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 592.949085][T10035] ? __d_alloc+0x37/0x6f0 [ 592.949115][T10035] __d_alloc+0x37/0x6f0 [ 592.949140][T10035] d_alloc_pseudo+0x21/0xc0 [ 592.949162][T10035] alloc_path_pseudo+0x107/0x220 [ 592.949191][T10035] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 592.949214][T10035] ? reacquire_held_locks+0x117/0x1a0 [ 592.949249][T10035] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 592.949285][T10035] alloc_file_pseudo+0xa8/0x1e0 [ 592.949312][T10035] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 592.949348][T10035] anon_inode_getfile_fmode+0xb0/0x1c0 [ 592.949379][T10035] do_signalfd4+0x1a8/0x3f0 [ 592.949410][T10035] __x64_sys_signalfd+0x131/0x180 [ 592.949436][T10035] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 592.949466][T10035] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 592.949491][T10035] do_syscall_64+0x166/0x520 [ 592.949511][T10035] ? trace_irq_disable+0x3b/0x140 [ 592.949533][T10035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.949552][T10035] ? clear_bhb_loop+0x70/0xc0 [ 592.949574][T10035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.949592][T10035] RIP: 0033:0x7f559a51e159 [ 592.949610][T10035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.949625][T10035] RSP: 002b:00007f5598776028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 592.949646][T10035] RAX: ffffffffffffffda RBX: 00007f559a7a5fa0 RCX: 00007f559a51e159 [ 592.949660][T10035] RDX: 0000000000000008 RSI: 0000200000000000 RDI: ffffffffffffffff [ 592.949672][T10035] RBP: 00007f5598776090 R08: 0000000000000000 R09: 0000000000000000 [ 592.949684][T10035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.949695][T10035] R13: 00007f559a7a6038 R14: 00007f559a7a5fa0 R15: 00007ffde5cf2de8 [ 592.949725][T10035] [ 593.152336][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'. [ 593.152445][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'. [ 593.268125][ T37] kauditd_printk_skb: 230 callbacks suppressed [ 593.274475][ T37] audit: type=1326 audit(1788683033.187:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10042 comm="syz.5.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c2ae159 code=0x7ffc0000 [ 593.290487][ T37] audit: type=1326 audit(1788683033.197:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10042 comm="syz.5.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c2ae159 code=0x7ffc0000 [ 593.299985][ T37] audit: type=1326 audit(1788683033.217:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10042 comm="syz.5.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c2ae159 code=0x7ffc0000 [ 593.315110][ T37] audit: type=1326 audit(1788683033.227:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10042 comm="syz.5.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c2ae159 code=0x7ffc0000 [ 593.330976][ T37] audit: type=1326 audit(1788683033.237:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10042 comm="syz.5.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c2ae159 code=0x7ffc0000 [ 593.331583][ T37] audit: type=1326 audit(1788683033.237:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10042 comm="syz.5.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2d8c2ae159 code=0x7ffc0000 [ 593.331628][ T37] audit: type=1326 audit(1788683033.237:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10042 comm="syz.5.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c2ae159 code=0x7ffc0000 [ 593.331668][ T37] audit: type=1326 audit(1788683033.237:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10042 comm="syz.5.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c2ae159 code=0x7ffc0000 [ 593.333464][ T37] audit: type=1326 audit(1788683033.237:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10042 comm="syz.5.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c2ae159 code=0x7ffc0000 [ 593.334374][ T37] audit: type=1326 audit(1788683033.237:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10042 comm="syz.5.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c2ae159 code=0x7ffc0000 [ 593.831802][T10045] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1213'. [ 593.831847][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1213'. [ 595.115691][T10067] syz.5.1219 (10067): attempted to duplicate a private mapping with mremap. This is not supported. [ 600.098561][T10083] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1222'. [ 600.143517][T10082] Bluetooth: MGMT ver 1.23 [ 600.230339][ T5712] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 600.232614][ T9] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 600.232857][ T9] dvb_usb_dibusb_mb 5-1:255.14: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 600.232940][ T5727] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 600.233136][ T5727] dvb_usb_dibusb_mb 1-1:255.168: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 600.278620][ T9] usb 5-1: USB disconnect, device number 11 [ 600.305024][ T5712] dvb_usb_dibusb_mb 4-1:255.126: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 600.351729][ T5332] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 600.353776][ T5332] dvb_usb_dibusb_mb 2-1:255.126: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 600.822067][ T5712] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 600.822126][ T5332] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 600.823687][ T5727] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 600.830606][ T5332] usb 2-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 600.830639][ T5332] usb 2-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 602.035905][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 602.043003][T10103] usb usb8: usbfs: process 10103 (syz.0.1229) did not claim interface 0 before use [ 602.193157][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 602.248502][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 602.250036][ T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 602.253863][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 602.253901][ T9] usb 6-1: can't read configurations, error -71 [ 603.515927][T10115] tmpfs: Bad value for 'mpol' [ 603.905517][ T9632] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 604.068881][ T9632] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice= 1.00 [ 604.081285][ T9632] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.081316][ T9632] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 604.084339][ T9632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 604.084368][ T9632] usb 5-1: Product: syz [ 604.084384][ T9632] usb 5-1: Manufacturer: syz [ 604.127292][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 604.289661][ T9] usb 6-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 604.301338][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.305278][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.339029][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.339062][ T9] usb 6-1: Product: syz [ 604.339077][ T9] usb 6-1: Manufacturer: syz [ 604.339092][ T9] usb 6-1: SerialNumber: syz [ 604.424409][ T9] zaurus 6-1:1.0: probe with driver zaurus failed with error -22 [ 604.534239][T10121] netlink: set zone limit has 4 unknown bytes [ 604.623755][T10116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.637030][T10116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.677366][T10126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.689321][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.693760][T10126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.694053][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.736258][ T9] usb 6-1: USB disconnect, device number 5 [ 605.750869][ T8309] usb 5-1: USB disconnect, device number 12 [ 606.334929][T10135] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1237'. [ 608.969622][T10149] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1235'. [ 609.448986][T10154] FAULT_INJECTION: forcing a failure. [ 609.448986][T10154] name failslab, interval 1, probability 0, space 0, times 0 [ 609.449078][T10154] CPU: 1 UID: 0 PID: 10154 Comm: syz.1.1243 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 609.449102][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.449113][T10154] Call Trace: [ 609.449122][T10154] [ 609.449131][T10154] dump_stack_lvl+0xe8/0x150 [ 609.449170][T10154] should_fail_ex+0x46b/0x600 [ 609.449200][T10154] should_failslab+0xa8/0x100 [ 609.449234][T10154] __kmalloc_noprof+0xfb/0x790 [ 609.449260][T10154] ? do_sys_poll+0x2c4/0xf50 [ 609.449290][T10154] ? do_sys_poll+0x2c4/0xf50 [ 609.449327][T10154] do_sys_poll+0x2c4/0xf50 [ 609.449372][T10154] ? __lock_acquire+0x6df/0x2e40 [ 609.449398][T10154] ? __pfx_do_sys_poll+0x10/0x10 [ 609.449430][T10154] ? is_bpf_text_address+0x292/0x2b0 [ 609.449459][T10154] ? is_bpf_text_address+0x26/0x2b0 [ 609.449601][T10154] ? set_user_sigmask+0xcd/0x1c0 [ 609.449630][T10154] ? __pfx_set_user_sigmask+0x10/0x10 [ 609.449656][T10154] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 609.449695][T10154] __se_sys_ppoll+0x209/0x2b0 [ 609.449725][T10154] ? fput+0xa0/0xd0 [ 609.449757][T10154] ? __pfx___se_sys_ppoll+0x10/0x10 [ 609.449786][T10154] ? __pfx_ksys_write+0x10/0x10 [ 609.449817][T10154] ? __x64_sys_ppoll+0x20/0xc0 [ 609.449848][T10154] do_syscall_64+0x166/0x520 [ 609.449871][T10154] ? trace_irq_disable+0x3b/0x140 [ 609.449897][T10154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.449920][T10154] ? clear_bhb_loop+0x70/0xc0 [ 609.449946][T10154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.449968][T10154] RIP: 0033:0x7f673a33e159 [ 609.449988][T10154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.450007][T10154] RSP: 002b:00007f6738596028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 609.450031][T10154] RAX: ffffffffffffffda RBX: 00007f673a5c5fa0 RCX: 00007f673a33e159 [ 