last executing test programs: 3m50.803273142s ago: executing program 3 (id=29): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2e, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xffff, 0xffff}, {0x5}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000050800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) 3m49.449566523s ago: executing program 3 (id=30): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) dup(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12013d02b4811d207e15060000000000000000021b00017805105d0904da0081cc1a9a0709050801ff03059502"], &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r4 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'veth1_to_bridge\x00', {0x2}, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x10}, 0x19}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) setsockopt(r1, 0xff, 0x1, 0x0, 0x57) 3m46.179474387s ago: executing program 3 (id=36): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x5, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x9, 0x0, 0xbdb], 0xffff1001, 0x43180}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x5000, 0x7}, 0x80000031, 0x0, 0xdddd0000, 0x2024, 0x0, 0x1500, 0x3000, [0x1, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m45.239747475s ago: executing program 3 (id=42): r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = syz_pidfd_open(r0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = memfd_create(0x0, 0x4) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$unix(0x1, 0x5, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) 3m42.581740989s ago: executing program 3 (id=44): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(0xffffffffffffffff) unlink(&(0x7f0000000200)='./file0\x00') syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00') pread64(r1, &(0x7f0000000040)=""/26, 0x1a, 0x6) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000006c0)={0x14, &(0x7f0000000e80)={0x20, 0x11, 0x8b, {0x8b, 0xb65a263df540b2ab, "ff5f6b933de369f9c9854f1553666c31d5e21edfe7fe9c9a41aea36270dd33c0cadf8b9b62cd547fa62619b1ace6b8a3ff60591cec10427a74fab16495ddd69775725713c2137658a6635efb1d5cc1bbde319ce6511c548bd6a3a68ec37b227f814887dd7f5c3c21f3da1ea2b6f7c9a1607d03d2b2fdc515338bdb93129b2ed0ea94a22eb431c09723"}}, &(0x7f0000000f40)={0x0, 0x3, 0x80, @string={0x80, 0x3, "49b75c1d29bf83f4a1d128a5983c56ef94a2688fc6a019a79279f9a87c7488c5bd5b013ee23109caddf935585720864506fc5ee9fa85a7b0ac3bb040dc8b3fdee20946264b28f16657d8013820d820f12cec8828cc2966c6441d7493a759a6c838e1e5947dcba875c3e8b396a3937e4da842bff550a5c9d9bf968af9c9f5"}}}, &(0x7f00000011c0)={0x34, &(0x7f0000000740)={0x40, 0xe, 0x13, "041dfb4b7d7989ed3fd0a34ef5942e72e68328"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x2c}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001080)={0x20, 0x0, 0x92, {0x90, "ababf6779d709dc2988cc32eae9bbd3df10dbfddbbc4d6b2c93e7ff62c634730086be4ac1d27681f50f00d22fae09cd7dcd451ef89eff398b93d5923febf7a11edbcd4f5274932d9881fed95233b9fd716ddb172c3d63e29785da3f98aad61f415312bf533fdfc6c462bfee42ecd2141993a35486a632cdba70f150f4ae4cdce4f09ceedf3075bf25f749100f0f8f90a"}}, &(0x7f0000001140)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) semget$private(0x0, 0x5, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4$alg(r3, 0x0, 0x0, 0x80800) io_setup(0xff, &(0x7f0000000380)) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x2, 0x0, 0x42}) 3m41.581688764s ago: executing program 0 (id=48): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, 0x0, 0x0, 0x2}) 3m41.441633518s ago: executing program 0 (id=49): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r1}) 3m41.283069136s ago: executing program 3 (id=50): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r3}}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000040)={0x3, 0x1, 0x1}) 3m40.880663583s ago: executing program 0 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x80000001) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 3m40.27484608s ago: executing program 0 (id=55): r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_pidfd_open(r0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfbU\x00\x00\x00\x00\x00\x00\x00\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$unix(0x1, 0x5, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) 3m35.531117229s ago: executing program 0 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) get_mempolicy(0x0, 0x0, 0x9b, &(0x7f0000ffc000/0x1000)=nil, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0xa9, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fd={0x73622a85}, @flat=@binder={0x73622a85, 0x1001}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 3m33.867359218s ago: executing program 0 (id=62): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x22040, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@raw={0xc, 0x8, "90527800"}) 3m4.170822569s ago: executing program 1 (id=243): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000f80)={&(0x7f0000000540)={{@my=0x1}, {@hyper, 0x1}, 0x400, "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"}, 0x418, 0x2101}) socket$inet_udp(0x2, 0x2, 0x0) 3m4.038625654s ago: executing program 1 (id=247): syz_usb_connect(0x5, 0x4a, &(0x7f0000000580)={{0x12, 0x1, 0x201, 0xfc, 0xdc, 0xe9, 0x8, 0x731, 0x528, 0x3994, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x3, 0x1, 0x40, 0x7, [{{0x9, 0x4, 0x27, 0x5, 0x4, 0x74, 0xd, 0xc2, 0x81, [], [{{0x9, 0x5, 0xa, 0x10, 0x0, 0x5, 0x32, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x2, 0x7, 0x2, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x4, 0x80}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x3, 0x9, 0x1}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x87, 0x0, 0x1, 0x10}, 0x17, &(0x7f0000000100)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0x9, 0x5, 0xa2}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x8, 0x9e}]}, 0x2, [{0xda, &(0x7f0000000140)=@string={0xda, 0x3, "9eca09669fd31b773ca65e0598fde8d42c81000414c6c5e1653f5ebc7716c4e956962dd477a491da9e35311613bd52b578ccd60119d9ae790e0737e1a7cb724b9d30aed87e98162c627aa4b0fc404af421c5b73572ad76517e718e7d57c7fe03d947ce0342a2ca9c9a66ad07f4e77e6ee39e6c0a8c467ac344b2589a094c5e8140319d02c74aadf3fa1d952ac7305aa04437654e8e604bdd2788db07e2f6f5995b1740d9f29ad976507ae2da139abaa6eca5ba728d77d4dd021063d20064e9f6556f8600c2fc9fbe35efc2d9e860ae53cc09aa8343611379"}}, {0x2, &(0x7f0000000240)=@string={0x2}}]}) 3m2.703220397s ago: executing program 1 (id=262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES8, @ANYRES8, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b702000014001b00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$evdev(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x5) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') 3m1.463708436s ago: executing program 1 (id=271): r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = syz_pidfd_open(r0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfbU\x00\x00\x00\x00\x00\x00\x00\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$unix(0x1, 0x5, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) 2m59.70113579s ago: executing program 1 (id=279): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x20000008}) 2m55.509036039s ago: executing program 1 (id=330): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000050800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) 5.96378796s ago: executing program 4 (id=2193): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x24000000) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100ffff0300000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="14005e80080001"], 0x30}}, 0x24008000) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) r4 = syz_open_dev$mouse(&(0x7f0000000240), 0x0, 0x2042) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x0, 0xee00}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x25864, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',access=', @ANYRESDEC=r6, @ANYBLOB=',access=client,dfltuid=', @ANYRESHEX, @ANYBLOB=',cache=none,euid<', @ANYRESDEC=0xee00, @ANYBLOB="0000b56b0b12d7b4fe3ed1fed96b9617c978c4a730b97207243dee3d53f412f88986721d6ee367395ca9ea373db041e8a974835b8a58c3063576092ec723a7060ef23c0c907ad0e638759d28a2f0763d8fa067778c5e1cc31b65e7a5db49c69e52587a007db4c992deb6e97d34e48a624046aa28bba520d943524e6c3ed51b373fa35f67425758cd9783cdbe488f24ef19fe3b3fab0d5d16854fbbf78a47f5f19156e393991b3cfc1e6a7cb036ab"]) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000002c0)={0x43, 0x0, 0x1}, 0x10) read$FUSE(r5, &(0x7f0000001800)={0x2020}, 0x2020) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280004000000000000007370616e000018000280050016000000000006000e000200000004001200"], 0x48}}, 0x0) bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x43}, 0x1}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000003840)=@newchain={0x2b9c, 0x1e, 0x400, 0x70bd0c, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xfff1, 0x3}, {0x10, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x2b44, 0x2, [@TCA_BASIC_ACT={0x2b40, 0x3, [@m_police={0x25ec, 0x18, 0x0, 0x0, {{0xb}, {0x24f4, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x200, 0x9, 0x0, 0x5, 0x2000000, 0x0, 0x100, 0x1, 0xac70c000, 0x1, 0x80000001, 0x212f, 0x2, 0x10000, 0x4, 0x8, 0x7fffffff, 0x3, 0xd15, 0xc, 0x8, 0x81, 0xd, 0x3, 0x3, 0x4, 0x3ff, 0x9, 0x38, 0x85, 0x401, 0x4, 0x4, 0x5, 0x0, 0x0, 0x4, 0x28000000, 0x80000001, 0x3, 0x3, 0xffff, 0x400, 0xa, 0x1, 0x2, 0x2, 0x7, 0x3, 0x4c65ba75, 0x1ff, 0x9, 0x9, 0x4800, 0x6, 0x4, 0x2, 0xff, 0x9, 0xfffffff8, 0x1, 0x2, 0x1, 0x6, 0x2, 0xfffffbff, 0xffffff33, 0xfffffffb, 0x100, 0xc1c, 0x6, 0xddd, 0x3, 0xa, 0x4, 0xfffffffc, 0x8, 0x2, 0x6, 0x7, 0x5, 0x4, 0x359f, 0x3, 0x6, 0x401, 0x47, 0x5, 0x3, 0x2, 0xecc, 0xc, 0x401, 0x0, 0x2, 0xa, 0xc00, 0x4, 0x61, 0x2, 0x7fe0000, 0x1, 0x1, 0x3, 0x4e1, 0x6, 0x7, 0x7, 0x1, 0x9, 0x101, 0x5, 0x1, 0x7d3e, 0x8, 0x7, 0x1, 0xfffffff7, 0x2, 0xffff8001, 0x1ff, 0x3, 0x0, 0x1, 0x7fff, 0x1000, 0x4aa5, 0x7, 0x4, 0x4, 0x1, 0x95db, 0x6, 0x8, 0x9, 0xff7, 0x48e1, 0x5, 0x7, 0x2, 0x0, 0x5, 0x4, 0x7, 0x7d, 0x7, 0x4, 0x8b7, 0x6, 0xffff, 0x6, 0xa02, 0x8000, 0x535f, 0x7, 0xc, 0x5, 0x1, 0x9, 0x8, 0x6, 0x7d0, 0x5, 0x9, 0x3, 0x80000000, 0x8, 0x5, 0x7, 0x1, 0xffffffff, 0x9, 0x2, 0x5, 0x0, 0xfffffff7, 0xa7, 0x7fff, 0x8, 0x14f9, 0x4, 0xffffffff, 0x7, 0x3, 0x80000001, 0x8000, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x5, 0xd, 0xffffffff, 0xa44, 0xd, 0x9, 0x7, 0x9, 0xe, 0x3, 0x10, 0xffffffff, 0x5, 0x7f, 0xd, 0x5, 0xffff1b0e, 0x1, 0x0, 0x0, 0x3, 0x5, 0x5, 0x6, 0x80, 0x3, 0x1214, 0x7, 0x3, 0x401, 0x80000000, 0x7, 0xfffffff6, 0x3, 0x0, 0x1, 0x0, 0xff, 0x8, 0x3, 0x2, 0x25d, 0x3, 0x80000000, 0x7fffffff, 0x5, 0xb5, 0x0, 0x8, 0x1ff, 0xffffffae, 0x80, 0x80000000, 0xe9, 0x4, 0x3, 0x9, 0x11c, 0x5, 0x81, 0x9, 0xd, 0x8, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80, 0xffffffffffffffff, 0x7, 0xfffff1ac, 0xfffffff8, {0x10, 0x1, 0x2, 0x100, 0x5, 0xffff}, {0x6, 0x1, 0xfff8, 0x1, 0x4, 0x5f000000}, 0x9, 0x80000001, 0x9}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2c, 0x3ff, 0x7b, 0x101, 0x4, 0xb, 0x81, 0x8, 0x10000, 0x2, 0x7f, 0x4, 0xde, 0x8, 0x0, 0x5, 0xfffffff9, 0x5, 0x1, 0x60000000, 0xd62, 0x1, 0x1, 0x8, 0x9, 0x8, 0xffffff81, 0x4, 0x0, 0xfffffff7, 0x100, 0xf70, 0x80000001, 0x81, 0x7fffffff, 0x7d, 0x5, 0x3, 0x0, 0x7, 0x7ff, 0x4fe7, 0x3, 0x8, 0x81, 0x5, 0xd, 0x9, 0x2, 0xffffff47, 0x9, 0xfffffff5, 0x7, 0x9, 0x4, 0xffff, 0x7, 0xd, 0xef9b, 0xfffffffb, 0x7, 0x9, 0x80000000, 0x6, 0x400, 0x6, 0x40, 0x3, 0x8, 0x7ff, 0x4, 0x10, 0x6, 0x8, 0x2, 0x0, 0xfffffffc, 0x400, 0x0, 0x2, 0x401, 0x4, 0x7fff, 0xf3b, 0x5, 0xff, 0x5, 0x4225a969, 0x1, 0x80, 0x6, 0x200, 0x6, 0x4, 0x7, 0x4, 0x6, 0x8, 0x8c, 0x8, 0x2, 0x81a, 0x5, 0x1000, 0x2d, 0x401, 0x8, 0x8000, 0xc0dd, 0x7, 0xb6, 0x8000, 0x0, 0x5, 0x9, 0xbed1, 0x1, 0x9, 0x7, 0x3e7a, 0xe, 0x5, 0x3, 0x7d3, 0x5, 0x7, 0x4, 0x92, 0x4, 0x8, 0x3, 0xc000, 0x6, 0x6, 0x1a802631, 0x66, 0x7fff, 0x5, 0x1000, 0x4, 0xfffffff7, 0x0, 0x4, 0x8, 0x400, 0x4, 0x401, 0xba, 0x7fffffff, 0x58, 0x8001, 0x2, 0x1, 0x75e, 0x8, 0xffff, 0x8, 0x7, 0x6d, 0x6, 0x9, 0x3, 0x6, 0x9, 0xffffffff, 0x400, 0x7f, 0x4, 0x5, 0x9, 0x1, 0x2, 0xfffffff8, 0xcda6, 0x401, 0x1, 0x5929a044, 0x7ff, 0x9, 0x3, 0x7, 0x100, 0x4, 0x6, 0x765, 0x1, 0x5, 0xa50c, 0x3, 0xb, 0x3, 0xc9, 0x0, 0x9, 0x1, 0x0, 0x80, 0x6, 0x1, 0xac, 0x5, 0x800, 0x8, 0x1, 0x1000, 0xa, 0x5, 0x6, 0xfffffff7, 0x5, 0x2e0, 0xe, 0xffff, 0x0, 0x5, 0x4, 0x0, 0xc, 0xb46, 0x8, 0xfffffffa, 0x4bd, 0x1, 0xfffffff0, 0x3, 0xf9135ffc, 0xfffff800, 0xff, 0x5, 0x5, 0x101, 0xffffffff, 0x5, 0x9, 0x8001, 0x0, 0x5, 0x9, 0x7, 0x8, 0xffffff42, 0xfffffff7, 0x401, 0x6, 0x98, 0x7fff, 0x2, 0x8, 0x2, 0x2, 0xab, 0x5, 0xfffffc00, 0x7, 0x2, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xfffffff1, 0x0, 0xaac, 0x3, 0x6, 0x3, 0xdd0d, 0x1, 0x80000000, 0x80000000, 0x1000, 0x2, 0x9, 0x1, 0x5, 0x4, 0x4, 0x2, 0xffffffff, 0xfffffc75, 0x80, 0x0, 0xe82, 0x3, 0x4, 0x5, 0x1, 0x6, 0xd21, 0xb575, 0xeac, 0x0, 0x0, 0xf, 0x0, 0x9, 0x5797, 0x7, 0x6f4, 0x5, 0x2, 0x1, 0x8, 0x2000, 0x7, 0x0, 0xffff, 0x7, 0x7, 0x2, 0x6, 0x4, 0x7, 0x7fff, 0x80000000, 0x9, 0xffff, 0x80000000, 0x1, 0x3ff, 0x8, 0x800, 0x5, 0x1, 0x8, 0x1, 0x60, 0x7, 0xd6, 0x1ff, 0x80, 0x4, 0x7ff, 0x3, 0x2ad8, 0x7f, 0x39, 0xb18d, 0x0, 0x2, 0x6, 0x10, 0x3, 0x3, 0x2, 0xffffffff, 0x9, 0x7, 0x0, 0x0, 0x1, 0x7fffffff, 0x6, 0x8, 0x7fffffff, 0x0, 0xa0d, 0x9, 0xffff, 0x4, 0x3, 0x5, 0x1, 0x81, 0x9, 0x46, 0xd, 0x9, 0x3, 0xfe5c, 0x7, 0xd, 0x6b333858, 0xeee, 0x8, 0x0, 0x8, 0x10, 0x0, 0x2b, 0x1000, 0x0, 0x3, 0x7, 0x0, 0x7fffffff, 0x7, 0x8, 0x83, 0x5e40, 0x1, 0x812d, 0x1, 0x5, 0x0, 0xffffffff, 0x6, 0xfffffffc, 0x7b0, 0x7, 0x9, 0x6, 0x6cd0, 0x1ff, 0x2, 0x80000001, 0x6, 0xa, 0x0, 0xb48, 0xfffffffa, 0x9, 0x0, 0x1, 0x1, 0x8, 0x36, 0x2, 0xc018, 0xa, 0x10001, 0x2, 0xfffffffb, 0x80, 0x6, 0x1a5, 0xffffffff, 0x40b, 0x0, 0x2, 0x7, 0x6, 0xeb, 0x2, 0x6, 0x4, 0x9, 0x10000, 0x9, 0x1, 0x3400000, 0x8001, 0xe, 0x3, 0xfff, 0xf86, 0x9, 0x400, 0xffff399f, 0x10, 0xed, 0x7, 0x3, 0x10001, 0x998, 0x7, 0x9, 0x6, 0x5, 0x795, 0x2, 0x3, 0x1, 0x101, 0x6, 0xfffffff9, 0x2, 0xfff, 0x1, 0x2, 0x8b, 0x92b8, 0x8, 0x2, 0x1, 0x8, 0x49c, 0x4, 0x2, 0x8, 0x8, 0x17e2, 0x7dc, 0x4, 0x9849, 0x4, 0x80000000, 0x4, 0x81, 0xf, 0x9, 0x5, 0x3, 0x100, 0x10, 0x5, 0x3, 0xd, 0x7ff, 0x10, 0x20bb, 0x6, 0x9, 0x7fffffff, 0x9, 0x6, 0x2, 0x1, 0x7, 0x10000, 0xb8, 0x5, 0x4, 0x2, 0x8]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9, 0x5, 0x2, 0x7fffffff, 0x800, 0x4, 0xe, 0x1, 0x200, 0x40, 0x9, 0x4, 0x13f0, 0xfffffffa, 0xc, 0x81, 0x6, 0x4, 0x5, 0x7fffffff, 0x3ea20120, 0x8, 0x7f, 0x2, 0x1, 0x8000, 0x6, 0x9, 0x8, 0xbb, 0xffffffba, 0xff, 0x100, 0x7, 0x3ff, 0x80000000, 0x9, 0x8, 0xb1, 0x7, 0x9, 0x3, 0x40, 0x4, 0x3, 0x0, 0x6, 0xc1, 0x2, 0x4, 0x8, 0x2, 0x7, 0xc, 0x3, 0x86, 0xfffffff7, 0xfffffffb, 0x0, 0x3, 0x3, 0x8, 0x80000001, 0x4, 0x433a, 0xb, 0x40, 0x5, 0x3, 0x0, 0x1000, 0x1, 0xffff, 0x9, 0x9, 0x0, 0x79, 0x40, 0x6, 0x7, 0x8, 0x8, 0x9, 0x10001, 0x2, 0x3, 0x400, 0x6, 0x0, 0x3, 0x7, 0x6, 0xa, 0x1, 0x3198, 0x3, 0xffff8000, 0x800, 0x24, 0x1, 0x7, 0x1ff8000, 0x5, 0x400, 0x3, 0x2, 0x6, 0x400000, 0x0, 0xcf0, 0xc7a7, 0x1, 0xfffffffa, 0x4, 0x8, 0x4, 0x101, 0x8001, 0x750222c2, 0x9, 0x7, 0xfff, 0xfffffc00, 0x6, 0x0, 0xfff, 0x1, 0x2, 0x6c0, 0x0, 0x6, 0x80000000, 0x9, 0xa, 0x1, 0x5, 0x3, 0x9, 0x97, 0x6, 0x5, 0x2, 0x81, 0x7ff, 0x9, 0x3, 0x80000000, 0x9, 0x0, 0x2, 0x8, 0x4, 0x4, 0x7fffffff, 0x8, 0x80000, 0x5, 0x8000, 0x3, 0x9, 0x7, 0x6, 0x0, 0x800, 0x7, 0x200, 0x0, 0x9, 0x10000, 0x0, 0x5, 0x0, 0x4, 0x9, 0x0, 0x8001, 0x3, 0x400, 0xfffeffff, 0x7f, 0x1be1, 0x10001, 0x1, 0xc000, 0x3, 0xab, 0x2, 0xfffffffe, 0x0, 0xf, 0x2, 0x1, 0x7f, 0x5, 0x1, 0x1000, 0x8, 0x2, 0x5, 0x736, 0xfffffffe, 0xa, 0x92, 0x3, 0x1, 0x8, 0xd9, 0xfffffff6, 0x4453, 0x6, 0x9, 0x6, 0x3, 0x0, 0x8, 0x5, 0x5, 0x4, 0x8, 0x9, 0x1, 0x9, 0x1, 0x965, 0x4, 0xfffff98a, 0x80000000, 0xd07, 0xa9, 0x97ef, 0x4, 0x40, 0x34, 0xfffffff7, 0x4, 0x5, 0x1, 0x4, 0x8, 0x9, 0x0, 0x4, 0x7, 0x6, 0x7, 0x100, 0x5, 0x6, 0x3, 0x3, 0xffffffff, 0x5, 0x9, 0x3, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xd}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0x39, 0x10, 0x46d0, 0x7fff, 0x3, 0x2, 0x5, 0xfffffffa, 0x1, 0x9, 0x40, 0x8, 0x2af, 0x4, 0x1c000000, 0x8, 0x3, 0xa, 0x1000, 0xa, 0x400, 0x7ff, 0x6, 0x9, 0x80, 0x86, 0x6, 0x6, 0xd7a4, 0xfffffffc, 0x12b, 0xf, 0xb, 0x0, 0x2c1, 0x5, 0x3, 0xd, 0x5, 0x5, 0xf, 0x0, 0x4, 0x400, 0xffff, 0x1, 0x7, 0xc4, 0x3, 0x9, 0x2, 0x8, 0x2, 0xb, 0x5314, 0x31b78972, 0x0, 0x0, 0x9, 0x7fffffff, 0x3, 0x0, 0x8, 0x1, 0x7, 0x3, 0x0, 0xffffff12, 0x7, 0x548c, 0xed9, 0x9, 0xffffffcb, 0x8, 0x8f, 0xffffffc9, 0x2, 0x7, 0x3, 0x1, 0x7a, 0x5, 0x81, 0xe1, 0xfffffff7, 0x7, 0x7, 0x7, 0x1000, 0x0, 0x7e86, 0x2, 0x9, 0x7, 0x9, 0xa, 0x4, 0x6, 0x8000000, 0x2, 0x9, 0x5, 0x80000000, 0x3, 0x701a, 0xe22, 0x203, 0x40000000, 0x400, 0x7, 0xb6d, 0x100, 0xc, 0x1, 0xf500, 0x7, 0x0, 0x4, 0x80, 0x8000, 0x44a2, 0x4, 0x1c8, 0x3, 0x4, 0x0, 0x3, 0x0, 0x80000000, 0x10, 0xffff, 0x1, 0x7, 0x5, 0xa, 0x1de4, 0x9, 0xfffffffe, 0x0, 0x40, 0x80000001, 0x0, 0xf0f, 0x4, 0x5, 0x1, 0xffffff3e, 0x6, 0x6, 0x417d, 0x800, 0xbc4, 0x5, 0x0, 0x1, 0x1ff, 0x6, 0x4, 0xb, 0x7, 0x80, 0x1ff, 0xa65b, 0x9, 0x1, 0x6, 0x2daf, 0x1000, 0x0, 0x5, 0x5, 0x8, 0x9, 0x1ff, 0x5, 0x8000, 0x2, 0xd391, 0x4, 0xfffffff4, 0xd52, 0x0, 0x1, 0x0, 0x1a40, 0x7, 0x8001, 0x47, 0x4, 0x24000000, 0x0, 0x5, 0x7ff, 0x0, 0x3bfb, 0x4, 0x2f, 0x1, 0x4, 0x4, 0x9, 0x680, 0x2800, 0xffff, 0x0, 0x652, 0x7f, 0x2, 0x8, 0x0, 0x6, 0x200, 0x19d7176f, 0x3, 0x5023, 0x58f, 0x10, 0x4, 0x400, 0x1, 0x4f7, 0x0, 0x0, 0x9, 0x5, 0x3, 0x3, 0x580000, 0x8, 0x7, 0x99a, 0x81, 0x6, 0x80, 0xffffe746, 0x4, 0x10000, 0x7168, 0x2, 0x7cf, 0x0, 0x9, 0x2, 0x0, 0x1f7dc00, 0x1, 0xb, 0x12f7, 0x6, 0x5f, 0x1000, 0x1, 0x1, 0x2]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xdf, 0x4e, 0x2, 0x7fff, 0xfffffff9, 0x2, 0x1000, 0x8, 0x0, 0xe, 0x7f, 0x1, 0x3, 0x8, 0xaa52, 0x9, 0x4, 0x77, 0x1, 0x3, 0x1, 0x5, 0x2, 0x8, 0x3, 0xfffffe65, 0xc199, 0x1, 0xfa8e, 0xfffffffe, 0xfff, 0x3, 0xb, 0x10000, 0x0, 0x3, 0x5, 0x6, 0x5, 0x7, 0x2, 0xc, 0x3, 0xa, 0x1eb, 0x10000, 0x0, 0xe, 0x5, 0x1, 0x52c, 0x4, 0x7ff, 0x1, 0xc, 0x6fe8a4a, 0xfffffffa, 0x2, 0xffffffff, 0x3ef, 0xf, 0xfff, 0x8, 0x0, 0x7, 0xfffffffa, 0x3, 0xecb, 0x5, 0x30, 0x8, 0x7, 0x9, 0xb, 0x6, 0x8, 0x80000000, 0x8, 0x3, 0x791, 0x2b6, 0xc97, 0x1, 0x800, 0x3, 0x5, 0x3b, 0xeada, 0x0, 0x7, 0x7, 0x3, 0x0, 0x2, 0x1, 0x0, 0x5, 0x9, 0x2, 0xfffffffd, 0x7, 0xfff, 0x200, 0x3, 0x7, 0x80000000, 0xff, 0x9, 0xa7, 0x0, 0x1, 0x3, 0x8, 0x7, 0x92d, 0x3, 0x5, 0x3, 0x3, 0x200, 0x7, 0x5, 0x5, 0x7fffffff, 0xe, 0x1ff, 0x1ff, 0x100, 0x3, 0xd494, 0x0, 0x7, 0x500, 0x40, 0x0, 0x8, 0x7, 0x3eb, 0x9, 0x8, 0xbf, 0xfffffff8, 0x5, 0x401, 0x0, 0x9, 0x8, 0xfff, 0x0, 0x8, 0x3, 0xa17, 0x1000, 0x6dda, 0x8, 0x100, 0x2, 0x81, 0x8, 0x0, 0x6, 0x3ff, 0x3, 0x200, 0x0, 0x3ff, 0x0, 0x5, 0x2, 0xff, 0x76, 0x4, 0xe0, 0x0, 0xfffffffe, 0x8, 0x0, 0x9, 0x8, 0x7fff, 0x0, 0x2, 0x9, 0x7c, 0x9e, 0xfffffff9, 0xfffffffc, 0xff, 0x8, 0x93f, 0x9, 0x1, 0x3, 0x8, 0xffffffff, 0x1, 0xfffff000, 0x7, 0x1, 0x3, 0x3, 0x7, 0x7, 0xfffffffd, 0xffffffff, 0x0, 0x1, 0x9, 0x1, 0x1, 0x9, 0x4, 0x5, 0x7fff, 0x2, 0x907, 0x7fffffff, 0x10, 0x2, 0x0, 0x8, 0x9, 0x0, 0x10, 0x5, 0x0, 0x7ff, 0xfb3, 0xda, 0x0, 0x1c000000, 0xec, 0xec0, 0x9, 0x200, 0x5, 0x7f6, 0x400, 0x1, 0x9f4b, 0x2, 0x9, 0xfffffff6, 0xfffff2b3, 0xfffffff8, 0x1, 0x3, 0xfffffff9, 0x4, 0x2, 0x1, 0x100, 0x2, 0xc405, 0x716, 0xfff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x70}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x51, 0x0, 0x2, 0x8, 0x3, 0x7, 0x2, 0x6a, 0xe5f, 0x7, 0x7fff, 0x3, 0x6a92, 0x6, 0x8, 0x2, 0x7, 0xa, 0x3, 0x1, 0x9, 0x60000000, 0x5, 0x2d, 0x101, 0x868, 0x10000, 0xb26, 0x33d, 0xe6, 0xb573, 0xffff, 0x2, 0xa, 0x92, 0xfffffc01, 0xffffffff, 0x9, 0x81, 0xfffffff9, 0x0, 0x3, 0x2, 0x7, 0x3, 0x692b, 0x31b1, 0x8, 0x1, 0x9, 0x86, 0x6, 0x3d8, 0x69c1, 0xc, 0x3, 0x7, 0x3ff, 0x0, 0x6, 0x7, 0x200, 0x7, 0x30db, 0x7602, 0x6d4, 0x40, 0x0, 0x1, 0x4, 0x2, 0x2, 0x1, 0x996, 0x800, 0x584a, 