last executing test programs: 8.698313471s ago: executing program 1 (id=4214): sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x840) shutdown(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) syz_usb_connect(0x5, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004349cd08b82225643a09010203010902460001050510010904360600020a0000052406000005260004000d240f010000000043ea4e66020524060001052400fbff0d240f0167"], 0x0) 7.166058721s ago: executing program 0 (id=4227): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0880, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.081473176s ago: executing program 1 (id=4228): unshare(0x2c020400) r0 = socket$inet6(0xa, 0x2, 0x0) setuid(0xee01) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)=ANY=[@ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x4008004) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510001c00e600000702907848b400e8ac1414aa12ff9078ac14142b"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES8=r4], &(0x7f00000000c0)=""/3, 0x42, 0x3, 0x0, 0x400fc}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 5.697284073s ago: executing program 0 (id=4231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() accept4$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x80800) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) setxattr$security_ima(&(0x7f0000000480)='./file7\x00', 0x0, 0x0, 0x0, 0x1) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200e32000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.51320966s ago: executing program 3 (id=4234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 5.436658054s ago: executing program 1 (id=4235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a09000000000000000000020000000900020073797a32000000000800044004"], 0x64}, 0x1, 0x0, 0x0, 0x44810}, 0x4000000) 4.441646834s ago: executing program 0 (id=4236): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000840)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'M{\xab\x11\xd3\v~uZSza\x84\\\x05\xae\xc4\xab\xdeo\x95\xad\x8f\xff%r/\xaa\xd3\xf1\xe2\xc9\xb3o\xf9B\xc4H\xe6\xd2k}\xf8\x90\x13\x8e\x90v-\xb8\xb6\xaf\xf1\xf2j\x1f\xe3\xd1\x96\x18WJ\xa2\x8d2S\x94\xe0\xa0x\xf7\x8f\x7f\xb9\xa3\x06BX\xffA\x85\xbf\x86\xb4U\xdfs:\xfb\xc6V\xbf\x80\xbd\x88\xc4\xea\xde\xdc6\x11\x8ap\xc4(\f\x1b)^\xb2,\x82\xee\xc8yx\xe8\xd9D`\xfe\x02\x81h\x88\xaa24\xf5\xba\xee\xdc\xfc\xb3,^\x9a\xfa\x12\xe6\x98\xc7*\x8a)\xad\xa7;Z\x1d\x9dG\b\x9bz\xcb_b\x1fO\xb8\x88L\xfd\x91\xf3\x14\xc1\xf0\xaes\x80\x82\x03\xb1\xf7\xef\xc1j\t\xd8_\xecPR5g\xee5\x8c<\a\xd9\x0f\xdc\xe36^w\xeb\x8ed`L\x0ed\x11^F<\xcbW\xec\"\xf9\xd2\x0e_OT@\xc6\x16\xb0\xeb\x03\x8f^\xf0\xcd\xaf\xfc\xedBo\xe8\xfb\'\xa9\xbas\xdd\xd4\xcc\xed\x84\xbc\xf4\x9bT\xe0\x9b\xdfW\x10h\x90\x17_\xc61\x9cLT}\xdc\x8c\x91\xcf\xbf\xef@\x1ft\xb6YX9\xe8\xad\xb0T\xba<\x9fNe\xf6\x9a\x9cAY\x00&?\xb6\xb0e\fR\xcdW\xe9\x92', 0x3a, '%*', 0x3a, './file0'}, 0x159) 4.441330353s ago: executing program 3 (id=4237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000980000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0x5, 0xfff8, 0x4, 0x3}}) socket(0x25, 0x5, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.222123707s ago: executing program 2 (id=4239): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 4.136450503s ago: executing program 0 (id=4240): unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x3ff, 0x1800}], 0x1, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) 4.07398121s ago: executing program 1 (id=4241): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0880, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.995202694s ago: executing program 3 (id=4242): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x60000013}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) epoll_pwait(r1, &(0x7f0000000240)=[{}, {}], 0x2, 0x3, 0x0, 0x0) 3.973995343s ago: executing program 2 (id=4243): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(0xffffffffffffffff) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 3.424707328s ago: executing program 2 (id=4244): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x24, 0x14, 0x20, 0x0, 0x25dfdbfd, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "ad2d1ed3e814f3d0f6"}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) 3.192228964s ago: executing program 0 (id=4245): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100}, 0x0) close(0xffffffffffffffff) close(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_read(r3, 0x0, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x40080) 2.8185799s ago: executing program 4 (id=4246): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() accept4$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x80800) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) setxattr$security_ima(&(0x7f0000000480)='./file7\x00', 0x0, 0x0, 0x0, 0x1) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200e32000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.79922553s ago: executing program 1 (id=4247): openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x6000, 0x1) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x4}, 0xc) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10001, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303036303030a98e90302c757365725f69643d44b6571e3c310f4a64b7606f02000000c4", @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000680)=@filename='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x401c8d1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000200)={0x3, 0x0, 0xf52, 0x1}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000010000800800000000000000db450000000000000100000000000080040000000000000000000082000000000000000000000000000000000000000008000000ff00000007000000040000000000000002000000000000000200"/192]) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x9) ioctl$SNAPSHOT_FREE(r3, 0x3305) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019300)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) 2.658062662s ago: executing program 3 (id=4248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x23, 0x6) timer_create(0x0, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003400)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000006a00), r4) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x24000800) umount2(0x0, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0xffff) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x5, 0x0, 0x3}) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000180)=0x5, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 2.657747712s ago: executing program 4 (id=4249): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x1f4, 0xe, 0x0, &(0x7f0000000a80)="ff410800b083dcc1010b3efc8864", 0x0, 0x2fe, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) (fail_nth: 1) 2.532004666s ago: executing program 4 (id=4250): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000840)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'M{\xab\x11\xd3\v~uZSza\x84\\\x05\xae\xc4\xab\xdeo\x95\xad\x8f\xff%r/\xaa\xd3\xf1\xe2\xc9\xb3o\xf9B\xc4H\xe6\xd2k}\xf8\x90\x13\x8e\x90v-\xb8\xb6\xaf\xf1\xf2j\x1f\xe3\xd1\x96\x18WJ\xa2\x8d2S\x94\xe0\xa0x\xf7\x8f\x7f\xb9\xa3\x06BX\xffA\x85\xbf\x86\xb4U\xdfs:\xfb\xc6V\xbf\x80\xbd\x88\xc4\xea\xde\xdc6\x11\x8ap\xc4(\f\x1b)^\xb2,\x82\xee\xc8yx\xe8\xd9D`\xfe\x02\x81h\x88\xaa24\xf5\xba\xee\xdc\xfc\xb3,^\x9a\xfa\x12\xe6\x98\xc7*\x8a)\xad\xa7;Z\x1d\x9dG\b\x9bz\xcb_b\x1fO\xb8\x88L\xfd\x91\xf3\x14\xc1\xf0\xaes\x80\x82\x03\xb1\xf7\xef\xc1j\t\xd8_\xecPR5g\xee5\x8c<\a\xd9\x0f\xdc\xe36^w\xeb\x8ed`L\x0ed\x11^F<\xcbW\xec\"\xf9\xd2\x0e_OT@\xc6\x16\xb0\xeb\x03\x8f^\xf0\xcd\xaf\xfc\xedBo\xe8\xfb\'\xa9\xbas\xdd\xd4\xcc\xed\x84\xbc\xf4\x9bT\xe0\x9b\xdfW\x10h\x90\x17_\xc61\x9cLT}\xdc\x8c\x91\xcf\xbf\xef@\x1ft\xb6YX9\xe8\xad\xb0T\xba<\x9fNe\xf6\x9a\x9cAY\x00&?\xb6\xb0e\fR\xcdW\xe9\x92', 0x3a, '%*', 0x3a, './file0'}, 0x159) 2.404354302s ago: executing program 4 (id=4251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a09000000000000000000020000000900020073797a32000000000800044004000000090001007379"], 0x64}, 0x1, 0x0, 0x0, 0x44810}, 0x4000000) 1.49021097s ago: executing program 2 (id=4252): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x1f4, 0xe, 0x0, &(0x7f0000000a80)="ff410800b083dcc1010b3efc8864", 0x0, 0x2fe, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000004b000000850000007b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000), &(0x7f0000000100)={0x0, 0xfb, 0xaf, 0x2, 0x9, "408446324b150851488df346f420ff5b", "5cad361c3a422b8c91e86ab2bb136b77ec99c4ee84da7f15d79be6f5b2f07238429c6eec6d79e6eef512ce3207ffeb685df6af4f2dc0d61e1da6c4fc5060848ddef00aab55f9dd58a7805e24cbb108730a6b8e61f48ece53f4b08ca26449e58c97b9f32040b467b6d866c275b254bc28bd761bf09fe05297a0f602735a9d37a9ca37a0d7ca6cff07cbeff986402755e79407a1bf9f7a29620b4d"}, 0xaf, 0x1) 1.452353933s ago: executing program 3 (id=4253): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b0000002f4900007f"], 0x50) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0xe0200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x18, 0x0, &(0x7f0000000240)) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0x8, r1}, 0x38) r6 = syz_open_dev$sndctrl(0x0, 0x5, 0x321d40) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f0000003440)=""/4096) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r1, &(0x7f0000000180)="bbf135d65935f472900f6465c59516ec31", &(0x7f0000000300)=""/7}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x4001, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security/ima/policy\x00', &(0x7f0000000080)='f2fs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="be05000000000000611000000000009500008000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48) write(r7, 0x0, 0x0) write(r7, &(0x7f0000000640)='measure func=F', 0xe) sendmmsg$sock(r7, &(0x7f0000000700)=[{{&(0x7f0000000200)=@in6={0xa, 0x4e21, 0xbb8a, @loopback, 0x5}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)="55193c2e1b01f07e7850dbd9cd9b9b1c01bb4d9063239c05e436be50cfd31a58fcd06d776bf1b44992131d6b087f4e377004ab2ead61d7e25477db62b452e840bb614afe884870cd166bc77bb41b83c4bc01422cac25eb10770c1ac7887c875e37910a4b01f5508a77d7e21b505f1fd8a07b5aab3ae16d538827d9acf124eb4fd0e64c778ed387f0fae23d20488732cd5d858ed0336b26c547f6d8914dc757425a4d8c4ea9b9950580cd828479ddd64081ec2b5db45511847a49132b60b86e0601818d866f3562cb1b0c7a8948ca0f5c16b35f1ebe56e8129b61dd288cba0f1c5ef8d36cd39763eec472987713f2043c70f0e0523357c218", 0xf8}, {&(0x7f0000000380)="0da18df703c8e9d6ff46e8af720fc2e2c47c64569e2561e3646a69f634526e9789f0b1c68d13b4fe7315e5aefc8354701cfedf376fb7102f2d5443a376ded9ed4a76a03bd9f44c88cc4d30ec80ca243d318f6c2f3a95e592305b11ad3668686f06606d1d82f140ea281df5d8a2b8e5589ab2a4b05a842743a3aa2fcd08526f0cfddf7e1c8324ccd8df416c6847ffe98e6c16c255c5a6298f1af4d5c6e480682c765ab5dd5ab7473ae191b7ae5b9ab33133688e35de3cd82878cea03e36", 0xbd}, {&(0x7f0000000440)="3567c0fb3da5c89833528c113f6e48bdc385b34dc782103c29dfe732078b2c2732144cd249eae7c8159a585e5e84191fbcfe19d06c2aa1b4024458b8d3b760e04d57b3d786473e3fbabffbe24a71c4a3f66db297ac667bfbc1ffb4b12236e40ca9075efeb48641f5dca03a91c82c34003443d056ecde13b7ed77a7733bb99310f6f32d3e59a02e", 0x87}, {&(0x7f0000000500)}, {&(0x7f0000000540)="a84169fcd0b763399fb2e9ecc1f9a45605266b057f69648554d113ae324c90258744423ca2fc891e3d3fd04e4bbafabdd97636286dccfdac2bf29eae94", 0x3d}], 0x5, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xe}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x60}}], 0x1, 0x0) 1.196040735s ago: executing program 4 (id=4254): fspick(0xffffffffffffffff, 0x0, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() accept4$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x80800) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 243.326475ms ago: executing program 1 (id=4255): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x21a}}, './file0\x00'}) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000440)=""/156) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) sendto$inet6(r2, &(0x7f0000001200)="80006466d3805699", 0x8, 0x40d0, &(0x7f0000000000)={0xa, 0x4e22, 0x805, @mcast2, 0x4}, 0x1c) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_open_dev$usbfs(&(0x7f0000000140), 0x5, 0x10102) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000001c0)=0x65, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x20}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x5, 0x3, '\x00'}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002d40)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0x7}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 241.386482ms ago: executing program 3 (id=4256): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d", 0xb1}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6", 0x46}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df", 0xc4}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49", 0xd2}], 0x5, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0x7c9}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 240.93275ms ago: executing program 4 (id=4257): sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x840) shutdown(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x901800, 0x0) syz_usb_connect(0x5, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004349cd08b82225643a09010203010902460001050510010904360600020a0000052406000005260004000d240f010000000043ea4e66020524060001052400fbff0d240f0167"], 0x0) 140.444842ms ago: executing program 2 (id=4258): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(r1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000100)=0x2, 0x4) bind$inet6(r0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 3.910558ms ago: executing program 2 (id=4259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xa, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2b40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c8900198401fec00000000000000000020000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x10043, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000200)={0x100000001, 0x28, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) dup(r5) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) unshare(0x8040480) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) 0s ago: executing program 0 (id=4260): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() accept4$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x80800) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) setxattr$security_ima(&(0x7f0000000480)='./file7\x00', 0x0, 0x0, 0x0, 0x1) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200e32000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): acket 1024 [ 916.211796][ T5734] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 916.211819][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.297075][ T5734] usb 1-1: config 0 descriptor?? [ 916.297660][T17792] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 916.363898][T17138] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 916.539234][T17138] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 916.539264][T17138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.626422][T17775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.627332][T17775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.697965][T17138] pvrusb2: Hardware description: Terratec Grabster AV400 [ 916.698333][T17138] pvrusb2: ********** [ 916.698340][T17138] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 916.698347][T17138] pvrusb2: Important functionality might not be entirely working. [ 916.698353][T17138] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 916.698359][T17138] pvrusb2: ********** [ 916.837068][ T2354] pvrusb2: Invalid write control endpoint [ 916.934268][ T36] kauditd_printk_skb: 