609.450047][T10154] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 609.450061][T10154] RBP: 00007f6738596090 R08: 0000000000000000 R09: 0000000000000000 [ 609.450075][T10154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.450088][T10154] R13: 00007f673a5c6038 R14: 00007f673a5c5fa0 R15: 00007ffc333ede48 [ 609.450123][T10154] [ 615.889648][ T37] kauditd_printk_skb: 241 callbacks suppressed [ 615.889746][ T37] audit: type=1326 audit(1788683055.797:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10179 comm="syz.3.1250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 615.889793][ T37] audit: type=1326 audit(1788683055.797:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10179 comm="syz.3.1250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 615.893287][ T37] audit: type=1326 audit(1788683055.797:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10179 comm="syz.3.1250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 615.893339][ T37] audit: type=1326 audit(1788683055.797:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10179 comm="syz.3.1250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 615.893383][ T37] audit: type=1326 audit(1788683055.797:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10179 comm="syz.3.1250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 615.893995][ T37] audit: type=1326 audit(1788683055.797:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10179 comm="syz.3.1250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 615.894039][ T37] audit: type=1326 audit(1788683055.797:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10179 comm="syz.3.1250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 615.897938][ T37] audit: type=1326 audit(1788683055.807:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10179 comm="syz.3.1250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 615.897997][ T37] audit: type=1326 audit(1788683055.807:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10179 comm="syz.3.1250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 615.898038][ T37] audit: type=1326 audit(1788683055.807:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10179 comm="syz.3.1250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 616.169295][T10185] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1255'. [ 616.241203][T10182] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1250'. [ 616.434788][ T1219] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.592420][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 616.682550][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 616.707074][T10196] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.1256'. [ 616.802702][T10198] FAULT_INJECTION: forcing a failure. [ 616.802702][T10198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.805671][T10198] CPU: 1 UID: 0 PID: 10198 Comm: syz.1.1258 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 616.805703][T10198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.805716][T10198] Call Trace: [ 616.805726][T10198] [ 616.805736][T10198] dump_stack_lvl+0xe8/0x150 [ 616.805775][T10198] should_fail_ex+0x46b/0x600 [ 616.805807][T10198] _copy_from_user+0x2d/0xb0 [ 616.805836][T10198] memdup_user_nul+0x66/0x110 [ 616.805859][T10198] event_trigger_write+0x6c/0x250 [ 616.805886][T10198] ? __pfx_event_trigger_write+0x10/0x10 [ 616.805911][T10198] vfs_write+0x29f/0xbb0 [ 616.805947][T10198] ? __pfx_vfs_write+0x10/0x10 [ 616.805974][T10198] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 616.806003][T10198] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 616.806027][T10198] ? mutex_lock_nested+0x152/0x1d0 [ 616.806057][T10198] ? fdget_pos+0x252/0x320 [ 616.806091][T10198] ksys_write+0x156/0x270 [ 616.806118][T10198] ? __pfx_ksys_write+0x10/0x10 [ 616.806166][T10198] do_syscall_64+0x166/0x520 [ 616.806192][T10198] ? trace_irq_disable+0x3b/0x140 [ 616.806217][T10198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.806240][T10198] ? clear_bhb_loop+0x70/0xc0 [ 616.806267][T10198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.806290][T10198] RIP: 0033:0x7f673a33e159 [ 616.806311][T10198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.806330][T10198] RSP: 002b:00007f6738596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 616.806356][T10198] RAX: ffffffffffffffda RBX: 00007f673a5c5fa0 RCX: 00007f673a33e159 [ 616.806372][T10198] RDX: 000000000000000e RSI: 0000200000000180 RDI: 0000000000000003 [ 616.806386][T10198] RBP: 00007f6738596090 R08: 0000000000000000 R09: 0000000000000000 [ 616.806400][T10198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.806414][T10198] R13: 00007f673a5c6038 R14: 00007f673a5c5fa0 R15: 00007ffc333ede48 [ 616.806451][T10198] [ 616.949142][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 616.954920][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 616.956279][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 617.831721][T10206] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 617.859870][T10206] CIFS mount error: No usable UNC path provided in device string! [ 617.859870][T10206] [ 617.860120][T10206] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 619.890379][ T5605] Bluetooth: hci5: command tx timeout [ 620.362271][ T1219] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.440272][T10213] EXT4-fs: error -4 creating inode table initialization thread [ 620.632871][T10213] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 621.081260][T10238] FAULT_INJECTION: forcing a failure. [ 621.081260][T10238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.081363][T10238] CPU: 1 UID: 0 PID: 10238 Comm: syz.3.1268 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 621.081390][T10238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 621.081403][T10238] Call Trace: [ 621.081412][T10238] [ 621.081421][T10238] dump_stack_lvl+0xe8/0x150 [ 621.081461][T10238] should_fail_ex+0x46b/0x600 [ 621.081491][T10238] strncpy_from_user+0x36/0x2c0 [ 621.081540][T10238] do_getname+0x77/0x250 [ 621.081576][T10238] do_sys_openat2+0xcc/0x200 [ 621.081611][T10238] ? __pfx_do_sys_openat2+0x10/0x10 [ 621.081643][T10238] ? ksys_write+0x248/0x270 [ 621.081677][T10238] __x64_sys_openat+0x138/0x170 [ 621.081713][T10238] do_syscall_64+0x166/0x520 [ 621.081741][T10238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.081765][T10238] ? clear_bhb_loop+0x70/0xc0 [ 621.081790][T10238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.081811][T10238] RIP: 0033:0x7f2d3215e159 [ 621.081832][T10238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.081851][T10238] RSP: 002b:00007f2d30374028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 621.081876][T10238] RAX: ffffffffffffffda RBX: 00007f2d323e6180 RCX: 00007f2d3215e159 [ 621.081891][T10238] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 621.081906][T10238] RBP: 00007f2d30374090 R08: 0000000000000000 R09: 0000000000000000 [ 621.081920][T10238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.081934][T10238] R13: 00007f2d323e6218 R14: 00007f2d323e6180 R15: 00007fffbe952fc8 [ 621.081968][T10238] [ 622.059180][T10243] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1266'. [ 622.344323][ T5605] Bluetooth: hci5: command tx timeout [ 622.575843][ T1219] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.391912][ T5605] Bluetooth: hci5: command tx timeout [ 624.882592][ T37] kauditd_printk_skb: 236 callbacks suppressed [ 624.882750][ T37] audit: type=1326 audit(1788683064.787:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10255 comm="syz.0.1273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 624.931307][ T37] audit: type=1326 audit(1788683064.837:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10255 comm="syz.0.1273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 624.976751][ T37] audit: type=1326 audit(1788683064.877:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10255 comm="syz.0.1273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 625.012876][ T37] audit: type=1326 audit(1788683064.917:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10255 comm="syz.0.1273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 625.049185][ T37] audit: type=1326 audit(1788683064.957:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10255 comm="syz.0.1273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 625.084146][ T37] audit: type=1326 audit(1788683064.987:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10255 comm="syz.0.1273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 625.128762][ T37] audit: type=1326 audit(1788683065.037:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10255 comm="syz.0.1273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 625.148356][ T37] audit: type=1326 audit(1788683065.057:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10255 comm="syz.0.1273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 625.210294][ T37] audit: type=1326 audit(1788683065.117:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10255 comm="syz.0.1273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 625.215518][ T37] audit: type=1326 audit(1788683065.117:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10255 comm="syz.0.1273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fded6dedec2 code=0x7ffc0000 [ 625.694831][ T4963] udevd[4963]: worker [9156] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 626.041495][T10258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1273'. [ 626.466808][ T5605] Bluetooth: hci5: command tx timeout [ 627.976844][ T1219] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.032367][T10269] FAULT_INJECTION: forcing a failure. [ 628.032367][T10269] name failslab, interval 1, probability 0, space 0, times 0 [ 628.040896][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 628.054746][T10269] CPU: 1 UID: 0 PID: 10269 