0x7, 0x5, 0x7, 0xd, 0x7, 0x5, 0x8, 0x3, 0x100, 0xfffffff9, 0x5, 0x10, 0x4, 0x2, 0x8, 0x3, 0x1, 0x400000, 0xffff, 0x8, 0x800, 0x8000, 0x1, 0x4, 0x4f5, 0x10000, 0x0, 0x6, 0x2, 0x9, 0xfffffff7, 0x8, 0x5, 0x9, 0x6, 0x5, 0x9, 0xfff, 0xfffff6ce, 0x2a35, 0xe4e, 0x760, 0x9, 0x1, 0x8, 0x9, 0xffff, 0x1, 0x0, 0x9, 0x5, 0x8025, 0x4, 0xe7a4, 0xf2, 0x1, 0x81, 0x1, 0xfffffff4, 0x1, 0x2, 0xbb, 0x7, 0x7, 0x0, 0x9, 0x5, 0x3, 0x8, 0x1, 0x10, 0x2, 0x8, 0x70a161ea, 0x2, 0x200, 0x3, 0x101, 0x5bba, 0x0, 0x5, 0x0, 0x7fff, 0x4, 0x3, 0x0, 0x7, 0x7, 0x1, 0x9, 0x0, 0x5, 0x1, 0xc, 0x10001, 0x8, 0x4, 0x4, 0x0, 0x5, 0x7, 0x100, 0x2, 0x81, 0xc, 0x7ff, 0x3, 0x1, 0x2, 0x6, 0x7d9, 0x4, 0x3, 0x6b, 0x2, 0xde2, 0xff, 0x10, 0x1, 0x2, 0x9, 0x1, 0x1800000, 0x5b, 0x5, 0xfffffc00, 0x7ff, 0x656b, 0x8000, 0x7, 0x1, 0x56b3, 0x8, 0x8, 0x0, 0xfffffffa, 0x3, 0x5, 0x9, 0x5, 0x0, 0xfffffff6, 0x5, 0xdd, 0x6, 0x6, 0x9, 0x6, 0x3, 0x2, 0x8, 0x8000, 0xb, 0x9, 0x1, 0x799a9476, 0x8000, 0x7, 0x5, 0xf, 0x5, 0x90a, 0x2, 0x40, 0x1, 0x4, 0x5, 0x0, 0xb, 0x1, 0x78, 0x20000000, 0x6, 0x7fffffff, 0x8, 0x6, 0x8, 0x5, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x1, 0x3991, 0x1, 0x0, 0x1b7, 0x10000, 0x7f, 0x7, 0x4, 0x9, 0x229f, 0x7ff, 0x4, 0x7, 0x3, 0x8, 0x7, 0x10001, 0x0, 0x800, 0x7, 0xa, 0x6, 0x1, 0x2, 0x8209, 0x80, 0x6, 0xff, 0x1, 0x5850, 0x8, 0x3, 0x2, 0xfffffffc, 0x8, 0x100, 0xffffffff, 0x40, 0x0, 0x0, 0x9, 0x4, 0x4, 0x8ce, 0x7, 0x7f, 0x0, 0x1, 0xffff857c, 0x1, 0x7, 0x5, 0x9, 0x5, 0x401, 0xfffff3e8, 0x6, 0x4, 0x1, 0x4, 0x6, 0x1, 0x2, 0x2, 0xf, 0x8, 0x767, 0xd1c9, 0x10001, 0x2, 0x1, 0x3, 0x401, 0x10000, 0x6, 0x5, 0xc, 0x5458, 0x8, 0x1, 0x0, 0x3, 0xfffffffa, 0x8000, 0x7, 0x8, 0x7e5a, 0x8001, 0x3, 0x4, 0xb, 0x8000, 0xd6b, 0xfd, 0x4, 0x4, 0x3, 0xfa, 0x0, 0xd01, 0x0, 0x77b3, 0xfffffffb, 0x6b90, 0x9, 0x2, 0x6, 0x0, 0xffffffbb, 0xf, 0x8, 0x9, 0xfe42ad9, 0x4, 0x3, 0xa7e, 0x10000, 0x0, 0x3c, 0xfffffff7, 0x4, 0x5, 0x1, 0x81, 0x4, 0x2c, 0x7fff, 0x3, 0xfff, 0x59, 0x1, 0x2, 0xa, 0xf2, 0x3, 0x2, 0xfff, 0xffffff4c, 0x9, 0x7, 0xa, 0xb120, 0x3, 0x0, 0x9, 0x7f, 0x8, 0x80000001, 0x0, 0x9, 0x0, 0x1, 0x2, 0x292e, 0xf, 0xfffffdac, 0x8001, 0x5, 0x2, 0x3, 0xffff, 0x2, 0x4, 0x1, 0x20000, 0x3, 0x6c, 0x3ff, 0x1ff, 0x1ff, 0x5, 0x800, 0x7, 0x7fff, 0xc, 0x0, 0xffff, 0x0, 0x4, 0x7, 0x10001, 0xd, 0x2, 0x5, 0x1, 0x4145, 0xffffffff, 0x2, 0x7, 0x9, 0x4, 0x15b, 0x7, 0x8, 0x3c149149, 0x5, 0x67c8, 0xffffffff, 0xd55, 0x400, 0x80, 0x5, 0x5, 0x1, 0x9, 0x7fff, 0x2, 0x8000, 0x4, 0x3, 0x0, 0x799, 0x10000, 0x2, 0x8, 0x7, 0x8, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x1, 0xffff, 0x3, 0x8, 0x5, 0x6, 0xc4, 0xd82, 0xf, 0x2, 0x5, 0x49, 0x10000, 0x3, 0x10001, 0x4, 0x0, 0x0, 0x6, 0x1, 0x1, 0xe30, 0xdc, 0xff000000, 0x7, 0x5, 0xfffffbff, 0x41, 0x4, 0x80, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x7, 0x34c4, 0x7, 0x3, 0x8000, 0x6, 0x3, 0xffff, 0x8, 0x3, 0xffff0000, 0x8, 0xfffffffb, 0x5, 0xc, 0x0, 0x8000, 0x0, 0x5, 0x21, 0x5, 0x8000, 0x81, 0x8, 0x6, 0x8001, 0xfffffff8, 0x12000, 0x7, 0x2, 0x8, 0x4, 0x74602778, 0x8000, 0x7ff, 0xffffffff, 0x3, 0x2, 0x3, 0x6, 0xb3e, 0x0, 0xffffc3a6, 0x8, 0x5089, 0x0, 0x10, 0x9, 0x33c3, 0xe, 0x8, 0x3, 0x7fffffff, 0x1, 0x6, 0x8, 0x56, 0xffffff20, 0x7f, 0x9, 0xa45e, 0x0, 0x7fffffff, 0x9, 0x6, 0xf5f, 0x1fa, 0xe0000000, 0x1, 0xb386, 0x784f, 0x6, 0xc9d8, 0x7, 0x2, 0x9, 0x3381, 0x5, 0x4, 0x2, 0x5, 0x5, 0x6, 0xfe54, 0xfffffffa, 0x7ff, 0x5, 0x5, 0x6, 0x9, 0x6, 0x4, 0x7, 0xfffffff0, 0x725, 0x10001, 0x101, 0x1, 0x401, 0x10000, 0x3, 0x0, 0x6, 0x4, 0x9, 0x8, 0x0, 0x7, 0x1, 0x3, 0x7, 0x7, 0x2, 0x7ff, 0x5, 0x3, 0x4, 0x0, 0x6, 0x7, 0x7, 0x8, 0x3, 0x5, 0x10000, 0x8, 0xfffffff9, 0x1, 0x4, 0x6, 0x5, 0x7fffffff, 0x1, 0xfd9f, 0xb, 0xa2, 0x3ff, 0x5c, 0x40, 0xc, 0x100, 0x2, 0xf, 0x7, 0x7, 0x0, 0x481, 0x5, 0x7fffffff, 0x7, 0x401, 0x8000, 0x6, 0x81, 0xd, 0x5, 0x0, 0x8, 0xffffffff, 0x8, 0xdd0, 0x8, 0x7, 0xac49, 0x2, 0x5, 0x1ff, 0xc0, 0x9, 0x3, 0xfffffffe, 0x7da, 0x9, 0x10001, 0x8c, 0x96, 0x4, 0x9, 0xfb, 0x10000, 0x0, 0x6, 0x1ff, 0x33, 0x0, 0x6049f3bd, 0x3, 0xffffcd43, 0x10001, 0x4, 0x8, 0x9, 0xbb, 0x8, 0xfffffc94, 0x0, 0x3, 0xf75, 0x5, 0x8, 0x0, 0x100, 0x1cf, 0x10, 0x900000, 0xfffffffd, 0x10, 0xd4a, 0x7ff, 0x49, 0x316d, 0x0, 0x5, 0x3, 0xe, 0x7f, 0x85c, 0x6, 0x7c4f, 0x0, 0xffffffa6, 0x19bf, 0x3, 0x0, 0x3ff, 0x7fff, 0x5, 0x0, 0xadfc0000, 0xd7a4, 0xa, 0x9bd, 0x8, 0x0, 0xc4, 0x2, 0xffff0001, 0x8, 0x191, 0x8, 0x80, 0x2, 0x1, 0xffd0, 0xdd9, 0x7, 0x800, 0x2, 0x4, 0x101, 0xc3, 0xfff, 0x2, 0x0, 0x9]}]]}, {0xcd, 0x6, "6ee6a0601990e1c9fa82bbc368d029d916b28f1b2c9a2ea135b65b7856afb8b71546c53ce5c5a3691593ad724ea51a833bec7cb6e2dd4972c030127f66a4e3e4d82ed54b4f80a5ee0318cc617ea26e094b22c9421bbf226b7a02c8b0cc471daf84d1460b0162855ceabc00d2aa71eadc7f6bf6a895b5dcf763bf4d72960c6e17798e67629646841d5b0c2815f25835233f5e9e4e5898ccf80019070c07c6f41c1febc69412326eb8024f9277e847c8559c55d833e04556b14d8c885a30509a167e3359fc35d917093d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x154, 0x5, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x2, 0x4, 0x0, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x6, 0x7, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x2, 0xffff, 0x3}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xff800000, 0x200, 0x2, 0x9, 0xc67c}, 0x2}}]}, {0xa8, 0x6, "2d0be0902f2273b215151300c6b6e5b3b1698c08e008862a6cd1efd264c5db37f5ee780b6faa46d8a369d4c1c4e25c642ec789157e425ac7022a6cbdb7cc436ba7c9572bf36d1a914303e22882fa164272724a95b075f4691071956d7ab2ffcfe889e38688f1e1cf74ef9e366b229602503254fae96aa65a756a1436d504b5c154d115033a0bddac578cb5c3f02f9958dfe757abc822ff0065ad167d57478cd65191b8a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0xb8, 0x1f, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0x88, 0x6, "efa7feeae20e82dab7def5128e3091d79c2af4948d62079d8ba6ea08c60bc5a8741aebcd5e7a1e2748f66d359ac7ecedcfd066fa1531e78f02f80ea2018c0e10a5f4dc5b453a87a5d92da0b2b8777fce855ca37124046e780ca7a9d108fc1280cf52b09cc1b855476827479f52a2b174ef6c18771105bbfa83cf59c7f8fa77934dec9819"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x110, 0x1d, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x983}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0xbc, 0x6, "e448567b98c47f2a3b8bbf155b9bb1157659ef4029a0713fc35633f950196966fe524e32b0c0973af4fe1cfe1a5795e1df2350bade2f0bbe3e76f9f8a9c6a874fe3ffe368a8fb2da4b55894573ef7bbabd8c09cd54eb077f6210367b1af9cf031ae1991b4aed4703908e526e394fcbe165d8df64ebcc14d60aa12a0258edbf27dc8c87c39e24539da71846a02f9746df80d0fc489984b7d01096cf207edeae29fddaf479224c8f783e1aca51c9594f0ba3afa9df58aa4cd2"}, {0xc}, {0xc}}}, @m_mirred={0x234, 0xc, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x10000, 0x4, 0x7fff, 0xfffffffd}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xe36d, 0x5, 0xbb8, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc17a, 0x5, 0x10000000, 0xffffffff, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xfff, 0x10000000, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x84, 0x3, 0x3, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3, 0x10000000, 0x1c, 0x24}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9d3c, 0x6, 0x2, 0x805}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8, 0x13, 0x2, 0x8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0xffffffffffffffff, 0xf8, 0x1}, 0x4}}]}, {0xe5, 0x6, "ca6393c8f07a65205568facd0d82b8f9414574848befbbae95b1449fe264eaf08fc11f7fe20cb87f8e82702b6c54b8dd9ef1a2ee748d21791ce549496a144bf70762d07c4de5a6a40d42efa70613ff0b637eb088365865bd94362e75badb34b00bcf04bca7412f2aee148f29582fef524300d5a31fd41ffa87e55742baea1c71f3801af55ab730f037c8b2e00f6a6db298832e975f64a9353b85724426e2d6ead1ff9ec766b6e99455ccf35f7e1e28679b68c2bb92cb9e02578df700e6360e12380f659d786343002b34cd69d22fd6714e47887d2f1247c2cff9ea1a9c1a5450cf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0xd66d}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x7f}]}, 0x2b9c}, 0x1, 0x0, 0x0, 0x46706d8788788bba}, 0x4c000) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000004c0)={@mcast2, 0x800000, 0x0, 0x1, 0x3, 0x4, 0x6}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @mcast2, 0xffffffff}, 0x1c) socket$tipc(0x1e, 0x2, 0x0) 5.86652106s ago: executing program 4 (id=2195): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x48000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x2000000000007, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000002e80)=[{{&(0x7f00000003c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000500)=""/244, 0xf4}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f00000007c0)=""/166, 0xa6}, {&(0x7f0000000880)=""/30, 0x1e}, {&(0x7f00000008c0)=""/236, 0xec}], 0x8, &(0x7f0000000a40)=""/180, 0xb4}, 0x401}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000b00)=""/23, 0x17}, {&(0x7f0000000b40)=""/146, 0x92}, {&(0x7f0000000c00)=""/10, 0xa}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/6, 0x6}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/157, 0x9d}], 0x7, &(0x7f0000002f00)=""/178, 0xb2}, 0x10}], 0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1ec) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000000000000000000000800017e7b926d54ef00544545000900020073797a32000000001400000011000100000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.723316767s ago: executing program 4 (id=2197): sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (fail_nth: 2) 5.106999787s ago: executing program 2 (id=2204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240), 0x111, 0xc}}, 0x20) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x2, 0x0, 0x0, 0xb, 0x14, "fee8a25dbe36479fd1e012960720f4ff1da89de2b7fb0000e60080b8785d9600010000000000000000000000100000000000d30000002000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bdffffffff19003465000000000000022122950e4ccfb7b3cada475100", [0x0, 0x82000000000001]}}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xe93, @empty, 0x8}, {0xa, 0x4e23, 0x7f, @mcast2, 0x9}, r5, 0x2}}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x2, 0xd5db, 0xc, 0x9, 0xfff, 0x5c95238c, 0xa, 0x3bf, 0x802, 0x1600, 0x5, 0x20000001, 0x809, 0x400e1c8, 0x6, 0x7, 0x6, 0x19c, 0x6, 0x4, 0xb, 0x402, 0x10, 0x3, 0xef, 0x0, 0xa, 0x8000003, 0xdffffffd]}) ioctl$KVM_SET_PIT(r6, 0x4048aec9, &(0x7f0000000080)={[{0x4, 0x0, 0x8, 0x50, 0x0, 0xb, 0x0, 0x0, 0x26, 0xfd, 0x0, 0x0, 0x80}, {0x40000000, 0x0, 0x0, 0x0, 0x3, 0xfe, 0x40, 0x0, 0x0, 0x6, 0x40}, {0x1ffffe, 0xa, 0xa, 0x3, 0x8, 0x6, 0xd, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd}], 0x2000803}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r10}, 0x10) open$dir(&(0x7f0000000e80)='./file0\x00', 0x84000, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) close(0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="4800028044000100240001006d6b6465000000002100000000000000000000000000000000000000000000000500030004fffffe11"], 0x64}, 0x1, 0x0, 0x0, 0x4000405}, 0x44084) socket(0x3, 0x2, 0x5a415f5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1}, 0x4) 5.018430074s ago: executing program 2 (id=2205): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) r1 = socket(0xa, 0x3, 0x87) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="997c0240", 0x4}, {0x0}], 0x2}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000020000e93f000020000400"/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0xb9c2871d1f8396e) r3 = openat$incfs(0xffffffffffffffff, 0x0, 0x408000, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000000)=0x5, 0x4) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r2}, 0x50) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r8 = syz_open_dev$loop(&(0x7f00000000c0), 0x47ffffa, 0x122842) symlinkat(&(0x7f0000000000)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00') ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000440)={r7, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x13, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a019363e8772fd29f35239d200", "24431a3977a68e174f005e95ac6a00"}}) ioctl$FS_IOC_GETFSMAP(r8, 0x4c09, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000740)='o', 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r6, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=0x0, @ANYBLOB="0000001000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095", @ANYBLOB="0f80522fe33b68db3292d797859226cb2e492068ed2490c37bebbeb60910da5a92e0e505e41e451d7a6cf514ae422dfee2472b37e1962aea413ee9edecbab257ab886f112ae072311feae7eb", @ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UI_DEV_CREATE(r0, 0x5501) 4.94847064s ago: executing program 4 (id=2206): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/xfrm_stat\x00') read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xd33638f234726102, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x57, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000022c0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@private}}, &(0x7f0000002180)=0xffffffffffffffa4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@mcast2, 0x0, 0xb73d, 0xffff, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, r4}, {0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x47, 0x0, 0x4, 0x2}, {0x0, 0x0, 0x100000000000005}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@mcast1, 0xfffffffc, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x3, 0xa8, 0x1, 0x0, 0x98b}}, 0xe8) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300)) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r9}, 0x10, &(0x7f0000000080)={&(0x7f00000005c0)=@canfd={{}, 0x1, 0x2, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947a81f2e3c8973fc2af2a7fa10b9926ea28baed9b57d82ab23db557c307ae88da9c6c68d8ceae8e69b06707297b87f8c925a"}, 0x48}, 0x2, 0x0, 0x0, 0x4105}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r12, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0x10000, 0x10, 0x3, 0x3, 0x6, 0x6, 0x6, 0x1, 0x4, 0x0, 0x11}, {0x5000, 0x7fffffe, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0xeeee0000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x8}, {0x80a0000, 0xdddd0000, 0x9, 0x9, 0x80, 0xa, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x4}, {0xf000, 0xdddd1000, 0x9, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0xeeee8000, 0x10000, 0xb, 0x0, 0xcd, 0x6, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0xfd, 0x1, 0x1, 0xf, 0xa}, {0x100000, 0x5}, {0xeeef0000, 0xff81}, 0x80000003, 0x0, 0xd000, 0x1a1, 0x4, 0xd01, 0xeeee8000, 0x0, [0xb, 0x2, 0x0, 0x2003]}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) r15 = gettid() r16 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r14, @ANYBLOB="049c01000750050008001300", @ANYRES32=r15], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) setsockopt$inet_pktinfo(r16, 0x0, 0x8, &(0x7f0000000540)={r3, @empty, @local}, 0xc) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 4.854768294s ago: executing program 2 (id=2207): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000540)=""/66, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 4.854546686s ago: executing program 4 (id=2208): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000002a80)='ns/mnt\x00') ioctl$NS_GET_NSTYPE(r0, 0x8008b705, 0x0) (fail_nth: 2) 4.812261361s ago: executing program 2 (id=2209): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_socket_connect_nvme_tcp() unshare(0x2040400) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/tty/drivers\x00', 0x0, 0x0) read$hiddev(r5, 0x0, 0x0) preadv(r5, &(0x7f0000001380)=[{&(0x7f0000001100)=""/26, 0x1a}], 0x1, 0x20010000, 0xd56a) read$msr(r5, &(0x7f0000000180)=""/92, 0x5c) prlimit64(0x0, 0x1, &(0x7f0000000140)={0xfffffffffffffff8, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x3, 0x4) 4.766448166s ago: executing program 2 (id=2210): r0 = socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0xae, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(0x0, 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040)=0x2, 0x4) 4.671151393s ago: executing program 2 (id=2211): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(r0, 0x7, &(0x7f0000000200)=0xf02) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async, rerun: 64) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) (async, rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) listen(r6, 0x2) (async, rerun: 32) syz_usb_connect(0x0, 0x5a, &(0x7f0000000e00)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r0], 0x0) ppoll(&(0x7f0000000e40)=[{0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x1000}, {r2, 0x4000}, {r4}, {r4, 0x2010}], 0x23a8, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000300)=0x3, 0x4) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000e80)={0x0, r8}, 0x8) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xa15, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}}, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 0s ago: executing program 4 (id=2212): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c720000f5fffffffffdffff020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) ioctl(r0, 0x8b32, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 0.518084][T10262] Call Trace: [ 290.518089][T10262] [ 290.518094][T10262] dump_stack_lvl+0x189/0x250 [ 290.518115][T10262] ? __pfx____ratelimit+0x10/0x10 [ 290.518129][T10262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.518145][T10262] ? __pfx__printk+0x10/0x10 [ 290.518161][T10262] ? __pfx___might_resched+0x10/0x10 [ 290.518173][T10262] ? fs_reclaim_acquire+0x7d/0x100 [ 290.518191][T10262] should_fail_ex+0x46c/0x600 [ 290.518207][T10262] ? getname_flags+0xb8/0x540 [ 290.518222][T10262] should_failslab+0xa8/0x100 [ 290.518238][T10262] ? getname_flags+0xb8/0x540 [ 290.518251][T10262] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 290.518265][T10262] ? cap_capable+0x11f/0x460 [ 290.518278][T10262] getname_flags+0xb8/0x540 [ 290.518292][T10262] ? security_capable+0x7e/0x2e0 [ 290.518306][T10262] user_path_at+0x24/0x60 [ 290.518317][T10262] __se_sys_fspick+0x10f/0x3d0 [ 290.518330][T10262] ? __pfx___se_sys_fspick+0x10/0x10 [ 290.518351][T10262] do_syscall_64+0xfa/0xfa0 [ 290.518365][T10262] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.518379][T10262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.518389][T10262] ? clear_bhb_loop+0x60/0xb0 [ 290.518402][T10262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.518412][T10262] RIP: 0033:0x7fa23061f6c9 [ 290.518422][T10262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.518433][T10262] RSP: 002b:00007fa22e886038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 290.518445][T10262] RAX: ffffffffffffffda RBX: 00007fa230875fa0 RCX: 00007fa23061f6c9 [ 290.518453][T10262] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffffffffffff [ 290.518460][T10262] RBP: 00007fa22e886090 R08: 0000000000000000 R09: 0000000000000000 [ 290.518467][T10262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.518473][T10262] R13: 00007fa230876038 R14: 00007fa230875fa0 R15: 00007fffe8863c18 [ 290.518490][T10262] [ 291.586691][T10283] FAULT_INJECTION: forcing a failure. [ 291.586691][T10283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.586759][T10283] CPU: 0 UID: 0 PID: 10283 Comm: syz.4.1762 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 291.586783][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 291.586795][T10283] Call Trace: [ 291.586803][T10283] [ 291.586813][T10283] dump_stack_lvl+0x189/0x250 [ 291.586844][T10283] ? __pfx____ratelimit+0x10/0x10 [ 291.586869][T10283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.586896][T10283] ? __pfx__printk+0x10/0x10 [ 291.586919][T10283] ? __might_fault+0xb0/0x130 [ 291.586958][T10283] should_fail_ex+0x46c/0x600 [ 291.586989][T10283] _copy_from_user+0x2d/0xb0 [ 291.587011][T10283] __sys_bpf+0x1e3/0x860 [ 291.587039][T10283] ? __pfx___sys_bpf+0x10/0x10 [ 291.587096][T10283] __x64_sys_bpf+0x7c/0x90 [ 291.587121][T10283] do_syscall_64+0xfa/0xfa0 [ 291.587147][T10283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.587166][T10283] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 