last executing test programs: 3m50.904512702s ago: executing program 4 (id=681): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4ea3, 0x8, @loopback, 0x3}, 0x1c) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e20, 0x698, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe5}, 0x1c) 3m50.870656243s ago: executing program 4 (id=682): r0 = memfd_create(&(0x7f0000000ac0)='\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xb5\xf5\xe8\x18h\xb4\xa71\xa8\x85s\xaf\x8a\xe5\xca\'\xfc>\x98\xaa\x8e\x02\xf6rY\xc4\xecB5\vX\'\xe7\xdd\x9d\x9e_\x00\xa1^Yx\x0eF\x98S\xdf\"\xa4\xc2T\xfa\x9f\xac|\xa0\xc5\x9d\xec\xa3\xe9c`j\xbf\x19\xc5\xc7c\xaer\x10\\BCo\x86\xe8X\x1c\x05E%\xb0\x85\xd0\x1e\xa7\xc9w\xa3D\xad<\xcc\x90`\xa8<1\xa1\x04\x0f\a\r\xe4H\x95\a\x80{\x1eJW\x8b\x93\x05\xa2\x85\x95\xdf\x87\xf6+\x0e\xff\xff\x00\x00\x00\x00\x00\x00\xff\xd6h\x8b\xc5\xb9\x10\xa4\x0e\xff\xfak\xf1{\xb7{', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) mmap(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x8, 0x100010, r3, 0x10157000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b11000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 3m50.767716406s ago: executing program 4 (id=684): clock_nanosleep(0x9, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='task\x00') lseek(r0, 0x4, 0x2) getdents64(r0, 0xffffffffffffffff, 0x43) 3m50.5837752s ago: executing program 4 (id=688): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setregid(0xee00, 0xee00) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000400)='4', 0x4b) splice(r0, &(0x7f0000000540)=0x100000000, r1, &(0x7f0000000580)=0x6, 0x10, 0x6) 3m50.455609453s ago: executing program 4 (id=689): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x9) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) 3m49.292380412s ago: executing program 4 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "da880c4f7e37eb8685"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) gettid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB="1500000008"], 0x50) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff010000000100", 0x16}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 3m33.519668971s ago: executing program 32 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "da880c4f7e37eb8685"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) gettid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB="1500000008"], 0x50) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff010000000100", 0x16}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 2m40.887719898s ago: executing program 3 (id=772): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000c40)="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", 0x2000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast2}, &(0x7f0000000440)=0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="419591c78b30640ee91c8fc7c6079c0213a13dce386a64f8a51e9b3932", 0xfe8e}], 0x1) 2m37.148121188s ago: executing program 3 (id=776): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000d00)={0x10001, 0x4, "aa449310"}) 2m35.785505541s ago: executing program 3 (id=777): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x80) write(r0, &(0x7f00000002c0)='33', 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x11, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=[0x0]}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a00)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xc, &(0x7f0000000b00)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m33.749524819s ago: executing program 3 (id=780): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c044) writev(0xffffffffffffffff, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x3, 0x12) 2m29.364370095s ago: executing program 3 (id=785): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4620040700000800000000000003003e00efffffff7c000004000000004000000000000000020000000000000000000000090038000100feff03000900030000000e000000020000000000000011000000000100000500000000000000e5"], 0x6ad) close(r1) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x1000) 2m27.752186044s ago: executing program 3 (id=788): unshare(0x42000000) 2m9.62245136s ago: executing program 33 (id=788): unshare(0x42000000) 1m7.153148954s ago: executing program 6 (id=802): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bcbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m2.179234623s ago: executing program 5 (id=713): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x7, 0x8, 0xd0eb}, 0x50) 56.235283537s ago: executing program 6 (id=802): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bcbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 50.049313805s ago: executing program 5 (id=713): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x7, 0x8, 0xd0eb}, 0x50) 44.290642504s ago: executing program 6 (id=802): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bcbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.522574766s ago: executing program 5 (id=713): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x7, 0x8, 0xd0eb}, 0x50) 36.689176646s ago: executing program 0 (id=870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x472, 0x8, 0x4, 0x7, 0x3, 0x1, 0x2, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffe0, 0xb}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 31.314388026s ago: executing program 0 (id=872): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x81d) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="5238f3c4", 0x4}, {0x0}], 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 31.252677558s ago: executing program 1 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f0000001c00)='./proc\x00', 0x180) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x95a3a9d32533afe5, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000a80)={@broadcast, @multicast, @void, {@llc_tr={0x11, {@llc={0x0, 0xe, "af"}}}}}, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000380)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000980)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./dev/console\x00', 0x1, 0x0) write$FUSE_INIT(r2, &(0x7f0000000a00)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x7, 0x10c4404, 0x2, 0x6, 0x7, 0x6, 0x0, 0x0, 0x4}}, 0xff18) 31.252434418s ago: executing program 6 (id=802): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bcbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.846221495s ago: executing program 0 (id=875): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) landlock_restrict_self(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000540)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 26.636177909s ago: executing program 2 (id=876): r0 = fsopen(&(0x7f0000001100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001140)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000001180)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001240)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000001280)='\x1d*.\x005\x98\xc7\x05\xf4\x99D\x97*\x10\xce\xdb_\xa2\xc0w\n\x9f\xbbpN\xab,\xd9\x90D\x8a\x04\xe9\x84#\x14\xf8\x95\xd5\x1a\xeaO|\x1c\xa2\\LB\x93W\x86y\x14\xa1\x01\xa2#jN{\x05\x1bdVL8\xbauD\xde\xc1P\x00'/86, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001300)='\x00', &(0x7f0000001340)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000001380)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000013c0)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001400)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG\x98\xaa\x8e\x02\xf6rY\xc4\xecB5\vX\'\xe7\xdd\x9d\x9e_\x00\xa1^Yx\x0eF\x98S\xdf\"\xa4\xc2T\xfa\x9f\xac|\xa0\xc5\x9d\xec\xa3\xe9c`j\xbf\x19\xc5\xc7c\xaer\x10\\BCo\x86\xe8X\x1c\x05E%\xb0\x85\xd0\x1e\xa7\xc9w\xa3D\xad<\xcc\x90`\xa8<1\xa1\x04\x0f\a\r\xe4H\x95\a\x80{\x1eJW\x8b\x93\x05\xa2\x85\x95\xdf\x87\xf6+\x0e\xff\xff\x00\x00\x00\x00\x00\x00\xff\xd6h\x8b\xc5\xb9\x10\xa4\x0e\xff\xfak\xf1{\xb7{', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) mmap(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x8, 0x100010, r4, 0x10157000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b11000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 24.628702917s ago: executing program 5 (id=713): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x7, 0x8, 0xd0eb}, 0x50) 24.547898239s ago: executing program 2 (id=878): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) landlock_restrict_self(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000540)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) close(0x4) 18.504130125s ago: executing program 0 (id=879): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f00000003c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f00000004c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x30, 0x66, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x66, 0x30, 0x68]}, &(0x7f00000005c0)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e6816296c0200000033445566778899aabbccddeeff001122334c5566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000001440)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x5, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x31, 0x66, 0x30, 0x5, 0x36]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x2f}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000740), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @desc2}, &(0x7f00000009c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000a80)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000ac0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000c40), &(0x7f0000000c80)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000d40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @desc3}, &(0x7f0000000e40)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000f40), &(0x7f0000000f80)={'fscrypt:', @auto=[0x39, 0x34, 0x31, 0x38, 0x30, 0x30, 0x66, 0x65, 0x30, 0x62, 0x37, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000fc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001040), &(0x7f0000001080)={'fscrypt:', @auto=[0x62, 0x61, 0x32, 0x30, 0x30, 0x31, 0x65, 0x30, 0x35, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x64]}, &(0x7f00000010c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001140), &(0x7f0000001180)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x8, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f00000011c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001240), &(0x7f0000001280)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f00000012c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$keyring(&(0x7f0000001340), &(0x7f0000001380)={'syz', 0x3}, 0x0, 0x0, r0) 18.476755175s ago: executing program 1 (id=880): recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) 18.442850896s ago: executing program 2 (id=881): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ef) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='comm', 0x4) pipe(0x0) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) 18.440863186s ago: executing program 6 (id=802): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bcbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.860477944s ago: executing program 5 (id=713): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x7, 0x8, 0xd0eb}, 0x50) 11.20171685s ago: executing program 2 (id=882): r0 = fanotify_init(0x20, 0x800) r1 = memfd_create(&(0x7f00000003c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x2, r2, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000001c0)=0x9, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000980)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r5, &(0x7f0000000d00)="cf", 0x1) sendfile(r4, r5, &(0x7f0000000d40), 0xff) 6.353286657s ago: executing program 0 (id=883): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x81, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000240)) 6.329081838s ago: executing program 1 (id=884): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000380)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000680)={r1, 0x4}, 0x8) 6.298834298s ago: executing program 6 (id=802): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bcbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.064080362s ago: executing program 1 (id=885): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000540)={0x3, &(0x7f0000000580)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f00000005c0), 0x4000190, 0x0) 3.963866324s ago: executing program 2 (id=886): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r1) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x2, 0x0, 0x411}}}, 0x7) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c044) writev(0xffffffffffffffff, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x3, 0x12) 3.562655824s ago: executing program 0 (id=887): mkdirat(0xffffffffffffff9c, &(0x7f0000001c00)='./proc\x00', 0x180) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x95a3a9d32533afe5, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000a80)={@broadcast, @multicast, @void, {@llc_tr={0x11, {@llc={0x0, 0xe, "af"}}}}}, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000380)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000980)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./dev/console\x00', 0x1, 0x0) write$FUSE_INIT(r2, &(0x7f0000000a00)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x7, 0x10c4404, 0x2, 0x6, 0x7, 0x6, 0x0, 0x0, 0x4}}, 0xff18) 1.141504502s ago: executing program 5 (id=713): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x7, 0x8, 0xd0eb}, 0x50) 971.459816ms ago: executing program 1 (id=888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x30003, 0x0, {[0xffffffffffffffca, 0x400006892, 0x10, 0x100000000000401, 0x1, 0x5, 0x9, 0x2]}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=889): socket$nl_route(0x10, 0x3, 0x0) shmat(0x0, &(0x7f0000182000/0x1000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 71.083784][ T4279] i2c i2c-0: delete_device: Can't find device in list [ 71.103398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.206524][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.213176][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.418927][ T4301] FAULT_INJECTION: forcing a failure. [ 71.418927][ T4301] name failslab, interval 1, probability 0, space 0, times 1 [ 71.441883][ T4301] CPU: 0 PID: 4301 Comm: syz.0.12 Not tainted syzkaller #0 [ 71.449148][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.459295][ T4301] Call Trace: [ 71.462605][ T4301] [ 71.465595][ T4301] dump_stack_lvl+0x188/0x250 [ 71.470329][ T4301] ? show_regs_print_info+0x20/0x20 [ 71.475571][ T4301] ? load_image+0x410/0x410 [ 71.480119][ T4301] ? __lock_acquire+0x7d40/0x7d40 [ 71.485187][ T4301] should_fail+0x383/0x4b0 [ 71.486766][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 71.489637][ T4301] should_failslab+0x5/0x20 [ 71.489663][ T4301] slab_pre_alloc_hook+0x51/0xc0 [ 71.506365][ T4301] __kmalloc+0x6b/0x340 [ 71.510563][ T4301] ? bpf_convert_filter+0x10e/0x51e0 [ 71.515896][ T4301] bpf_convert_filter+0x10e/0x51e0 [ 71.521041][ T4301] ? _raw_spin_unlock+0x40/0x40 [ 71.525952][ T4301] ? sk_filter_release_rcu+0x110/0x110 [ 71.531467][ T4301] ? kmemdup+0x3d/0x50 [ 71.535601][ T4301] ? memcpy+0x3c/0x60 [ 71.539614][ T4301] ? bpf_prog_realloc+0x142/0x1c0 [ 71.544668][ T4301] bpf_prepare_filter+0xe73/0x11b0 [ 71.549811][ T4301] ? seccomp_attach_filter+0xbb0/0xbb0 [ 71.555303][ T4301] ? bpf_prog_create+0x1f0/0x1f0 [ 71.560278][ T4301] ? kmemdup+0x3d/0x50 [ 71.564415][ T4301] ? memcpy+0x3c/0x60 [ 71.568431][ T4301] bpf_prog_create_from_user+0x2cc/0x420 [ 71.574104][ T4301] ? seccomp_attach_filter+0xbb0/0xbb0 [ 71.579616][ T4301] do_seccomp+0x808/0x16a0 [ 71.584074][ T4301] ? __lock_acquire+0x7d40/0x7d40 [ 71.589160][ T4301] ? prctl_set_seccomp+0x60/0x60 [ 71.594118][ T4301] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 71.594159][ T4301] ? lockdep_hardirqs_on+0x94/0x140 [ 71.594188][ T4301] do_syscall_64+0x4c/0xa0 [ 71.609797][ T4301] ? clear_bhb_loop+0x30/0x80 [ 71.614532][ T4301] ? clear_bhb_loop+0x30/0x80 [ 71.619271][ T4301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.625235][ T4301] RIP: 0033:0x7fad646972d9 [ 71.629686][ T4301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.649314][ T4301] RSP: 002b:00007fad628ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 71.649350][ T4301] RAX: ffffffffffffffda RBX: 00007fad6491efa0 RCX: 00007fad646972d9 [ 71.649370][ T4301] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 71.649385][ T4301] RBP: 00007fad6472e888 R08: 0000000000000000 R09: 0000000000000000 [ 71.649399][ T4301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.649411][ T4301] R13: 00007fad6491f038 R14: 00007fad6491efa0 R15: 00007ffc6db8bfb8 [ 71.649441][ T4301] [ 71.712570][ T4303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.788074][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 71.801695][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 71.812873][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 71.843350][ T4233] Bluetooth: hci4: command 0x0419 tx timeout [ 71.849605][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 71.862776][ T4199] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.932811][ T4236] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 72.102709][ T4199] usb 4-1: Using ep0 maxpacket: 8 [ 72.262903][ T4199] usb 4-1: unable to get BOS descriptor or descriptor too short [ 72.279336][ T4327] jffs2: notice: (4327) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 72.334760][ T4236] usb 3-1: unable to get BOS descriptor or descriptor too short [ 72.353034][ T4199] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.372882][ T4199] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 72.403690][ T4236] usb 3-1: not running at top speed; connect to a high speed hub [ 72.412260][ T4199] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.465944][ T26] audit: type=1800 audit(1791902268.245:2): pid=4332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.24" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 72.486311][ T4236] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 72.497411][ T4236] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 72.511171][ T4236] usb 3-1: config 14 has no interface number 0 [ 72.518147][ T4236] usb 3-1: config 14 has no interface number 1 [ 72.526463][ T4236] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 72.539057][ T4236] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 72.566441][ T4236] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.581037][ T4236] usb 3-1: config 14 interface 57 has no altsetting 0 [ 72.590414][ T4236] usb 3-1: config 14 interface 228 has no altsetting 0 [ 72.622917][ T4199] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 72.640663][ T4199] usb 4-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 72.658678][ T4199] usb 4-1: Product: syz [ 72.673380][ T4199] usb 4-1: Manufacturer: syz [ 72.678059][ T4199] usb 4-1: SerialNumber: syz [ 72.792905][ T4236] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 72.815251][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.829184][ T4339] ======================================================= [ 72.829184][ T4339] WARNING: The mand mount option has been deprecated and [ 72.829184][ T4339] and is ignored by this kernel. Remove the mand [ 72.829184][ T4339] option from the mount to silence this warning. [ 72.829184][ T4339] ======================================================= [ 72.839386][ T4236] usb 3-1: Product: syz [ 72.864469][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.928978][ T4236] usb 3-1: Manufacturer: syz [ 72.947359][ T4236] usb 3-1: SerialNumber: syz [ 72.970798][ T4343] syz.1.27 (4343) used obsolete PPPIOCDETACH ioctl [ 73.230583][ T4356] tipc: Started in network mode [ 73.245079][ T4356] tipc: Node identity 4, cluster identity 4711 [ 73.270344][ T4356] tipc: Node number set to 4 [ 73.299214][ T4284] socket: no more sockets [ 73.312275][ T4284] Failed to initialize the IGMP autojoin socket (err -23) [ 73.466758][ T4236] legousbtower 3-1:14.57: interrupt endpoints not found [ 73.674372][ T4236] legousbtower 3-1:14.228: interrupt endpoints not found [ 73.742813][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.764515][ T4199] cdc_ncm 4-1:1.0: skipping garbage [ 73.777798][ T4199] cdc_ncm 4-1:1.0: skipping garbage [ 73.783809][ T4199] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 73.790661][ T4199] cdc_ncm 4-1:1.0: bind() failure [ 73.803184][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.810992][ T4199] usb 4-1: USB disconnect, device number 2 [ 73.864869][ T4369] netlink: 'syz.1.36': attribute type 1 has an invalid length. [ 74.153037][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.172965][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 74.183157][ T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 74.193105][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.243014][ T4236] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.323373][ T13] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 74.333250][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.341272][ T13] usb 1-1: Product: syz [ 74.345702][ T13] usb 1-1: Manufacturer: syz [ 74.350335][ T13] usb 1-1: SerialNumber: syz [ 74.373125][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 74.382243][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.390615][ T7] usb 5-1: Product: syz [ 74.397032][ T13] keyspan 1-1:1.0: Keyspan 1 port adapter converter detected [ 74.407668][ T7] usb 5-1: Manufacturer: syz [ 74.412350][ T7] usb 5-1: SerialNumber: syz [ 74.417282][ T13] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 74.430140][ T13] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 74.438303][ T13] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 82 [ 74.446606][ T13] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 74.454335][ T13] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 74.463563][ T7] hub 5-1:1.0: bad descriptor, ignoring hub [ 74.469520][ T7] hub: probe of 5-1:1.0 failed with error -5 [ 74.477323][ T13] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 83 [ 74.486751][ T13] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 3 [ 74.503446][ T13] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 74.643263][ T4236] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 74.655642][ T4236] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 74.690423][ T7] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 74.734420][ T4199] usb 1-1: USB disconnect, device number 2 [ 74.751623][ T4199] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 74.762036][ T4199] keyspan 1-1:1.0: device disconnected [ 74.787709][ T4236] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 74.796905][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 74.805611][ T4236] usb 2-1: Product: syz [ 74.809821][ T4236] usb 2-1: Manufacturer: syz [ 74.854744][ T4236] iuu_phoenix 2-1:1.0: iuu_phoenix converter detected [ 74.864841][ T4236] usb 2-1: iuu_phoenix converter now attached to ttyUSB0 [ 75.066327][ T4371] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode: is not a unsigned long [ 75.077558][ T4199] usb 2-1: USB disconnect, device number 2 [ 75.092194][ T4199] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 75.107814][ T4199] iuu_phoenix 2-1:1.0: device disconnected [ 75.368441][ T4384] autofs4:pid:4384:autofs_fill_super: called with bogus options [ 75.402858][ T4363] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 75.468618][ T4363] usb 5-1: device reset changed ep0 maxpacket size! [ 75.477370][ T13] usb 5-1: USB disconnect, device number 2 [ 75.499933][ T13] usblp0: removed [ 75.678659][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.689993][ T4233] usb 3-1: USB disconnect, device number 2 [ 75.780388][ T4403] FAULT_INJECTION: forcing a failure. [ 75.780388][ T4403] name failslab, interval 1, probability 0, space 0, times 0 [ 75.819511][ T4403] CPU: 0 PID: 4403 Comm: syz.1.48 Not tainted syzkaller #0 [ 75.826794][ T4403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.837009][ T4403] Call Trace: [ 75.840334][ T4403] [ 75.843306][ T4403] dump_stack_lvl+0x188/0x250 [ 75.848041][ T4403] ? show_regs_print_info+0x20/0x20 [ 75.853290][ T4403] ? load_image+0x410/0x410 [ 75.857881][ T4403] ? __might_sleep+0xf0/0xf0 [ 75.862530][ T4403] ? __lock_acquire+0x7d40/0x7d40 [ 75.867656][ T4403] should_fail+0x383/0x4b0 [ 75.872130][ T4403] should_failslab+0x5/0x20 [ 75.876684][ T4403] slab_pre_alloc_hook+0x51/0xc0 [ 75.881671][ T4403] ? bpf_prepare_filter+0xc33/0x11b0 [ 75.887003][ T4403] __kmalloc_track_caller+0x69/0x330 [ 75.892397][ T4403] ? bpf_prepare_filter+0xc33/0x11b0 [ 75.897721][ T4403] ? bpf_prepare_filter+0xaf5/0x11b0 [ 75.903063][ T4403] kmemdup+0x22/0x50 [ 75.907004][ T4403] bpf_prepare_filter+0xc33/0x11b0 [ 75.912168][ T4403] ? seccomp_attach_filter+0xbb0/0xbb0 [ 75.917678][ T4403] ? bpf_prog_create+0x1f0/0x1f0 [ 75.922766][ T4403] ? kmemdup+0x3d/0x50 [ 75.926876][ T4403] ? memcpy+0x3c/0x60 [ 75.930903][ T4403] bpf_prog_create_from_user+0x2cc/0x420 [ 75.936572][ T4403] ? seccomp_attach_filter+0xbb0/0xbb0 [ 75.942070][ T4403] do_seccomp+0x808/0x16a0 [ 75.946532][ T4403] ? __lock_acquire+0x7d40/0x7d40 [ 75.951600][ T4403] ? prctl_set_seccomp+0x60/0x60 [ 75.956573][ T4403] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 75.962606][ T4403] ? lockdep_hardirqs_on+0x94/0x140 [ 75.967853][ T4403] do_syscall_64+0x4c/0xa0 [ 75.972315][ T4403] ? clear_bhb_loop+0x30/0x80 [ 75.977039][ T4403] ? clear_bhb_loop+0x30/0x80 [ 75.981759][ T4403] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.987690][ T4403] RIP: 0033:0x7f15c5c362d9 [ 75.992139][ T4403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.011780][ T4403] RSP: 002b:00007f15c3e8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 76.020232][ T4403] RAX: ffffffffffffffda RBX: 00007f15c5ebdfa0 RCX: 00007f15c5c362d9 [ 76.028239][ T4403] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 76.036246][ T4403] RBP: 00007f15c5ccd888 R08: 0000000000000000 R09: 0000000000000000 [ 76.044442][ T4403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.052444][ T4403] R13: 00007f15c5ebe038 R14: 00007f15c5ebdfa0 R15: 00007fff4d907988 [ 76.060468][ T4403] [ 76.063593][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.132723][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 76.140813][ T4405] FAULT_INJECTION: forcing a failure. [ 76.140813][ T4405] name failslab, interval 1, probability 0, space 0, times 0 [ 76.173120][ T4405] CPU: 0 PID: 4405 Comm: syz.2.49 Not tainted syzkaller #0 [ 76.180374][ T4405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.190459][ T4405] Call Trace: [ 76.193766][ T4405] [ 76.196729][ T4405] dump_stack_lvl+0x188/0x250 [ 76.201455][ T4405] ? show_regs_print_info+0x20/0x20 [ 76.206689][ T4405] ? load_image+0x410/0x410 [ 76.211232][ T4405] ? __might_sleep+0xf0/0xf0 [ 76.215868][ T4405] should_fail+0x383/0x4b0 [ 76.220334][ T4405] should_failslab+0x5/0x20 [ 76.224880][ T4405] slab_pre_alloc_hook+0x51/0xc0 [ 76.229881][ T4405] ? zswap_frontswap_store+0x403/0x1530 [ 76.235475][ T4405] kmem_cache_alloc+0x3d/0x280 [ 76.240376][ T4405] zswap_frontswap_store+0x403/0x1530 [ 76.245804][ T4405] ? page_swapcount+0x224/0x300 [ 76.250705][ T4405] ? zswap_frontswap_init+0x100/0x100 [ 76.256124][ T4405] ? __rwlock_init+0x140/0x140 [ 76.261026][ T4405] ? _raw_spin_unlock+0x24/0x40 [ 76.265914][ T4405] ? page_swapcount+0x224/0x300 [ 76.270827][ T4405] __frontswap_store+0x331/0x4a0 [ 76.275810][ T4405] swap_writepage+0x5f/0xa0 [ 76.280355][ T4405] shrink_page_list+0x43a8/0x6de0 [ 76.285459][ T4405] ? reclaim_clean_pages_from_list+0xaf0/0xaf0 [ 76.291660][ T4405] ? verify_lock_unused+0x140/0x140 [ 76.296965][ T4405] reclaim_pages+0x712/0x990 [ 76.301634][ T4405] ? isolate_lru_page+0xbd0/0xbd0 [ 76.306710][ T4405] ? do_raw_spin_unlock+0x11d/0x230 [ 76.311947][ T4405] madvise_cold_or_pageout_pte_range+0x1680/0x1ea0 [ 76.318542][ T4405] ? rcu_lock_release+0x20/0x20 [ 76.323425][ T4405] walk_pgd_range+0xb28/0x1370 [ 76.328226][ T4405] __walk_page_range+0x136/0x590 [ 76.333177][ T4405] ? vmacache_find+0x53c/0x590 [ 76.338137][ T4405] ? vmacache_update+0xa0/0x100 [ 76.343012][ T4405] ? find_vma+0x1df/0x230 [ 76.347367][ T4405] walk_page_range+0x3a3/0x550 [ 76.352148][ T4405] ? local_lock_release+0x97/0x170 [ 76.357278][ T4405] ? page_mapped_in_vma+0x520/0x520 [ 76.362503][ T4405] do_madvise+0x16a6/0x2aa0 [ 76.367031][ T4405] ? mark_lock+0x94/0x320 [ 76.371386][ T4405] ? __lock_acquire+0x13b3/0x7d40 [ 76.376442][ T4405] ? get_nr_vmemmap_pages_cb+0x40/0x40 [ 76.381940][ T4405] ? verify_lock_unused+0x140/0x140 [ 76.387178][ T4405] ? verify_lock_unused+0x140/0x140 [ 76.392422][ T4405] ? __context_tracking_exit+0x4c/0x80 [ 76.397904][ T4405] ? __lock_acquire+0x7d40/0x7d40 [ 76.402960][ T4405] ? lock_chain_count+0x20/0x20 [ 76.407849][ T4405] __x64_sys_madvise+0xa2/0xb0 [ 76.412637][ T4405] do_syscall_64+0x4c/0xa0 [ 76.417079][ T4405] ? clear_bhb_loop+0x30/0x80 [ 76.421779][ T4405] ? clear_bhb_loop+0x30/0x80 [ 76.426476][ T4405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.432500][ T4405] RIP: 0033:0x7fb166b9c2d9 [ 76.436936][ T4405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.456559][ T4405] RSP: 002b:00007fb164df4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 76.464992][ T4405] RAX: ffffffffffffffda RBX: 00007fb166e23fa0 RCX: 00007fb166b9c2d9 [ 76.472987][ T4405] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 76.480986][ T4405] RBP: 00007fb166c33888 R08: 0000000000000000 R09: 0000000000000000 [ 76.488986][ T4405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.496985][ T4405] R13: 00007fb166e24038 R14: 00007fb166e23fa0 R15: 00007ffc345782b8 [ 76.504986][ T4405] [ 76.508115][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.572989][ T13] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 76.586314][ T13] usb 5-1: can't read configurations, error -71 [ 76.674924][ T4411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.51'. [ 76.698366][ T4411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.51'. [ 76.720795][ T4411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 76.809948][ T26] audit: type=1800 audit(1791902272.585:3): pid=4399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.46" name="file2" dev="sda1" ino=2048 res=0 errno=0 [ 77.370298][ T4443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 77.426020][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.719984][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.272770][ T4477] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.357419][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 78.606814][ T4474] syz.2.68 (4474) used greatest stack depth: 20528 bytes left [ 78.689344][ T4490] smpboot: CPU 1 is now offline [ 78.702307][ T4489] device syzkaller0 entered promiscuous mode [ 78.870079][ T4491] x86: Booting SMP configuration: [ 78.917367][ T4491] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 78.929308][ T4496] FAULT_INJECTION: forcing a failure. [ 78.929308][ T4496] name failslab, interval 1, probability 0, space 0, times 0 [ 78.951379][ T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock [ 78.963526][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 79.006321][ T4496] CPU: 0 PID: 4496 Comm: syz.2.74 Not tainted syzkaller #0 [ 79.013581][ T4496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.023698][ T4496] Call Trace: [ 79.027019][ T4496] [ 79.029978][ T4496] dump_stack_lvl+0x188/0x250 [ 79.034701][ T4496] ? show_regs_print_info+0x20/0x20 [ 79.039937][ T4496] ? load_image+0x410/0x410 [ 79.044483][ T4496] ? __might_sleep+0xf0/0xf0 [ 79.049118][ T4496] ? __lock_acquire+0x7d40/0x7d40 [ 79.054195][ T4496] should_fail+0x383/0x4b0 [ 79.058670][ T4496] should_failslab+0x5/0x20 [ 79.063244][ T4496] slab_pre_alloc_hook+0x51/0xc0 [ 79.068225][ T4496] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 79.073985][ T4496] ? __get_vm_area_node+0x119/0x2d0 [ 79.079237][ T4496] __get_vm_area_node+0x119/0x2d0 [ 79.084315][ T4496] __vmalloc_node_range+0xef/0x8b0 [ 79.089472][ T4496] ? __do_replace+0xa8/0x9f0 [ 79.094109][ T4496] ? __do_replace+0xa8/0x9f0 [ 79.098738][ T4496] vzalloc+0x75/0x80 [ 79.102671][ T4496] ? __do_replace+0xa8/0x9f0 [ 79.107331][ T4496] __do_replace+0xa8/0x9f0 [ 79.111797][ T4496] ? translate_compat_table+0x20a0/0x20a0 [ 79.117555][ T4496] ? _copy_from_user+0x111/0x170 [ 79.122536][ T4496] do_ipt_set_ctl+0xa9b/0xd70 [ 79.127253][ T4496] ? nf_setsockopt+0x218/0x280 [ 79.132063][ T4496] ? ipt_unregister_table_exit+0x220/0x220 [ 79.137909][ T4496] ? __lock_acquire+0x7d40/0x7d40 [ 79.142976][ T4496] ? __mutex_lock_common+0x435/0x2400 [ 79.148483][ T4496] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 79.154176][ T4496] ? mutex_unlock+0x10/0x10 [ 79.158741][ T4496] ? __local_bh_enable_ip+0x136/0x1c0 [ 79.164155][ T4496] ? lockdep_hardirqs_on+0x94/0x140 [ 79.169398][ T4496] ? __local_bh_enable_ip+0x136/0x1c0 [ 79.174812][ T4496] nf_setsockopt+0x25f/0x280 [ 79.179548][ T4496] ip_setsockopt+0x29c3/0x31e0 [ 79.184370][ T4496] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 79.189817][ T4496] ? aa_sk_perm+0x7dc/0x910 [ 79.194373][ T4496] ? aa_af_perm+0x340/0x340 [ 79.198912][ T4496] ? __fget_files+0x402/0x470 [ 79.203631][ T4496] ? aa_sock_opt_perm+0x74/0x100 [ 79.208693][ T4496] ? udp_setsockopt+0x77/0xa0 [ 79.213407][ T4496] ? sock_common_recvmsg+0x1c0/0x1c0 [ 79.218735][ T4496] __sys_setsockopt+0x2bf/0x3d0 [ 79.223629][ T4496] __x64_sys_setsockopt+0xb1/0xc0 [ 79.228694][ T4496] do_syscall_64+0x4c/0xa0 [ 79.233144][ T4496] ? clear_bhb_loop+0x30/0x80 [ 79.237858][ T4496] ? clear_bhb_loop+0x30/0x80 [ 79.242577][ T4496] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.248518][ T4496] RIP: 0033:0x7fb166b9c2d9 [ 79.252975][ T4496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.272615][ T4496] RSP: 002b:00007fb164df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 79.281070][ T4496] RAX: ffffffffffffffda RBX: 00007fb166e23fa0 RCX: 00007fb166b9c2d9 [ 79.289073][ T4496] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 79.297075][ T4496] RBP: 00007fb166c33888 R08: 00000000000003d0 R09: 0000000000000000 [ 79.305092][ T4496] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 79.313094][ T4496] R13: 00007fb166e24038 R14: 00007fb166e23fa0 R15: 00007ffc345782b8 [ 79.321121][ T4496] [ 79.491984][ T4506] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.631443][ T4506] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.651610][ T4515] FAULT_INJECTION: forcing a failure. [ 79.651610][ T4515] name failslab, interval 1, probability 0, space 0, times 0 [ 79.682306][ T4515] CPU: 0 PID: 4515 Comm: syz.0.77 Not tainted syzkaller #0 [ 79.689530][ T4515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.699719][ T4515] Call Trace: [ 79.703020][ T4515] [ 79.706124][ T4515] dump_stack_lvl+0x188/0x250 [ 79.710814][ T4515] ? show_regs_print_info+0x20/0x20 [ 79.716023][ T4515] ? load_image+0x410/0x410 [ 79.720560][ T4515] ? __lock_acquire+0x7d40/0x7d40 [ 79.725594][ T4515] ? dummy_hub_status+0x265/0x380 [ 79.730802][ T4515] should_fail+0x383/0x4b0 [ 79.735247][ T4515] should_failslab+0x5/0x20 [ 79.739783][ T4515] slab_pre_alloc_hook+0x51/0xc0 [ 79.744761][ T4515] kmem_cache_alloc_trace+0x47/0x290 [ 79.750077][ T4515] ? kobject_uevent_env+0x275/0x890 [ 79.755296][ T4515] kobject_uevent_env+0x275/0x890 [ 79.760360][ T4515] ? dummy_udc_set_speed+0xd0/0xd0 [ 79.765507][ T4515] udc_bind_to_driver+0x4d5/0x5f0 [ 79.770623][ T4515] usb_gadget_probe_driver+0x1fb/0x380 [ 79.776136][ T4515] raw_ioctl+0x115e/0x3750 [ 79.780601][ T4515] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 79.786277][ T4515] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 79.791768][ T4515] ? make_qualifier+0x3b0/0x3b0 [ 79.796697][ T4515] ? bpf_lsm_file_ioctl+0x5/0x10 [ 79.801680][ T4515] ? security_file_ioctl+0x7c/0xa0 [ 79.806830][ T4515] ? make_qualifier+0x3b0/0x3b0 [ 79.811709][ T4515] __se_sys_ioctl+0xfa/0x170 [ 79.816316][ T4515] do_syscall_64+0x4c/0xa0 [ 79.820939][ T4515] ? clear_bhb_loop+0x30/0x80 [ 79.825651][ T4515] ? clear_bhb_loop+0x30/0x80 [ 79.830361][ T4515] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.836268][ T4515] RIP: 0033:0x7fad64696f6b [ 79.840718][ T4515] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 79.860368][ T4515] RSP: 002b:00007fad628ecf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.868814][ T4515] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fad64696f6b [ 79.876801][ T4515] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 79.884795][ T4515] RBP: 00007fad628edfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 79.892803][ T4515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.900802][ T4515] R13: 0000200000000040 R14: 0000000000000005 R15: 0000000000000000 [ 79.908809][ T4515] [ 79.974141][ T4506] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.064461][ T4506] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.075004][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.092686][ C0] raw-gadget.0 gadget: ignoring, device is not running [ 80.209398][ T4506] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.243211][ T7] usb 1-1: device descriptor read/64, error -32 [ 80.291928][ T4506] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.333000][ T4506] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.361146][ T4506] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.415911][ T4496] syz.2.74: vmalloc error: size 48, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 80.493932][ T4496] CPU: 0 PID: 4496 Comm: syz.2.74 Not tainted syzkaller #0 [ 80.501197][ T4496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.511299][ T4496] Call Trace: [ 80.514609][ T4496] [ 80.517573][ T4496] dump_stack_lvl+0x188/0x250 [ 80.522312][ T4496] ? rcu_lock_release+0x5/0x20 [ 80.527121][ T4496] ? show_regs_print_info+0x20/0x20 [ 80.532365][ T4496] ? load_image+0x410/0x410 [ 80.536921][ T4496] warn_alloc+0x245/0x320 [ 80.541298][ T4496] ? zone_watermark_ok_safe+0x250/0x250 [ 80.546890][ T4496] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 80.552925][ T4496] ? __get_vm_area_node+0x119/0x2d0 [ 80.558179][ T4496] __vmalloc_node_range+0x2b1/0x8b0 [ 80.563427][ T4496] ? __do_replace+0xa8/0x9f0 [ 80.568055][ T4496] vzalloc+0x75/0x80 [ 80.572027][ T4496] ? __do_replace+0xa8/0x9f0 [ 80.576656][ T4496] __do_replace+0xa8/0x9f0 [ 80.581119][ T4496] ? translate_compat_table+0x20a0/0x20a0 [ 80.586877][ T4496] ? _copy_from_user+0x111/0x170 [ 80.591877][ T4496] do_ipt_set_ctl+0xa9b/0xd70 [ 80.596595][ T4496] ? nf_setsockopt+0x218/0x280 [ 80.601396][ T4496] ? ipt_unregister_table_exit+0x220/0x220 [ 80.607234][ T4496] ? __lock_acquire+0x7d40/0x7d40 [ 80.612298][ T4496] ? __mutex_lock_common+0x435/0x2400 [ 80.617719][ T4496] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 80.623825][ T4496] ? mutex_unlock+0x10/0x10 [ 80.628522][ T4496] ? __local_bh_enable_ip+0x136/0x1c0 [ 80.633933][ T4496] ? lockdep_hardirqs_on+0x94/0x140 [ 80.639173][ T4496] ? __local_bh_enable_ip+0x136/0x1c0 [ 80.644587][ T4496] nf_setsockopt+0x25f/0x280 [ 80.649228][ T4496] ip_setsockopt+0x29c3/0x31e0 [ 80.654188][ T4496] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 80.659599][ T4496] ? aa_sk_perm+0x7dc/0x910 [ 80.664155][ T4496] ? aa_af_perm+0x340/0x340 [ 80.668699][ T4496] ? __fget_files+0x402/0x470 [ 80.673414][ T4496] ? aa_sock_opt_perm+0x74/0x100 [ 80.678396][ T4496] ? udp_setsockopt+0x77/0xa0 [ 80.683104][ T4496] ? sock_common_recvmsg+0x1c0/0x1c0 [ 80.688431][ T4496] __sys_setsockopt+0x2bf/0x3d0 [ 80.693319][ T4496] __x64_sys_setsockopt+0xb1/0xc0 [ 80.698397][ T4496] do_syscall_64+0x4c/0xa0 [ 80.702841][ T4496] ? clear_bhb_loop+0x30/0x80 [ 80.707551][ T4496] ? clear_bhb_loop+0x30/0x80 [ 80.712268][ T4496] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.718204][ T4496] RIP: 0033:0x7fb166b9c2d9 [ 80.722661][ T4496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.742304][ T4496] RSP: 002b:00007fb164df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 80.750764][ T4496] RAX: ffffffffffffffda RBX: 00007fb166e23fa0 RCX: 00007fb166b9c2d9 [ 80.758780][ T4496] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 80.766794][ T4496] RBP: 00007fb166c33888 R08: 00000000000003d0 R09: 0000000000000000 [ 80.774809][ T4496] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 80.782816][ T4496] R13: 00007fb166e24038 R14: 00007fb166e23fa0 R15: 00007ffc345782b8 [ 80.790848][ T4496] [ 80.798423][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 80.822003][ T4524] syz.3.79 uses obsolete (PF_INET,SOCK_PACKET) [ 81.043948][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 81.141405][ T3851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.159004][ T4546] tipc: Enabled bearer , priority 0 [ 81.166009][ T7] usb 1-1: config 8 has an invalid interface number: 25 but max is 0 [ 81.179986][ T7] usb 1-1: config 8 has no interface number 0 [ 81.196098][ T4546] device syzkaller0 entered promiscuous mode [ 81.202230][ T7] usb 1-1: config 8 interface 25 has no altsetting 0 [ 81.253166][ T4546] tipc: Resetting bearer [ 81.288506][ T4545] tipc: Resetting bearer [ 81.313950][ T4545] tipc: Disabling bearer [ 81.382935][ T7] usb 1-1: New USB device found, idVendor=0eac, idProduct=0247, bcdDevice=c9.1e [ 81.407437][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.452805][ T7] usb 1-1: Product: syz [ 81.462717][ T7] usb 1-1: Manufacturer: syz [ 81.482265][ T7] usb 1-1: SerialNumber: syz [ 81.775892][ T4496] Mem-Info: [ 81.786050][ T4496] active_anon:281 inactive_anon:7573 isolated_anon:0 [ 81.786050][ T4496] active_file:4639 inactive_file:36937 isolated_file:0 [ 81.786050][ T4496] unevictable:768 dirty:203 writeback:1 [ 81.786050][ T4496] slab_reclaimable:20685 slab_unreclaimable:92748 [ 81.786050][ T4496] mapped:32004 shmem:3711 pagetables:690 bounce:0 [ 81.786050][ T4496] kernel_misc_reclaimable:0 [ 81.786050][ T4496] free:1354445 free_pcp:4486 free_cma:0 [ 81.864435][ T7] usbhid 1-1:8.25: couldn't find an input interrupt endpoint [ 81.890098][ T7] usb 1-1: USB disconnect, device number 4 [ 81.990950][ T4496] Node 0 active_anon:1092kB inactive_anon:29480kB active_file:18352kB inactive_file:147748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127216kB dirty:808kB writeback:4kB shmem:11964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10496kB pagetables:2660kB all_unreclaimable? no [ 82.148053][ T4496] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 82.302787][ T4496] Node 0 DMA free:15360kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 82.439801][ T4496] lowmem_reserve[]: 0 2402 2403 2403 2403 [ 82.462735][ T4496] Node 0 DMA32 free:1480292kB min:33604kB low:42004kB high:50404kB reserved_highatomic:0KB active_anon:1092kB inactive_anon:25680kB active_file:18352kB inactive_file:147748kB unevictable:1536kB writepending:808kB present:2998260kB managed:2459932kB mlocked:0kB bounce:0kB free_pcp:17236kB local_pcp:14308kB free_cma:0kB [ 82.530276][ T4606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 82.632801][ T4496] lowmem_reserve[]: 0 0 0 0 0 [ 82.637625][ T4496] Node 0 Normal free:12kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 82.852363][ T4496] lowmem_reserve[]: 0 0 0 0 0 [ 82.873504][ T4496] Node 1 Normal free:3918436kB min:56280kB low:70348kB high:84416kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3908kB local_pcp:3908kB free_cma:0kB [ 82.963257][ T4624] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 83.032447][ T4496] lowmem_reserve[]: 0 0 0 0 0 [ 83.065282][ T4496] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 83.134252][ T4496] Node 0 DMA32: 1*4kB (U) 2*8kB (UM) 1*16kB (E) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 1*512kB (E) 2*1024kB (M) 5*2048kB (UM) 358*4096kB (M) = 1479876kB [ 83.154376][ T4636] tipc: Enabled bearer , priority 0 [ 83.188952][ T4639] jffs2: notice: (4639) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 83.207055][ T4636] device syzkaller0 entered promiscuous mode [ 83.233582][ T4496] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 83.268591][ T4636] tipc: Resetting bearer [ 83.304522][ T4496] Node 1 Normal: 136*4kB (UME) 27*8kB (UME) 32*16kB (UME) 170*32kB (UME) 65*64kB (UME) 14*128kB (UME) 3*256kB (UE) 5*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 951*4096kB (M) = 3918456kB [ 83.333297][ T4634] tipc: Resetting bearer [ 83.371808][ T4634] tipc: Disabling bearer [ 83.410449][ T4496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 83.451946][ T4496] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 83.512728][ T4496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 83.564449][ T4496] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 83.615553][ T4496] 43704 total pagecache pages [ 83.652836][ T4496] 3 pages in swap cache [ 83.672727][ T4496] Swap cache stats: add 2921, delete 2920, find 17/25 [ 83.712830][ T4496] Free swap = 124792kB [ 83.735192][ T4496] Total swap = 124996kB [ 83.751947][ T4496] 2064283 pages RAM [ 83.787594][ T4496] 0 pages HighMem/MovableOnly [ 83.825541][ T4496] 415313 pages reserved [ 83.843095][ T4496] 0 pages cma reserved [ 83.887311][ T4674] jffs2: notice: (4674) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.046210][ T4685] FAULT_INJECTION: forcing a failure. [ 84.046210][ T4685] name failslab, interval 1, probability 0, space 0, times 0 [ 84.071097][ T4686] tipc: Enabled bearer , priority 0 [ 84.112878][ T4685] CPU: 0 PID: 4685 Comm: syz.0.114 Not tainted syzkaller #0 [ 84.120194][ T4685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.130254][ T4685] Call Trace: [ 84.133566][ T4685] [ 84.136502][ T4685] dump_stack_lvl+0x188/0x250 [ 84.141196][ T4685] ? show_regs_print_info+0x20/0x20 [ 84.146398][ T4685] ? load_image+0x410/0x410 [ 84.150917][ T4685] ? __might_sleep+0xf0/0xf0 [ 84.155664][ T4685] ? __lock_acquire+0x7d40/0x7d40 [ 84.160698][ T4685] should_fail+0x383/0x4b0 [ 84.165129][ T4685] should_failslab+0x5/0x20 [ 84.169668][ T4685] slab_pre_alloc_hook+0x51/0xc0 [ 84.174725][ T4685] ? __alloc_file+0x25/0x240 [ 84.179344][ T4685] kmem_cache_alloc+0x3d/0x280 [ 84.184140][ T4685] __alloc_file+0x25/0x240 [ 84.188565][ T4685] alloc_empty_file+0x90/0x180 [ 84.193347][ T4685] alloc_file+0x5c/0x510 [ 84.197595][ T4685] alloc_file_clone+0x23/0xa0 [ 84.202291][ T4685] create_pipe_files+0x409/0x6b0 [ 84.207237][ T4685] __do_pipe_flags+0x46/0x1f0 [ 84.211916][ T4685] do_pipe2+0xa7/0x190 [ 84.216003][ T4685] ? pipe_fcntl+0x530/0x530 [ 84.220538][ T4685] ? lock_chain_count+0x20/0x20 [ 84.225435][ T4685] ? syscall_enter_from_user_mode+0x21/0x70 [ 84.231377][ T4685] __x64_sys_pipe+0x36/0x40 [ 84.235889][ T4685] do_syscall_64+0x4c/0xa0 [ 84.240308][ T4685] ? clear_bhb_loop+0x30/0x80 [ 84.244996][ T4685] ? clear_bhb_loop+0x30/0x80 [ 84.249694][ T4685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.255603][ T4685] RIP: 0033:0x7fad646972d9 [ 84.260021][ T4685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.279630][ T4685] RSP: 002b:00007fad628ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 84.288052][ T4685] RAX: ffffffffffffffda RBX: 00007fad6491efa0 RCX: 00007fad646972d9 [ 84.296034][ T4685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.304006][ T4685] RBP: 00007fad6472e888 R08: 0000000000000000 R09: 0000000000000000 [ 84.311977][ T4685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.319957][ T4685] R13: 00007fad6491f038 R14: 00007fad6491efa0 R15: 00007ffc6db8bfb8 [ 84.328011][ T4685] [ 84.335032][ T4689] device syzkaller0 entered promiscuous mode [ 84.372807][ T4686] tipc: Resetting bearer [ 84.388197][ T4684] tipc: Resetting bearer [ 84.402735][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.413948][ T4691] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 84.426716][ T4684] tipc: Disabling bearer [ 84.785578][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 84.872904][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.883302][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.894009][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.902046][ T7] usb 3-1: SerialNumber: syz [ 84.940914][ T4715] X25: unknown 1F in state 3 [ 85.082754][ T4237] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.263005][ T13] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 85.271738][ T13] usb 2-1: config 1 has no interface number 0 [ 85.278549][ T1345] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.289244][ T1110] cfg80211: failed to load regulatory.db [ 85.332996][ T4237] usb 4-1: Using ep0 maxpacket: 16 [ 85.446279][ T13] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 85.455796][ T4237] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 85.472096][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.481169][ T4237] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 55, changing to 9 [ 85.498667][ T13] usb 2-1: Product: syz [ 85.503526][ T4237] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8496, setting to 1024 [ 85.520894][ T13] usb 2-1: Manufacturer: syz [ 85.526200][ T1345] usb 1-1: Using ep0 maxpacket: 16 [ 85.537814][ T13] usb 2-1: SerialNumber: syz [ 85.545358][ T4237] usb 4-1: config 0 interface 0 has no altsetting 0 [ 85.630128][ T7] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 85.653237][ T1345] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.664120][ T1345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.675751][ T1345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 85.686510][ T1345] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 85.696791][ T1345] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.723134][ T4237] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 85.738150][ T4237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.749437][ T4237] usb 4-1: Product: syz [ 85.754034][ T4237] usb 4-1: Manufacturer: syz [ 85.758949][ T4237] usb 4-1: SerialNumber: syz [ 85.774892][ T4237] usb 4-1: config 0 descriptor?? [ 85.783164][ T1345] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 85.793508][ T1345] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 85.808470][ T1345] usb 1-1: Manufacturer: syz [ 85.838848][ T1345] usb 1-1: config 0 descriptor?? [ 85.872953][ T13] usb 2-1: 3:0 : does not exist [ 85.878428][ T13] usb 2-1: 3:0 : does not exist [ 85.935365][ T13] usb 2-1: USB disconnect, device number 3 [ 86.035564][ T4237] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 86.195659][ T4207] udevd[4207]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.272895][ T1345] rc_core: IR keymap rc-hauppauge not found [ 86.286039][ T1345] Registered IR keymap rc-empty [ 86.306998][ T1345] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 86.329114][ T4237] usb 4-1: USB disconnect, device number 3 [ 86.352784][ T1345] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 86.388606][ T1345] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 86.432189][ T1345] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 86.488651][ T1345] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 86.508157][ T4768] tipc: Enabled bearer , priority 0 [ 86.524897][ T4768] device syzkaller0 entered promiscuous mode [ 86.544457][ T1345] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 86.572975][ T1345] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 86.584694][ T4768] tipc: Resetting bearer [ 86.622776][ T1345] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 86.636565][ T4767] tipc: Resetting bearer [ 86.663092][ T1345] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 86.702781][ T1345] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 86.715586][ T4767] tipc: Disabling bearer [ 86.742785][ T1345] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 86.783297][ T1345] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 86.822738][ T1345] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 86.862930][ T1345] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 86.915113][ T1345] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 86.958679][ T1345] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 87.006940][ T4782] jffs2: notice: (4782) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.064058][ T1345] usb 1-1: USB disconnect, device number 5 [ 87.122676][ T4238] Bluetooth: hci4: command 0x0411 tx timeout [ 87.163292][ T4237] usb 3-1: USB disconnect, device number 3 [ 87.171179][ T4237] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 87.556511][ T4806] FAULT_INJECTION: forcing a failure. [ 87.556511][ T4806] name failslab, interval 1, probability 0, space 0, times 0 [ 87.650735][ T4806] CPU: 0 PID: 4806 Comm: syz.0.137 Not tainted syzkaller #0 [ 87.658134][ T4806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.668232][ T4806] Call Trace: [ 87.671548][ T4806] [ 87.674513][ T4806] dump_stack_lvl+0x188/0x250 [ 87.679230][ T4806] ? show_regs_print_info+0x20/0x20 [ 87.684468][ T4806] ? load_image+0x410/0x410 [ 87.689011][ T4806] ? __lock_acquire+0x7d40/0x7d40 [ 87.694086][ T4806] should_fail+0x383/0x4b0 [ 87.698665][ T4806] should_failslab+0x5/0x20 [ 87.703202][ T4806] slab_pre_alloc_hook+0x51/0xc0 [ 87.708177][ T4806] kmem_cache_alloc_trace+0x47/0x290 [ 87.713492][ T4806] ? __list_lru_init+0x535/0xac0 [ 87.718471][ T4806] __list_lru_init+0x535/0xac0 [ 87.723289][ T4806] alloc_super+0x7b6/0x970 [ 87.728183][ T4806] ? kill_litter_super+0xa0/0xa0 [ 87.733162][ T4806] sget_fc+0x2d4/0x6f0 [ 87.737284][ T4806] ? kill_litter_super+0xa0/0xa0 [ 87.742262][ T4806] ? fuse_reconfigure+0xb0/0xb0 [ 87.747153][ T4806] get_tree_nodev+0x26/0x160 [ 87.751895][ T4806] fuse_get_tree+0x2d7/0x4d0 [ 87.756651][ T4806] vfs_get_tree+0x88/0x270 [ 87.761113][ T4806] do_new_mount+0x247/0xa40 [ 87.765659][ T4806] __se_sys_mount+0x2e3/0x3d0 [ 87.770374][ T4806] ? __x64_sys_mount+0xc0/0xc0 [ 87.775181][ T4806] ? lockdep_hardirqs_on+0x94/0x140 [ 87.780418][ T4806] ? __x64_sys_mount+0x1c/0xc0 [ 87.785222][ T4806] do_syscall_64+0x4c/0xa0 [ 87.789681][ T4806] ? clear_bhb_loop+0x30/0x80 [ 87.794394][ T4806] ? clear_bhb_loop+0x30/0x80 [ 87.799108][ T4806] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.805039][ T4806] RIP: 0033:0x7fad646972d9 [ 87.809487][ T4806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.823428][ T4238] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 87.829135][ T4806] RSP: 002b:00007fad628ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.846049][ T4806] RAX: ffffffffffffffda RBX: 00007fad6491efa0 RCX: 00007fad646972d9 [ 87.854057][ T4806] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000000000000000 [ 87.860032][ T4238] Bluetooth: hci2: Injecting HCI hardware error event [ 87.862066][ T4806] RBP: 00007fad6472e888 R08: 00002000000004c0 R09: 0000000000000000 [ 87.876859][ T4806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.884889][ T4806] R13: 00007fad6491f038 R14: 00007fad6491efa0 R15: 00007ffc6db8bfb8 [ 87.892924][ T4806] [ 87.898273][ T4201] Bluetooth: hci2: hardware error 0x00 [ 88.074589][ T4822] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 88.303050][ T4277] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.672936][ T4277] usb 2-1: config 0 has no interfaces? [ 88.688935][ T4277] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 88.726435][ T4277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.764104][ T4277] usb 2-1: config 0 descriptor?? [ 88.807424][ T4858] tipc: Started in network mode [ 88.842811][ T4858] tipc: Node identity de0e2803ad66, cluster identity 4711 [ 88.857217][ T4858] tipc: Enabled bearer , priority 0 [ 88.883362][ T4861] device syzkaller0 entered promiscuous mode [ 88.949626][ T4858] tipc: Resetting bearer [ 88.982945][ T4855] tipc: Resetting bearer [ 89.056334][ T4277] usb 2-1: USB disconnect, device number 4 [ 89.075840][ T4855] tipc: Disabling bearer [ 89.207138][ T4874] process 'syz.2.146' launched '/dev/fd/4' with NULL argv: empty string added [ 89.254564][ T4874] FAULT_INJECTION: forcing a failure. [ 89.254564][ T4874] name failslab, interval 1, probability 0, space 0, times 0 [ 89.317809][ T4874] CPU: 0 PID: 4874 Comm: syz.2.146 Not tainted syzkaller #0 [ 89.325177][ T4874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.335250][ T4874] Call Trace: [ 89.338555][ T4874] [ 89.341510][ T4874] dump_stack_lvl+0x188/0x250 [ 89.346233][ T4874] ? show_regs_print_info+0x20/0x20 [ 89.351474][ T4874] ? load_image+0x410/0x410 [ 89.356019][ T4874] ? __might_sleep+0xf0/0xf0 [ 89.360664][ T4874] ? __lock_acquire+0x7d40/0x7d40 [ 89.365729][ T4874] should_fail+0x383/0x4b0 [ 89.370183][ T4874] should_failslab+0x5/0x20 [ 89.374693][ T4874] slab_pre_alloc_hook+0x51/0xc0 [ 89.379640][ T4874] ? ptlock_alloc+0x1c/0x60 [ 89.384171][ T4874] kmem_cache_alloc+0x3d/0x280 [ 89.388939][ T4874] ptlock_alloc+0x1c/0x60 [ 89.393275][ T4874] pte_alloc_one+0xc0/0x310 [ 89.397782][ T4874] ? rcu_lock_release+0x20/0x20 [ 89.402647][ T4874] ? __rwlock_init+0x140/0x140 [ 89.407438][ T4874] ? count_memcg_event_mm+0x324/0x370 [ 89.412856][ T4874] ? do_raw_spin_unlock+0x11d/0x230 [ 89.418100][ T4874] __pte_alloc+0x21/0x150 [ 89.422457][ T4874] ? __pud_alloc+0x122/0x140 [ 89.427069][ T4874] handle_mm_fault+0x39d9/0x4440 [ 89.432060][ T4874] ? get_page+0xe0/0xe0 [ 89.436265][ T4874] ? __schedule+0x11cb/0x4350 [ 89.441005][ T4874] ? follow_page_mask+0x272/0x12b0 [ 89.446244][ T4874] ? vma_is_secretmem+0x9/0x40 [ 89.451041][ T4874] ? check_vma_flags+0x359/0x470 [ 89.456020][ T4874] __get_user_pages+0x952/0x11e0 [ 89.461009][ T4874] ? populate_vma_page_range+0x290/0x290 [ 89.466679][ T4874] ? preempt_schedule+0xbc/0xd0 [ 89.471556][ T4874] ? __might_sleep+0xf0/0xf0 [ 89.476174][ T4874] ? read_lock_is_recursive+0x10/0x10 [ 89.481589][ T4874] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 89.486982][ T4874] __get_user_pages_remote+0x1c2/0x730 [ 89.492487][ T4874] ? irq_work_queue+0xb8/0x140 [ 89.497295][ T4874] ? get_user_pages_remote+0x55/0xa0 [ 89.502645][ T4874] get_arg_page+0x11b/0x350 [ 89.507184][ T4874] ? copy_string_kernel+0x280/0x280 [ 89.512418][ T4874] ? load_image+0x410/0x410 [ 89.516954][ T4874] copy_string_kernel+0x14d/0x280 [ 89.522003][ T4874] do_execveat_common+0x360/0x6b0 [ 89.527037][ T4874] __x64_sys_execveat+0xc0/0xe0 [ 89.531889][ T4874] do_syscall_64+0x4c/0xa0 [ 89.536394][ T4874] ? clear_bhb_loop+0x30/0x80 [ 89.541078][ T4874] ? clear_bhb_loop+0x30/0x80 [ 89.545762][ T4874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.551660][ T4874] RIP: 0033:0x7fb166b9c2d9 [ 89.556089][ T4874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.575732][ T4874] RSP: 002b:00007fb164df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 89.584195][ T4874] RAX: ffffffffffffffda RBX: 00007fb166e23fa0 RCX: 00007fb166b9c2d9 [ 89.592204][ T4874] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 89.600194][ T4874] RBP: 00007fb166c33888 R08: 0000000000001000 R09: 0000000000000000 [ 89.608192][ T4874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.616184][ T4874] R13: 00007fb166e24038 R14: 00007fb166e23fa0 R15: 00007ffc345782b8 [ 89.624177][ T4874] [ 90.181780][ T4900] capability: warning: `syz.3.156' uses deprecated v2 capabilities in a way that may be insecure [ 90.206918][ T4902] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.740902][ T4922] FAULT_INJECTION: forcing a failure. [ 90.740902][ T4922] name failslab, interval 1, probability 0, space 0, times 0 [ 90.793028][ T4922] CPU: 0 PID: 4922 Comm: syz.0.165 Not tainted syzkaller #0 [ 90.800344][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.810406][ T4922] Call Trace: [ 90.813687][ T4922] [ 90.816645][ T4922] dump_stack_lvl+0x188/0x250 [ 90.821328][ T4922] ? rcu_lock_release+0x20/0x20 [ 90.826182][ T4922] ? show_regs_print_info+0x20/0x20 [ 90.831384][ T4922] ? load_image+0x410/0x410 [ 90.835903][ T4922] ? __mutex_lock_common+0x435/0x2400 [ 90.841281][ T4922] ? __rwlock_init+0x140/0x140 [ 90.846056][ T4922] should_fail+0x383/0x4b0 [ 90.850516][ T4922] should_failslab+0x5/0x20 [ 90.855051][ T4922] slab_pre_alloc_hook+0x51/0xc0 [ 90.860112][ T4922] kmem_cache_alloc_trace+0x47/0x290 [ 90.865428][ T4922] ? sg_add_sfp+0x53/0x890 [ 90.869878][ T4922] sg_add_sfp+0x53/0x890 [ 90.874126][ T4922] ? __pm_runtime_resume+0x127/0x170 [ 90.879415][ T4922] sg_open+0x4e8/0x9a0 [ 90.883511][ T4922] chrdev_open+0x585/0x5f0 [ 90.887944][ T4922] ? cd_forget+0x160/0x160 [ 90.892366][ T4922] ? fsnotify_perm+0x3a7/0x560 [ 90.897146][ T4922] ? cd_forget+0x160/0x160 [ 90.901620][ T4922] do_dentry_open+0x7f7/0xf90 [ 90.906331][ T4922] ? vfs_open+0x2b/0x80 [ 90.910516][ T4922] path_openat+0x2718/0x2fb0 [ 90.915216][ T4922] ? __kasan_slab_alloc+0xa9/0xc0 [ 90.920269][ T4922] ? do_filp_open+0x400/0x400 [ 90.924960][ T4922] do_filp_open+0x1df/0x400 [ 90.929477][ T4922] ? vfs_tmpfile+0x300/0x300 [ 90.934083][ T4922] ? _raw_spin_unlock+0x24/0x40 [ 90.938940][ T4922] ? alloc_fd+0x59e/0x650 [ 90.943401][ T4922] do_sys_openat2+0x14b/0x500 [ 90.948109][ T4922] ? __lock_acquire+0x7d40/0x7d40 [ 90.953260][ T4922] ? do_sys_open+0xe0/0xe0 [ 90.957702][ T4922] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 90.963691][ T4922] ? lock_chain_count+0x20/0x20 [ 90.968567][ T4922] __x64_sys_openat+0x135/0x160 [ 90.973423][ T4922] do_syscall_64+0x4c/0xa0 [ 90.977844][ T4922] ? clear_bhb_loop+0x30/0x80 [ 90.982529][ T4922] ? clear_bhb_loop+0x30/0x80 [ 90.987228][ T4922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.993134][ T4922] RIP: 0033:0x7fad64657b0e [ 90.997587][ T4922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 91.017217][ T4922] RSP: 002b:00007fad628eeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.025633][ T4922] RAX: ffffffffffffffda RBX: 00007fad628ef6c0 RCX: 00007fad64657b0e [ 91.033608][ T4922] RDX: 0000000000000000 RSI: 00007fad628eec00 RDI: ffffffffffffff9c [ 91.041587][ T4922] RBP: 00007fad628eec00 R08: 0000000000000000 R09: 0000000000000000 [ 91.049570][ T4922] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 91.057590][ T4922] R13: 00007fad6491f038 R14: 00007fad6491efa0 R15: 00007ffc6db8bfb8 [ 91.065609][ T4922] [ 91.329166][ T4924] kvm [4923]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x100000000 [ 91.359200][ T4941] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.369064][ T4924] kvm [4923]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 91.403508][ T4924] kvm [4923]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0xf00000080 [ 91.697861][ T4962] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 91.738782][ T4962] device lo entered promiscuous mode [ 91.760218][ T4962] device bond0 entered promiscuous mode [ 91.794095][ T4962] device dummy0 entered promiscuous mode [ 91.811655][ T4962] device eql entered promiscuous mode [ 91.824266][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 91.839938][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 91.857944][ T4962] device ifb0 entered promiscuous mode [ 91.872915][ T4962] device ifb1 entered promiscuous mode [ 91.888051][ T4962] device eth0 entered promiscuous mode [ 91.905023][ T4962] device wlan0 entered promiscuous mode [ 91.920133][ T4962] device wlan1 entered promiscuous mode [ 91.936192][ T4962] device hwsim0 entered promiscuous mode [ 91.949739][ T4962] device wpan0 entered promiscuous mode [ 91.965764][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 92.007833][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 92.039667][ T4962] device wpan1 entered promiscuous mode [ 92.064672][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 92.102239][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 92.135375][ T4962] device teql0 entered promiscuous mode [ 92.159850][ T4962] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 92.626220][ T146] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 92.657716][ T4996] kvm [4991]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x100000000 [ 92.678787][ T4996] kvm [4991]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 92.688942][ T5006] tipc: Started in network mode [ 92.694060][ T5006] tipc: Node identity 9e52a4bc9de5, cluster identity 4711 [ 92.709256][ T4996] kvm [4991]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0xf00000080 [ 92.719246][ T5006] tipc: Enabled bearer , priority 0 [ 92.726974][ T5006] device syzkaller0 entered promiscuous mode [ 92.756766][ T5006] tipc: Resetting bearer [ 92.775025][ T5005] tipc: Resetting bearer [ 92.797175][ T5005] tipc: Disabling bearer [ 92.950580][ T5008] Zero length message leads to an empty skb [ 93.515759][ T5025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.204'. [ 93.543593][ T5025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.204'. [ 93.552545][ T5025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 93.718516][ T146] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 93.739382][ T5051] comedi comedi1: dt2817: a I/O base address must be specified [ 93.764185][ T5053] jffs2: notice: (5053) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.249982][ T5071] kvm [5070]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x100000000 [ 94.300450][ T5071] kvm [5070]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 94.366018][ T5071] kvm [5070]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0xf00000080 [ 95.002698][ T4277] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.135696][ T5134] tipc: Enabled bearer , priority 0 [ 95.151119][ T5134] device syzkaller0 entered promiscuous mode [ 95.207758][ T5134] tipc: Resetting bearer [ 95.242838][ T4277] usb 5-1: Using ep0 maxpacket: 32 [ 95.248651][ T5132] tipc: Resetting bearer [ 95.298668][ T5132] tipc: Disabling bearer [ 95.403134][ T4277] usb 5-1: unable to get BOS descriptor or descriptor too short [ 95.460263][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 95.646140][ T5167] FAULT_INJECTION: forcing a failure. [ 95.646140][ T5167] name failslab, interval 1, probability 0, space 0, times 0 [ 95.672887][ T5167] CPU: 0 PID: 5167 Comm: syz.3.236 Not tainted syzkaller #0 [ 95.680229][ T5167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.690311][ T5167] Call Trace: [ 95.693626][ T5167] [ 95.696587][ T5167] dump_stack_lvl+0x188/0x250 [ 95.701311][ T5167] ? show_regs_print_info+0x20/0x20 [ 95.706548][ T5167] ? load_image+0x410/0x410 [ 95.711087][ T5167] ? __might_sleep+0xf0/0xf0 [ 95.715709][ T5167] ? __lock_acquire+0x7d40/0x7d40 [ 95.720792][ T5167] should_fail+0x383/0x4b0 [ 95.725253][ T5167] should_failslab+0x5/0x20 [ 95.729798][ T5167] slab_pre_alloc_hook+0x51/0xc0 [ 95.734769][ T5167] ? new_inode_pseudo+0x77/0x210 [ 95.739753][ T5167] kmem_cache_alloc+0x3d/0x280 [ 95.744567][ T5167] new_inode_pseudo+0x77/0x210 [ 95.749375][ T5167] new_inode+0x25/0x1d0 [ 95.753571][ T5167] ? start_creating+0x1f5/0x310 [ 95.758458][ T5167] debugfs_create_dir+0xec/0x4c0 [ 95.763433][ T5167] ? hci_register_dev+0x36f/0x980 [ 95.768542][ T5167] hci_register_dev+0x391/0x980 [ 95.773441][ T5167] hci_uart_tty_ioctl+0x875/0xa80 [ 95.778509][ T5167] ? hci_uart_tty_write+0x10/0x10 [ 95.783563][ T5167] tty_ioctl+0x8e3/0xc30 [ 95.787864][ T5167] ? security_file_ioctl+0x7c/0xa0 [ 95.793011][ T5167] ? tty_get_icount+0xa0/0xa0 [ 95.797730][ T5167] __se_sys_ioctl+0xfa/0x170 [ 95.802359][ T5167] do_syscall_64+0x4c/0xa0 [ 95.806812][ T5167] ? clear_bhb_loop+0x30/0x80 [ 95.811530][ T5167] ? clear_bhb_loop+0x30/0x80 [ 95.816248][ T5167] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.822190][ T5167] RIP: 0033:0x7f0fc5e102d9 [ 95.826635][ T5167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.846288][ T5167] RSP: 002b:00007f0fc4068028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.854737][ T5167] RAX: ffffffffffffffda RBX: 00007f0fc6097fa0 RCX: 00007f0fc5e102d9 [ 95.862750][ T5167] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 95.870783][ T5167] RBP: 00007f0fc5ea7888 R08: 0000000000000000 R09: 0000000000000000 [ 95.878791][ T5167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.886794][ T5167] R13: 00007f0fc6098038 R14: 00007f0fc6097fa0 R15: 00007ffde1ea53c8 [ 95.894818][ T5167] [ 95.897915][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.952899][ T4277] usb 5-1: string descriptor 0 read error: -22 [ 95.961614][ T4277] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 95.991151][ T4277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.065348][ T4277] dw2102: su3000_identify_state [ 96.075434][ T4277] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 96.101891][ T4277] dw2102: su3000_power_ctrl: 1, initialized 0 [ 96.115603][ T4277] dvb-usb: bulk message failed: -22 (2/0) [ 96.153422][ T4277] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.213256][ T4277] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 96.232303][ T4277] usb 5-1: media controller created [ 96.249431][ T4277] dvb-usb: bulk message failed: -22 (6/0) [ 96.266988][ T4277] dw2102: i2c transfer failed. [ 96.279392][ T4277] dvb-usb: bulk message failed: -22 (6/0) [ 96.293953][ T4277] dw2102: i2c transfer failed. [ 96.304397][ T4277] dvb-usb: bulk message failed: -22 (6/0) [ 96.316947][ T4277] dw2102: i2c transfer failed. [ 96.327361][ T4277] dvb-usb: bulk message failed: -22 (6/0) [ 96.339784][ T4277] dw2102: i2c transfer failed. [ 96.350503][ T4277] dvb-usb: bulk message failed: -22 (6/0) [ 96.361917][ T4277] dw2102: i2c transfer failed. [ 96.372527][ T4277] dvb-usb: bulk message failed: -22 (6/0) [ 96.385529][ T4277] dw2102: i2c transfer failed. [ 96.396051][ T4277] dvb-usb: MAC address: 02:02:02:02:02:02 [ 96.450676][ T4277] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.543722][ T4277] dvb-usb: bulk message failed: -22 (3/0) [ 96.549564][ T4277] dw2102: command 0x0e transfer failed. [ 96.602518][ T4277] dvb-usb: bulk message failed: -22 (3/0) [ 96.613222][ T5200] netlink: 'syz.0.243': attribute type 2 has an invalid length. [ 96.624802][ T5201] loop0: detected capacity change from 0 to 4096 [ 96.637509][ T4277] dw2102: command 0x0e transfer failed. [ 96.659957][ T4241] wlan1: Trigger new scan to find an IBSS to join [ 96.673716][ T4207] udevd[4207]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 96.677002][ T5167] debugfs: out of free dentries, can not create directory 'hci5' [ 96.737535][ T5201] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 96.758145][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 96.767273][ T5201] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 96.807485][ T5201] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 96.827042][ T5201] loop0: [ 96.840325][ T4207] udevd[4207]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 96.918013][ T4207] udevd[4207]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 96.937158][ T4207] udevd[4207]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 96.973035][ T4277] dvb-usb: bulk message failed: -22 (3/0) [ 96.978952][ T4277] dw2102: command 0x0e transfer failed. [ 96.995988][ T4277] dvb-usb: bulk message failed: -22 (3/0) [ 97.019686][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 97.026946][ T4277] dw2102: command 0x0e transfer failed. [ 97.032560][ T4277] dvb-usb: bulk message failed: -22 (1/0) [ 97.052695][ T4277] dw2102: command 0x51 transfer failed. [ 97.074854][ T5219] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.112775][ T4277] DVB: Unable to find symbol ds3000_attach() [ 97.127648][ T4277] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 97.144073][ T5221] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 97.202684][ T1107] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 97.244484][ T5224] FAULT_INJECTION: forcing a failure. [ 97.244484][ T5224] name failslab, interval 1, probability 0, space 0, times 0 [ 97.257860][ T4277] rc_core: IR keymap rc-su3000 not found [ 97.263694][ T4277] Registered IR keymap rc-empty [ 97.279561][ T4277] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 97.300331][ T5224] CPU: 0 PID: 5224 Comm: syz.4.253 Not tainted syzkaller #0 [ 97.307639][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.317709][ T5224] Call Trace: [ 97.321014][ T5224] [ 97.323975][ T5224] dump_stack_lvl+0x188/0x250 [ 97.328693][ T5224] ? show_regs_print_info+0x20/0x20 [ 97.333897][ T5224] ? load_image+0x410/0x410 [ 97.338407][ T5224] ? __might_sleep+0xf0/0xf0 [ 97.342999][ T5224] ? __lock_acquire+0x7d40/0x7d40 [ 97.348038][ T5224] should_fail+0x383/0x4b0 [ 97.352469][ T5224] should_failslab+0x5/0x20 [ 97.356994][ T5224] slab_pre_alloc_hook+0x51/0xc0 [ 97.361941][ T5224] __kmalloc+0x6b/0x340 [ 97.366104][ T5224] ? mpi_alloc+0x73/0x130 [ 97.370477][ T5224] mpi_alloc+0x73/0x130 [ 97.374668][ T5224] mpi_read_raw_from_sgl+0x2c9/0x640 [ 97.380005][ T5224] ? mpi_write_to_sgl+0x790/0x790 [ 97.385079][ T5224] ? memset+0x1e/0x40 [ 97.389096][ T5224] rsa_enc+0x14d/0x3c0 [ 97.393194][ T5224] ? rsa_exit+0x20/0x20 [ 97.397373][ T5224] pkcs1pad_verify+0x465/0x670 [ 97.402143][ T5224] public_key_verify_signature+0x87f/0xd40 [ 97.408007][ T5224] ? public_key_free+0x80/0x80 [ 97.412843][ T5224] ? asymmetric_key_id_same+0x63/0xe0 [ 97.418332][ T5224] x509_check_for_self_signed+0x317/0x420 [ 97.424074][ T5224] x509_cert_parse+0x59c/0x7a0 [ 97.428844][ T5224] x509_key_preparse+0x60/0x5d0 [ 97.433697][ T5224] ? down_read+0x1aa/0x2e0 [ 97.438121][ T5224] asymmetric_key_preparse+0xa5/0x140 [ 97.443513][ T5224] key_create_or_update+0x432/0xa40 [ 97.448737][ T5224] ? security_key_permission+0x7c/0xa0 [ 97.454212][ T5224] ? key_type_put+0x20/0x20 [ 97.458754][ T5224] ? lookup_user_key_possessed+0x40/0x40 [ 97.464454][ T5224] ? __might_fault+0xb3/0x110 [ 97.469180][ T5224] __se_sys_add_key+0x34b/0x410 [ 97.474057][ T5224] ? __x64_sys_add_key+0xc0/0xc0 [ 97.479052][ T5224] ? lockdep_hardirqs_on+0x94/0x140 [ 97.484432][ T5224] ? __x64_sys_add_key+0x1c/0xc0 [ 97.489408][ T5224] do_syscall_64+0x4c/0xa0 [ 97.493877][ T5224] ? clear_bhb_loop+0x30/0x80 [ 97.498945][ T5224] ? clear_bhb_loop+0x30/0x80 [ 97.503655][ T5224] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.509582][ T5224] RIP: 0033:0x7f7c8081c2d9 [ 97.514012][ T5224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.533665][ T5224] RSP: 002b:00007f7c7ea74028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 97.542082][ T5224] RAX: ffffffffffffffda RBX: 00007f7c80aa3fa0 RCX: 00007f7c8081c2d9 [ 97.550057][ T5224] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 97.558029][ T5224] RBP: 00007f7c808b3888 R08: 0000000016172bdd R09: 0000000000000000 [ 97.566009][ T5224] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 97.574011][ T5224] R13: 00007f7c80aa4038 R14: 00007f7c80aa3fa0 R15: 00007fff287b3268 [ 97.582019][ T5224] [ 97.620568][ T4277] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input7 [ 97.658785][ T4277] dvb-usb: schedule remote query interval to 150 msecs. [ 97.677740][ T5230] tipc: Enabled bearer , priority 0 [ 97.686548][ T4277] dw2102: su3000_power_ctrl: 0, initialized 1 [ 97.703419][ T5230] device syzkaller0 entered promiscuous mode [ 97.709545][ T4277] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 97.720118][ T1107] usb 1-1: Using ep0 maxpacket: 8 [ 97.734148][ T5230] tipc: Resetting bearer [ 97.744157][ T4277] usb 5-1: USB disconnect, device number 5 [ 97.761552][ T5229] tipc: Resetting bearer [ 97.787223][ T5229] tipc: Disabling bearer [ 97.827278][ T4277] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 97.843039][ T1107] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.866089][ T1107] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.887503][ T1107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 97.907560][ T1107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 97.920687][ T1107] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 97.930441][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.010550][ T1107] hub 1-1:1.0: bad descriptor, ignoring hub [ 98.018869][ T1107] hub: probe of 1-1:1.0 failed with error -5 [ 98.044397][ T1107] cdc_wdm 1-1:1.0: skipping garbage [ 98.061858][ T1107] cdc_wdm 1-1:1.0: skipping garbage [ 98.097078][ T1107] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 98.104605][ T5243] netlink: 'syz.1.262': attribute type 1 has an invalid length. [ 98.115776][ T1107] cdc_wdm 1-1:1.0: Unknown control protocol [ 98.126605][ T5243] netlink: 'syz.1.262': attribute type 2 has an invalid length. [ 98.196107][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 98.514435][ T1107] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 98.613779][ T5258] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 98.631072][ T5259] tipc: Enabled bearer , priority 0 [ 98.648624][ T5259] device syzkaller0 entered promiscuous mode [ 98.685504][ T5259] tipc: Resetting bearer [ 98.699311][ T5257] tipc: Resetting bearer [ 98.720905][ T5257] tipc: Disabling bearer [ 98.739484][ T4238] Bluetooth: hci3: command 0x0409 tx timeout [ 98.802844][ T4238] Bluetooth: hci5: command 0x1003 tx timeout [ 98.809077][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 98.920739][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 99.202836][ T4238] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 99.205828][ T1107] usb 1-1: USB disconnect, device number 6 [ 99.211138][ T4238] Bluetooth: hci3: Injecting HCI hardware error event [ 99.212148][ T4201] Bluetooth: hci3: hardware error 0x00 [ 99.240797][ T5285] FAULT_INJECTION: forcing a failure. [ 99.240797][ T5285] name failslab, interval 1, probability 0, space 0, times 0 [ 99.272855][ T5289] tipc: Started in network