Comm: syz.3.1270 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 628.054780][T10269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 628.054793][T10269] Call Trace: [ 628.054802][T10269] [ 628.054813][T10269] dump_stack_lvl+0xe8/0x150 [ 628.054853][T10269] should_fail_ex+0x46b/0x600 [ 628.054882][T10269] should_failslab+0xa8/0x100 [ 628.054911][T10269] __kmalloc_noprof+0xfb/0x790 [ 628.054933][T10269] ? alloc_pipe_info+0x1f9/0x4c0 [ 628.054956][T10269] ? alloc_pipe_info+0x1f9/0x4c0 [ 628.054988][T10269] alloc_pipe_info+0x1f9/0x4c0 [ 628.055018][T10269] splice_direct_to_actor+0xa52/0xcc0 [ 628.055044][T10269] ? __lock_acquire+0x6df/0x2e40 [ 628.055076][T10269] ? kstrtouint+0x6e/0xe0 [ 628.055117][T10269] ? __lock_acquire+0x6df/0x2e40 [ 628.055145][T10269] ? __pfx_direct_splice_actor+0x10/0x10 [ 628.055166][T10269] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 628.055198][T10269] do_splice_direct+0x19b/0x2a0 [ 628.055223][T10269] ? __pfx_do_splice_direct+0x10/0x10 [ 628.055245][T10269] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 628.055271][T10269] ? bpf_lsm_file_permission+0x9/0x20 [ 628.055291][T10269] ? security_file_permission+0x75/0x260 [ 628.055314][T10269] ? rw_verify_area+0x209/0x4d0 [ 628.055341][T10269] do_sendfile+0x540/0x7e0 [ 628.055382][T10269] ? __pfx_do_sendfile+0x10/0x10 [ 628.055437][T10269] __se_sys_sendfile64+0x144/0x1a0 [ 628.055471][T10269] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 628.055513][T10269] do_syscall_64+0x166/0x520 [ 628.055540][T10269] ? trace_irq_disable+0x3b/0x140 [ 628.055566][T10269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.055589][T10269] ? clear_bhb_loop+0x70/0xc0 [ 628.055614][T10269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.055637][T10269] RIP: 0033:0x7f2d3215e159 [ 628.055658][T10269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.055676][T10269] RSP: 002b:00007f2d303b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 628.055702][T10269] RAX: ffffffffffffffda RBX: 00007f2d323e5fa0 RCX: 00007f2d3215e159 [ 628.055718][T10269] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 628.055731][T10269] RBP: 00007f2d303b6090 R08: 0000000000000000 R09: 0000000000000000 [ 628.055746][T10269] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.055760][T10269] R13: 00007f2d323e6038 R14: 00007f2d323e5fa0 R15: 00007fffbe952fc8 [ 628.055795][T10269] [ 629.671436][T10277] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1278'. [ 629.898510][ T37] kauditd_printk_skb: 217 callbacks suppressed [ 629.898600][ T37] audit: type=1326 audit(1788683069.817:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10276 comm="syz.4.1278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559a51e159 code=0x7ffc0000 [ 629.898687][ T37] audit: type=1326 audit(1788683069.817:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10276 comm="syz.4.1278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559a51e159 code=0x7ffc0000 [ 629.927397][ T37] audit: type=1326 audit(1788683069.837:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10276 comm="syz.4.1278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f559a51e159 code=0x7ffc0000 [ 629.927450][ T37] audit: type=1326 audit(1788683069.837:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10276 comm="syz.4.1278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559a51e159 code=0x7ffc0000 [ 629.927490][ T37] audit: type=1326 audit(1788683069.837:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10276 comm="syz.4.1278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559a51e159 code=0x7ffc0000 [ 629.935585][ T37] audit: type=1326 audit(1788683069.837:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10276 comm="syz.4.1278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f559a51e159 code=0x7ffc0000 [ 629.935639][ T37] audit: type=1326 audit(1788683069.837:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10276 comm="syz.4.1278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559a51e159 code=0x7ffc0000 [ 629.935679][ T37] audit: type=1326 audit(1788683069.837:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10276 comm="syz.4.1278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559a51e159 code=0x7ffc0000 [ 629.942484][ T37] audit: type=1326 audit(1788683069.847:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10276 comm="syz.4.1278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f559a51e159 code=0x7ffc0000 [ 629.942538][ T37] audit: type=1326 audit(1788683069.847:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10276 comm="syz.4.1278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559a51e159 code=0x7ffc0000 [ 630.510337][T10287] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1280'. [ 631.102190][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.102340][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.292332][T10190] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.304971][T10190] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.357892][T10190] bridge_slave_0: entered allmulticast mode [ 632.379207][T10190] bridge_slave_0: entered promiscuous mode [ 632.457026][T10190] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.709967][T10190] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.278965][T10190] bridge_slave_1: entered allmulticast mode [ 634.206992][T10190] bridge_slave_1: entered promiscuous mode [ 635.022166][ T37] kauditd_printk_skb: 84 callbacks suppressed [ 635.022266][ T37] audit: type=1326 audit(1788683074.507:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10306 comm="syz.0.1285" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fded6daae51 code=0x7ffc0000 [ 635.022342][ T37] audit: type=1326 audit(1788683074.507:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10306 comm="syz.0.1285" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fded6deef49 code=0x7ffc0000 [ 635.022382][ T37] audit: type=1326 audit(1788683074.507:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10306 comm="syz.0.1285" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fded6daaebb code=0x7ffc0000 [ 635.022422][ T37] audit: type=1326 audit(1788683074.507:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10306 comm="syz.0.1285" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 635.022462][ T37] audit: type=1326 audit(1788683074.507:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10306 comm="syz.0.1285" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fded6daa5ac code=0x7ffc0000 [ 635.022527][ T37] audit: type=1326 audit(1788683074.507:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10306 comm="syz.0.1285" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fded6daa60e code=0x7ffc0000 [ 635.022568][ T37] audit: type=1326 audit(1788683074.507:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10306 comm="syz.0.1285" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 635.022609][ T37] audit: type=1326 audit(1788683074.507:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10306 comm="syz.0.1285" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fded6deddeb code=0x7ffc0000 [ 635.022648][ T37] audit: type=1326 audit(1788683074.507:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10306 comm="syz.0.1285" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 635.022687][ T37] audit: type=1326 audit(1788683074.507:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10306 comm="syz.0.1285" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 635.118795][T10314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1285'. [ 635.124884][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 636.265351][ T7353] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 636.646982][ T7353] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 636.657818][ T7353] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 636.657859][ T7353] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 636.691369][ T7353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.699887][ T7353] usb 5-1: Product: syz [ 636.699912][ T7353] usb 5-1: Manufacturer: syz [ 636.699927][ T7353] usb 5-1: SerialNumber: syz [ 636.735946][ T1219] bridge_slave_1: left allmulticast mode [ 636.736168][ T1219] bridge_slave_1: left promiscuous mode [ 636.737311][ T1219] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.848604][ T7353] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 636.976891][ T7353] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 636.976891][ T7353] Please send a copy of this message to and [ 637.620973][ T1219] bridge_slave_0: left allmulticast mode [ 637.621029][ T1219] bridge_slave_0: left promiscuous mode [ 637.623340][ T1219] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.684018][ T7353] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 637.754324][ T7353] usb 5-1: USB disconnect, device number 13 [ 638.836123][ T1219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.868986][T10347] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1291'. [ 638.884336][ T1219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.901177][ T1219] bond0 (unregistering): Released all slaves [ 639.049683][T10349] input: syz0 as /devices/virtual/input/input14 [ 639.141134][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 639.953522][T10190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.089935][T10190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.173209][T10349] netlink: 'syz.4.1292': attribute type 13 has an invalid length. [ 641.171326][T10190] team0: Port device team_slave_0 added [ 641.217538][T10190] team0: Port device team_slave_1 added [ 641.433445][T10365] netlink: 'syz.4.1296': attribute type 10 has an invalid length. [ 641.560215][T10365] syz_tun: entered promiscuous mode [ 641.623816][T10365] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 642.463809][ T37] kauditd_printk_skb: 