291.587184][T10283] ? clear_bhb_loop+0x60/0xb0 [ 291.587208][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.587227][T10283] RIP: 0033:0x7fa23061f6c9 [ 291.587245][T10283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.587262][T10283] RSP: 002b:00007fa22e844038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.587283][T10283] RAX: ffffffffffffffda RBX: 00007fa230876180 RCX: 00007fa23061f6c9 [ 291.587298][T10283] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 291.587312][T10283] RBP: 00007fa22e844090 R08: 0000000000000000 R09: 0000000000000000 [ 291.587324][T10283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.587337][T10283] R13: 00007fa230876218 R14: 00007fa230876180 R15: 00007fffe8863c18 [ 291.587371][T10283] [ 292.398753][ T5812] Bluetooth: hci2: command tx timeout [ 292.533786][T10292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.534317][T10292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.689225][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 292.768722][ T6010] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 292.900278][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 292.926815][ T6010] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 292.926845][ T6010] usb 5-1: config 0 has no interface number 0 [ 292.926894][ T6010] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=9a.34 [ 292.926908][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.963396][ T6010] usb 5-1: config 0 descriptor?? [ 293.168991][ T6010] usb 5-1: USB disconnect, device number 26 [ 293.998885][ T5880] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 294.162905][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 294.165585][ T5880] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.165611][ T5880] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 294.165655][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 294.165671][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 294.165695][ T5880] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 294.165707][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.191433][ T5880] hub 5-1:1.0: bad descriptor, ignoring hub [ 294.191470][ T5880] hub 5-1:1.0: probe with driver hub failed with error -5 [ 294.192287][ T5880] cdc_wdm 5-1:1.0: skipping garbage [ 294.192303][ T5880] cdc_wdm 5-1:1.0: skipping garbage [ 294.237149][ T5880] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 294.237173][ T5880] cdc_wdm 5-1:1.0: Unknown control protocol [ 294.383832][T10299] FAULT_INJECTION: forcing a failure. [ 294.383832][T10299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.383855][T10299] CPU: 1 UID: 0 PID: 10299 Comm: syz.4.1768 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 294.383878][T10299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.383886][T10299] Call Trace: [ 294.383890][T10299] [ 294.383896][T10299] dump_stack_lvl+0x189/0x250 [ 294.383916][T10299] ? __pfx____ratelimit+0x10/0x10 [ 294.383931][T10299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.383946][T10299] ? __pfx__printk+0x10/0x10 [ 294.383966][T10299] should_fail_ex+0x46c/0x600 [ 294.383983][T10299] strncpy_from_user+0x36/0x290 [ 294.383998][T10299] getname_flags+0xf3/0x540 [ 294.384017][T10299] do_sys_openat2+0xbc/0x1c0 [ 294.384029][T10299] ? __pfx_do_sys_openat2+0x10/0x10 [ 294.384041][T10299] ? ksys_write+0x230/0x260 [ 294.384055][T10299] ? __pfx_ksys_write+0x10/0x10 [ 294.384069][T10299] __x64_sys_openat+0x138/0x170 [ 294.384084][T10299] do_syscall_64+0xfa/0xfa0 [ 294.384099][T10299] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.384113][T10299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.384124][T10299] ? clear_bhb_loop+0x60/0xb0 [ 294.384136][T10299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.384146][T10299] RIP: 0033:0x7fa23061df10 [ 294.384157][T10299] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 294.384167][T10299] RSP: 002b:00007fa22e885b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 294.384180][T10299] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa23061df10 [ 294.384187][T10299] RDX: 0000000000000002 RSI: 00007fa22e885c10 RDI: 00000000ffffff9c [ 294.384195][T10299] RBP: 00007fa22e885c10 R08: 0000000000000000 R09: 00007fa22e885987 [ 294.384202][T10299] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 294.384209][T10299] R13: 00007fa230876038 R14: 00007fa230875fa0 R15: 00007fffe8863c18 [ 294.384225][T10299] [ 294.488674][ T5812] Bluetooth: hci2: command tx timeout [ 294.509766][ T5880] usb 5-1: USB disconnect, device number 27 [ 294.830044][ T5880] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 294.988727][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 294.990509][ T5880] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.990547][ T5880] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 294.990593][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 294.990609][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 294.990633][ T5880] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 294.990646][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.000591][ T5880] hub 5-1:1.0: bad descriptor, ignoring hub [ 295.000629][ T5880] hub 5-1:1.0: probe with driver hub failed with error -5 [ 295.001492][ T5880] cdc_wdm 5-1:1.0: skipping garbage [ 295.001507][ T5880] cdc_wdm 5-1:1.0: skipping garbage [ 295.006275][ T5880] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 295.006295][ T5880] cdc_wdm 5-1:1.0: Unknown control protocol [ 295.259269][ T8846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 295.299086][ T5880] usb 5-1: USB disconnect, device number 28 [ 295.312903][T10031] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.313047][T10031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.331754][ T8846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 296.067531][T10319] FAULT_INJECTION: forcing a failure. [ 296.067531][T10319] name failslab, interval 1, probability 0, space 0, times 0 [ 296.067561][T10319] CPU: 0 UID: 0 PID: 10319 Comm: syz.4.1775 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 296.067579][T10319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 296.067589][T10319] Call Trace: [ 296.067596][T10319] [ 296.067603][T10319] dump_stack_lvl+0x189/0x250 [ 296.067629][T10319] ? __pfx____ratelimit+0x10/0x10 [ 296.067649][T10319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.067670][T10319] ? __pfx__printk+0x10/0x10 [ 296.067692][T10319] ? __pfx___might_resched+0x10/0x10 [ 296.067709][T10319] ? fs_reclaim_acquire+0x7d/0x100 [ 296.067733][T10319] should_fail_ex+0x46c/0x600 [ 296.067757][T10319] ? vm_area_dup+0x2b/0x670 [ 296.067770][T10319] should_failslab+0xa8/0x100 [ 296.067791][T10319] ? vm_area_dup+0x2b/0x670 [ 296.067803][T10319] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 296.067821][T10319] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.067847][T10319] vm_area_dup+0x2b/0x670 [ 296.067866][T10319] __split_vma+0x1ad/0x9e0 [ 296.067884][T10319] ? rt_mutex_slowunlock+0x493/0x8a0 [ 296.067902][T10319] ? __pfx___split_vma+0x10/0x10 [ 296.067929][T10319] ? rtlock_slowlock_locked+0xd8/0x4010 [ 296.067955][T10319] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.067976][T10319] vms_gather_munmap_vmas+0x2e2/0x12e0 [ 296.067990][T10319] ? __lock_acquire+0xab9/0xd20 [ 296.068017][T10319] ? mtree_range_walk+0x6aa/0x840 [ 296.068040][T10319] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 296.068063][T10319] ? mas_find+0xa7d/0xd30 [ 296.068086][T10319] mmap_region+0x727/0x20f0 [ 296.068115][T10319] ? __lock_acquire+0xab9/0xd20 [ 296.068132][T10319] ? __pfx_mmap_region+0x10/0x10 [ 296.068207][T10319] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 296.068231][T10319] ? do_raw_spin_lock+0x121/0x290 [ 296.068252][T10319] ? cap_mmap_addr+0xb0/0x100 [ 296.068269][T10319] ? bpf_lsm_mmap_addr+0x9/0x20 [ 296.068283][T10319] ? security_mmap_addr+0x71/0x270 [ 296.068300][T10319] ? shmem_mapping+0xd/0x50 [ 296.068317][T10319] ? memfd_check_seals_mmap+0xcb/0x210 [ 296.068335][T10319] do_mmap+0xc23/0x10c0 [ 296.068367][T10319] ? __pfx_do_mmap+0x10/0x10 [ 296.068384][T10319] ? rwbase_write_lock+0x56f/0x750 [ 296.068404][T10319] ? __lock_acquire+0xab9/0xd20 [ 296.068429][T10319] vm_mmap_pgoff+0x2a9/0x4d0 [ 296.068455][T10319] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 296.068473][T10319] ? __fget_files+0x2a/0x420 [ 296.068503][T10319] ? __fget_files+0x3a6/0x420 [ 296.068522][T10319] ? __fget_files+0x2a/0x420 [ 296.068546][T10319] ksys_mmap_pgoff+0x4e9/0x720 [ 296.068567][T10319] ? __x64_sys_mmap+0x7f/0x140 [ 296.068591][T10319] do_syscall_64+0xfa/0xfa0 [ 296.068615][T10319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.068630][T10319] ? asm_sysvec_call_function_single+0x1a/0x20 [ 296.068647][T10319] ? clear_bhb_loop+0x60/0xb0 [ 296.068667][T10319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.068684][T10319] RIP: 0033:0x7fa23061f6c9 [ 296.068701][T10319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.068717][T10319] RSP: 002b:00007fa22e886038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 296.068736][T10319] RAX: ffffffffffffffda RBX: 00007fa230875fa0 RCX: 00007fa23061f6c9 [ 296.068750][T10319] RDX: b635773f06ebbeee RSI: 0000000000001000 RDI: 00002000000ea000 [ 296.068763][T10319] RBP: 00007fa22e886090 R08: 0000000000000003 R09: 00000000fffff000 [ 296.068776][T10319] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 296.068788][T10319] R13: 00007fa230876038 R14: 00007fa230875fa0 R15: 00007fffe8863c18 [ 296.068819][T10319] [ 296.370948][T10326] FAULT_INJECTION: forcing a failure. [ 296.370948][T10326] name failslab, interval 1, probability 0, space 0, times 0 [ 296.370981][T10326] CPU: 1 UID: 0 PID: 10326 Comm: syz.4.1778 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 296.371004][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 296.371017][T10326] Call Trace: [ 296.371025][T10326] [ 296.371034][T10326] dump_stack_lvl+0x189/0x250 [ 296.371066][T10326] ? __pfx____ratelimit+0x10/0x10 [ 296.371091][T10326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.371117][T10326] ? __pfx__printk+0x10/0x10 [ 296.371145][T10326] ? __pfx___might_resched+0x10/0x10 [ 296.371173][T10326] ? fs_reclaim_acquire+0x7d/0x100 [ 296.371202][T10326] should_fail_ex+0x46c/0x600 [ 296.371231][T10326] ? __alloc_skb+0x112/0x2d0 [ 296.371249][T10326] should_failslab+0xa8/0x100 [ 296.371275][T10326] ? __alloc_skb+0x112/0x2d0 [ 296.371291][T10326] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 296.371315][T10326] ? smack_socket_sendmsg+0x1a7/0x520 [ 296.371343][T10326] __alloc_skb+0x112/0x2d0 [ 296.371366][T10326] netlink_sendmsg+0x5c6/0xb30 [ 296.371385][T10326] ? is_bpf_text_address+0x26/0x2b0 [ 296.371420][T10326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.371448][T10326] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 296.371472][T10326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.371492][T10326] __sock_sendmsg+0x21c/0x270 [ 296.371521][T10326] ____sys_sendmsg+0x508/0x820 [ 296.371549][T10326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.371580][T10326] ? import_iovec+0x74/0xa0 [ 296.371603][T10326] ___sys_sendmsg+0x21f/0x2a0 [ 296.371628][T10326] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.371684][T10326] ? __fget_files+0x2a/0x420 [ 296.371708][T10326] ? __fget_files+0x3a6/0x420 [ 296.371742][T10326] __x64_sys_sendmsg+0x1a1/0x260 [ 296.371766][T10326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.371798][T10326] ? __pfx_ksys_write+0x10/0x10 [ 296.371824][T10326] ? do_syscall_64+0xbe/0xfa0 [ 296.371853][T10326] do_syscall_64+0xfa/0xfa0 [ 296.371876][T10326] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.371900][T10326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.371918][T10326] ? clear_bhb_loop+0x60/0xb0 [ 296.371941][T10326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.371959][T10326] RIP: 0033:0x7fa23061f6c9 [ 296.371977][T10326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.371994][T10326] RSP: 002b:00007fa22e865038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.372014][T10326] RAX: ffffffffffffffda RBX: 00007fa230876090 RCX: 00007fa23061f6c9 [ 296.372029][T10326] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 296.372042][T10326] RBP: 00007fa22e865090 R08: 0000000000000000 R09: 0000000000000000 [ 296.372054][T10326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.372065][T10326] R13: 00007fa230876128 R14: 00007fa230876090 R15: 00007fffe8863c18 [ 296.372096][T10326] [ 296.576207][ T5812] Bluetooth: hci2: command tx timeout [ 297.817010][T10348] FAULT_INJECTION: forcing a failure. [ 297.817010][T10348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.817044][T10348] CPU: 1 UID: 0 PID: 10348 Comm: syz.4.1780 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 297.817067][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.817079][T10348] Call Trace: [ 297.817087][T10348] [ 297.817097][T10348] dump_stack_lvl+0x189/0x250 [ 297.817128][T10348] ? __pfx____ratelimit+0x10/0x10 [ 297.817154][T10348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.817179][T10348] ? __pfx__printk+0x10/0x10 [ 297.817213][T10348] should_fail_ex+0x46c/0x600 [ 297.817245][T10348] strncpy_from_user+0x36/0x290 [ 297.817272][T10348] getname_flags+0xf3/0x540 [ 297.817303][T10348] do_sys_openat2+0xbc/0x1c0 [ 297.817325][T10348] ? __pfx_do_sys_openat2+0x10/0x10 [ 297.817349][T10348] ? ksys_write+0x230/0x260 [ 297.817374][T10348] ? __pfx_ksys_write+0x10/0x10 [ 297.817400][T10348] __x64_sys_openat+0x138/0x170 [ 297.817424][T10348] do_syscall_64+0xfa/0xfa0 [ 297.817456][T10348] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.817481][T10348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.817500][T10348] ? clear_bhb_loop+0x60/0xb0 [ 297.817523][T10348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.817541][T10348] RIP: 0033:0x7fa23061f6c9 [ 297.817558][T10348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.817575][T10348] RSP: 002b:00007fa22e886038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 297.817596][T10348] RAX: ffffffffffffffda RBX: 00007fa230875fa0 RCX: 00007fa23061f6c9 [ 297.817610][T10348] RDX: 0000000000088882 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 297.817626][T10348] RBP: 00007fa22e886090 R08: 0000000000000000 R09: 0000000000000000 [ 297.817639][T10348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.817652][T10348] R13: 00007fa230876038 R14: 00007fa230875fa0 R15: 00007fffe8863c18 [ 297.817696][T10348] [ 297.968178][ T9058] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 298.134517][ T9058] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 298.312701][ T9058] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 298.392776][ T9058] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 298.571153][T10376] syz.2.1792: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 298.571291][T10376] CPU: 1 UID: 0 PID: 10376 Comm: syz.2.1792 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 298.571313][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.571324][T10376] Call Trace: [ 298.571333][T10376] [ 298.571341][T10376] dump_stack_lvl+0x189/0x250 [ 298.571376][T10376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.571403][T10376] ? __pfx__printk+0x10/0x10 [ 298.571425][T10376] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 298.571449][T10376] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 298.571470][T10376] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 298.571495][T10376] warn_alloc+0x22e/0x3b0 [ 298.571523][T10376] ? stack_depot_save_flags+0x41b/0x860 [ 298.571559][T10376] ? __pfx_warn_alloc+0x10/0x10 [ 298.571585][T10376] ? kasan_save_track+0x3e/0x80 [ 298.571605][T10376] ? __kasan_kmalloc+0x93/0xb0 [ 298.571627][T10376] ? xsk_setsockopt+0x4dc/0x8d0 [ 298.571645][T10376] ? do_sock_setsockopt+0x17c/0x1b0 [ 298.571663][T10376] ? __x64_sys_setsockopt+0x145/0x1b0 [ 298.571680][T10376] ? do_syscall_64+0xfa/0xfa0 [ 298.571701][T10376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.571722][T10376] __vmalloc_node_range_noprof+0x125/0x12d0 [ 298.571762][T10376] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 298.571786][T10376] ? __kasan_kmalloc+0x93/0xb0 [ 298.571814][T10376] vmalloc_user_noprof+0xad/0xf0 [ 298.571833][T10376] ? xskq_create+0xbf/0x170 [ 298.571854][T10376] xskq_create+0xbf/0x170 [ 298.571876][T10376] xsk_init_queue+0xb0/0x110 [ 298.571901][T10376] xsk_setsockopt+0x4dc/0x8d0 [ 298.571926][T10376] ? __pfx_xsk_setsockopt+0x10/0x10 [ 298.571957][T10376] ? __fget_files+0x2a/0x420 [ 298.571984][T10376] ? __fget_files+0x2a/0x420 [ 298.572006][T10376] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 298.572029][T10376] ? __pfx_xsk_setsockopt+0x10/0x10 [ 298.572053][T10376] do_sock_setsockopt+0x17c/0x1b0 [ 298.572078][T10376] __x64_sys_setsockopt+0x145/0x1b0 [ 298.572105][T10376] do_syscall_64+0xfa/0xfa0 [ 298.572128][T10376] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.572153][T10376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.572171][T10376] ? clear_bhb_loop+0x60/0xb0 [ 298.572194][T10376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.572211][T10376] RIP: 0033:0x7fdd1f39f6c9 [ 298.572228][T10376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.572242][T10376] RSP: 002b:00007fdd1d606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 298.572257][T10376] RAX: ffffffffffffffda RBX: 00007fdd1f5f5fa0 RCX: 00007fdd1f39f6c9 [ 298.572268][T10376] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 298.572278][T10376] RBP: 00007fdd1f421f91 R08: 0000000000000004 R09: 0000000000000000 [ 298.572291][T10376] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 298.572303][T10376] R13: 00007fdd1f5f6038 R14: 00007fdd1f5f5fa0 R15: 00007ffd33479088 [ 298.572336][T10376] [ 298.572343][T10376] Mem-Info: [ 298.572351][T10376] active_anon:258 inactive_anon:5768 isolated_anon:0 [ 298.572351][T10376] active_file:5930 inactive_file:38089 isolated_file:0 [ 298.572351][T10376] unevictable:768 dirty:48 writeback:0 [ 298.572351][T10376] slab_reclaimable:11946 slab_unreclaimable:99405 [ 298.572351][T10376] mapped:29993 shmem:1356 pagetables:1112 [ 298.572351][T10376] sec_pagetables:0 bounce:0 [ 298.572351][T10376] kernel_misc_reclaimable:0 [ 298.572351][T10376] free:1332630 free_pcp:7884 free_cma:0 [ 298.572402][T10376] Node 0 active_anon:1032kB inactive_anon:23072kB active_file:23312kB inactive_file:152356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119972kB dirty:188kB writeback:0kB shmem:3888kB kernel_stack:13260kB pagetables:4292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 298.572448][T10376] Node 1 active_anon:0kB inactive_anon:0kB active_file:408kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 298.572491][T10376] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.572555][T10376] lowmem_reserve[]: 0 2515 2517 2517 2517 [ 298.572586][T10376] Node 0 DMA32 free:1411504kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1032kB inactive_anon:23072kB active_file:23312kB inactive_file:152356kB unevictable:1536kB writepending:188kB zspages:0kB present:3129332kB managed:2576080kB mlocked:0kB bounce:0kB free_pcp:31536kB local_pcp:16280kB free_cma:0kB [ 298.572636][T10376] lowmem_reserve[]: 0 0 1 1 1 [ 298.572667][T10376] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.572722][T10376] lowmem_reserve[]: 0 0 0 0 0 [ 298.572753][T10376] Node 1 Normal free:3903656kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:408kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.572805][T10376] lowmem_reserve[]: 0 0 0 0 0 [ 298.572829][T10376] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 298.573210][T10376] Node 0 DMA32: 1320*4kB (UME) 615*8kB (UME) 520*16kB (UME) 