mode [ 99.295873][ T5289] tipc: Node identity aafe202561bc, cluster identity 4711 [ 99.306182][ T5285] CPU: 0 PID: 5285 Comm: syz.1.282 Not tainted syzkaller #0 [ 99.313491][ T5285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.323583][ T5285] Call Trace: [ 99.326889][ T5285] [ 99.329844][ T5285] dump_stack_lvl+0x188/0x250 [ 99.334546][ T5285] ? show_regs_print_info+0x20/0x20 [ 99.339778][ T5285] ? load_image+0x410/0x410 [ 99.344313][ T5285] ? __might_sleep+0xf0/0xf0 [ 99.348957][ T5285] ? __lock_acquire+0x7d40/0x7d40 [ 99.354038][ T5285] should_fail+0x383/0x4b0 [ 99.358511][ T5285] should_failslab+0x5/0x20 [ 99.363060][ T5285] slab_pre_alloc_hook+0x51/0xc0 [ 99.368023][ T5285] ? security_inode_alloc+0x30/0x110 [ 99.373312][ T5285] kmem_cache_alloc+0x3d/0x280 [ 99.378109][ T5285] security_inode_alloc+0x30/0x110 [ 99.383264][ T5285] inode_init_always+0x8e5/0xc90 [ 99.388231][ T5285] new_inode_pseudo+0x8e/0x210 [ 99.393169][ T5285] new_inode+0x25/0x1d0 [ 99.397338][ T5285] ? start_creating+0x1f5/0x310 [ 99.402198][ T5285] __debugfs_create_file+0x147/0x500 [ 99.407530][ T5285] kvm_dev_ioctl+0x1ad0/0x20a0 [ 99.412358][ T5285] ? hardware_enable_nolock+0x130/0x130 [ 99.417949][ T5285] ? bpf_lsm_file_ioctl+0x5/0x10 [ 99.422948][ T5285] ? security_file_ioctl+0x7c/0xa0 [ 99.428103][ T5285] ? hardware_enable_nolock+0x130/0x130 [ 99.433678][ T5285] __se_sys_ioctl+0xfa/0x170 [ 99.438298][ T5285] do_syscall_64+0x4c/0xa0 [ 99.442751][ T5285] ? clear_bhb_loop+0x30/0x80 [ 99.447449][ T5285] ? clear_bhb_loop+0x30/0x80 [ 99.452141][ T5285] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.458052][ T5285] RIP: 0033:0x7f15c5c362d9 [ 99.462516][ T5285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.482164][ T5285] RSP: 002b:00007f15c3e8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.490621][ T5285] RAX: ffffffffffffffda RBX: 00007f15c5ebdfa0 RCX: 00007f15c5c362d9 [ 99.498604][ T5285] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 99.506620][ T5285] RBP: 00007f15c5ccd888 R08: 0000000000000000 R09: 0000000000000000 [ 99.514623][ T5285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.522631][ T5285] R13: 00007f15c5ebe038 R14: 00007f15c5ebdfa0 R15: 00007fff4d907988 [ 99.530639][ T5285] [ 99.548341][ T5289] tipc: Enabled bearer , priority 0 [ 99.566408][ T5292] device syzkaller0 entered promiscuous mode [ 99.593953][ T5289] tipc: Resetting bearer [ 99.606866][ T5288] tipc: Resetting bearer [ 99.631211][ T5288] tipc: Disabling bearer [ 99.663213][ T5285] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests' [ 99.802293][ T5306] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 99.962991][ T5303] FAULT_INJECTION: forcing a failure. [ 99.962991][ T5303] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 100.009301][ T5303] CPU: 0 PID: 5303 Comm: syz.4.288 Not tainted syzkaller #0 [ 100.016626][ T5303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.026726][ T5303] Call Trace: [ 100.030007][ T5303] [ 100.032960][ T5303] dump_stack_lvl+0x188/0x250 [ 100.037647][ T5303] ? show_regs_print_info+0x20/0x20 [ 100.042846][ T5303] ? load_image+0x410/0x410 [ 100.047352][ T5303] ? __lock_acquire+0x7d40/0x7d40 [ 100.052386][ T5303] should_fail+0x383/0x4b0 [ 100.056823][ T5303] prepare_alloc_pages+0x1e3/0x5b0 [ 100.061953][ T5303] __alloc_pages+0x11b/0x480 [ 100.066564][ T5303] ? zone_statistics+0x170/0x170 [ 100.071557][ T5303] ? alloc_pages+0x452/0x560 [ 100.076188][ T5303] __page_cache_alloc+0xce/0x440 [ 100.081180][ T5303] ? add_to_page_cache_lru+0x4a0/0x4a0 [ 100.086654][ T5303] ? xas_descend+0x210/0x3b0 [ 100.091254][ T5303] ? xas_load+0x127/0x140 [ 100.095705][ T5303] pagecache_get_page+0x9b8/0xf20 [ 100.100745][ T5303] ? page_cache_prev_miss+0x380/0x380 [ 100.106139][ T5303] grab_cache_page_write_begin+0x5c/0xa0 [ 100.111783][ T5303] fuse_write_begin+0x112/0x580 [ 100.116674][ T5303] generic_perform_write+0x2b6/0x550 [ 100.122099][ T5303] ? grab_cache_page_write_begin+0xa0/0xa0 [ 100.127950][ T5303] ? file_remove_privs+0x5d0/0x5d0 [ 100.133124][ T5303] ? rwsem_write_trylock+0x135/0x1c0 [ 100.138428][ T5303] ? clear_nonspinnable+0x60/0x60 [ 100.143479][ T5303] __generic_file_write_iter+0x261/0x4e0 [ 100.149124][ T5303] ? generic_write_checks+0x3be/0x460 [ 100.154508][ T5303] generic_file_write_iter+0xa6/0x1b0 [ 100.159890][ T5303] fuse_file_write_iter+0x9b3/0xd70 [ 100.165124][ T5303] ? fuse_file_read_iter+0x640/0x640 [ 100.170459][ T5303] ? aa_file_perm+0x38b/0xe80 [ 100.175189][ T5303] do_iter_readv_writev+0x47d/0x5f0 [ 100.180410][ T5303] ? aa_path_link+0x8a0/0x8a0 [ 100.185094][ T5303] ? generic_file_rw_checks+0x280/0x280 [ 100.190655][ T5303] ? common_file_perm+0x171/0x1c0 [ 100.195733][ T5303] ? fsnotify_perm+0x5d/0x560 [ 100.200411][ T5303] ? security_file_permission+0x75/0xa0 [ 100.205963][ T5303] do_iter_write+0x1f8/0x7a0 [ 100.210564][ T5303] do_writev+0x281/0x480 [ 100.214820][ T5303] ? do_readv+0x460/0x460 [ 100.219218][ T5303] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 100.225239][ T5303] ? lock_chain_count+0x20/0x20 [ 100.230226][ T5303] ? lockdep_hardirqs_on+0x94/0x140 [ 100.235456][ T5303] do_syscall_64+0x4c/0xa0 [ 100.239877][ T5303] ? clear_bhb_loop+0x30/0x80 [ 100.244560][ T5303] ? clear_bhb_loop+0x30/0x80 [ 100.249243][ T5303] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.255164][ T5303] RIP: 0033:0x7f7c8081c2d9 [ 100.259585][ T5303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.279202][ T5303] RSP: 002b:00007f7c7ea74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 100.287645][ T5303] RAX: ffffffffffffffda RBX: 00007f7c80aa3fa0 RCX: 00007f7c8081c2d9 [ 100.295895][ T5303] RDX: 0000000000000001 RSI: 0000200000006ac0 RDI: 0000000000000007 [ 100.303893][ T5303] RBP: 00007f7c808b3888 R08: 0000000000000000 R09: 0000000000000000 [ 100.311867][ T5303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.319844][ T5303] R13: 00007f7c80aa4038 R14: 00007f7c80aa3fa0 R15: 00007fff287b3268 [ 100.327869][ T5303] [ 100.557992][ T5327] tipc: Started in network mode [ 100.586729][ T5327] tipc: Node identity 26374bbd3c68, cluster identity 4711 [ 100.613208][ T5332] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 100.661177][ T5327] tipc: Enabled bearer , priority 0 [ 100.677935][ T5334] device syzkaller0 entered promiscuous mode [ 100.698155][ T5329] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 100.718751][ T5327] tipc: Resetting bearer [ 100.725050][ T5329] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 100.734312][ T5332] CIFS: Attempting to mount \\127.0.0.1\share [ 100.741774][ T5326] tipc: Resetting bearer [ 100.749236][ T5332] CIFS: VFS: No username specified [ 100.768697][ T5326] tipc: Disabling bearer [ 100.893857][ T1110] Bluetooth: hci5: command 0x1001 tx timeout [ 100.900967][ T146] Bluetooth: hci5: sending frame failed (-49) [ 100.912252][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 101.168783][ T5352] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.7388456), cmd(1) [ 101.259384][ T5354] EXT4-fs warning (device sda1): verify_group_input:168: Reserved blocks too high (12) [ 101.434595][ T5359] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 101.508686][ T5356] kvm: emulating exchange as write [ 101.597345][ T5363] comedi comedi1: rti802: a I/O base address must be specified [ 101.682852][ T9] wlan1: Trigger new scan to find an IBSS to join [ 101.697890][ T5365] tipc: Enabled bearer , priority 0 [ 101.731549][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 101.760651][ T5365] device syzkaller0 entered promiscuous mode [ 101.791827][ T5365] tipc: Resetting bearer [ 101.821328][ T5364] tipc: Resetting bearer [ 101.863593][ T5364] tipc: Disabling bearer [ 101.897926][ T5371] socket: no more sockets [ 101.904203][ T5373] netlink: 104 bytes leftover after parsing attributes in process `syz.1.318'. [ 102.305114][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 102.342853][ T5398] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.452074][ T5402] tipc: Enabled bearer , priority 0 [ 102.472410][ T5402] device syzkaller0 entered promiscuous mode [ 102.508184][ T5402] tipc: Resetting bearer [ 102.530189][ T5401] tipc: Resetting bearer [ 102.556998][ T5401] tipc: Disabling bearer [ 102.613316][ T144] wlan1: Creating new IBSS network, BSSID b6:36:0e:d0:0e:f1 [ 102.690165][ T5406] 9pnet_virtio: no channels available for device syz [ 102.724463][ T5406] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 102.972786][ T1110] Bluetooth: hci5: command 0x1009 tx timeout [ 103.320730][ T5424] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.408239][ T5424] device bridge_slave_0 left promiscuous mode [ 103.425314][ T5424] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.632380][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 103.751331][ T5431] tipc: Enabled bearer , priority 0 [ 103.773729][ T5431] device syzkaller0 entered promiscuous mode [ 103.811514][ T5431] tipc: Resetting bearer [ 103.829908][ T5430] tipc: Resetting bearer [ 103.858836][ T5430] tipc: Disabling bearer [ 104.051986][ T5435] binder: 5434:5435 ioctl c0306201 200000000100 returned -14 [ 104.078225][ T5435] binder: 5434:5435 ioctl c0306201 200000000200 returned -14 [ 104.225195][ T5439] tipc: Enabling of bearer rejected, failed to enable media [ 104.462762][ T1107] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 104.717747][ T5457] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 104.832899][ T1107] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.852709][ T1107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 104.882066][ T1107] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.912707][ T1107] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 104.939486][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.013997][ T1107] hub 5-1:1.0: bad descriptor, ignoring hub [ 105.030177][ T1107] hub: probe of 5-1:1.0 failed with error -5 [ 105.047228][ T1107] cdc_wdm 5-1:1.0: skipping garbage [ 105.066247][ T1107] cdc_wdm 5-1:1.0: skipping garbage [ 105.087214][ T1107] cdc_wdm 5-1:1.0: skipping garbage [ 105.107386][ T1107] cdc_wdm 5-1:1.0: skipping garbage [ 105.129381][ T1107] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 105.332899][ T1107] usb 5-1: USB disconnect, device number 6 [ 105.547279][ T5464] tipc: Enabled bearer , priority 0 [ 105.555376][ T5464] device syzkaller0 entered promiscuous mode [ 105.580183][ T5464] tipc: Resetting bearer [ 105.601226][ T5463] tipc: Resetting bearer [ 105.627720][ T5463] tipc: Disabling bearer [ 106.121468][ T5485] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 106.223742][ T5491] tipc: Enabled bearer , priority 0 [ 106.235661][ T5491] tipc: Resetting bearer [ 106.244927][ T5490] tipc: Disabling bearer [ 106.894909][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 107.015033][ T5515] tipc: Enabled bearer , priority 0 [ 107.024864][ T5515] tipc: Resetting bearer [ 107.033081][ T5514] tipc: Disabling bearer [ 107.285568][ T5528] jffs2: notice: (5528) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.352186][ T5531] o2cb: This node has not been configured. [ 107.389505][ T5531] o2cb: Cluster check failed. Fix errors before retrying. [ 107.412194][ T5535] FAULT_INJECTION: forcing a failure. [ 107.412194][ T5535] name failslab, interval 1, probability 0, space 0, times 0 [ 107.431276][ T5531] (syz.4.387,5531,0):user_dlm_register:675 ERROR: status = -22 [ 107.454799][ T5537] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 107.461968][ T5531] (syz.4.387,5531,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 107.491779][ T5535] CPU: 0 PID: 5535 Comm: syz.3.388 Not tainted syzkaller #0 [ 107.499104][ T5535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.509191][ T5535] Call Trace: [ 107.512479][ T5535] [ 107.515421][ T5535] dump_stack_lvl+0x188/0x250 [ 107.520137][ T5535] ? show_regs_print_info+0x20/0x20 [ 107.525369][ T5535] ? load_image+0x410/0x410 [ 107.529921][ T5535] ? __lock_acquire+0x7d40/0x7d40 [ 107.534986][ T5535] ? __lock_acquire+0x7d40/0x7d40 [ 107.540069][ T5535] ? do_raw_spin_lock+0x128/0x2f0 [ 107.545132][ T5535] should_fail+0x383/0x4b0 [ 107.549580][ T5535] should_failslab+0x5/0x20 [ 107.554093][ T5535] slab_pre_alloc_hook+0x51/0xc0 [ 107.559079][ T5535] __kmalloc_node+0x6d/0x3a0 [ 107.563699][ T5535] ? __vmalloc_node_range+0x2dd/0x8b0 [ 107.569100][ T5535] __vmalloc_node_range+0x2dd/0x8b0 [ 107.574326][ T5535] module_alloc+0x81/0x90 [ 107.578684][ T5535] ? bpf_jit_binary_alloc+0x120/0x240 [ 107.584090][ T5535] bpf_jit_binary_alloc+0x120/0x240 [ 107.589319][ T5535] ? bpf_int_jit_compile+0xc4d0/0xc4d0 [ 107.594790][ T5535] bpf_int_jit_compile+0xb2f5/0xc4d0 [ 107.600109][ T5535] ? kfree+0xef/0x2a0 [ 107.604135][ T5535] ? stack_trace_snprint+0xe0/0xe0 [ 107.609299][ T5535] ? emit_bpf_dispatcher+0x1050/0x1050 [ 107.614828][ T5535] bpf_prog_select_runtime+0x46f/0x7b0 [ 107.620329][ T5535] ? bpf_prog_realloc+0x142/0x1c0 [ 107.625390][ T5535] bpf_prepare_filter+0x100e/0x11b0 [ 107.630628][ T5535] ? seccomp_attach_filter+0xbb0/0xbb0 [ 107.636130][ T5535] ? bpf_prog_create+0x1f0/0x1f0 [ 107.641104][ T5535] ? kmemdup+0x3d/0x50 [ 107.645205][ T5535] ? memcpy+0x3c/0x60 [ 107.649232][ T5535] bpf_prog_create_from_user+0x2cc/0x420 [ 107.654909][ T5535] ? seccomp_attach_filter+0xbb0/0xbb0 [ 107.660523][ T5535] do_seccomp+0x808/0x16a0 [ 107.665010][ T5535] ? __lock_acquire+0x7d40/0x7d40 [ 107.670077][ T5535] ? prctl_set_seccomp+0x60/0x60 [ 107.675029][ T5535] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 107.681056][ T5535] ? lockdep_hardirqs_on+0x94/0x140 [ 107.686298][ T5535] do_syscall_64+0x4c/0xa0 [ 107.690752][ T5535] ? clear_bhb_loop+0x30/0x80 [ 107.695465][ T5535] ? clear_bhb_loop+0x30/0x80 [ 107.700175][ T5535] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.706099][ T5535] RIP: 0033:0x7f0fc5e102d9 [ 107.710548][ T5535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.730187][ T5535] RSP: 002b:00007f0fc4068028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 107.738622][ T5535] RAX: ffffffffffffffda RBX: 00007f0fc6097fa0 RCX: 00007f0fc5e102d9 [ 107.746628][ T5535] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 107.754629][ T5535] RBP: 00007f0fc5ea7888 R08: 0000000000000000 R09: 0000000000000000 [ 107.762811][ T5535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.770829][ T5535] R13: 00007f0fc6098038 R14: 00007f0fc6097fa0 R15: 00007ffde1ea53c8 [ 107.778878][ T5535] [ 107.782042][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.843840][ T5544] netlink: 52 bytes leftover after parsing attributes in process `syz.1.390'. [ 107.951026][ T26] audit: type=1326 audit(1791902303.725:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5546 comm="syz.4.391" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c8081c2d9 code=0x0 [ 108.008691][ T5550] tipc: Enabled bearer , priority 0 [ 108.038509][ T5550] tipc: Resetting bearer [ 108.069201][ T5547] tipc: Disabling bearer [ 108.100110][ T5554] netlink: 'syz.1.394': attribute type 3 has an invalid length. [ 108.116921][ T5554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.394'. [ 108.307993][ T5560] program syz.2.397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.750553][ T4197] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 108.872839][ T5575] netlink: 'syz.3.403': attribute type 39 has an invalid length. [ 109.058015][ T5573] netlink: 64 bytes leftover after parsing attributes in process `syz.4.404'. [ 109.080930][ T5576] device syzkaller1 