134 callbacks suppressed [ 642.464213][ T37] audit: type=1326 audit(1788683082.377:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.0.1298" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 642.464305][ T37] audit: type=1326 audit(1788683082.377:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.0.1298" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 642.464694][ T37] audit: type=1326 audit(1788683082.377:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.0.1298" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fded6daa5ac code=0x7ffc0000 [ 642.464979][ T37] audit: type=1326 audit(1788683082.377:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.0.1298" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fded6daa60e code=0x7ffc0000 [ 642.486961][ T37] audit: type=1326 audit(1788683082.377:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.0.1298" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fded6deddeb code=0x7ffc0000 [ 642.487524][ T37] audit: type=1326 audit(1788683082.397:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.0.1298" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 642.505366][ T9853] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 642.655414][ T9853] usb 5-1: Invalid ep0 maxpacket: 64 [ 642.682342][ T37] audit: type=1326 audit(1788683082.587:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.0.1298" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 642.682454][ T37] audit: type=1326 audit(1788683082.587:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.0.1298" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 642.741140][ T37] audit: type=1326 audit(1788683082.647:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.0.1298" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 642.741262][ T37] audit: type=1326 audit(1788683082.647:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.0.1298" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 642.795277][ T9853] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 643.056938][T10190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.057009][T10190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.057041][T10190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.933365][ T9853] usb 5-1: Invalid ep0 maxpacket: 64 [ 643.934077][ T9853] usb usb5-port1: attempt power cycle [ 646.938343][T10190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.945510][T10190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.945547][T10190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.552386][ T37] kauditd_printk_skb: 125 callbacks suppressed [ 647.552472][ T37] audit: type=1326 audit(1788683087.467:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.0.1306" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 647.552563][ T37] audit: type=1326 audit(1788683087.467:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.0.1306" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 647.616250][ T37] audit: type=1326 audit(1788683087.527:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.0.1306" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 647.641711][ T37] audit: type=1326 audit(1788683087.527:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.0.1306" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 647.685924][ T37] audit: type=1326 audit(1788683087.547:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.0.1306" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 647.686164][ T37] audit: type=1326 audit(1788683087.597:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.0.1306" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 647.686216][ T37] audit: type=1326 audit(1788683087.597:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.0.1306" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 647.687052][ T37] audit: type=1326 audit(1788683087.547:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.0.1306" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 647.687098][ T37] audit: type=1326 audit(1788683087.597:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.0.1306" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 647.687138][ T37] audit: type=1326 audit(1788683087.597:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.0.1306" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded6dee159 code=0x7ffc0000 [ 648.121018][T10190] hsr_slave_0: entered promiscuous mode [ 648.322842][T10190] hsr_slave_1: entered promiscuous mode [ 648.326201][T10190] debugfs: 'hsr0' already exists in 'hsr' [ 648.326231][T10190] Cannot create hsr debugfs directory [ 648.449985][T10408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1306'. [ 649.880033][T10420] FAULT_INJECTION: forcing a failure. [ 649.880033][T10420] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 649.885053][T10420] CPU: 1 UID: 0 PID: 10420 Comm: syz.4.1307 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 649.885086][T10420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 649.885100][T10420] Call Trace: [ 649.885109][T10420] [ 649.885119][T10420] dump_stack_lvl+0xe8/0x150 [ 649.885162][T10420] should_fail_ex+0x46b/0x600 [ 649.885194][T10420] prepare_alloc_pages+0x223/0x650 [ 649.885264][T10420] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 649.885299][T10420] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 649.885334][T10420] ? __pfx_policy_nodemask+0x10/0x10 [ 649.885371][T10420] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 649.885410][T10420] alloc_pages_mpol+0xd4/0x280 [ 649.885447][T10420] alloc_pages_noprof+0xd2/0x2f0 [ 649.885482][T10420] get_free_pages_noprof+0xf/0x80 [ 649.885512][T10420] __kasan_populate_vmalloc+0x38/0x1c0 [ 649.885539][T10420] ? rt_spin_unlock+0x165/0x200 [ 649.885573][T10420] alloc_vmap_area+0xd1a/0x1420 [ 649.885613][T10420] ? __pfx_alloc_vmap_area+0x10/0x10 [ 649.885640][T10420] ? __get_vm_area_node+0x155/0x2f0 [ 649.885669][T10420] __get_vm_area_node+0x200/0x2f0 [ 649.885701][T10420] __vmalloc_node_range_noprof+0x343/0x1540 [ 649.885726][T10420] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 649.885785][T10420] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 649.885809][T10420] ? kernel_text_address+0xa5/0xe0 [ 649.885841][T10420] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 649.885869][T10420] __vmalloc_noprof+0xd2/0x120 [ 649.885894][T10420] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 649.885927][T10420] bpf_prog_alloc_no_stats+0x47/0x560 [ 649.885955][T10420] ? bpf_prog_alloc+0x2a/0x1a0 [ 649.885986][T10420] bpf_prog_alloc+0x3c/0x1a0 [ 649.886019][T10420] bpf_prog_load+0x7f8/0x1c20 [ 649.886061][T10420] ? __pfx_bpf_prog_load+0x10/0x10 [ 649.886119][T10420] __sys_bpf+0xd0d/0xd90 [ 649.886158][T10420] ? __pfx___sys_bpf+0x10/0x10 [ 649.886190][T10420] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 649.886228][T10420] ? rt_mutex_slowunlock+0x219/0x460 [ 649.886281][T10420] ? ksys_write+0x248/0x270 [ 649.886309][T10420] ? __pfx_ksys_write+0x10/0x10 [ 649.886339][T10420] __x64_sys_bpf+0xba/0xd0 [ 649.886369][T10420] do_syscall_64+0x166/0x520 [ 649.886393][T10420] ? trace_irq_disable+0x3b/0x140 [ 649.886420][T10420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.886444][T10420] ? clear_bhb_loop+0x70/0xc0 [ 649.886471][T10420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.886492][T10420] RIP: 0033:0x7f559a51e159 [ 649.886513][T10420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.886532][T10420] RSP: 002b:00007f5598776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 649.886557][T10420] RAX: ffffffffffffffda RBX: 00007f559a7a5fa0 RCX: 00007f559a51e159 [ 649.886574][T10420] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 649.886588][T10420] RBP: 00007f5598776090 R08: 0000000000000000 R09: 0000000000000000 [ 649.886602][T10420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.886615][T10420] R13: 00007f559a7a6038 R14: 00007f559a7a5fa0 R15: 00007ffde5cf2de8 [ 649.886649][T10420] [ 649.913502][T10420] syz.4.1307: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 649.913590][T10420] CPU: 1 UID: 0 PID: 10420 Comm: syz.4.1307 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 649.913615][T10420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 649.913628][T10420] Call Trace: [ 649.913636][T10420] [ 649.913646][T10420] dump_stack_lvl+0xe8/0x150 [ 649.913683][T10420] warn_alloc+0x24d/0x270 [ 649.913712][T10420] ? lockdep_hardirqs_on+0x7b/0x110 [ 649.913741][T10420] ? __pfx_warn_alloc+0x10/0x10 [ 649.913768][T10420] ? kfree+0x1c5/0x6d0 [ 649.913799][T10420] ? __get_vm_area_node+0x219/0x2f0 [ 649.913832][T10420] __vmalloc_node_range_noprof+0x36b/0x1540 [ 649.913890][T10420] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 649.913918][T10420] ? kernel_text_address+0xa5/0xe0 [ 649.913949][T10420] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 649.913979][T10420] __vmalloc_noprof+0xd2/0x120 [ 649.914004][T10420] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 649.914036][T10420] bpf_prog_alloc_no_stats+0x47/0x560 [ 649.914065][T10420] ? bpf_prog_alloc+0x2a/0x1a0 [ 649.914097][T10420] bpf_prog_alloc+0x3c/0x1a0 [ 649.914130][T10420] bpf_prog_load+0x7f8/0x1c20 [ 649.914174][T10420] ? __pfx_bpf_prog_load+0x10/0x10 [ 649.914239][T10420] __sys_bpf+0xd0d/0xd90 [ 649.914278][T10420] ? __pfx___sys_bpf+0x10/0x10 [ 649.914310][T10420] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 649.914341][T10420] ? rt_mutex_slowunlock+0x219/0x460 [ 649.914394][T10420] ? ksys_write+0x248/0x270 [ 649.914421][T10420] ? __pfx_ksys_write+0x10/0x10 [ 649.914451][T10420] __x64_sys_bpf+0xba/0xd0 [ 649.914482][T10420] do_syscall_64+0x166/0x520 [ 649.914506][T10420] ? trace_irq_disable+0x3b/0x140 [ 649.914532][T10420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.914554][T10420] ? clear_bhb_loop+0x70/0xc0 [ 649.914581][T10420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.914602][T10420] RIP: 