79 callbacks suppressed [ 916.934287][ T36] audit: type=1800 audit(1785536013.485:12239): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185355 res=0 errno=0 [ 916.973344][ T36] audit: type=1800 audit(1785536013.525:12240): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=185359 res=0 errno=0 [ 917.145200][T16280] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 917.160238][ T5734] usb 1-1: USB disconnect, device number 49 [ 917.236318][ T36] audit: type=1800 audit(1785536013.795:12241): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31378 res=0 errno=0 [ 917.243631][T13984] usb 3-1: USB disconnect, device number 78 [ 917.281465][ T36] audit: type=1800 audit(1785536013.835:12242): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185346 res=0 errno=0 [ 917.302771][ T36] audit: type=1800 audit(1785536013.855:12243): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=185347 res=0 errno=0 [ 917.326905][ T36] audit: type=1800 audit(1785536013.885:12244): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 917.398943][T17817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3778'. [ 917.445169][ T36] audit: type=1800 audit(1785536014.005:12245): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 917.489734][ T36] audit: type=1800 audit(1785536014.045:12246): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 917.503906][ T36] audit: type=1800 audit(1785536014.045:12247): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185369 res=0 errno=0 [ 917.598211][ T2354] pvrusb2: Invalid write control endpoint [ 917.598227][ T2354] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 917.598237][ T2354] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 917.598245][ T2354] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 917.598312][ T2354] pvrusb2: Device being rendered inoperable [ 917.653801][ T2354] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 917.654603][ T2354] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 917.714743][T17820] syz.1.3779 (17820): drop_caches: 2 [ 917.797167][ T36] audit: type=1800 audit(1785536014.315:12248): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185369 res=0 errno=0 [ 918.013367][T17826] FAULT_INJECTION: forcing a failure. [ 918.013367][T17826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.013413][T17826] CPU: 1 UID: 0 PID: 17826 Comm: syz.1.3780 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 918.013441][T17826] Tainted: [L]=SOFTLOCKUP [ 918.013449][T17826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 918.013461][T17826] Call Trace: [ 918.013469][T17826] [ 918.013477][T17826] dump_stack_lvl+0xe8/0x150 [ 918.013514][T17826] should_fail_ex+0x467/0x600 [ 918.013551][T17826] _copy_to_user+0x31/0xb0 [ 918.013578][T17826] simple_read_from_buffer+0xe1/0x170 [ 918.013604][T17826] proc_fail_nth_read+0x1be/0x230 [ 918.013634][T17826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 918.013657][T17826] ? rw_verify_area+0x250/0x4d0 [ 918.013682][T17826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 918.013703][T17826] vfs_read+0x219/0xa90 [ 918.013736][T17826] ? __pfx_vfs_read+0x10/0x10 [ 918.013761][T17826] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 918.013788][T17826] ? lockdep_hardirqs_on+0x7a/0x110 [ 918.013812][T17826] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 918.013834][T17826] ? mutex_lock_nested+0x152/0x1d0 [ 918.013852][T17826] ? fdget_pos+0x252/0x320 [ 918.013881][T17826] ksys_read+0x156/0x270 [ 918.013903][T17826] ? __fget_files+0x2a/0x420 [ 918.013924][T17826] ? __pfx_ksys_read+0x10/0x10 [ 918.013948][T17826] ? fdget+0x189/0x1f0 [ 918.013970][T17826] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 918.013994][T17826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.014015][T17826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.014037][T17826] do_syscall_64+0x174/0x580 [ 918.014060][T17826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.014081][T17826] ? clear_bhb_loop+0x40/0x90 [ 918.014106][T17826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.014124][T17826] RIP: 0033:0x7fc847a2e84e [ 918.014143][T17826] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 918.014160][T17826] RSP: 002b:00007fc845cc5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 918.014181][T17826] RAX: ffffffffffffffda RBX: 00007fc845cc66c0 RCX: 00007fc847a2e84e [ 918.014197][T17826] RDX: 000000000000000f RSI: 00007fc845cc60a0 RDI: 0000000000000003 [ 918.014210][T17826] RBP: 00007fc845cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 918.014222][T17826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.014234][T17826] R13: 00007fc847cf6038 R14: 00007fc847cf5fa0 R15: 00007ffc9ae1cd88 [ 918.014267][T17826] [ 918.153420][ T2354] pvrusb2: Attached sub-driver cx25840 [ 918.153437][ T2354] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 918.153448][ T2354] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 918.228015][T17823] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 918.659886][T17841] netlink: 'syz.4.3786': attribute type 12 has an invalid length. [ 918.855528][T17848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3785'. [ 919.074518][T17856] syz.2.3790 (17856): drop_caches: 2 [ 919.198767][T17860] FAULT_INJECTION: forcing a failure. [ 919.198767][T17860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.198791][T17860] CPU: 1 UID: 0 PID: 17860 Comm: syz.2.3791 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 919.198807][T17860] Tainted: [L]=SOFTLOCKUP [ 919.198811][T17860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 919.198817][T17860] Call Trace: [ 919.198822][T17860] [ 919.198827][T17860] dump_stack_lvl+0xe8/0x150 [ 919.198848][T17860] should_fail_ex+0x467/0x600 [ 919.198867][T17860] _copy_from_user+0x2d/0xb0 [ 919.198881][T17860] __sys_bpf+0x2e7/0xd90 [ 919.198897][T17860] ? __pfx___sys_bpf+0x10/0x10 [ 919.198910][T17860] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 919.198926][T17860] ? rt_mutex_slowunlock+0x219/0x460 [ 919.198945][T17860] ? ksys_write+0x248/0x270 [ 919.198960][T17860] ? __pfx_ksys_write+0x10/0x10 [ 919.198975][T17860] __x64_sys_bpf+0xba/0xd0 [ 919.198991][T17860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.199003][T17860] do_syscall_64+0x174/0x580 [ 919.199016][T17860] ? trace_irq_disable+0x3b/0x140 [ 919.199026][T17860] ? clear_bhb_loop+0x40/0x90 [ 919.199039][T17860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.199051][T17860] RIP: 0033:0x7f7a98dbe019 [ 919.199068][T17860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.199083][T17860] RSP: 002b:00007f7a97016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 919.199103][T17860] RAX: ffffffffffffffda RBX: 00007f7a99045fa0 RCX: 00007f7a98dbe019 [ 919.199117][T17860] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 919.199128][T17860] RBP: 00007f7a97016090 R08: 0000000000000000 R09: 0000000000000000 [ 919.199139][T17860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.199150][T17860] R13: 00007f7a99046038 R14: 00007f7a99045fa0 R15: 00007ffc6182a0d8 [ 919.199179][T17860] [ 919.293721][ T31] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 919.452574][T17866] syz.2.3794 (17866): drop_caches: 2 [ 919.823660][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 919.825501][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 919.825525][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 919.875402][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 919.875432][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.875451][ T31] usb 4-1: Product: syz [ 919.875465][ T31] usb 4-1: Manufacturer: syz [ 919.875478][ T31] usb 4-1: SerialNumber: syz [ 919.916105][ T31] usb 4-1: 0:2 : does not exist [ 920.108784][ T31] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 920.125036][T17872] netlink: 'syz.4.3796': attribute type 21 has an invalid length. [ 920.125049][T17872] netlink: 'syz.4.3796': attribute type 10 has an invalid length. [ 920.125056][T17872] netlink: 13070 bytes leftover after parsing attributes in process `syz.4.3796'. [ 920.196625][ T31] usb 4-1: USB disconnect, device number 53 [ 920.360179][T16366] udevd[16366]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.036455][T17886] syz.3.3802 (17886): drop_caches: 2 [ 921.075765][T17884] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 921.975169][ T31] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 922.416363][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 922.416380][ T36] audit: type=1800 audit(1785536018.975:12295): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 922.493885][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 922.495686][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.495711][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 922.497892][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 922.497920][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.497947][ T31] usb 3-1: Product: syz [ 922.497962][ T31] usb 3-1: Manufacturer: syz [ 922.497976][ T31] usb 3-1: SerialNumber: syz [ 922.561378][ T36] audit: type=1800 audit(1785536019.115:12296): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185621 res=0 errno=0 [ 922.590245][ T31] usb 3-1: 0:2 : does not exist [ 922.597775][ T36] audit: type=1800 audit(1785536019.145:12297): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=185653 res=0 errno=0 [ 922.607759][ T36] audit: type=1800 audit(1785536019.165:12298): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=185628 res=0 errno=0 [ 922.613222][ T36] audit: type=1800 audit(1785536019.165:12299): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=185629 res=0 errno=0 [ 922.662521][ T36] audit: type=1800 audit(1785536019.215:12300): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 922.693201][ T36] audit: type=1800 audit(1785536019.245:12301): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 922.792859][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 922.846327][T17926] syz.1.3814 (17926): drop_caches: 2 [ 922.910561][T17931] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3816'. [ 922.910584][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3816'. [ 922.997164][ T4912] Bluetooth: hci5: unexpected event for opcode 0x2035 [ 923.052971][T17929] input: syz1 as /devices/virtual/input/input14 [ 923.079602][ T36] audit: type=1800 audit(1785536019.615:12302): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 923.114584][ T36] audit: type=1800 audit(1785536019.665:12303): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 923.117961][ T36] audit: type=1800 audit(1785536019.675:12304): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185768 res=0 errno=0 [ 923.376357][ T31] usb 3-1: USB disconnect, device number 79 [ 923.613569][ T5329] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 923.613745][ T5734] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 923.646616][T16366] udevd[16366]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 923.828601][ T5734] usb 2-1: unable to get BOS descriptor or descriptor too short [ 923.829643][ T5329] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 923.829670][ T5329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.829827][ T5734] usb 2-1: config 8 has an invalid interface number: 141 but max is 0 [ 923.829847][ T5734] usb 2-1: config 8 has no interface number 0 [ 923.829875][ T5734] usb 2-1: config 8 interface 141 has no altsetting 0 [ 923.830039][ T5329] usb 1-1: Product: syz [ 923.830053][ T5329] usb 1-1: Manufacturer: syz [ 923.830067][ T5329] usb 1-1: SerialNumber: syz [ 923.863495][ T5734] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=f2.dd [ 923.863514][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.863524][ T5734] usb 2-1: Product: syz [ 923.863532][ T5734] usb 2-1: Manufacturer: syz [ 923.863540][ T5734] usb 2-1: SerialNumber: syz [ 923.944377][T17955] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3822'. [ 924.229090][ T5329] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 924.229555][ T5329] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 924.229576][ T5329] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 924.449133][ T5329] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 924.566400][ T5329] usb 1-1: USB disconnect, device number 50 [ 924.887271][T17971] syz.0.3829 (17971): drop_caches: 2 [ 925.032146][T17978] FAULT_INJECTION: forcing a failure. [ 925.032146][T17978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.032182][T17978] CPU: 0 UID: 0 PID: 17978 Comm: syz.0.3830 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 925.032210][T17978] Tainted: [L]=SOFTLOCKUP [ 925.032218][T17978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 925.032230][T17978] Call Trace: [ 925.032238][T17978] [ 925.032247][T17978] dump_stack_lvl+0xe8/0x150 [ 925.032278][T17978] should_fail_ex+0x467/0x600 [ 925.032297][T17978] _copy_from_user+0x2d/0xb0 [ 925.032311][T17978] __sys_bpf+0x2e7/0xd90 [ 925.032335][T17978] ? __pfx___sys_bpf+0x10/0x10 [ 925.032359][T17978] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 925.032389][T17978] ? rt_mutex_slowunlock+0x219/0x460 [ 925.032426][T17978] ? ksys_write+0x248/0x270 [ 925.032448][T17978] ? __pfx_ksys_write+0x10/0x10 [ 925.032477][T17978] __x64_sys_bpf+0xba/0xd0 [ 925.032507][T17978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.032528][T17978] do_syscall_64+0x174/0x580 [ 925.032551][T17978] ? trace_irq_disable+0x3b/0x140 [ 925.032572][T17978] ? clear_bhb_loop+0x40/0x90 [ 925.032595][T17978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.032614][T17978] RIP: 0033:0x7fd280e6e019 [ 925.032633][T17978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.032650][T17978] RSP: 002b:00007fd27f0c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 925.032678][T17978] RAX: ffffffffffffffda RBX: 00007fd2810f5fa0 RCX: 00007fd280e6e019 [ 925.032694][T17978] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 925.032707][T17978] RBP: 00007fd27f0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 925.032720][T17978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.032732][T17978] R13: 00007fd2810f6038 R14: 00007fd2810f5fa0 R15: 00007ffc92f84528 [ 925.032760][T17978] [ 925.253513][T17138] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 925.363410][ T5735] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 925.405249][T17138] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.405290][T17138] usb 5-1: config 0 interface 0 has no altsetting 0 [ 925.407769][T17138] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 925.407796][T17138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.407816][T17138] usb 5-1: Product: syz [ 925.407829][T17138] usb 5-1: Manufacturer: syz [ 925.407836][T17138] usb 5-1: SerialNumber: syz [ 925.417028][T17138] usb 5-1: config 0 descriptor?? [ 925.527953][ T5735] usb 3-1: Using ep0 maxpacket: 16 [ 925.539034][ T5735] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 925.539061][ T5735] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 925.542344][ T5735] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 925.542371][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.542389][ T5735] usb 3-1: Product: syz [ 925.542456][ T5735] usb 3-1: Manufacturer: syz [ 925.542471][ T5735] usb 3-1: SerialNumber: syz [ 925.634235][ T5735] usb 3-1: 0:2 : does not exist [ 925.696247][T17976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.698181][T17976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.831294][ T5735] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 926.196403][ T5735] usb 3-1: USB disconnect, device number 80 [ 926.231121][T17138] usb 5-1: Can not set alternate setting to 1, error: -71 [ 