entered promiscuous mode [ 109.342879][ T5589] loop5: detected capacity change from 0 to 4095 [ 109.370785][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 109.427042][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 109.439324][ C1] blk_update_request: I/O error, dev loop5, sector 1376 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 109.441071][ T5585] kvm [5584]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x80 [ 109.465208][ C1] blk_update_request: I/O error, dev loop5, sector 2408 op 0x0:(READ) flags 0x80700 phys_seg 19 prio class 0 [ 109.477148][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.488339][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.505074][ T5585] kvm [5584]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 109.531901][ T5585] kvm [5584]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 109.559236][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 109.579866][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 109.584947][ T5585] kvm [5584]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 109.923572][ T4197] Bluetooth: hci4: link tx timeout [ 109.929208][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.061220][ T5601] device syzkaller0 entered promiscuous mode [ 110.349301][ T5608] device syzkaller0 entered promiscuous mode [ 110.545547][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 111.247106][ T5618] binder: 5617:5618 ioctl c00c620f 200000002240 returned -22 [ 111.320691][ T5624] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 111.852815][ T1110] Bluetooth: hci5: command 0x1003 tx timeout [ 111.858932][ T146] Bluetooth: hci5: sending frame failed (-49) [ 112.012917][ T1110] Bluetooth: hci6: command 0xfc11 tx timeout [ 112.019120][ T4197] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 112.175775][ T5640] device syzkaller0 entered promiscuous mode [ 112.361862][ T5646] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 113.136914][ T5678] overlayfs: unrecognized mount option "smackfsroot=\^" or missing value [ 113.274879][ T5692] 9pnet_virtio: no channels available for device syz [ 113.424270][ T4237] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.465437][ T5699] device syzkaller0 entered promiscuous mode [ 113.802913][ T4237] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 113.913000][ T4237] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 113.932929][ T1110] Bluetooth: hci5: command 0x1001 tx timeout [ 113.939064][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 114.092900][ T4237] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 114.111115][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.137270][ T4237] usb 1-1: Product: syz [ 114.150566][ T4237] usb 1-1: Manufacturer: syz [ 114.166756][ T4237] usb 1-1: SerialNumber: syz [ 114.224425][ T4237] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 114.249078][ T4237] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 114.284165][ T4237] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 114.730463][ T4345] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 114.758377][ T4345] Bluetooth: hci4: Injecting HCI hardware error event [ 114.766110][ T4197] Bluetooth: hci4: hardware error 0x00 [ 115.100115][ T5738] qnx6: wrong signature (magic) in superblock #1. [ 115.395269][ T5750] device syzkaller0 entered promiscuous mode [ 115.692252][ T4241] wlan1: Trigger new scan to find an IBSS to join [ 116.019703][ T4345] Bluetooth: hci5: command 0x1009 tx timeout [ 116.677726][ T13] usb 1-1: USB disconnect, device number 7 [ 116.683730][ C0] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 116.683852][ C0] usb 1-1: ti_interrupt_callback - resubmit interrupt urb failed, -19 [ 116.683897][ C0] usb 1-1: ti_bulk_in_callback - nonzero urb status, -71 [ 116.683917][ C0] usb 1-1: ti_bulk_in_callback - stopping read! [ 116.713299][ T5675] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -71 [ 116.842966][ T5675] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -19 [ 116.873857][ T13] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 116.923122][ T13] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 116.965242][ T13] ti_usb_3410_5052 1-1:2.0: device disconnected [ 117.065705][ T5824] device syzkaller0 entered promiscuous mode [ 117.246990][ T5831] device syzkaller0 entered promiscuous mode [ 117.274597][ T5831] tipc: Enabled bearer , priority 0 [ 117.312855][ T5830] tipc: Resetting bearer [ 117.384148][ T5830] tipc: Disabling bearer [ 117.538742][ T1107] hid-generic 0005:057E:2017.0001: No inputs registered, leaving [ 117.571559][ T1107] hid-generic 0005:057E:2017.0001: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 117.651275][ T5862] udevd[5862]: open /dev/null failed: No such file or directory [ 117.803295][ T5870] FAULT_INJECTION: forcing a failure. [ 117.803295][ T5870] name failslab, interval 1, probability 0, space 0, times 0 [ 117.871531][ T5870] CPU: 0 PID: 5870 Comm: syz.0.479 Not tainted syzkaller #0 [ 117.878920][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.889015][ T5870] Call Trace: [ 117.892334][ T5870] [ 117.895296][ T5870] dump_stack_lvl+0x188/0x250 [ 117.900019][ T5870] ? show_regs_print_info+0x20/0x20 [ 117.905269][ T5870] ? load_image+0x410/0x410 [ 117.909816][ T5870] ? __might_sleep+0xf0/0xf0 [ 117.914459][ T5870] ? __lock_acquire+0x7d40/0x7d40 [ 117.919540][ T5870] should_fail+0x383/0x4b0 [ 117.923994][ T5870] should_failslab+0x5/0x20 [ 117.928545][ T5870] slab_pre_alloc_hook+0x51/0xc0 [ 117.933519][ T5870] kmem_cache_alloc_trace+0x47/0x290 [ 117.938840][ T5870] ? __list_lru_init+0x535/0xac0 [ 117.943902][ T5870] __list_lru_init+0x535/0xac0 [ 117.948746][ T5870] alloc_super+0x787/0x970 [ 117.953240][ T5870] ? kill_litter_super+0xa0/0xa0 [ 117.958247][ T5870] sget_fc+0x2d4/0x6f0 [ 117.962352][ T5870] ? kill_litter_super+0xa0/0xa0 [ 117.967329][ T5870] ? shmem_reconfigure+0x790/0x790 [ 117.972486][ T5870] get_tree_nodev+0x26/0x160 [ 117.977114][ T5870] vfs_get_tree+0x88/0x270 [ 117.981570][ T5870] do_new_mount+0x247/0xa40 [ 117.986123][ T5870] __se_sys_mount+0x2e3/0x3d0 [ 117.990846][ T5870] ? __x64_sys_mount+0xc0/0xc0 [ 117.995651][ T5870] ? lockdep_hardirqs_on+0x94/0x140 [ 118.000888][ T5870] ? __x64_sys_mount+0x1c/0xc0 [ 118.005784][ T5870] do_syscall_64+0x4c/0xa0 [ 118.010239][ T5870] ? clear_bhb_loop+0x30/0x80 [ 118.014962][ T5870] ? clear_bhb_loop+0x30/0x80 [ 118.019705][ T5870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.022870][ T1110] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 118.025640][ T5870] RIP: 0033:0x7fad646972d9 [ 118.038335][ T5870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.053175][ T1110] Bluetooth: hci1: Injecting HCI hardware error event [ 118.057977][ T5870] RSP: 002b:00007fad628ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.073189][ T5870] RAX: ffffffffffffffda RBX: 00007fad6491efa0 RCX: 00007fad646972d9 [ 118.081202][ T5870] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 118.089213][ T5870] RBP: 00007fad6472e888 R08: 0000000000000000 R09: 0000000000000000 [ 118.097218][ T5870] R10: 0000000002200cd0 R11: 0000000000000246 R12: 0000000000000000 [ 118.105227][ T5870] R13: 00007fad6491f038 R14: 00007fad6491efa0 R15: 00007ffc6db8bfb8 [ 118.107028][ T146] Bluetooth: hci1: hardware error 0x00 [ 118.113250][ T5870] [ 118.398348][ T5893] device syzkaller0 entered promiscuous mode [ 118.841244][ T5920] FAULT_INJECTION: forcing a failure. [ 118.841244][ T5920] name failslab, interval 1, probability 0, space 0, times 0 [ 118.887755][ T5920] CPU: 0 PID: 5920 Comm: syz.0.486 Not tainted syzkaller #0 [ 118.895109][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.905208][ T5920] Call Trace: [ 118.908520][ T5920] [ 118.911490][ T5920] dump_stack_lvl+0x188/0x250 [ 118.916214][ T5920] ? show_regs_print_info+0x20/0x20 [ 118.921488][ T5920] ? load_image+0x410/0x410 [ 118.926038][ T5920] ? __lock_acquire+0x7d40/0x7d40 [ 118.931119][ T5920] should_fail+0x383/0x4b0 [ 118.935588][ T5920] should_failslab+0x5/0x20 [ 118.940125][ T5920] slab_pre_alloc_hook+0x51/0xc0 [ 118.945106][ T5920] __kmalloc_node+0x6d/0x3a0 [ 118.949730][ T5920] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 118.955752][ T5920] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 118.961598][ T5920] slab_post_alloc_hook+0xba/0x380 [ 118.966784][ T5920] __kmalloc+0x189/0x340 [ 118.971060][ T5920] ? fanotify_handle_event+0x22b5/0x37f0 [ 118.976747][ T5920] fanotify_handle_event+0x22b5/0x37f0 [ 118.982266][ T5920] ? local_lock_release+0x170/0x170 [ 118.987515][ T5920] ? __lock_acquire+0x13b3/0x7d40 [ 118.992585][ T5920] ? read_lock_is_recursive+0x10/0x10 [ 118.998010][ T5920] ? local_lock_release+0x170/0x170 [ 119.003248][ T5920] fsnotify+0x1153/0x1d70 [ 119.007633][ T5920] ? fsnotify_clear_child_dentry_flag+0xe0/0xe0 [ 119.013919][ T5920] ? take_dentry_name_snapshot+0x8e/0xf0 [ 119.019623][ T5920] ? do_raw_spin_unlock+0x11d/0x230 [ 119.024954][ T5920] __fsnotify_parent+0x683/0x820 [ 119.029947][ T5920] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 119.036587][ T5920] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 119.042642][ T5920] ? lock_chain_count+0x20/0x20 [ 119.047546][ T5920] __fput+0x6ab/0x8c0 [ 119.051574][ T5920] task_work_run+0x125/0x1a0 [ 119.056294][ T5920] exit_to_user_mode_loop+0x10f/0x130 [ 119.061708][ T5920] exit_to_user_mode_prepare+0xee/0x180 [ 119.067334][ T5920] syscall_exit_to_user_mode+0x16/0x40 [ 119.072915][ T5920] do_syscall_64+0x58/0xa0 [ 119.077369][ T5920] ? clear_bhb_loop+0x30/0x80 [ 119.082085][ T5920] ? clear_bhb_loop+0x30/0x80 [ 119.086807][ T5920] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.093012][ T5920] RIP: 0033:0x7fad646972d9 [ 119.097462][ T5920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.117102][ T5920] RSP: 002b:00007fad628ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 119.125560][ T5920] RAX: 0000000000000000 RBX: 00007fad6491efa0 RCX: 00007fad646972d9 [ 119.133589][ T5920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 119.141780][ T5920] RBP: 00007fad6472e888 R08: 0000000000000000 R09: 0000000000000000 [ 119.149796][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.157803][ T5920] R13: 00007fad6491f038 R14: 00007fad6491efa0 R15: 00007ffc6db8bfb8 [ 119.165831][ T5920] [ 120.075823][ T5978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.499'. [ 120.325836][ T5988] FAULT_INJECTION: forcing a failure. [ 120.325836][ T5988] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 120.340360][ T5988] CPU: 0 PID: 5988 Comm: syz.1.502 Not tainted syzkaller #0 [ 120.347686][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.357775][ T5988] Call Trace: [ 120.361088][ T5988] [ 120.364060][ T5988] dump_stack_lvl+0x188/0x250 [ 120.368771][ T5988] ? verify_lock_unused+0x140/0x140 [ 120.374012][ T5988] ? show_regs_print_info+0x20/0x20 [ 120.379249][ T5988] ? load_image+0x410/0x410 [ 120.383800][ T5988] should_fail+0x383/0x4b0 [ 120.388284][ T5988] prepare_alloc_pages+0x1e3/0x5b0 [ 120.393449][ T5988] __alloc_pages+0x11b/0x480 [ 120.398081][ T5988] ? zone_statistics+0x170/0x170 [ 120.403170][ T5988] ? rcu_lock_acquire+0x30/0x30 [ 120.408075][ T5988] ? alloc_pages+0x452/0x560 [ 120.412705][ T5988] __get_free_pages+0x8/0x30 [ 120.417345][ T5988] __tlb_remove_page_size+0x1f2/0x3f0 [ 120.422855][ T5988] unmap_page_range+0xfcf/0x2410 [ 120.427862][ T5988] unmap_vmas+0x131/0x250 [ 120.432228][ T5988] ? unmap_page_range+0x2410/0x2410 [ 120.437462][ T5988] ? __mutex_lock_common+0x435/0x2400 [ 120.442878][ T5988] ? exit_mm_release+0x16/0x30 [ 120.447801][ T5988] exit_mmap+0x3b9/0x640 [ 120.452085][ T5988] ? vm_brk+0x20/0x20 [ 120.456194][ T5988] ? uprobe_clear_state+0x2f6/0x460 [ 120.461440][ T5988] __mmput+0x115/0x390 [ 120.465574][ T5988] exit_mm+0x632/0x7b0 [ 120.469670][ T5988] ? perf_pmu_migrate_context+0xb70/0xb70 [ 120.475439][ T5988] ? do_exit+0x2110/0x2110 [ 120.479887][ T5988] ? __ia32_sys_timer_delete+0x40/0x40 [ 120.485378][ T5988] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 120.490877][ T5988] ? tty_audit_exit+0x149/0x1f0 [ 120.495767][ T5988] do_exit+0x5b8/0x2110 [ 120.499961][ T5988] ? put_task_struct+0x80/0x80 [ 120.504758][ T5988] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.511214][ T5988] ? cgroup_freezing+0x264/0x310 [ 120.516200][ T5988] do_group_exit+0x12c/0x2f0 [ 120.520826][ T5988] ? lockdep_hardirqs_on+0x94/0x140 [ 120.526093][ T5988] get_signal+0x7eb/0x12e0 [ 120.530571][ T5988] arch_do_signal_or_restart+0xe6/0x12a0 [ 120.536261][ T5988] ? futex_exit_release+0x1c0/0x1c0 [ 120.541506][ T5988] ? get_sigframe_size+0x10/0x10 [ 120.546485][ T5988] ? __context_tracking_exit+0x4c/0x80 [ 120.552074][ T5988] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.558127][ T5988] ? exit_to_user_mode_loop+0x3b/0x130 [ 120.563629][ T5988] exit_to_user_mode_loop+0x9e/0x130 [ 120.568945][ T5988] exit_to_user_mode_prepare+0xee/0x180 [ 120.574525][ T5988] syscall_exit_to_user_mode+0x16/0x40 [ 120.580034][ T5988] do_syscall_64+0x58/0xa0 [ 120.584515][ T5988] ? clear_bhb_loop+0x30/0x80 [ 120.589228][ T5988] ? clear_bhb_loop+0x30/0x80 [ 120.593948][ T5988] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.599879][ T5988] RIP: 0033:0x7f15c5c362d9 [ 120.604322][ T5988] Code: Unable to access opcode bytes at RIP 0x7f15c5c362af. [ 120.611715][ T5988] RSP: 002b:00007f15c3e8e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.620161][ T5988] RAX: fffffffffffffe00 RBX: 00007f15c5ebdfa8 RCX: 00007f15c5c362d9 [ 120.628295][ T5988] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f15c5ebdfa8 [ 120.636311][ T5988] RBP: 00007f15c5ebdfa0 R08: 0000000000000000 R09: 0000000000000000 [ 120.644326][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.646246][ T4241] wlan1: Trigger new scan to find an IBSS to join [ 120.652327][ T5988] R13: 00007f15c5ebe038 R14: 00007fff4d9078a0 R15: 00007fff4d907988 [ 120.666753][ T5988] [ 120.886593][ T6014] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode 802.3ad(4) [ 121.298880][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 121.487420][ T6049] loop2: detected capacity change from 0 to 512 [ 121.525919][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 121.551283][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 121.650235][ T1172] wlan1: Creating new IBSS network, BSSID 8e:9b:ba:ab:eb:f8 [ 121.658204][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan3: link becomes ready [ 121.736541][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 121.755906][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 122.445392][ T6093] FAULT_INJECTION: forcing a failure. [ 122.445392][ T6093] name failslab, interval 1, probability 0, space 0, times 0 [ 122.509502][ T6093] CPU: 0 PID: 6093 Comm: syz.2.530 Not tainted syzkaller #0 [ 122.516863][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.526954][ T6093] Call Trace: [ 122.530290][ T6093] [ 122.533257][ T6093] dump_stack_lvl+0x188/0x250 [ 122.537986][ T6093] ? show_regs_print_info+0x20/0x20 [ 122.543221][ T6093] ? load_image+0x410/0x410 [ 122.547768][ T6093] ? __lock_acquire+0x7d40/0x7d40 [ 122.552842][ T6093] should_fail+0x383/0x4b0 [ 122.557311][ T6093] should_failslab+0x5/0x20 [ 122.561853][ T6093] slab_pre_alloc_hook+0x51/0xc0 [ 122.566839][ T6093] ? prepare_creds+0x3c/0x610 [ 122.571565][ T6093] kmem_cache_alloc+0x3d/0x280 [ 122.576369][ T6093] prepare_creds+0x3c/0x610 [ 122.580997][ T6093] prepare_exec_creds+0x14/0x220 [ 122.585971][ T6093] bprm_execve+0xf1/0x1740 [ 122.590447][ T6093] ? get_arg_page+0x2b6/0x350 [ 122.595130][ T6093] ? copy_string_kernel+0x280/0x280 [ 122.600330][ T6093] ? up_write+0x1b6/0x410 [ 122.604797][ T6093] ? copy_strings+0x411/0x4b0 [ 122.609531][ T6093] ? alloc_bprm+0x690/0x690 [ 122.614086][ T6093] ? put_arg_page+0xe1/0x200 [ 122.618733][ T6093] ? copy_string_kernel+0x26c/0x280 [ 122.623959][ T6093] do_execveat_common+0x504/0x6b0 [ 122.628999][ T6093] __x64_sys_execve+0x8e/0xa0 [ 122.633687][ T6093] do_syscall_64+0x4c/0xa0 [ 122.638109][ T6093] ? clear_bhb_loop+0x30/0x80 [ 122.642790][ T6093] ? clear_bhb_loop+0x30/0x80 [ 122.647470][ T6093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.653371][ T6093] RIP: 0033:0x7fb166b9c2d9 [ 122.657838][ T6093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.677465][ T6093] RSP: 002b:00007fb164df4028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 122.685882][ T6093] RAX: ffffffffffffffda RBX: 00007fb166e23fa0 RCX: 00007fb166b9c2d9 [ 122.693859][ T6093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000007c0 [ 122.701853][ T6093] RBP: 00007fb166c33888 R08: 0000000000000000 R09: 0000000000000000 [ 122.709834][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.717829][ T6093] R13: 00007fb166e24038 R14: 00007fb166e23fa0 R15: 00007ffc345782b8 [ 122.725820][ T6093] [ 123.128580][ T26] audit: type=1326 audit(1791902318.905:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.3.536" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc5e102d9 code=0x7ffc0000 [ 123.155050][ T6115] tipc: Enabled bearer , priority 0 [ 123.162937][ T26] audit: type=1326 audit(1791902318.905:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.3.536" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc5e102d9 code=0x7ffc0000 [ 123.192129][ T26] audit: type=1326 audit(1791902318.905:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.3.536" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f0fc5dcc72c code=0x7ffc0000 [ 123.224410][ T26] audit: type=1326 audit(1791902318.905:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.3.536" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0fc5dcc78e code=0x7ffc0000 [ 123.254369][ T26] audit: type=1326 audit(1791902318.905:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.3.536" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fc5e0ff6b code=0x7ffc0000 [ 123.286433][ T26] audit: type=1326 audit(1791902318.905:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.3.536" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0fc5dd0b0e code=0x7ffc0000 [ 123.319216][ T26] audit: type=1326 audit(1791902318.905:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.3.536" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc5e102d9 code=0x7ffc0000 [ 123.352762][ T6114] tipc: Disabling bearer [ 123.357765][ T26] audit: type=1326 audit(1791902318.905:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.3.536" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc5e102d9 code=0x7ffc0000 [ 123.391770][ T26] audit: type=1326 audit(1791902318.925:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.3.536" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc5e102d9 code=0x7ffc0000 [ 123.423875][ T26] audit: type=1326 audit(1791902318.935:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.3.536" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0fc5e102d9 code=0x7ffc0000 [ 123.578391][ T6122] FAULT_INJECTION: forcing a failure. [ 123.578391][ T6122] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 123.663196][ T6122] CPU: 0 PID: 6122 Comm: syz.4.540 Not tainted syzkaller #0 [ 123.670678][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.680743][ T6122] Call Trace: [ 123.684025][ T6122] [ 123.686963][ T6122] dump_stack_lvl+0x188/0x250 [ 123.691652][ T6122] ? show_regs_print_info+0x20/0x20 [ 123.696865][ T6122] ? load_image+0x410/0x410 [ 123.701471][ T6122] ? __lock_acquire+0x7d40/0x7d40 [ 123.706508][ T6122] should_fail+0x383/0x4b0 [ 123.710932][ T6122] prepare_alloc_pages+0x1e3/0x5b0 [ 123.716170][ T6122] __alloc_pages+0x11b/0x480 [ 123.720802][ T6122] ? zone_statistics+0x170/0x170 [ 123.725779][ T6122] ? alloc_pages+0x452/0x560 [ 123.730407][ T6122] pte_alloc_one+0x7b/0x310 [ 123.734957][ T6122] ? rcu_lock_release+0x20/0x20 [ 123.739836][ T6122] ? count_memcg_event_mm+0x324/0x370 [ 123.745214][ T6122] ? remove_device_exclusive_entry+0xac0/0xac0 [ 123.751368][ T6122] ? __lock_acquire+0x13b3/0x7d40 [ 123.756399][ T6122] __pte_alloc+0x21/0x150 [ 123.760880][ T6122] handle_mm_fault+0x39d9/0x4440 [ 123.765852][ T6122] ? get_page+0xe0/0xe0 [ 123.770068][ T6122] ? vmacache_find+0x4f0/0x590 [ 123.774871][ T6122] ? vmacache_update+0xa0/0x100 [ 123.779758][ T6122] ? find_vma+0x1df/0x230 [ 123.784127][ T6122] do_user_addr_fault+0x494/0xc90 [ 123.789194][ T6122] exc_page_fault+0x60/0x100 [ 123.793800][ T6122] asm_exc_page_fault+0x22/0x30 [ 123.798677][ T6122] RIP: 0010:strncpy_from_user+0x160/0x350 [ 123.804404][ T6122] Code: 00 00 00 4c 89 e6 e8 ff 61 70 fd 49 83 fc 07 0f 86 9a 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 2c 07 4d 89 fe 49 [ 123.824024][ T6122] RSP: 0018:ffffc900015cfd40 EFLAGS: 00050246 [ 123.830130][ T6122] RAX: ffffffff8408c541 RBX: ffff88801c3d2220 RCX: ffff88807be45940 [ 123.838123][ T6122] RDX: 0000000000000002 RSI: 0000000000000fe0 RDI: 0000000000000007 [ 123.846093][ T6122] RBP: 0000000000000fe0 R08: 0000000000000fe0 R09: 0000000000000020 [ 123.854068][ T6122] R10: dffffc0000000000 R11: fffff940000e1e81 R12: 0000000000000fe0 [ 123.862076][ T6122] R13: 0000000000000000 R14: 0000000000000fe0 R15: 0000000000000000 [ 123.870072][ T6122] ? strncpy_from_user+0x141/0x350 [ 123.875322][ T6122] getname_flags+0xf2/0x4f0 [ 123.879866][ T6122] do_sys_openat2+0xdd/0x500 [ 123.884480][ T6122] ? __lock_acquire+0x7d40/0x7d40 [ 123.889528][ T6122] ? do_sys_open+0xe0/0xe0 [ 123.893949][ T6122] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.900038][ T6122] ? lock_chain_count+0x20/0x20 [ 123.904907][ T6122] __x64_sys_openat+0x135/0x160 [ 123.909765][ T6122] do_syscall_64+0x4c/0xa0 [ 123.914190][ T6122] ? clear_bhb_loop+0x30/0x80 [ 123.918908][ T6122] ? clear_bhb_loop+0x30/0x80 [ 123.923627][ T6122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.929564][ T6122] RIP: 0033:0x7f7c8081c2d9 [ 123.934002][ T6122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.953623][ T6122] RSP: 002b:00007f7c7ea74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 123.962042][ T6122] RAX: ffffffffffffffda RBX: 00007f7c80aa3fa0 RCX: 00007f7c8081c2d9 [ 123.970021][ T6122] RDX: 00000000000a0000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 123.978029][ T6122] RBP: 00007f7c808b3888 R08: 0000000000000000 R09: 0000000000000000 [ 123.986004][ T6122] R10: 0000000000000199 R11: 0000000000000246 R12: 0000000000000000 [ 123.993981][ T6122] R13: 00007f7c80aa4038 R14: 00007f7c80aa3fa0 R15: 00007fff287b3268 [ 124.001964][ T6122] [ 124.176423][ T6132] FAULT_INJECTION: forcing a failure. [ 124.176423][ T6132] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.242992][ T6132] CPU: 0 PID: 6132 Comm: syz.2.543 Not tainted syzkaller #0 [ 124.250346][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.260402][ T6132] Call Trace: [ 124.263712][ T6132] [ 124.266642][ T6132] dump_stack_lvl+0x188/0x250 [ 124.271326][ T6132] ? show_regs_print_info+0x20/0x20 [ 124.276526][ T6132] ? load_image+0x410/0x410 [ 124.281260][ T6132] ? __lock_acquire+0x7d40/0x7d40 [ 124.286305][ T6132] should_fail+0x383/0x4b0 [ 124.290760][ T6132] _copy_from_user+0x2e/0x170 [ 124.295480][ T6132] __se_sys_sendfile64+0xa9/0x1a0 [ 124.300559][ T6132] ? lock_chain_count+0x20/0x20 [ 124.305443][ T6132] ? __x64_sys_sendfile64+0xa0/0xa0 [ 124.310672][ T6132] ? lockdep_hardirqs_on+0x94/0x140 [ 124.315881][ T6132] do_syscall_64+0x4c/0xa0 [ 124.320306][ T6132] ? clear_bhb_loop+0x30/0x80 [ 124.324986][ T6132] ? clear_bhb_loop+0x30/0x80 [ 124.329669][ T6132] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.335564][ T6132] RIP: 0033:0x7fb166b9c2d9 [ 124.340008][ T6132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.359651][ T6132] RSP: 002b:00007fb164df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 124.368104][ T6132] RAX: ffffffffffffffda RBX: 00007fb166e23fa0 RCX: 00007fb166b9c2d9 [ 124.376114][ T6132] RDX: 0000200000000180 RSI: 0000000000000003 RDI: 0000000000000003 [ 124.384103][ T6132] RBP: 00007fb166c33888 R08: 0000000000000000 R09: 0000000000000000 [ 124.392138][ T6132] R10: 8000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 124.400149][ T6132] R13: 00007fb166e24038 R14: 00007fb166e23fa0 R15: 00007ffc345782b8 [ 124.408172][ T6132] [ 124.992276][ T6145] loop0: detected capacity change from 0 to 512 [ 125.152181][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 125.575163][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 125.588251][ T6179] tipc: Enabled bearer , priority 0 [ 125.616649][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 125.647284][ T6178] tipc: Disabling bearer [ 125.827479][ T6190] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 126.607006][ T6226] loop3: detected capacity change from 0 to 164 [ 126.715973][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 126.721713][ T6235] tipc: Enabled bearer , priority 0 [ 126.776181][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 126.815581][ T6234] tipc: Disabling bearer [ 126.838359][ T6226] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 127.147272][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 127.166586][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 127.698647][ T6286] fuse: root generation should be zero [ 127.867255][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 127.929580][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 127.944376][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 128.086378][ T6292] tipc: Enabled bearer , priority 0 [ 128.173559][ T6291] tipc: Disabling bearer [ 129.248923][ T6335] FAULT_INJECTION: forcing a failure. [ 129.248923][ T6335] name failslab, interval 1, probability 0, space 0, times 0 [ 129.323164][ T6335] CPU: 0 PID: 6335 Comm: syz.2.595 Not tainted syzkaller #0 [ 129.330484][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.340546][ T6335] Call Trace: [ 129.343833][ T6335] [ 129.346773][ T6335] dump_stack_lvl+0x188/0x250 [ 129.351491][ T6335] ? show_regs_print_info+0x20/0x20 [ 129.356705][ T6335] ? load_image+0x410/0x410 [ 129.361245][ T6335] ? __lock_acquire+0x7d40/0x7d40 [ 129.366399][ T6335] should_fail+0x383/0x4b0 [ 129.370838][ T6335] should_failslab+0x5/0x20 [ 129.375357][ T6335] slab_pre_alloc_hook+0x51/0xc0 [ 129.380303][ T6335] ? __anon_vma_prepare+0xb6/0x430 [ 129.385431][ T6335] kmem_cache_alloc+0x3d/0x280 [ 129.390250][ T6335] ? find_mergeable_anon_vma+0x388/0x590 [ 129.395932][ T6335] __anon_vma_prepare+0xb6/0x430 [ 129.400908][ T6335] ? __pte_alloc+0x10f/0x150 [ 129.405615][ T6335] handle_mm_fault+0x3c1b/0x4440 [ 129.410572][ T6335] ? get_page+0xe0/0xe0 [ 129.414733][ T6335] ? follow_page_mask+0x272/0x12b0 [ 129.419878][ T6335] ? vma_is_secretmem+0x9/0x40 [ 129.424646][ T6335] ? check_vma_flags+0x359/0x470 [ 129.429607][ T6335] __get_user_pages+0x952/0x11e0 [ 129.434583][ T6335] ? populate_vma_page_range+0x290/0x290 [ 129.440267][ T6335] ? __might_sleep+0xf0/0xf0 [ 129.444897][ T6335] ? read_lock_is_recursive+0x10/0x10 [ 129.450350][ T6335] __get_user_pages_remote+0x1c2/0x730 [ 129.455976][ T6335] ? get_user_pages_remote+0x55/0xa0 [ 129.461277][ T6335] get_arg_page+0x11b/0x350 [ 129.465855][ T6335] ? copy_string_kernel+0x280/0x280 [ 129.471067][ T6335] ? up_write+0x1b6/0x410 [ 129.475460][ T6335] copy_string_kernel+0x14d/0x280 [ 129.480543][ T6335] do_execveat_common+0x360/0x6b0 [ 129.485630][ T6335] __x64_sys_execve+0x8e/0xa0 [ 129.490346][ T6335] do_syscall_64+0x4c/0xa0 [ 129.494801][ T6335] ? clear_bhb_loop+0x30/0x80 [ 129.499511][ T6335] ? clear_bhb_loop+0x30/0x80 [ 129.504245][ T6335] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.510173][ T6335] RIP: 0033:0x7fb166b9c2d9 [ 129.514592][ T6335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.533194][ T4345] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 129.534210][ T6335] RSP: 002b:00007fb164df4028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 129.550924][ T6335] RAX: ffffffffffffffda RBX: 00007fb166e23fa0 RCX: 00007fb166b9c2d9 [ 129.552624][ T4345] Bluetooth: hci0: Injecting HCI hardware error event [ 129.558926][ T6335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000007c0 [ 129.573857][ T6335] RBP: 00007fb166c33888 R08: 0000000000000000 R09: 0000000000000000 [ 129.581865][ T6335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.583879][ T146] Bluetooth: hci0: hardware error 0x00 [ 129.589867][ T6335] R13: 00007fb166e24038 R14: 00007fb166e23fa0 R15: 00007ffc345782b8 [ 129.589905][ T6335] [ 129.659549][ T6338] tipc: Enabled bearer , priority 0 [ 129.667727][ T4197] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 129.699296][ T6337] tipc: Disabling bearer [ 129.854080][ T6348] loop4: detected capacity change from 0 to 128 [ 129.930896][ T6348] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 129.947938][ T6353] loop0: detected capacity change from 0 to 16 [ 130.011917][ T6353] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 130.043784][ T4241] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.473164][ T6374] tipc: Enabled bearer , priority 0 [ 130.525748][ T6373] tipc: Disabling bearer [ 131.224631][ T26] kauditd_printk_skb: 73 callbacks suppressed [ 131.224647][ T26] audit: type=1326 audit(1791902327.005:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c5c362d9 code=0x7ffc0000 [ 131.259852][ T26] audit: type=1326 audit(1791902327.025:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c5c362d9 code=0x7ffc0000 [ 131.291067][ T26] audit: type=1326 audit(1791902327.025:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c5c362d9 code=0x7ffc0000 [ 131.321520][ T26] audit: type=1326 audit(1791902327.025:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c5c362d9 code=0x7ffc0000 [ 131.353378][ T26] audit: type=1326 audit(1791902327.025:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f15c5c362d9 code=0x7ffc0000 [ 131.384880][ T26] audit: type=1326 audit(1791902327.025:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c5c362d9 code=0x7ffc0000 [ 131.415599][ T26] audit: type=1326 audit(1791902327.025:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c5c362d9 code=0x7ffc0000 [ 131.450204][ T26] audit: type=1326 audit(1791902327.025:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c5c362d9 code=0x7ffc0000 [ 131.521150][ T26] audit: type=1326 audit(1791902327.025:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c5c362d9 code=0x7ffc0000 [ 131.574436][ T26] audit: type=1326 audit(1791902327.035:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f15c5c362d9 code=0x7ffc0000 [ 131.607955][ T6416] tipc: Enabling of bearer rejected, failed to enable media [ 132.184003][ T6444] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 132.232351][ T6444] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 132.539475][ T4197] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 132.646276][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.653039][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.048897][ T6506] printk: console [ttyS0] disabled SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=713 state=3 status=67 (errno 9: Bad file descriptor)