0033:0x7f559a51e159 [ 649.914623][T10420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.914642][T10420] RSP: 002b:00007f5598776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 649.914664][T10420] RAX: ffffffffffffffda RBX: 00007f559a7a5fa0 RCX: 00007f559a51e159 [ 649.914680][T10420] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 649.914694][T10420] RBP: 00007f5598776090 R08: 0000000000000000 R09: 0000000000000000 [ 649.914707][T10420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.914721][T10420] R13: 00007f559a7a6038 R14: 00007f559a7a5fa0 R15: 00007ffde5cf2de8 [ 649.914757][T10420] [ 649.914766][T10420] Mem-Info: [ 649.914774][T10420] active_anon:2542 inactive_anon:9945 isolated_anon:0 [ 649.914774][T10420] active_file:29631 inactive_file:38407 isolated_file:0 [ 649.914774][T10420] unevictable:0 dirty:226 writeback:21 [ 649.914774][T10420] slab_reclaimable:12809 slab_unreclaimable:106199 [ 649.914774][T10420] mapped:41038 shmem:6268 pagetables:1402 [ 649.914774][T10420] sec_pagetables:0 bounce:0 [ 649.914774][T10420] kernel_misc_reclaimable:0 [ 649.914774][T10420] free:1263963 free_pcp:3747 free_cma:0 [ 649.914832][T10420] Node 0 active_anon:10168kB inactive_anon:39780kB active_file:118148kB inactive_file:153628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163984kB dirty:904kB writeback:84kB shmem:25072kB kernel_stack:15396kB pagetables:5472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 649.914886][T10420] Node 1 active_anon:0kB inactive_anon:0kB active_file:376kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 649.914936][T10420] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 649.944297][T10420] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 649.944345][T10420] Node 0 DMA32 free:1110744kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12168kB inactive_anon:37780kB active_file:118148kB inactive_file:153628kB unevictable:0kB writepending:888kB zspages:0kB present:3129332kB managed:2558864kB mlocked:0kB bounce:0kB free_pcp:14652kB local_pcp:12548kB free_cma:0kB [ 649.944411][T10420] lowmem_reserve[]: 0 0 1 1 1 [ 649.944449][T10420] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1816kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 649.944509][T10420] lowmem_reserve[]: 0 0 0 0 0 [ 649.944547][T10420] Node 1 Normal free:3929620kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:376kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 649.944610][T10420] lowmem_reserve[]: 0 0 0 0 0 [ 649.944648][T10420] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 649.944776][T10420] Node 0 DMA32: 1298*4kB (ME) 876*8kB (UME) 605*16kB (UME) 591*32kB (UM) 252*64kB (UME) 310*128kB (UME) 165*256kB (UME) 48*512kB (UME) 21*1024kB (UM) 6*2048kB (UM) 223*4096kB (UM) = 1110616kB [ 649.944946][T10420] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 649.945069][T10420] Node 1 Normal: 3*4kB (UM) 1*8kB (U) 10*16kB (UM) 7*32kB (U) 8*64kB (UM) 3*128kB (U) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 957*4096kB (M) = 3929620kB [ 649.945459][T10420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 649.945478][T10420] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 649.945496][T10420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 649.945513][T10420] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 649.945530][T10420] 74302 total pagecache pages [ 649.945540][T10420] 0 pages in swap cache [ 649.945548][T10420] Free swap = 124996kB [ 649.945556][T10420] Total swap = 124996kB [ 649.945565][T10420] 2097051 pages RAM [ 649.945573][T10420] 0 pages HighMem/MovableOnly [ 649.945580][T10420] 425265 pages reserved [ 649.945588][T10420] 0 pages cma reserved [ 652.093445][T10442] sda1: Can't mount, would change RO state [ 653.157462][T10446] netlink: 'syz.4.1313': attribute type 12 has an invalid length. [ 653.158562][T10446] netlink: 'syz.4.1313': attribute type 29 has an invalid length. [ 653.158582][T10446] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1313'. [ 653.158612][T10446] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1313'. [ 653.198733][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 653.925210][T10468] Invalid ELF header magic: != ELF [ 656.152853][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4 [ 656.348818][T10190] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 657.595849][T10190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 657.977525][ T1219] hsr_slave_0: left promiscuous mode [ 658.059291][ T1219] hsr_slave_1: left promiscuous mode [ 658.074402][ T1219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.074743][ T1219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.222363][ T1219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.222458][ T1219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.854978][ T1219] veth1_macvtap: left promiscuous mode [ 659.151089][ T1219] veth0_macvtap: left promiscuous mode [ 659.152906][ T1219] veth1_vlan: left promiscuous mode [ 659.177867][ T1219] veth0_vlan: left promiscuous mode [ 659.275079][T10529] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1329'. [ 660.868220][ T1219] team0 (unregistering): Port device team_slave_1 removed [ 660.918618][ T1219] team0 (unregistering): Port device team_slave_0 removed [ 661.378901][T10535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.381581][T10535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.420962][T10190] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 661.664487][T10190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 661.682375][ T5727] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 661.685537][ T5727] dvb_usb_dibusb_mb 1-1:255.126: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 661.716169][ T5712] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 661.734720][ T5712] dvb_usb_dibusb_mb 4-1:255.43: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 661.781697][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3 [ 661.790668][T10190] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 661.812641][ T5332] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 661.812977][ T5332] dvb_usb_dibusb_mb 2-1:255.43: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 662.228870][ T5712] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 662.231226][ T5727] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 662.243046][ T5332] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 662.250555][ T5727] usb 1-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 662.250611][ T5727] usb 1-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 663.201415][T10190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 663.363963][T10190] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 663.521089][T10190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 664.598096][T10190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.854163][T10190] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.864909][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.891080][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.047307][T10585] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1341'. [ 665.458670][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.466129][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.724360][T10190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.015059][ T37] kauditd_printk_skb: 152 callbacks suppressed [ 668.023477][ T37] audit: type=1326 audit(1788683107.917:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10617 comm="syz.3.1346" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 668.025390][ T37] audit: type=1326 audit(1788683107.927:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10617 comm="syz.3.1346" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 668.031334][ T37] audit: type=1326 audit(1788683107.937:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10617 comm="syz.3.1346" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 668.031388][ T37] audit: type=1326 audit(1788683107.937:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10617 comm="syz.3.1346" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 668.031430][ T37] audit: type=1326 audit(1788683107.937:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10617 comm="syz.3.1346" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 668.033438][ T37] audit: type=1326 audit(1788683107.937:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10617 comm="syz.3.1346" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 668.033922][ T37] audit: type=1326 audit(1788683107.937:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10617 comm="syz.3.1346" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 668.034336][ T37] audit: type=1326 audit(1788683107.937:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10617 comm="syz.3.1346" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 668.037385][ T37] audit: type=1326 audit(1788683107.947:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10617 comm="syz.3.1346" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 668.038700][ T37] audit: type=1326 audit(1788683107.947:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10617 comm="syz.3.1346" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3215e159 code=0x7ffc0000 [ 668.433772][T10626] FAULT_INJECTION: forcing a failure. [ 668.433772][T10626] name failslab, interval 1, probability 0, space 0, times 0 [ 668.447015][T10626] CPU: 1 UID: 0 PID: 10626 Comm: syz.1.1348 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 668.447049][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 668.447062][T10626] Call Trace: [ 668.447071][T10626] [ 668.447080][T10626] dump_stack_lvl+0xe8/0x150 [ 668.447118][T10626] should_fail_ex+0x46b/0x600 [ 668.447148][T10626] should_failslab+0xa8/0x100 [ 