last executing test programs: 6m42.232062519s ago: executing program 2 (id=63): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a80000000c0a01010000000000000000070000090900020073797a31000000000900010073797a30000000007c0003807800008008000340000000026c000b80200001800a00010071756f7461000000100002800c0001400000020000000000340001800a0001006c696d6974000000240002800c0002400000000000"], 0x12c}}, 0x0) 6m40.665073598s ago: executing program 2 (id=68): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x6083, 0x3) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6m39.470201137s ago: executing program 2 (id=71): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x300, 0x70ad28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x468c2}, 0x40000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000340)=[{0x6, 0xfa, 0x0, 0xe0}, {0x7, 0xc, 0x8, 0x53}, {0x7, 0x0, 0xd, 0x7fffffff}]}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x84) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4000000053d2) 6m39.08054759s ago: executing program 2 (id=72): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000d24000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000b37000/0x1000)=nil, &(0x7f0000724000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000780000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2405a045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x40000040, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 6m38.789268408s ago: executing program 2 (id=75): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x880, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x3, 0x10000000001, 0x10, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x110) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, @loopback={0xff00000000000000}, 0x80, 0x0, 0x1, 0x1}}) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) listen(r3, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c00"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) accept4(r3, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x44004000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000580080001400000000008"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40008d0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x75, "dd9dbe1922bb3a075c2cdc04aba2cbb10912ec2bb51269d03925df5705a4e66642e039db77df076673cf19ce0c4a2c8da4642edf319099463ac4d31e0de85c8fe83870e4807b34e126dd4194d915c02df9464631e13354e8fa8da06b2ca74ff86d3b38491585e843a2cefde3da85b087c2e55112c9"}, &(0x7f00000003c0)=0x7d) syz_clone(0x2200, &(0x7f0000000200)="da26c946efd43c649c6636561d26a3e647193b5e333424e4db281cd13a5b10b3832eadf58f218b059a1a263c9fb9f9910b94eb1cb7d9440eb70e7ffaec75b26eecedf8f0af2b462d00000000000000018048940d6e2308f59f24ef626a0400ee222e3a4a82426f4900"/119, 0x77, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)="5994a44332770a8879f3265bca95c9afc699f72706d94458486ee3dc1cecf1d0a3f4b41113b1d9d4d3eab6366dfab5bd23884098b7cf4cd7da64a85fa50181bd18ecb0cd69d8b645c6466c678272fee02b8624cd46c127715dd17a9db54fd81d91398f5ba8f9c480b7e2181dcd23976a5d7200a3168754653eee812d727df230c39743e8f1") 6m36.250435645s ago: executing program 2 (id=79): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @local}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2, 0x5}}}, 0x32) ioctl$PPPIOCSMRU(r4, 0x40047452, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, 0x0, &(0x7f00000000c0)=0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000040)=0x1, 0x4) 6m20.078734418s ago: executing program 32 (id=79): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @local}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2, 0x5}}}, 0x32) ioctl$PPPIOCSMRU(r4, 0x40047452, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, 0x0, &(0x7f00000000c0)=0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000040)=0x1, 0x4) 17.864408492s ago: executing program 1 (id=1041): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2, 0x6, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0xf5) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x20, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40800, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000018c0)=ANY=[@ANYBLOB="021680000a00fbdbdf25080012000300ea00b66b6e000000000006060000000000000004000000fbff00ac1e0001000900000000200000000000ac1414bb00"/74], 0x50}}, 0x4000054) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents64(r2, &(0x7f00000000c0)=""/79, 0x4f) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x9, 0xf, 0x5b}, 0x2c) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040)=0x280, 0x4) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000000)=0x63cf, 0x4) 12.666124674s ago: executing program 5 (id=1061): bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='sys/bus/pci/drivers/vfio-pci/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1af4 1000', 0x9) write(r1, &(0x7f0000000740)="3161663420312f4dfba3ed950ee8ce992d2d9850fa99136b749d7997eefff12541d7e0f07e8a6615e9872f050d648916966dcc95728bc2fbe60b676a34d1cb9ef5ba93fdeea580b8b3f396993640b2add045fa1b78bd2af57d7166467956c812f0d267e59d8539573ac62a14b10d3dfcc01f06d63f77ffd512bdc5c1a5500b8d20cda16c37db78a5bc8d06efcdd50833caea9e1e4fd995378c6862835f80b33feaaa7ac48faa68eba681d2cc17429dc6e650afbd52f5ff2f41742adea0c85a54723e8645c1239643715507cee05cdb478c1c557bfff58d16c84996d2e69804d9716e1c00697bf074393ec783a8a52dc31adb49e1cb786b314cc86c4f0f3c862a14c5bef1fdfbf57abaf238ddc9ea7c8108ed6fdd", 0x114) 12.630023542s ago: executing program 1 (id=1063): setns(0xc9, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201010200000008d90472a04000010213010902240001010bf0070904000b020301010909210500d40122ef03090581030800"], &(0x7f0000000400)={0x0, 0x0, 0x19, 0x0, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x340a}}, {0x5f, &(0x7f0000000180)=ANY=[@ANYBLOB="5f1302ec9cc57660b5b74a5a68e3fe8f16e7978af351a19e70abcca910d2f56440c3ccb7d3aba0d1b3da306395f9f84c93c888d1f482235db29299adbf40d4dc633f2500"/84]}, {0x0, 0x0}]}) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) r1 = socket(0x8, 0x5, 0x5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast, @remote}, &(0x7f0000000100)=0xc) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000100), 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, 0x0, 0x5a) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="363a1385ba"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x8}, 0x8) syz_emit_ethernet(0x256, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)) sendmsg$nl_route_sched(r1, &(0x7f0000002e00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002ec0)=@newtfilter={0x3690, 0x2c, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x3, 0xfff3}, {0xffe0, 0x2}, {0xe, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @filter_kind_options=@f_matchall={{0xd}, {0x3654, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x3640, 0x2, [@m_ctinfo={0x34, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x7, 0x6, "350309"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x150, 0x1f, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x4, 0x8, 0x5a}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb2, 0x4, 0x6, 0x5, 0x5}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x4, 0x7, 0x9, 0x7}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x9, 0x2, 0x8001, 0x7}, 0x23}}]}, {0xb2, 0x6, "5c528c536e60474b7f168996508b47a6f549f0fc36afc4f17c0b55985243c17fa2d2e5fe89b00eb708d33c4beb61d76b25824a459a342f456af5c4030cb6c227ca603da83273c329e2eefa92638b1ba920769e62a693306f61c30daef4566a232fac241a7a86629fa28d4861decefa54f01bd1de903c4fa32fdf25d9707e9e920106a79b8c1a15975d7a55687b221b1cad96977b3a63ff11608a665dd60e81c58609f2ee6d653fca317ae5902631"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_nat={0x174, 0xb, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x3, 0x0, 0x4}, @multicast2, @local, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7bc3, 0x1, 0x1, 0xc, 0x9}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xdd, 0x9, 0x20000000, 0x8, 0x3}, @loopback, @remote, 0xffffff00, 0x1}}]}, {0xd2, 0x6, "d0ca23bb16f2d0258e8d3c63410fa2b5fc50969d1c3c3c80a58fecb8ff77662f151dbb950e16c125ce896c74ed821458ece0e20ee6589e7e2c76708cbda50269dd598e39a4901d73a68df31847b2c6b3e32fa58d3b6a4917b8eeb4de8045267569341c1d6a42fee6ecc5cbd73bb73c2732a13e0d086965ed43b04d446bb2618c581a5591b988de79de484cbcf9048472cc080aae74988ce188cff4a240bc4e4cc4615a2eda578c45656de8d1ed4f271b23a4595982179f502badd3d7bd71e20074899b6f8e775a5f6e6649a25092"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x1130, 0xb, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xf, 0x6065, 0x3}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x8, 0xdd3, 0xe0000000}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1, 0xffffffffffffffff, 0x7, 0xc}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x5, 0x2, 0x0, 0xa28f}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x1, 0x0, 0x8}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x81, 0xffffffffffffffff, 0x6, 0x1000}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6175a989, 0x1, 0x10000000, 0x8, 0x1}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x441, 0x2, 0xfffffff8, 0x4}, 0xd2e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0x5e, 0x0, 0x7f, 0x8}, 0x72b9}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x90, 0x10, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x80000001}]}, {0x5b, 0x6, "876b6e4da58e70c1251d70b454103b1dc05c7c6377a51c4eb6691c09b4cdccafcaa2aefe2182f8f7424782941f2c986019cd45ce678f85960a72d95dfc1dfd3696565dc7d27d91d1a2388f599c899a502225498f0f9a3e"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x106c, 0x7, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x1, 0x0, 0xfff, 0xd}, 0x2000001}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}]}, {0x1004, 0x6, "2be4200d5622b9fbbbf0eb019b99a5ffa8b3c98b039b0f0c7e7b30175375dafdf0c6f5930741912df8baac147e6437bc8960312957e1a789821e68cc83b5e4f805353fc0c686930478d753be22bea328a6f34cc1be1ff4b1d5d79e55c455fd64c67f79ca2ce56d9fb713908e480fc40d4b64eef9b38697388f3659ddef83c1fc817556c46f6027874156dcb284a8db11dbc38607dfb2c6683411b618cf16349ca52569ad35234fbf1d6a5081ced86a3ad26e34c5b7caacf6dd2baf93a27e6b4c7a110d6490aa9b5890f405c380051408459df91f5967a08548718da4cd2f7c712d997448bcc1d828b36812008e19e83043a89aaa5e3fc12322d66772a16ad0b4d3664ead6462772f9ff167b0bbe86535c8697ba773cc19c66c6b5aa7c5559cbcb57adcfafdb980302423534d7ac023db98a693d986f49eb2563a48931ecfad753d8a3ee54bf147be21174934c37309a26bd8b2fbf616bc1c026d6be9f6243d6c5928adbb240eafa64b09de8a2f815c62acce3b184f7ec50c3c6b52e50f804f162c3cd2a6c298a666bc4b03ba9825adcd86d4882abcac8e984f46b85a78736b1ce846ae07a11c0027f0e1815f3ae6f477d7504a12ae26293eb4a3b4ce1937b9ac3028f02b7daffa3147f40ecc52a5e1fd7ac2fe177d18e8fd24ca58b0d4c99e097f6dee1c4ffd817aa5acee6dd780713936ed5c90e76525bc5baf733d89cfd1123450815e1c866efade334bc28fa8ad6416782d61fc947b0bbf6c8642f8f1f72ee04b5320bef54be1f3132747876ea982bcfe2f4bf0c0723be623012718815ece4a4fd0c958bfc9cb00cf33cc71ca1402b40b93adb16d7c6a42b9210b7f075c35868be6081daf12770dee6f06829b24e51f23b4b156331b2d227c2132000a7e4d29a162425ae0abbdc6e97fd04a463dd8775d6629876a2129852518876f7d1eb202c5954fb050b1076fa204da191b9c110f34076d2696ced5fe8f3646b5374abbf6501a76f81bc6e1514531fddddd4504111f21a3b115e88a67a0d2fd5014a26372d1876d78a49f2a54017ddd58b0db7acd0575cecf1565b68c5cc5be840c1c175e9f9b92b436254227ab314216f40aa48068163829c87d4b258dc6ee40faf4277523ddbd0c98ed0cffc43006480dfa3dccd96aad885e7a945281b7f57703dfd61c3146ec0cc8e925a3f923904101b2a276e5f92f081ae3eca16742d436417fe76903b9f710289c1b5ba96addf4e43c249e013359d537767fe36896345c1f57da5ffc1eb26bd763405075c99bf223e517f4bd7ae837f89301f70e7d9ea0f8bc7b63b543b21bcf294240cf59dcfa7920898bb4c08b666c6db474db8bfaff5687f53abdef2b7bd63c19dfdd1a66c7129af68a32696af5bd27034ca42b417d2df47141e3c5e43b587ca5d56b5a6a23fde12837fbfb431a073cee710c5bf550c4ccc3c07b0d17ebcf3c56970ebbffa47883f467a9b249b8dd75d9e5db794a7acfa13bcc719494e824f9c43f3359199322f86fea743b5ad6f59611d6587504cfe61779abbbf6baaa0ad91f4041ee8e75e83c15c379c22e52328544d51737ad601313e6f2f84415b67615c120ed29d17ce4a695609664b58b8b335b88e2ec63cfec131d6ff222f14e20186a930aaf1da205a114d88f470e72dd124a63529de21d51f22f66c586d3a801c394d12adbee68b4fa7187f663f41f97396bfc61dbd9e356aea71571bdde3b78e47aa3e3e10e95233ca718ee6e465e97035f95010f1a70465fc397ec75c34ba17aedeccb757588ba056bcfa80d4d4e5d8202caeef2cae841afe4edcd4aac94cb0eac9175e77410ecd6dcf8c7e834adb9a43be5cd547037ee347a448220aa647fbfc61f17d95727bfd4b25bee1445a9d0ae61641131a92e35856b4071e2b3fe7520ea125335cdb5ab60e47f208ac5cf10c0657b06ff739b91009bb55e0b76647874acf0065a4ea16ab7944f09306ddd33c23a4fe6db6acc710b1cb83d54714d78983320b8e83471c929e0f6da9fab50c9b46bec4aff262081dbbe461f7c54d75c03b64487e2dee3d0f3691460f58fee8bed64fb14ff1130e79c637440ed731cbcb39515663fd0be207b4da948cb9215b2f8c7e239173d2dedfe9ca336a0d91dc2d754d45e9c023e555d548112d5acbcdfa372fc6969156d44366821125a281c78a0c2d124caec4308cb3b98ae58b019018082871c70e6cb98e21099e8f2640aead38418ff341c82d1e4beadaeec15678b830b6a4a5956841c31169520d2509e267684ccbf7c55a60f5dbd663cb5fcba3a6491f66e498692826e21608d3876940c6758743705a4ec1e85674567a8c354d9525a886a50d41d42a58305e39d1991d7f7016ea8006e8dc4e1f690f3972a66e38a6f8c95bdb81b8843d49cec954ab62ae8f5addbd9740f5d979e37084dcf865da0d8cd7b3442f1f7b7e6615975ab06034c0d5125e57bf6d77dfcfad8f579ff50183b7702c90ebcd23deb3fcb391ab32e1d8bd29156ba42cf01d72ceb4513b7300d3ba67241ba533085c41907e67dae8073749cd758d2c968b6bd5e850679c056e39c24adfeae43f2afe0ac568d9429fd7b2366682b050a083ffbff072e51fb0e496985281aa463e2957caa227237b6e1796fd7dfbfe1118a8701bea36e21ae20284072be8a649756f34b8ab1e849c8c9e7f507dee35a73685e67e848c1e62f39484d26c8a83d932099cae965110c4313a0717161c27894f2f400711a2947ea40395c13a0522ea41330226772a796a086ce9dc3c16372637c6dc2f526b2645b779064fbad4e74060ff94cfd427eb247fb0a91df28c9d6ada88b06ef92c653dec83e9cf42d90b2ed01f3353a4e4a43f2988438f45f373ad8e6b234c5df7789e3689a09d5d1b8773b1e8e48f6a9401d70bae751c28950248a469a9a240e97d4099ce56f889be989ba66cc2afd4cf8233573ebf902637dbccfbe3f582878e8a34722c55e5c7da658f308a5e331a0e14c14d3621ec8222a58fac036168e80cf2e16595376d941f52d2647f3a81319cc8b994ee2fa653dabce6d62918cfae362024a484b6e1277c4aff25579f74fdbadccd003bd614d5ae52b0e77df4678d57b7898c61f0bbbcbb84794c6098a21446bc76e60c4051c8ff6f93e02d1965e1d6e62d10418c50b0c48f6f4d29dce4f2d9c4671c2cf049c01513a938c773eb3a506d28c9a5592fc30fce719532c91ea8dab582bd6caad45f59b1e77cef88329d279b0277c0710ceb11852c31bbb4e215b292db3cc5d47e4af46c7d4d3bdc5504479c77a1193b5cdf7cc421c422cfcf39aba9ed856a937946e17df603762c603f3c5f8744eaf62fbcc72398f0da97f2461929cd164ad97efb337e928f5dfd1cf77b4987d210e099109dd7d898085501e74fd7daf89cef04e3213be95dc04512d1a938ce27dea07a763eceec11c423ee387788c00c66cb1d73d7dcfb7325079fe7e2ca9da1a6c438967fe480ea3f48a68ea0d315a1236f6eb7bacc9d11cc7c72e906519e896a137c4a6f38d50324d5b484767372bb8fa1fa3ee66bb5e523985161114cc80b90ff5cc453ee45b2c5660a4c4b24ae62c0bc7f4bea891da0e549eab13d495986433dd4e97244031a7f05ff6d0681937f519cad131247bce31deb075d3bf84a4443059f433234cd6cd1fba08cff7c1c284a272dd96ce7aeba7481c8ebaed986617f29e64252105e1546d9d144d36b790f886a3c232074a2042416f5e9ceb75046c6e8369a72a7307b63dd67b109424526472d193e22d68c4241aa95eb549071994f8578c38bcce246107029e263ec800cd76ed6b2420bbac00756ab7cc2ac0aec524c92f7d9670d85d16821adfcb407c3d393565b3c0f90945b9820a3719248bae881037e0a8d311c4c5dbe1fa1cfe67cb910674707560efe2bf483fab49b28077270c96689d5911d84a8960c4dee4cf3d1a5c4fb2714d5c3a72cf361f3d4a100538c692ac053d57e39876e217db42f55d6a4f6c44916342023e4f7d6532391e4fba25d61a28194e6bff2ede111a31477448cd5b466eb6d84e0cd2600fa1835b17169ea2d97ee7cd173933a93a13196f31c43794004398d4d9d8966f8dfd5d3398085555da85ca66db9063ca87ca9f4162b35332b06ffe46c47c8e1bf4d70e35e5193fc8602449aaf0200e441853225dc3cc8dc5a4171d0587270af5631fb217af3072badd5eb0c856809acc4968fc245b5d147c6767bf65b82fe6f9ce7848628b47ca3e433149798e95d8f708b5c9ad599ed6434b9e3eb01616f2f57487fe7c52d2386a605e367d3221a2cfb8374978ec29fe4a1337558b615249078d6db9ff3c81a4c44efa7ff050c5dbb94450975d46fc23423f76d7591eabc7064730c3d996942ff660d1e2958f5e8696e49c5ef2186f5d133dd5866c88f11640f2de9aea56691512992ac9e32faeb097135987b066df0b5d4b6b58f521b5e5477ed0ac7ea20e12cfb840753fc539ce66d8a735534d62da87795653fc458b06378a0c6ee372bba88656fd46cc657f855d12b59992d858f6d696da10f1f30dafc832b1ba39506230b3e7aaf97172243c572b1ab0ab9d53f2a5c1287ef20ac5de37b8be6d6893dec7bca6da6e75a38eaaf68df3caacd55cdbac6cabf56d9438f48d410fcf5da6b02b0fff19c3a0b718b419343d88cbf2403d5d8b1c0b37f39cd86efa78e50f9db5587ce1840fb3a2e36c29d2ceeaf73972e758844803c4aad3cf12d368dc45e5573303eb13889c1efa8cc22346988e6a9d099f6bc1c0c555d89e31e0961cd5192505c6b196e65fb61152da1ed7add805b3b8c783e6860455fee5cfd55e6a8de82d72b86388c23b8e9898fc22c1c609e9f27b56611b82787d14b7339911c5850d7238f4af92a5bffb746a1751bb53e22c3f16eef40dd694d938df94ff9610b1a977fad0547ea8272b26b7e9dc4b21ebfe87f630f77f7ed3490894ca55894e48b3f3a8cd2a8c8f59836d9066015800cf1ce611772ba52132f231aa9ecd9c29b0c615253bd1b656e68ea37c0de1646d93293476cf271d1f4bc8c10e1839e65438fb65fb1bbb3be462b78e6921d6f79d406cb131c0e3a0e9c7e288dd3ba11a30753e03b02a89cec1915982cbd7c89c1635e4bc9a7fa229c39eb311ef004921c2eb61a3086afea13ff2e6f7a75668290f09fe187019fd072148b1ff18df47d7d6ea59a97707c103d7d7c930b829206cbbb1890c6fb12f3ae1e1e6559fdf2de69b5d9e18e8db2743b112d704ab9bd0f704ddf46b8675ca36fe2db111b45cf5eca6aa4c4152b018bef0054389d0f3ee87477690b5d5463bac73c9dd106d35ba88c9c4fa1057af716cbe430d186f6c718bdc9cab8e7a21237e88d5e589a41a736f3c728bc46d6875727287b1778ebd53672f0108bcebbc16e1a849f43d6caebf9c9dbdf55ae85d79208e916f04193a33ea92f18bee0abc433a2eee2896c522e04460301f346ed89b52168d568c7e6b2e6bc705d219b01dd57f3b56c94e100ce797fabde60fcb999966c97ab7682b233dd2edb52c9e0093860ad9328fbf65a2ce4e38adbf5795519d0dbac42c1e29eaae31ce0f5d4002fc4fc5c781aa99438c92fcb2a008bd0f5ac4b7d700db7217c226c67406faa8b8549de80806ea75358b32edcd1e03f931380cb195b53e03ecd334a3c4ab5d0508d6979fc346042859a551581430a3036d38cefee80162750d90f78091b2b67567b8caf4e53c58c44c097e3710ea0ee38229b4c93e844950a0f6d5c65268b2a2b262754b064bc0910c8e536418d979038d403abe09d370ab27"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_skbmod={0x1038, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xff}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_mirred={0xe0, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0xb4, 0x6, "bb1f1d8848b5a71420f50e407e58451d128762979d3f9f328f375c502ccf6b239c0f921638bde1441466a6dde1d81f4c2377b57633cf025b0c778280a55b100a20f623abe5fe6a8825c459792dc742450d9a82b184a7bae2d2b61adceaed93d3349d0ca0a2ffcad0136e3c501c8d8f176eb68a37e7cd702da21db3fd2e9ff300792525b8c41bfb1a54dbeea3e7084d1aceffb9919b610df49552bdb6d33e17114e540a17580c0047c3494fc62bd24aaa"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x3690}, 0x1, 0x0, 0x0, 0x80}, 0x24000800) 11.942010438s ago: executing program 5 (id=1066): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 11.598360507s ago: executing program 0 (id=1068): syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = memfd_create(&(0x7f0000000280)='-B\xd5N4:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc8<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGUOMX\x164\xec\x06i\x85\x93\x87YB.e\xea2|A\x95\x05\xc3\x11\xde\xa0\x14*4\x83J\xa1\xddc\xde\x91 sO\xfb\xcc\r\xa8\x05\xa3\xab\xe6\xb5\xe4\x8b\x128\xa8\x05\xf9\f\xb4\x97\x1c\x82\xfd\x80O\x00\x00\x00\x00\x00\x00\x00', 0x1) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000001c0), 0x0, 0x0, 