last executing test programs: 3m26.839099848s ago: executing program 0 (id=1217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[], 0x28}}, 0x40000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008004}, 0x50) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x297dce6933af752d, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m26.561948107s ago: executing program 0 (id=1220): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000140)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000000000007b2ac0ff00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000001800850000004500000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r2, 0x0, 0xe, 0xfffffffffffffdb7, &(0x7f00000005c0)="0011223344550011223344560800", 0x0, 0x40000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) 3m24.737184568s ago: executing program 0 (id=1230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[], 0x28}}, 0x40000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008004}, 0x50) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x297dce6933af752d, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m24.38524409s ago: executing program 0 (id=1236): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x40, 0x7fff0000}]}) r1 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x80, 0x2}]}, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000000a000000fe00ff09000000009cdfdeb203d30b92af812ccf3ea6d6fa7ddd537f7a79509cbc2c5b90da4d1dc856b6b1a562f95efd8cd8ec6252f0139f85e1fc8a9d91d7c21ced134a567a663519c6776352ac6d720cd9b9af470ea366bba98f5a453aa559ad5b0bcc9fcb6ce45d4d7ebe2a44d5ade47816ed54044a69e6009781e1ab8df4d43927d397ba888cb91e931fb92349533dd6b235bf3077cbc0e66fea681fb2bace6a72fc348fbf93517c50f0a15cdc0ea20b955be39d6f4eadc443d1177c4feac337d14365ecf8b4a8d291343b8516ecfe5c56aa78b6ebcc7186e0938444ecd5e4f5"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair(0x22, 0x80000, 0xa, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x188}}, 0xc0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}}, 0x0) 3m23.042063081s ago: executing program 0 (id=1245): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8840) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x34, 0x2, 'client0\x00', 0x1, "94de669ab5120aca", "68558acf487b6b68739bb4598ce95cf22e39ca8c9aea76052948ae6325188805", 0xfffffff9, 0x8}) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) open(&(0x7f0000000100)='./cgroup.cpu/test/memory.limit_in_bytes/../file0\x00', 0x503440, 0x80) io_uring_enter(r1, 0x4095, 0x7721, 0x16, 0x0, 0x0) 3m22.662331708s ago: executing program 0 (id=1248): syz_clone3(&(0x7f0000000780)={0x40080400, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f00000009c0)) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='nicvf0\x00') 3m6.645948746s ago: executing program 32 (id=1248): syz_clone3(&(0x7f0000000780)={0x40080400, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f00000009c0)) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='nicvf0\x00') 10.538851598s ago: executing program 3 (id=1851): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x73, &(0x7f00000004c0)=ANY=[@ANYBLOB="475787765bfde20bc3c3984b0805000601f0dd1aada91e71703cfdf6c424f4dc1b9f3cf713e83c55b67bf8b8a83e558544cb59b6bdaec88ab06645fb5dcc65ad30c024025fac5a732312b03e7d8b7dfa252f9bedaeeca3d2ecc9b285c42ac226322fcadfea030e8b9f2ed42d18eb61a552235a80745740738322aeae0922bb2c5bf868440ffad1d3e3b1730568e4b125b71b6b1c215a489a3d2212"], 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 10.312054994s ago: executing program 3 (id=1852): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7840, 0xd, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0xe) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8.1668177s ago: executing program 3 (id=1860): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000080003c00000000000000ffffffff00000000000000000040000000000000000300"/180], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0x2020) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x4, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x3, 0x3c) writev(r9, &(0x7f0000000080)=[{0xffffffffffffffff}], 0x1) 7.701900595s ago: executing program 2 (id=1861): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x73, &(0x7f00000004c0)=ANY=[@ANYBLOB="475787765bfde20bc3c3984b0805000601f0dd1aada91e71703cfdf6c424f4dc1b9f3cf713e83c55b67bf8b8a83e558544cb59b6bdaec88ab06645fb5dcc65ad30c024025fac5a732312b03e7d8b7dfa252f9bedaeeca3d2ecc9b285c42ac226322fcadfea030e8b9f2ed42d18eb61a552235a80745740738322aeae0922bb2c5bf868440ffad1d3e3b1730568e4b125b71b6b1c215a489a3d2212"], 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 7.642850417s ago: executing program 3 (id=1863): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1]) 7.485971777s ago: executing program 2 (id=1864): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) (fail_nth: 3) 7.147514476s ago: executing program 3 (id=1865): openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 6.965406443s ago: executing program 3 (id=1867): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000300)=@in6={0xa, 0x4e63, 0x45d, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18}}], 0x18}, 0x80) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000540)={0x1, 0x3, 0xe65, 0x400000005, 0x6, 0x5, 0x8, 0xcc3, 0x0, 0x100000a, 0x100400, 0x1}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9800, &(0x7f0000000040)={0x100002, 0x70, 0x0, {r4}}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f0000000140)) 6.857741859s ago: executing program 2 (id=1868): r0 = syz_open_dev$video(&(0x7f0000000040), 0x59, 0x200) r1 = accept4$x25(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x12, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x2, 0x5, 0x200, 0x1, 0x4, 0x1c, 0x26, "1d7aa1f4bbf190ca2a45466c4c72cc503889b2ae", "acc8cb4e5b3f41d27d5197af0262f7b10cb18e24"}) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_mmap={0x564, 0x9, 0x4, 0x4000, 0x3, {0x0, 0x2710}, {0x4, 0x2, 0x0, 0x0, 0x5, 0x1, "39140190"}, 0xfffffc01, 0x1, {&(0x7f00000000c0)=[{0x8, 0x400, {0x4}, 0x7}, {0x9, 0xbad, {0xe8c000000000}}]}, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r2, &(0x7f0000001fc0)=""/184, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r3 = syz_open_dev$mtd(&(0x7f0000000080), 0x2, 0x80400) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0x294, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x5e}}}}, [@NL80211_ATTR_TID_CONFIG={0xdc, 0x11d, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x3, 0x5, 0x4, 0x101, 0x400, 0x200, 0x401]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x2, 0x4, 0x1b, 0xc, 0x16, 0x9, 0x1b, 0xb, 0x30, 0xb, 0x36, 0x3, 0x6, 0x36, 0x1b, 0x36, 0x1b, 0x60, 0x12, 0xc]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0x44, 0x0, 0x6, 0x6c, 0x4, 0x16]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0x48, 0x36, 0x1, 0x1b, 0xda0ccf9e1bce5e55, 0x60, 0x18, 0xb, 0x1b, 0x12, 0x3, 0x5, 0x1b, 0x1, 0x48, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xff, 0x0, 0x5f, 0xf33, 0x7ff, 0x6, 0x2ee]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xee2, 