926.231169][T17138] synaptics_usb 5-1:0.0: probe with driver synaptics_usb failed with error -71 [ 926.324963][T17138] usb 5-1: USB disconnect, device number 50 [ 926.423714][ T5734] int51x1 2-1:8.141: probe with driver int51x1 failed with error -71 [ 926.474233][ T5734] usb 2-1: USB disconnect, device number 60 [ 926.930129][T18007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3837'. [ 926.954362][T18007] tipc: Started in network mode [ 926.954568][T18007] tipc: Node identity ac1414aa, cluster identity 4369 [ 926.954872][T18007] tipc: Enabling of bearer rejected, failed to enable media [ 927.087335][T18005] syz.2.3840 (18005): drop_caches: 2 [ 927.807645][T16366] udevd[16366]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 927.827531][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 927.827545][ T36] audit: type=1800 audit(1785536024.345:12377): pid=18010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31401 res=0 errno=0 [ 927.827570][ T36] audit: type=1800 audit(1785536024.365:12378): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26742 res=0 errno=0 [ 928.008167][ T36] audit: type=1800 audit(1785536024.555:12379): pid=18017 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 928.013328][ T31] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 928.067809][ T36] audit: type=1800 audit(1785536024.625:12380): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 928.099565][ T36] audit: type=1800 audit(1785536024.655:12381): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 928.173206][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 928.175471][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 928.177174][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 928.177208][ T31] usb 1-1: can't read configurations, error -61 [ 928.251551][ T36] audit: type=1800 audit(1785536024.805:12382): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 928.318271][T18025] syz.2.3845 (18025): drop_caches: 2 [ 928.354479][ T36] audit: type=1800 audit(1785536024.915:12383): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 928.388321][ T31] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 928.392916][ T36] audit: type=1800 audit(1785536024.945:12384): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 928.470249][T18029] syz.3.3847 (18029): drop_caches: 2 [ 928.954808][ T36] audit: type=1800 audit(1785536025.485:12385): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 928.983180][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 928.985360][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 928.986970][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 928.987003][ T31] usb 1-1: can't read configurations, error -61 [ 929.019563][ T36] audit: type=1800 audit(1785536025.545:12386): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 929.040271][ T31] usb usb1-port1: attempt power cycle [ 929.154389][T18033] FAULT_INJECTION: forcing a failure. [ 929.154389][T18033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.154424][T18033] CPU: 1 UID: 0 PID: 18033 Comm: syz.2.3848 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 929.154452][T18033] Tainted: [L]=SOFTLOCKUP [ 929.154460][T18033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 929.154473][T18033] Call Trace: [ 929.154480][T18033] [ 929.154488][T18033] dump_stack_lvl+0xe8/0x150 [ 929.154529][T18033] should_fail_ex+0x467/0x600 [ 929.154568][T18033] _copy_from_user+0x2d/0xb0 [ 929.154593][T18033] __sys_bpf+0x2e7/0xd90 [ 929.154624][T18033] ? __pfx___sys_bpf+0x10/0x10 [ 929.154647][T18033] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 929.154680][T18033] ? rt_mutex_slowunlock+0x219/0x460 [ 929.154714][T18033] ? ksys_write+0x248/0x270 [ 929.154741][T18033] ? __pfx_ksys_write+0x10/0x10 [ 929.154777][T18033] __x64_sys_bpf+0xba/0xd0 [ 929.154807][T18033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.154828][T18033] do_syscall_64+0x174/0x580 [ 929.154853][T18033] ? trace_irq_disable+0x3b/0x140 [ 929.154873][T18033] ? clear_bhb_loop+0x40/0x90 [ 929.154898][T18033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.154917][T18033] RIP: 0033:0x7f7a98dbe019 [ 929.154936][T18033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.154954][T18033] RSP: 002b:00007f7a97016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 929.154977][T18033] RAX: ffffffffffffffda RBX: 00007f7a99045fa0 RCX: 00007f7a98dbe019 [ 929.154992][T18033] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000001 [ 929.155006][T18033] RBP: 00007f7a97016090 R08: 0000000000000000 R09: 0000000000000000 [ 929.155018][T18033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.155031][T18033] R13: 00007f7a99046038 R14: 00007f7a99045fa0 R15: 00007ffc6182a0d8 [ 929.155061][T18033] [ 929.394705][ T31] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 929.415804][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 929.419535][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 929.421147][ T31] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 929.421179][ T31] usb 1-1: can't read configurations, error -61 [ 929.489303][T18043] syz.3.3852 (18043): drop_caches: 2 [ 929.580424][ T31] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 929.691874][ T31] usb 1-1: device descriptor read/8, error -71 [ 929.793532][ T31] usb usb1-port1: unable to enumerate USB device [ 930.903129][ T31] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 931.210890][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 931.218455][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 931.218488][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 931.218517][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 931.218541][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 931.218566][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 931.218604][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 931.218627][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.313359][ T31] usb 1-1: config 0 descriptor?? [ 931.313942][T18069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 931.384387][T18073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3862'. [ 931.521016][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.521095][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.709274][T18068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.722667][T18068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.003031][T17138] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 932.186810][T17138] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 932.186854][T17138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.186873][T17138] usb 3-1: Product: syz [ 932.186886][T17138] usb 3-1: Manufacturer: syz [ 932.186900][T17138] usb 3-1: SerialNumber: syz [ 932.431158][T17138] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 932.431211][T17138] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 932.431232][T17138] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 932.476566][T17138] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 932.520337][T17138] usb 3-1: USB disconnect, device number 81 [ 932.562639][ T31] usb 1-1: USB disconnect, device number 55 [ 932.590891][ T4912] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 932.727489][T18091] fuse: Bad value for 'fd' [ 932.806497][T18089] FAULT_INJECTION: forcing a failure. [ 932.806497][T18089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.806533][T18089] CPU: 1 UID: 0 PID: 18089 Comm: syz.1.3868 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 932.806569][T18089] Tainted: [L]=SOFTLOCKUP [ 932.806576][T18089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 932.806588][T18089] Call Trace: [ 932.806596][T18089] [ 932.806605][T18089] dump_stack_lvl+0xe8/0x150 [ 932.806640][T18089] should_fail_ex+0x467/0x600 [ 932.806675][T18089] _copy_from_user+0x2d/0xb0 [ 932.806701][T18089] ___sys_sendmsg+0x1c6/0x360 [ 932.806728][T18089] ? __lock_acquire+0x683/0x2ce0 [ 932.806755][T18089] ? __pfx____sys_sendmsg+0x10/0x10 [ 932.806813][T18089] ? __fget_files+0x2a/0x420 [ 932.806834][T18089] ? __fget_files+0x3a8/0x420 [ 932.806865][T18089] __x64_sys_sendmsg+0x1b7/0x290 [ 932.806893][T18089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 932.806935][T18089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.806957][T18089] do_syscall_64+0x174/0x580 [ 932.806983][T18089] ? trace_irq_disable+0x3b/0x140 [ 932.807004][T18089] ? clear_bhb_loop+0x40/0x90 [ 932.807028][T18089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.807048][T18089] RIP: 0033:0x7fc847a6e019 [ 932.807066][T18089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.807084][T18089] RSP: 002b:00007fc845cc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.807105][T18089] RAX: ffffffffffffffda RBX: 00007fc847cf5fa0 RCX: 00007fc847a6e019 [ 932.807120][T18089] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 932.807133][T18089] RBP: 00007fc845cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 932.807146][T18089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.807159][T18089] R13: 00007fc847cf6038 R14: 00007fc847cf5fa0 R15: 00007ffc9ae1cd88 [ 932.807189][T18089] [ 933.038910][T18094] 9p: Bad value for 'rfdno' [ 933.062335][T18094] program syz.3.3866 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 933.084669][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 933.084685][ T36] audit: type=1800 audit(1785536029.646:12425): pid=18010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=186993 res=0 errno=0 [ 933.202198][ T36] audit: type=1800 audit(1785536029.706:12426): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 933.227107][ T36] audit: type=1800 audit(1785536029.766:12427): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187004 res=0 errno=0 [ 933.317149][ T36] audit: type=1800 audit(1785536029.876:12428): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 933.505150][ T36] audit: type=1800 audit(1785536030.056:12429): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 934.316736][ T36] audit: type=1800 audit(1785536030.876:12430): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 934.362957][T18110] FAULT_INJECTION: forcing a failure. [ 934.362957][T18110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.362993][T18110] CPU: 1 UID: 0 PID: 18110 Comm: syz.1.3875 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 934.363021][T18110] Tainted: [L]=SOFTLOCKUP [ 934.363029][T18110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 934.363041][T18110] Call Trace: [ 934.363049][T18110] [ 934.363057][T18110] dump_stack_lvl+0xe8/0x150 [ 934.363094][T18110] should_fail_ex+0x467/0x600 [ 934.363128][T18110] _copy_from_user+0x2d/0xb0 [ 934.363153][T18110] ___sys_sendmsg+0x1c6/0x360 [ 934.363179][T18110] ? __lock_acquire+0x683/0x2ce0 [ 934.363204][T18110] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.363260][T18110] ? __fget_files+0x2a/0x420 [ 934.363281][T18110] ? __fget_files+0x3a8/0x420 [ 934.363311][T18110] __x64_sys_sendmsg+0x1b7/0x290 [ 934.363338][T18110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 934.363380][T18110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.363400][T18110] do_syscall_64+0x174/0x580 [ 934.363423][T18110] ? trace_irq_disable+0x3b/0x140 [ 934.363442][T18110] ? clear_bhb_loop+0x40/0x90 [ 934.363463][T18110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.363482][T18110] RIP: 0033:0x7fc847a6e019 [ 934.363499][T18110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.363514][T18110] RSP: 002b:00007fc845cc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 934.363533][T18110] RAX: ffffffffffffffda RBX: 00007fc847cf5fa0 RCX: 00007fc847a6e019 [ 934.363547][T18110] RDX: 0000000020008000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 934.363560][T18110] RBP: 00007fc845cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 934.363571][T18110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.363582][T18110] R13: 00007fc847cf6038 R14: 00007fc847cf5fa0 R15: 00007ffc9ae1cd88 [ 934.363610][T18110] [ 934.414104][ T36] audit: type=1800 audit(1785536030.976:12431): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 934.450827][T18114] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3876'. [ 934.563521][ T36] audit: type=1800 audit(1785536031.116:12432): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 934.657799][T18118] FAULT_INJECTION: forcing a failure. [ 934.657799][T18118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.657836][T18118] CPU: 0 UID: 0 PID: 18118 Comm: syz.2.3877 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 934.657864][T18118] Tainted: [L]=SOFTLOCKUP [ 934.657871][T18118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 934.657884][T18118] Call Trace: [ 934.657891][T18118] [ 934.657899][T18118] dump_stack_lvl+0xe8/0x150 [ 934.657935][T18118] should_fail_ex+0x467/0x600 [ 934.657971][T18118] _copy_from_user+0x2d/0xb0 [ 934.657996][T18118] ___sys_sendmsg+0x1c6/0x360 [ 934.658022][T18118] ? __lock_acquire+0x683/0x2ce0 [ 934.658047][T18118] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.658105][T18118] ? __fget_files+0x2a/0x420 [ 934.658126][T18118] ? __fget_files+0x3a8/0x420 [ 934.658163][T18118] __x64_sys_sendmsg+0x1b7/0x290 [ 934.658191][T18118] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 934.658232][T18118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.658253][T18118] do_syscall_64+0x174/0x580 [ 934.658281][T18118] ? clear_bhb_loop+0x40/0x90 [ 934.658305][T18118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.658324][T18118] RIP: 0033:0x7f7a98dbe019 [ 934.658341][T18118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.658357][T18118] RSP: 002b:00007f7a97016028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 934.658378][T18118] RAX: ffffffffffffffda RBX: 00007f7a99045fa0 RCX: 00007f7a98dbe019 [ 934.658393][T18118] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 934.658406][T18118] RBP: 00007f7a97016090 R08: 0000000000000000 R09: 0000000000000000 [ 934.658419][T18118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.658431][T18118] R13: 00007f7a99046038 R14: 00007f7a99045fa0 R15: 00007ffc6182a0d8 [ 934.658462][T18118] [ 934.750278][ T36] audit: type=1800 audit(1785536031.306:12433): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 934.995237][ T36] audit: type=1800 audit(1785536031.556:12434): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 935.044219][ T4912] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 936.671201][T17138] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 937.108982][T17138] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 937.109013][T17138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.109047][T17138] usb 2-1: Product: syz [ 937.109062][T17138] usb 2-1: Manufacturer: syz [ 937.109077][T17138] usb 2-1: SerialNumber: syz [ 937.499203][T17138] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 937.499258][T17138] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 937.499277][T17138] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 937.561121][T17138] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 937.586794][T17138] usb 2-1: USB disconnect, device number 61 [ 938.209077][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 938.209095][ T36] audit: type=1800 audit(1785536034.756:12455): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 938.982834][T17138] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 939.094307][ T36] audit: type=1800 audit(1785536035.636:12456): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 939.335762][T18196] 9p: Bad value for 'rfdno' [ 939.341318][T17138] usb 4-1: Using ep0 maxpacket: 16 [ 939.343121][T17138] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.343145][T17138] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 