0x3) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) userfaultfd(0x801) r5 = syz_io_uring_setup(0x4da7, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x0, 0x105, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r5, 0x1000004, 0xfffffffd, 0x82, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x800, 0xb) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000080)=[{0x102, 0x4, 0x81, 0x6}, {0xffff, 0x8, 0xd3, 0x4}, {0x9, 0x2, 0x4, 0x9b5}, {0x54, 0x7f, 0x4, 0x40}, {0x2, 0x5b, 0x7, 0x81}, {0xbb, 0x3, 0x7, 0xfffffffc}]}) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r10, 0x2000, 0x0) write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6) 11.596778378s ago: executing program 5 (id=1069): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000780)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000800)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), r1, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000000000000, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x2, r2, 0x0, 0x0, 0x1}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2, 0x6}}, 0x20) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$SG_SET_DEBUG(r7, 0x227e, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x4000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 10.507535169s ago: executing program 0 (id=1072): bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b80cdd64bdf00000000000869045aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a95fdaf3c7220a0e23db436659a8c54328a702688f92b6b71569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c51b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341cd0ba0d6fd562489dad595712a4051bb6cf826ab757193fc09d305f95c55d5746419000000000000007b61803bd430ef06000000000000001e93f640f159320c8b088f4d6497682eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751e539c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bf96330fad0aaa4388c06c0eb2ecdf829af9577fcd868cc269b740000b7ad193c5e5850df01aff96877d73a63246ce6f0467167626329ab910b7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c270f27e7025d576535198742d403ec43572d7d0baf00e882617b260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6050041206473075eaeff2b69c2f2bf6f691c3560e068743a08e9771280da61fd8fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c295d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c5669b13a4ed999dd10d2f091dcda39d9abc40c64a20c14ff0b1bf4d23fe07ae90fa0eba9c64bf89b26e7d8d70710b04f9ece5969023acadbb4582272e5b3a0429a5645b0c824ad36f7cc8be12b3874d5a19349b0ede845e9dddcab4a78b08ed60104002aabb17eb1840bc8e0ed1dd8b9b7eeaf32a185d80250a7f2252775905eeeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d3690f23b06fa4541bb2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1ba3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be47e896aecac0bc4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a7ff5bdcef7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dce2db951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02dcefccc0c714c2862ddbe567755f05c1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1dd8f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b168d4763c1f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae654bfa81e75b7c7002b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d72247167285857588ace1115fbebfee3c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed5147b629e4b3f0e65783ee5e20d9270802f2a7500738d95216743bc36a04ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e42ad33cba2661957cff0700000000000029bb61462623a58556cd62844d4d23cc738ee5b36c71d2c010b089251d5806000b1ade92dd9f441468967c052aecd9de81b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd4945717075cbb4d3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc310fbf1760243d51a197d3ecfd74bd625e9f496175513f3e97854ea76e26e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c326c89bb5d07f35aaf95303b5a620fc84e1c73557b2277831f8f633f0d293c0e3f4f93149887271e645f50a4e57010a9b76457f6ad73231a905206bbb1b95248aed85a9df9dea64cc1fd1f06a98530000000000000045fcc1fb138fce0faec0a423e860d5b308d7849381b294106af25f15fec047d5b844a99f36e342165df728e381b48c20e0900f8d265157467d3494f2b93c7f3c817688cec2d226f50edb115c2e075f3c663a4b4169bc6fd7d4fbce205f2a1ae263ae0db900fa0a13cf796e0d7a9dad86953c13ed6241206d682e194c64c491de6a531e9bd45abe705f"], 0x0, 0x2}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00"], 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000480)=""/74, 0x4a) 10.399102697s ago: executing program 4 (id=1074): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200080000100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x3) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x8000000000000005) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) getpid() r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000340)={{0x100, 0x6, 0xfff9, 0x3}, 'syz0\x00', 0xfffffffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(r0, 0x29, 0x34, &(0x7f00000003c0)=0x1000005, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0xd9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) 9.907261553s ago: executing program 1 (id=1075): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x49, 0x440) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_flags=0x8000}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x40000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae03, 0xc7) ioperm(0x3, 0x5, 0x7) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010004b042200000000000000", @ANYRES64, @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x4008000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) unshare(0x28000600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0xd}, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSLCKTRMIOS(r4, 0x80047437, &(0x7f00000010c0)) shmdt(0x0) 9.777229003s ago: executing program 3 (id=1076): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000800)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 9.415756329s ago: executing program 3 (id=1077): add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet_sctp(r0, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)}, {&(0x7f0000000480)="cf4a1e93489489671fe50f83a397f0db2f33", 0x12}, {&(0x7f0000000500)="872daa3013c515f04108fccef6f8f95e34015799685768823dca2ad088b3ff94ac7a5b77d7a5ed5e211205d068ca80bbe0665722ea82c167da66003a5ffec59b519614c05893c08c12c3a9cff4a29a3e17c74f", 0x53}, {&(0x7f0000000580)="0ede0539c63d5db50432ce2a2a743035e2f873a578c8a5d259cdedd71a8ee848b234fb8861a169b53861708e621ef9a1ca9359a6698b823b8d8d255425e459eaed36737ca53bb145cba4a51bfdaa8dafac5f700467413a95463d74c61cb30fe63f982665a0a1fd5cc64477fb05", 0x6d}, {0x0}], 0x5, 0x0, 0x0, 0x20000000}], 0x1, 0x20000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@iv={0x30, 0x117, 0x2, 0x16, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x48, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a", 0x1e}, {0x0}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, 0x0, 0x0, 0x40800) 9.185374653s ago: executing program 4 (id=1078): syz_emit_vhci(0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r0}) close(0x3) 6.249197455s ago: executing program 3 (id=1079): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket(0x40000000015, 0x5, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000400)}, 0x50) 5.950519413s ago: executing program 4 (id=1080): syz_emit_vhci(0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0}) close(0x3) 5.892352212s ago: executing program 0 (id=1081): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000700000095000000000000006100000600000000bf91000000000000b7020000000000008500000000000000b700000000000000950000000000000060196912bf8bed129121bb22faf6c7f85805ed09fdb7048b325afa3086e6fea310568bd551217363fc977f29f449cf87d8ac8cdfcaf0c0e615e4c2706210cca97abea2d25edf6d0bf96ffe90149cd0f2a881b918efe1c88f1ed97cd9005d9f12b4449ad0"], &(0x7f0000000100)='GPL\x00', 0x4, 0x103, &(0x7f0000000140)=""/259}, 0x23) 5.875503577s ago: executing program 1 (id=1082): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000700)={0x0, 0xc6, "8f191e3289a5a062a7a480ad4dab53b6a1be7d73946c13255496c0453547e686e8115bf3aa4f9906ec7dec6b9c2857d8edef557e170b5fdf2ef927f93c6064018526790009cee6aba667da836be46fe08dfe4b2e299e327c90f8899e7263430b82f191341b9d01a5b72edfda7de735d4838ed85d9d9b565fc405ea1ef69ae57a2039819bf017865d32d6cb685e9f96af3b82601698770e7830389781785fe0e485692896a4f6e2e76ba6d58a04c5492e4675bbf98ab72b7b1b83887f41eebebe0818a8da25d7"}, &(0x7f0000000880)=0xce) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa5a917104c39f", 0xdf}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99", 0x8e}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdcb3227e7e06079dc9725423d66f47694787ec855a7fa2310330b220642ee8afcbd20fd6", 0x47}], 0x3}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7db", 0x50}], 0x1}}], 0x2, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="182e8e54decc127e0800000000000000000000000000008510000006", @ANYRES32, @ANYBLOB="00000000000000007900c00000000000180000000000000000000000000000009500000000000000d50a0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x7, &(0x7f0000000340)=""/238, 0x0, 0x2}, 0x21) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x4) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154bab13b3", 0xbc}, {&(0x7f0000001000)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000", 0xf7}, {&(0x7f00000001c0)="985e44efeaab001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637", 0x44}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)}}], 0x2, 0x4000900) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000400"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000700000095000000000000006100000600000000bf91000000000000b7020000000000008500000000000000b700000000000000950000000000000060196912bf8bed129121bb22faf6c7f85805ed09fdb7048b325afa3086e6fea310568bd551217363fc977f29f449cf87d8ac8cdfcaf0c0e615e4c2706210cca97abea2d25edf6d0bf96ffe90149cd0f2a881b918efe1c88f1ed97cd9005d9f12b4449ad0"], &(0x7f0000000100)='GPL\x00', 0x4, 0x103, &(0x7f0000000140)=""/259}, 0x23) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 5.7447102s ago: executing program 4 (id=1083): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0xff20}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5.538614029s ago: executing program 0 (id=1084): r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = syz_socket_connect_nvme_tcp() close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0xffd) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0) ioctl$TIOCPKT(r6, 0x5420, 0x0) prlimit64(r2, 0x7, &(0x7f0000000040)={0x3, 0x800}, &(0x7f00000000c0)) mkdir(&(0x7f0000000000)='config\x00', 0x1ff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$uhid(0xffffff9c, &(0x7f00000002c0), 0x802, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) 5.409655061s ago: executing program 5 (id=1085): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa5a917104c39f", 0xdf}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99", 0x8e}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdcb3227e7e06079dc9725423d66f47694787ec855a7fa2310330b220642ee8afcbd20fd6", 0x47}], 0x3}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7db", 0x50}], 0x1}}], 0x2, 0x4000000) socket$kcm(0x11, 0x200000000000002, 0x300) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154bab13b3", 0xbc}, {&(0x7f0000001000)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000", 0xf7}, {&(0x7f00000001c0)="985e44efeaab001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637", 0x44}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)}}], 0x2, 0x4000900) 5.403496643s ago: executing program 4 (id=1086): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x63cf, 0x4) 5.296255213s ago: executing program 1 (id=1087): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x4, 0xfdfbff7d, 0x7, 0x2, "0c41920887e8d2b7921105000000000000006b", 0x4, 0x203}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) 5.030775049s ago: executing program 5 (id=1088): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200080000100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x3) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x8000000000000005) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) getpid() r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000340)={{0x100, 0x6, 0xfff9, 0x3}, 'syz0\x00', 0xfffffffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(r0, 0x29, 0x34, &(0x7f00000003c0)=0x1000005, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0xd9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) 4.87400044s ago: executing program 1 (id=1089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_SET_NETID(r4, 0x0, 0x4800) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040445}, 0x4808) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3.153316971s ago: executing program 5 (id=1090): syz_emit_vhci(0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) close(0x3) 2.795342226s ago: executing program 4 (id=1091): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x4b72, &(0x7f00000000c0)={0x1, 0xfffffffe, 0xffffffff, 0xc1c, 0x10, "0060930000efa4890200000000400000008000"}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x400, 0x800, 0x3, 0xfffffffd, 0x10000}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000340)={r4, 0x4, 0x6, 0x1000, 0x8, 0x0, 0x3, 0x291235af, {r5, @in6={{0xa, 0x4e20, 0xc, @mcast1, 0x8}}, 0x6, 0x100, 0x3, 0x80, 0x6}}, &(0x7f0000000580)=0xb0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r2, 0xa) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000440)=0x10000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={r7, 0x3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="18000020fefffdff00000000100000a7027158fb27e1c9ba07d916a6d70e037242a1a169871edaf9b44976b26b5de74facc243717b0c1551b3700ebce19b6273832584f46ad44e69c4142adc898df4b1f3f7b6ef730453264b15c976e830dcd795b94177738d381512a0cd85270021f16f4aead9375c566d7c089fdc9fb21937740854e13ada3fbdff6c001bf4d2b3fec3a1dd454053e9422d22151ca0ad1870da", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008504000083000000bf090000000000005509010000000000950018110008000000000000", @ANYRESDEC=r1, @ANYRES8=r8, @ANYRESDEC=r6, @ANYRESOCT=r6], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x32, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) 886.061469ms ago: executing program 0 (id=1092): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x49, 0x440) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_flags=0x8000}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x40000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae03, 0xc7) ioperm(0x3, 0x5, 0x7) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010004b042200000000000000", @ANYRES64, @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x4008000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) unshare(0x28000600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0xd}, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) shmdt(0x0) 577.441973ms ago: executing program 3 (id=1093): syz_emit_vhci(0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0}) close(0x3) 304.337078ms ago: executing program 3 (id=1094): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000700000095000000000000006100000600000000bf91000000000000b7020000000000008500000000000000b700000000000000950000000000000060196912bf8bed129121bb22faf6c7f85805ed09fdb7048b325afa3086e6fea310568bd551217363fc977f29f449cf87d8ac8cdfcaf0c0e615e4c2706210cca97abea2d25edf6d0bf96ffe90149cd0f2a881b918efe1c88f1ed97cd9005d9f12b4449ad0"], &(0x7f0000000100)='GPL\x00', 0x4, 0x103, &(0x7f0000000140)=""/259}, 0x23) 172.107002ms ago: executing program 3 (id=1095): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000780)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000800)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), r1, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000000000000, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x2, r2, 0x0, 0x0, 0x1}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2, 0x6}}, 0x20) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$SG_SET_DEBUG(r7, 0x227e, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x4000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000004a0000000000000041b14e6d63b14b4ea358525fe59bfe4e0c83244644b4295ec1d8cfd4cb055b20dd4b7f7eb8f6b4953b1cdb74ea897315665ec3b7a82745154561e5fa3a6e0e3ae979c927477874c80d9c765d0bc11e35c82a0d69c473eae4a2f76e7d1e82", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000100)=r2, 0x8) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) kernel console output (not intermixed with test programs): .974825][ T6711] usb 1-1: USB disconnect, device number 11 [ 385.169862][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 385.173652][ T7904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.290137][ T7904] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.377039][ T3130] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.377205][ T3130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.452135][ T769] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.452282][ T769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.244449][ T8277] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20004 [ 388.251087][ T8277] loop5: detected capacity change from 0 to 7 [ 388.957460][ T8277] Dev loop5: unable to read RDB block 7 [ 388.957521][ T8277] loop5: unable to read partition table [ 388.957761][ T8277] loop5: partition table beyond EOD, truncated [ 388.957782][ T8277] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 391.240617][ T8292] syz.3.617 (8292) used greatest stack depth: 19016 bytes left [ 392.866775][ T8314] loop5: detected capacity change from 0 to 7 [ 392.886584][ T8314] Dev loop5: unable to read RDB block 7 [ 392.886627][ T8314] loop5: AHDI p1 p2 p3 [ 392.886651][ T8314] loop5: partition table partially beyond EOD, truncated [ 392.886918][ T8314] loop5: p1 start 1601398130 is beyond EOD, truncated [ 392.886940][ T8314] loop5: p2 start 1702059890 is beyond EOD, truncated [ 394.645588][ T8340] FAULT_INJECTION: forcing a failure. [ 394.645588][ T8340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.645630][ T8340] CPU: 1 UID: 0 PID: 8340 Comm: syz.4.630 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 394.645655][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.645669][ T8340] Call Trace: [ 394.645677][ T8340] [ 394.645688][ T8340] dump_stack_lvl+0xe8/0x150 [ 394.645732][ T8340] should_fail_ex+0x467/0x600 [ 394.645776][ T8340] _copy_to_user+0x31/0xb0 [ 394.645805][ T8340] copy_siginfo_to_user+0x22/0xc0 [ 394.645949][ T8340] x64_setup_rt_frame+0x765/0xc50 [ 394.646018][ T8340] ? rt_spin_unlock+0x157/0x200 [ 394.646068][ T8340] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 394.646111][ T8340] arch_do_signal_or_restart+0x45b/0x860 [ 394.646145][ T8340] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 394.646185][ T8340] ? do_readv+0x2b7/0x2e0 [ 394.646248][ T8340] exit_to_user_mode_loop+0x104/0x730 [ 394.646302][ T8340] ? rcu_is_watching+0x15/0xb0 [ 394.646355][ T8340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.646381][ T8340] do_syscall_64+0x353/0x580 [ 394.646408][ T8340] ? trace_irq_disable+0x3b/0x140 [ 394.646430][ T8340] ? clear_bhb_loop+0x40/0x90 [ 394.646457][ T8340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.646478][ T8340] RIP: 0033:0x7f31a0c8e019 [ 394.646499][ T8340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.646518][ T8340] RSP: 002b:00007f319eee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 394.646542][ T8340] RAX: fffffffffffffffc RBX: 00007f31a0f15fa0 RCX: 00007f31a0c8e019 [ 394.646558][ T8340] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 394.646572][ T8340] RBP: 00007f319eee6090 R08: 0000000000000000 R09: 0000000000000000 [ 394.646587][ T8340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.646601][ T8340] R13: 00007f31a0f16038 R14: 00007f31a0f15fa0 R15: 00007ffe6e2bd648 [ 394.646636][ T8340] [ 394.906869][ T7904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.115602][ T8352] FAULT_INJECTION: forcing a failure. [ 395.115602][ T8352] name failslab, interval 1, probability 0, space 0, times 0 [ 395.115640][ T8352] CPU: 1 UID: 0 PID: 8352 Comm: syz.4.632 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 395.115665][ T8352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.115676][ T8352] Call Trace: [ 395.115685][ T8352] [ 395.115694][ T8352] dump_stack_lvl+0xe8/0x150 [ 395.115734][ T8352] should_fail_ex+0x467/0x600 [ 395.115773][ T8352] should_failslab+0xa8/0x100 [ 395.115901][ T8352] kmem_cache_alloc_node_noprof+0xae/0x670 [ 395.115953][ T8352] ? __alloc_skb+0x1d7/0x7a0 [ 395.116050][ T8352] ? __alloc_skb+0x1d7/0x7a0 [ 395.116079][ T8352] __alloc_skb+0x1d7/0x7a0 [ 395.116108][ T8352] netlink_sendmsg+0x5d4/0xb40 [ 395.116180][ T8352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.116210][ T8352] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 395.116307][ T8352] ? __kernel_text_address+0xd/0x30 [ 395.116354][ T8352] ? unwind_get_return_address+0x4d/0x90 [ 395.116433][ T8352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.116459][ T8352] sock_sendmsg_nosec+0x13a/0x180 [ 395.116534][ T8352] ____sys_sendmsg+0x565/0x870 [ 395.116570][ T8352] ? __might_fault+0xaf/0x130 [ 395.116629][ T8352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.116666][ T8352] ? import_iovec+0x73/0xa0 [ 395.116764][ T8352] ___sys_sendmsg+0x2a5/0x360 [ 395.116786][ T8352] ? __lock_acquire+0x683/0x2ce0 [ 395.116844][ T8352] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.116904][ T8352] ? __fget_files+0x2a/0x420 [ 395.116926][ T8352] ? __fget_files+0x3a8/0x420 [ 395.116959][ T8352] __x64_sys_sendmsg+0x1b7/0x290 [ 395.116990][ T8352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.117038][ T8352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.117063][ T8352] do_syscall_64+0x174/0x580 [ 395.117091][ T8352] ? trace_irq_disable+0x3b/0x140 [ 395.117112][ T8352] ? clear_bhb_loop+0x40/0x90 [ 395.117138][ T8352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.117160][ T8352] RIP: 0033:0x7f31a0c8e019 [ 395.117180][ T8352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.117199][ T8352] RSP: 002b:00007f319eee6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.117222][ T8352] RAX: ffffffffffffffda RBX: 00007f31a0f15fa0 RCX: 00007f31a0c8e019 [ 395.117239][ T8352] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 395.117252][ T8352] RBP: 00007f319eee6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.117265][ T8352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.117277][ T8352] R13: 00007f31a0f16038 R14: 00007f31a0f15fa0 R15: 00007ffe6e2bd648 [ 395.117310][ T8352] [ 396.803893][ T8381] FAULT_INJECTION: forcing a failure. [ 396.803893][ T8381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.803926][ T8381] CPU: 0 UID: 0 PID: 8381 Comm: syz.0.643 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 396.803947][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.803958][ T8381] Call Trace: [ 396.803965][ T8381] [ 396.803972][ T8381] dump_stack_lvl+0xe8/0x150 [ 396.804006][ T8381] should_fail_ex+0x467/0x600 [ 396.804051][ T8381] _copy_to_user+0x31/0xb0 [ 396.804076][ T8381] simple_read_from_buffer+0xe1/0x170 [ 396.804102][ T8381] proc_fail_nth_read+0x1be/0x230 [ 396.804128][ T8381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.804150][ T8381] ? rw_verify_area+0x250/0x4d0 [ 396.804173][ T8381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.804190][ T8381] vfs_read+0x219/0xa90 [ 396.804219][ T8381] ? __pfx_vfs_read+0x10/0x10 [ 396.804243][ T8381] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 396.804270][ T8381] ? lockdep_hardirqs_on+0x7a/0x110 [ 396.804292][ T8381] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 396.804314][ T8381] ? mutex_lock_nested+0x152/0x1d0 [ 396.804329][ T8381] ? fdget_pos+0x252/0x320 [ 396.804356][ T8381] ksys_read+0x156/0x270 [ 396.804380][ T8381] ? __pfx_ksys_read+0x10/0x10 [ 396.804410][ T8381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.804430][ T8381] do_syscall_64+0x174/0x580 [ 396.804451][ T8381] ? trace_irq_disable+0x3b/0x140 [ 396.804470][ T8381] ? clear_bhb_loop+0x40/0x90 [ 396.804492][ T8381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.804510][ T8381] RIP: 0033:0x7f786074e84e [ 396.804528][ T8381] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 396.804544][ T8381] RSP: 002b:00007f785e9e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 396.804564][ T8381] RAX: ffffffffffffffda RBX: 00007f785e9e66c0 RCX: 00007f786074e84e [ 396.804577][ T8381] RDX: 000000000000000f RSI: 00007f785e9e60a0 RDI: 0000000000000003 [ 396.804588][ T8381] RBP: 00007f785e9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 396.804599][ T8381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.804609][ T8381] R13: 00007f7860a16038 R14: 00007f7860a15fa0 R15: 00007ffe146c3cf8 [ 396.804640][ T8381] [ 397.213298][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 397.261555][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 397.271431][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 397.272712][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 397.296996][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.899724][ T8412] FAULT_INJECTION: forcing a failure. [ 398.899724][ T8412] name failslab, interval 1, probability 0, space 0, times 0 [ 398.899763][ T8412] CPU: 1 UID: 0 PID: 8412 Comm: syz.3.654 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 398.899787][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.899800][ T8412] Call Trace: [ 398.899809][ T8412] [ 398.899818][ T8412] dump_stack_lvl+0xe8/0x150 [ 398.899860][ T8412] should_fail_ex+0x467/0x600 [ 398.899900][ T8412] should_failslab+0xa8/0x100 [ 398.899930][ T8412] __kmalloc_cache_noprof+0xa0/0x6b0 [ 398.899956][ T8412] ? __request_module+0x2d0/0x630 [ 398.900096][ T8412] ? __request_module+0x2d0/0x630 [ 398.900131][ T8412] __request_module+0x2d0/0x630 [ 398.900165][ T8412] ? __pfx___request_module+0x10/0x10 [ 398.900217][ T8412] crypto_alg_mod_lookup+0xa2/0x5d0 [ 398.900301][ T8412] crypto_alloc_tfm_node+0x135/0x3e0 [ 398.900344][ T8412] alg_bind+0x2a9/0x4b0 [ 398.900431][ T8412] __sys_bind+0x2e9/0x410 [ 398.900456][ T8412] ? __pfx___sys_bind+0x10/0x10 [ 398.900491][ T8412] ? __pfx_ksys_write+0x10/0x10 [ 398.900522][ T8412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.900544][ T8412] __x64_sys_bind+0x7a/0x90 [ 398.900566][ T8412] do_syscall_64+0x174/0x580 [ 398.900592][ T8412] ? trace_irq_disable+0x3b/0x140 [ 398.900614][ T8412] ? clear_bhb_loop+0x40/0x90 [ 398.900638][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.900657][ T8412] RIP: 0033:0x7fbbd567e019 [ 398.900675][ T8412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.900693][ T8412] RSP: 002b:00007fbbd38d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 398.900717][ T8412] RAX: ffffffffffffffda RBX: 00007fbbd5905fa0 RCX: 00007fbbd567e019 [ 398.900732][ T8412] RDX: 0000000000000058 RSI: 0000200000000000 RDI: 0000000000000003 [ 398.900745][ T8412] RBP: 00007fbbd38d6090 R08: 0000000000000000 R09: 0000000000000000 [ 398.900757][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.900769][ T8412] R13: 00007fbbd5906038 R14: 00007fbbd5905fa0 R15: 00007fffd559e668 [ 398.900804][ T8412] [ 399.373968][ T59] Bluetooth: hci2: command tx timeout [ 399.634103][ T8425] netlink: 68 bytes leftover after parsing attributes in process `syz.1.658'. [ 399.659724][ T8425] netlink: 16 bytes leftover after parsing attributes in process `syz.1.658'. [ 399.659769][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 399.662642][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 399.788917][ T6709] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 399.934477][ T6709] usb 5-1: Using ep0 maxpacket: 32 [ 399.938561][ T6709] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.938600][ T6709] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.940983][ T6709] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 399.941015][ T6709] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 399.941047][ T6709] usb 5-1: Product: syz [ 399.941062][ T6709] usb 5-1: Manufacturer: syz [ 400.022319][ T6709] hub 5-1:4.0: USB hub found [ 400.224412][ T6709] hub 5-1:4.0: 2 ports detected [ 400.353211][ T8443] FAULT_INJECTION: forcing a failure. [ 400.353211][ T8443] name failslab, interval 1, probability 0, space 0, times 0 [ 400.353245][ T8443] CPU: 0 UID: 0 PID: 8443 Comm: syz.1.662 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 400.353266][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.353276][ T8443] Call Trace: [ 400.353283][ T8443] [ 400.353291][ T8443] dump_stack_lvl+0xe8/0x150 [ 400.353324][ T8443] should_fail_ex+0x467/0x600 [ 400.353356][ T8443] should_failslab+0xa8/0x100 [ 400.353380][ T8443] __kmalloc_noprof+0xfe/0x780 [ 400.353399][ T8443] ? tomoyo_encode+0x2ad/0x570 [ 400.353421][ T8443] ? tomoyo_encode+0x2ad/0x570 [ 400.353450][ T8443] tomoyo_encode+0x2ad/0x570 [ 400.353478][ T8443] tomoyo_realpath_from_path+0x5fa/0x640 [ 400.353512][ T8443] ? tomoyo_path_number_perm+0x219/0x5f0 [ 400.353533][ T8443] tomoyo_path_number_perm+0x246/0x5f0 [ 400.353555][ T8443] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 400.353574][ T8443] ? __lock_acquire+0x683/0x2ce0 [ 400.353613][ T8443] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 400.353635][ T8443] ? hook_file_ioctl+0x1f3/0x600 [ 400.353725][ T8443] ? lockdep_hardirqs_on+0x7a/0x110 [ 400.353771][ T8443] ? __fget_files+0x2a/0x420 [ 400.353798][ T8443] ? __fget_files+0x2a/0x420 [ 400.353818][ T8443] ? __fget_files+0x3a8/0x420 [ 400.353837][ T8443] ? __fget_files+0x2a/0x420 [ 400.353863][ T8443] security_file_ioctl+0xc3/0x2a0 [ 400.353929][ T8443] __se_sys_ioctl+0x47/0x170 [ 400.354024][ T8443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.354044][ T8443] do_syscall_64+0x174/0x580 [ 400.354065][ T8443] ? trace_irq_disable+0x3b/0x140 [ 400.354083][ T8443] ? clear_bhb_loop+0x40/0x90 [ 400.354103][ T8443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.354120][ T8443] RIP: 0033:0x7f457e33e019 [ 400.354138][ T8443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.354152][ T8443] RSP: 002b:00007f457c596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.354173][ T8443] RAX: ffffffffffffffda RBX: 00007f457e5c5fa0 RCX: 00007f457e33e019 [ 400.354187][ T8443] RDX: 0000200000000040 RSI: 000000004008af04 RDI: 0000000000000003 [ 400.354198][ T8443] RBP: 00007f457c596090 R08: 0000000000000000 R09: 0000000000000000 [ 400.354209][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.354220][ T8443] R13: 00007f457e5c6038 R14: 00007f457e5c5fa0 R15: 00007ffc65acff48 [ 400.354250][ T8443] [ 400.362601][ T8443] ERROR: Out of memory at tomoyo_realpath_from_path. [ 400.432292][ T8423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.432989][ T8423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.492746][ T8423] udc dummy_udc.0: unsupported command 'con' [ 400.643743][ T4981] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 400.660409][ T6709] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 400.660506][ T6709] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 400.734821][ T6709] usb 5-1: USB disconnect, device number 9 [ 400.868590][ T4981] usb 1-1: Using ep0 maxpacket: 8 [ 400.875162][ T4981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 400.875195][ T4981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 18249, setting to 1024 [ 400.875239][ T4981] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 400.875262][ T4981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.909137][ T4981] usb 1-1: config 0 descriptor?? [ 400.918850][ T8442] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 401.201560][ T4981] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 401.219437][ T4981] usb 1-1: USB disconnect, device number 12 [ 401.453729][ T59] Bluetooth: hci2: command tx timeout [ 401.472742][ T8462] Line length is too long: Should be less than 4094 [ 403.245809][ T8485] netlink: 224 bytes leftover after parsing attributes in process `syz.0.676'. [ 403.245836][ T8485] netlink: 80 bytes leftover after parsing attributes in process `syz.0.676'. [ 403.245852][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 403.535071][ T59] Bluetooth: hci2: command tx timeout [ 405.614193][ T59] Bluetooth: hci2: command tx timeout [ 406.460423][ T8517] netlink: 36 bytes leftover after parsing attributes in process `syz.4.685'. [ 407.434955][ T1495] bridge_slave_1: left allmulticast mode [ 407.435003][ T1495] bridge_slave_1: left promiscuous mode [ 407.435307][ T1495] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.466386][ T6709] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 407.613461][ T1495] bridge_slave_0: left allmulticast mode [ 407.613502][ T1495] bridge_slave_0: left promiscuous mode [ 407.625256][ T1495] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.635241][ T6709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.635279][ T6709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.635321][ T6709] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 407.635347][ T6709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.701455][ T6709] usb 2-1: config 0 descriptor?? [ 408.230585][ T6709] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 408.230625][ T6709] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 408.230651][ T6709] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 408.230678][ T6709] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 408.230703][ T6709] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 408.230729][ T6709] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 408.275364][ T6709] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 408.308290][ T6709] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 408.546296][ T6709] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 408.546360][ T6709] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 408.585635][ T6709] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 408.834722][ T6709] usb 2-1: USB disconnect, device number 8 [ 410.031806][ T1495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.095360][ T1495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.118308][ T1495] bond0 (unregistering): Released all slaves [ 410.287030][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.691'. [ 410.304123][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 410.814472][ T8378] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.816157][ T8378] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.816403][ T8378] bridge_slave_0: entered allmulticast mode [ 410.828995][ T8378] bridge_slave_0: entered promiscuous mode [ 410.845228][ T8378] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.845374][ T8378] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.845633][ T8378] bridge_slave_1: entered allmulticast mode [ 410.848676][ T8378] bridge_slave_1: entered promiscuous mode [ 411.210810][ T1495] hsr_slave_0: left promiscuous mode [ 411.275496][ T1495] hsr_slave_1: left promiscuous mode [ 411.278946][ T1495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.325431][ T1495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.054497][ T5788] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 412.402431][ T5788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.402470][ T5788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.402513][ T5788] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 412.402538][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.474628][ T5788] usb 5-1: config 0 descriptor?? [ 412.956618][ T5788] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 412.956657][ T5788] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 412.956684][ T5788] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 413.026310][ T5788] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 413.602577][ T8607] binder: BINDER_SET_CONTEXT_MGR already set [ 413.602621][ T8607] binder: 8606:8607 ioctl 4018620d 200000004a80 returned -16 [ 413.700573][ T1495] team0 (unregistering): Port device team_slave_1 removed [ 413.804744][ T1495] team0 (unregistering): Port device team_slave_0 removed [ 415.127696][ T8625] FAULT_INJECTION: forcing a failure. [ 415.127696][ T8625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.127735][ T8625] CPU: 1 UID: 0 PID: 8625 Comm: syz.0.709 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 415.127760][ T8625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.127772][ T8625] Call Trace: [ 415.127781][ T8625] [ 415.127790][ T8625] dump_stack_lvl+0xe8/0x150 [ 415.127831][ T8625] should_fail_ex+0x467/0x600 [ 415.127869][ T8625] _copy_from_user+0x2d/0xb0 [ 415.127897][ T8625] sk_getsockopt+0x1d4/0x2760 [ 415.127933][ T8625] ? __pfx_sk_getsockopt+0x10/0x10 [ 415.127968][ T8625] ? __lock_acquire+0x683/0x2ce0 [ 415.128003][ T8625] ? __might_fault+0xaf/0x130 [ 415.128029][ T8625] ? __might_fault+0xaf/0x130 [ 415.128074][ T8625] do_sock_getsockopt+0x2bd/0x7e0 [ 415.128108][ T8625] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 415.128152][ T8625] ? __fget_files+0x3a8/0x420 [ 415.128175][ T8625] ? __fget_files+0x2a/0x420 [ 415.128207][ T8625] __x64_sys_getsockopt+0x1aa/0x250 [ 415.128242][ T8625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.128266][ T8625] do_syscall_64+0x174/0x580 [ 415.128295][ T8625] ? clear_bhb_loop+0x40/0x90 [ 415.128322][ T8625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.128348][ T8625] RIP: 0033:0x7f786078e019 [ 415.128377][ T8625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.128396][ T8625] RSP: 002b:00007f785e9e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 415.128420][ T8625] RAX: ffffffffffffffda RBX: 00007f7860a15fa0 RCX: 00007f786078e019 [ 415.128435][ T8625] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000003 [ 415.128449][ T8625] RBP: 00007f785e9e6090 R08: 00002000000001c0 R09: 0000000000000000 [ 415.128463][ T8625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.128476][ T8625] R13: 00007f7860a16038 R14: 00007f7860a15fa0 R15: 00007ffe146c3cf8 [ 415.128511][ T8625] [ 415.739827][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 415.787499][ T8378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.804406][ T5788] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 415.804467][ T5788] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 415.862266][ T5788] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -71 [ 415.873338][ T8378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.944184][ T5788] usb 5-1: USB disconnect, device number 10 [ 417.229021][ T8633] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 417.229065][ T8633] overlayfs: missing 'lowerdir' [ 417.435409][ T8378] team0: Port device team_slave_0 added [ 417.481249][ T8378] team0: Port device team_slave_1 added [ 417.673804][ T6709] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 417.698672][ T8378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.698692][ T8378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.698719][ T8378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.702203][ T8378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.702220][ T8378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.702249][ T8378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.829095][ T6709] usb 1-1: device descriptor read/64, error -71 [ 418.210315][ T8378] hsr_slave_0: entered promiscuous mode [ 418.218708][ T8378] hsr_slave_1: entered promiscuous mode [ 418.219632][ T8378] debugfs: 'hsr0' already exists in 'hsr' [ 418.219656][ T8378] Cannot create hsr debugfs directory [ 418.256628][ T6709] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 418.383792][ T6709] usb 1-1: device descriptor read/64, error -71 [ 418.495383][ T6709] usb usb1-port1: attempt power cycle [ 419.153839][ T6709] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 419.365387][ T6709] usb 1-1: device not accepting address 15, error -71 [ 419.975560][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 420.111228][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 420.143824][ T5788] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 421.429741][ T5788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.429779][ T5788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.429822][ T5788] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 421.429848][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.628831][ T5788] usb 5-1: config 0 descriptor?? [ 421.737174][ T8695] FAULT_INJECTION: forcing a failure. [ 421.737174][ T8695] name failslab, interval 1, probability 0, space 0, times 0 [ 421.737238][ T8695] CPU: 0 UID: 0 PID: 8695 Comm: syz.1.725 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 421.737263][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 421.737277][ T8695] Call Trace: [ 421.737286][ T8695] [ 421.737296][ T8695] dump_stack_lvl+0xe8/0x150 [ 421.737336][ T8695] should_fail_ex+0x467/0x600 [ 421.737385][ T8695] should_failslab+0xa8/0x100 [ 421.737415][ T8695] __kmalloc_cache_node_noprof+0xa9/0x6a0 [ 421.737442][ T8695] ? __get_vm_area_node+0x136/0x300 [ 421.737559][ T8695] ? __get_vm_area_node+0x136/0x300 [ 421.737601][ T8695] __get_vm_area_node+0x136/0x300 [ 421.737641][ T8695] __vmalloc_node_range_noprof+0x358/0x1730 [ 421.737666][ T8695] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 421.737715][ T8695] ? finish_task_switch+0x412/0xc60 [ 421.737781][ T8695] ? lockdep_hardirqs_on+0x7a/0x110 [ 421.737810][ T8695] ? irqentry_exit+0x218/0x8f0 [ 421.737848][ T8695] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 421.737873][ T8695] ? cap_capable+0x10d/0x460 [ 421.737937][ T8695] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 421.737959][ T8695] __vmalloc_noprof+0xd2/0x120 [ 421.737981][ T8695] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 421.738009][ T8695] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 421.738032][ T8695] ? bpf_prog_alloc+0x2a/0x1a0 [ 421.738058][ T8695] bpf_prog_alloc+0x3c/0x1a0 [ 421.738085][ T8695] bpf_prog_load+0x7f8/0x1c00 [ 421.738145][ T8695] ? __pfx_bpf_prog_load+0x10/0x10 [ 421.738197][ T8695] __sys_bpf+0xd0d/0xd90 [ 421.738230][ T8695] ? __pfx___sys_bpf+0x10/0x10 [ 421.738256][ T8695] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.738322][ T8695] ? ksys_write+0x248/0x270 [ 421.738354][ T8695] ? rcu_is_watching+0x15/0xb0 [ 421.738397][ T8695] __x64_sys_bpf+0xba/0xd0 [ 421.738453][ T8695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.738477][ T8695] do_syscall_64+0x174/0x580 [ 421.738508][ T8695] ? clear_bhb_loop+0x40/0x90 [ 421.738535][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.738557][ T8695] RIP: 0033:0x7f457e33e019 [ 421.738578][ T8695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.738597][ T8695] RSP: 002b:00007f457c554028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.738623][ T8695] RAX: ffffffffffffffda RBX: 00007f457e5c6180 RCX: 00007f457e33e019 [ 421.738639][ T8695] RDX: 0000000000000080 RSI: 0000200000000640 RDI: 0000000000000005 [ 421.738654][ T8695] RBP: 00007f457c554090 R08: 0000000000000000 R09: 0000000000000000 [ 421.738668][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.738681][ T8695] R13: 00007f457e5c6218 R14: 00007f457e5c6180 R15: 00007ffc65acff48 [ 421.738715][ T8695] [ 421.738981][ T8695] syz.1.725: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 421.743314][ T8695] CPU: 0 UID: 0 PID: 8695 Comm: syz.1.725 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 421.743349][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 421.743371][ T8695] Call Trace: [ 421.743381][ T8695] [ 421.743390][ T8695] dump_stack_lvl+0xe8/0x150 [ 421.743431][ T8695] warn_alloc+0x24c/0x270 [ 421.743514][ T8695] ? __pfx_warn_alloc+0x10/0x10 [ 421.743549][ T8695] ? __get_vm_area_node+0x2af/0x300 [ 421.743600][ T8695] __vmalloc_node_range_noprof+0x37d/0x1730 [ 421.743623][ T8695] ? finish_task_switch+0x412/0xc60 [ 421.743657][ T8695] ? lockdep_hardirqs_on+0x7a/0x110 [ 421.743686][ T8695] ? irqentry_exit+0x218/0x8f0 [ 421.743723][ T8695] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 421.743751][ T8695] ? cap_capable+0x10d/0x460 [ 421.743783][ T8695] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 421.743805][ T8695] __vmalloc_noprof+0xd2/0x120 [ 421.743828][ T8695] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 421.743855][ T8695] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 421.743876][ T8695] ? bpf_prog_alloc+0x2a/0x1a0 [ 421.743903][ T8695] bpf_prog_alloc+0x3c/0x1a0 [ 421.743929][ T8695] bpf_prog_load+0x7f8/0x1c00 [ 421.743967][ T8695] ? __pfx_bpf_prog_load+0x10/0x10 [ 421.744020][ T8695] __sys_bpf+0xd0d/0xd90 [ 421.744053][ T8695] ? __pfx___sys_bpf+0x10/0x10 [ 421.744080][ T8695] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.744136][ T8695] ? ksys_write+0x248/0x270 [ 421.744167][ T8695] ? rcu_is_watching+0x15/0xb0 [ 421.744201][ T8695] __x64_sys_bpf+0xba/0xd0 [ 421.744235][ T8695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.744259][ T8695] do_syscall_64+0x174/0x580 [ 421.744290][ T8695] ? clear_bhb_loop+0x40/0x90 [ 421.744317][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.744339][ T8695] RIP: 0033:0x7f457e33e019 [ 421.744359][ T8695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.744394][ T8695] RSP: 002b:00007f457c554028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.744416][ T8695] RAX: ffffffffffffffda RBX: 00007f457e5c6180 RCX: 00007f457e33e019 [ 421.744432][ T8695] RDX: 0000000000000080 RSI: 0000200000000640 RDI: 0000000000000005 [ 421.744454][ T8695] RBP: 00007f457c554090 R08: 0000000000000000 R09: 0000000000000000 [ 421.744468][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.744482][ T8695] R13: 00007f457e5c6218 R14: 00007f457e5c6180 R15: 00007ffc65acff48 [ 421.744516][ T8695] [ 421.744590][ T8695] Mem-Info: [ 421.744651][ T8695] active_anon:221 inactive_anon:10957 isolated_anon:0 [ 421.744651][ T8695] active_file:25505 inactive_file:40503 isolated_file:0 [ 421.744651][ T8695] unevictable:768 dirty:182 writeback:0 [ 421.744651][ T8695] slab_reclaimable:11820 slab_unreclaimable:101641 [ 421.744651][ T8695] mapped:34342 shmem:4145 pagetables:1675 [ 421.744651][ T8695] sec_pagetables:0 bounce:0 [ 421.744651][ T8695] kernel_misc_reclaimable:0 [ 421.744651][ T8695] free:1301883 free_pcp:3248 free_cma:0 [ 421.744747][ T8695] Node 0 active_anon:884kB inactive_anon:43828kB active_file:101812kB inactive_file:162012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137368kB dirty:728kB writeback:0kB shmem:15044kB kernel_stack:13760kB pagetables:6552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 421.744827][ T8695] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 421.744904][ T8695] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 421.745020][ T8695] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 421.745242][ T8695] Node 0 DMA32 free:1252368kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:884kB inactive_anon:43828kB active_file:101812kB inactive_file:162012kB unevictable:1536kB writepending:728kB zspages:76kB present:3129332kB managed:2560544kB mlocked:0kB bounce:0kB free_pcp:12980kB local_pcp:8292kB free_cma:0kB [ 421.745367][ T8695] lowmem_reserve[]: 0 0 1 1 1 [ 421.745586][ T8695] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 421.745696][ T8695] lowmem_reserve[]: 0 0 0 0 0 [ 421.745857][ T8695] Node 1 Normal free:3939804kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 421.746006][ T8695] lowmem_reserve[]: 0 0 0 0 0 [ 421.746227][ T8695] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 421.746810][ T8695] Node 0 DMA32: 1*4kB (M) 292*8kB (UME) 598*16kB (UME) 552*32kB (UME) 402*64kB (UME) 186*128kB (UME) 121*256kB (ME) 47*512kB (UME) 18*1024kB (ME) 13*2048kB (UM) 262*4096kB (UM) = 1252356kB [ 421.747646][ T8695] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 421.748099][ T8695] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 9*16kB (UM) 9*32kB (UM) 6*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939804kB [ 421.748941][ T8695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 421.748985][ T8695] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 421.749027][ T8695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 421.749069][ T8695] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 421.749111][ T8695] 70178 total pagecache pages [ 421.749144][ T8695] 29 pages in swap cache [ 421.749176][ T8695] Free swap = 124608kB [ 421.749209][ T8695] Total swap = 124996kB [ 421.749242][ T8695] 2097051 pages RAM [ 421.749274][ T8695] 0 pages HighMem/MovableOnly [ 421.749306][ T8695] 424837 pages reserved [ 421.749338][ T8695] 0 pages cma reserved [ 423.205679][ T5788] hid_parser_main: 4 callbacks suppressed [ 423.205773][ T5788] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 423.205809][ T5788] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 423.207938][ T5788] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 423.207968][ T5788] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 423.207991][ T5788] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 423.208016][ T5788] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 423.208049][ T5788] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 423.325973][ T5788] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 423.345776][ T5788] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 423.345839][ T5788] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 423.427597][ T5788] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -71 [ 423.446145][ T5788] usb 5-1: USB disconnect, device number 11 [ 423.526061][ T8707] fido_id[8707]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 426.618702][ T8735] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.150775][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 427.333890][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 427.488614][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.488653][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.488694][ T31] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 427.488719][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.515026][ T31] usb 5-1: config 0 descriptor?? [ 428.761254][ T31] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 428.761300][ T31] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 428.761327][ T31] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 428.761353][ T31] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 428.761379][ T31] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 428.761405][ T31] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 428.761431][ T31] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 429.148620][ T31] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 429.361791][ T31] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 429.361855][ T31] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 429.382226][ T5722] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 429.408740][ T31] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71 [ 429.442393][ T31] usb 5-1: USB disconnect, device number 12 [ 429.543974][ T5722] usb 2-1: Using ep0 maxpacket: 16 [ 429.581511][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 429.581552][ T5722] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.581599][ T5722] usb 2-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 429.581625][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.653775][ T5722] usb 2-1: config 0 descriptor?? [ 430.412314][ T5722] holtek_mouse 0003:04D9:A0C2.0008: unknown main item tag 0x4 [ 430.412556][ T5722] holtek_mouse 0003:04D9:A0C2.0008: reserved main item tag 0xd [ 430.412590][ T5722] holtek_mouse 0003:04D9:A0C2.0008: unknown global tag 0xe [ 430.412607][ T5722] holtek_mouse 0003:04D9:A0C2.0008: item 0 2 1 14 parsing failed [ 430.438157][ T8807] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20004 [ 430.444399][ T8807] loop5: detected capacity change from 0 to 7 [ 430.454947][ T8807] Dev loop5: unable to read RDB block 7 [ 430.454990][ T8807] loop5: unable to read partition table [ 430.455206][ T8807] loop5: partition table beyond EOD, truncated [ 430.455228][ T8807] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 430.503152][ T5722] holtek_mouse 0003:04D9:A0C2.0008: hid parse failed: -22 [ 430.503245][ T5722] holtek_mouse 0003:04D9:A0C2.0008: probe with driver holtek_mouse failed with error -22 [ 430.824011][ T5722] usb 2-1: USB disconnect, device number 9 [ 432.600911][ T8838] input input30: cannot allocate more than FF_MAX_EFFECTS effects [ 433.304260][ T8378] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 433.489981][ T8848] FAULT_INJECTION: forcing a failure. [ 433.489981][ T8848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.490019][ T8848] CPU: 0 UID: 0 PID: 8848 Comm: syz.4.767 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 433.490045][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 433.490057][ T8848] Call Trace: [ 433.490065][ T8848] [ 433.490074][ T8848] dump_stack_lvl+0xe8/0x150 [ 433.490114][ T8848] should_fail_ex+0x467/0x600 [ 433.490155][ T8848] _copy_from_user+0x2d/0xb0 [ 433.490184][ T8848] mem_rw+0x3a1/0x600 [ 433.490216][ T8848] vfs_writev+0x4c4/0x990 [ 433.490239][ T8848] ? __pfx_mem_write+0x10/0x10 [ 433.490265][ T8848] ? __pfx_vfs_writev+0x10/0x10 [ 433.490304][ T8848] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 433.490338][ T8848] ? mutex_lock_nested+0x152/0x1d0 [ 433.490358][ T8848] ? fdget_pos+0x252/0x320 [ 433.490392][ T8848] do_writev+0x15a/0x2e0 [ 433.490416][ T8848] ? __pfx_do_writev+0x10/0x10 [ 433.490446][ T8848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.490469][ T8848] do_syscall_64+0x174/0x580 [ 433.490494][ T8848] ? trace_irq_disable+0x3b/0x140 [ 433.490516][ T8848] ? clear_bhb_loop+0x40/0x90 [ 433.490541][ T8848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.490561][ T8848] RIP: 0033:0x7f31a0c8e019 [ 433.490582][ T8848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.490601][ T8848] RSP: 002b:00007f319eee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 433.490624][ T8848] RAX: ffffffffffffffda RBX: 00007f31a0f15fa0 RCX: 00007f31a0c8e019 [ 433.490640][ T8848] RDX: 0000000000000002 RSI: 0000200000000900 RDI: 0000000000000003 [ 433.490654][ T8848] RBP: 00007f319eee6090 R08: 0000000000000000 R09: 0000000000000000 [ 433.490667][ T8848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.490680][ T8848] R13: 00007f31a0f16038 R14: 00007f31a0f15fa0 R15: 00007ffe6e2bd648 [ 433.490717][ T8848] [ 433.507221][ T8378] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.540569][ T8378] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 434.039800][ T8378] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.049267][ T8378] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 434.135911][ T8378] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 434.149846][ T8378] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 434.255343][ T8378] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.683808][ T8890] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 436.284162][ T8378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.331263][ T8378] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.364411][ T1528] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.365492][ T1528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.385649][ T1528] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.385780][ T1528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.762876][ T8915] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.062392][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.062473][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.365011][ T8910] syz.0.779 (8910) used greatest stack depth: 17824 bytes left [ 446.047157][ T8378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.623732][ T5791] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 447.805550][ T5791] usb 4-1: Using ep0 maxpacket: 8 [ 447.845390][ T5791] usb 4-1: unable to get BOS descriptor or descriptor too short [ 447.849455][ T5791] usb 4-1: config 1 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.849495][ T5791] usb 4-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 447.849524][ T5791] usb 4-1: config 1 interface 0 has no altsetting 0 [ 447.871230][ T5791] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.40 [ 447.871263][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 447.871283][ T5791] usb 4-1: SerialNumber: syz [ 448.839490][ T9014] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20004 [ 448.845630][ T9014] loop5: detected capacity change from 0 to 7 [ 448.852435][ T9014] Dev loop5: unable to read RDB block 7 [ 448.852481][ T9014] loop5: unable to read partition table [ 448.852684][ T9014] loop5: partition table beyond EOD, truncated [ 448.852702][ T9014] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 449.581618][ T8378] veth0_vlan: entered promiscuous mode [ 450.006632][ T8378] veth1_vlan: entered promiscuous mode [ 450.335527][ T5722] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 450.468825][ T5791] usbhid 4-1:1.0: can't add hid device: -71 [ 450.486349][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.486382][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.486420][ T5722] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 450.486444][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.491346][ T5791] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 450.568275][ T5722] usb 5-1: config 0 descriptor?? [ 450.570115][ T8378] veth0_macvtap: entered promiscuous mode [ 450.614949][ T8378] veth1_macvtap: entered promiscuous mode [ 450.643156][ T5791] usb 4-1: USB disconnect, device number 8 [ 451.308715][ T8378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.404076][ T5722] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 451.404116][ T5722] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 451.404143][ T5722] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 451.404169][ T5722] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 451.404195][ T5722] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 451.404220][ T5722] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 451.404246][ T5722] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 452.535628][ T5722] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 452.681220][ T5722] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 452.681284][ T5722] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 452.875848][ T5722] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -71 [ 452.947474][ T9057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.808'. [ 453.007552][ T5722] usb 5-1: USB disconnect, device number 13 [ 453.067095][ T8378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.148451][ T9057] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 453.156056][ T9055] fido_id[9055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 453.412391][ T9062] FAULT_INJECTION: forcing a failure. [ 453.412391][ T9062] name failslab, interval 1, probability 0, space 0, times 0 [ 453.412426][ T9062] CPU: 0 UID: 0 PID: 9062 Comm: syz.0.810 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 453.412447][ T9062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.412457][ T9062] Call Trace: [ 453.412464][ T9062] [ 453.412471][ T9062] dump_stack_lvl+0xe8/0x150 [ 453.412505][ T9062] should_fail_ex+0x467/0x600 [ 453.412539][ T9062] should_failslab+0xa8/0x100 [ 453.412563][ T9062] __kmalloc_noprof+0xfe/0x780 [ 453.412580][ T9062] ? rcu_is_watching+0x15/0xb0 [ 453.412603][ T9062] ? tomoyo_realpath_from_path+0xef/0x640 [ 453.412626][ T9062] ? tomoyo_realpath_from_path+0xef/0x640 [ 453.412657][ T9062] tomoyo_realpath_from_path+0xef/0x640 [ 453.412692][ T9062] ? tomoyo_path_number_perm+0x219/0x5f0 [ 453.412712][ T9062] tomoyo_path_number_perm+0x246/0x5f0 [ 453.412733][ T9062] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 453.412752][ T9062] ? __lock_acquire+0x683/0x2ce0 [ 453.412785][ T9062] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 453.412808][ T9062] ? hook_file_ioctl+0x1f3/0x600 [ 453.412833][ T9062] ? lockdep_hardirqs_on+0x7a/0x110 [ 453.412871][ T9062] ? __fget_files+0x2a/0x420 [ 453.412893][ T9062] ? __fget_files+0x2a/0x420 [ 453.412909][ T9062] ? __fget_files+0x3a8/0x420 [ 453.412926][ T9062] ? __fget_files+0x2a/0x420 [ 453.412948][ T9062] security_file_ioctl+0xc3/0x2a0 [ 453.412972][ T9062] __se_sys_ioctl+0x47/0x170 [ 453.412996][ T9062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.413017][ T9062] do_syscall_64+0x174/0x580 [ 453.413038][ T9062] ? trace_irq_disable+0x3b/0x140 [ 453.413056][ T9062] ? clear_bhb_loop+0x40/0x90 [ 453.413076][ T9062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.413099][ T9062] RIP: 0033:0x7f786078e019 [ 453.413117][ T9062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.413132][ T9062] RSP: 002b:00007f785e9e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.413153][ T9062] RAX: ffffffffffffffda RBX: 00007f7860a15fa0 RCX: 00007f786078e019 [ 453.413176][ T9062] RDX: 0000000000000000 RSI: 00000000000007b2 RDI: 0000000000000003 [ 453.413188][ T9062] RBP: 00007f785e9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 453.413199][ T9062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.413209][ T9062] R13: 00007f7860a16038 R14: 00007f7860a15fa0 R15: 00007ffe146c3cf8 [ 453.413240][ T9062] [ 453.423772][ T9062] ERROR: Out of memory at tomoyo_realpath_from_path. [ 453.447140][ T9063] FAULT_INJECTION: forcing a failure. [ 453.447140][ T9063] name failslab, interval 1, probability 0, space 0, times 0 [ 453.447182][ T9063] CPU: 0 UID: 0 PID: 9063 Comm: syz.1.809 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 453.447204][ T9063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.447216][ T9063] Call Trace: [ 453.447223][ T9063] [ 453.447231][ T9063] dump_stack_lvl+0xe8/0x150 [ 453.447266][ T9063] should_fail_ex+0x467/0x600 [ 453.447300][ T9063] should_failslab+0xa8/0x100 [ 453.447325][ T9063] __kmalloc_noprof+0xfe/0x780 [ 453.447347][ T9063] ? io_uring_alloc_async_data+0x191/0x2e0 [ 453.447389][ T9063] ? io_uring_alloc_async_data+0x191/0x2e0 [ 453.447416][ T9063] io_uring_alloc_async_data+0x191/0x2e0 [ 453.447439][ T9063] io_connect_prep+0x1b3/0x300 [ 453.447461][ T9063] io_submit_sqes+0xbde/0x2310 [ 453.447592][ T9063] __se_sys_io_uring_enter+0x364/0x1bb0 [ 453.447617][ T9063] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 453.447657][ T9063] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 453.447684][ T9063] ? fput+0xa0/0xd0 [ 453.447704][ T9063] ? ksys_write+0x248/0x270 [ 453.447730][ T9063] ? __pfx_ksys_write+0x10/0x10 [ 453.447759][ T9063] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 453.447784][ T9063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.447806][ T9063] do_syscall_64+0x174/0x580 [ 453.447830][ T9063] ? trace_irq_disable+0x3b/0x140 [ 453.447849][ T9063] ? clear_bhb_loop+0x40/0x90 [ 453.447874][ T9063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.447892][ T9063] RIP: 0033:0x7f457e33e019 [ 453.447911][ T9063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.447928][ T9063] RSP: 002b:00007f457c596028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 453.447948][ T9063] RAX: ffffffffffffffda RBX: 00007f457e5c5fa0 RCX: 00007f457e33e019 [ 453.447962][ T9063] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 453.447973][ T9063] RBP: 00007f457c596090 R08: 0000000000000000 R09: 0000000000000000 [ 453.447985][ T9063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.447997][ T9063] R13: 00007f457e5c6038 R14: 00007f457e5c5fa0 R15: 00007ffc65acff48 [ 453.448028][ T9063] [ 453.951207][ T9071] pimreg: tun_chr_ioctl cmd 2147767506 [ 454.664587][ T1528] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.930763][ T1528] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.931533][ T1528] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.931726][ T1528] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.361314][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.361337][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.461409][ T9091] FAULT_INJECTION: forcing a failure. [ 455.461409][ T9091] name failslab, interval 1, probability 0, space 0, times 0 [ 455.461446][ T9091] CPU: 1 UID: 0 PID: 9091 Comm: syz.3.819 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 455.461470][ T9091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.461483][ T9091] Call Trace: [ 455.461491][ T9091] [ 455.461501][ T9091] dump_stack_lvl+0xe8/0x150 [ 455.461542][ T9091] should_fail_ex+0x467/0x600 [ 455.461581][ T9091] should_failslab+0xa8/0x100 [ 455.461609][ T9091] kmem_cache_alloc_node_noprof+0xae/0x670 [ 455.461635][ T9091] ? __alloc_skb+0x1d7/0x7a0 [ 455.461664][ T9091] ? __alloc_skb+0x1d7/0x7a0 [ 455.461693][ T9091] __alloc_skb+0x1d7/0x7a0 [ 455.461720][ T9091] netlink_sendmsg+0x5d4/0xb40 [ 455.461759][ T9091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.461788][ T9091] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 455.461821][ T9091] ? __kernel_text_address+0xd/0x30 [ 455.461843][ T9091] ? unwind_get_return_address+0x4d/0x90 [ 455.461870][ T9091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.461896][ T9091] sock_sendmsg_nosec+0x13a/0x180 [ 455.461931][ T9091] ____sys_sendmsg+0x565/0x870 [ 455.461957][ T9091] ? __might_fault+0xaf/0x130 [ 455.461987][ T9091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.462024][ T9091] ? import_iovec+0x73/0xa0 [ 455.462054][ T9091] ___sys_sendmsg+0x2a5/0x360 [ 455.462083][ T9091] ? __lock_acquire+0x683/0x2ce0 [ 455.462111][ T9091] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.462176][ T9091] ? __fget_files+0x2a/0x420 [ 455.462199][ T9091] ? __fget_files+0x3a8/0x420 [ 455.462242][ T9091] __x64_sys_sendmsg+0x1b7/0x290 [ 455.462274][ T9091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.462322][ T9091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.462346][ T9091] do_syscall_64+0x174/0x580 [ 455.462374][ T9091] ? trace_irq_disable+0x3b/0x140 [ 455.462396][ T9091] ? clear_bhb_loop+0x40/0x90 [ 455.462431][ T9091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.462453][ T9091] RIP: 0033:0x7fbbd567e019 [ 455.462474][ T9091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.462492][ T9091] RSP: 002b:00007fbbd38d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.462516][ T9091] RAX: ffffffffffffffda RBX: 00007fbbd5905fa0 RCX: 00007fbbd567e019 [ 455.462532][ T9091] RDX: 0000000000008080 RSI: 0000200000000280 RDI: 0000000000000003 [ 455.462546][ T9091] RBP: 00007fbbd38d6090 R08: 0000000000000000 R09: 0000000000000000 [ 455.462560][ T9091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.462573][ T9091] R13: 00007fbbd5906038 R14: 00007fbbd5905fa0 R15: 00007fffd559e668 [ 455.462608][ T9091] [ 455.918044][ T9098] FAULT_INJECTION: forcing a failure. [ 455.918044][ T9098] name failslab, interval 1, probability 0, space 0, times 0 [ 455.918084][ T9098] CPU: 0 UID: 0 PID: 9098 Comm: syz.3.821 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 455.918110][ T9098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.918123][ T9098] Call Trace: [ 455.918132][ T9098] [ 455.918142][ T9098] dump_stack_lvl+0xe8/0x150 [ 455.918182][ T9098] should_fail_ex+0x467/0x600 [ 455.918222][ T9098] should_failslab+0xa8/0x100 [ 455.918250][ T9098] kmem_cache_alloc_node_noprof+0xae/0x670 [ 455.918276][ T9098] ? __alloc_skb+0x1d7/0x7a0 [ 455.918310][ T9098] ? __alloc_skb+0x1d7/0x7a0 [ 455.918341][ T9098] __alloc_skb+0x1d7/0x7a0 [ 455.918369][ T9098] netlink_sendmsg+0x5d4/0xb40 [ 455.918409][ T9098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.918439][ T9098] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 455.918473][ T9098] ? __kernel_text_address+0xd/0x30 [ 455.918497][ T9098] ? unwind_get_return_address+0x4d/0x90 [ 455.918525][ T9098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.918552][ T9098] sock_sendmsg_nosec+0x13a/0x180 [ 455.918589][ T9098] ____sys_sendmsg+0x565/0x870 [ 455.918616][ T9098] ? __might_fault+0xaf/0x130 [ 455.918648][ T9098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.918685][ T9098] ? import_iovec+0x73/0xa0 [ 455.918716][ T9098] ___sys_sendmsg+0x2a5/0x360 [ 455.918746][ T9098] ? __lock_acquire+0x683/0x2ce0 [ 455.918775][ T9098] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.918840][ T9098] ? __fget_files+0x2a/0x420 [ 455.918863][ T9098] ? __fget_files+0x3a8/0x420 [ 455.918898][ T9098] __x64_sys_sendmsg+0x1b7/0x290 [ 455.918930][ T9098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.918977][ T9098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.919001][ T9098] do_syscall_64+0x174/0x580 [ 455.919029][ T9098] ? trace_irq_disable+0x3b/0x140 [ 455.919052][ T9098] ? clear_bhb_loop+0x40/0x90 [ 455.919079][ T9098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.919101][ T9098] RIP: 0033:0x7fbbd567e019 [ 455.919123][ T9098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.919142][ T9098] RSP: 002b:00007fbbd38d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.919166][ T9098] RAX: ffffffffffffffda RBX: 00007fbbd5905fa0 RCX: 00007fbbd567e019 [ 455.919182][ T9098] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 455.919196][ T9098] RBP: 00007fbbd38d6090 R08: 0000000000000000 R09: 0000000000000000 [ 455.919210][ T9098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.919223][ T9098] R13: 00007fbbd5906038 R14: 00007fbbd5905fa0 R15: 00007fffd559e668 [ 455.919257][ T9098] [ 456.309731][ T1495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.309756][ T1495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.898543][ T9107] FAULT_INJECTION: forcing a failure. [ 456.898543][ T9107] name failslab, interval 1, probability 0, space 0, times 0 [ 456.898582][ T9107] CPU: 0 UID: 0 PID: 9107 Comm: syz.0.823 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 456.898607][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.898621][ T9107] Call Trace: [ 456.898630][ T9107] [ 456.898639][ T9107] dump_stack_lvl+0xe8/0x150 [ 456.898693][ T9107] should_fail_ex+0x467/0x600 [ 456.898734][ T9107] should_failslab+0xa8/0x100 [ 456.898763][ T9107] __kmalloc_noprof+0xfe/0x780 [ 456.898786][ T9107] ? rcu_is_watching+0x15/0xb0 [ 456.898814][ T9107] ? tomoyo_realpath_from_path+0xef/0x640 [ 456.898842][ T9107] ? tomoyo_realpath_from_path+0xef/0x640 [ 456.898879][ T9107] tomoyo_realpath_from_path+0xef/0x640 [ 456.898918][ T9107] ? tomoyo_path_number_perm+0x219/0x5f0 [ 456.898944][ T9107] tomoyo_path_number_perm+0x246/0x5f0 [ 456.898973][ T9107] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 456.898996][ T9107] ? __lock_acquire+0x683/0x2ce0 [ 456.899037][ T9107] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 456.899065][ T9107] ? hook_file_ioctl+0x1f3/0x600 [ 456.899097][ T9107] ? lockdep_hardirqs_on+0x7a/0x110 [ 456.899146][ T9107] ? __fget_files+0x2a/0x420 [ 456.899172][ T9107] ? __fget_files+0x2a/0x420 [ 456.899194][ T9107] ? __fget_files+0x3a8/0x420 [ 456.899216][ T9107] ? __fget_files+0x2a/0x420 [ 456.899244][ T9107] security_file_ioctl+0xc3/0x2a0 [ 456.899272][ T9107] __se_sys_ioctl+0x47/0x170 [ 456.899302][ T9107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.899327][ T9107] do_syscall_64+0x174/0x580 [ 456.899353][ T9107] ? trace_irq_disable+0x3b/0x140 [ 456.899375][ T9107] ? clear_bhb_loop+0x40/0x90 [ 456.899403][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.899424][ T9107] RIP: 0033:0x7f786078e019 [ 456.899446][ T9107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.899464][ T9107] RSP: 002b:00007f785e9c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.899488][ T9107] RAX: ffffffffffffffda RBX: 00007f7860a16090 RCX: 00007f786078e019 [ 456.899505][ T9107] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 456.899518][ T9107] RBP: 00007f785e9c5090 R08: 0000000000000000 R09: 0000000000000000 [ 456.899533][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.899545][ T9107] R13: 00007f7860a16128 R14: 00007f7860a16090 R15: 00007ffe146c3cf8 [ 456.899579][ T9107] [ 456.901223][ T9107] ERROR: Out of memory at tomoyo_realpath_from_path. [ 457.703562][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 457.731892][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 457.743981][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 457.748118][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 457.748936][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 459.575691][ T9139] netlink: 32 bytes leftover after parsing attributes in process `syz.4.830'. [ 459.575723][ T9139] netlink: 'syz.4.830': attribute type 1 has an invalid length. [ 460.146258][ T59] Bluetooth: hci5: command tx timeout [ 461.032858][ T3130] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.185319][ T59] Bluetooth: hci5: command tx timeout [ 462.902829][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.847'. [ 463.032893][ T3130] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.181269][ T9205] FAULT_INJECTION: forcing a failure. [ 463.181269][ T9205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.181308][ T9205] CPU: 0 UID: 0 PID: 9205 Comm: syz.1.851 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 463.181333][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 463.181346][ T9205] Call Trace: [ 463.181359][ T9205] [ 463.181368][ T9205] dump_stack_lvl+0xe8/0x150 [ 463.181407][ T9205] should_fail_ex+0x467/0x600 [ 463.181447][ T9205] _copy_to_user+0x31/0xb0 [ 463.181476][ T9205] cp_new_stat+0x3c3/0x540 [ 463.181565][ T9205] ? __pfx_cp_new_stat+0x10/0x10 [ 463.181605][ T9205] ? anon_inode_getattr+0x6c/0xb0 [ 463.181681][ T9205] __x64_sys_newfstat+0x1b1/0x270 [ 463.181702][ T9205] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 463.181730][ T9205] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 463.181769][ T9205] ? __pfx_ksys_write+0x10/0x10 [ 463.181803][ T9205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.181822][ T9205] do_syscall_64+0x174/0x580 [ 463.181844][ T9205] ? trace_irq_disable+0x3b/0x140 [ 463.181863][ T9205] ? clear_bhb_loop+0x40/0x90 [ 463.181884][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.181901][ T9205] RIP: 0033:0x7f457e33e019 [ 463.181920][ T9205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.181936][ T9205] RSP: 002b:00007f457c596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 463.181957][ T9205] RAX: ffffffffffffffda RBX: 00007f457e5c5fa0 RCX: 00007f457e33e019 [ 463.181970][ T9205] RDX: 0000000000000000 RSI: 0000200000004f80 RDI: 0000000000000003 [ 463.181981][ T9205] RBP: 00007f457c596090 R08: 0000000000000000 R09: 0000000000000000 [ 463.181992][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.182002][ T9205] R13: 00007f457e5c6038 R14: 00007f457e5c5fa0 R15: 00007ffc65acff48 [ 463.182033][ T9205] [ 464.869473][ T59] Bluetooth: hci5: command tx timeout [ 465.348677][ T3130] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.003793][ T198] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 466.207574][ T198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.207614][ T198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.207656][ T198] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 466.207682][ T198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.223317][ T198] usb 1-1: config 0 descriptor?? [ 466.894207][ T59] Bluetooth: hci5: command tx timeout [ 467.287735][ T3130] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.674110][ T9239] FAULT_INJECTION: forcing a failure. [ 467.674110][ T9239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.674151][ T9239] CPU: 0 UID: 0 PID: 9239 Comm: syz.1.863 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 467.674177][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 467.674194][ T9239] Call Trace: [ 467.674203][ T9239] [ 467.674213][ T9239] dump_stack_lvl+0xe8/0x150 [ 467.674254][ T9239] should_fail_ex+0x467/0x600 [ 467.674296][ T9239] _copy_from_user+0x2d/0xb0 [ 467.674324][ T9239] kstrtouint_from_user+0xd6/0x180 [ 467.674363][ T9239] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 467.674419][ T9239] proc_fail_nth_write+0x8e/0x210 [ 467.674446][ T9239] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 467.674481][ T9239] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 467.674503][ T9239] vfs_write+0x29f/0xbb0 [ 467.674543][ T9239] ? __pfx_vfs_write+0x10/0x10 [ 467.674574][ T9239] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 467.674602][ T9239] ? lockdep_hardirqs_on+0x7a/0x110 [ 467.674627][ T9239] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 467.674651][ T9239] ? mutex_lock_nested+0x152/0x1d0 [ 467.674669][ T9239] ? fdget_pos+0x252/0x320 [ 467.674701][ T9239] ksys_write+0x156/0x270 [ 467.674732][ T9239] ? __pfx_ksys_write+0x10/0x10 [ 467.674757][ T9239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.674787][ T9239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.674809][ T9239] do_syscall_64+0x174/0x580 [ 467.674833][ T9239] ? trace_irq_disable+0x3b/0x140 [ 467.674854][ T9239] ? clear_bhb_loop+0x40/0x90 [ 467.674882][ T9239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.674904][ T9239] RIP: 0033:0x7f457e2fe84e [ 467.674923][ T9239] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 467.674942][ T9239] RSP: 002b:00007f457c574fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 467.674966][ T9239] RAX: ffffffffffffffda RBX: 00007f457c5756c0 RCX: 00007f457e2fe84e [ 467.674981][ T9239] RDX: 0000000000000001 RSI: 00007f457c5750a0 RDI: 0000000000000004 [ 467.674994][ T9239] RBP: 00007f457c575090 R08: 0000000000000000 R09: 0000000000000000 [ 467.675008][ T9239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.675021][ T9239] R13: 00007f457e5c6128 R14: 00007f457e5c6090 R15: 00007ffc65acff48 [ 467.675057][ T9239] [ 467.681122][ T198] usbhid 1-1:0.0: can't add hid device: -71 [ 467.681342][ T198] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 467.950249][ T198] usb 1-1: USB disconnect, device number 17 [ 468.025099][ T59] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 468.563794][ T5722] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 468.711514][ T9113] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.711669][ T9113] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.712355][ T9113] bridge_slave_0: entered allmulticast mode [ 468.717001][ T9113] bridge_slave_0: entered promiscuous mode [ 468.736314][ T9113] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.736957][ T9113] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.737400][ T9113] bridge_slave_1: entered allmulticast mode [ 468.747548][ T9113] bridge_slave_1: entered promiscuous mode [ 468.884180][ T5589] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 471.404408][ T9277] 0x000000000010-0x000000000020 : "" [ 471.458890][ T5722] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.480332][ T5722] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 471.480431][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.480454][ T5722] usb 2-1: Product: syz [ 471.480469][ T5722] usb 2-1: Manufacturer: syz [ 471.480485][ T5722] usb 2-1: SerialNumber: syz [ 471.561235][ T5589] usb 5-1: device descriptor read/all, error -71 [ 471.742021][ T5722] usb 2-1: config 0 descriptor?? [ 471.840131][ T9113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.858430][ T5722] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 471.858492][ T5722] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 472.030430][ T9113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.063774][ T198] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 472.100901][ T9277] ftl_cs: FTL header corrupt! [ 472.260735][ T198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.260786][ T198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.260825][ T198] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 472.260848][ T198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.320011][ T198] usb 4-1: config 0 descriptor?? [ 472.507890][ T9113] team0: Port device team_slave_0 added [ 472.577315][ T9113] team0: Port device team_slave_1 added [ 472.808762][ T198] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 472.808800][ T198] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 472.808826][ T198] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 472.808852][ T198] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 472.808877][ T198] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 472.808903][ T198] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 472.808928][ T198] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 472.831971][ T198] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 473.945174][ T198] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 473.945240][ T198] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 473.952882][ T198] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71 [ 473.987002][ T198] usb 4-1: USB disconnect, device number 9 [ 474.300810][ T9289] fido_id[9289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 474.532920][ T9113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.532940][ T9113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.532967][ T9113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.573158][ T9113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.573176][ T9113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.573213][ T9113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.056200][ T5791] usb 2-1: USB disconnect, device number 10 [ 476.266361][ T3130] bridge_slave_1: left allmulticast mode [ 476.266402][ T3130] bridge_slave_1: left promiscuous mode [ 476.266690][ T3130] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.420667][ T3130] bridge_slave_0: left allmulticast mode [ 476.420707][ T3130] bridge_slave_0: left promiscuous mode [ 476.421386][ T3130] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.543792][ T6711] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 477.320017][ T6711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.320067][ T6711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.320110][ T6711] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 477.320135][ T6711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.387431][ T6711] usb 2-1: config 0 descriptor?? [ 477.835452][ T6711] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 477.835491][ T6711] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 477.835517][ T6711] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 477.835543][ T6711] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 477.835569][ T6711] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 477.835718][ T6711] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 477.835746][ T6711] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 477.938622][ T6711] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 478.135829][ T4981] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 478.176049][ T59] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 478.307721][ T4981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.307762][ T4981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.307804][ T4981] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 478.307829][ T4981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.319275][ T4981] usb 5-1: config 0 descriptor?? [ 478.786540][ T4981] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 478.786578][ T4981] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 478.786598][ T4981] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 478.829889][ T4981] pyra 0003:1E7D:2CF6.000C: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 479.345358][ T3130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.425123][ T3130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.471556][ T3130] bond0 (unregistering): Released all slaves [ 479.834109][ T9374] FAULT_INJECTION: forcing a failure. [ 479.834109][ T9374] name failslab, interval 1, probability 0, space 0, times 0 [ 479.834218][ T9374] CPU: 0 UID: 0 PID: 9374 Comm: syz.0.900 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 479.834254][ T9374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 479.834267][ T9374] Call Trace: [ 479.834274][ T9374] [ 479.834283][ T9374] dump_stack_lvl+0xe8/0x150 [ 479.834326][ T9374] should_fail_ex+0x467/0x600 [ 479.834365][ T9374] should_failslab+0xa8/0x100 [ 479.834394][ T9374] __kmalloc_noprof+0xfe/0x780 [ 479.834416][ T9374] ? io_cache_alloc_new+0x40/0x100 [ 479.834501][ T9374] ? io_cache_alloc_new+0x40/0x100 [ 479.834526][ T9374] ? __memcg_slab_post_alloc_hook+0x4d6/0xf60 [ 479.834583][ T9374] io_cache_alloc_new+0x40/0x100 [ 479.834613][ T9374] __io_prep_rw+0x281/0xe70 [ 479.834673][ T9374] ? __pfx___io_prep_rw+0x10/0x10 [ 479.834698][ T9374] ? percpu_ref_get_many+0x21/0x1e0 [ 479.834724][ T9374] ? percpu_ref_get_many+0x21/0x1e0 [ 479.834760][ T9374] io_prep_rwv+0x8d/0x430 [ 479.834786][ T9374] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 479.834826][ T9374] ? __pfx_io_prep_rwv+0x10/0x10 [ 479.834854][ T9374] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 479.834890][ T9374] ? io_task_refs_refill+0xba/0x180 [ 479.834920][ T9374] io_submit_sqes+0xbde/0x2310 [ 479.834984][ T9374] __se_sys_io_uring_enter+0x364/0x1bb0 [ 479.835011][ T9374] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 479.835054][ T9374] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 479.835082][ T9374] ? fput+0xa0/0xd0 [ 479.835104][ T9374] ? ksys_write+0x248/0x270 [ 479.835133][ T9374] ? __pfx_ksys_write+0x10/0x10 [ 479.835165][ T9374] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 479.835200][ T9374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.835224][ T9374] do_syscall_64+0x174/0x580 [ 479.835254][ T9374] ? clear_bhb_loop+0x40/0x90 [ 479.835280][ T9374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.835302][ T9374] RIP: 0033:0x7f786078e019 [ 479.835324][ T9374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.835341][ T9374] RSP: 002b:00007f785e9e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 479.835365][ T9374] RAX: ffffffffffffffda RBX: 00007f7860a15fa0 RCX: 00007f786078e019 [ 479.835380][ T9374] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000004 [ 479.835394][ T9374] RBP: 00007f785e9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 479.835406][ T9374] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 479.835417][ T9374] R13: 00007f7860a16038 R14: 00007f7860a15fa0 R15: 00007ffe146c3cf8 [ 479.835447][ T9374] [ 480.081476][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 480.089617][ T6711] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device [ 480.089686][ T6711] pyra 0003:1E7D:2CF6.000B: couldn't install mouse [ 480.132942][ T6711] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -71 [ 480.158887][ T4981] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 480.158949][ T4981] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 480.276463][ T4981] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -71 [ 480.378687][ T4981] usb 5-1: USB disconnect, device number 16 [ 480.509270][ T6711] usb 2-1: USB disconnect, device number 11 [ 482.203757][ T9113] hsr_slave_0: entered promiscuous mode [ 482.208857][ T9113] hsr_slave_1: entered promiscuous mode [ 482.210814][ T9113] debugfs: 'hsr0' already exists in 'hsr' [ 482.210843][ T9113] Cannot create hsr debugfs directory [ 482.323697][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 482.690539][ T37] audit: type=1326 audit(1785540306.755:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.4.910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a0c8e019 code=0x7ffc0000 [ 482.690712][ T37] audit: type=1326 audit(1785540306.755:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.4.910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a0c8e019 code=0x7ffc0000 [ 482.702896][ T37] audit: type=1326 audit(1785540306.765:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.4.910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a0c8e019 code=0x7ffc0000 [ 482.702961][ T37] audit: type=1326 audit(1785540306.765:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.4.910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a0c8e019 code=0x7ffc0000 [ 482.703012][ T37] audit: type=1326 audit(1785540306.765:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.4.910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f31a0c8e019 code=0x7ffc0000 [ 482.703063][ T37] audit: type=1326 audit(1785540306.765:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.4.910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a0c8e019 code=0x7ffc0000 [ 482.703112][ T37] audit: type=1326 audit(1785540306.765:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.4.910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a0c8e019 code=0x7ffc0000 [ 482.703161][ T37] audit: type=1326 audit(1785540306.765:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.4.910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a0c4e84e code=0x7ffc0000 [ 482.703210][ T37] audit: type=1326 audit(1785540306.765:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.4.910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a0c4e84e code=0x7ffc0000 [ 482.703259][ T37] audit: type=1326 audit(1785540306.765:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9399 comm="syz.4.910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a0c4e84e code=0x7ffc0000 [ 482.713666][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 482.717541][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 483.870239][ T9] usb 1-1: config 1 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.870279][ T9] usb 1-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.870308][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 484.036784][ T9] usb 1-1: string descriptor 0 read error: -71 [ 484.036954][ T9] usb 1-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.40 [ 484.036981][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 484.098431][ T9] usb 1-1: can't set config #1, error -71 [ 484.102936][ T9] usb 1-1: USB disconnect, device number 18 [ 485.329339][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 486.334979][ T5740] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 486.484232][ T5740] usb 4-1: Using ep0 maxpacket: 8 [ 486.489089][ T5740] usb 4-1: unable to get BOS descriptor or descriptor too short [ 486.551493][ T5740] usb 4-1: config 1 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.551532][ T5740] usb 4-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.551560][ T5740] usb 4-1: config 1 interface 0 has no altsetting 0 [ 486.648302][ T5740] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.40 [ 486.648338][ T5740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 486.648360][ T5740] usb 4-1: SerialNumber: syz [ 488.343849][ T3130] hsr_slave_0: left promiscuous mode [ 488.404147][ T3130] hsr_slave_1: left promiscuous mode [ 488.405448][ T3130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.405475][ T3130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.457146][ T5740] usbhid 4-1:1.0: can't add hid device: -71 [ 488.457284][ T5740] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 488.463109][ T5740] usb 4-1: USB disconnect, device number 10 [ 488.509785][ T3130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.509814][ T3130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.604478][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 488.707779][ T3130] veth1_macvtap: left promiscuous mode [ 488.707905][ T3130] veth0_macvtap: left promiscuous mode [ 488.710932][ T3130] veth1_vlan: left promiscuous mode [ 488.711069][ T3130] veth0_vlan: left promiscuous mode [ 490.604404][ T3130] team0 (unregistering): Port device team_slave_1 removed [ 490.655665][ T3130] team0 (unregistering): Port device team_slave_0 removed [ 490.808463][ T9518] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 490.808538][ T9518] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 490.808558][ T9518] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 490.808637][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 490.853823][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 490.853846][ T37] audit: type=1800 audit(1785540314.875:2290): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.933" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 491.181411][ T37] audit: type=1326 audit(1785540315.245:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9520 comm="syz.3.934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd567e019 code=0x7ffc0000 [ 491.181474][ T37] audit: type=1326 audit(1785540315.245:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9520 comm="syz.3.934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd567e019 code=0x7ffc0000 [ 491.181524][ T37] audit: type=1326 audit(1785540315.245:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9520 comm="syz.3.934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd567e019 code=0x7ffc0000 [ 491.181571][ T37] audit: type=1326 audit(1785540315.245:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9520 comm="syz.3.934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd567e019 code=0x7ffc0000 [ 491.292584][ T37] audit: type=1326 audit(1785540315.355:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9520 comm="syz.3.934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd567e019 code=0x7ffc0000 [ 491.292644][ T37] audit: type=1326 audit(1785540315.355:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9520 comm="syz.3.934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fbbd567e019 code=0x7ffc0000 [ 491.292684][ T37] audit: type=1326 audit(1785540315.355:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9520 comm="syz.3.934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd567e019 code=0x7ffc0000 [ 491.292725][ T37] audit: type=1326 audit(1785540315.355:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9520 comm="syz.3.934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd567e019 code=0x7ffc0000 [ 491.292767][ T37] audit: type=1326 audit(1785540315.355:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9520 comm="syz.3.934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbbd563e84e code=0x7ffc0000 [ 491.733766][ T9530] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 493.028921][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 493.416764][ T9566] FAULT_INJECTION: forcing a failure. [ 493.416764][ T9566] name failslab, interval 1, probability 0, space 0, times 0 [ 493.416803][ T9566] CPU: 1 UID: 0 PID: 9566 Comm: syz.0.945 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 493.416827][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 493.416841][ T9566] Call Trace: [ 493.416849][ T9566] [ 493.416858][ T9566] dump_stack_lvl+0xe8/0x150 [ 493.416897][ T9566] should_fail_ex+0x467/0x600 [ 493.416939][ T9566] should_failslab+0xa8/0x100 [ 493.416968][ T9566] __kmalloc_noprof+0xfe/0x780 [ 493.416993][ T9566] ? tomoyo_encode+0x2ad/0x570 [ 493.417021][ T9566] ? tomoyo_encode+0x2ad/0x570 [ 493.417055][ T9566] tomoyo_encode+0x2ad/0x570 [ 493.417088][ T9566] tomoyo_realpath_from_path+0x5fa/0x640 [ 493.417127][ T9566] ? tomoyo_path_number_perm+0x219/0x5f0 [ 493.417152][ T9566] tomoyo_path_number_perm+0x246/0x5f0 [ 493.417178][ T9566] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 493.417200][ T9566] ? __lock_acquire+0x683/0x2ce0 [ 493.417240][ T9566] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 493.417268][ T9566] ? hook_file_ioctl+0x1f3/0x600 [ 493.417301][ T9566] ? lockdep_hardirqs_on+0x7a/0x110 [ 493.417348][ T9566] ? __fget_files+0x2a/0x420 [ 493.417374][ T9566] ? __fget_files+0x2a/0x420 [ 493.417394][ T9566] ? __fget_files+0x3a8/0x420 [ 493.417420][ T9566] ? __fget_files+0x2a/0x420 [ 493.417447][ T9566] security_file_ioctl+0xc3/0x2a0 [ 493.417475][ T9566] __se_sys_ioctl+0x47/0x170 [ 493.417504][ T9566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.417528][ T9566] do_syscall_64+0x174/0x580 [ 493.417555][ T9566] ? trace_irq_disable+0x3b/0x140 [ 493.417586][ T9566] ? clear_bhb_loop+0x40/0x90 [ 493.417612][ T9566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.417635][ T9566] RIP: 0033:0x7f786078e019 [ 493.417656][ T9566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.417674][ T9566] RSP: 002b:00007f785e9e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.417698][ T9566] RAX: ffffffffffffffda RBX: 00007f7860a15fa0 RCX: 00007f786078e019 [ 493.417714][ T9566] RDX: 00002000000010c0 RSI: 0000000080047437 RDI: 0000000000000003 [ 493.417728][ T9566] RBP: 00007f785e9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 493.417740][ T9566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.417753][ T9566] R13: 00007f7860a16038 R14: 00007f7860a15fa0 R15: 00007ffe146c3cf8 [ 493.417787][ T9566] [ 493.419886][ T9566] ERROR: Out of memory at tomoyo_realpath_from_path. [ 493.898454][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 495.085667][ T5740] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 495.505229][ T5740] usb 1-1: Using ep0 maxpacket: 16 [ 495.548377][ T5740] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.555888][ T5740] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 495.555924][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.555945][ T5740] usb 1-1: Product: syz [ 495.555960][ T5740] usb 1-1: Manufacturer: syz [ 495.555975][ T5740] usb 1-1: SerialNumber: syz [ 495.566791][ T5740] usb 1-1: config 0 descriptor?? [ 495.885668][ T5740] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 496.012411][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 496.084743][ T5788] usb 1-1: USB disconnect, device number 19 [ 496.089426][ T1557] usb 1-1: Failed to submit usb control message: -32 [ 496.089470][ T1557] usb 1-1: unable to send the bmi data to the device: -32 [ 496.089490][ T1557] usb 1-1: unable to get target info from device [ 496.089506][ T1557] usb 1-1: could not get target info (-32) [ 496.089582][ T1557] usb 1-1: could not probe fw (-32) [ 496.687895][ T59] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 497.167955][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 497.411792][ T9618] FAULT_INJECTION: forcing a failure. [ 497.411792][ T9618] name failslab, interval 1, probability 0, space 0, times 0 [ 497.411831][ T9618] CPU: 0 UID: 0 PID: 9618 Comm: syz.1.959 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 497.411857][ T9618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 497.411870][ T9618] Call Trace: [ 497.411879][ T9618] [ 497.411888][ T9618] dump_stack_lvl+0xe8/0x150 [ 497.411932][ T9618] should_fail_ex+0x467/0x600 [ 497.411975][ T9618] should_failslab+0xa8/0x100 [ 497.412005][ T9618] __kmalloc_noprof+0xfe/0x780 [ 497.412031][ T9618] ? tomoyo_encode+0x2ad/0x570 [ 497.412060][ T9618] ? tomoyo_encode+0x2ad/0x570 [ 497.412097][ T9618] tomoyo_encode+0x2ad/0x570 [ 497.412133][ T9618] tomoyo_realpath_from_path+0x5fa/0x640 [ 497.412174][ T9618] ? tomoyo_path_number_perm+0x219/0x5f0 [ 497.412200][ T9618] tomoyo_path_number_perm+0x246/0x5f0 [ 497.412228][ T9618] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 497.412252][ T9618] ? __lock_acquire+0x683/0x2ce0 [ 497.412299][ T9618] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 497.412331][ T9618] ? hook_file_ioctl+0x1f3/0x600 [ 497.412363][ T9618] ? lockdep_hardirqs_on+0x7a/0x110 [ 497.412413][ T9618] ? __fget_files+0x2a/0x420 [ 497.412442][ T9618] ? __fget_files+0x2a/0x420 [ 497.412463][ T9618] ? __fget_files+0x3a8/0x420 [ 497.412485][ T9618] ? __fget_files+0x2a/0x420 [ 497.412521][ T9618] security_file_ioctl+0xc3/0x2a0 [ 497.412549][ T9618] __se_sys_ioctl+0x47/0x170 [ 497.412579][ T9618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.412604][ T9618] do_syscall_64+0x174/0x580 [ 497.412632][ T9618] ? trace_irq_disable+0x3b/0x140 [ 497.412656][ T9618] ? clear_bhb_loop+0x40/0x90 [ 497.412684][ T9618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.412706][ T9618] RIP: 0033:0x7f457e33e019 [ 497.412727][ T9618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.412746][ T9618] RSP: 002b:00007f457c596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.412771][ T9618] RAX: ffffffffffffffda RBX: 00007f457e5c5fa0 RCX: 00007f457e33e019 [ 497.412788][ T9618] RDX: 0000200000000340 RSI: 00000000000089e2 RDI: 0000000000000003 [ 497.412803][ T9618] RBP: 00007f457c596090 R08: 0000000000000000 R09: 0000000000000000 [ 497.412816][ T9618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.412829][ T9618] R13: 00007f457e5c6038 R14: 00007f457e5c5fa0 R15: 00007ffc65acff48 [ 497.412865][ T9618] [ 497.412977][ T9618] ERROR: Out of memory at tomoyo_realpath_from_path. [ 499.013690][ T5788] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 499.112935][ T59] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 499.163718][ T5788] usb 2-1: Using ep0 maxpacket: 8 [ 499.167757][ T5788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 499.171391][ T5788] usb 2-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.171427][ T5788] usb 2-1: config 1 interface 0 has no altsetting 0 [ 499.207163][ T5788] usb 2-1: New USB device found, idVendor=18d1, idProduct=3c30, bcdDevice= 0.40 [ 499.207197][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.207219][ T5788] usb 2-1: Product: syz [ 499.207234][ T5788] usb 2-1: Manufacturer: syz [ 499.207250][ T5788] usb 2-1: SerialNumber: syz [ 499.259542][ T5788] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 499.259571][ T5788] usb 2-1: no configuration chosen from 1 choice [ 499.448879][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 499.541265][ T5740] IPVS: starting estimator thread 0... [ 499.693160][ T9664] IPVS: using max 14 ests per chain, 33600 per kthread [ 499.871093][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 499.871129][ T9673] netlink: 'syz.0.975': attribute type 30 has an invalid length. [ 500.284102][ T3130] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.285728][ T1557] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.285772][ T1557] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.285810][ T1557] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.377046][ T9113] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 500.428458][ T9113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.431768][ T9113] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 500.478620][ T9113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.480307][ T9113] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 500.617084][ T9113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.715403][ T9113] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 500.758101][ T9113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.914129][ T5788] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 501.063789][ T5788] usb 1-1: Using ep0 maxpacket: 8 [ 501.067031][ T5788] usb 1-1: unable to get BOS descriptor or descriptor too short [ 501.083818][ T5788] usb 1-1: config 1 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.083859][ T5788] usb 1-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.083888][ T5788] usb 1-1: config 1 interface 0 has no altsetting 0 [ 501.166249][ T9113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.168206][ T5788] usb 1-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.40 [ 501.168238][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 501.168260][ T5788] usb 1-1: SerialNumber: syz [ 501.269219][ T9113] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.322937][ T9712] FAULT_INJECTION: forcing a failure. [ 501.322937][ T9712] name failslab, interval 1, probability 0, space 0, times 0 [ 501.322974][ T9712] CPU: 1 UID: 0 PID: 9712 Comm: syz.4.981 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 501.322999][ T9712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 501.323011][ T9712] Call Trace: [ 501.323020][ T9712] [ 501.323029][ T9712] dump_stack_lvl+0xe8/0x150 [ 501.323069][ T9712] should_fail_ex+0x467/0x600 [ 501.323106][ T9712] should_failslab+0xa8/0x100 [ 501.323125][ T9712] kmem_cache_alloc_node_noprof+0xae/0x670 [ 501.323139][ T9712] ? __alloc_skb+0x1d7/0x7a0 [ 501.323154][ T9712] ? __alloc_skb+0x1d7/0x7a0 [ 501.323183][ T9712] __alloc_skb+0x1d7/0x7a0 [ 501.323211][ T9712] netlink_sendmsg+0x5d4/0xb40 [ 501.323249][ T9712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.323277][ T9712] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 501.323299][ T9712] ? __kernel_text_address+0xd/0x30 [ 501.323312][ T9712] ? unwind_get_return_address+0x4d/0x90 [ 501.323329][ T9712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.323354][ T9712] sock_sendmsg_nosec+0x13a/0x180 [ 501.323392][ T9712] ____sys_sendmsg+0x565/0x870 [ 501.323418][ T9712] ? __might_fault+0xaf/0x130 [ 501.323446][ T9712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.323476][ T9712] ? import_iovec+0x73/0xa0 [ 501.323494][ T9712] ___sys_sendmsg+0x2a5/0x360 [ 501.323512][ T9712] ? __lock_acquire+0x683/0x2ce0 [ 501.323539][ T9712] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.323600][ T9712] ? __fget_files+0x2a/0x420 [ 501.323623][ T9712] ? __fget_files+0x3a8/0x420 [ 501.323654][ T9712] __x64_sys_sendmsg+0x1b7/0x290 [ 501.323682][ T9712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.323728][ T9712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.323752][ T9712] do_syscall_64+0x174/0x580 [ 501.323780][ T9712] ? clear_bhb_loop+0x40/0x90 [ 501.323805][ T9712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.323820][ T9712] RIP: 0033:0x7f31a0c8e019 [ 501.323834][ T9712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.323845][ T9712] RSP: 002b:00007f319eee6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.323862][ T9712] RAX: ffffffffffffffda RBX: 00007f31a0f15fa0 RCX: 00007f31a0c8e019 [ 501.323877][ T9712] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 501.323891][ T9712] RBP: 00007f319eee6090 R08: 0000000000000000 R09: 0000000000000000 [ 501.323905][ T9712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.323917][ T9712] R13: 00007f31a0f16038 R14: 00007f31a0f15fa0 R15: 00007ffe6e2bd648 [ 501.323950][ T9712] [ 501.356386][ T6814] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.357917][ T6814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.406281][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.406429][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.698432][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.698520][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.733409][ T5788] usbhid 1-1:1.0: can't add hid device: -71 [ 501.733542][ T5788] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 501.755985][ T5788] usb 1-1: USB disconnect, device number 20 [ 501.896246][ T6709] usb 2-1: USB disconnect, device number 12 [ 501.958344][ T9717] netlink: 'syz.4.982': attribute type 10 has an invalid length. [ 502.106522][ T37] kauditd_printk_skb: 175 callbacks suppressed [ 502.106544][ T37] audit: type=1800 audit(1785540326.165:2475): pid=9722 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.983" name="file0" dev="overlay" ino=1505 res=0 errno=0 [ 502.252076][ T9717] syz_tun: entered promiscuous mode [ 502.411764][ T9717] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 503.153795][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 503.303905][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 503.306628][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 503.308298][ T9] usb 5-1: config 1 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.308331][ T9] usb 5-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 503.308359][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 503.400030][ T9] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.40 [ 503.400066][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 503.400087][ T9] usb 5-1: SerialNumber: syz [ 504.353757][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 504.353895][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 504.403312][ T9] usb 5-1: USB disconnect, device number 17 [ 504.512426][ T9768] 0x000000000000-0x000000020000 : "" [ 504.562932][ T9113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.724066][ T9768] ftl_cs: FTL header not found. [ 505.374752][ T9113] veth0_vlan: entered promiscuous mode [ 505.438435][ T9113] veth1_vlan: entered promiscuous mode [ 505.600210][ T9113] veth0_macvtap: entered promiscuous mode [ 505.623299][ T9113] veth1_macvtap: entered promiscuous mode [ 505.759800][ T9113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.837099][ T6711] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 505.857360][ T9113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.002392][ T6711] usb 5-1: config 0 has an invalid interface number: 70 but max is 0 [ 506.002424][ T6711] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 506.002455][ T6711] usb 5-1: config 0 has no interface number 0 [ 506.002505][ T6711] usb 5-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 506.002531][ T6711] usb 5-1: config 0 interface 70 altsetting 5 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 506.002562][ T6711] usb 5-1: config 0 interface 70 has no altsetting 0 [ 506.067206][ T6711] usb 5-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 506.067228][ T6711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.067240][ T6711] usb 5-1: Product: syz [ 506.067249][ T6711] usb 5-1: Manufacturer: syz [ 506.067258][ T6711] usb 5-1: SerialNumber: syz [ 506.095572][ T6711] usb 5-1: config 0 descriptor?? [ 506.113798][ T5589] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 506.120826][ T9785] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 506.308138][ T5589] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.322174][ T5589] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 506.322489][ T5589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.322510][ T5589] usb 2-1: Product: syz [ 506.322525][ T5589] usb 2-1: Manufacturer: syz [ 506.322538][ T5589] usb 2-1: SerialNumber: syz [ 506.450340][ T5589] usb 2-1: config 0 descriptor?? [ 506.530523][ T5589] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 506.530649][ T5589] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 506.617838][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.636211][ T6711] ti_usb_3410_5052 5-1:0.70: TI USB 3410 1 port adapter converter detected [ 506.636448][ T6711] ti_usb_3410_5052 5-1:0.70: missing endpoints [ 506.714908][ T9789] 0x000000000010-0x000000000020 : "" [ 506.775134][ T9789] ftl_cs: FTL header corrupt! [ 506.902653][ T6711] usb 5-1: USB disconnect, device number 18 [ 507.019313][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.020329][ T6814] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.020375][ T6814] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.343776][ T5589] usb 2-1: USB disconnect, device number 13 [ 507.477376][ T9798] 0x000000000000-0x000000020000 : "" [ 507.567535][ T9798] ftl_cs: FTL header not found. [ 507.698962][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.698995][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.860985][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.861011][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.963748][ T5589] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 508.114592][ T5589] usb 1-1: Using ep0 maxpacket: 8 [ 508.124468][ T5589] usb 1-1: unable to get BOS descriptor or descriptor too short [ 508.140756][ T5589] usb 1-1: config 1 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.140792][ T5589] usb 1-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 508.140833][ T5589] usb 1-1: config 1 interface 0 has no altsetting 0 [ 508.305375][ T5589] usb 1-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.40 [ 508.305411][ T5589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 508.305433][ T5589] usb 1-1: SerialNumber: syz [ 508.309781][ T9810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1003'. [ 508.335444][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 508.864163][ T5589] usbhid 1-1:1.0: can't add hid device: -71 [ 508.864297][ T5589] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 508.901199][ T5589] usb 1-1: USB disconnect, device number 21 [ 508.954495][ T9833] FAULT_INJECTION: forcing a failure. [ 508.954495][ T9833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.954531][ T9833] CPU: 0 UID: 0 PID: 9833 Comm: syz.4.1010 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 508.954553][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.954566][ T9833] Call Trace: [ 508.954574][ T9833] [ 508.954584][ T9833] dump_stack_lvl+0xe8/0x150 [ 508.954624][ T9833] should_fail_ex+0x467/0x600 [ 508.954662][ T9833] _copy_from_user+0x2d/0xb0 [ 508.954688][ T9833] ___sys_recvmsg+0x173/0x5a0 [ 508.954722][ T9833] ? __pfx____sys_recvmsg+0x10/0x10 [ 508.954754][ T9833] ? __fget_files+0x2a/0x420 [ 508.954794][ T9833] ? __fget_files+0x3a8/0x420 [ 508.954828][ T9833] do_recvmmsg+0x320/0x7f0 [ 508.954865][ T9833] ? __pfx_do_recvmmsg+0x10/0x10 [ 508.954894][ T9833] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 508.954932][ T9833] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 508.954967][ T9833] __x64_sys_recvmmsg+0x198/0x250 [ 508.954997][ T9833] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 508.955035][ T9833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.955058][ T9833] do_syscall_64+0x174/0x580 [ 508.955085][ T9833] ? trace_irq_disable+0x3b/0x140 [ 508.955108][ T9833] ? clear_bhb_loop+0x40/0x90 [ 508.955135][ T9833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.955157][ T9833] RIP: 0033:0x7f31a0c8e019 [ 508.955177][ T9833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.955195][ T9833] RSP: 002b:00007f319eec5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 508.955219][ T9833] RAX: ffffffffffffffda RBX: 00007f31a0f16090 RCX: 00007f31a0c8e019 [ 508.955236][ T9833] RDX: 0000000000000001 RSI: 00002000000029c0 RDI: 0000000000000003 [ 508.955249][ T9833] RBP: 00007f319eec5090 R08: 0000000000000000 R09: 0000000000000000 [ 508.955262][ T9833] R10: 0000000000000120 R11: 0000000000000246 R12: 0000000000000001 [ 508.955275][ T9833] R13: 00007f31a0f16128 R14: 00007f31a0f16090 R15: 00007ffe6e2bd648 [ 508.955312][ T9833] [ 509.333773][ T5589] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 509.507841][ T5589] usb 2-1: config 0 has an invalid interface number: 70 but max is 0 [ 509.507874][ T5589] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 509.507895][ T5589] usb 2-1: config 0 has no interface number 0 [ 509.507945][ T5589] usb 2-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 509.507970][ T5589] usb 2-1: config 0 interface 70 altsetting 5 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 509.507999][ T5589] usb 2-1: config 0 interface 70 has no altsetting 0 [ 509.511605][ T5589] usb 2-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 509.511637][ T5589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.511658][ T5589] usb 2-1: Product: syz [ 509.511680][ T5589] usb 2-1: Manufacturer: syz [ 509.512869][ T5589] usb 2-1: SerialNumber: syz [ 509.528047][ T5589] usb 2-1: config 0 descriptor?? [ 509.530914][ T9831] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 509.545879][ T9845] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1015'. [ 509.753723][ T198] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 509.820951][ T5589] ti_usb_3410_5052 2-1:0.70: TI USB 3410 1 port adapter converter detected [ 509.821193][ T5589] ti_usb_3410_5052 2-1:0.70: missing endpoints [ 509.837851][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'. [ 509.913829][ T5589] usb 2-1: USB disconnect, device