0x80, 0x0, 0x3, 0x7, 0xffd2, 0x8, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2393}]}]}, @NL80211_ATTR_TID_CONFIG={0x190, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x644f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x58}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3b}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbe}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0x75, 0x2, 0x5, 0x12, 0x6, 0x18, 0x5, 0xb, 0x24, 0x18, 0x6, 0x3, 0x0, 0x9, 0x5, 0x2, 0xc, 0x5, 0x3, 0x3, 0x3, 0x48]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x12, 0x48, 0x0, 0x30, 0xc, 0x1b, 0x12, 0x48, 0x4, 0x30, 0x36, 0x3, 0x6c, 0x5, 0x4, 0x0, 0x5, 0x1b, 0x3, 0x9, 0x36, 0x2, 0x6]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x86}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0xa}, {0x0, 0xa}, {0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x7, 0x3}, {0x5, 0x1}, {0x6}, {0x0, 0x5}, {0x1, 0x6}, {0x4, 0x2}, {0x7, 0x8}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x3}, {}, {0x1, 0x4}, {0x6}, {0x1, 0x1}, {0x6, 0x7}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0x3}, {0x1, 0xa}, {0x2, 0x8}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x7, 0xa}, {0x2, 0x1}, {0x2, 0x2}, {0x1}, {0x1}, {0x6, 0x2}, {0x3, 0x3}, {0x2, 0x7}, {0x1, 0x4}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x0, 0x8, 0xf4b7, 0x6, 0x4, 0x9]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x63}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x29}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x408c0}, 0x20040881) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x7}, {&(0x7f0000000280)=""/121, 0xa2ec4ae9}], 0x2, 0x0, 0x8dff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x1, 0x40, 0x3, 0x2, {{0xe, 0x4, 0x0, 0x2e, 0x38, 0x65, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp={0x44, 0x18, 0xa8, 0x0, 0x0, [0x3, 0x29a7, 0x0, 0x7, 0x9]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x5b, [@multicast1]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000002c0)={'gre0\x00', r8, 0x10, 0x7800, 0x0, 0x4, {{0xd, 0x4, 0x1, 0x3c, 0x34, 0x68, 0x0, 0xfc, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x89, 0x3, 0x3, [{@multicast2, 0xffffff97}]}, @generic={0x44, 0xe, "acf70f81f2858b09583176c8"}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$OTPSELECT(r3, 0x80044d0d, &(0x7f0000000140)) 4.538490174s ago: executing program 1 (id=1871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (fail_nth: 4) 4.071142363s ago: executing program 2 (id=1872): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000080003c00000000000000ffffffff00000000000000000040000000000000000300"/180], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0x2020) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x4, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x3, 0x3c) writev(r9, &(0x7f0000000080)=[{0xffffffffffffffff}], 0x1) 2.98735106s ago: executing program 4 (id=1873): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x73, &(0x7f00000004c0)=ANY=[@ANYBLOB="475787765bfde20bc3c3984b0805000601f0dd1aada91e71703cfdf6c424f4dc1b9f3cf713e83c55b67bf8b8a83e558544cb59b6bdaec88ab06645fb5dcc65ad30c024025fac5a732312b03e7d8b7dfa252f9bedaeeca3d2ecc9b285c42ac226322fcadfea030e8b9f2ed42d18eb61a552235a80745740738322aeae0922bb2c5bf868440ffad1d3e3b1730568e4b125b71b6b1c215a489a3d2212"], 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 2.813340753s ago: executing program 1 (id=1874): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1]) 2.481239346s ago: executing program 4 (id=1875): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (rerun: 64) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x202000, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f0000000000)=[0x21cbeae8, 0x100000000]) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0xe}, 0x84) (rerun: 64) 2.399360952s ago: executing program 1 (id=1876): openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 2.0859779s ago: executing program 1 (id=1877): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r0, 0x1) 2.010307211s ago: executing program 4 (id=1878): openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r0, 0x40047438, &(0x7f0000000040)) (async) ioctl(r0, 0x40047438, &(0x7f0000000040)) ioctl(r0, 0x7439, 0x0) syz_emit_ethernet(0x1e1, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESDEC=r0], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x31b481) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000300)=""/164) 1.63918524s ago: executing program 4 (id=1879): openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0xffffc000) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xa, 0x2, 0x0, 0x2, 0x11, "737a8002e01f0dc75b75169325cddc7bba37bd"}) 1.220650523s ago: executing program 2 (id=1880): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a6a003300020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffed1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c89e, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) 1.093903314s ago: executing program 1 (id=1881): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffff900000000000000000850000004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff25bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021610200300012800c0001006d6163766c616e0020000280080003001000000000000000100000000a", @ANYRES32=r5, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x14) setns(0xc9, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 865.240712ms ago: executing program 2 (id=1882): socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) socket(0xa, 0x3, 0x87) socket$nl_generic(0x10, 0x3, 0x10) openat$panthor(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f61640024000280080003404000009208000240000000f3070004400000000008000140000000110800034000000002080002400000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000119078ac1414bbac14140f4e244e200008907800"/42], 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYBLOB='\a'], 0x0) 518.566328ms ago: executing program 1 (id=1883): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') socket$kcm(0x29, 0x5, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x1, 0x0) r2 = gettid() tkill(r2, 0x13) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x18}) fstat(r3, &(0x7f0000002a00)) syz_clone3(&(0x7f0000000300)={0x200000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x2d}, &(0x7f0000000200)=""/105, 0x69, &(0x7f0000000280)=""/45, &(0x7f00000002c0)=[r2, 0x0, 0x0], 0x3, {r3}}, 0x58) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040)=0x91, 0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82, 0x10a) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000040), 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x40}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e23, 0xe, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000380)="65868c63e6a323953bf288ba1dd5698a7c5296ad1b62bb2148af6ecfe8defe0347b29dc42e05a3596aef337b2f891a8671dbcc5a6a13a63d6fee0b5473973aa4b9064e4352e8d395fd1c4f8b57bf67efc2", 