939.345460][T17138] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 939.345486][T17138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.345506][T17138] usb 4-1: Product: syz [ 939.345520][T17138] usb 4-1: Manufacturer: syz [ 939.345534][T17138] usb 4-1: SerialNumber: syz [ 939.356867][T18196] program syz.1.3900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 939.374615][T17138] usb 4-1: 0:2 : does not exist [ 939.452631][ T36] audit: type=1800 audit(1785536035.986:12457): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187331 res=0 errno=0 [ 939.452680][ T36] audit: type=1800 audit(1785536035.996:12458): pid=18010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187435 res=0 errno=0 [ 939.452816][ T36] audit: type=1800 audit(1785536035.996:12459): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187342 res=0 errno=0 [ 939.471456][ T36] audit: type=1800 audit(1785536036.006:12460): pid=18010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=187467 res=0 errno=0 [ 939.481395][ T36] audit: type=1800 audit(1785536036.026:12461): pid=18010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=187442 res=0 errno=0 [ 939.489975][ T36] audit: type=1800 audit(1785536036.036:12462): pid=18010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=187443 res=0 errno=0 [ 939.579022][T17138] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 939.662564][ T5329] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 939.687044][ T36] audit: type=1800 audit(1785536036.236:12463): pid=18010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=187464 res=0 errno=0 [ 939.687959][ T36] audit: type=1800 audit(1785536036.236:12464): pid=18010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=187465 res=0 errno=0 [ 939.710530][T17138] usb 4-1: USB disconnect, device number 54 [ 939.788020][T16366] udevd[16366]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 939.816435][ T5329] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 939.816489][ T5329] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 939.819024][ T5329] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 939.819050][ T5329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.819068][ T5329] usb 3-1: Product: syz [ 939.819082][ T5329] usb 3-1: Manufacturer: syz [ 939.819096][ T5329] usb 3-1: SerialNumber: syz [ 939.886218][ T5329] rtl8150 3-1:1.0: couldn't find required endpoints [ 939.886490][ T5329] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 940.449773][ T5329] usb 3-1: USB disconnect, device number 82 [ 940.559309][T17138] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 941.255341][T18228] pim6reg: entered allmulticast mode [ 941.287526][T18229] pim6reg: left allmulticast mode [ 941.322958][T18228] fuse: Bad value for 'rootmode' [ 941.365537][ T4912] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 941.389180][T17138] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 941.389211][T17138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.389230][T17138] usb 1-1: Product: syz [ 941.389244][T17138] usb 1-1: Manufacturer: syz [ 941.389257][T17138] usb 1-1: SerialNumber: syz [ 941.631057][T17138] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 941.631115][T17138] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 941.631134][T17138] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 941.671204][T17138] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 941.745734][T17138] usb 1-1: USB disconnect, device number 56 [ 942.400725][T18261] kAFS: unable to lookup cell '(,c¾Ì' [ 942.638703][T18267] syz.2.3921 (18267): drop_caches: 2 [ 942.678796][T17945] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 942.875559][T17945] usb 1-1: unable to get BOS descriptor or descriptor too short [ 942.876666][T17945] usb 1-1: not running at top speed; connect to a high speed hub [ 942.949090][T17945] usb 1-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 942.949120][T17945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.949141][T17945] usb 1-1: Product: syz [ 942.949155][T17945] usb 1-1: Manufacturer: syz [ 942.949169][T17945] usb 1-1: SerialNumber: syz [ 943.026093][T17945] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 943.203928][T18270] FAULT_INJECTION: forcing a failure. [ 943.203928][T18270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.203964][T18270] CPU: 0 UID: 0 PID: 18270 Comm: syz.3.3926 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 943.203993][T18270] Tainted: [L]=SOFTLOCKUP [ 943.204001][T18270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 943.204014][T18270] Call Trace: [ 943.204021][T18270] [ 943.204030][T18270] dump_stack_lvl+0xe8/0x150 [ 943.204066][T18270] should_fail_ex+0x467/0x600 [ 943.204102][T18270] _copy_from_user+0x2d/0xb0 [ 943.204128][T18270] __se_sys_mbind+0x652/0x10e0 [ 943.204271][T18270] ? rt_mutex_slowunlock+0x219/0x460 [ 943.204293][T18270] ? __pfx___se_sys_mbind+0x10/0x10 [ 943.204323][T18270] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 943.204351][T18270] ? fput+0xa0/0xd0 [ 943.204371][T18270] ? ksys_write+0x248/0x270 [ 943.204399][T18270] ? __pfx_ksys_write+0x10/0x10 [ 943.204428][T18270] ? __x64_sys_mbind+0x21/0xf0 [ 943.204450][T18270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.204472][T18270] do_syscall_64+0x174/0x580 [ 943.204497][T18270] ? trace_irq_disable+0x3b/0x140 [ 943.204518][T18270] ? clear_bhb_loop+0x40/0x90 [ 943.204542][T18270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.204562][T18270] RIP: 0033:0x7f0b4fc0e019 [ 943.204581][T18270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.204598][T18270] RSP: 002b:00007f0b4de66028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 943.204620][T18270] RAX: ffffffffffffffda RBX: 00007f0b4fe95fa0 RCX: 00007f0b4fc0e019 [ 943.204636][T18270] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffb000 [ 943.204649][T18270] RBP: 00007f0b4de66090 R08: 0000000000000041 R09: 000000000000000b [ 943.204665][T18270] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 943.204678][T18270] R13: 00007f0b4fe96038 R14: 00007f0b4fe95fa0 R15: 00007fff4b446888 [ 943.204709][T18270] [ 943.455708][ T36] kauditd_printk_skb: 238 callbacks suppressed [ 943.455727][ T36] audit: type=1800 audit(1785536040.006:12703): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 943.512154][ T36] audit: type=1800 audit(1785536040.056:12704): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 943.540228][T18272] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3927'. [ 943.540471][T18272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3927'. [ 943.593809][T18275] FAULT_INJECTION: forcing a failure. [ 943.593809][T18275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.593846][T18275] CPU: 1 UID: 0 PID: 18275 Comm: syz.2.3928 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 943.593874][T18275] Tainted: [L]=SOFTLOCKUP [ 943.593881][T18275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 943.593893][T18275] Call Trace: [ 943.593901][T18275] [ 943.593910][T18275] dump_stack_lvl+0xe8/0x150 [ 943.593946][T18275] should_fail_ex+0x467/0x600 [ 943.593982][T18275] _copy_from_user+0x2d/0xb0 [ 943.594007][T18275] __sys_sendto+0x2b5/0x5d0 [ 943.594036][T18275] ? __pfx___sys_sendto+0x10/0x10 [ 943.594083][T18275] ? __pfx_ksys_write+0x10/0x10 [ 943.594114][T18275] __x64_sys_sendto+0xde/0x100 [ 943.594137][T18275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.594159][T18275] do_syscall_64+0x174/0x580 [ 943.594184][T18275] ? trace_irq_disable+0x3b/0x140 [ 943.594205][T18275] ? clear_bhb_loop+0x40/0x90 [ 943.594229][T18275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.594248][T18275] RIP: 0033:0x7f7a98dbe019 [ 943.594266][T18275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.594282][T18275] RSP: 002b:00007f7a97016028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 943.594303][T18275] RAX: ffffffffffffffda RBX: 00007f7a99045fa0 RCX: 00007f7a98dbe019 [ 943.594318][T18275] RDX: 000000000000ffec RSI: 0000200000000040 RDI: 0000000000000003 [ 943.594332][T18275] RBP: 00007f7a97016090 R08: 0000200000000340 R09: 0000000000000010 [ 943.594346][T18275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.594358][T18275] R13: 00007f7a99046038 R14: 00007f7a99045fa0 R15: 00007ffc6182a0d8 [ 943.594389][T18275] [ 943.734125][ T36] audit: type=1800 audit(1785536040.286:12705): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 943.806862][ T36] audit: type=1800 audit(1785536040.346:12706): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 943.954519][ T36] audit: type=1800 audit(1785536040.496:12707): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 943.991563][T18290] fuse: Bad value for 'rootmode' [ 943.992874][T18280] pim6reg: entered allmulticast mode [ 944.004085][T18285] pim6reg: left allmulticast mode [ 944.010130][ T36] audit: type=1326 audit(1785536040.556:12709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18279 comm="syz.3.3930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4fc0e019 code=0x7ffc0000 [ 944.010180][ T36] audit: type=1326 audit(1785536040.556:12710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18279 comm="syz.3.3930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4fc0e019 code=0x7ffc0000 [ 944.010222][ T36] audit: type=1326 audit(1785536040.556:12711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18279 comm="syz.3.3930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4fc0e019 code=0x7ffc0000 [ 944.010263][ T36] audit: type=1326 audit(1785536040.556:12708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18279 comm="syz.3.3930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4fc0e019 code=0x7ffc0000 [ 944.010308][ T36] audit: type=1326 audit(1785536040.556:12712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18279 comm="syz.3.3930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4fc0e019 code=0x7ffc0000 [ 944.101952][T18292] FAULT_INJECTION: forcing a failure. [ 944.101952][T18292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.101994][T18292] CPU: 1 UID: 0 PID: 18292 Comm: syz.2.3934 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 944.102023][T18292] Tainted: [L]=SOFTLOCKUP [ 944.102030][T18292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 944.102042][T18292] Call Trace: [ 944.102050][T18292] [ 944.102059][T18292] dump_stack_lvl+0xe8/0x150 [ 944.102095][T18292] should_fail_ex+0x467/0x600 [ 944.102131][T18292] _copy_to_user+0x31/0xb0 [ 944.102158][T18292] put_timespec64+0xc8/0x130 [ 944.102267][T18292] ? __pfx_put_timespec64+0x10/0x10 [ 944.102300][T18292] __x64_sys_clock_gettime+0x22a/0x290 [ 944.102391][T18292] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 944.102416][T18292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.102444][T18292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.102465][T18292] do_syscall_64+0x174/0x580 [ 944.102492][T18292] ? clear_bhb_loop+0x40/0x90 [ 944.102512][T18292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.102527][T18292] RIP: 0033:0x7f7a98dbe019 [ 944.102542][T18292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.102556][T18292] RSP: 002b:00007f7a96fd4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 944.102573][T18292] RAX: ffffffffffffffda RBX: 00007f7a99046180 RCX: 00007f7a98dbe019 [ 944.102586][T18292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 944.102595][T18292] RBP: 00007f7a96fd4090 R08: 0000000000000000 R09: 0000000000000000 [ 944.102605][T18292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.102615][T18292] R13: 00007f7a99046218 R14: 00007f7a99046180 R15: 00007ffc6182a0d8 [ 944.102639][T18292] [ 944.902342][T17945] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 944.923099][T17945] usb 1-1: can't set first interface for hiFace device. [ 944.923139][T17945] snd-usb-hiface 1-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 944.958812][T17945] usb 1-1: can't set first interface for hiFace device. [ 944.958851][T17945] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 944.989136][T17945] usb 1-1: can't set first interface for hiFace device. [ 944.989174][T17945] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 945.038833][T17945] usb 1-1: USB disconnect, device number 57 [ 945.174358][T16366] udevd[16366]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 945.927433][T18308] program syz.3.3939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 945.943733][ T5735] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 946.065782][ T6834] libceph: connect (1)[c::]:6789 error -101 [ 946.065983][ T6834] libceph: mon0 (1)[c::]:6789 connect error [ 946.072213][ T5735] usb 2-1: device descriptor read/64, error -71 [ 946.140292][ T6834] libceph: connect (1)[c::]:6789 error -101 [ 946.140484][ T6834] libceph: mon0 (1)[c::]:6789 connect error [ 946.228311][ T3408] Bluetooth: Error in BCSP hdr checksum [ 946.312207][ T5735] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 946.392950][ T6834] libceph: connect (1)[c::]:6789 error -101 [ 946.393137][ T6834] libceph: mon0 (1)[c::]:6789 connect error [ 946.452193][ T5735] usb 2-1: device descriptor read/64, error -71 [ 946.562552][ T5735] usb usb2-port1: attempt power cycle [ 946.630550][T18335] pim6reg: entered allmulticast mode [ 946.631715][T18335] pim6reg: left allmulticast mode [ 946.651458][T18310] ceph: No mds server is up or the cluster is laggy [ 946.689262][T18336] fuse: Bad value for 'fd' [ 946.957262][ T5735] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 946.972649][ T5735] usb 2-1: device descriptor read/8, error -71 [ 947.105896][T18343] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20004 [ 947.242110][ T5735] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 947.273053][ T5735] usb 2-1: device descriptor read/8, error -71 [ 947.392452][ T5735] usb usb2-port1: unable to enumerate USB device [ 947.791951][T18358] binder: 18355:18358 ioctl c0306201 200000000000 returned -14 [ 948.001410][ T4912] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 948.010675][T16280] Bluetooth: hci3: command 0x1003 tx timeout [ 948.058465][ T5258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 948.486860][ T36] kauditd_printk_skb: 267 callbacks suppressed [ 948.486879][ T36] audit: type=1800 audit(1785536045.036:12980): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 948.591143][ T36] audit: type=1800 audit(1785536045.136:12981): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 948.629067][ T36] audit: type=1800 audit(1785536045.176:12982): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 948.670747][T18384] FAULT_INJECTION: forcing a failure. [ 948.670747][T18384] name failslab, interval 1, probability 0, space 0, times 0 [ 948.670770][T18384] CPU: 1 UID: 0 PID: 18384 Comm: syz.3.3961 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 948.670786][T18384] Tainted: [L]=SOFTLOCKUP [ 948.670790][T18384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 948.670796][T18384] Call Trace: [ 948.670802][T18384] [ 948.670810][T18384] dump_stack_lvl+0xe8/0x150 [ 948.670832][T18384] should_fail_ex+0x467/0x600 [ 948.670852][T18384] should_failslab+0xa8/0x100 [ 948.670867][T18384] __kmalloc_cache_noprof+0xa0/0x6b0 [ 948.670881][T18384] ? assoc_array_delete+0xcf/0xfb0 [ 948.670891][T18384] ? assoc_array_delete+0xcf/0xfb0 [ 948.670904][T18384] assoc_array_delete+0xcf/0xfb0 [ 948.670922][T18384] ? __pfx_assoc_array_delete+0x10/0x10 [ 948.670932][T18384] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 948.670947][T18384] ? lockdep_hardirqs_on+0x7a/0x110 [ 948.670960][T18384] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 948.670973][T18384] ? mutex_lock_nested+0x152/0x1d0 [ 948.670982][T18384] ? key_move+0x1e2/0x780 [ 948.671077][T18384] key_move+0x1fa/0x780 [ 948.671089][T18384] ? __pfx_key_move+0x10/0x10 [ 948.671139][T18384] ? do_raw_spin_lock+0x12b/0x2f0 [ 948.671171][T18384] keyctl_keyring_move+0xd6/0x110 [ 948.671195][T18384] __se_sys_keyctl+0x7b8/0x9d0 [ 948.671219][T18384] ? __pfx___se_sys_keyctl+0x10/0x10 [ 948.671239][T18384] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 948.671253][T18384] ? rt_mutex_slowunlock+0x219/0x460 [ 948.671263][T18384] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 948.671276][T18384] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 948.671292][T18384] ? fput+0xa0/0xd0 [ 948.671309][T18384] ? ksys_write+0x248/0x270 [ 948.671324][T18384] ? __pfx_ksys_write+0x10/0x10 [ 948.671340][T18384] ? __x64_sys_keyctl+0x20/0xc0 [ 948.671352][T18384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.671364][T18384] do_syscall_64+0x174/0x580 [ 948.671377][T18384] ? trace_irq_disable+0x3b/0x140 [ 948.671388][T18384] ? clear_bhb_loop+0x40/0x90 [ 948.671401][T18384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.671412][T18384] RIP: 0033:0x7f0b4fc0e019 [ 948.671423][T18384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.671432][T18384] RSP: 002b:00007f0b4de66028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 948.671446][T18384] RAX: ffffffffffffffda RBX: 00007f0b4fe95fa0 RCX: 00007f0b4fc0e019 [ 948.671454][T18384] RDX: 0000000008ec3dd6 RSI: 0000000037444b3f RDI: 000000000000001e [ 948.671461][T18384] RBP: 00007f0b4de66090 R08: 0000000000000000 R09: 0000000000000000 [ 948.671468][T18384] R10: 0000000008907193 R11: 0000000000000246 R12: 0000000000000001 [ 948.671474][T18384] R13: 00007f0b4fe96038 R14: 00007f0b4fe95fa0 R15: 00007fff4b446888 [ 948.671491][T18384] [ 948.765038][ T36] audit: type=1800 audit(1785536045.316:12983): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 948.810602][ T36] audit: type=1800 audit(1785536045.356:12984): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 948.869829][T18386] pim6reg: entered allmulticast mode [ 948.870925][T18389] pim6reg: left allmulticast mode [ 948.925140][T18386] fuse: Bad value for 'rootmode' [ 948.929489][ T36] audit: type=1800 audit(1785536045.476:12985): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 948.935060][ T36] audit: type=1326 audit(1785536045.486:12986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18385 comm="syz.3.3962" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4fc0e019 code=0x7ffc0000 [ 948.935107][ T36] audit: type=1326 audit(1785536045.486:12987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18385 comm="syz.3.3962" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4fc0e019 code=0x7ffc0000 [ 948.935387][ T36] audit: type=1326 audit(1785536045.486:12988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18385 comm="syz.3.3962" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b4fc0e019 code=0x7ffc0000 [ 948.938814][ T36] audit: type=1326 audit(1785536045.486:12990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18385 comm="syz.3.3962" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4fc0e019 code=0x7ffc0000 [ 949.661607][T18403] program syz.3.3967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 949.910730][T18405] FAULT_INJECTION: forcing a failure. [ 949.910730][T18405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.910753][T18405] CPU: 1 UID: 0 PID: 18405 Comm: syz.0.3968 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 949.910769][T18405] Tainted: [L]=SOFTLOCKUP [ 949.910773][T18405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.910780][T18405] Call Trace: [ 949.910784][T18405] [ 949.910789][T18405] dump_stack_lvl+0xe8/0x150 [ 949.910811][T18405] should_fail_ex+0x467/0x600 [ 949.910831][T18405] _copy_from_user+0x2d/0xb0 [ 949.910845][T18405] __sys_bpf+0x2e7/0xd90 [ 949.910861][T18405] ? __pfx___sys_bpf+0x10/0x10 [ 949.910873][T18405] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 949.910889][T18405] ? rt_mutex_slowunlock+0x219/0x460 [ 949.910920][T18405] ? ksys_write+0x248/0x270 [ 949.910947][T18405] ? __pfx_ksys_write+0x10/0x10 [ 949.910973][T18405] __x64_sys_bpf+0xba/0xd0 [ 949.910990][T18405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.911001][T18405] do_syscall_64+0x174/0x580 [ 949.911014][T18405] ? trace_irq_disable+0x3b/0x140 [ 949.911025][T18405] ? clear_bhb_loop+0x40/0x90 [ 949.911037][T18405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.911048][T18405] RIP: 0033:0x7fd280e6e019 [ 949.911058][T18405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.911067][T18405] RSP: 002b:00007fd27f0c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 949.911079][T18405] RAX: ffffffffffffffda RBX: 00007fd2810f5fa0 RCX: 00007fd280e6e019 [ 949.911087][T18405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 949.911093][T18405] RBP: 00007fd27f0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 949.911099][T18405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.911105][T18405] R13: 00007fd2810f6038 R14: 00007fd2810f5fa0 R15: 00007ffc92f84528 [ 949.911121][T18405] [ 949.936872][ T3408] Bluetooth: Error in BCSP hdr checksum [ 950.194907][ T3408] Bluetooth: Error in BCSP hdr checksum [ 950.640363][T18418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 950.713889][T18417] syz.1.3973 (18417): drop_caches: 2 [ 951.741905][ T5735] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 951.922841][ T5735] usb 3-1: Using ep0 maxpacket: 16 [ 951.926680][ T5735] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 951.930214][ T5735] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 951.930242][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.930261][ T5735] usb 3-1: Product: syz [ 951.930276][ T5735] usb 3-1: Manufacturer: syz [ 951.930291][ T5735] usb 3-1: SerialNumber: syz [ 952.018564][ T5735] r8152-cfgselector 3-1: Unknown version 0x0000 [ 952.018588][ T5735] r8152-cfgselector 3-1: config 0 descriptor?? [ 952.029030][ T4912] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 952.126860][T18423] syz.0.3975 (18423): drop_caches: 2 [ 952.222705][ T5735] r8152-cfgselector 3-1: Needed 1 retries to read version [ 952.226333][T18425] pim6reg: entered allmulticast mode [ 952.231280][T18425] pim6reg: left allmulticast mode [ 952.285738][T18428] fuse: Bad value for 'rootmode' [ 952.500201][T18433] FAULT_INJECTION: forcing a failure. [ 952.500201][T18433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.500236][T18433] CPU: 1 UID: 0 PID: 18433 Comm: syz.3.3979 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 952.500264][T18433] Tainted: [L]=SOFTLOCKUP [ 952.500272][T18433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 952.500284][T18433] Call Trace: [ 952.500291][T18433] [ 952.500299][T18433] dump_stack_lvl+0xe8/0x150 [ 952.500334][T18433] should_fail_ex+0x467/0x600 [ 952.500379][T18433] _copy_from_user+0x2d/0xb0 [ 952.500405][T18433] ___sys_sendmsg+0x1c6/0x360 [ 952.500429][T18433] ? __lock_acquire+0x683/0x2ce0 [ 952.500455][T18433] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.500511][T18433] ? __fget_files+0x2a/0x420 [ 952.500533][T18433] ? __fget_files+0x3a8/0x420 [ 952.500564][T18433] __x64_sys_sendmsg+0x1b7/0x290 [ 952.500591][T18433] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 952.500631][T18433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.500653][T18433] do_syscall_64+0x174/0x580 [ 952.500675][T18433] ? trace_irq_disable+0x3b/0x140 [ 952.500694][T18433] ? clear_bhb_loop+0x40/0x90 [ 952.500718][T18433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.500737][T18433] RIP: 0033:0x7f0b4fc0e019 [ 952.500756][T18433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.500772][T18433] RSP: 002b:00007f0b4de66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.500792][T18433] RAX: ffffffffffffffda RBX: 00007f0b4fe95fa0 RCX: 00007f0b4fc0e019 [ 952.500808][T18433] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 952.500821][T18433] RBP: 00007f0b4de66090 R08: 0000000000000000 R09: 0000000000000000 [ 952.500834][T18433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.500846][T18433] R13: 00007f0b4fe96038 R14: 00007f0b4fe95fa0 R15: 00007fff4b446888 [ 952.500877][T18433] [ 952.790366][T17945] r8152-cfgselector 3-1: USB disconnect, device number 83 [ 953.079547][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3980'. [ 953.079623][T18438] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 954.098555][T18438] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3980'. [ 954.176202][ T36] kauditd_printk_skb: 263 callbacks suppressed [ 954.176219][ T36] audit: type=1800 audit(1785536050.727:13253): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 954.225518][ T36] audit: type=1800 audit(1785536050.777:13254): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 954.451749][ T36] audit: type=1800 audit(1785536050.837:13255): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 954.526223][T18450] FAULT_INJECTION: forcing a failure. [ 954.526223][T18450] name failslab, interval 1, probability 0, space 0, times 0 [ 954.526260][T18450] CPU: 0 UID: 0 PID: 18450 Comm: syz.0.3986 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 954.526288][T18450] Tainted: [L]=SOFTLOCKUP [ 954.526295][T18450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.526307][T18450] Call Trace: [ 954.526316][T18450] [ 954.526325][T18450] dump_stack_lvl+0xe8/0x150 [ 954.526360][T18450] should_fail_ex+0x467/0x600 [ 954.526396][T18450] should_failslab+0xa8/0x100 [ 954.526423][T18450] __kmalloc_cache_noprof+0xa0/0x6b0 [ 954.526446][T18450] ? reuseport_alloc+0x13d/0x520 [ 954.526585][T18450] ? reuseport_alloc+0x13d/0x520 [ 954.526614][T18450] ? reuseport_alloc+0x25/0x520 [ 954.526639][T18450] reuseport_alloc+0x13d/0x520 [ 954.526658][T18450] ? reuseport_alloc+0x25/0x520 [ 954.526682][T18450] inet_hash+0x6fc/0xcb0 [ 954.526721][T18450] inet_csk_listen_start+0x27a/0x380 [ 954.526757][T18450] __inet_listen_sk+0x2d3/0x5c0 [ 954.526826][T18450] ? __pfx___inet_listen_sk+0x10/0x10 [ 954.526856][T18450] ? __local_bh_enable+0x1e1/0x2f0 [ 954.526919][T18450] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 954.526944][T18450] ? lockdep_hardirqs_on+0x7a/0x110 [ 954.526977][T18450] inet_listen+0xa5/0x110 [ 954.527007][T18450] __x64_sys_listen+0x1cd/0x240 [ 954.527030][T18450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.527052][T18450] do_syscall_64+0x174/0x580 [ 954.527077][T18450] ? trace_irq_disable+0x3b/0x140 [ 954.527098][T18450] ? clear_bhb_loop+0x40/0x90 [ 954.527123][T18450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.527142][T18450] RIP: 0033:0x7fd280e6e019 [ 954.527161][T18450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.527177][T18450] RSP: 002b:00007fd27f0c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 954.527198][T18450] RAX: ffffffffffffffda RBX: 00007fd2810f5fa0 RCX: 00007fd280e6e019 [ 954.527213][T18450] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 954.527225][T18450] RBP: 00007fd27f0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 954.527238][T18450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.527251][T18450] R13: 00007fd2810f6038 R14: 00007fd2810f5fa0 R15: 00007ffc92f84528 [ 954.527287][T18450] [ 955.341765][ T36] audit: type=1800 audit(1785536051.887:13256): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 955.923680][ T36] audit: type=1800 audit(1785536052.407:13257): pid=18465 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.3989" name="bus" dev="tmpfs" ino=646 res=0 errno=0 [ 956.691727][ T36] audit: type=1800 audit(1785536053.237:13258): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 956.777081][ T36] audit: type=1800 audit(1785536053.327:13259): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 956.803379][T18472] comedi comedi0: comedi_config --init_data is deprecated [ 956.840331][ T36] audit: type=1800 audit(1785536053.387:13260): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 957.824008][T18468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.083342][ T36] audit: type=1800 audit(1785536054.627:13261): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 958.257875][ T36] audit: type=1800 audit(1785536054.807:13262): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 959.479548][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 959.479567][ T36] audit: type=1800 audit(1785536056.027:13264): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 959.763321][T18509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.763522][T18509] batadv_slave_1: entered promiscuous mode [ 959.826966][ T36] audit: type=1800 audit(1785536056.377:13265): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 960.224183][ T36] audit: type=1800 audit(1785536056.777:13266): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 960.338831][ T36] audit: type=1800 audit(1785536056.887:13267): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 960.447782][ T36] audit: type=1800 audit(1785536056.997:13268): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 960.667387][ T36] audit: type=1800 audit(1785536057.217:13269): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 960.988044][T18544] FAULT_INJECTION: forcing a failure. [ 960.988044][T18544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.988084][T18544] CPU: 0 UID: 0 PID: 18544 Comm: syz.0.4014 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 960.988111][T18544] Tainted: [L]=SOFTLOCKUP [ 960.988119][T18544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 960.988131][T18544] Call Trace: [ 960.988139][T18544] [ 960.988148][T18544] dump_stack_lvl+0xe8/0x150 [ 960.988183][T18544] should_fail_ex+0x467/0x600 [ 960.988219][T18544] _copy_to_user+0x31/0xb0 [ 960.988246][T18544] cp_new_stat+0x3c3/0x540 [ 960.988272][T18544] ? __pfx_cp_new_stat+0x10/0x10 [ 960.988308][T18544] ? shmem_getattr+0x37b/0x4b0 [ 960.988417][T18544] __x64_sys_newfstat+0x1b1/0x270 [ 960.988428][T18544] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 960.988443][T18544] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 960.988462][T18544] ? __pfx_ksys_write+0x10/0x10 [ 960.988479][T18544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.988491][T18544] do_syscall_64+0x174/0x580 [ 960.988504][T18544] ? trace_irq_disable+0x3b/0x140 [ 960.988515][T18544] ? clear_bhb_loop+0x40/0x90 [ 960.988535][T18544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.988545][T18544] RIP: 0033:0x7fd280e6e019 [ 960.988556][T18544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.988570][T18544] RSP: 002b:00007fd27f0c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 960.988590][T18544] RAX: ffffffffffffffda RBX: 00007fd2810f5fa0 RCX: 00007fd280e6e019 [ 960.988605][T18544] RDX: 0000000000000000 RSI: 0000200000002a00 RDI: 0000000000000003 [ 960.988618][T18544] RBP: 00007fd27f0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 960.988628][T18544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.988634][T18544] R13: 00007fd2810f6038 R14: 00007fd2810f5fa0 R15: 00007ffc92f84528 [ 960.988650][T18544] [ 961.243858][ T36] audit: type=1800 audit(1785536057.797:13270): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 962.354532][ T36] audit: type=1800 audit(1785536058.907:13271): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 962.389102][T18557] IPVS: Error connecting to the multicast addr [ 962.426714][ T36] audit: type=1800 audit(1785536058.977:13272): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 962.570208][T18550] overlayfs: failed to resolve './file0': -2 [ 962.579748][ T36] audit: type=1800 audit(1785536059.127:13273): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 962.583599][T18548] input: syz0 as /devices/virtual/input/input15 [ 