668.447179][T10626] ? anon_vma_clone+0x3f3/0x9f0 [ 668.447205][T10626] kmem_cache_alloc_noprof+0x9e/0x690 [ 668.447231][T10626] ? __pfx_mas_preallocate+0x10/0x10 [ 668.447257][T10626] ? anon_vma_clone+0x3f3/0x9f0 [ 668.447290][T10626] anon_vma_clone+0x3f3/0x9f0 [ 668.447325][T10626] __split_vma+0x3d8/0xa00 [ 668.447351][T10626] ? __pfx___split_vma+0x10/0x10 [ 668.447380][T10626] ? can_vma_merge_left+0x15f/0x510 [ 668.447405][T10626] vma_modify+0x9c4/0x2060 [ 668.447449][T10626] vma_modify_flags+0x2a4/0x3c0 [ 668.447474][T10626] ? __pfx_vma_modify_flags+0x10/0x10 [ 668.447494][T10626] ? reacquire_held_locks+0x117/0x1a0 [ 668.447545][T10626] mlock_fixup+0x40f/0x940 [ 668.447569][T10626] ? __pfx_mlock_fixup+0x10/0x10 [ 668.447588][T10626] ? mas_find+0x6d9/0xcb0 [ 668.447615][T10626] apply_vma_lock_flags+0x350/0x4a0 [ 668.447636][T10626] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 668.447670][T10626] ? do_mlock+0x169/0x730 [ 668.447688][T10626] do_mlock+0x54d/0x730 [ 668.447703][T10626] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 668.447732][T10626] ? __pfx_do_mlock+0x10/0x10 [ 668.447747][T10626] ? fput+0xa0/0xd0 [ 668.447769][T10626] ? ksys_write+0x248/0x270 [ 668.447789][T10626] ? __pfx_ksys_write+0x10/0x10 [ 668.447813][T10626] __x64_sys_mlock+0x77/0xa0 [ 668.447837][T10626] do_syscall_64+0x166/0x520 [ 668.447855][T10626] ? trace_irq_disable+0x3b/0x140 [ 668.447879][T10626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.447895][T10626] ? clear_bhb_loop+0x70/0xc0 [ 668.447915][T10626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.447931][T10626] RIP: 0033:0x7f673a33e159 [ 668.447948][T10626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.447962][T10626] RSP: 002b:00007f6738596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 668.447981][T10626] RAX: ffffffffffffffda RBX: 00007f673a5c5fa0 RCX: 00007f673a33e159 [ 668.447993][T10626] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 668.448004][T10626] RBP: 00007f6738596090 R08: 0000000000000000 R09: 0000000000000000 [ 668.448015][T10626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.448025][T10626] R13: 00007f673a5c6038 R14: 00007f673a5c5fa0 R15: 00007ffc333ede48 [ 668.448051][T10626] [ 668.448768][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 669.013497][T10632] FAULT_INJECTION: forcing a failure. [ 669.013497][T10632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.031765][T10632] CPU: 1 UID: 0 PID: 10632 Comm: syz.4.1350 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 669.031798][T10632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 669.031811][T10632] Call Trace: [ 669.031820][T10632] [ 669.031829][T10632] dump_stack_lvl+0xe8/0x150 [ 669.031869][T10632] should_fail_ex+0x46b/0x600 [ 669.031899][T10632] _copy_from_user+0x2d/0xb0 [ 669.031929][T10632] __copy_msghdr+0x390/0x590 [ 669.031966][T10632] ___sys_sendmsg+0x213/0x360 [ 669.032003][T10632] ? __lock_acquire+0x6df/0x2e40 [ 669.032034][T10632] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.032101][T10632] ? __fget_files+0x2a/0x420 [ 669.032123][T10632] ? __fget_files+0x3a8/0x420 [ 669.032156][T10632] __x64_sys_sendmsg+0x1b7/0x290 [ 669.032188][T10632] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 669.032241][T10632] do_syscall_64+0x166/0x520 [ 669.032266][T10632] ? trace_irq_disable+0x3b/0x140 [ 669.032291][T10632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.032311][T10632] ? clear_bhb_loop+0x70/0xc0 [ 669.032335][T10632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.032359][T10632] RIP: 0033:0x7f559a51e159 [ 669.032379][T10632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.032396][T10632] RSP: 002b:00007f5598776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.032418][T10632] RAX: ffffffffffffffda RBX: 00007f559a7a5fa0 RCX: 00007f559a51e159 [ 669.032432][T10632] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000003 [ 669.032446][T10632] RBP: 00007f5598776090 R08: 0000000000000000 R09: 0000000000000000 [ 669.032459][T10632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.032472][T10632] R13: 00007f559a7a6038 R14: 00007f559a7a5fa0 R15: 00007ffde5cf2de8 [ 669.032505][T10632] [ 670.664599][T10190] veth0_vlan: entered promiscuous mode [ 670.841825][T10190] veth1_vlan: entered promiscuous mode [ 671.064943][T10190] veth0_macvtap: entered promiscuous mode [ 671.079536][T10190] veth1_macvtap: entered promiscuous mode [ 671.214197][T10190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.249785][T10190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.858688][T10662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1359'. [ 672.575022][T10666] FAULT_INJECTION: forcing a failure. [ 672.575022][T10666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.583374][T10666] CPU: 1 UID: 0 PID: 10666 Comm: syz.3.1360 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 672.583408][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.583422][T10666] Call Trace: [ 672.583431][T10666] [ 672.583441][T10666] dump_stack_lvl+0xe8/0x150 [ 672.583480][T10666] should_fail_ex+0x46b/0x600 [ 672.583512][T10666] _copy_to_user+0x31/0xb0 [ 672.583542][T10666] simple_read_from_buffer+0xe1/0x170 [ 672.583572][T10666] proc_fail_nth_read+0x1be/0x230 [ 672.583605][T10666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 672.583633][T10666] ? rw_verify_area+0x250/0x4d0 [ 672.583659][T10666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 672.583683][T10666] vfs_read+0x219/0xa90 [ 672.583716][T10666] ? __pfx_vfs_read+0x10/0x10 [ 672.583742][T10666] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 672.583772][T10666] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 672.583796][T10666] ? mutex_lock_nested+0x152/0x1d0 [ 672.583826][T10666] ? fdget_pos+0x252/0x320 [ 672.583857][T10666] ksys_read+0x156/0x270 [ 672.583883][T10666] ? __pfx_ksys_read+0x10/0x10 [ 672.583921][T10666] do_syscall_64+0x166/0x520 [ 672.583945][T10666] ? trace_irq_disable+0x3b/0x140 [ 672.583981][T10666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.584003][T10666] ? clear_bhb_loop+0x70/0xc0 [ 672.584030][T10666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.584052][T10666] RIP: 0033:0x7f2d3211e98e [ 672.584074][T10666] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 672.584092][T10666] RSP: 002b:00007f2d303b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 672.584118][T10666] RAX: ffffffffffffffda RBX: 00007f2d303b66c0 RCX: 00007f2d3211e98e [ 672.584134][T10666] RDX: 000000000000000f RSI: 00007f2d303b60a0 RDI: 0000000000000003 [ 672.584148][T10666] RBP: 00007f2d303b6090 R08: 0000000000000000 R09: 0000000000000000 [ 672.584161][T10666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.584175][T10666] R13: 00007f2d323e6038 R14: 00007f2d323e5fa0 R15: 00007fffbe952fc8 [ 672.584211][T10666] [ 673.892102][ T1057] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.513263][ T8459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.513354][ T8459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.622171][ T1219] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.623213][ T1219] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.630349][ T1219] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.096938][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.097023][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.456611][T10716] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1371'. [ 676.500873][ T5601] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 676.875506][ T5601] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 676.941840][ T5601] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 676.951012][ T5601] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 676.976775][ T5601] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 677.609180][T10725] FAULT_INJECTION: forcing a failure. [ 677.609180][T10725] name failslab, interval 1, probability 0, space 0, times 0 [ 677.625646][T10725] CPU: 1 UID: 0 PID: 10725 Comm: syz.4.1374 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 677.625680][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 677.625693][T10725] Call Trace: [ 677.625702][T10725] [ 677.625712][T10725] dump_stack_lvl+0xe8/0x150 [ 677.625752][T10725] should_fail_ex+0x46b/0x600 [ 677.625784][T10725] should_failslab+0xa8/0x100 [ 677.625818][T10725] __kmalloc_noprof+0xfb/0x790 [ 677.625845][T10725] ? tomoyo_encode+0x2ad/0x570 [ 677.625870][T10725] ? tomoyo_encode+0x2ad/0x570 [ 677.625905][T10725] tomoyo_encode+0x2ad/0x570 [ 677.625938][T10725] tomoyo_realpath_from_path+0x5fa/0x640 [ 677.625978][T10725] ? tomoyo_path_number_perm+0x219/0x5f0 [ 677.626001][T10725] tomoyo_path_number_perm+0x246/0x5f0 [ 677.626027][T10725] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 677.626053][T10725] ? sb_end_write+0xe8/0x190 [ 677.626083][T10725] ? vfs_write+0x9e0/0xbb0 [ 677.626115][T10725] ? hook_file_ioctl+0x1f5/0x610 [ 677.626174][T10725] ? ksys_write+0x202/0x270 [ 677.626206][T10725] security_file_ioctl+0xc3/0x2a0 [ 677.626233][T10725] __se_sys_ioctl+0x47/0x170 [ 677.626264][T10725] do_syscall_64+0x166/0x520 [ 677.626290][T10725] ? trace_irq_disable+0x3b/0x140 [ 677.626315][T10725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.626348][T10725] ? clear_bhb_loop+0x70/0xc0 [ 677.626374][T10725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.626395][T10725] RIP: 0033:0x7f559a51e159 [ 677.626416][T10725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.626436][T10725] RSP: 002b:00007f5598776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 677.626460][T10725] RAX: ffffffffffffffda RBX: 00007f559a7a5fa0 RCX: 00007f559a51e159 [ 677.626476][T10725] RDX: 00000000000000cb RSI: 000000000000ae03 RDI: 0000000000000003 [ 677.626490][T10725] RBP: 00007f5598776090 R08: 0000000000000000 R09: 0000000000000000 [ 677.626504][T10725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.626518][T10725] R13: 