0x51}, {&(0x7f0000000400)="38bcbfeea2650db3ff9ffac4d7da9e193e6adf05b17648fdce8aadb433bc92cc4b28106ceb2a4b606ecaa93ca2bc28d823b8b2601802cdb2554a2b5a8d4dcc", 0x3f}], 0x2, &(0x7f00000005c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}, @dstopts={{0x70, 0x29, 0x37, {0x3b, 0xa, '\x00', [@pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0x7fff, [0x5, 0x9, 0x9]}}, @generic={0xb6, 0x23, "81d7d3a37b79a2f5ce978dc6699829936218746ef29eff7a7cbecf45c9ed9fa04ff7b5"}]}}}], 0x88}}], 0x2, 0x2015) syz_open_dev$mouse(&(0x7f0000002080), 0xffffff0000000000, 0x14f000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r6 = accept4(r1, &(0x7f0000000440), &(0x7f00000004c0)=0x80, 0x1000) sendmmsg(r6, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000680)="c9d05e443bdf938930da7f78818f94e3bd328f1533e7c4bd63e0e23d61fefd56fa9b3378a62a819020dc1d8ddd23d100b1994a0d363c3f830aa6911e2ebe46f97bdd797bab422761dc4390c372ef2445b802ff73f51c90ef10b2266aee323b2389ace1fdf5740d5c0a02b8791689062429917c9adc4204ae69ad08cd8b92aa", 0x7f}], 0x1}}], 0x40000000000028f, 0x48810) 238.714835ms ago: executing program 4 (id=1884): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e131d"], 0x16) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 0s ago: executing program 4 (id=1885): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) (fail_nth: 4) kernel console output (not intermixed with test programs): 1: 0000000000000246 R12: 0000000000000001 [ 527.365336][T10898] R13: 00007f6c1c466218 R14: 00007f6c1c466180 R15: 00007ffc570a4098 [ 527.365370][T10898] [ 528.018630][T10379] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 528.214017][T10868] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 528.214389][T10868] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 528.262125][T10379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 528.265517][ T997] scsi host1: usb-storage 5-1:0.0 [ 528.285244][T10379] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 528.317617][ T5808] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 529.325641][ T5808] usb 2-1: Using ep0 maxpacket: 8 [ 529.644717][T10379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 529.658645][T10379] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 529.690416][ T5808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 529.690471][ T5808] usb 2-1: New USB device found, idVendor=0486, idProduct=0186, bcdDevice= 0.40 [ 529.693606][ T5808] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 529.693639][ T5808] usb 2-1: config 1 interface 0 has no altsetting 0 [ 529.767511][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.767540][ T5808] usb 2-1: Product: syz [ 529.767555][ T5808] usb 2-1: Manufacturer: э [ 529.767570][ T5808] usb 2-1: SerialNumber: syz [ 530.029224][ T997] usb 5-1: USB disconnect, device number 23 [ 530.073226][T10379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.088869][T10379] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 530.149640][ T5808] usbhid 2-1:1.0: can't add hid device: -71 [ 530.149766][ T5808] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 530.235283][ T5808] usb 2-1: USB disconnect, device number 31 [ 530.296028][ T37] kauditd_printk_skb: 10718 callbacks suppressed [ 530.296047][ T37] audit: type=1400 audit(1786350874.915:126660): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10722 comm="udevd" name="2-1" dev="sysfs" ino=153969 [ 530.296092][ T37] audit: type=1400 audit(1786350874.915:126661): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10722 comm="udevd" name="/" dev="sda1" ino=2 [ 530.296135][ T37] audit: type=1400 audit(1786350874.915:126662): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10722 comm="udevd" name="/" dev="sysfs" ino=1 [ 530.296197][ T37] audit: type=1400 audit(1786350874.915:126663): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10722 comm="udevd" name="devices" dev="sysfs" ino=18 [ 530.296241][ T37] audit: type=1400 audit(1786350874.915:126664): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10722 comm="udevd" name="platform" dev="sysfs" ino=48 [ 530.296286][ T37] audit: type=1400 audit(1786350874.915:126665): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10722 comm="udevd" name="dummy_hcd.1" dev="sysfs" ino=26464 [ 530.296496][T10379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.299380][ T37] audit: type=1400 audit(1786350874.925:126666): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="tmpfs" ino=1 [ 530.299431][ T37] audit: type=1400 audit(1786350874.925:126667): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 530.299472][ T37] audit: type=1400 audit(1786350874.925:126668): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=4950 comm="udevd" name="queue" dev="tmpfs" ino=5914 [ 530.299512][ T37] audit: type=1400 audit(1786350874.925:126669): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4950 comm="udevd" path="/run/udev/queue" dev="tmpfs" ino=5914 [ 530.723550][T10927] sctp: [Deprecated]: syz.2.1620 (pid 10927) Use of int in maxseg socket option. [ 530.723550][T10927] Use struct sctp_assoc_value instead [ 531.128717][T10935] FAULT_INJECTION: forcing a failure. [ 531.128717][T10935] name failslab, interval 1, probability 0, space 0, times 0 [ 531.128779][T10935] CPU: 1 UID: 0 PID: 10935 Comm: syz.4.1619 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 531.128805][T10935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 531.128818][T10935] Call Trace: [ 531.128827][T10935] [ 531.128836][T10935] dump_stack_lvl+0xe8/0x150 [ 531.128872][T10935] should_fail_ex+0x467/0x600 [ 531.128911][T10935] should_failslab+0xa8/0x100 [ 531.128937][T10935] kmem_cache_alloc_noprof+0xa4/0x650 [ 531.128973][T10935] ? security_file_alloc+0x34/0x310 [ 531.128993][T10935] ? security_file_alloc+0x34/0x310 [ 531.129021][T10935] security_file_alloc+0x34/0x310 [ 531.129045][T10935] init_file+0x96/0x2d0 [ 531.129082][T10935] alloc_empty_file+0x74/0x1d0 [ 531.129118][T10935] path_openat+0x8f/0x3850 [ 531.129143][T10935] ? __lock_acquire+0x683/0x2ce0 [ 531.129198][T10935] do_file_open+0x23e/0x4a0 [ 531.129230][T10935] ? __pfx_do_file_open+0x10/0x10 [ 531.129254][T10935] ? lockdep_hardirqs_on+0x7a/0x110 [ 531.129309][T10935] ? alloc_fd+0x654/0x6d0 [ 531.129355][T10935] do_sys_openat2+0x115/0x200 [ 531.129392][T10935] ? __pfx_do_sys_openat2+0x10/0x10 [ 531.129436][T10935] ? ksys_write+0x248/0x270 [ 531.129471][T10935] __x64_sys_openat+0x138/0x170 [ 531.129495][T10935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.129519][T10935] do_syscall_64+0x174/0x580 [ 531.129552][T10935] ? clear_bhb_loop+0x70/0xc0 [ 531.129580][T10935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.129603][T10935] RIP: 0033:0x7fa59213e90e [ 531.129623][T10935] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 531.129643][T10935] RSP: 002b:00007fa590393f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 531.129667][T10935] RAX: ffffffffffffffda RBX: 00007fa5903946c0 RCX: 00007fa59213e90e [ 531.129683][T10935] RDX: 0000000000000000 RSI: 00007fa59221475f RDI: ffffffffffffff9c [ 531.129698][T10935] RBP: 00007fa590394090 R08: 0000000000000000 R09: 0000000000000000 [ 531.129712][T10935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.129725][T10935] R13: 00007fa592406218 R14: 00007fa592406180 R15: 00007ffc90964e08 [ 531.129759][T10935] [ 532.299565][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 532.699543][T10956] FAULT_INJECTION: forcing a failure. [ 532.699543][T10956] name failslab, interval 1, probability 0, space 0, times 0 [ 532.699579][T10956] CPU: 1 UID: 0 PID: 10956 Comm: syz.3.1626 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 532.699603][T10956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.699616][T10956] Call Trace: [ 532.699625][T10956] [ 532.699635][T10956] dump_stack_lvl+0xe8/0x150 [ 532.699673][T10956] should_fail_ex+0x467/0x600 [ 532.699718][T10956] should_failslab+0xa8/0x100 [ 532.699745][T10956] kmem_cache_alloc_noprof+0xa4/0x650 [ 532.699781][T10956] ? security_file_alloc+0x34/0x310 [ 532.699801][T10956] ? security_file_alloc+0x34/0x310 [ 532.699829][T10956] security_file_alloc+0x34/0x310 [ 532.699853][T10956] init_file+0x96/0x2d0 [ 532.699890][T10956] alloc_empty_file+0x74/0x1d0 [ 532.699926][T10956] path_openat+0x8f/0x3850 [ 532.699960][T10956] ? kasan_save_track+0x3e/0x80 [ 532.699993][T10956] ? __kasan_slab_alloc+0x6c/0x80 [ 532.700014][T10956] ? kmem_cache_alloc_noprof+0x355/0x650 [ 532.700046][T10956] ? do_getname+0x2e/0x250 [ 532.700076][T10956] ? do_sys_openat2+0xcc/0x200 [ 532.700108][T10956] ? __x64_sys_openat+0x138/0x170 [ 532.700127][T10956] ? do_syscall_64+0x174/0x580 [ 532.700157][T10956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.700202][T10956] do_file_open+0x23e/0x4a0 [ 532.700226][T10956] ? lockdep_hardirqs_on+0x7a/0x110 [ 532.700264][T10956] ? __pfx_do_file_open+0x10/0x10 [ 532.700319][T10956] ? alloc_fd+0x654/0x6d0 [ 532.700366][T10956] do_sys_openat2+0x115/0x200 [ 532.700404][T10956] ? __pfx_do_sys_openat2+0x10/0x10 [ 532.700459][T10956] ? ksys_write+0x248/0x270 [ 532.700488][T10956] ? __pfx_ksys_write+0x10/0x10 [ 532.700520][T10956] __x64_sys_openat+0x138/0x170 [ 532.700545][T10956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.700569][T10956] do_syscall_64+0x174/0x580 [ 532.700601][T10956] ? trace_irq_disable+0x3b/0x140 [ 532.700637][T10956] ? clear_bhb_loop+0x70/0xc0 [ 532.700664][T10956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.700694][T10956] RIP: 0033:0x7f9d7a7fe90e [ 532.700714][T10956] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 532.700733][T10956] RSP: 002b:00007f9d78a95b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 532.700757][T10956] RAX: ffffffffffffffda RBX: 00007f9d78a966c0 RCX: 00007f9d7a7fe90e [ 532.700773][T10956] RDX: 0000000000000000 RSI: 00007f9d78a95c00 RDI: ffffffffffffff9c [ 532.700788][T10956] RBP: 00007f9d78a95c00 R08: 0000000000000000 R09: 0000000000000000 [ 532.700802][T10956] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 532.700817][T10956] R13: 00007f9d7aac6038 R14: 00007f9d7aac5fa0 R15: 00007ffcf3ec4628 [ 532.700851][T10956] [ 533.171200][T10379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.327502][T10379] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.408876][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.409582][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.521398][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.521557][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.115796][ T5811] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 534.278515][ T5811] usb 5-1: Using ep0 maxpacket: 8 [ 534.279452][ T5811] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 534.284175][ T5811] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 534.284198][ T5811] usb 5-1: config 0 has no interface number 0 [ 534.284239][ T5811] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 534.284281][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.361153][ T5811] usb 5-1: config 0 descriptor?? [ 534.703519][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1637'. [ 534.703549][T10988] netlink: 'syz.3.1637': attribute type 20 has an invalid length. [ 534.703562][T10988] netlink: 'syz.3.1637': attribute type 21 has an invalid length. [ 534.861750][ T5811] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 535.048567][T10996] FAULT_INJECTION: forcing a failure. [ 535.048567][T10996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.048602][T10996] CPU: 0 UID: 0 PID: 10996 Comm: syz.3.1640 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 535.048627][T10996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 535.048640][T10996] Call Trace: [ 535.048648][T10996] [ 535.048657][T10996] dump_stack_lvl+0xe8/0x150 [ 535.048693][T10996] should_fail_ex+0x467/0x600 [ 535.048730][T10996] _copy_from_iter+0x1d3/0x1660 [ 535.048767][T10996] ? rcu_is_watching+0x15/0xb0 [ 535.048798][T10996] ? trace_kmem_cache_alloc+0x29/0xe0 [ 535.048837][T10996] ? __pfx__copy_from_iter+0x10/0x10 [ 535.048871][T10996] ? __alloc_skb+0x276/0x7a0 [ 535.048891][T10996] ? __alloc_skb+0x276/0x7a0 [ 535.048919][T10996] ? netlink_sendmsg+0x650/0xb40 [ 535.048946][T10996] ? skb_put+0x112/0x210 [ 535.048972][T10996] netlink_sendmsg+0x6c0/0xb40 [ 535.049008][T10996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.049045][T10996] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 535.049077][T10996] ? __kernel_text_address+0xd/0x30 [ 535.049109][T10996] ? unwind_get_return_address+0x4d/0x90 [ 535.049135][T10996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.049161][T10996] sock_sendmsg_nosec+0x13a/0x180 [ 535.049207][T10996] ____sys_sendmsg+0x565/0x870 [ 535.049232][T10996] ? __might_fault+0xaf/0x130 [ 535.049258][T10996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.049291][T10996] ? import_iovec+0x73/0xa0 [ 535.049315][T10996] ___sys_sendmsg+0x2a5/0x360 [ 535.049337][T10996] ? __lock_acquire+0x683/0x2ce0 [ 535.049360][T10996] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.049419][T10996] ? __fget_files+0x2a/0x420 [ 535.049438][T10996] ? __fget_files+0x3a8/0x420 [ 535.049468][T10996] __x64_sys_sendmsg+0x1b7/0x290 [ 535.049495][T10996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.049537][T10996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.049561][T10996] do_syscall_64+0x174/0x580 [ 535.049590][T10996] ? trace_irq_disable+0x3b/0x140 [ 535.049622][T10996] ? clear_bhb_loop+0x70/0xc0 [ 535.049647][T10996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.049669][T10996] RIP: 0033:0x7f9d7a83e0d9 [ 535.049687][T10996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.049705][T10996] RSP: 002b:00007f9d78a96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.049727][T10996] RAX: ffffffffffffffda RBX: 00007f9d7aac5fa0 RCX: 00007f9d7a83e0d9 [ 535.049742][T10996] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 535.049755][T10996] RBP: 00007f9d78a96090 R08: 0000000000000000 R09: 0000000000000000 [ 535.049767][T10996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.049779][T10996] R13: 00007f9d7aac6038 