829*32kB (UME) 162*64kB (UME) 30*128kB (UME) 4*256kB (UM) 1*512kB (M) 9*1024kB (M) 3*2048kB (M) 326*4096kB (UM) = 1411448kB [ 298.573323][T10376] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 298.573394][T10376] Node 1 Normal: 194*4kB (UE) 44*8kB (UE) 30*16kB (UME) 215*32kB (UME) 108*64kB (UE) 33*128kB (UE) 12*256kB (UM) 8*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3903656kB [ 298.573523][T10376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.573546][T10376] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 298.573559][T10376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.573572][T10376] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 298.573585][T10376] 45371 total pagecache pages [ 298.573591][T10376] 0 pages in swap cache [ 298.573597][T10376] Free swap = 124996kB [ 298.573602][T10376] Total swap = 124996kB [ 298.573609][T10376] 2097051 pages RAM [ 298.573615][T10376] 0 pages HighMem/MovableOnly [ 298.573621][T10376] 421005 pages reserved [ 298.573627][T10376] 0 pages cma reserved [ 299.447366][T10388] FAULT_INJECTION: forcing a failure. [ 299.447366][T10388] name failslab, interval 1, probability 0, space 0, times 0 [ 299.447399][T10388] CPU: 0 UID: 0 PID: 10388 Comm: syz.2.1797 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 299.447421][T10388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.447432][T10388] Call Trace: [ 299.447440][T10388] [ 299.447449][T10388] dump_stack_lvl+0x189/0x250 [ 299.447479][T10388] ? __pfx____ratelimit+0x10/0x10 [ 299.447505][T10388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.447542][T10388] ? __pfx__printk+0x10/0x10 [ 299.447571][T10388] ? __pfx___might_resched+0x10/0x10 [ 299.447591][T10388] ? fs_reclaim_acquire+0x7d/0x100 [ 299.447622][T10388] should_fail_ex+0x46c/0x600 [ 299.447654][T10388] should_failslab+0xa8/0x100 [ 299.447681][T10388] __kmalloc_noprof+0xcc/0x7d0 [ 299.447706][T10388] ? tomoyo_encode+0x28b/0x550 [ 299.447734][T10388] tomoyo_encode+0x28b/0x550 [ 299.447762][T10388] tomoyo_realpath_from_path+0x58d/0x5d0 [ 299.447794][T10388] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 299.447823][T10388] tomoyo_path_number_perm+0x1e8/0x5a0 [ 299.447853][T10388] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 299.447886][T10388] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 299.447912][T10388] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.447967][T10388] ? __fget_files+0x2a/0x420 [ 299.447997][T10388] ? __fget_files+0x3a6/0x420 [ 299.448020][T10388] ? __fget_files+0x2a/0x420 [ 299.448049][T10388] security_file_ioctl+0xcb/0x2d0 [ 299.448072][T10388] __se_sys_ioctl+0x47/0x170 [ 299.448096][T10388] do_syscall_64+0xfa/0xfa0 [ 299.448120][T10388] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.448144][T10388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.448163][T10388] ? clear_bhb_loop+0x60/0xb0 [ 299.448187][T10388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.448205][T10388] RIP: 0033:0x7fdd1f39f6c9 [ 299.448223][T10388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.448239][T10388] RSP: 002b:00007fdd1d606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.448260][T10388] RAX: ffffffffffffffda RBX: 00007fdd1f5f5fa0 RCX: 00007fdd1f39f6c9 [ 299.448275][T10388] RDX: 0000000000000000 RSI: 00000000c1004110 RDI: 0000000000000003 [ 299.448288][T10388] RBP: 00007fdd1d606090 R08: 0000000000000000 R09: 0000000000000000 [ 299.448300][T10388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.448312][T10388] R13: 00007fdd1f5f6038 R14: 00007fdd1f5f5fa0 R15: 00007ffd33479088 [ 299.448345][T10388] [ 299.448366][T10388] ERROR: Out of memory at tomoyo_realpath_from_path. [ 299.509677][T10224] chnl_net:caif_netlink_parms(): no params data found [ 300.112160][T10415] FAULT_INJECTION: forcing a failure. [ 300.112160][T10415] name failslab, interval 1, probability 0, space 0, times 0 [ 300.112193][T10415] CPU: 0 UID: 0 PID: 10415 Comm: syz.4.1806 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 300.112216][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.112228][T10415] Call Trace: [ 300.112235][T10415] [ 300.112244][T10415] dump_stack_lvl+0x189/0x250 [ 300.112274][T10415] ? __pfx____ratelimit+0x10/0x10 [ 300.112300][T10415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.112326][T10415] ? __pfx__printk+0x10/0x10 [ 300.112359][T10415] ? __pfx___might_resched+0x10/0x10 [ 300.112379][T10415] ? fs_reclaim_acquire+0x7d/0x100 [ 300.112407][T10415] should_fail_ex+0x46c/0x600 [ 300.112438][T10415] should_failslab+0xa8/0x100 [ 300.112465][T10415] __kmalloc_noprof+0xcc/0x7d0 [ 300.112489][T10415] ? tomoyo_encode+0x28b/0x550 [ 300.112517][T10415] tomoyo_encode+0x28b/0x550 [ 300.112542][T10415] tomoyo_realpath_from_path+0x58d/0x5d0 [ 300.112566][T10415] ? tomoyo_domain+0xda/0x130 [ 300.112595][T10415] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 300.112624][T10415] tomoyo_path_number_perm+0x1e8/0x5a0 [ 300.112654][T10415] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 300.112684][T10415] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 300.112719][T10415] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.112772][T10415] ? __fget_files+0x2a/0x420 [ 300.112801][T10415] ? __fget_files+0x3a6/0x420 [ 300.112822][T10415] ? __fget_files+0x2a/0x420 [ 300.112850][T10415] security_file_ioctl+0xcb/0x2d0 [ 300.112875][T10415] __se_sys_ioctl+0x47/0x170 [ 300.112898][T10415] do_syscall_64+0xfa/0xfa0 [ 300.112922][T10415] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.112945][T10415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.112965][T10415] ? clear_bhb_loop+0x60/0xb0 [ 300.112988][T10415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.113008][T10415] RIP: 0033:0x7fa23061f6c9 [ 300.113026][T10415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.113043][T10415] RSP: 002b:00007fa22e865038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.113065][T10415] RAX: ffffffffffffffda RBX: 00007fa230876090 RCX: 00007fa23061f6c9 [ 300.113080][T10415] RDX: 0000000000000000 RSI: 000000000000aec7 RDI: 0000000000000006 [ 300.113092][T10415] RBP: 00007fa22e865090 R08: 0000000000000000 R09: 0000000000000000 [ 300.113104][T10415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.113116][T10415] R13: 00007fa230876128 R14: 00007fa230876090 R15: 00007fffe8863c18 [ 300.113149][T10415] [ 300.113188][T10415] ERROR: Out of memory at tomoyo_realpath_from_path. [ 300.198629][ T6010] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 300.232550][ T8846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.362245][ T6010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.362280][ T6010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.362304][ T6010] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 300.362349][ T6010] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.362373][ T6010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.386545][ T6010] usb 3-1: config 0 descriptor?? [ 300.615713][T10224] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.615912][T10224] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.616220][T10224] bridge_slave_0: entered allmulticast mode [ 300.619758][T10224] bridge_slave_0: entered promiscuous mode [ 300.681728][ T6010] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 300.681771][ T6010] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 300.681799][ T6010] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 300.681828][ T6010] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 300.681856][ T6010] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 300.681884][ T6010] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 300.681912][ T6010] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 300.681940][ T6010] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 300.681968][ T6010] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 300.763363][ T6010] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 300.791805][ T6010] usb 3-1: USB disconnect, device number 23 [ 300.913567][T10422] fido_id[10422]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 301.063388][T10224] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.063528][T10224] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.063748][T10224] bridge_slave_1: entered allmulticast mode [ 301.065319][T10224] bridge_slave_1: entered promiscuous mode [ 301.522930][T10437] FAULT_INJECTION: forcing a failure. [ 301.522930][T10437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.522987][T10437] CPU: 1 UID: 0 PID: 10437 Comm: syz.4.1813 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 301.523011][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 301.523023][T10437] Call Trace: [ 301.523032][T10437] [ 301.523041][T10437] dump_stack_lvl+0x189/0x250 [ 301.523073][T10437] ? __pfx____ratelimit+0x10/0x10 [ 301.523098][T10437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.523126][T10437] ? __pfx__printk+0x10/0x10 [ 301.523148][T10437] ? __might_fault+0xb0/0x130 [ 301.523192][T10437] should_fail_ex+0x46c/0x600 [ 301.523225][T10437] _copy_from_user+0x2d/0xb0 [ 301.523247][T10437] ipv6_mcast_join_leave+0xfc/0x1f0 [ 301.523276][T10437] ? __pfx_ipv6_mcast_join_leave+0x10/0x10 [ 301.523319][T10437] ? rt_spin_unlock+0x161/0x200 [ 301.523341][T10437] ? lock_sock_nested+0x5f/0x130 [ 301.523367][T10437] ? lock_sock_nested+0xdd/0x130 [ 301.523395][T10437] do_ipv6_setsockopt+0x17e8/0x2eb0 [ 301.523428][T10437] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 301.523455][T10437] ? __pfx___schedule+0x10/0x10 [ 301.523486][T10437] ? do_raw_spin_lock+0x121/0x290 [ 301.523518][T10437] ? rcu_is_watching+0x15/0xb0 [ 301.523538][T10437] ? trace_irq_disable+0x37/0x110 [ 301.523564][T10437] ? preempt_schedule_irq+0xde/0x150 [ 301.523588][T10437] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 301.523619][T10437] ? irqentry_exit+0x74/0x90 [ 301.523644][T10437] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.523677][T10437] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 301.523715][T10437] ipv6_setsockopt+0x59/0x170 [ 301.523736][T10437] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 301.523765][T10437] do_sock_setsockopt+0x17c/0x1b0 [ 301.523793][T10437] __x64_sys_setsockopt+0x145/0x1b0 [ 301.523820][T10437] do_syscall_64+0xfa/0xfa0 [ 301.523847][T10437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.523866][T10437] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 301.523885][T10437] ? clear_bhb_loop+0x60/0xb0 [ 301.523909][T10437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.523928][T10437] RIP: 0033:0x7fa23061f6c9 [ 301.523946][T10437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.523963][T10437] RSP: 002b:00007fa22e844038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 301.523984][T10437] RAX: ffffffffffffffda RBX: 00007fa230876180 RCX: 00007fa23061f6c9 [ 301.523999][T10437] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000008 [ 301.524012][T10437] RBP: 00007fa22e844090 R08: 0000000000000088 R09: 0000000000000000 [ 301.524025][T10437] R10: 0000200000fca000 R11: 0000000000000246 R12: 0000000000000001 [ 301.524038][T10437] R13: 00007fa230876218 R14: 00007fa230876180 R15: 00007fffe8863c18 [ 301.524072][T10437] [ 302.260015][T10224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.271461][T10224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.475580][T10224] team0: Port device team_slave_0 added [ 302.484491][T10224] team0: Port device team_slave_1 added [ 303.183098][T10224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.183117][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.183143][T10224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.257311][T10224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.257327][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.257353][T10224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.314599][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.350319][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.351746][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.353397][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.354673][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.671586][ T1177] bridge_slave_1: left allmulticast mode [ 303.671616][ T1177] bridge_slave_1: left promiscuous mode [ 303.671857][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.770198][ T1177] bridge_slave_0: left allmulticast mode [ 303.770228][ T1177] bridge_slave_0: left promiscuous mode [ 303.770515][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.819010][ T5873] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 303.969028][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 303.971299][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.971346][ T5873] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 303.971371][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.023981][ T5873] usb 3-1: config 0 descriptor?? [ 304.592356][ T5873] elan 0003:04F3:0755.000A: hidraw0: USB HID v0.05 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 304.863911][ T5873] usb 3-1: USB disconnect, device number 24 [ 304.890198][T10516] fido_id[10516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 305.439819][ T5120] Bluetooth: hci0: command tx timeout [ 306.248694][ T44] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 306.421381][ T44] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 306.424936][ T44] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 306.424968][ T44] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 306.424991][ T44] usb 3-1: Product: syz [ 306.425007][ T44] usb 3-1: Manufacturer: syz [ 306.425023][ T44] usb 3-1: SerialNumber: syz [ 306.472578][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.489159][ T44] hso 3-1:6.0: Not our interface [ 306.599989][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.691532][ T1177] bond0 (unregistering): Released all slaves [ 307.028124][T10568] FAULT_INJECTION: forcing a failure. [ 307.028124][T10568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.028195][T10568] CPU: 1 UID: 0 PID: 10568 Comm: syz.4.1863 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 307.028219][T10568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 307.028247][T10568] Call Trace: [ 307.028256][T10568] [ 307.028273][T10568] dump_stack_lvl+0x189/0x250 [ 307.028306][T10568] ? __pfx____ratelimit+0x10/0x10 [ 307.028332][T10568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.028363][T10568] ? __pfx__printk+0x10/0x10 [ 307.028399][T10568] should_fail_ex+0x46c/0x600 [ 307.028431][T10568] strncpy_from_user+0x36/0x290 [ 307.028459][T10568] getname_flags+0xf3/0x540 [ 307.028491][T10568] do_sys_openat2+0xbc/0x1c0 [ 307.028513][T10568] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.028539][T10568] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 307.028563][T10568] ? ksys_write+0x230/0x260 [ 307.028595][T10568] __x64_sys_openat+0x138/0x170 [ 307.028620][T10568] do_syscall_64+0xfa/0xfa0 [ 307.028646][T10568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.028665][T10568] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 307.028684][T10568] ? clear_bhb_loop+0x60/0xb0 [ 307.028707][T10568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.028726][T10568] RIP: 0033:0x7fa23061df10 [ 307.028745][T10568] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 307.028762][T10568] RSP: 002b:00007fa22e843b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 307.028783][T10568] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa23061df10 [ 307.028798][T10568] RDX: 0000000000000000 RSI: 00007fa22e843c10 RDI: 00000000ffffff9c [ 307.028811][T10568] RBP: 00007fa22e843c10 R08: 0000000000000000 R09: 00236f656469762f [ 307.028825][T10568] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 307.028838][T10568] R13: 00007fa230876218 R14: 00007fa230876180 R15: 00007fffe8863c18 [ 307.028872][T10568] [ 307.530403][ T5120] Bluetooth: hci0: command tx timeout [ 307.755134][T10224] hsr_slave_0: entered promiscuous mode [ 307.756507][T10224] hsr_slave_1: entered promiscuous mode [ 307.757416][T10224] debugfs: 'hsr0' already exists in 'hsr' [ 307.757440][T10224] Cannot create hsr debugfs directory [ 307.900770][ T5887] usb 3-1: USB disconnect, device number 25 [ 308.189979][T10591] FAULT_INJECTION: forcing a failure. [ 308.189979][T10591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.190013][T10591] CPU: 1 UID: 0 PID: 10591 Comm: syz.4.1873 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 308.190037][T10591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 308.190049][T10591] Call Trace: [ 308.190057][T10591] [ 308.190066][T10591] dump_stack_lvl+0x189/0x250 [ 308.190098][T10591] ? __pfx____ratelimit+0x10/0x10 [ 308.190123][T10591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.190148][T10591] ? __pfx__printk+0x10/0x10 [ 308.190171][T10591] ? __might_fault+0xb0/0x130 [ 308.190208][T10591] should_fail_ex+0x46c/0x600 [ 308.190237][T10591] _copy_from_iter+0x1de/0x1790 [ 308.190267][T10591] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 308.190305][T10591] ? __pfx__copy_from_iter+0x10/0x10 [ 308.190338][T10591] ? set_page_refcounted+0xa0/0x1e0 [ 308.190366][T10591] ? page_copy_sane+0x4e/0x280 [ 308.190386][T10591] copy_page_from_iter+0xdd/0x170 [ 308.190409][T10591] tun_get_user+0x1d7b/0x3ec0 [ 308.190441][T10591] ? tun_get_user+0x6f6/0x3ec0 [ 308.190482][T10591] ? __might_fault+0xb0/0x130 [ 308.190506][T10591] ? __pfx_tun_get_user+0x10/0x10 [ 308.190528][T10591] ? _parse_integer_limit+0x1ae/0x1f0 [ 308.190562][T10591] ? __lock_acquire+0xab9/0xd20 [ 308.190593][T10591] ? ref_tracker_alloc+0x2fe/0x450 [ 308.190616][T10591] ? __lock_acquire+0xab9/0xd20 [ 308.190641][T10591] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 308.190671][T10591] ? tun_get+0x1c/0x2f0 [ 308.190698][T10591] ? tun_get+0x1c/0x2f0 [ 308.190719][T10591] ? tun_get+0x1c/0x2f0 [ 308.190746][T10591] tun_chr_write_iter+0x119/0x200 [ 308.190776][T10591] vfs_write+0x5d5/0xb40 [ 308.190803][T10591] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 308.190828][T10591] ? __pfx_vfs_write+0x10/0x10 [ 308.190860][T10591] ? __fget_files+0x2a/0x420 [ 308.190895][T10591] ksys_write+0x14b/0x260 [ 308.190920][T10591] ? __pfx_ksys_write+0x10/0x10 [ 308.190946][T10591] ? do_syscall_64+0xbe/0xfa0 [ 308.190975][T10591] do_syscall_64+0xfa/0xfa0 [ 308.190998][T10591] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.191022][T10591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.191041][T10591] ? clear_bhb_loop+0x60/0xb0 [ 308.191064][T10591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.191082][T10591] RIP: 0033:0x7fa23061e17f [ 308.191100][T10591] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 308.191116][T10591] RSP: 002b:00007fa22e886000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 308.191136][T10591] RAX: ffffffffffffffda RBX: 00007fa230875fa0 RCX: 00007fa23061e17f [ 308.191151][T10591] RDX: 000000000000002a RSI: 0000200000000340 RDI: 00000000000000c8 [ 308.191164][T10591] RBP: 00007fa22e886090 R08: 0000000000000000 R09: 0000000000000000 [ 308.191177][T10591] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 308.191189][T10591] R13: 00007fa230876038 R14: 00007fa230875fa0 R15: 00007fffe8863c18 [ 308.191220][T10591] [ 308.281275][T10592] FAULT_INJECTION: forcing a failure. [ 308.281275][T10592] name failslab, interval 1, probability 0, space 0, times 0 [ 308.281308][T10592] CPU: 1 UID: 0 PID: 10592 Comm: syz.2.1871 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 308.281331][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 308.281344][T10592] Call Trace: [ 308.281352][T10592] [ 308.281360][T10592] dump_stack_lvl+0x189/0x250 [ 308.281392][T10592] ? __pfx____ratelimit+0x10/0x10 [ 