number 14 [ 509.977383][ T198] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.982544][ T198] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 509.982578][ T198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.982599][ T198] usb 4-1: Product: syz [ 509.982614][ T198] usb 4-1: Manufacturer: syz [ 509.982630][ T198] usb 4-1: SerialNumber: syz [ 510.090418][ T198] usb 4-1: config 0 descriptor?? [ 510.106669][ T198] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 510.106738][ T198] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 510.216894][ T9854] FAULT_INJECTION: forcing a failure. [ 510.216894][ T9854] name failslab, interval 1, probability 0, space 0, times 0 [ 510.216942][ T9854] CPU: 1 UID: 0 PID: 9854 Comm: syz.0.1020 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 510.216966][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.216979][ T9854] Call Trace: [ 510.216987][ T9854] [ 510.217000][ T9854] dump_stack_lvl+0xe8/0x150 [ 510.217040][ T9854] should_fail_ex+0x467/0x600 [ 510.217079][ T9854] should_failslab+0xa8/0x100 [ 510.217108][ T9854] kmem_cache_alloc_noprof+0xa4/0x650 [ 510.217131][ T9854] ? do_getname+0x2e/0x250 [ 510.217162][ T9854] ? do_getname+0x2e/0x250 [ 510.217201][ T9854] do_getname+0x2e/0x250 [ 510.217230][ T9854] ? getname_uflags+0x11/0x30 [ 510.217253][ T9854] __x64_sys_execveat+0xad/0xf0 [ 510.217281][ T9854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.217304][ T9854] do_syscall_64+0x174/0x580 [ 510.217332][ T9854] ? trace_irq_disable+0x3b/0x140 [ 510.217353][ T9854] ? clear_bhb_loop+0x40/0x90 [ 510.217378][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.217398][ T9854] RIP: 0033:0x7f786078e019 [ 510.217417][ T9854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.217434][ T9854] RSP: 002b:00007f785e9e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 510.217456][ T9854] RAX: ffffffffffffffda RBX: 00007f7860a15fa0 RCX: 00007f786078e019 [ 510.217472][ T9854] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 510.217486][ T9854] RBP: 00007f785e9e6090 R08: 0000000000001000 R09: 0000000000000000 [ 510.217499][ T9854] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 510.217513][ T9854] R13: 00007f7860a16038 R14: 00007f7860a15fa0 R15: 00007ffe146c3cf8 [ 510.217544][ T9854] [ 510.284087][ T822] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 510.302814][ T9841] 0x000000000010-0x000000000020 : "" [ 510.322912][ T9841] ftl_cs: FTL header corrupt! [ 510.444065][ T822] usb 5-1: Using ep0 maxpacket: 32 [ 510.450324][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.450362][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.450403][ T822] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 510.450428][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.488586][ T822] usb 5-1: config 0 descriptor?? [ 510.540147][ T822] hub 5-1:0.0: USB hub found [ 510.896778][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1023'. [ 510.955952][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1023'. [ 511.319984][ T198] usb 4-1: USB disconnect, device number 11 [ 513.233786][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 513.419680][ T9] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 513.419712][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.419731][ T9] usb 2-1: Product: syz [ 513.419744][ T9] usb 2-1: Manufacturer: syz [ 513.419757][ T9] usb 2-1: SerialNumber: syz [ 513.487328][ T822] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 513.540910][ T822] usbhid 5-1:0.0: can't add hid device: -71 [ 513.541044][ T822] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 513.574345][ T9] usb-storage 2-1:1.0: USB Mass Storage device detected [ 513.617931][ T9] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 513.618780][ T9] scsi host1: usb-storage 2-1:1.0 [ 513.646800][ T822] usb 5-1: USB disconnect, device number 19 [ 513.927934][ T9] usb 2-1: USB disconnect, device number 15 [ 514.563792][ T5722] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 514.716485][ T5722] usb 4-1: config 0 has an invalid interface number: 70 but max is 0 [ 514.716519][ T5722] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 514.716540][ T5722] usb 4-1: config 0 has no interface number 0 [ 514.716590][ T5722] usb 4-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 514.716616][ T5722] usb 4-1: config 0 interface 70 altsetting 5 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 514.716644][ T5722] usb 4-1: config 0 interface 70 has no altsetting 0 [ 514.720743][ T5722] usb 4-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 514.720776][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.720798][ T5722] usb 4-1: Product: syz [ 514.720814][ T5722] usb 4-1: Manufacturer: syz [ 514.720830][ T5722] usb 4-1: SerialNumber: syz [ 514.756186][ T5722] usb 4-1: config 0 descriptor?? [ 514.761047][ T9898] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 514.944278][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'. [ 514.997884][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'. [ 515.153484][ T5722] ti_usb_3410_5052 4-1:0.70: TI USB 3410 1 port adapter converter detected [ 515.153921][ T5722] ti_usb_3410_5052 4-1:0.70: missing endpoints [ 515.196394][ T5722] usb 4-1: USB disconnect, device number 12 [ 517.005400][ T198] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 517.223712][ T198] usb 6-1: Using ep0 maxpacket: 8 [ 517.226660][ T198] usb 6-1: unable to get BOS descriptor or descriptor too short [ 517.228236][ T198] usb 6-1: config 1 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.228270][ T198] usb 6-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.228299][ T198] usb 6-1: config 1 interface 0 has no altsetting 0 [ 517.284155][ T198] usb 6-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.40 [ 517.284189][ T198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 517.284211][ T198] usb 6-1: SerialNumber: syz [ 518.163162][ T198] usbhid 6-1:1.0: can't add hid device: -71 [ 518.163290][ T198] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 518.249921][ T198] usb 6-1: USB disconnect, device number 2 [ 520.983754][ T5740] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 521.158107][ T5740] usb 6-1: Using ep0 maxpacket: 8 [ 521.162841][ T5740] usb 6-1: config 0 has an invalid descriptor of length 155, skipping remainder of the config [ 521.162904][ T5740] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.162951][ T5740] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 521.162976][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.190775][ T5740] usb 6-1: config 0 descriptor?? [ 521.239307][ T5740] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 521.309980][ T5740] kernel write not supported for file /input/event2 (pid: 5740 comm: kworker/1:5) [ 521.442823][ T4981] usb 6-1: USB disconnect, device number 3 [ 521.859005][ T9977] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 523.015210][ T4981] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 523.173698][ T4981] usb 2-1: Using ep0 maxpacket: 8 [ 523.179079][ T4981] usb 2-1: unable to get BOS descriptor or descriptor too short [ 523.201547][ T4981] usb 2-1: config 1 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.201588][ T4981] usb 2-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 523.201616][ T4981] usb 2-1: config 1 interface 0 has no altsetting 0 [ 523.268728][ T4981] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.40 [ 523.268763][ T4981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 523.268785][ T4981] usb 2-1: SerialNumber: syz [ 524.196618][ T4981] usbhid 2-1:1.0: can't add hid device: -71 [ 524.196755][ T4981] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 524.221242][ T4981] usb 2-1: USB disconnect, device number 16 [ 524.834321][ T5740] IPVS: starting estimator thread 0... [ 524.843827][ T5722] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 524.873924][T10028] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 524.923747][T10032] IPVS: using max 7 ests per chain, 16800 per kthread [ 524.979688][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 524.979716][T10036] netlink: 'syz.1.1075': attribute type 30 has an invalid length. [ 524.998447][ T5722] usb 1-1: Using ep0 maxpacket: 8 [ 525.013477][ T5722] usb 1-1: config 0 has an invalid descriptor of length 155, skipping remainder of the config [ 525.013515][ T5722] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 525.013541][ T5722] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 525.013798][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.058812][ T5722] usb 1-1: config 0 descriptor?? [ 525.128857][ T5722] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 525.314518][ T37] audit: type=1326 audit(1785540349.385:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.1.1075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457e33e019 code=0x7ffc0000 [ 525.314560][ T37] audit: type=1326 audit(1785540349.385:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.1.1075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457e33e019 code=0x7ffc0000 [ 525.335667][ T37] audit: type=1326 audit(1785540349.405:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.1.1075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457e33e019 code=0x7ffc0000 [ 525.335721][ T37] audit: type=1326 audit(1785540349.405:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.1.1075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457e33e019 code=0x7ffc0000 [ 525.412060][ T5740] usb 1-1: USB disconnect, device number 22 [ 525.438551][ T37] audit: type=1326 audit(1785540349.485:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.1.1075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457e33e019 code=0x7ffc0000 [ 525.438602][ T37] audit: type=1326 audit(1785540349.505:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.1.1075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f457e33dd82 code=0x7ffc0000 [ 525.575402][ T37] audit: type=1326 audit(1785540349.645:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.1.1075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f457e33de17 code=0x7ffc0000 [ 525.575913][ T37] audit: type=1326 audit(1785540349.645:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.1.1075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f457e2fad11 code=0x7ffc0000 [ 525.576052][ T37] audit: type=1326 audit(1785540349.645:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.1.1075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f457e33ee09 code=0x7ffc0000 [ 525.576991][ T37] audit: type=1326 audit(1785540349.645:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.1.1075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f457e2fa46c code=0x7ffc0000 [ 525.624899][ T56] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.635370][ T1016] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.637279][ T56] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.637320][ T56] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.569443][T10085] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 533.571530][T10085] CIFS: Attempting to mount //127.0.0.1/share [ 534.277240][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'. [ 534.277280][T10090] netlink: 'syz.0.1092': attribute type 30 has an invalid length. [ 534.965065][T10085] CIFS: VFS: \\127.0.0.1 Error -512 sending data on socket to server [ 534.989700][T10088] ------------[ cut here ]------------ [ 534.989718][T10088] server->in_flight == 0 [ 534.989728][T10088] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x125b/0x2b90, CPU#0: cifsd/10088 [ 534.989861][T10088] Modules linked in: [ 534.989881][T10088] CPU: 0 UID: 0 PID: 10088 Comm: cifsd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 534.989904][T10088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.989917][T10088] RIP: 0010:smb2_add_credits+0x125b/0x2b90 [ 534.989968][T10088] Code: de 83 e6 01 31 ff e8 94 20 c7 fe f6 c3 01 75 0a e8 da 1b c7 fe e9 22 13 00 00 0f 1f 44 00 00 e8 cb 1b c7 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d 39 86 9a 0c 01 0f 85 9e 03 00 00 e8 b0 1b c7 fe 49 [ 534.989987][T10088] RSP: 0018:ffffc9000660f458 EFLAGS: 00010246 [ 534.990006][T10088] RAX: ffffffff82feb18e RBX: 1ffff1100669ec89 RCX: ffff88802a3e0000 [ 534.990023][T10088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.990036][T10088] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 [ 534.990049][T10088] R10: 0000000000000000 R11: ffffffff82fedf00 R12: ffff8880334f6448 [ 534.990065][T10088] R13: ffffc9000660f520 R14: ffff8880334f6000 R15: 0000000000000000 [ 534.990080][T10088] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 534.990097][T10088] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.990111][T10088] CR2: 00007f785e9e5ff8 CR3: 000000005f5ea000 CR4: 00000000003526f0 [ 534.990132][T10088] Call Trace: [ 534.990140][T10088] [ 534.990154][T10088] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 534.990189][T10088] cifs_compound_last_callback+0x181/0x2d0 [ 534.990225][T10088] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 534.990258][T10088] ? rt_spin_unlock+0x157/0x200 [ 534.990286][T10088] ? rt_spin_unlock+0x163/0x200 [ 534.990306][T10088] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 534.990340][T10088] cifs_abort_connection+0x949/0xf60 [ 534.990429][T10088] ? __pfx_cifs_abort_connection+0x10/0x10 [ 534.990461][T10088] ? rt_spin_unlock+0x157/0x200 [ 534.990489][T10088] ? rt_spin_unlock+0x163/0x200 [ 534.990513][T10088] _cifs_reconnect+0xbba/0x1670 [ 534.990546][T10088] ? lockdep_hardirqs_on+0x7a/0x110 [ 534.990575][T10088] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 534.990604][T10088] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 534.990629][T10088] ? reacquire_held_locks+0x104/0x190 [ 534.990663][T10088] ? __pfx__cifs_reconnect+0x10/0x10 [ 534.990695][T10088] ? rt_spin_unlock+0x157/0x200 [ 534.990723][T10088] ? rt_spin_unlock+0x163/0x200 [ 534.990748][T10088] cifs_readv_from_socket+0x78b/0x8e0 [ 534.990803][T10088] cifs_demultiplex_thread+0x53d/0x3310 [ 534.990886][T10088] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 534.990928][T10088] ? do_raw_spin_lock+0x26c/0x2f0 [ 534.990964][T10088] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 534.991008][T10088] ? __lock_acquire+0x683/0x2ce0 [ 534.991087][T10088] ? __kthread_parkme+0x196/0x1f0 [ 534.991125][T10088] kthread+0x388/0x470 [ 534.991194][T10088] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 534.991223][T10088] ? __pfx_kthread+0x10/0x10 [ 534.991257][T10088] ret_from_fork+0x514/0xb70 [ 534.991341][T10088] ? __pfx_ret_from_fork+0x10/0x10 [ 534.991372][T10088] ? __switch_to+0xc89/0x1420 [ 534.991403][T10088] ? __pfx_kthread+0x10/0x10 [ 534.991450][T10088] ret_from_fork_asm+0x1a/0x30 [ 534.991489][T10088] [ 534.991501][T10088] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 534.991517][T10088] CPU: 0 UID: 0 PID: 10088 Comm: cifsd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 534.991540][T10088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.991551][T10088] Call Trace: [ 534.991560][T10088] [ 534.991568][T10088] vpanic+0x56c/0xa60 [ 534.991592][T10088] ? __pfx__printk+0x10/0x10 [ 534.991617][T10088] ? __pfx_vpanic+0x10/0x10 [ 534.991653][T10088] ? is_bpf_text_address+0x292/0x2b0 [ 534.991679][T10088] ? is_bpf_text_address+0x26/0x2b0 [ 534.991713][T10088] panic+0xc5/0xd0 [ 534.991734][T10088] ? __pfx_panic+0x10/0x10 [ 534.991765][T10088] ? ret_from_fork_asm+0x1a/0x30 [ 534.991794][T10088] __warn+0x315/0x4c0 [ 534.991815][T10088] ? smb2_add_credits+0x125b/0x2b90 [ 534.991844][T10088] ? smb2_add_credits+0x125b/0x2b90 [ 534.991878][T10088] __report_bug+0x276/0x570 [ 534.991967][T10088] ? smb2_add_credits+0x125b/0x2b90 [ 534.991996][T10088] ? __pfx___report_bug+0x10/0x10 [ 534.992026][T10088] ? __lock_acquire+0x683/0x2ce0 [ 534.992050][T10088] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 534.992078][T10088] ? rt_spin_lock+0x1e0/0x400 [ 534.992103][T10088] ? rt_spin_lock+0x1e0/0x400 [ 534.992124][T10088] ? smb2_add_credits+0x125b/0x2b90 [ 534.992150][T10088] report_bug+0x16a/0x220 [ 534.992178][T10088] ? smb2_add_credits+0x125b/0x2b90 [ 534.992202][T10088] ? smb2_add_credits+0x125d/0x2b90 [ 534.992226][T10088] handle_bug+0x9c/0x200 [ 534.992259][T10088] exc_invalid_op+0x1a/0x50 [ 534.992291][T10088] asm_exc_invalid_op+0x1a/0x20 [ 534.992314][T10088] RIP: 0010:smb2_add_credits+0x125b/0x2b90 [ 534.992340][T10088] Code: de 83 e6 01 31 ff e8 94 20 c7 fe f6 c3 01 75 0a e8 da 1b c7 fe e9 22 13 00 00 0f 1f 44 00 00 e8 cb 1b c7 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d 39 86 9a 0c 01 0f 85 9e 03 00 00 e8 b0 1b c7 fe 49 [ 534.992357][T10088] RSP: 0018:ffffc9000660f458 EFLAGS: 00010246 [ 534.992376][T10088] RAX: ffffffff82feb18e RBX: 1ffff1100669ec89 RCX: ffff88802a3e0000 [ 534.992393][T10088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.992406][T10088] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 [ 534.992420][T10088] R10: 0000000000000000 R11: ffffffff82fedf00 R12: ffff8880334f6448 [ 534.992435][T10088] R13: ffffc9000660f520 R14: ffff8880334f6000 R15: 0000000000000000 [ 534.992456][T10088] ? __pfx_smb2_get_credits_field+0x10/0x10 [ 534.992484][T10088] ? smb2_add_credits+0x3fe/0x2b90 [ 534.992516][T10088] ? smb2_add_credits+0x3fe/0x2b90 [ 534.992543][T10088] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 534.992574][T10088] cifs_compound_last_callback+0x181/0x2d0 [ 534.992608][T10088] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 534.992642][T10088] ? rt_spin_unlock+0x157/0x200 [ 534.992669][T10088] ? rt_spin_unlock+0x163/0x200 [ 534.992689][T10088] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 534.992722][T10088] cifs_abort_connection+0x949/0xf60 [ 534.992767][T10088] ? __pfx_cifs_abort_connection+0x10/0x10 [ 534.992797][T10088] ? rt_spin_unlock+0x157/0x200 [ 534.992824][T10088] ? rt_spin_unlock+0x163/0x200 [ 534.992856][T10088] _cifs_reconnect+0xbba/0x1670 [ 534.992890][T10088] ? lockdep_hardirqs_on+0x7a/0x110 [ 534.992917][T10088] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 534.992943][T10088] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 534.992965][T10088] ? reacquire_held_locks+0x104/0x190 [ 534.992995][T10088] ? __pfx__cifs_reconnect+0x10/0x10 [ 534.993023][T10088] ? rt_spin_unlock+0x157/0x200 [ 534.993048][T10088] ? rt_spin_unlock+0x163/0x200 [ 534.993071][T10088] cifs_readv_from_socket+0x78b/0x8e0 [ 534.993120][T10088] cifs_demultiplex_thread+0x53d/0x3310 [ 534.993187][T10088] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 534.993225][T10088] ? do_raw_spin_lock+0x26c/0x2f0 [ 534.993262][T10088] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 534.993302][T10088] ? __lock_acquire+0x683/0x2ce0 [ 534.993376][T10088] ? __kthread_parkme+0x196/0x1f0 [ 534.993412][T10088] kthread+0x388/0x470 [ 534.993445][T10088] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 534.993473][T10088] ? __pfx_kthread+0x10/0x10 [ 534.993506][T10088] ret_from_fork+0x514/0xb70 [ 534.993543][T10088] ? __pfx_ret_from_fork+0x10/0x10 [ 534.993574][T10088] ? __switch_to+0xc89/0x1420 [ 534.993605][T10088] ? __pfx_kthread+0x10/0x10 [ 534.993636][T10088] ret_from_fork_asm+0x1a/0x30 [ 534.993674][T10088] [ 534.993938][T10088] Kernel Offset: disabled