R14: 00007f9d7aac5fa0 R15: 00007ffcf3ec4628 [ 535.049810][T10996] [ 535.328215][ T37] kauditd_printk_skb: 16710 callbacks suppressed [ 535.328268][ T37] audit: type=1400 audit(1786350879.795:134962): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5586 comm="syz-executor" name="291" dev="tmpfs" ino=1582 [ 535.328422][ T37] audit: type=1400 audit(1786350879.795:134963): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5586 comm="syz-executor" path="/291/binderfs" dev="tmpfs" ino=1586 [ 535.328547][ T37] audit: type=1400 audit(1786350879.795:134964): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5586 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 535.328695][ T37] audit: type=1400 audit(1786350879.795:134965): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5586 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 535.328808][ T37] audit: type=1400 audit(1786350879.795:134966): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="devices" dev="sysfs" ino=18 [ 535.328915][ T37] audit: type=1400 audit(1786350879.795:134967): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 535.329039][ T37] audit: type=1400 audit(1786350879.795:134968): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="block" dev="sysfs" ino=13257 [ 535.329162][ T37] audit: type=1400 audit(1786350879.795:134969): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="loop3" dev="sysfs" ino=15416 [ 535.329270][ T37] audit: type=1400 audit(1786350879.795:134970): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="mq" dev="sysfs" ino=15512 [ 535.329371][ T37] audit: type=1400 audit(1786350879.805:134971): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5586 comm="syz-executor" name="291" dev="tmpfs" ino=1582 [ 535.785848][T11006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1641'. [ 537.531369][T11030] netlink: 'syz.3.1646': attribute type 2 has an invalid length. [ 537.531393][T11030] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1646'. [ 537.801508][T11035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1647'. [ 538.107796][T11035] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 538.187031][T11035] bond3 (unregistering): Released all slaves [ 539.055092][ T5808] usb 5-1: USB disconnect, device number 24 [ 539.407630][T10379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.119643][T11078] FAULT_INJECTION: forcing a failure. [ 540.119643][T11078] name failslab, interval 1, probability 0, space 0, times 0 [ 540.119682][T11078] CPU: 0 UID: 0 PID: 11078 Comm: syz.4.1656 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 540.119708][T11078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 540.119721][T11078] Call Trace: [ 540.119730][T11078] [ 540.119739][T11078] dump_stack_lvl+0xe8/0x150 [ 540.119777][T11078] should_fail_ex+0x467/0x600 [ 540.119817][T11078] should_failslab+0xa8/0x100 [ 540.119845][T11078] __kmalloc_noprof+0xfe/0x780 [ 540.119869][T11078] ? iter_file_splice_write+0x1ed/0x1240 [ 540.119893][T11078] ? iter_file_splice_write+0x1ed/0x1240 [ 540.119925][T11078] iter_file_splice_write+0x1ed/0x1240 [ 540.119949][T11078] ? __lock_acquire+0x683/0x2ce0 [ 540.119998][T11078] ? __pfx_iter_file_splice_write+0x10/0x10 [ 540.120021][T11078] ? direct_splice_actor+0x49/0x160 [ 540.120046][T11078] ? direct_splice_actor+0x49/0x160 [ 540.120087][T11078] ? __pfx_iter_file_splice_write+0x10/0x10 [ 540.120113][T11078] direct_splice_actor+0x104/0x160 [ 540.120142][T11078] splice_direct_to_actor+0x586/0xcc0 [ 540.120190][T11078] ? __pfx_direct_splice_actor+0x10/0x10 [ 540.120214][T11078] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 540.120253][T11078] do_splice_direct+0x19b/0x2a0 [ 540.120281][T11078] ? __pfx_do_splice_direct+0x10/0x10 [ 540.120307][T11078] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 540.120342][T11078] ? rw_verify_area+0x209/0x4d0 [ 540.120373][T11078] do_sendfile+0x540/0x7e0 [ 540.120405][T11078] ? lockdep_hardirqs_on+0x7a/0x110 [ 540.120446][T11078] ? __pfx_do_sendfile+0x10/0x10 [ 540.120495][T11078] __se_sys_sendfile64+0x144/0x1a0 [ 540.120531][T11078] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 540.120573][T11078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.120607][T11078] do_syscall_64+0x174/0x580 [ 540.120638][T11078] ? trace_irq_disable+0x3b/0x140 [ 540.120672][T11078] ? clear_bhb_loop+0x70/0xc0 [ 540.120700][T11078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.120723][T11078] RIP: 0033:0x7fa59217e0d9 [ 540.120743][T11078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.120763][T11078] RSP: 002b:00007fa5903d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 540.120787][T11078] RAX: ffffffffffffffda RBX: 00007fa592405fa0 RCX: 00007fa59217e0d9 [ 540.120805][T11078] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 540.120818][T11078] RBP: 00007fa5903d6090 R08: 0000000000000000 R09: 0000000000000000 [ 540.120831][T11078] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 540.120850][T11078] R13: 00007fa592406038 R14: 00007fa592405fa0 R15: 00007ffc90964e08 [ 540.120886][T11078] [ 540.364153][ T37] kauditd_printk_skb: 11476 callbacks suppressed [ 540.364196][ T37] audit: type=1400 audit(1786350884.985:143631): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="devices" dev="sysfs" ino=18 [ 540.364314][ T37] audit: type=1400 audit(1786350884.985:143632): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 540.364415][ T37] audit: type=1400 audit(1786350884.985:143633): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="block" dev="sysfs" ino=13257 [ 540.367766][ T37] audit: type=1400 audit(1786350884.995:143634): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9684 comm="udevd" name="data" dev="tmpfs" ino=14 [ 540.367896][ T37] audit: type=1400 audit(1786350884.995:143635): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9684 comm="udevd" name="/" dev="sda1" ino=2 [ 540.368036][ T37] audit: type=1400 audit(1786350884.995:143636): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9684 comm="udevd" name="/" dev="tmpfs" ino=1 [ 540.368123][ T37] audit: type=1400 audit(1786350884.995:143637): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9684 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 540.374969][ T37] audit: type=1400 audit(1786350884.995:143638): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="loop4" dev="sysfs" ino=15539 [ 540.375144][ T37] audit: type=1400 audit(1786350884.995:143639): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4950 comm="udevd" path="/sys/devices/virtual/block/loop4/uevent" dev="sysfs" ino=15540 [ 540.380275][ T37] audit: type=1400 audit(1786350885.005:143640): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9684 comm="udevd" name="data" dev="tmpfs" ino=14 [ 541.332339][T11089] FAULT_INJECTION: forcing a failure. [ 541.332339][T11089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.332398][T11089] CPU: 1 UID: 0 PID: 11089 Comm: syz.3.1658 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 541.332421][T11089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 