962.746504][T18561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4021'. [ 962.746527][T18561] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4021'. [ 962.793160][T18564] FAULT_INJECTION: forcing a failure. [ 962.793160][T18564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.793193][T18564] CPU: 0 UID: 0 PID: 18564 Comm: syz.2.4020 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 962.793218][T18564] Tainted: [L]=SOFTLOCKUP [ 962.793225][T18564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 962.793237][T18564] Call Trace: [ 962.793245][T18564] [ 962.793253][T18564] dump_stack_lvl+0xe8/0x150 [ 962.793289][T18564] should_fail_ex+0x467/0x600 [ 962.793324][T18564] _copy_from_user+0x2d/0xb0 [ 962.793354][T18564] ___sys_sendmsg+0x1c6/0x360 [ 962.793379][T18564] ? __lock_acquire+0x683/0x2ce0 [ 962.793402][T18564] ? __pfx____sys_sendmsg+0x10/0x10 [ 962.793449][T18564] ? __fget_files+0x2a/0x420 [ 962.793463][T18564] ? __fget_files+0x3a8/0x420 [ 962.793485][T18564] __x64_sys_sendmsg+0x1b7/0x290 [ 962.793504][T18564] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 962.793534][T18564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.793550][T18564] do_syscall_64+0x174/0x580 [ 962.793569][T18564] ? trace_irq_disable+0x3b/0x140 [ 962.793584][T18564] ? clear_bhb_loop+0x40/0x90 [ 962.793601][T18564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.793615][T18564] RIP: 0033:0x7f7a98dbe019 [ 962.793630][T18564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.793643][T18564] RSP: 002b:00007f7a97016028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.793660][T18564] RAX: ffffffffffffffda RBX: 00007f7a99045fa0 RCX: 00007f7a98dbe019 [ 962.793671][T18564] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 962.793680][T18564] RBP: 00007f7a97016090 R08: 0000000000000000 R09: 0000000000000000 [ 962.793690][T18564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.793699][T18564] R13: 00007f7a99046038 R14: 00007f7a99045fa0 R15: 00007ffc6182a0d8 [ 962.793724][T18564] [ 963.650983][ T6834] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 964.525605][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 964.525621][ T36] audit: type=1800 audit(1785536061.077:13292): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189040 res=0 errno=0 [ 964.527849][T18573] Trying to write to read-only block-device nullb0 [ 964.546195][T18578] FAULT_INJECTION: forcing a failure. [ 964.546195][T18578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.546229][T18578] CPU: 1 UID: 0 PID: 18578 Comm: syz.0.4026 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 964.546256][T18578] Tainted: [L]=SOFTLOCKUP [ 964.546264][T18578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 964.546277][T18578] Call Trace: [ 964.546285][T18578] [ 964.546292][T18578] dump_stack_lvl+0xe8/0x150 [ 964.546328][T18578] should_fail_ex+0x467/0x600 [ 964.546362][T18578] strncpy_from_user+0x36/0x2c0 [ 964.546468][T18578] path_setxattrat+0x191/0x450 [ 964.546504][T18578] ? __pfx_path_setxattrat+0x10/0x10 [ 964.546552][T18578] ? ksys_write+0x248/0x270 [ 964.546580][T18578] ? __pfx_ksys_write+0x10/0x10 [ 964.546608][T18578] __x64_sys_lsetxattr+0xbf/0xe0 [ 964.546641][T18578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.546662][T18578] do_syscall_64+0x174/0x580 [ 964.546688][T18578] ? clear_bhb_loop+0x40/0x90 [ 964.546712][T18578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.546731][T18578] RIP: 0033:0x7fd280e6e019 [ 964.546748][T18578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.546765][T18578] RSP: 002b:00007fd27f0c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 964.546785][T18578] RAX: ffffffffffffffda RBX: 00007fd2810f5fa0 RCX: 00007fd280e6e019 [ 964.546800][T18578] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 0000200000000140 [ 964.546814][T18578] RBP: 00007fd27f0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 964.546827][T18578] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 964.546838][T18578] R13: 00007fd2810f6038 R14: 00007fd2810f5fa0 R15: 00007ffc92f84528 [ 964.546868][T18578] [ 964.671142][ T6834] usb 2-1: Using ep0 maxpacket: 8 [ 964.698358][ T6834] usb 2-1: config 5 has an invalid interface number: 54 but max is 0 [ 964.698384][ T6834] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 964.698403][ T6834] usb 2-1: config 5 has no interface number 0 [ 964.698434][ T6834] usb 2-1: config 5 interface 54 has no altsetting 0 [ 964.704994][ T6834] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 9.3a [ 964.705022][ T6834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.705041][ T6834] usb 2-1: Product: syz [ 964.705054][ T6834] usb 2-1: Manufacturer: syz [ 964.705069][ T6834] usb 2-1: SerialNumber: syz [ 964.794954][ T36] audit: type=1800 audit(1785536061.347:13293): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189059 res=0 errno=0 [ 964.921890][ T36] audit: type=1800 audit(1785536061.477:13294): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=189091 res=0 errno=0 [ 964.926653][ T36] audit: type=1800 audit(1785536061.477:13295): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=189066 res=0 errno=0 [ 964.930458][ T36] audit: type=1800 audit(1785536061.477:13296): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=189067 res=0 errno=0 [ 965.067758][T18584] netlink: 'syz.4.4028': attribute type 5 has an invalid length. [ 965.300463][ T36] audit: type=1800 audit(1785536061.847:13297): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 965.407011][ T36] audit: type=1800 audit(1785536061.957:13298): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 965.623466][ T36] audit: type=1800 audit(1785536062.177:13299): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 966.309695][ T6834] cdc_ether 2-1:5.54: skipping garbage [ 966.309716][ T6834] cdc_ether 2-1:5.54: More than one union descriptor, skipping ... [ 966.309733][ T6834] usb 2-1: No union descriptors [ 966.311237][ T6834] usb 2-1: unsupported MDLM descriptors [ 966.312303][ T6834] cdc_acm 2-1:5.54: skipping garbage [ 966.312319][ T6834] cdc_acm 2-1:5.54: More than one union descriptor, skipping ... [ 966.347002][ T6834] usb 2-1: USB disconnect, device number 66 [ 966.381316][ T36] audit: type=1800 audit(1785536062.877:13300): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=189088 res=0 errno=0 [ 966.381363][ T36] audit: type=1800 audit(1785536062.897:13301): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=189089 res=0 errno=0 [ 966.570689][T18609] syz.1.4036 (18609): drop_caches: 2 [ 969.039890][ T4912] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 969.040209][ T4912] Bluetooth: hci5: Injecting HCI hardware error event [ 969.043468][T16280] Bluetooth: hci5: hardware error 0x00 [ 969.415246][T18662] kAFS: unable to lookup cell '(,c¾Ì' [ 969.527811][T18649] syz.3.4046 (18649): drop_caches: 2 [ 969.559081][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 969.559099][ T36] audit: type=1800 audit(1785536066.108:13320): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 969.697844][T18664] FAULT_INJECTION: forcing a failure. [ 969.697844][T18664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.697882][T18664] CPU: 1 UID: 0 PID: 18664 Comm: syz.1.4054 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 969.697909][T18664] Tainted: [L]=SOFTLOCKUP [ 969.697917][T18664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 969.697929][T18664] Call Trace: [ 969.697937][T18664] [ 969.697946][T18664] dump_stack_lvl+0xe8/0x150 [ 969.697981][T18664] should_fail_ex+0x467/0x600 [ 969.698016][T18664] _copy_from_user+0x2d/0xb0 [ 969.698041][T18664] ___sys_sendmsg+0x1c6/0x360 [ 969.698066][T18664] ? __lock_acquire+0x683/0x2ce0 [ 969.698149][T18664] ? __pfx____sys_sendmsg+0x10/0x10 [ 969.698206][T18664] ? __fget_files+0x2a/0x420 [ 969.698227][T18664] ? __fget_files+0x3a8/0x420 [ 969.698257][T18664] __x64_sys_sendmsg+0x1b7/0x290 [ 969.698284][T18664] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 969.698325][T18664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.698347][T18664] do_syscall_64+0x174/0x580 [ 969.698373][T18664] ? trace_irq_disable+0x3b/0x140 [ 969.698392][T18664] ? clear_bhb_loop+0x40/0x90 [ 969.698416][T18664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.698435][T18664] RIP: 0033:0x7fc847a6e019 [ 969.698454][T18664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.698470][T18664] RSP: 002b:00007fc845cc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 969.698493][T18664] RAX: ffffffffffffffda RBX: 00007fc847cf5fa0 RCX: 00007fc847a6e019 [ 969.698508][T18664] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003 [ 969.698522][T18664] RBP: 00007fc845cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 969.698535][T18664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.698548][T18664] R13: 00007fc847cf6038 R14: 00007fc847cf5fa0 R15: 00007ffc9ae1cd88 [ 969.698577][T18664] [ 969.857334][ T36] audit: type=1800 audit(1785536066.408:13321): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 969.977039][ T36] audit: type=1800 audit(1785536066.528:13322): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 970.045149][ T36] audit: type=1800 audit(1785536066.598:13323): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 971.443636][T16280] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 971.544496][ T36] audit: type=1800 audit(1785536068.098:13324): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 971.633584][ T36] audit: type=1800 audit(1785536068.178:13325): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 971.636264][ T36] audit: type=1800 audit(1785536068.188:13326): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31478 res=0 errno=0 [ 971.678468][ T36] audit: type=1800 audit(1785536068.218:13327): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31501 res=0 errno=0 [ 971.785567][ T36] audit: type=1800 audit(1785536068.338:13328): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189265 res=0 errno=0 [ 971.870818][ T6834] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 971.871016][ T36] audit: type=1800 audit(1785536068.418:13329): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 972.030880][ T6834] usb 3-1: Using ep0 maxpacket: 16 [ 972.032622][ T6834] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 972.032643][ T6834] usb 3-1: config 0 has no interface number 0 [ 972.032669][ T6834] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 972.032682][ T6834] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 972.035280][ T6834] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 972.035307][ T6834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.035326][ T6834] usb 3-1: Product: syz [ 972.035340][ T6834] usb 3-1: Manufacturer: syz [ 972.035353][ T6834] usb 3-1: SerialNumber: syz [ 972.056853][ T6834] usb 3-1: config 0 descriptor?? [ 972.088553][T18681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 972.088610][T18681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 972.103965][T18695] netlink: 'syz.4.4066': attribute type 2 has an invalid length. [ 972.297646][T18681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 972.297820][T18681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 972.455857][T18703] fuse: fd is not a fuse device [ 972.499088][ T6834] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 972.594320][T18707] FAULT_INJECTION: forcing a failure. [ 972.594320][T18707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.594360][T18707] CPU: 0 UID: 0 PID: 18707 Comm: syz.0.4073 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 972.594388][T18707] Tainted: [L]=SOFTLOCKUP [ 972.594396][T18707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 972.594408][T18707] Call Trace: [ 972.594420][T18707] [ 972.594429][T18707] dump_stack_lvl+0xe8/0x150 [ 972.594463][T18707] should_fail_ex+0x467/0x600 [ 972.594499][T18707] strncpy_from_user+0x36/0x2c0 [ 972.594531][T18707] __x64_sys_lgetxattr+0x19c/0x2b0 [ 972.594563][T18707] ? __pfx___x64_sys_lgetxattr+0x10/0x10 [ 972.594584][T18707] ? rt_mutex_slowunlock+0x219/0x460 [ 972.594625][T18707] ? __pfx_ksys_write+0x10/0x10 [ 972.594658][T18707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.594679][T18707] do_syscall_64+0x174/0x580 [ 972.594709][T18707] ? trace_irq_disable+0x3b/0x140 [ 972.594729][T18707] ? clear_bhb_loop+0x40/0x90 [ 972.594751][T18707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.594768][T18707] RIP: 0033:0x7fd280e6e019 [ 972.594786][T18707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.594802][T18707] RSP: 002b:00007fd27f0c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 972.594822][T18707] RAX: ffffffffffffffda RBX: 00007fd2810f5fa0 RCX: 00007fd280e6e019 [ 972.594837][T18707] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000 [ 972.594850][T18707] RBP: 00007fd27f0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 972.594862][T18707] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 972.594875][T18707] R13: 00007fd2810f6038 R14: 00007fd2810f5fa0 R15: 00007ffc92f84528 [ 972.594911][T18707] [ 972.713299][ T6834] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 972.713328][ T6834] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 972.713573][ T6834] asix 3-1:0.34: probe with driver asix failed with error -61 [ 973.064553][ T6834] usb 3-1: USB disconnect, device number 84 [ 973.229581][T18716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 975.695253][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 975.695272][ T36] audit: type=1800 audit(1785536072.248:13345): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 975.796421][ T36] audit: type=1800 audit(1785536072.358:13346): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 975.956018][T18736] fuse: fd is not a fuse device [ 976.213200][ T36] audit: type=1800 audit(1785536072.758:13347): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 976.255613][ T36] audit: type=1800 audit(1785536072.798:13348): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 976.414450][ T36] audit: type=1800 audit(1785536072.968:13349): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 976.677616][ T36] audit: type=1800 audit(1785536073.228:13350): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 976.740668][ T36] audit: type=1800 audit(1785536073.288:13351): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 976.799511][T18738] syz.2.4081 (18738): drop_caches: 2 [ 977.021588][ T36] audit: type=1800 audit(1785536073.578:13352): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 977.069524][T18759] kAFS: unable to lookup cell '(,c¾Ì' [ 977.148328][ T36] audit: type=1800 audit(1785536073.698:13353): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 977.760825][ T36] audit: type=1800 audit(1785536074.088:13354): pid=18765 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4091" name="bus" dev="tmpfs" ino=1078 res=0 errno=0 [ 978.329377][T18761] syz.3.4090 (18761): drop_caches: 2 [ 979.171835][T17138] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 979.335678][T17138] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 979.335696][T17138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.335713][T17138] usb 2-1: Product: syz [ 979.335720][T17138] usb 2-1: Manufacturer: syz [ 979.335728][T17138] usb 2-1: SerialNumber: syz [ 979.638643][T17138] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 979.638683][T17138] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 979.638694][T17138] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 979.735399][T17138] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 979.904935][T17138] usb 2-1: USB disconnect, device number 67 [ 980.460259][T17138] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 