308.281417][T10592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.281453][T10592] ? __pfx__printk+0x10/0x10 [ 308.281480][T10592] ? __pfx___might_resched+0x10/0x10 [ 308.281501][T10592] ? fs_reclaim_acquire+0x7d/0x100 [ 308.281531][T10592] should_fail_ex+0x46c/0x600 [ 308.281559][T10592] ? __alloc_skb+0x112/0x2d0 [ 308.281578][T10592] should_failslab+0xa8/0x100 [ 308.281604][T10592] ? __alloc_skb+0x112/0x2d0 [ 308.281621][T10592] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 308.281654][T10592] __alloc_skb+0x112/0x2d0 [ 308.281677][T10592] __ip6_append_data+0x2c16/0x3f30 [ 308.281722][T10592] ? __pfx_raw6_getfrag+0x10/0x10 [ 308.281765][T10592] ? __pfx___ip6_append_data+0x10/0x10 [ 308.281783][T10592] ? __pfx_ip6_mtu+0x10/0x10 [ 308.281813][T10592] ip6_append_data+0x1c1/0x380 [ 308.281839][T10592] ? __pfx_raw6_getfrag+0x10/0x10 [ 308.281864][T10592] rawv6_sendmsg+0x1286/0x1830 [ 308.281907][T10592] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 308.281936][T10592] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 308.281981][T10592] ? sock_rps_record_flow+0x19/0x410 [ 308.282010][T10592] ? inet_sendmsg+0x2f4/0x370 [ 308.282034][T10592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.282062][T10592] __sock_sendmsg+0x19c/0x270 [ 308.282090][T10592] ____sys_sendmsg+0x534/0x820 [ 308.282117][T10592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.282149][T10592] ? import_iovec+0x74/0xa0 [ 308.282172][T10592] ___sys_sendmsg+0x21f/0x2a0 [ 308.282196][T10592] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.282255][T10592] ? __fget_files+0x2a/0x420 [ 308.282278][T10592] ? __fget_files+0x3a6/0x420 [ 308.282312][T10592] __sys_sendmmsg+0x22d/0x430 [ 308.282340][T10592] ? __pfx___sys_sendmmsg+0x10/0x10 [ 308.282372][T10592] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 308.282410][T10592] ? ksys_write+0x230/0x260 [ 308.282439][T10592] ? __pfx_ksys_write+0x10/0x10 [ 308.282466][T10592] __x64_sys_sendmmsg+0xa0/0xc0 [ 308.282490][T10592] do_syscall_64+0xfa/0xfa0 [ 308.282514][T10592] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.282538][T10592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.282557][T10592] ? clear_bhb_loop+0x60/0xb0 [ 308.282579][T10592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.282598][T10592] RIP: 0033:0x7fdd1f39f6c9 [ 308.282615][T10592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.282632][T10592] RSP: 002b:00007fdd1d5c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 308.282653][T10592] RAX: ffffffffffffffda RBX: 00007fdd1f5f6180 RCX: 00007fdd1f39f6c9 [ 308.282667][T10592] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000005 [ 308.282679][T10592] RBP: 00007fdd1d5c4090 R08: 0000000000000000 R09: 0000000000000000 [ 308.282691][T10592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.282704][T10592] R13: 00007fdd1f5f6218 R14: 00007fdd1f5f6180 R15: 00007ffd33479088 [ 308.282736][T10592] [ 308.817531][ T1177] hsr_slave_0: left promiscuous mode [ 308.852474][ T1177] hsr_slave_1: left promiscuous mode [ 308.854253][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.900006][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.598803][ T5120] Bluetooth: hci0: command tx timeout [ 310.379358][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.528712][ T5888] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 310.681095][ T5888] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 310.681113][ T5888] usb 3-1: config 0 has no interface number 0 [ 310.681156][ T5888] usb 3-1: config 0 interface 17 has no altsetting 0 [ 310.683533][ T5888] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 310.683557][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.683569][ T5888] usb 3-1: Product: syz [ 310.683577][ T5888] usb 3-1: Manufacturer: syz [ 310.683585][ T5888] usb 3-1: SerialNumber: syz [ 310.687000][ T5888] usb 3-1: config 0 descriptor?? [ 310.693971][ T5888] esd_usb 3-1:0.17: sending version message failed [ 310.694063][ T5888] esd_usb 3-1:0.17: probe with driver esd_usb failed with error -8 [ 310.699752][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 310.901600][ T5888] usb 3-1: USB disconnect, device number 26 [ 310.916121][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 311.435230][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.446706][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.456056][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.481276][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.486765][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.678767][ T5812] Bluetooth: hci0: command tx timeout [ 312.187889][T10667] FAULT_INJECTION: forcing a failure. [ 312.187889][T10667] name failslab, interval 1, probability 0, space 0, times 0 [ 312.187947][T10667] CPU: 1 UID: 0 PID: 10667 Comm: syz.4.1904 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 312.187970][T10667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.187983][T10667] Call Trace: [ 312.187991][T10667] [ 312.188000][T10667] dump_stack_lvl+0x189/0x250 [ 312.188034][T10667] ? __pfx____ratelimit+0x10/0x10 [ 312.188059][T10667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.188086][T10667] ? __pfx__printk+0x10/0x10 [ 312.188116][T10667] ? __pfx___might_resched+0x10/0x10 [ 312.188136][T10667] ? fs_reclaim_acquire+0x7d/0x100 [ 312.188166][T10667] should_fail_ex+0x46c/0x600 [ 312.188199][T10667] should_failslab+0xa8/0x100 [ 312.188233][T10667] __kmalloc_noprof+0xcc/0x7d0 [ 312.188257][T10667] ? tomoyo_encode+0x28b/0x550 [ 312.188286][T10667] tomoyo_encode+0x28b/0x550 [ 312.188315][T10667] tomoyo_realpath_from_path+0x58d/0x5d0 [ 312.188340][T10667] ? tomoyo_domain+0xda/0x130 [ 312.188372][T10667] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 312.188400][T10667] tomoyo_path_number_perm+0x1e8/0x5a0 [ 312.188431][T10667] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 312.188462][T10667] ? __pfx___schedule+0x10/0x10 [ 312.188485][T10667] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 312.188540][T10667] ? __fget_files+0x2a/0x420 [ 312.188570][T10667] ? __fget_files+0x3a6/0x420 [ 312.188594][T10667] ? __fget_files+0x2a/0x420 [ 312.188623][T10667] security_file_ioctl+0xcb/0x2d0 [ 312.188646][T10667] __se_sys_ioctl+0x47/0x170 [ 312.188672][T10667] do_syscall_64+0xfa/0xfa0 [ 312.188698][T10667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.188718][T10667] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 312.188737][T10667] ? clear_bhb_loop+0x60/0xb0 [ 312.188760][T10667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.188779][T10667] RIP: 0033:0x7fa23061f6c9 [ 312.188798][T10667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.188815][T10667] RSP: 002b:00007fa22e844038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.188836][T10667] RAX: ffffffffffffffda RBX: 00007fa230876180 RCX: 00007fa23061f6c9 [ 312.188851][T10667] RDX: 00002000000002c0 RSI: 000000004068aea3 RDI: 0000000000000006 [ 312.188865][T10667] RBP: 00007fa22e844090 R08: 0000000000000000 R09: 0000000000000000 [ 312.188878][T10667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.188891][T10667] R13: 00007fa230876218 R14: 00007fa230876180 R15: 00007fffe8863c18 [ 312.188925][T10667] [ 312.189108][T10667] ERROR: Out of memory at tomoyo_realpath_from_path. [ 313.260840][T10678] FAULT_INJECTION: forcing a failure. [ 313.260840][T10678] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 313.260866][T10678] CPU: 1 UID: 0 PID: 10678 Comm: syz.4.1910 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.260879][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.260886][T10678] Call Trace: [ 313.260891][T10678] [ 313.260896][T10678] dump_stack_lvl+0x189/0x250 [ 313.260918][T10678] ? __pfx____ratelimit+0x10/0x10 [ 313.260932][T10678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.260948][T10678] ? __pfx__printk+0x10/0x10 [ 313.260962][T10678] ? fs_reclaim_acquire+0x7d/0x100 [ 313.260982][T10678] should_fail_ex+0x46c/0x600 [ 313.261000][T10678] prepare_alloc_pages+0x213/0x670 [ 313.261020][T10678] __alloc_frozen_pages_noprof+0x123/0x370 [ 313.261038][T10678] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 313.261059][T10678] ? policy_nodemask+0x27c/0x720 [ 313.261077][T10678] alloc_pages_mpol+0xd1/0x380 [ 313.261094][T10678] alloc_migration_target_by_mpol+0x2e7/0x600 [ 313.261110][T10678] migrate_pages_batch+0x5a8/0x2ec0 [ 313.261129][T10678] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 313.261144][T10678] ? __pfx_migrate_pages_batch+0x10/0x10 [ 313.261167][T10678] migrate_pages+0x1bc3/0x2910 [ 313.261186][T10678] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 313.261201][T10678] ? __pfx_migrate_pages+0x10/0x10 [ 313.261210][T10678] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 313.261225][T10678] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.261241][T10678] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 313.261255][T10678] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 313.261269][T10678] ? do_raw_spin_lock+0x121/0x290 [ 313.261294][T10678] ? __se_sys_mbind+0xa04/0xc40 [ 313.261311][T10678] __se_sys_mbind+0xa47/0xc40 [ 313.261325][T10678] ? __pfx_vfs_write+0x10/0x10 [ 313.261341][T10678] ? __pfx___se_sys_mbind+0x10/0x10 [ 313.261359][T10678] ? fput+0xa0/0xd0 [ 313.261370][T10678] ? ksys_write+0x230/0x260 [ 313.261383][T10678] ? __pfx_ksys_write+0x10/0x10 [ 313.261398][T10678] ? __x64_sys_mbind+0x21/0xf0 [ 313.261413][T10678] do_syscall_64+0xfa/0xfa0 [ 313.261427][T10678] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.261441][T10678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.261454][T10678] ? clear_bhb_loop+0x60/0xb0 [ 313.261467][T10678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.261477][T10678] RIP: 0033:0x7fa23061f6c9 [ 313.261488][T10678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.261497][T10678] RSP: 002b:00007fa22e886038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 313.261509][T10678] RAX: ffffffffffffffda RBX: 00007fa230875fa0 RCX: 00007fa23061f6c9 [ 313.261517][T10678] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 313.261525][T10678] RBP: 00007fa22e886090 R08: 0000000000000000 R09: 0000000000000002 [ 313.261531][T10678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.261538][T10678] R13: 00007fa230876038 R14: 00007fa230875fa0 R15: 00007fffe8863c18 [ 313.261555][T10678] [ 313.598706][ T5812] Bluetooth: hci4: command tx timeout [ 314.590758][T10737] FAULT_INJECTION: forcing a failure. [ 314.590758][T10737] name failslab, interval 1, probability 0, space 0, times 0 [ 314.591608][T10737] CPU: 0 UID: 0 PID: 10737 Comm: syz.4.1932 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 314.591635][T10737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 314.591648][T10737] Call Trace: [ 314.591659][T10737] [ 314.591671][T10737] dump_stack_lvl+0x189/0x250 [ 314.591703][T10737] ? __pfx____ratelimit+0x10/0x10 [ 314.591729][T10737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.591757][T10737] ? __pfx__printk+0x10/0x10 [ 314.591788][T10737] ? rt_spin_lock+0x1c1/0x3e0 [ 314.591815][T10737] should_fail_ex+0x46c/0x600 [ 314.591847][T10737] ? inet_bind_bucket_create+0x30/0x240 [ 314.591874][T10737] should_failslab+0xa8/0x100 [ 314.591902][T10737] ? inet_bind_bucket_create+0x30/0x240 [ 314.591927][T10737] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 314.591951][T10737] ? __pfx_rt_spin_lock+0x10/0x10 [ 314.591980][T10737] inet_bind_bucket_create+0x30/0x240 [ 314.592013][T10737] inet_csk_get_port+0xc01/0x1720 [ 314.592058][T10737] ? rt_spin_unlock+0x161/0x200 [ 314.592081][T10737] ? __inet6_bind+0x455/0xf60 [ 314.592113][T10737] __inet6_bind+0x6e5/0xf60 [ 314.592152][T10737] __sys_bind+0x2cc/0x3e0 [ 314.592175][T10737] ? __pfx___sys_bind+0x10/0x10 [ 314.592221][T10737] __x64_sys_bind+0x7a/0x90 [ 314.592241][T10737] do_syscall_64+0xfa/0xfa0 [ 314.592268][T10737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.592286][T10737] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 314.592312][T10737] ? clear_bhb_loop+0x60/0xb0 [ 314.592335][T10737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.592355][T10737] RIP: 0033:0x7fa23061f6c9 [ 314.592373][T10737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.592390][T10737] RSP: 002b:00007fa22e844038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 314.592411][T10737] RAX: ffffffffffffffda RBX: 00007fa230876180 RCX: 00007fa23061f6c9 [ 314.592427][T10737] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 314.592440][T10737] RBP: 00007fa22e844090 R08: 0000000000000000 R09: 0000000000000000 [ 314.592452][T10737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.592465][T10737] R13: 00007fa230876218 R14: 00007fa230876180 R15: 00007fffe8863c18 [ 314.592501][T10737] [ 315.074537][T10739] FAULT_INJECTION: forcing a failure. [ 315.074537][T10739] name failslab, interval 1, probability 0, space 0, times 0 [ 315.074571][T10739] CPU: 0 UID: 0 PID: 10739 Comm: syz.2.1939 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 315.074602][T10739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 315.074615][T10739] Call Trace: [ 315.074624][T10739] [ 315.074634][T10739] dump_stack_lvl+0x189/0x250 [ 315.074666][T10739] ? __pfx____ratelimit+0x10/0x10 [ 315.074691][T10739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.074718][T10739] ? __pfx__printk+0x10/0x10 [ 315.074747][T10739] ? __pfx___might_resched+0x10/0x10 [ 315.074769][T10739] ? fs_reclaim_acquire+0x7d/0x100 [ 315.074799][T10739] should_fail_ex+0x46c/0x600 [ 315.074828][T10739] ? __alloc_skb+0x112/0x2d0 [ 315.074847][T10739] should_failslab+0xa8/0x100 [ 315.074874][T10739] ? __alloc_skb+0x112/0x2d0 [ 315.074891][T10739] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 315.074915][T10739] ? smack_socket_sendmsg+0x1a7/0x520 [ 315.074943][T10739] __alloc_skb+0x112/0x2d0 [ 315.074967][T10739] netlink_sendmsg+0x5c6/0xb30 [ 315.074987][T10739] ? is_bpf_text_address+0x26/0x2b0 [ 315.075023][T10739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.075052][T10739] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 315.075076][T10739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.075098][T10739] __sock_sendmsg+0x21c/0x270 [ 315.075127][T10739] ____sys_sendmsg+0x508/0x820 [ 315.075155][T10739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.075186][T10739] ? import_iovec+0x74/0xa0 [ 315.075211][T10739] ___sys_sendmsg+0x21f/0x2a0 [ 315.075236][T10739] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.075295][T10739] ? __fget_files+0x2a/0x420 [ 315.075320][T10739] ? __fget_files+0x3a6/0x420 [ 315.075356][T10739] __x64_sys_sendmsg+0x1a1/0x260 [ 315.075381][T10739] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.075414][T10739] ? __pfx_ksys_write+0x10/0x10 [ 315.075441][T10739] ? do_syscall_64+0xbe/0xfa0 [ 315.075470][T10739] do_syscall_64+0xfa/0xfa0 [ 315.075494][T10739] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.075518][T10739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.075538][T10739] ? clear_bhb_loop+0x60/0xb0 [ 315.075561][T10739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.075580][T10739] RIP: 0033:0x7fdd1f39f6c9 [ 315.075602][T10739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.075618][T10739] RSP: 002b:00007fdd1d606038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.075640][T10739] RAX: ffffffffffffffda RBX: 00007fdd1f5f5fa0 RCX: 00007fdd1f39f6c9 [ 315.075655][T10739] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 315.075668][T10739] RBP: 00007fdd1d606090 R08: 0000000000000000 R09: 0000000000000000 [ 315.075681][T10739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.075694][T10739] R13: 00007fdd1f5f6038 R14: 00007fdd1f5f5fa0 R15: 00007ffd33479088 [ 315.075727][T10739] [ 315.678730][ T5812] Bluetooth: hci4: command tx timeout [ 316.028637][ T5888] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 316.194837][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 316.197296][ T5888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.197323][ T5888] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 316.197377][ T5888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 316.197414][ T5888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 316.197459][ T5888] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 316.197483][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.274060][ T5888] hub 3-1:1.0: bad descriptor, ignoring hub [ 316.274102][ T5888] hub 3-1:1.0: probe with driver hub failed with error -5 [ 316.275001][ T5888] cdc_wdm 3-1:1.0: skipping garbage [ 316.275018][ T5888] cdc_wdm 3-1:1.0: skipping garbage [ 316.294156][ T5888] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 316.294178][ T5888] cdc_wdm 3-1:1.0: Unknown control protocol [ 316.472668][T10759] FAULT_INJECTION: forcing a failure. [ 316.472668][T10759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.472698][T10759] CPU: 0 UID: 0 PID: 10759 Comm: syz.2.1950 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 316.472714][T10759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.472723][T10759] Call Trace: [ 316.472729][T10759] [ 316.472736][T10759] dump_stack_lvl+0x189/0x250 [ 316.472763][T10759] ? __pfx____ratelimit+0x10/0x10 [ 316.472782][T10759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.472805][T10759] ? __pfx__printk+0x10/0x10 [ 316.472835][T10759] should_fail_ex+0x46c/0x600 [ 316.472861][T10759] strncpy_from_user+0x36/0x290 [ 316.472883][T10759] getname_flags+0xf3/0x540 [ 316.472910][T10759] do_sys_openat2+0xbc/0x1c0 [ 316.472929][T10759] ? __pfx_do_sys_openat2+0x10/0x10 [ 316.472949][T10759] ? ksys_write+0x230/0x260 [ 316.472971][T10759] ? __pfx_ksys_write+0x10/0x10 [ 316.472993][T10759] __x64_sys_openat+0x138/0x170 [ 316.473013][T10759] do_syscall_64+0xfa/0xfa0 [ 316.473035][T10759] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.473057][T10759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.473074][T10759] ? clear_bhb_loop+0x60/0xb0 [ 316.473095][T10759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.473110][T10759] RIP: 0033:0x7fdd1f39df10 [ 316.473125][T10759] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 316.473142][T10759] RSP: 002b:00007fdd1d605b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 316.473162][T10759] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fdd1f39df10 [ 316.473176][T10759] RDX: 0000000000000002 RSI: 00007fdd1d605c10 RDI: 00000000ffffff9c [ 316.473188][T10759] RBP: 00007fdd1d605c10 R08: 0000000000000000 R09: 00007fdd1d605987 [ 316.473200][T10759] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 316.473211][T10759] R13: 00007fdd1f5f6038 R14: 00007fdd1f5f5fa0 R15: 00007ffd33479088 [ 316.473242][T10759] [ 316.578990][ T5888] usb 3-1: USB disconnect, device number 27 [ 316.939913][ T6010] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 317.092018][ T6010] usb 3-1: Using ep0 maxpacket: 8 [ 317.098804][ T6010] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.098833][ T6010] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 317.098891][ T6010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 317.098920][ T6010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 317.098965][ T6010] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 317.098989][ T6010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.185396][ T6010] hub 3-1:1.0: bad descriptor, ignoring hub [ 317.185439][ T6010] hub 3-1:1.0: probe with driver hub failed with error -5 [ 317.186446][ T6010] cdc_wdm 3-1:1.0: skipping garbage [ 317.186462][ T6010] cdc_wdm 3-1:1.0: skipping garbage [ 317.222889][ T6010] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 317.222911][ T6010] cdc_wdm 3-1:1.0: Unknown control protocol [ 317.288705][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.288771][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.489086][ T1217] usb 3-1: USB disconnect, device number 28 [ 317.758743][ T5812] Bluetooth: hci4: command tx timeout [ 318.086070][T10465] chnl_net:caif_netlink_parms(): no params data found [ 319.541363][T10867] FAULT_INJECTION: forcing a failure. [ 319.541363][T10867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.541423][T10867] CPU: 1 UID: 0 PID: 10867 Comm: syz.4.1988 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 319.541446][T10867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.541458][T10867] Call Trace: [ 319.541466][T10867] [ 319.541475][T10867] dump_stack_lvl+0x189/0x250 [ 319.541507][T10867] ? __pfx____ratelimit+0x10/0x10 [ 319.541531][T10867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.541557][T10867] ? __pfx__printk+0x10/0x10 [ 319.541576][T10867] ? __might_fault+0xb0/0x130 [ 319.541598][T10867] should_fail_ex+0x46c/0x600 [ 319.541616][T10867] _copy_from_user+0x2d/0xb0 [ 319.541629][T10867] kstrtouint_from_user+0xc4/0x170 [ 319.541646][T10867] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 319.541671][T10867] proc_fail_nth_write+0x88/0x200 [ 319.541683][T10867] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 319.541698][T10867] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 319.541710][T10867] vfs_write+0x287/0xb40 [ 319.541723][T10867] ? preempt_schedule_thunk+0x16/0x30 [ 319.541741][T10867] ? __pfx_vfs_write+0x10/0x10 [ 319.541752][T10867] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 319.541770][T10867] ? mutex_lock_nested+0x154/0x1d0 [ 319.541781][T10867] ? fdget_pos+0x253/0x320 [ 319.541801][T10867] ksys_write+0x14b/0x260 [ 319.541816][T10867] ? __pfx_ksys_write+0x10/0x10 [ 319.541831][T10867] ? do_syscall_64+0xbe/0xfa0 [ 319.541847][T10867] do_syscall_64+0xfa/0xfa0 [ 319.541862][T10867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.541873][T10867] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 319.541882][T10867] ? clear_bhb_loop+0x60/0xb0 [ 319.541895][T10867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.541905][T10867] RIP: 0033:0x7fa23061e17f [ 319.541916][T10867] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 319.541925][T10867] RSP: 002b:00007fa22e844030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 319.541937][T10867] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa23061e17f [ 319.541945][T10867] RDX: 0000000000000001 RSI: 00007fa22e8440a0 RDI: 0000000000000005 [ 319.541952][T10867] RBP: 00007fa22e844090 R08: 0000000000000000 R09: 000000000000001c [ 319.541959][T10867] R10: 000000002000c851 R11: 0000000000000293 R12: 0000000000000001 [ 319.541965][T10867] R13: 00007fa230876218 R14: 00007fa230876180 R15: 00007fffe8863c18 [ 319.541984][T10867] [ 319.848654][ T5812] Bluetooth: hci4: command tx timeout [ 320.449850][T10465] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.449973][T10465] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.450221][T10465] bridge_slave_0: entered allmulticast mode [ 320.453114][T10465] bridge_slave_0: entered promiscuous mode [ 320.502576][T10465] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.502793][T10465] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.503012][T10465] bridge_slave_1: entered allmulticast mode [ 320.516427][T10465] bridge_slave_1: entered promiscuous mode [ 320.540702][ T37] audit: type=1804 audit(1762552427.204:7): pid=10902 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2005" name="/newroot/878/file0" dev="tmpfs" ino=4430 res=1 errno=0 [ 320.555962][T10643] chnl_net:caif_netlink_parms(): no params data found [ 321.068742][T10919] FAULT_INJECTION: forcing a failure. [ 321.068742][T10919] name failslab, interval 1, probability 0, space 0, times 0 [ 321.068881][T10919] CPU: 0 UID: 0 PID: 10919 Comm: syz.4.2012 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 321.068905][T10919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.068917][T10919] Call Trace: [ 321.068927][T10919] [ 321.068937][T10919] dump_stack_lvl+0x189/0x250 [ 321.068964][T10919] ? __pfx____ratelimit+0x10/0x10 [ 321.068985][T10919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.069007][T10919] ? __pfx__printk+0x10/0x10 [ 321.069034][T10919] ? rcu_is_watching+0x15/0xb0 [ 321.069055][T10919] should_fail_ex+0x46c/0x600 [ 321.069080][T10919] ? sctp_get_port_local+0x726/0x16a0 [ 321.069095][T10919] should_failslab+0xa8/0x100 [ 321.069117][T10919] ? sctp_get_port_local+0x726/0x16a0 [ 321.069130][T10919] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 321.069158][T10919] sctp_get_port_local+0x726/0x16a0 [ 321.069181][T10919] ? sctp_get_port_local+0x46c/0x16a0 [ 321.069196][T10919] ? __pfx_sctp_get_port_local+0x10/0x10 [ 321.069215][T10919] ? sctp_bind_addr_match+0x28b/0x2b0 [ 321.069240][T10919] sctp_do_bind+0x4ea/0x940 [ 321.069266][T10919] sctp_connect_new_asoc+0x25c/0x690 [ 321.069291][T10919] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 321.069318][T10919] ? security_sctp_bind_connect+0x285/0x2e0 [ 321.069336][T10919] ? security_sctp_bind_connect+0x7e/0x2e0 [ 321.069354][T10919] sctp_sendmsg+0x14fd/0x2590 [ 321.069374][T10919] ? rcu_is_watching+0x15/0xb0 [ 321.069399][T10919] ? __pfx_sctp_sendmsg+0x10/0x10 [ 321.069420][T10919] ? irqentry_exit+0x74/0x90 [ 321.069440][T10919] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.069464][T10919] ? __pfx_sctp_sendmsg+0x10/0x10 [ 321.069492][T10919] ? __sanitizer_cov_trace_pc+0x8/0x80 [ 321.069513][T10919] ? inet_sendmsg+0x2f4/0x370 [ 321.069539][T10919] __sock_sendmsg+0x19c/0x270 [ 321.069564][T10919] __sys_sendto+0x3c7/0x520 [ 321.069583][T10919] ? __pfx___sys_sendto+0x10/0x10 [ 321.069611][T10919] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 321.069653][T10919] __x64_sys_sendto+0xde/0x100 [ 321.069672][T10919] do_syscall_64+0xfa/0xfa0 [ 321.069694][T10919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.069708][T10919] ? asm_sysvec_call_function_single+0x1a/0x20 [ 321.069724][T10919] ? clear_bhb_loop+0x60/0xb0 [ 321.069743][T10919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.069758][T10919] RIP: 0033:0x7fa23061f6c9 [ 321.069773][T10919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.069787][T10919] RSP: 002b:00007fa22e865038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 321.069804][T10919] RAX: ffffffffffffffda RBX: 00007fa230876090 RCX: 00007fa23061f6c9 [ 321.069816][T10919] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000005 [ 321.069827][T10919] RBP: 00007fa22e865090 R08: 0000200000000140 R09: 000000000000001c [ 321.069838][T10919] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 321.069852][T10919] R13: 00007fa230876128 R14: 00007fa230876090 R15: 00007fffe8863c18 [ 321.069880][T10919] [ 321.794911][T10937] FAULT_INJECTION: forcing a failure. [ 321.794911][T10937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.794945][T10937] CPU: 0 UID: 0 PID: 10937 Comm: syz.4.2022 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 321.794969][T10937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.794981][T10937] Call Trace: [ 321.794990][T10937] [ 321.794999][T10937] dump_stack_lvl+0x189/0x250 [ 321.795038][T10937] ? __pfx____ratelimit+0x10/0x10 [ 321.795063][T10937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.795090][T10937] ? __pfx__printk+0x10/0x10 [ 321.795113][T10937] ? __might_fault+0xb0/0x130 [ 321.795150][T10937] should_fail_ex+0x46c/0x600 [ 321.795182][T10937] _copy_from_user+0x2d/0xb0 [ 321.795204][T10937] ___sys_recvmsg+0x12e/0x510 [ 321.795235][T10937] ? __pfx____sys_recvmsg+0x10/0x10 [ 321.795284][T10937] ? __fget_files+0x3a6/0x420 [ 321.795320][T10937] __x64_sys_recvmsg+0x19e/0x260 [ 321.795346][T10937] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 321.795379][T10937] ? __pfx_ksys_write+0x10/0x10 [ 321.795407][T10937] ? do_syscall_64+0xbe/0xfa0 [ 321.795436][T10937] do_syscall_64+0xfa/0xfa0 [ 321.795459][T10937] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.795483][T10937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.795503][T10937] ? clear_bhb_loop+0x60/0xb0 [ 321.795526][T10937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.795545][T10937] RIP: 0033:0x7fa23061f6c9 [ 321.795563][T10937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.795580][T10937] RSP: 002b:00007fa22e886038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 321.795602][T10937] RAX: ffffffffffffffda RBX: 00007fa230875fa0 RCX: 00007fa23061f6c9 [ 321.795617][T10937] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 321.795629][T10937] RBP: 00007fa22e886090 R08: 0000000000000000 R09: 0000000000000000 [ 321.795642][T10937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.795654][T10937] R13: 00007fa230876038 R14: 00007fa230875fa0 R15: 00007fffe8863c18 [ 321.795688][T10937] [ 321.882283][T10465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.983570][T10945] sock: sock_set_timeout: `syz.2.2025' (pid 10945) tries to set negative timeout [ 322.373680][T10465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.479349][T10965] FAULT_INJECTION: forcing a failure. [ 322.479349][T10965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.479419][T10965] CPU: 1 UID: 0 PID: 10965 Comm: syz.2.2029 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 322.479442][T10965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.479455][T10965] Call Trace: [ 322.479463][T10965] [ 322.479473][T10965] dump_stack_lvl+0x189/0x250 [ 322.479505][T10965] ? __pfx____ratelimit+0x10/0x10 [ 322.479530][T10965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.479557][T10965] ? __pfx__printk+0x10/0x10 [ 322.479592][T10965] should_fail_ex+0x46c/0x600 [ 322.479617][T10965] strncpy_from_user+0x36/0x290 [ 322.479646][T10965] getname_flags+0xf3/0x540 [ 322.479678][T10965] do_sys_openat2+0xbc/0x1c0 [ 322.479702][T10965] ? __pfx_do_sys_openat2+0x10/0x10 [ 322.479725][T10965] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 322.479749][T10965] ? ksys_write+0x230/0x260 [ 322.479780][T10965] __x64_sys_openat+0x138/0x170 [ 322.479806][T10965] do_syscall_64+0xfa/0xfa0 [ 322.479832][T10965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.479858][T10965] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 322.479877][T10965] ? clear_bhb_loop+0x60/0xb0 [ 322.479900][T10965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.479920][T10965] RIP: 0033:0x7fdd1f39df10 [ 322.479937][T10965] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 322.479955][T10965] RSP: 002b:00007fdd1d5c3b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 322.479976][T10965] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdd1f39df10 [ 322.479991][T10965] RDX: 0000000000000000 RSI: 00007fdd1d5c3c10 RDI: 00000000ffffff9c [ 322.480004][T10965] RBP: 00007fdd1d5c3c10 R08: 0000000000000000 R09: 00236f656469762f [ 322.480018][T10965] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 322.480032][T10965] R13: 00007fdd1f5f6218 R14: 00007fdd1f5f6180 R15: 00007ffd33479088 [ 322.480066][T10965] [ 322.485917][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.126195][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.406492][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.770864][T10224] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 323.833876][T10465] team0: Port device team_slave_0 added [ 323.835403][T10224] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 324.124679][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.779818][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.841694][T10465] team0: Port device team_slave_1 added [ 324.842803][T10224] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 324.929642][T11017] FAULT_INJECTION: forcing a failure. [ 324.929642][T11017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.929681][T11017] CPU: 0 UID: 0 PID: 11017 Comm: syz.2.2051 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 324.929734][T11017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 324.929761][T11017] Call Trace: [ 324.929780][T11017] [ 324.929797][T11017] dump_stack_lvl+0x189/0x250 [ 324.929828][T11017] ? __pfx____ratelimit+0x10/0x10 [ 324.929853][T11017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.929880][T11017] ? __pfx__printk+0x10/0x10 [ 324.929915][T11017] should_fail_ex+0x46c/0x600 [ 324.929947][T11017] strncpy_from_user+0x36/0x290 [ 324.929974][T11017] getname_flags+0xf3/0x540 [ 324.930006][T11017] do_sys_openat2+0xbc/0x1c0 [ 324.930028][T11017] ? __pfx_do_sys_openat2+0x10/0x10 [ 324.930052][T11017] ? ksys_write+0x230/0x260 [ 324.930077][T11017] ? __pfx_ksys_write+0x10/0x10 [ 324.930101][T11017] __x64_sys_openat+0x138/0x170 [ 324.930127][T11017] do_syscall_64+0xfa/0xfa0 [ 324.930170][T11017] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.930194][T11017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.930213][T11017] ? clear_bhb_loop+0x60/0xb0 [ 324.930236][T11017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.930255][T11017] RIP: 0033:0x7fdd1f39f6c9 [ 324.930273][T11017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.930289][T11017] RSP: 002b:00007fdd1d5c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 324.930309][T11017] RAX: ffffffffffffffda RBX: 00007fdd1f5f6180 RCX: 00007fdd1f39f6c9 [ 324.930324][T11017] RDX: 0000000000088882 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 324.930338][T11017] RBP: 00007fdd1d5c4090 R08: 0000000000000000 R09: 0000000000000000 [ 324.930351][T11017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.930363][T11017] R13: 00007fdd1f5f6218 R14: 00007fdd1f5f6180 R15: 00007ffd33479088 [ 324.930390][T11017] [ 324.986934][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.252138][T11021] binder: 11020:11021 unknown command 0 [ 325.252158][T11021] binder: 11020:11021 ioctl c0306201 200000000080 returned -22 [ 325.254909][T11021] FAULT_INJECTION: forcing a failure. [ 325.254909][T11021] name failslab, interval 1, probability 0, space 0, times 0 [ 325.254941][T11021] CPU: 1 UID: 0 PID: 11021 Comm: syz.4.2053 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 325.254964][T11021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.254976][T11021] Call Trace: [ 325.254985][T11021] [ 325.254994][T11021] dump_stack_lvl+0x189/0x250 [ 325.255024][T11021] ? __pfx____ratelimit+0x10/0x10 [ 325.255050][T11021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.255078][T11021] ? __pfx__printk+0x10/0x10 [ 325.255108][T11021] ? __pfx___might_resched+0x10/0x10 [ 325.255128][T11021] ? fs_reclaim_acquire+0x7d/0x100 [ 325.255159][T11021] should_fail_ex+0x46c/0x600 [ 325.255190][T11021] should_failslab+0xa8/0x100 [ 325.255218][T11021] __kmalloc_noprof+0xcc/0x7d0 [ 325.255242][T11021] ? tomoyo_encode+0x28b/0x550 [ 325.255270][T11021] tomoyo_encode+0x28b/0x550 [ 325.255299][T11021] tomoyo_realpath_from_path+0x58d/0x5d0 [ 325.255340][T11021] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 325.255369][T11021] tomoyo_path_number_perm+0x1e8/0x5a0 [ 325.255400][T11021] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 325.255433][T11021] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 325.255459][T11021] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.255517][T11021] ? __fget_files+0x2a/0x420 [ 325.255548][T11021] ? __fget_files+0x3a6/0x420 [ 325.255571][T11021] ? __fget_files+0x2a/0x420 [ 325.255600][T11021] security_file_ioctl+0xcb/0x2d0 [ 325.255623][T11021] __se_sys_ioctl+0x47/0x170 [ 325.255648][T11021] do_syscall_64+0xfa/0xfa0 [ 325.255671][T11021] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.255696][T11021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.255715][T11021] ? clear_bhb_loop+0x60/0xb0 [ 325.255739][T11021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.255757][T11021] RIP: 0033:0x7fa23061f6c9 [ 325.255775][T11021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.255791][T11021] RSP: 002b:00007fa22e886038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.255811][T11021] RAX: ffffffffffffffda RBX: 00007fa230875fa0 RCX: 00007fa23061f6c9 [ 325.255826][T11021] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 325.255840][T11021] RBP: 00007fa22e886090 R08: 0000000000000000 R09: 0000000000000000 [ 325.255852][T11021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.255865][T11021] R13: 00007fa230876038 R14: 00007fa230875fa0 R15: 00007fffe8863c18 [ 325.255899][T11021] [ 325.255921][T11021] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.766798][T10224] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 325.802325][T10643] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.802434][T10643] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.802609][T10643] bridge_slave_0: entered allmulticast mode [ 325.805996][T10643] bridge_slave_0: entered promiscuous mode [ 325.974223][T10643] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.974360][T10643] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.974593][T10643] bridge_slave_1: entered allmulticast mode [ 325.982017][T10643] bridge_slave_1: entered promiscuous mode [ 326.047030][T10465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.047047][T10465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.047071][T10465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.145014][T11044] FAULT_INJECTION: forcing a failure. [ 326.145014][T11044] name failslab, interval 1, probability 0, space 0, times 0 [ 326.145046][T11044] CPU: 1 UID: 0 PID: 11044 Comm: syz.2.2062 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 326.145069][T11044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 326.145081][T11044] Call Trace: [ 326.145089][T11044] [ 326.145098][T11044] dump_stack_lvl+0x189/0x250 [ 326.145129][T11044] ? __pfx____ratelimit+0x10/0x10 [ 326.145155][T11044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.145181][T11044] ? __pfx__printk+0x10/0x10 [ 326.145211][T11044] ? __pfx___might_resched+0x10/0x10 [ 326.145230][T11044] ? fs_reclaim_acquire+0x7d/0x100 [ 326.145260][T11044] should_fail_ex+0x46c/0x600 [ 326.145293][T11044] should_failslab+0xa8/0x100 [ 326.145321][T11044] __kmalloc_noprof+0xcc/0x7d0 [ 326.145345][T11044] ? tomoyo_encode+0x28b/0x550 [ 326.145375][T11044] tomoyo_encode+0x28b/0x550 [ 326.145404][T11044] tomoyo_realpath_from_path+0x58d/0x5d0 [ 326.145446][T11044] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 326.145475][T11044] tomoyo_path_number_perm+0x1e8/0x5a0 [ 326.145506][T11044] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 326.145539][T11044] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 326.145566][T11044] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.145624][T11044] ? __fget_files+0x2a/0x420 [ 326.145654][T11044] ? __fget_files+0x3a6/0x420 [ 326.145678][T11044] ? __fget_files+0x2a/0x420 [ 326.145708][T11044] security_file_ioctl+0xcb/0x2d0 [ 326.145731][T11044] __se_sys_ioctl+0x47/0x170 [ 326.145756][T11044] do_syscall_64+0xfa/0xfa0 [ 326.145781][T11044] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.145806][T11044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.145826][T11044] ? clear_bhb_loop+0x60/0xb0 [ 326.145850][T11044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.145869][T11044] RIP: 0033:0x7fdd1f39f6c9 [ 326.145887][T11044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.145903][T11044] RSP: 002b:00007fdd1d606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.145925][T11044] RAX: ffffffffffffffda RBX: 00007fdd1f5f5fa0 RCX: 00007fdd1f39f6c9 [ 326.145940][T11044] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 326.145953][T11044] RBP: 00007fdd1d606090 R08: 0000000000000000 R09: 0000000000000000 [ 326.145966][T11044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.145979][T11044] R13: 00007fdd1f5f6038 R14: 00007fdd1f5f5fa0 R15: 00007ffd33479088 [ 326.146014][T11044] [ 326.146035][T11044] ERROR: Out of memory at tomoyo_realpath_from_path. [ 