541.332434][T11089] Call Trace: [ 541.332441][T11089] [ 541.332450][T11089] dump_stack_lvl+0xe8/0x150 [ 541.332484][T11089] should_fail_ex+0x467/0x600 [ 541.332518][T11089] _copy_to_user+0x31/0xb0 [ 541.332542][T11089] vmci_host_unlocked_ioctl+0x218e/0x2850 [ 541.332562][T11089] ? sched_clock+0x3f/0x60 [ 541.332594][T11089] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 541.332627][T11089] ? finish_task_switch+0x412/0xc60 [ 541.332660][T11089] ? lockdep_hardirqs_on+0x7a/0x110 [ 541.332691][T11089] ? rcu_is_watching+0x15/0xb0 [ 541.332715][T11089] ? trace_sched_exit_tp+0x3a/0x130 [ 541.332766][T11089] ? __schedule+0x16f2/0x5500 [ 541.332798][T11089] ? tomoyo_path_number_perm+0x219/0x5f0 [ 541.332835][T11089] ? tomoyo_path_number_perm+0x219/0x5f0 [ 541.332880][T11089] ? do_vfs_ioctl+0x1184/0x1550 [ 541.332912][T11089] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 541.332945][T11089] ? __pfx___schedule+0x10/0x10 [ 541.332987][T11089] ? __asan_memset+0x22/0x50 [ 541.333019][T11089] ? smack_file_ioctl+0x263/0x360 [ 541.333050][T11089] ? lockdep_hardirqs_on+0x7a/0x110 [ 541.333084][T11089] ? __pfx_smack_file_ioctl+0x10/0x10 [ 541.333138][T11089] ? bpf_lsm_file_ioctl+0x9/0x20 [ 541.333172][T11089] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 541.333196][T11089] __se_sys_ioctl+0xff/0x170 [ 541.333224][T11089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.333248][T11089] do_syscall_64+0x174/0x580 [ 541.333281][T11089] ? clear_bhb_loop+0x70/0xc0 [ 541.333309][T11089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.333332][T11089] RIP: 0033:0x7f9d7a83e0d9 [ 541.333354][T11089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.333374][T11089] RSP: 002b:00007f9d78a54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 541.333398][T11089] RAX: ffffffffffffffda RBX: 00007f9d7aac6180 RCX: 00007f9d7a83e0d9 [ 541.333414][T11089] RDX: 0000200000000180 RSI: 00000000000007a5 RDI: 0000000000000005 [ 541.333428][T11089] RBP: 00007f9d78a54090 R08: 0000000000000000 R09: 0000000000000000 [ 541.333441][T11089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.333453][T11089] R13: 00007f9d7aac6218 R14: 00007f9d7aac6180 R15: 00007ffcf3ec4628 [ 541.333487][T11089] [ 542.226449][T11091] netlink: 'syz.4.1657': attribute type 2 has an invalid length. [ 542.226474][T11091] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1657'. [ 543.198870][T10379] veth0_vlan: entered promiscuous mode [ 543.216280][ T5699] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 543.374194][ T5699] usb 2-1: New USB device found, idVendor=4856, idProduct=0091, bcdDevice=f6.91 [ 543.386810][T10379] veth1_vlan: entered promiscuous mode [ 543.413352][ T5699] usb 2-1: config 1 has an invalid interface number: 162 but max is 1 [ 543.413381][ T5699] usb 2-1: config 1 has an invalid interface association descriptor of length 7, skipping [ 543.413401][ T5699] usb 2-1: config 1 has an invalid interface number: 246 but max is 1 [ 543.413422][ T5699] usb 2-1: config 1 has no interface number 0 [ 543.413439][ T5699] usb 2-1: config 1 has no interface number 1 [ 543.413494][ T5699] usb 2-1: config 1 interface 162 altsetting 48 has an invalid descriptor for endpoint zero, skipping [ 543.413551][ T5699] usb 2-1: config 1 interface 246 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 543.413579][ T5699] usb 2-1: config 1 interface 162 has no altsetting 0 [ 543.413598][ T5699] usb 2-1: config 1 interface 246 has no altsetting 0 [ 543.497590][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.497616][ T5699] usb 2-1: Product: syz [ 543.497631][ T5699] usb 2-1: Manufacturer: ઈꌆꊽ詛ꇥ凔韏㽦坿倣ꐾ뮫踻钇嫅閉ῤ [ 543.497648][ T5699] usb 2-1: SerialNumber: syz [ 543.715471][T10379] veth0_macvtap: entered promiscuous mode [ 543.762446][T10379] veth1_macvtap: entered promiscuous mode [ 543.794989][ T5699] usb 2-1: USB disconnect, device number 32 [ 543.880527][ T9593] udevd[9593]: setting owner of /dev/bus/usb/002/032 to uid=0, gid=0 failed: No such file or directory [ 543.916877][T10379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.945846][T10379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.500684][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.501208][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.532493][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.532540][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.715015][T11123] netlink: 'syz.4.1671': attribute type 2 has an invalid length. [ 544.715038][T11123] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1671'. [ 545.393838][T11131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1673'. [ 545.535731][T11131] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 545.556881][ T4950] audit_log_start: 12021 callbacks suppressed [ 545.556898][ T4950] audit: audit_backlog=65 > audit_backlog_limit=64 [ 545.556912][ T4950] audit: audit_lost=21139 audit_rate_limit=0 audit_backlog_limit=64 [ 545.556927][ T4950] audit: backlog limit exceeded [ 545.557044][ T4950] audit: audit_backlog=65 > audit_backlog_limit=64 [ 545.557057][ T4950] audit: audit_lost=21140 audit_rate_limit=0 audit_backlog_limit=64 [ 545.557093][ T4950] audit: backlog limit exceeded [ 545.557350][ T4950] audit: audit_backlog=65 > audit_backlog_limit=64 [ 545.557366][ T4950] audit: audit_lost=21141 audit_rate_limit=0 audit_backlog_limit=64 [ 545.557382][ T4950] audit: backlog limit exceeded [ 545.557416][ T4950] audit: audit_backlog=65 > audit_backlog_limit=64 [ 545.714698][T11138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 545.794653][T11138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 545.807216][T11138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 545.810616][T11138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 545.814985][T11138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 545.929485][T11131] bond5 (unregistering): Released all slaves [ 546.464922][T11148] 9p: Bad value for 'rfdno' [ 547.041518][T11162] netlink: 'syz.2.1682': attribute type 2 has an invalid length. [ 547.041543][T11162] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1682'. [ 547.679774][T11175] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1684'. [ 548.111713][ T4899] Bluetooth: hci5: command tx timeout [ 548.113581][T11180] PKCS7: Unknown OID: [4] (bad) [ 548.113606][T11180] PKCS7: Only support pkcs7_signedData type [ 548.174467][ T167] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.857785][ T4899] Bluetooth: hci2: unexpected event for opcode 0x2007 [ 549.390691][T11192] netlink: 'syz.3.1692': attribute type 2 has an invalid length. [ 549.390715][T11192] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1692'. [ 549.480350][ T167] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.644471][T11196] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 549.714825][T11196] bond3 (unregistering): Released all slaves [ 550.116195][ T5811] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 550.156258][ T2188] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 550.191818][ T4899] Bluetooth: hci5: command tx timeout [ 550.304791][ T5811] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 550.319835][ T2188] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 550.322026][ T2188] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.322081][ T2188] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.322170][ T2188] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 550.322198][ T2188] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 550.325021][ T5811] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.325074][ T5811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.325158][ T5811] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 550.325185][ T5811] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 550.349597][ T2188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.349627][ T2188] usb 5-1: Product: syz [ 550.349643][ T2188] usb 5-1: Manufacturer: syz [ 550.349716][ T2188] usb 5-1: SerialNumber: syz [ 550.424667][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.424696][ T5811] usb 4-1: Product: syz [ 550.424711][ T5811] usb 4-1: Manufacturer: syz [ 550.424726][ T5811] usb 4-1: SerialNumber: syz [ 550.565292][ T2188] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 550.565319][ T2188] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 550.565366][ T2188] usbserial_generic 5-1:1.0: generic converter detected [ 550.567686][ T37] kauditd_printk_skb: 10428 callbacks suppressed [ 550.567704][ T37] audit: type=1400 audit(1786350894.192:159998): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sda1" ino=2 [ 550.567847][ T37] audit: type=1400 audit(1786350894.192:159999): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="tmpfs" ino=1 [ 550.569629][ T37] audit: type=1400 audit(1786350894.192:160000): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9684 comm="udevd" name="/" dev="devtmpfs" ino=1 [ 550.569738][ T37] audit: type=1400 audit(1786350894.192:160001): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=9684 comm="udevd" path="/dev/loop3" dev="devtmpfs" ino=648 [ 550.569835][ T37] audit: type=1400 audit(1786350894.192:160002): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9684 comm="udevd" name="/" dev="sda1" ino=2 [ 550.571696][ T37] audit: type=1400 audit(1786350894.192:160003): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9593 comm="udevd" name="/" dev="sda1" ino=2 [ 550.571826][ T37] audit: type=1400 audit(1786350894.192:160004): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9593 comm="udevd" name="/" dev="sysfs" ino=1 [ 550.571958][ T37] audit: type=1400 audit(1786350894.192:160005): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9593 comm="udevd" name="dev" dev="sysfs" ino=19 [ 550.572084][ T37] audit: type=1400 audit(1786350894.192:160006): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9593 comm="udevd" name="block" dev="sysfs" ino=20 [ 550.591732][ T37] audit: type=1400 audit(1786350894.202:160007): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11212 comm="syz.1.1700" name="newroot" dev="tmpfs" ino=2 [ 550.952399][T11215] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 550.952749][T11215] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 551.219691][ T2188] usb 5-1: generic converter now attached to ttyUSB0 [ 551.372138][ T5811] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 551.372176][ T5811] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 551.372223][ T5811] usbserial_generic 4-1:1.0: generic converter detected [ 551.452365][ T5811] usb 4-1: generic converter now attached to ttyUSB1 [ 551.455844][ T2188] usb 5-1: USB disconnect, device number 25 [ 551.569457][ T2188] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 551.571235][ T2188] usbserial_generic 5-1:1.0: device disconnected [ 551.594322][T11219] FAULT_INJECTION: forcing a failure. [ 551.594322][T11219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.594355][T11219] CPU: 1 UID: 0 PID: 11219 Comm: syz.3.1695 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 551.594380][T11219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 551.594392][T11219] Call Trace: [ 551.594400][T11219] [ 551.594409][T11219] dump_stack_lvl+0xe8/0x150 [ 551.594444][T11219] should_fail_ex+0x467/0x600 [ 551.594481][T11219] _copy_to_user+0x31/0xb0 [ 551.594507][T11219] simple_read_from_buffer+0xe1/0x170 [ 551.594533][T11219] proc_fail_nth_read+0x1be/0x230 [ 551.594559][T11219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.594585][T11219] ? rw_verify_area+0x250/0x4d0 [ 551.594611][T11219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.594634][T11219] vfs_read+0x219/0xa90 [ 551.594666][T11219] ? __pfx_vfs_read+0x10/0x10 [ 551.594693][T11219] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 551.594724][T11219] ? lockdep_hardirqs_on+0x7a/0x110 [ 551.594753][T11219] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 551.594784][T11219] ? mutex_lock_nested+0x152/0x1d0 [ 551.594806][T11219] ? fdget_pos+0x252/0x320 [ 551.594835][T11219] ksys_read+0x156/0x270 [ 551.594862][T11219] ? __pfx_ksys_read+0x10/0x10 [ 551.594902][T11219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.594926][T11219] do_syscall_64+0x174/0x580 [ 551.594955][T11219] ? trace_irq_disable+0x3b/0x140 [ 551.594987][T11219] ? clear_bhb_loop+0x70/0xc0 [ 551.595013][T11219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.595035][T11219] RIP: 0033:0x7f9d7a7fe90e [ 551.595053][T11219] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 551.595071][T11219] RSP: 002b:00007f9d78a74fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 551.595094][T11219] RAX: ffffffffffffffda RBX: 00007f9d78a756c0 RCX: 00007f9d7a7fe90e [ 551.595110][T11219] RDX: 000000000000000f RSI: 00007f9d78a750a0 RDI: 0000000000000006 [ 551.595123][T11219] RBP: 00007f9d78a75090 R08: 0000000000000000 R09: 0000000000000000 [ 551.595135][T11219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.595147][T11219] R13: 00007f9d7aac6128 R14: 00007f9d7aac6090 R15: 00007ffcf3ec4628 [ 551.595179][T11219] [ 551.731584][T10715] udevd[10715]: setting mode of /dev/bus/usb/005/025 to 020664 failed: No such file or directory [ 551.852135][T10715] udevd[10715]: setting owner of /dev/bus/usb/005/025 to uid=0, gid=0 failed: No such file or directory [ 552.266178][ T4899] Bluetooth: hci5: command tx timeout [ 553.561644][ T167] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.769544][ T2188] usb 4-1: USB disconnect, device number 28 [ 553.844370][ T2188] generic ttyUSB1: generic converter now disconnected from ttyUSB1 [ 553.845211][ T2188] usbserial_generic 4-1:1.0: device disconnected [ 554.113446][T11230] netlink: 'syz.1.1704': attribute type 2 has an invalid length. [ 554.113471][T11230] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1704'. [ 554.341059][T11233] FAULT_INJECTION: forcing a failure. [ 554.341059][T11233] name failslab, interval 1, probability 0, space 0, times 0 [ 554.341098][T11233] CPU: 1 UID: 0 PID: 11233 Comm: syz.4.1705 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 