980.610253][T17138] usb 3-1: Using ep0 maxpacket: 16 [ 980.612047][T17138] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 980.614923][T17138] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 980.614950][T17138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.614970][T17138] usb 3-1: Product: syz [ 980.614984][T17138] usb 3-1: Manufacturer: syz [ 980.614998][T17138] usb 3-1: SerialNumber: syz [ 980.715128][T17138] r8152-cfgselector 3-1: Unknown version 0x0000 [ 980.715154][T17138] r8152-cfgselector 3-1: config 0 descriptor?? [ 980.719471][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 980.719490][ T36] audit: type=1800 audit(1785536077.268:13378): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189608 res=0 errno=0 [ 980.743866][ T36] audit: type=1800 audit(1785536077.298:13379): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=189640 res=0 errno=0 [ 980.746117][T18790] syz.0.4099 (18790): drop_caches: 2 [ 980.748798][ T36] audit: type=1800 audit(1785536077.298:13380): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=189615 res=0 errno=0 [ 980.757972][ T36] audit: type=1800 audit(1785536077.308:13381): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=189616 res=0 errno=0 [ 980.983668][ T36] audit: type=1800 audit(1785536077.538:13382): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=189637 res=0 errno=0 [ 980.983699][ T36] audit: type=1800 audit(1785536077.538:13383): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=189638 res=0 errno=0 [ 980.990374][ T36] audit: type=1800 audit(1785536077.538:13384): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=189617 res=0 errno=0 [ 980.990422][ T36] audit: type=1800 audit(1785536077.538:13385): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=189639 res=0 errno=0 [ 980.992102][ T36] audit: type=1800 audit(1785536077.548:13386): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 981.026286][ T36] audit: type=1800 audit(1785536077.578:13387): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189660 res=0 errno=0 [ 982.319994][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4105'. [ 982.485671][ T5329] r8152-cfgselector 3-1: USB disconnect, device number 85 [ 983.955445][ T5843] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 984.505960][T18839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4117'. [ 984.506199][T18838] binder: 18833:18838 ioctl c0306201 200000000000 returned -14 [ 984.687707][T18843] pim6reg: entered allmulticast mode [ 984.694555][T18843] pim6reg: left allmulticast mode [ 984.790998][T18846] fuse: Bad value for 'rootmode' [ 984.866715][ T5843] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 984.866746][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.866766][ T5843] usb 3-1: Product: syz [ 984.866780][ T5843] usb 3-1: Manufacturer: syz [ 984.866794][ T5843] usb 3-1: SerialNumber: syz [ 985.256331][ T5843] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 985.256387][ T5843] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 985.256407][ T5843] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 985.329105][ T5843] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 985.370676][ T5843] usb 3-1: USB disconnect, device number 86 [ 986.060109][ T36] kauditd_printk_skb: 220 callbacks suppressed [ 986.060128][ T36] audit: type=1800 audit(1785536082.618:13608): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 986.893512][ T36] audit: type=1800 audit(1785536083.449:13609): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 986.936067][T18875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4130'. [ 986.937569][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4127'. [ 987.006882][ T36] audit: type=1800 audit(1785536083.559:13610): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 987.063883][ T36] audit: type=1800 audit(1785536083.609:13611): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 987.112977][T18876] bond1: Removing last arp target with arp_interval on [ 987.271400][ T36] audit: type=1800 audit(1785536083.829:13612): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 987.432960][T18888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 988.009950][ T36] audit: type=1800 audit(1785536084.229:13613): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 988.010001][ T36] audit: type=1800 audit(1785536084.559:13614): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 988.156692][ T36] audit: type=1800 audit(1785536084.709:13615): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 988.321593][ T36] audit: type=1800 audit(1785536084.879:13616): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 988.486841][T18902] FAULT_INJECTION: forcing a failure. [ 988.486841][T18902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.486878][T18902] CPU: 1 UID: 0 PID: 18902 Comm: syz.1.4137 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 988.486907][T18902] Tainted: [L]=SOFTLOCKUP [ 988.486914][T18902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 988.486926][T18902] Call Trace: [ 988.486934][T18902] [ 988.486943][T18902] dump_stack_lvl+0xe8/0x150 [ 988.486980][T18902] should_fail_ex+0x467/0x600 [ 988.487015][T18902] _copy_to_user+0x31/0xb0 [ 988.487043][T18902] simple_read_from_buffer+0xe1/0x170 [ 988.487077][T18902] proc_fail_nth_read+0x1be/0x230 [ 988.487104][T18902] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 988.487129][T18902] ? rw_verify_area+0x250/0x4d0 [ 988.487156][T18902] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 988.487177][T18902] vfs_read+0x219/0xa90 [ 988.487210][T18902] ? __pfx_vfs_read+0x10/0x10 [ 988.487237][T18902] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 988.487264][T18902] ? lockdep_hardirqs_on+0x7a/0x110 [ 988.487289][T18902] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 988.487314][T18902] ? mutex_lock_nested+0x152/0x1d0 [ 988.487332][T18902] ? fdget_pos+0x252/0x320 [ 988.487361][T18902] ksys_read+0x156/0x270 [ 988.487389][T18902] ? __pfx_ksys_read+0x10/0x10 [ 988.487422][T18902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.487443][T18902] do_syscall_64+0x174/0x580 [ 988.487468][T18902] ? trace_irq_disable+0x3b/0x140 [ 988.487489][T18902] ? clear_bhb_loop+0x40/0x90 [ 988.487513][T18902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.487533][T18902] RIP: 0033:0x7fc847a2e84e [ 988.487552][T18902] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 988.487568][T18902] RSP: 002b:00007fc845ca4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 988.487589][T18902] RAX: ffffffffffffffda RBX: 00007fc845ca56c0 RCX: 00007fc847a2e84e [ 988.487604][T18902] RDX: 000000000000000f RSI: 00007fc845ca50a0 RDI: 0000000000000006 [ 988.487629][T18902] RBP: 00007fc845ca5090 R08: 0000000000000000 R09: 0000000000000000 [ 988.487642][T18902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.487653][T18902] R13: 00007fc847cf6128 R14: 00007fc847cf6090 R15: 00007ffc9ae1cd88 [ 988.487686][T18902] [ 988.711247][ T36] audit: type=1800 audit(1785536085.259:13617): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 989.763134][ T5734] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 989.946052][T18918] syz.3.4136 (18918): drop_caches: 2 [ 990.121279][ T5734] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 990.121307][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.121326][ T5734] usb 3-1: Product: syz [ 990.121340][ T5734] usb 3-1: Manufacturer: syz [ 990.121353][ T5734] usb 3-1: SerialNumber: syz [ 990.369767][ T5734] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 990.369823][ T5734] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 990.369843][ T5734] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 990.435377][ T5734] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 990.463942][ T5734] usb 3-1: USB disconnect, device number 87 [ 991.380210][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 991.380229][ T36] audit: type=1800 audit(1785536087.879:13636): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 991.603450][ T36] audit: type=1800 audit(1785536088.159:13637): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 991.733193][ T36] audit: type=1800 audit(1785536088.289:13638): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 992.762461][T18956] 9p: Bad value for 'rfdno' [ 993.254902][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.254969][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.272145][ T36] audit: type=1800 audit(1785536089.819:13639): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 993.320262][ T36] audit: type=1800 audit(1785536089.869:13640): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 994.003158][ T36] audit: type=1800 audit(1785536090.459:13641): pid=18973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4163" name="bus" dev="tmpfs" ino=2490 res=0 errno=0 [ 994.754110][ T36] audit: type=1800 audit(1785536091.309:13642): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 994.813600][ T36] audit: type=1800 audit(1785536091.369:13643): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 995.550961][ T36] audit: type=1800 audit(1785536092.099:13644): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 995.777068][ T36] audit: type=1800 audit(1785536092.329:13645): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 995.929066][T18999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4171'. [ 996.428497][T19000] 9p: Bad value for 'rfdno' [ 997.302456][ T36] audit: type=1800 audit(1785536093.859:13646): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 997.493908][ T36] audit: type=1800 audit(1785536094.049:13647): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 997.544452][ T36] audit: type=1800 audit(1785536094.099:13648): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 997.699330][ T36] audit: type=1800 audit(1785536094.249:13649): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 997.860335][ T36] audit: type=1800 audit(1785536094.409:13650): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 998.027570][ T36] audit: type=1800 audit(1785536094.579:13651): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 998.278211][ T36] audit: type=1800 audit(1785536094.829:13652): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 998.831700][T19029] 9p: Bad value for 'rfdno' [ 999.968598][ T36] audit: type=1800 audit(1785536096.519:13653): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 1000.028078][T19032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4172'. [ 1000.178544][ T36] audit: type=1800 audit(1785536096.729:13654): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 1000.245475][ T36] audit: type=1800 audit(1785536096.799:13655): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 1000.636616][T19053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4192'. [ 1000.916513][T19063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4196'. [ 1001.590060][T19059] netlink: 'syz.0.4195': attribute type 1 has an invalid length. [ 1003.025079][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 1003.025097][ T36] audit: type=1800 audit(1785536099.579:13664): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 1003.082949][T19077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4200'. [ 1003.090518][ T36] audit: type=1800 audit(1785536099.649:13665): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 1003.191550][T19084] syz.0.4203 (19084): drop_caches: 2 [ 1003.427189][T19094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1003.572426][T19098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4207'. [ 1003.722535][ T36] audit: type=1800 audit(1785536100.279:13666): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 1003.751161][ T36] audit: type=1800 audit(1785536100.309:13667): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 1003.790721][ T36] audit: type=1800 audit(1785536100.339:13668): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 1003.809416][T19102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4209'. [ 1003.883734][ T36] audit: type=1800 audit(1785536100.439:13669): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 1004.017522][ T36] audit: type=1800 audit(1785536100.569:13670): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 1004.212381][ T36] audit: type=1800 audit(1785536100.729:13671): pid=19110 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4210" name="bus" dev="tmpfs" ino=984 res=0 errno=0 [ 1004.997133][ T36] audit: type=1800 audit(1785536101.550:13672): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 1005.025513][ T36] audit: type=1800 audit(1785536101.570:13673): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 1005.085815][T19117] netlink: 'syz.4.4216': attribute type 1 has an invalid length. [ 1005.085841][T19117] netlink: 'syz.4.4216': attribute type 2 has an invalid length. [ 1005.192149][T19123] syz.2.4218 (19123): drop_caches: 2 [ 1005.348974][ T5735] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1005.589793][ T5735] usb 2-1: Using ep0 maxpacket: 8 [ 1005.592225][ T5735] usb 2-1: config 5 has an invalid interface number: 54 but max is 0 [ 1005.592250][ T5735] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.592270][ T5735] usb 2-1: config 5 has no interface number 0 [ 1005.592302][ T5735] usb 2-1: config 5 interface 54 has no altsetting 0 [ 1005.594683][ T5735] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 9.3a [ 1005.594710][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.594730][ T5735] usb 2-1: Product: syz [ 1005.594745][ T5735] usb 2-1: Manufacturer: syz [ 1005.594759][ T5735] usb 2-1: SerialNumber: syz [ 1005.792281][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4220'. [ 1005.792416][T19129] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1005.869972][T19133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4223'. [ 1005.992032][ T5735] cdc_ether 2-1:5.54: skipping garbage [ 1005.992045][ T5735] cdc_ether 2-1:5.54: More than one union descriptor, skipping ... [ 1005.992054][ T5735] usb 2-1: No union descriptors [ 1005.992992][ T5735] usb 2-1: unsupported MDLM descriptors [ 1005.995438][ T5735] cdc_acm 2-1:5.54: skipping garbage [ 1005.995456][ T5735] cdc_acm 2-1:5.54: More than one union descriptor, skipping ... [ 1006.043080][ T5735] usb 2-1: USB disconnect, device number 68 [ 1006.051387][ T5612] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1006.198849][ T5612] usb 4-1: Using ep0 maxpacket: 16 [ 1006.200803][ T5612] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1006.200830][ T5612] usb 4-1: config 0 has no interface number 0 [ 1006.200872][ T5612] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1006.200897][ T5612] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1006.203208][ T5612] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1006.203236][ T5612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.203255][ T5612] usb 4-1: Product: syz [ 1006.203270][ T5612] usb 4-1: Manufacturer: syz [ 1006.203285][ T5612] usb 4-1: SerialNumber: syz [ 1006.300942][ T5612] usb 4-1: config 0 descriptor?? [ 1006.301523][T19130] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1006.301575][T19130] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1006.397242][T19145] FAULT_INJECTION: forcing a failure. [ 1006.397242][T19145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.397278][T19145] CPU: 1 UID: 0 PID: 19145 Comm: syz.0.4226 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1006.397315][T19145] Tainted: [L]=SOFTLOCKUP [ 1006.397322][T19145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1006.397335][T19145] Call Trace: [ 1006.397343][T19145] [ 1006.397351][T19145] dump_stack_lvl+0xe8/0x150 [ 1006.397386][T19145] should_fail_ex+0x467/0x600 [ 1006.397420][T19145] _copy_from_user+0x2d/0xb0 [ 1006.397444][T19145] ___sys_sendmsg+0x1c6/0x360 [ 1006.397469][T19145] ? __lock_acquire+0x683/0x2ce0 [ 1006.397502][T19145] ? __pfx____sys_sendmsg+0x10/0x10 [ 1006.397557][T19145] ? __fget_files+0x2a/0x420 [ 1006.397578][T19145] ? __fget_files+0x3a8/0x420 [ 1006.397607][T19145] __x64_sys_sendmsg+0x1b7/0x290 [ 1006.397633][T19145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1006.397674][T19145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.397694][T19145] do_syscall_64+0x174/0x580 [ 1006.397719][T19145] ? trace_irq_disable+0x3b/0x140 [ 1006.397738][T19145] ? clear_bhb_loop+0x40/0x90 [ 1006.397761][T19145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.397781][T19145] RIP: 0033:0x7fd280e6e019 [ 1006.397799][T19145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.397815][T19145] RSP: 002b:00007fd27f0a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1006.397837][T19145] RAX: ffffffffffffffda RBX: 00007fd2810f6090 RCX: 00007fd280e6e019 [ 1006.397852][T19145] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 1006.397865][T19145] RBP: 00007fd27f0a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.397876][T19145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.397888][T19145] R13: 00007fd2810f6128 R14: 00007fd2810f6090 R15: 00007ffc92f84528 [ 1006.397917][T19145] [ 1006.508386][T19130] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1006.508438][T19130] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1007.918288][ T5612] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1007.918544][ T5612] asix 4-1:0.34: probe with driver asix failed with error -71 [ 1007.961620][ T5612] usb 4-1: USB disconnect, device number 55 [ 1008.172294][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 1008.172307][ T36] audit: type=1800 audit(1785536104.730:13705): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 1008.248268][T19171] FAULT_INJECTION: forcing a failure. [ 1008.248268][T19171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1008.248305][T19171] CPU: 0 UID: 0 PID: 19171 Comm: syz.3.4234 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1008.248333][T19171] Tainted: [L]=SOFTLOCKUP [ 1008.248340][T19171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1008.248352][T19171] Call Trace: [ 1008.248360][T19171] [ 1008.248368][T19171] dump_stack_lvl+0xe8/0x150 [ 1008.248403][T19171] should_fail_ex+0x467/0x600 [ 1008.248438][T19171] _copy_from_user+0x2d/0xb0 [ 1008.248464][T19171] __sys_bpf+0x2e7/0xd90 [ 1008.248495][T19171] ? __pfx___sys_bpf+0x10/0x10 [ 1008.248518][T19171] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1008.248547][T19171] ? rt_mutex_slowunlock+0x219/0x460 [ 1008.248590][T19171] ? rcu_is_watching+0x15/0xb0 [ 1008.248627][T19171] __x64_sys_bpf+0xba/0xd0 [ 1008.248655][T19171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.248676][T19171] do_syscall_64+0x174/0x580 [ 1008.248698][T19171] ? trace_irq_disable+0x3b/0x140 [ 1008.248717][T19171] ? clear_bhb_loop+0x40/0x90 [ 1008.248739][T19171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.248756][T19171] RIP: 0033:0x7f0b4fc0e019 [ 1008.248775][T19171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.248790][T19171] RSP: 002b:00007f0b4de45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1008.248811][T19171] RAX: ffffffffffffffda RBX: 00007f0b4fe96090 RCX: 00007f0b4fc0e019 [ 1008.248826][T19171] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 1008.248839][T19171] RBP: 00007f0b4de45090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.248851][T19171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.248862][T19171] R13: 00007f0b4fe96128 R14: 00007f0b4fe96090 R15: 00007fff4b446888 [ 1008.248893][T19171] [ 1008.586665][T19169] syz.0.4231 (19169): drop_caches: 2 [ 1009.177322][ T36] audit: type=1800 audit(1785536105.730:13706): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 1009.262227][T19175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4235'. [ 1009.310342][ T36] audit: type=1800 audit(1785536105.860:13707): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 1009.440527][ T36] audit: type=1800 audit(1785536106.000:13708): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 1009.502107][ T36] audit: type=1800 audit(1785536106.060:13709): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 1009.622727][ T36] audit: type=1800 audit(1785536106.180:13710): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 1009.693238][ T36] audit: type=1800 audit(1785536106.250:13711): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 1010.169242][ T36] audit: type=1800 audit(1785536106.410:13712): pid=19194 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4241" name="bus" dev="tmpfs" ino=1489 res=0 errno=0 [ 1010.663053][ T36] audit: type=1800 audit(1785536107.220:13713): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 1010.684100][ T36] audit: type=1800 audit(1785536107.240:13714): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 1011.021009][T19207] pim6reg: entered allmulticast mode [ 1011.043484][T19207] pim6reg: left allmulticast mode [ 1011.095079][T19212] fuse: Bad value for 'rootmode' [ 1011.238612][T17945] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1011.330215][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4251'. [ 1011.925253][T17945] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1011.925284][T17945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.925305][T17945] usb 1-1: Product: syz [ 1011.925320][T17945] usb 1-1: Manufacturer: syz [ 1011.925335][T17945] usb 1-1: SerialNumber: syz [ 1012.251558][T17945] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1012.251613][T17945] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1012.251632][T17945] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1012.456689][T17945] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1013.179262][ T36] kauditd_printk_skb: 127 callbacks suppressed [ 1013.179280][ T36] audit: type=1800 audit(1785536109.740:13842): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 1013.181165][T17945] usb 1-1: USB disconnect, device number 58 [ 1013.205185][ T36] audit: type=1800 audit(1785536109.760:13843): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=191017 res=0 errno=0 [ 1013.442633][ T36] audit: type=1800 audit(1785536110.000:13844): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 1013.492064][ T36] audit: type=1800 audit(1785536110.040:13845): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 1013.663809][ T36] audit: type=1800 audit(1785536110.220:13846): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 1013.752520][T19244] syz.0.4260 (19244): drop_caches: 2 [ 1014.280240][T19248] [ 1014.280254][T19248] ====================================================== [ 1014.280265][T19248] WARNING: possible circular locking dependency detected [ 1014.280288][T19248] syzkaller #0 Tainted: G L [ 1014.280303][T19248] ------------------------------------------------------ [ 1014.280313][T19248] syz.2.4259/19248 is trying to acquire lock: [ 1014.280327][T19248] ffff88805ca087b0 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}, at: lookup_slow+0x46/0x70 [ 1014.280393][T19248] [ 1014.280393][T19248] but task is already holding lock: [ 1014.280401][T19248] ffff888034d45078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1014.280536][T19248] [ 1014.280536][T19248] which lock already depends on the new lock. [ 1014.280536][T19248] [ 1014.280547][T19248] [ 1014.280547][T19248] the existing dependency chain (in reverse order) is: [ 1014.280557][T19248] [ 1014.280557][T19248] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1014.280587][T19248] mutex_lock_nested+0x5a/0x1d0 [ 1014.280610][T19248] kernfs_fop_read_iter+0x18c/0x6a0 [ 1014.280640][T19248] __kernel_read+0x4d3/0x970 [ 1014.280667][T19248] integrity_kernel_read+0x89/0xd0 [ 1014.280692][T19248] ima_calc_file_hash+0x45d/0x8a0 [ 1014.280751][T19248] ima_collect_measurement+0x521/0xa10 [ 1014.280782][T19248] process_measurement+0x1282/0x1c20 [ 1014.280810][T19248] ima_file_check+0xe1/0x130 [ 1014.280836][T19248] security_file_post_open+0xb3/0x260 [ 1014.280862][T19248] path_openat+0x2eac/0x3850 [ 1014.280887][T19248] do_file_open+0x23e/0x4a0 [ 1014.280911][T19248] do_sys_openat2+0x115/0x200 [ 1014.280933][T19248] __x64_sys_openat+0x138/0x170 [ 1014.280953][T19248] do_syscall_64+0x174/0x580 [ 1014.280980][T19248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.281002][T19248] [ 1014.281002][T19248] -> #2 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1014.281035][T19248] mutex_lock_nested+0x5a/0x1d0 [ 1014.281054][T19248] process_measurement+0x7e0/0x1c20 [ 1014.281080][T19248] ima_file_check+0xe1/0x130 [ 1014.281116][T19248] security_file_post_open+0xb3/0x260 [ 1014.281141][T19248] path_openat+0x2eac/0x3850 [ 1014.281168][T19248] do_file_open+0x23e/0x4a0 [ 1014.281193][T19248] do_sys_openat2+0x115/0x200 [ 1014.281214][T19248] __x64_sys_openat+0x138/0x170 [ 1014.281234][T19248] do_syscall_64+0x174/0x580 [ 1014.281260][T19248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.281282][T19248] [ 1014.281282][T19248] -> #1 (sb_writers#5){.+.+}-{0:0}: [ 1014.281316][T19248] sb_start_write+0x4d/0x1c0 [ 1014.281342][T19248] mnt_want_write+0x41/0x90 [ 1014.281367][T19248] ovl_create_object+0x108/0x3b0 [ 1014.281440][T19248] path_openat+0x1344/0x3850 [ 1014.281467][T19248] do_file_open+0x23e/0x4a0 [ 1014.281493][T19248] do_sys_openat2+0x115/0x200 [ 1014.281513][T19248] __x64_sys_open+0x11e/0x150 [ 1014.281533][T19248] do_syscall_64+0x174/0x580 [ 1014.281559][T19248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.281581][T19248] [ 1014.281581][T19248] -> #0 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}: [ 1014.281616][T19248] __lock_acquire+0x1520/0x2ce0 [ 1014.281638][T19248] lock_acquire+0x106/0x350 [ 1014.281658][T19248] down_read+0x97/0x200 [ 1014.281684][T19248] lookup_slow+0x46/0x70 [ 1014.281705][T19248] path_lookupat+0x3f5/0x8c0 [ 1014.281725][T19248] filename_lookup+0x265/0x5d0 [ 1014.281745][T19248] kern_path+0x3d/0x150 [ 1014.281765][T19248] lookup_bdev+0xc8/0x290 [ 1014.281859][T19248] resume_store+0x16f/0x4f0 [ 1014.281918][T19248] kernfs_fop_write_iter+0x3a5/0x540 [ 1014.281948][T19248] vfs_write+0x61e/0xbb0 [ 1014.281973][T19248] ksys_write+0x156/0x270 [ 1014.281998][T19248] do_syscall_64+0x174/0x580 [ 1014.282023][T19248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.282045][T19248] [ 1014.282045][T19248] other info that might help us debug this: [ 1014.282045][T19248] [ 1014.282053][T19248] Chain exists of: [ 1014.282053][T19248] &ovl_i_mutex_dir_key[depth]#2 --> &ima_iint_mutex_key[depth] --> &of->mutex [ 1014.282053][T19248] [ 1014.282104][T19248] Possible unsafe locking scenario: [ 1014.282104][T19248] [ 1014.282113][T19248] CPU0 CPU1 [ 1014.282121][T19248] ---- ---- [ 1014.282129][T19248] lock(&of->mutex); [ 1014.282144][T19248] lock(&ima_iint_mutex_key[depth]); [ 1014.282163][T19248] lock(&of->mutex); [ 1014.282179][T19248] rlock(&ovl_i_mutex_dir_key[depth]#2); [ 1014.282200][T19248] [ 1014.282200][T19248] *** DEADLOCK *** [ 1014.282200][T19248] [ 1014.282207][T19248] 3 locks held by syz.2.4259/19248: [ 1014.282220][T19248] #0: ffff8880347ac500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1014.282282][T19248] #1: ffff888034d45078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1014.282341][T19248] #2: ffff88801dab14b8 (kn->active#78){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1014.282404][T19248] [ 1014.282404][T19248] stack backtrace: [ 1014.282421][T19248] CPU: 0 UID: 0 PID: 19248 Comm: syz.2.4259 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1014.282456][T19248] Tainted: [L]=SOFTLOCKUP [ 1014.282484][T19248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1014.282499][T19248] Call Trace: [ 1014.282509][T19248] [ 1014.282519][T19248] dump_stack_lvl+0xe8/0x150 [ 1014.282555][T19248] print_circular_bug+0x2e1/0x300 [ 1014.282586][T19248] check_noncircular+0x12e/0x150 [ 1014.282616][T19248] __lock_acquire+0x1520/0x2ce0 [ 1014.282649][T19248] ? lookup_slow+0x46/0x70 [ 1014.282673][T19248] lock_acquire+0x106/0x350 [ 1014.282695][T19248] ? lookup_slow+0x46/0x70 [ 1014.282724][T19248] down_read+0x97/0x200 [ 1014.282752][T19248] ? lookup_slow+0x46/0x70 [ 1014.282776][T19248] ? __pfx_down_read+0x10/0x10 [ 1014.282806][T19248] ? lookup_fast+0x197/0x5d0 [ 1014.282832][T19248] lookup_slow+0x46/0x70 [ 1014.282856][T19248] path_lookupat+0x3f5/0x8c0 [ 1014.282886][T19248] filename_lookup+0x265/0x5d0 [ 1014.282910][T19248] ? __pfx_filename_lookup+0x10/0x10 [ 1014.282942][T19248] ? do_getname_kernel+0x54/0x230 [ 1014.282963][T19248] ? do_getname_kernel+0x54/0x230 [ 1014.282983][T19248] ? do_getname_kernel+0x97/0x230 [ 1014.283004][T19248] ? __asan_memcpy+0x40/0x70 [ 1014.283037][T19248] ? do_getname_kernel+0x183/0x230 [ 1014.283059][T19248] kern_path+0x3d/0x150 [ 1014.283083][T19248] lookup_bdev+0xc8/0x290 [ 1014.283124][T19248] ? resume_store+0x14e/0x4f0 [ 1014.283156][T19248] ? __pfx_lookup_bdev+0x10/0x10 [ 1014.283186][T19248] ? __asan_memcpy+0x40/0x70 [ 1014.283218][T19248] ? kstrndup+0xbd/0x160 [ 1014.283248][T19248] resume_store+0x16f/0x4f0 [ 1014.283278][T19248] ? sysfs_file_kobj+0x1a/0x230 [ 1014.283310][T19248] ? __pfx_resume_store+0x10/0x10 [ 1014.283342][T19248] ? sysfs_file_kobj+0x1a/0x230 [ 1014.283372][T19248] ? sysfs_file_kobj+0x1a/0x230 [ 1014.283403][T19248] ? sysfs_file_kobj+0x1a/0x230 [ 1014.283435][T19248] ? sysfs_file_kobj+0x1e4/0x230 [ 1014.283511][T19248] ? sysfs_kf_write+0x166/0x260 [ 1014.283536][T19248] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1014.283558][T19248] kernfs_fop_write_iter+0x3a5/0x540 [ 1014.283591][T19248] vfs_write+0x61e/0xbb0 [ 1014.283622][T19248] ? __pfx_vfs_write+0x10/0x10 [ 1014.283659][T19248] ? __pfx_do_futex+0x10/0x10 [ 1014.283749][T19248] ? kmem_cache_free+0x187/0x6c0 [ 1014.283782][T19248] ksys_write+0x156/0x270 [ 1014.283810][T19248] ? __pfx_ksys_write+0x10/0x10 [ 1014.283843][T19248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.283865][T19248] do_syscall_64+0x174/0x580 [ 1014.283891][T19248] ? trace_irq_disable+0x3b/0x140 [ 1014.283912][T19248] ? clear_bhb_loop+0x40/0x90 [ 1014.283935][T19248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.283956][T19248] RIP: 0033:0x7f7a98dbe019 [ 1014.283976][T19248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.283994][T19248] RSP: 002b:00007f7a96fd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1014.284016][T19248] RAX: ffffffffffffffda RBX: 00007f7a99046180 RCX: 00007f7a98dbe019 [ 1014.284033][T19248] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000006 [ 1014.284047][T19248] RBP: 00007f7a98e5500c R08: 0000000000000000 R09: 0000000000000000 [ 1014.284061][T19248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.284074][T19248] R13: 00007f7a99046218 R14: 00007f7a99046180 R15: 00007ffc6182a0d8 [ 1014.284104][T19248] [ 1014.290430][ T36] audit: type=1800 audit(1785536110.830:13847): pid=19248 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.4259" name="resume" dev="sysfs" ino=1437 res=0 errno=0 [ 1014.702572][T19248] PM: Image not found (code -22) [ 1014.865495][ T36] audit: type=1800 audit(1785536111.420:13848): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15264 res=0 errno=0 [ 1015.075426][ T36] audit: type=1800 audit(1785536111.630:13849): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15387 res=0 errno=0 [ 1015.375762][ T36] audit: type=1800 audit(1785536111.930:13850): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 1015.380633][ T36] audit: type=1800 audit(1785536111.940:13851): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0