00007f559a7a6038 R14: 00007f559a7a5fa0 R15: 00007ffde5cf2de8 [ 677.626553][T10725] [ 677.626576][T10725] ERROR: Out of memory at tomoyo_realpath_from_path. [ 677.727862][T10727] FAULT_INJECTION: forcing a failure. [ 677.727862][T10727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.727896][T10727] CPU: 0 UID: 0 PID: 10727 Comm: syz.3.1373 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 677.727919][T10727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 677.727930][T10727] Call Trace: [ 677.727938][T10727] [ 677.727947][T10727] dump_stack_lvl+0xe8/0x150 [ 677.727979][T10727] should_fail_ex+0x46b/0x600 [ 677.728007][T10727] _copy_to_user+0x31/0xb0 [ 677.728032][T10727] simple_read_from_buffer+0xe1/0x170 [ 677.728058][T10727] proc_fail_nth_read+0x1be/0x230 [ 677.728083][T10727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 677.728108][T10727] ? rw_verify_area+0x250/0x4d0 [ 677.728130][T10727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 677.728150][T10727] vfs_read+0x219/0xa90 [ 677.728179][T10727] ? __pfx_vfs_read+0x10/0x10 [ 677.728203][T10727] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 677.728229][T10727] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 677.728250][T10727] ? mutex_lock_nested+0x152/0x1d0 [ 677.728275][T10727] ? fdget_pos+0x252/0x320 [ 677.728302][T10727] ksys_read+0x156/0x270 [ 677.728325][T10727] ? __pfx_ksys_read+0x10/0x10 [ 677.728357][T10727] do_syscall_64+0x166/0x520 [ 677.728377][T10727] ? trace_irq_disable+0x3b/0x140 [ 677.728399][T10727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.728419][T10727] ? clear_bhb_loop+0x70/0xc0 [ 677.728442][T10727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.728460][T10727] RIP: 0033:0x7f2d3211e98e [ 677.728478][T10727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 677.728498][T10727] RSP: 002b:00007f2d303b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 677.728521][T10727] RAX: ffffffffffffffda RBX: 00007f2d303b66c0 RCX: 00007f2d3211e98e [ 677.728535][T10727] RDX: 000000000000000f RSI: 00007f2d303b60a0 RDI: 0000000000000004 [ 677.728548][T10727] RBP: 00007f2d303b6090 R08: 0000000000000000 R09: 0000000000000000 [ 677.728560][T10727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.728571][T10727] R13: 00007f2d323e6038 R14: 00007f2d323e5fa0 R15: 00007fffbe952fc8 [ 677.728603][T10727] [ 679.725347][ T5601] Bluetooth: hci6: command tx timeout [ 680.105391][ T9853] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 680.450167][T10767] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1382'. [ 682.271814][ T38] INFO: task syz.2.1053:9403 blocked for more than 143 seconds. [ 682.272202][ T38] Not tainted syzkaller #0 [ 682.272495][ T9853] usb 5-1: not running at top speed; connect to a high speed hub [ 682.272534][ T9853] usb 5-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.40 [ 682.272735][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. ** replaying previous printk message ** [ 682.272735][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 682.272748][ T38] task:syz.2.1053 state:D stack:27240 pid:9403 tgid:9400 ppid:5598 task_flags:0x400140 flags:0x00080002 [ 682.272810][ T38] Call Trace: [ 682.272820][ T38] [ 682.273146][ T38] __schedule+0x16d9/0x5700 [ 682.273610][ T38] ? __pfx___schedule+0x10/0x10 [ 682.273659][ T38] rt_mutex_schedule+0x76/0xf0 [ 682.273956][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 682.273994][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 682.274022][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 682.274331][ T9853] usb 5-1: config 1 interface 0 has no altsetting 0 [ 682.274481][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 682.274510][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 682.274553][ T38] ? usb_device_read+0x17c/0x2c0 [ 682.275285][ T38] ? usb_device_read+0x17c/0x2c0 [ 682.275331][ T38] mutex_lock_nested+0x168/0x1d0 [ 682.280513][ T38] usb_device_read+0x17c/0x2c0 [ 682.280588][ T38] ? __pfx_usb_device_read+0x10/0x10 [ 682.281179][ T38] full_proxy_read+0x127/0x1f0 [ 682.289530][ T38] ? __pfx_full_proxy_read+0x10/0x10 [ 682.289616][ T38] vfs_read+0x219/0xa90 [ 682.289744][ T38] ? __pfx_vfs_read+0x10/0x10 [ 682.289978][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 682.290055][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 682.290201][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 682.290332][ T38] ? fdget_pos+0x252/0x320 [ 682.290398][ T38] ksys_read+0x156/0x270 [ 682.290522][ T38] ? __pfx_ksys_read+0x10/0x10 [ 682.290591][ T38] do_syscall_64+0x166/0x520 [ 682.290712][ T38] ? trace_irq_disable+0x3b/0x140 [ 682.290768][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.290886][ T38] ? clear_bhb_loop+0x70/0xc0 [ 682.290946][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.291066][ T38] RIP: 0033:0x7fadb698e159 [ 682.291120][ T38] RSP: 002b:00007fadb4ba4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 682.291275][ T38] RAX: ffffffffffffffda RBX: 00007fadb6c16180 RCX: 00007fadb698e159 [ 682.291372][ T38] RDX: 0000000000002020 RSI: 00002000000021c0 RDI: 0000000000000004 [ 682.291418][ T38] RBP: 00007fadb6a25024 R08: 0000000000000000 R09: 0000000000000000 [ 682.291459][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.291586][ T38] R13: 00007fadb6c16218 R14: 00007fadb6c16180 R15: 00007fffbccbb7b8 [ 682.291650][ T38] [ 682.291764][ T38] [ 682.291764][ T38] Showing all locks held in the system: [ 682.291806][ T38] locks held by kworker/1:0/31: 4, last CPU#1: [ 682.291910][ T38] #0: ffff88805d3abd38 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.292699][ T9853] usb 5-1: string descriptor 0 read error: -22 [ 682.292909][ T9853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.307468][ T5601] Bluetooth: hci6: command tx timeout [ 682.310821][ T38] #1: ffffc90000a5fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.310925][ T38] #2: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 682.310979][ T38] #3: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 682.311034][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 682.311049][ T38] #0: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 682.311140][ T38] locks held by kworker/u8:15/1219: 4, last CPU#1: [ 682.311154][ T38] #0: ffff88801eaf5138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.311206][ T38] #1: ffffc90006e87c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.311257][ T38] #2: ffff888033b520e0 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 682.311317][ T38] #3: ffff888033a08d98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 682.311379][ T38] locks held by kworker/u8:16/1220: 5, last CPU#1: [ 682.311392][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.311443][ T38] #1: ffffc90006ea7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.311494][ T38] #2: ffff888060020310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 682.311592][ T38] #3: ffff88803ba18120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 682.311637][ T38] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 682.311689][ T38] locks held by kworker/u8:17/1221: 2, last CPU#0: [ 682.311702][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.311752][ T38] #1: ffffc90006ec7c40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.311819][ T38] locks held by dhcpcd/5258: 1, on CPU#0: [ 682.311833][ T38] #0: ffffffff8f5d1bf8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 682.311888][ T38] locks held by kworker/0:3/5332: 5, on CPU#0: [ 682.311902][ T38] #0: ffff88801fac4538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.311951][ T38] #1: ffffc9000475fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.312001][ T38] #2: ffff88802277a210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 682.312091][ T38] #3: ffff888039954210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 682.312177][ T38] #4: ffff88805ef7d1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 682.312227][ T38] locks held by getty/5352: 2, on CPU#0: [ 682.312240][ T38] #0: ffff888035a180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 682.312353][ T38] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 682.312409][ T38] locks held by kworker/1:6/5712: 5, on CPU#1: [ 682.312423][ T38] #0: ffff88801fac4538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.313363][ T38] #1: ffffc90005d9fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.313413][ T38] #2: ffff888021f78210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 682.313462][ T38] #3: ffff888026138210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 682.313512][ T38] #4: ffff88802c1fe1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 682.313563][ T38] locks held by kworker/0:5/5727: 6, on CPU#0: [ 682.313576][ T38] #0: ffff88801fac4538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.313627][ T38] #1: ffffc90005e5fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.313678][ T38] #2: ffff88802508a210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 682.313726][ T38] #3: ffff88806e99a210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 682.313775][ T38] #4: ffff8880272a71d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 682.313824][ T38] #5: ffffffff8e060a40 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 682.313877][ T38] locks held by kworker/u8:32/8459: 6, last CPU#1: [ 682.313891][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.313942][ T38] #1: ffffc9000fef7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.313994][ T38] #2: ffff888038c74310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 682.314044][ T38] #3: ffff88805f1fcd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 682.314106][ T38] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 682.314158][ T38] #5: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 682.314208][ T38] locks held by