326.438018][T10465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.438036][T10465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.438063][T10465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.627842][T10643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.748924][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.993745][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.036128][T10643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.237324][T11092] ======================================================= [ 327.237324][T11092] WARNING: The mand mount option has been deprecated and [ 327.237324][T11092] and is ignored by this kernel. Remove the mand [ 327.237324][T11092] option from the mount to silence this warning. [ 327.237324][T11092] ======================================================= [ 327.478706][ T6010] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 327.554479][T10643] team0: Port device team_slave_0 added [ 327.569379][T10465] hsr_slave_0: entered promiscuous mode [ 327.573573][T10465] hsr_slave_1: entered promiscuous mode [ 327.574693][T10465] debugfs: 'hsr0' already exists in 'hsr' [ 327.574718][T10465] Cannot create hsr debugfs directory [ 327.586198][T10643] team0: Port device team_slave_1 added [ 327.614633][ T6010] usb 5-1: device descriptor read/64, error -71 [ 327.848721][ T6010] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 327.979252][ T6010] usb 5-1: device descriptor read/64, error -71 [ 328.089361][ T6010] usb usb5-port1: attempt power cycle [ 328.381510][T10643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.381527][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.381552][T10643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.403983][T10643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.404000][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.404027][T10643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.428704][ T6010] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 328.449538][ T6010] usb 5-1: device descriptor read/8, error -71 [ 328.505253][T11112] FAULT_INJECTION: forcing a failure. [ 328.505253][T11112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.505276][T11112] CPU: 1 UID: 0 PID: 11112 Comm: syz.2.2089 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 328.505289][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 328.505295][T11112] Call Trace: [ 328.505300][T11112] [ 328.505306][T11112] dump_stack_lvl+0x189/0x250 [ 328.505326][T11112] ? __pfx____ratelimit+0x10/0x10 [ 328.505341][T11112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.505356][T11112] ? __pfx__printk+0x10/0x10 [ 328.505370][T11112] ? __might_fault+0xb0/0x130 [ 328.505391][T11112] should_fail_ex+0x46c/0x600 [ 328.505409][T11112] _copy_from_user+0x2d/0xb0 [ 328.505421][T11112] ucma_query+0xdb/0x1640 [ 328.505442][T11112] ? __lock_acquire+0xab9/0xd20 [ 328.505457][T11112] ? __pfx_ucma_query+0x10/0x10 [ 328.505480][T11112] ? is_bpf_text_address+0x26/0x2b0 [ 328.505504][T11112] ? __lock_acquire+0xab9/0xd20 [ 328.505532][T11112] ? __lock_acquire+0xab9/0xd20 [ 328.505551][T11112] ? __might_fault+0xb0/0x130 [ 328.505577][T11112] ucma_write+0x252/0x2f0 [ 328.505592][T11112] ? __pfx_ucma_write+0x10/0x10 [ 328.505608][T11112] ? rw_verify_area+0x25b/0x4e0 [ 328.505620][T11112] ? __lock_acquire+0xab9/0xd20 [ 328.505632][T11112] ? __pfx_ucma_write+0x10/0x10 [ 328.505647][T11112] vfs_write+0x287/0xb40 [ 328.505664][T11112] ? __pfx_vfs_write+0x10/0x10 [ 328.505677][T11112] ? __fget_files+0x2a/0x420 [ 328.505694][T11112] ? __fget_files+0x2a/0x420 [ 328.505708][T11112] ? __fget_files+0x3a6/0x420 [ 328.505721][T11112] ? __fget_files+0x2a/0x420 [ 328.505740][T11112] ksys_write+0x14b/0x260 [ 328.505754][T11112] ? __pfx_ksys_write+0x10/0x10 [ 328.505769][T11112] ? do_syscall_64+0xbe/0xfa0 [ 328.505786][T11112] do_syscall_64+0xfa/0xfa0 [ 328.505799][T11112] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.505813][T11112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.505824][T11112] ? clear_bhb_loop+0x60/0xb0 [ 328.505837][T11112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.505847][T11112] RIP: 0033:0x7fdd1f39f6c9 [ 328.505857][T11112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.505906][T11112] RSP: 002b:00007fdd1d606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 328.505918][T11112] RAX: ffffffffffffffda RBX: 00007fdd1f5f5fa0 RCX: 00007fdd1f39f6c9 [ 328.505926][T11112] RDX: 0000000000000018 RSI: 0000200000000480 RDI: 0000000000000003 [ 328.505938][T11112] RBP: 00007fdd1d606090 R08: 0000000000000000 R09: 0000000000000000 [ 328.505945][T11112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.505952][T11112] R13: 00007fdd1f5f6038 R14: 00007fdd1f5f5fa0 R15: 00007ffd33479088 [ 328.505969][T11112] [ 328.688701][ T6010] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 328.710738][ T6010] usb 5-1: device descriptor read/8, error -71 [ 328.819263][ T6010] usb usb5-port1: unable to enumerate USB device [ 328.894445][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2096'. [ 329.025275][T11126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.026258][T11127] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 329.514700][T10643] hsr_slave_0: entered promiscuous mode [ 329.515573][T10643] hsr_slave_1: entered promiscuous mode [ 329.516267][T10643] debugfs: 'hsr0' already exists in 'hsr' [ 329.516289][T10643] Cannot create hsr debugfs directory [ 329.568699][ T6010] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 329.698805][ T6010] usb 3-1: device descriptor read/64, error -71 [ 329.939759][ T6010] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 330.068784][ T6010] usb 3-1: device descriptor read/64, error -71 [ 330.179012][ T6010] usb usb3-port1: attempt power cycle [ 330.261789][ T6654] bridge_slave_1: left allmulticast mode [ 330.261816][ T6654] bridge_slave_1: left promiscuous mode [ 330.262039][ T6654] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.340160][ T6654] bridge_slave_0: left allmulticast mode [ 330.340189][ T6654] bridge_slave_0: left promiscuous mode [ 330.340876][ T6654] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.419534][T11153] FAULT_INJECTION: forcing a failure. [ 330.419534][T11153] name failslab, interval 1, probability 0, space 0, times 0 [ 330.419567][T11153] CPU: 1 UID: 0 PID: 11153 Comm: syz.4.2106 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 330.419590][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 330.419603][T11153] Call Trace: [ 330.419612][T11153] [ 330.419621][T11153] dump_stack_lvl+0x189/0x250 [ 330.419653][T11153] ? __pfx____ratelimit+0x10/0x10 [ 330.419679][T11153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.419705][T11153] ? __pfx__printk+0x10/0x10 [ 330.419734][T11153] ? __pfx___might_resched+0x10/0x10 [ 330.419755][T11153] ? fs_reclaim_acquire+0x7d/0x100 [ 330.419785][T11153] should_fail_ex+0x46c/0x600 [ 330.419815][T11153] ? __alloc_skb+0x112/0x2d0 [ 330.419834][T11153] should_failslab+0xa8/0x100 [ 330.419861][T11153] ? __alloc_skb+0x112/0x2d0 [ 330.419878][T11153] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 330.419903][T11153] ? netlink_autobind+0xdb/0x300 [ 330.419931][T11153] __alloc_skb+0x112/0x2d0 [ 330.419961][T11153] netlink_sendmsg+0x5c6/0xb30 [ 330.419980][T11153] ? is_bpf_text_address+0x26/0x2b0 [ 330.420017][T11153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.420046][T11153] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.420072][T11153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.420093][T11153] __sock_sendmsg+0x21c/0x270 [ 330.420123][T11153] ____sys_sendmsg+0x508/0x820 [ 330.420152][T11153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.420184][T11153] ? import_iovec+0x74/0xa0 [ 330.420209][T11153] ___sys_sendmsg+0x21f/0x2a0 [ 330.420234][T11153] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.420294][T11153] ? __fget_files+0x2a/0x420 [ 330.420319][T11153] ? __fget_files+0x3a6/0x420 [ 330.420354][T11153] __x64_sys_sendmsg+0x1a1/0x260 [ 330.420379][T11153] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.420412][T11153] ? __pfx_ksys_write+0x10/0x10 [ 330.420439][T11153] ? do_syscall_64+0xbe/0xfa0 [ 330.420468][T11153] do_syscall_64+0xfa/0xfa0 [ 330.420491][T11153] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.420515][T11153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.420535][T11153] ? clear_bhb_loop+0x60/0xb0 [ 330.420558][T11153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.420577][T11153] RIP: 0033:0x7fa23061f6c9 [ 330.420594][T11153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.420610][T11153] RSP: 002b:00007fa22e886038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.420631][T11153] RAX: ffffffffffffffda RBX: 00007fa230875fa0 RCX: 00007fa23061f6c9 [ 330.420646][T11153] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 330.420659][T11153] RBP: 00007fa22e886090 R08: 0000000000000000 R09: 0000000000000000 [ 330.420671][T11153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.420683][T11153] R13: 00007fa230876038 R14: 00007fa230875fa0 R15: 00007fffe8863c18 [ 330.420715][T11153] [ 330.426518][ T6654] bridge_slave_1: left allmulticast mode [ 330.426547][ T6654] bridge_slave_1: left promiscuous mode [ 330.426790][ T6654] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.518722][ T6010] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 330.543418][ T6010] usb 3-1: device descriptor read/8, error -71 [ 330.764062][ T6654] bridge_slave_0: left allmulticast mode [ 330.764090][ T6654] bridge_slave_0: left promiscuous mode [ 330.764341][ T6654] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.788731][ T6010] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 330.810947][ T6010] usb 3-1: device descriptor read/8, error -71 [ 330.907901][T11166] FAULT_INJECTION: forcing a failure. [ 330.907901][T11166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.907936][T11166] CPU: 1 UID: 0 PID: 11166 Comm: syz.4.2111 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 330.907959][T11166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 330.907972][T11166] Call Trace: [ 330.907981][T11166] [ 330.907990][T11166] dump_stack_lvl+0x189/0x250 [ 330.908022][T11166] ? __pfx____ratelimit+0x10/0x10 [ 330.908047][T11166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.908074][T11166] ? __pfx__printk+0x10/0x10 [ 330.908113][T11166] should_fail_ex+0x46c/0x600 [ 330.908145][T11166] _copy_to_user+0x31/0xb0 [ 330.908170][T11166] simple_read_from_buffer+0xe1/0x170 [ 330.908201][T11166] proc_fail_nth_read+0x1b6/0x220 [ 330.908225][T11166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 330.908251][T11166] ? rw_verify_area+0x2ac/0x4e0 [ 330.908274][T11166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 330.908296][T11166] vfs_read+0x206/0xa30 [ 330.908328][T11166] ? __pfx_vfs_read+0x10/0x10 [ 330.908352][T11166] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 330.908385][T11166] ? mutex_lock_nested+0x154/0x1d0 [ 330.908405][T11166] ? fdget_pos+0x253/0x320 [ 330.908439][T11166] ksys_read+0x14b/0x260 [ 330.908465][T11166] ? __pfx_ksys_read+0x10/0x10 [ 330.908494][T11166] ? do_syscall_64+0xbe/0xfa0 [ 330.908520][T11166] do_syscall_64+0xfa/0xfa0 [ 330.908541][T11166] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.908563][T11166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.908581][T11166] ? clear_bhb_loop+0x60/0xb0 [ 330.908604][T11166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.908621][T11166] RIP: 0033:0x7fa23061e0dc [ 330.908639][T11166] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 330.908654][T11166] RSP: 002b:00007fa22e886030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 330.908673][T11166] RAX: ffffffffffffffda RBX: 00007fa230875fa0 RCX: 00007fa23061e0dc [ 330.908686][T11166] RDX: 000000000000000f RSI: 00007fa22e8860a0 RDI: 0000000000000004 [ 330.908697][T11166] RBP: 00007fa22e886090 R08: 0000000000000000 R09: 0000000000000000 [ 330.908709][T11166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.908720][T11166] R13: 00007fa230876038 R14: 00007fa230875fa0 R15: 00007fffe8863c18 [ 330.908752][T11166] [ 330.922868][ T6010] usb usb3-port1: unable to enumerate USB device [ 331.580490][T11187] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2121'. [ 331.580516][T11187] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2121'. [ 331.580532][T11187] netlink: 'syz.4.2121': attribute type 5 has an invalid length. [ 331.580545][T11187] netlink: 'syz.4.2121': attribute type 6 has an invalid length. [ 331.580558][T11187] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2121'. [ 331.829441][ T6654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.909527][ T6654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.981999][ T6654] bond0 (unregistering): Released all slaves [ 332.682646][T11206] FAULT_INJECTION: forcing a failure. [ 332.682646][T11206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.682668][T11206] CPU: 0 UID: 0 PID: 11206 Comm: syz.2.2129 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 332.682681][T11206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.682689][T11206] Call Trace: [ 332.682693][T11206] [ 332.682698][T11206] dump_stack_lvl+0x189/0x250 [ 332.682719][T11206] ? __pfx____ratelimit+0x10/0x10 [ 332.682734][T11206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.682749][T11206] ? __pfx__printk+0x10/0x10 [ 332.682762][T11206] ? __might_fault+0xb0/0x130 [ 332.682783][T11206] should_fail_ex+0x46c/0x600 [ 332.682801][T11206] _copy_from_iter+0x1de/0x1790 [ 332.682820][T11206] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 332.682843][T11206] ? __pfx__copy_from_iter+0x10/0x10 [ 332.682862][T11206] ? set_page_refcounted+0xa0/0x1e0 [ 332.682878][T11206] ? page_copy_sane+0x4e/0x280 [ 332.682889][T11206] copy_page_from_iter+0xdd/0x170 [ 332.682901][T11206] tun_get_user+0x1d7b/0x3ec0 [ 332.682920][T11206] ? tun_get_user+0x6f6/0x3ec0 [ 332.682937][T11206] ? __might_fault+0xb0/0x130 [ 332.682951][T11206] ? __pfx_tun_get_user+0x10/0x10 [ 332.682964][T11206] ? _parse_integer_limit+0x1ae/0x1f0 [ 332.682984][T11206] ? __lock_acquire+0xab9/0xd20 [ 332.683001][T11206] ? ref_tracker_alloc+0x2fe/0x450 [ 332.683016][T11206] ? __lock_acquire+0xab9/0xd20 [ 332.683031][T11206] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 332.683048][T11206] ? tun_get+0x1c/0x2f0 [ 332.683064][T11206] ? tun_get+0x1c/0x2f0 [ 332.683076][T11206] ? tun_get+0x1c/0x2f0 [ 332.683092][T11206] tun_chr_write_iter+0x119/0x200 [ 332.683106][T11206] vfs_write+0x5d5/0xb40 [ 332.683122][T11206] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 332.683135][T11206] ? __pfx_vfs_write+0x10/0x10 [ 332.683153][T11206] ? __fget_files+0x2a/0x420 [ 332.683173][T11206] ksys_write+0x14b/0x260 [ 332.683187][T11206] ? __pfx_ksys_write+0x10/0x10 [ 332.683202][T11206] ? do_syscall_64+0xbe/0xfa0 [ 332.683219][T11206] do_syscall_64+0xfa/0xfa0 [ 332.683232][T11206] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.683247][T11206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.683257][T11206] ? clear_bhb_loop+0x60/0xb0 [ 332.683270][T11206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.683279][T11206] RIP: 0033:0x7fdd1f39e17f [ 332.683290][T11206] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 332.683299][T11206] RSP: 002b:00007fdd1d606000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 332.683311][T11206] RAX: ffffffffffffffda RBX: 00007fdd1f5f5fa0 RCX: 00007fdd1f39e17f [ 332.683321][T11206] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8 [ 332.683330][T11206] RBP: 00007fdd1d606090 R08: 0000000000000000 R09: 0000000000000000 [ 332.683341][T11206] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 332.683348][T11206] R13: 00007fdd1f5f6038 R14: 00007fdd1f5f5fa0 R15: 00007ffd33479088 [ 332.683365][T11206] [ 333.096379][T11212] FAULT_INJECTION: forcing a failure. [ 333.096379][T11212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.096400][T11212] CPU: 0 UID: 0 PID: 11212 Comm: syz.2.2132 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 333.096413][T11212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 333.096420][T11212] Call Trace: [ 333.096425][T11212] [ 333.096431][T11212] dump_stack_lvl+0x189/0x250 [ 333.096451][T11212] ? __pfx____ratelimit+0x10/0x10 [ 333.096466][T11212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.096482][T11212] ? __pfx__printk+0x10/0x10 [ 333.096503][T11212] should_fail_ex+0x46c/0x600 [ 333.096521][T11212] _copy_to_user+0x31/0xb0 [ 333.096534][T11212] simple_read_from_buffer+0xe1/0x170 [ 333.096552][T11212] proc_fail_nth_read+0x1b6/0x220 [ 333.096566][T11212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.096579][T11212] ? rw_verify_area+0x2ac/0x4e0 [ 333.096592][T11212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.096604][T11212] vfs_read+0x206/0xa30 [ 333.096621][T11212] ? __pfx_vfs_read+0x10/0x10 [ 333.096640][T11212] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 333.096657][T11212] ? mutex_lock_nested+0x154/0x1d0 [ 333.096668][T11212] ? fdget_pos+0x253/0x320 [ 333.096688][T11212] ksys_read+0x14b/0x260 [ 333.096702][T11212] ? __pfx_ksys_read+0x10/0x10 [ 333.096716][T11212] ? do_syscall_64+0xbe/0xfa0 [ 333.096733][T11212] do_syscall_64+0xfa/0xfa0 [ 333.096747][T11212] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.096761][T11212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.096771][T11212] ? clear_bhb_loop+0x60/0xb0 [ 333.096785][T11212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.096795][T11212] RIP: 0033:0x7fdd1f39e0dc [ 333.096805][T11212] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 333.096815][T11212] RSP: 002b:00007fdd1d606030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.096827][T11212] RAX: ffffffffffffffda RBX: 00007fdd1f5f5fa0 RCX: 00007fdd1f39e0dc [ 333.096835][T11212] RDX: 000000000000000f RSI: 00007fdd1d6060a0 RDI: 0000000000000004 [ 333.096842][T11212] RBP: 00007fdd1d606090 R08: 0000000000000000 R09: 0000000000000000 [ 333.096849][T11212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.096855][T11212] R13: 00007fdd1f5f6038 R14: 00007fdd1f5f5fa0 R15: 00007ffd33479088 [ 333.096873][T11212] [ 334.059200][ T6654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.139285][ T6654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.221411][ T6654] bond0 (unregistering): Released all slaves [ 334.249561][T11251] gtp0: entered promiscuous mode [ 334.249577][T11251] gtp0: entered allmulticast mode [ 334.407078][T11257] FAULT_INJECTION: forcing a failure. [ 334.407078][T11257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.407106][T11257] CPU: 0 UID: 0 PID: 11257 Comm: syz.2.2154 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 334.407123][T11257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 334.407132][T11257] Call Trace: [ 334.407138][T11257] [ 334.407146][T11257] dump_stack_lvl+0x189/0x250 [ 334.407172][T11257] ? __pfx____ratelimit+0x10/0x10 [ 334.407192][T11257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.407212][T11257] ? __pfx__printk+0x10/0x10 [ 334.407231][T11257] ? __might_fault+0xb0/0x130 [ 334.407260][T11257] should_fail_ex+0x46c/0x600 [ 334.407284][T11257] _copy_from_user+0x2d/0xb0 [ 334.407301][T11257] memdup_user+0x5e/0xd0 [ 334.407318][T11257] strndup_user+0x68/0xd0 [ 334.407334][T11257] __se_sys_mount+0x9d/0x410 [ 334.407355][T11257] ? ksys_write+0x230/0x260 [ 334.407374][T11257] ? __pfx___se_sys_mount+0x10/0x10 [ 334.407397][T11257] ? do_syscall_64+0xbe/0xfa0 [ 334.407415][T11257] ? __x64_sys_mount+0x20/0xc0 [ 334.407436][T11257] do_syscall_64+0xfa/0xfa0 [ 334.407453][T11257] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.407485][T11257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.407500][T11257] ? clear_bhb_loop+0x60/0xb0 [ 334.407519][T11257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.407533][T11257] RIP: 