kworker/u8:35/8462: 5, last CPU#1: [ 682.314222][ T38] #0: ffff888036760138 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.314279][ T38] #1: ffffc9000fea7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.314330][ T38] #2: ffff8880399b57b8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 682.314419][ T38] #3: ffff88803f59f930 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 682.314465][ T38] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 682.314517][ T38] locks held by kworker/u8:36/8463: 6, last CPU#0: [ 682.314532][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.314586][ T38] #1: ffffc9000fe97c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.314638][ T38] #2: ffff8880767d08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 682.314747][ T38] #3: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 682.314798][ T38] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 682.314847][ T38] #5: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 682.314899][ T38] locks held by kworker/u8:39/8466: 3, on CPU#0: [ 682.314913][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.314989][ T38] #1: ffffc9000fe37c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.315038][ T38] #2: ffffffff8f5d1bf8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 682.315096][ T38] locks held by kworker/u8:55/8482: 5, last CPU#0: [ 682.315285][ T38] #0: ffff8880327c7138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.315340][ T38] #1: ffffc9000eaefc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.315394][ T38] #2: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 682.315443][ T38] #3: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 682.315493][ T38] #4: ffff88805cfc3258 (key#18){+...}-{3:3}, at: batadv_tt_purge+0x137/0x9f0 [ 682.315620][ T38] locks held by udevd/8742: 4, on CPU#0: [ 682.315634][ T38] #0: ffff888033cd8db0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0 [ 682.315684][ T38] #1: ffff88805f996c78 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 682.315743][ T38] #2: ffff8880315a12d8 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 682.315801][ T38] #3: ffff888039954210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 682.315876][ T38] locks held by udevd/8753: 4, on CPU#1: [ 682.315890][ T38] #0: ffff888028dc5c98 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0 [ 682.315939][ T38] #1: ffff888031ffc478 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 682.315995][ T38] #2: ffff88805cd40d28 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 682.316052][ T38] #3: ffff888026138210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 682.316102][ T38] locks held by udevd/9156: 4, on CPU#0: [ 682.316115][ T38] #0: ffff88802f1dbec8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0 [ 682.316164][ T38] #1: ffff88805f6aa078 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 682.316221][ T38] #2: ffff88803f3adf08 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 682.316284][ T38] #3: ffff88806e99a210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 682.316337][ T38] locks held by syz.2.1053/9403: 3, on CPU#0: [ 682.316351][ T38] #0: ffff88803c9be928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 682.316399][ T38] #1: ffffffff8ee79c58 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 [ 682.316450][ T38] #2: ffff88802277a210 (&dev->mutex){....}-{4:4}, at: usb_device_read+0x17c/0x2c0 [ 682.316502][ T38] locks held by kworker/0:8/9853: 7, last CPU#0: [ 682.316515][ T38] #0: ffff88801fac4538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.316567][ T38] #1: ffffc90005007c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 682.316619][ T38] #2: ffff888021f5c210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 682.321655][ T38] #3: ffff88801a725318 (&(&priv->bus_notifier)->rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 682.321717][ T38] #4: ffffffff8e310ff0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 682.321768][ T38] #5: ffff88801b2fb258 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xef/0x2a0 [ 682.321819][ T38] #6: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 682.321884][ T38] locks held by syz-executor/10190: 1, on CPU#1: [ 682.321899][ T38] #0: ffffffff8f5d1bf8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 682.322026][ T38] locks held by syz-executor/10713: 1, on CPU#0: [ 682.322039][ T38] #0: ffffffff8f5d1bf8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 682.322092][ T38] locks held by syz.3.1382/10767: 1, on CPU#1: [ 682.322106][ T38] #0: ffffffff8f5d1bf8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 682.322156][ T38] locks held by syz.1.1381/10759: 4, last CPU#0: [ 682.322170][ T38] #0: ffff88803b8b3a30 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 682.322218][ T38] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 682.322272][ T38] #2: ffff888032188718 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 682.322324][ T38] #3: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 682.322378][ T38] [ 682.322383][ T38] ============================================= [ 682.322383][ T38] [ 682.322393][ T38] NMI backtrace for cpu 0 [ 682.322408][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 682.322430][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 682.322440][ T38] Call Trace: [ 682.322449][ T38] [ 682.322457][ T38] dump_stack_lvl+0xe8/0x150 [ 682.322486][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 682.322514][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 682.322545][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 682.322576][ T38] sys_info+0x135/0x170 [ 682.322600][ T38] watchdog+0xfd7/0x1030 [ 682.322631][ T38] ? watchdog+0x1c7/0x1030 [ 682.322660][ T38] kthread+0x38b/0x470 [ 682.322680][ T38] ? __pfx_watchdog+0x10/0x10 [ 682.322700][ T38] ? __pfx_kthread+0x10/0x10 [ 682.322721][ T38] ret_from_fork+0x514/0xb70 [ 682.322763][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 682.322783][ T38] ? __switch_to+0xc89/0x1420 [ 682.322811][ T38] ? __pfx_kthread+0x10/0x10 [ 682.322832][ T38] ret_from_fork_asm+0x1a/0x30 [ 682.322865][ T38] [ 682.322873][ T38] Sending NMI from CPU 0 to CPUs 1: [ 682.322900][ C1] NMI backtrace for cpu 1 [ 682.322915][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 682.322936][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 682.322946][ C1] RIP: 0010:preempt_count_add+0x6a/0x140 [ 682.322971][ C1] Code: 48 8b 05 79 1f 10 11 0f b6 c0 3d f5 00 00 00 73 59 65 48 8b 05 67 1f 10 11 39 c7 75 42 48 8b 5c 24 18 48 89 df e8 96 a3 0d 00 <85> c0 74 09 31 db 31 ff e8 89 a3 0d 00 65 4c 8b 35 39 1f 10 11 49 [ 682.322986][ C1] RSP: 0018:ffffc90000167898 EFLAGS: 00000246 [ 682.323003][ C1] RAX: 0000000000000000 RBX: ffffffff8b548867 RCX: ffffffff99ae0500 [ 682.323015][ C1] RDX: 0000000000000898 RSI: 0000000000000806 RDI: ffffffff8b548867 [ 682.323027][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 682.323039][ C1] R10: dffffc0000000000 R11: ffffffff8b548850 R12: 1ffffffff33d3299 [ 682.323051][ C1] R13: 00000000ffffffff R14: ffffffff99e991a0 R15: dffffc0000000000 [ 682.323064][ C1] FS: 0000000000000000(0000) GS:ffff888125cd4000(0000) knlGS:0000000000000000 [ 682.323079][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 682.323091][ C1] CR2: 00007f81ee07dc28 CR3: 0000000036e0c000 CR4: 00000000003526f0 [ 682.323109][ C1] Call Trace: [ 682.323117][ C1] [ 682.323128][ C1] delay_tsc+0x17/0xd0 [ 682.323153][ C1] wait_for_lsr+0x14d/0x300 [ 682.323206][ C1] __serial8250_console_fifo_write+0xd0/0x3f0 [ 682.323234][ C1] serial8250_console_write+0xac5/0x1230 [ 682.323257][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 682.323282][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 682.323310][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 682.323334][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 682.323364][ C1] nbcon_kthread_func+0x679/0x880 [ 682.323387][ C1] ? nbcon_kthread_func+0x163/0x880 [ 682.323406][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 682.323429][ C1] ? __kthread_parkme+0x71/0x1f0 [ 682.323452][ C1] ? __kthread_parkme+0x199/0x1f0 [ 682.323476][ C1] kthread+0x38b/0x470 [ 682.323492][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 682.323511][ C1] ? __pfx_kthread+0x10/0x10 [ 682.323528][ C1] ret_from_fork+0x514/0xb70 [ 682.323546][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 682.323562][ C1] ? __switch_to+0xc89/0x1420 [ 682.323584][ C1] ? __pfx_kthread+0x10/0x10 [ 682.323601][ C1] ret_from_fork_asm+0x1a/0x30 [ 682.323624][ C1] [ 682.339418][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 684.075422][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 684.085150][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 684.095214][ T38] Call Trace: [ 684.098499][ T38] [ 684.101443][ T38] vpanic+0x56d/0xa60 [ 684.105434][ T38] ? __pfx___schedule+0x10/0x10 [ 684.110294][ T38] ? __pfx_vpanic+0x10/0x10 [ 684.114808][ T38] panic+0xc5/0xd0 [ 684.118535][ T38] ? __pfx_panic+0x10/0x10 [ 684.122953][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 684.128504][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 684.133974][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 684.140142][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 684.146328][ T38] watchdog+0x1030/0x1030 [ 684.150939][ T38] ? watchdog+0x1c7/0x1030 [ 684.155454][ T38] kthread+0x38b/0x470 [ 684.159539][ T38] ? __pfx_watchdog+0x10/0x10 [ 684.164232][ T38] ? __pfx_kthread+0x10/0x10 [ 684.168833][ T38] ret_from_fork+0x514/0xb70 [ 684.173435][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 684.178747][ T38] ? __switch_to+0xc89/0x1420 [ 684.183532][ T38] ? __pfx_kthread+0x10/0x10 [ 684.188417][ T38] ret_from_fork_asm+0x1a/0x30 [ 684.193325][ T38] [ 684.196487][ T38] Kernel Offset: disabled [ 684.200825][ T38] Rebooting in 86400 seconds..