0033:0x7fdd1f39f6c9 [ 334.407548][T11257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.407562][T11257] RSP: 002b:00007fdd1d606038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 334.407580][T11257] RAX: ffffffffffffffda RBX: 00007fdd1f5f5fa0 RCX: 00007fdd1f39f6c9 [ 334.407591][T11257] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000200000000140 [ 334.407602][T11257] RBP: 00007fdd1d606090 R08: 0000000000000000 R09: 0000000000000000 [ 334.407613][T11257] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 334.407622][T11257] R13: 00007fdd1f5f6038 R14: 00007fdd1f5f5fa0 R15: 00007ffd33479088 [ 334.407648][T11257] [ 334.707120][T10224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.864556][T11275] FAULT_INJECTION: forcing a failure. [ 334.864556][T11275] name failslab, interval 1, probability 0, space 0, times 0 [ 334.864590][T11275] CPU: 1 UID: 0 PID: 11275 Comm: syz.4.2162 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 334.864614][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 334.864627][T11275] Call Trace: [ 334.864635][T11275] [ 334.864645][T11275] dump_stack_lvl+0x189/0x250 [ 334.864676][T11275] ? __pfx____ratelimit+0x10/0x10 [ 334.864702][T11275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.864728][T11275] ? __pfx__printk+0x10/0x10 [ 334.864758][T11275] ? __pfx___might_resched+0x10/0x10 [ 334.864783][T11275] should_fail_ex+0x46c/0x600 [ 334.864812][T11275] ? io_submit_one+0x11f/0x1310 [ 334.864830][T11275] should_failslab+0xa8/0x100 [ 334.864857][T11275] ? io_submit_one+0x11f/0x1310 [ 334.864873][T11275] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 334.864906][T11275] io_submit_one+0x11f/0x1310 [ 334.864942][T11275] ? __pfx_io_submit_one+0x10/0x10 [ 334.864962][T11275] ? __might_fault+0xb0/0x130 [ 334.865000][T11275] ? __might_fault+0xb0/0x130 [ 334.865029][T11275] __se_sys_io_submit+0x185/0x2f0 [ 334.865058][T11275] ? __pfx___se_sys_io_submit+0x10/0x10 [ 334.865083][T11275] ? ksys_write+0x230/0x260 [ 334.865124][T11275] ? do_syscall_64+0xbe/0xfa0 [ 334.865153][T11275] do_syscall_64+0xfa/0xfa0 [ 334.865176][T11275] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.865201][T11275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.865221][T11275] ? clear_bhb_loop+0x60/0xb0 [ 334.865244][T11275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.865263][T11275] RIP: 0033:0x7fa23061f6c9 [ 334.865281][T11275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.865298][T11275] RSP: 002b:00007fa22e886038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 334.865320][T11275] RAX: ffffffffffffffda RBX: 00007fa230875fa0 RCX: 00007fa23061f6c9 [ 334.865335][T11275] RDX: 0000200000000280 RSI: 0000000000000001 RDI: 00007fa2313b3000 [ 334.865349][T11275] RBP: 00007fa22e886090 R08: 0000000000000000 R09: 0000000000000000 [ 334.865362][T11275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.865374][T11275] R13: 00007fa230876038 R14: 00007fa230875fa0 R15: 00007fffe8863c18 [ 334.865407][T11275] [ 335.243988][ T6654] hsr_slave_0: left promiscuous mode [ 335.278886][ T6654] hsr_slave_1: left promiscuous mode [ 335.279968][ T6654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.329533][ T6654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.434547][T11295] FAULT_INJECTION: forcing a failure. [ 335.434547][T11295] name failslab, interval 1, probability 0, space 0, times 0 [ 335.434581][T11295] CPU: 1 UID: 0 PID: 11295 Comm: syz.4.2169 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 335.434604][T11295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 335.434617][T11295] Call Trace: [ 335.434625][T11295] [ 335.434635][T11295] dump_stack_lvl+0x189/0x250 [ 335.434666][T11295] ? __pfx____ratelimit+0x10/0x10 [ 335.434691][T11295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.434718][T11295] ? __pfx__printk+0x10/0x10 [ 335.434747][T11295] ? __pfx___might_resched+0x10/0x10 [ 335.434767][T11295] ? fs_reclaim_acquire+0x7d/0x100 [ 335.434797][T11295] should_fail_ex+0x46c/0x600 [ 335.434828][T11295] should_failslab+0xa8/0x100 [ 335.434857][T11295] __kmalloc_noprof+0xcc/0x7d0 [ 335.434881][T11295] ? tomoyo_encode+0x28b/0x550 [ 335.434909][T11295] tomoyo_encode+0x28b/0x550 [ 335.434937][T11295] tomoyo_realpath_from_path+0x58d/0x5d0 [ 335.434972][T11295] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 335.435000][T11295] tomoyo_path_number_perm+0x1e8/0x5a0 [ 335.435031][T11295] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 335.435063][T11295] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 335.435095][T11295] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.435151][T11295] ? __fget_files+0x2a/0x420 [ 335.435181][T11295] ? __fget_files+0x3a6/0x420 [ 335.435205][T11295] ? __fget_files+0x2a/0x420 [ 335.435233][T11295] security_file_ioctl+0xcb/0x2d0 [ 335.435257][T11295] __se_sys_ioctl+0x47/0x170 [ 335.435281][T11295] do_syscall_64+0xfa/0xfa0 [ 335.435306][T11295] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.435330][T11295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.435349][T11295] ? clear_bhb_loop+0x60/0xb0 [ 335.435373][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.435391][T11295] RIP: 0033:0x7fa23061f6c9 [ 335.435409][T11295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.435426][T11295] RSP: 002b:00007fa22e886038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.435447][T11295] RAX: ffffffffffffffda RBX: 00007fa230875fa0 RCX: 00007fa23061f6c9 [ 335.435462][T11295] RDX: 0000000000000051 RSI: 000000004004556b RDI: 0000000000000003 [ 335.435475][T11295] RBP: 00007fa22e886090 R08: 0000000000000000 R09: 0000000000000000 [ 335.435489][T11295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.435501][T11295] R13: 00007fa230876038 R14: 00007fa230875fa0 R15: 00007fffe8863c18 [ 335.435536][T11295] [ 335.435556][T11295] ERROR: Out of memory at tomoyo_realpath_from_path. [ 335.785726][ T6654] hsr_slave_0: left promiscuous mode [ 335.818770][ T6654] hsr_slave_1: left promiscuous mode [ 335.819739][ T6654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.869537][ T6654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.475870][T11345] FAULT_INJECTION: forcing a failure. [ 336.475870][T11345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.475903][T11345] CPU: 0 UID: 0 PID: 11345 Comm: syz.4.2189 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 336.475926][T11345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 336.475935][T11345] Call Trace: [ 336.475942][T11345] [ 336.475950][T11345] dump_stack_lvl+0x189/0x250 [ 336.475980][T11345] ? __pfx____ratelimit+0x10/0x10 [ 336.476003][T11345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.476029][T11345] ? __pfx__printk+0x10/0x10 [ 336.476065][T11345] should_fail_ex+0x46c/0x600 [ 336.476096][T11345] _copy_to_user+0x31/0xb0 [ 336.476125][T11345] simple_read_from_buffer+0xe1/0x170 [ 336.476153][T11345] proc_fail_nth_read+0x1b6/0x220 [ 336.476177][T11345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.476200][T11345] ? rw_verify_area+0x2ac/0x4e0 [ 336.476223][T11345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.476244][T11345] vfs_read+0x206/0xa30 [ 336.476272][T11345] ? __pfx_vfs_read+0x10/0x10 [ 336.476290][T11345] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 336.476319][T11345] ? mutex_lock_nested+0x154/0x1d0 [ 336.476338][T11345] ? fdget_pos+0x253/0x320 [ 336.476369][T11345] ksys_read+0x14b/0x260 [ 336.476393][T11345] ? __pfx_ksys_read+0x10/0x10 [ 336.476419][T11345] ? do_syscall_64+0xbe/0xfa0 [ 336.476447][T11345] do_syscall_64+0xfa/0xfa0 [ 336.476471][T11345] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.476494][T11345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.476513][T11345] ? clear_bhb_loop+0x60/0xb0 [ 336.476537][T11345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.476556][T11345] RIP: 0033:0x7fa23061e0dc [ 336.476574][T11345] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 336.476591][T11345] RSP: 002b:00007fa22e75c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 336.476612][T11345] RAX: ffffffffffffffda RBX: 00007fa230876090 RCX: 00007fa23061e0dc [ 336.476627][T11345] RDX: 000000000000000f RSI: 00007fa22e75c0a0 RDI: 0000000000000004 [ 336.476640][T11345] RBP: 00007fa22e75c090 R08: 0000000000000000 R09: 0000000000000000 [ 336.476653][T11345] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 336.476664][T11345] R13: 00007fa230876128 R14: 00007fa230876090 R15: 00007fffe8863c18 [ 336.476693][T11345] [ 337.009438][ T6654] team0 (unregistering): Port device team_slave_1 removed [ 337.223677][ T6654] team0 (unregistering): Port device team_slave_0 removed [ 337.336931][T11377] FAULT_INJECTION: forcing a failure. [ 337.336931][T11377] name failslab, interval 1, probability 0, space 0, times 0 [ 337.336965][T11377] CPU: 0 UID: 0 PID: 11377 Comm: syz.2.2203 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.336988][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 337.337000][T11377] Call Trace: [ 337.337009][T11377] [ 337.337019][T11377] dump_stack_lvl+0x189/0x250 [ 337.337051][T11377] ? __pfx____ratelimit+0x10/0x10 [ 337.337076][T11377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.337102][T11377] ? __pfx__printk+0x10/0x10 [ 337.337125][T11377] ? do_raw_spin_lock+0x121/0x290 [ 337.337158][T11377] should_fail_ex+0x46c/0x600 [ 337.337190][T11377] should_failslab+0xa8/0x100 [ 337.337219][T11377] __kmalloc_cache_noprof+0x6f/0x6c0 [ 337.337246][T11377] ? tipc_group_create+0xa1/0x500 [ 337.337270][T11377] tipc_group_create+0xa1/0x500 [ 337.337297][T11377] tipc_sk_join+0x24d/0x6b0 [ 337.337322][T11377] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 337.337349][T11377] ? __pfx_tipc_sk_join+0x10/0x10 [ 337.337373][T11377] ? rt_spin_unlock+0x161/0x200 [ 337.337396][T11377] ? lock_sock_nested+0x5f/0x130 [ 337.337421][T11377] ? lock_sock_nested+0xdd/0x130 [ 337.337449][T11377] tipc_setsockopt+0x735/0x970 [ 337.337480][T11377] ? __pfx_tipc_setsockopt+0x10/0x10 [ 337.337513][T11377] ? __fget_files+0x2a/0x420 [ 337.337538][T11377] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 337.337563][T11377] ? __pfx_tipc_setsockopt+0x10/0x10 [ 337.337588][T11377] do_sock_setsockopt+0x17c/0x1b0 [ 337.337616][T11377] __x64_sys_setsockopt+0x145/0x1b0 [ 337.337644][T11377] do_syscall_64+0xfa/0xfa0 [ 337.337668][T11377] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.337693][T11377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.337713][T11377] ? clear_bhb_loop+0x60/0xb0 [ 337.337736][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.337755][T11377] RIP: 0033:0x7fdd1f39f6c9 [ 337.337774][T11377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.337791][T11377] RSP: 002b:00007fdd1d606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 337.337812][T11377] RAX: ffffffffffffffda RBX: 00007fdd1f5f5fa0 RCX: 00007fdd1f39f6c9 [ 337.337827][T11377] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 337.337845][T11377] RBP: 00007fdd1d606090 R08: 0000000000000010 R09: 0000000000000000 [ 337.337859][T11377] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 337.337873][T11377] R13: 00007fdd1f5f6038 R14: 00007fdd1f5f5fa0 R15: 00007ffd33479088 [ 337.337907][T11377] [ 337.661757][T11385] FAULT_INJECTION: forcing a failure. [ 337.661757][T11385] name failslab, interval 1, probability 0, space 0, times 0 [ 337.661792][T11385] CPU: 1 UID: 0 PID: 11385 Comm: syz.4.2208 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.661823][T11385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 337.661836][T11385] Call Trace: [ 337.661844][T11385] [ 337.661854][T11385] dump_stack_lvl+0x189/0x250 [ 337.661886][T11385] ? __pfx____ratelimit+0x10/0x10 [ 337.661912][T11385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.661939][T11385] ? __pfx__printk+0x10/0x10 [ 337.661969][T11385] ? __pfx___might_resched+0x10/0x10 [ 337.661989][T11385] ? fs_reclaim_acquire+0x7d/0x100 [ 337.662020][T11385] should_fail_ex+0x46c/0x600 [ 337.662052][T11385] should_failslab+0xa8/0x100 [ 337.662079][T11385] __kmalloc_noprof+0xcc/0x7d0 [ 337.662103][T11385] ? tomoyo_encode+0x28b/0x550 [ 337.662132][T11385] tomoyo_encode+0x28b/0x550 [ 337.662160][T11385] tomoyo_realpath_from_path+0x58d/0x5d0 [ 337.662184][T11385] ? tomoyo_domain+0xda/0x130 [ 337.662213][T11385] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 337.662241][T11385] tomoyo_path_number_perm+0x1e8/0x5a0 [ 337.662272][T11385] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 337.662304][T11385] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 337.662330][T11385] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.662389][T11385] ? __fget_files+0x2a/0x420 [ 337.662419][T11385] ? __fget_files+0x3a6/0x420 [ 337.662442][T11385] ? __fget_files+0x2a/0x420 [ 337.662469][T11385] security_file_ioctl+0xcb/0x2d0 [ 337.662490][T11385] __se_sys_ioctl+0x47/0x170 [ 337.662513][T11385] do_syscall_64+0xfa/0xfa0 [ 337.662536][T11385] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.662561][T11385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.662580][T11385] ? clear_bhb_loop+0x60/0xb0 [ 337.662604][T11385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.662623][T11385] RIP: 0033:0x7fa23061f6c9 [ 337.662642][T11385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.662659][T11385] RSP: 002b:00007fa22e886038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.662680][T11385] RAX: ffffffffffffffda RBX: 00007fa230875fa0 RCX: 00007fa23061f6c9 [ 337.662695][T11385] RDX: 0000000000000000 RSI: 000000008008b705 RDI: 0000000000000003 [ 337.662709][T11385] RBP: 00007fa22e886090 R08: 0000000000000000 R09: 0000000000000000 [ 337.662722][T11385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.662735][T11385] R13: 00007fa230876038 R14: 00007fa230875fa0 R15: 00007fffe8863c18 [ 337.662770][T11385] [ 337.663309][T11385] ERROR: Out of memory at tomoyo_realpath_from_path. [ 379.437313][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.437391][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 420.408280][ T5120] Bluetooth: hci2: command 0x0406 tx timeout [ 428.116645][ T5120] Bluetooth: hci0: command 0x0406 tx timeout [ 437.477730][T11400] Bluetooth: hci4: command 0x0406 tx timeout [ 440.737640][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.737714][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 483.207700][ T38] INFO: task syz-executor:10643 blocked for more than 151 seconds. [ 483.207728][ T38] Not tainted syzkaller #0 [ 483.207739][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.207750][ T38] task:syz-executor state:D stack:22152 pid:10643 tgid:10643 ppid:1 task_flags:0x400140 flags:0x00080002 [ 483.207821][ T38] Call Trace: [ 483.207832][ T38] [ 483.207849][ T38] __schedule+0x16f3/0x4c20 [ 483.207897][ T38] ? sched_clock+0x3f/0x60 [ 483.207920][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 483.207955][ T38] ? __pfx___schedule+0x10/0x10 [ 483.208009][ T38] rt_mutex_schedule+0x77/0xf0 [ 483.208029][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 483.208068][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 483.208095][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 483.208119][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 483.208139][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 483.208159][ T38] ? __lock_acquire+0xab9/0xd20 [ 483.208194][ T38] ? del_device_store+0xd1/0x360 [ 483.208220][ T38] ? __pfx_sscanf+0x10/0x10 [ 483.208248][ T38] ? del_device_store+0xd1/0x360 [ 483.208265][ T38] mutex_lock_nested+0x16a/0x1d0 [ 483.208293][ T38] del_device_store+0xd1/0x360 [ 483.208311][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 483.208340][ T38] ? __pfx_del_device_store+0x10/0x10 [ 483.208360][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 483.208387][ T38] ? sysfs_kf_write+0x166/0x260 [ 483.208410][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 484.417732][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 484.417786][ T38] vfs_write+0x5d5/0xb40 [ 484.417817][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 484.417845][ T38] ? __pfx_vfs_write+0x10/0x10 [ 484.417880][ T38] ? do_sys_openat2+0x154/0x1c0 [ 484.417912][ T38] ksys_write+0x14b/0x260 [ 484.417939][ T38] ? __pfx_ksys_write+0x10/0x10 [ 484.417967][ T38] ? do_syscall_64+0xbe/0xfa0 [ 484.417997][ T38] do_syscall_64+0xfa/0xfa0 [ 484.418025][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.418044][ T38] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 484.418064][ T38] ? clear_bhb_loop+0x60/0xb0 [ 484.418088][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.418108][ T38] RIP: 0033:0x7f2cc99ee17f [ 484.418127][ T38] RSP: 002b:00007ffc75e841c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 484.418150][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f2cc99ee17f [ 484.418164][ T38] RDX: 0000000000000001 RSI: 00007ffc75e84210 RDI: 0000000000000005 [ 484.418178][ T38] RBP: 00007f2cc9a732cb R08: 0000000000000000 R09: 00007ffc75e84017 [ 484.418192][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 484.418205][ T38] R13: 00007ffc75e84210 R14: 00007f2cca774620 R15: 0000000000000003 [ 484.418242][ T38] [ 484.418280][ T38] [ 484.418280][ T38] Showing all locks held in the system: [ 484.418294][ T38] 3 locks held by kworker/0:0/9: [ 484.418306][ T38] #0: ffff88813ff56138 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 484.418360][ T38] #1: ffffc900000e7ba0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 484.418410][ T38] #2: ffffffff8e8632f8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa1/0xf40 [ 484.768314][ T38] 5 locks held by pr/legacy/17: [ 484.768328][ T38] 1 lock held by khungtaskd/38: [ 484.768336][ T38] #0: ffffffff8d5aa840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 484.768386][ T38] 3 locks held by kworker/u8:3/58: [ 484.768398][ T38] 5 locks held by kworker/u9:0/61: [ 484.768409][ T38] #0: ffff88805c493138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 485.006359][ T38] #1: ffffc9000127fba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 485.006412][ T38] #2: ffff888055e24e88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 485.006460][ T38] #3: ffff888055e240a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 485.006511][ T38] #4: ffffffff8e9cb778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 485.006565][ T38] 5 locks held by kworker/u8:5/82: [ 485.006584][ T38] 2 locks held by kworker/0:2/990: [ 485.006605][ T38] 3 locks held by kworker/u8:6/1177: [ 485.006617][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 485.006673][ T38] #1: ffffc9000522fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 485.006722][ T38] #2: ffffffff8e8632f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 485.006772][ T38] 2 locks held by kworker/1:2/1217: [ 485.006799][ T38] 2 locks held by dhcpcd/5465: [ 485.006811][ T38] #0: ffffffff8e847758 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5f1/0x790 [ 485.006861][ T38] #1: ffffffff8e8632f8 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xd0/0x650 [ 485.006913][ T38] 2 locks held by getty/5561: [ 485.006924][ T38] #0: ffff88823bf400a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 485.006972][ T38] #1: ffffc90003e932e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 485.007025][ T38] 1 lock held by syz-executor/5802: [ 485.007038][ T38] 6 locks held by kworker/u9:2/5811: [ 485.007049][ T38] #0: ffff88805d128938 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 485.007098][ T38] #1: ffffc90004bdfba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 485.007147][ T38] #2: ffff88805eb00e88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 485.007193][ T38] #3: ffff88805eb000a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 485.007243][ T38] #4: ffffffff8e9cb778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310