554.341124][T11233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.341145][T11233] Call Trace: [ 554.341154][T11233] [ 554.341163][T11233] dump_stack_lvl+0xe8/0x150 [ 554.341201][T11233] should_fail_ex+0x467/0x600 [ 554.341240][T11233] should_failslab+0xa8/0x100 [ 554.341267][T11233] kmem_cache_alloc_node_noprof+0xae/0x670 [ 554.341306][T11233] ? __alloc_skb+0x1d7/0x7a0 [ 554.341327][T11233] ? __alloc_skb+0x1d7/0x7a0 [ 554.341358][T11233] __alloc_skb+0x1d7/0x7a0 [ 554.341386][T11233] hci_mgmt_cmd+0x1c1/0xfc0 [ 554.341412][T11233] ? __noinstr_text_start+0x290/0x2a0 [ 554.341449][T11233] ? mutex_lock_nested+0x152/0x1d0 [ 554.341479][T11233] hci_sock_sendmsg+0x6e1/0xf50 [ 554.341511][T11233] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 554.341543][T11233] ? get_pid_task+0x20/0x1f0 [ 554.341578][T11233] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 554.341602][T11233] sock_sendmsg_nosec+0x13a/0x180 [ 554.341641][T11233] sock_write_iter+0x2e4/0x3f0 [ 554.341676][T11233] ? __pfx_sock_write_iter+0x10/0x10 [ 554.341717][T11233] ? bpf_lsm_file_permission+0x9/0x20 [ 554.341750][T11233] ? security_file_permission+0x75/0x260 [ 554.341783][T11233] vfs_write+0x61e/0xbb0 [ 554.341820][T11233] ? __pfx_vfs_write+0x10/0x10 [ 554.341859][T11233] ? __fget_files+0x2a/0x420 [ 554.341892][T11233] ksys_write+0x156/0x270 [ 554.341923][T11233] ? __pfx_ksys_write+0x10/0x10 [ 554.341961][T11233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.341985][T11233] do_syscall_64+0x174/0x580 [ 554.342014][T11233] ? trace_irq_disable+0x3b/0x140 [ 554.342049][T11233] ? clear_bhb_loop+0x70/0xc0 [ 554.342078][T11233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.342102][T11233] RIP: 0033:0x7fa59217e0d9 [ 554.342123][T11233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.342150][T11233] RSP: 002b:00007fa5903d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 554.342185][T11233] RAX: ffffffffffffffda RBX: 00007fa592405fa0 RCX: 00007fa59217e0d9 [ 554.342200][T11233] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 554.342213][T11233] RBP: 00007fa5903d6090 R08: 0000000000000000 R09: 0000000000000000 [ 554.342226][T11233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.342239][T11233] R13: 00007fa592406038 R14: 00007fa592405fa0 R15: 00007ffc90964e08 [ 554.342274][T11233] [ 554.350074][ T4899] Bluetooth: hci5: command tx timeout [ 554.731296][T11238] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 554.893866][ T167] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.468898][ T5811] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 555.575991][ T37] kauditd_printk_skb: 5299 callbacks suppressed [ 555.576010][ T37] audit: type=1400 audit(1786350899.192:164392): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="devices" dev="sysfs" ino=18 [ 555.579581][ T37] audit: type=1400 audit(1786350899.202:164393): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 555.579628][ T37] audit: type=1400 audit(1786350899.202:164394): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="block" dev="sysfs" ino=13257 [ 555.579670][ T37] audit: type=1400 audit(1786350899.202:164395): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="loop4" dev="sysfs" ino=15539 [ 555.579711][ T37] audit: type=1400 audit(1786350899.202:164396): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="mq" dev="sysfs" ino=15635 [ 555.579752][ T37] audit: type=1400 audit(1786350899.202:164397): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="0" dev="sysfs" ino=15636 [ 555.579794][ T37] audit: type=1400 audit(1786350899.202:164398): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4950 comm="udevd" name="cpu0" dev="sysfs" ino=15640 [ 555.579835][ T37] audit: type=1400 audit(1786350899.202:164399): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4950 comm="udevd" path="/sys/devices/virtual/block/loop4/mq/0/cpu0" dev="sysfs" ino=15640 [ 555.579878][ T37] audit: type=1400 audit(1786350899.202:164400): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4950 comm="udevd" path="/sys/devices/virtual/block/loop4/mq/0/cpu0" dev="sysfs" ino=15640 [ 555.579923][ T37] audit: type=1400 audit(1786350899.202:164401): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sda1" ino=2 [ 555.716143][ T5811] usb 5-1: New USB device found, idVendor=3344, idProduct=1122, bcdDevice= 0.00 [ 555.843281][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.843311][ T5811] usb 5-1: Manufacturer: LME2510C WARM [ 556.064124][ T5808] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 556.130013][T11260] netlink: 'syz.1.1715': attribute type 2 has an invalid length. [ 556.130038][T11260] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1715'. [ 556.216254][ T5808] usb 4-1: Using ep0 maxpacket: 32 [ 556.217593][ T5808] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 556.250470][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.250503][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.250542][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.302697][ T5808] usb 4-1: config 0 descriptor?? [ 556.331062][ T5808] hub 4-1:0.0: USB hub found [ 556.578296][ T5808] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 557.589426][ T5811] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 557.590699][ T5811] dvb_usb_lmedm04 5-1:1.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 557.886825][ T5811] usb 5-1: USB disconnect, device number 26 [ 557.935200][T11269] FAULT_INJECTION: forcing a failure. [ 557.935200][T11269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.935237][T11269] CPU: 1 UID: 0 PID: 11269 Comm: syz.1.1718 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 557.935263][T11269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 557.935277][T11269] Call Trace: [ 557.935285][T11269] [ 557.935294][T11269] dump_stack_lvl+0xe8/0x150 [ 557.935333][T11269] should_fail_ex+0x467/0x600 [ 557.935372][T11269] _copy_to_user+0x31/0xb0 [ 557.935407][T11269] do_sock_getsockopt+0x6ea/0x7e0 [ 557.935441][T11269] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 557.935486][T11269] ? __fget_files+0x3a8/0x420 [ 557.935508][T11269] ? __fget_files+0x2a/0x420 [ 557.935538][T11269] __x64_sys_getsockopt+0x1aa/0x250 [ 557.935572][T11269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.935597][T11269] do_syscall_64+0x174/0x580 [ 557.935631][T11269] ? clear_bhb_loop+0x70/0xc0 [ 557.935661][T11269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.935683][T11269] RIP: 0033:0x7f6c1c1de0d9 [ 557.935705][T11269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.935726][T11269] RSP: 002b:00007f6c1a436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 557.935751][T11269] RAX: ffffffffffffffda RBX: 00007f6c1c465fa0 RCX: 00007f6c1c1de0d9 [ 557.935767][T11269] RDX: 0000000000000005 RSI: 0000200000000114 RDI: 0000000000000003 [ 557.935782][T11269] RBP: 00007f6c1a436090 R08: 0000200000000000 R09: 0000000000000000 [ 557.935796][T11269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.935809][T11269] R13: 00007f6c1c466038 R14: 00007f6c1c465fa0 R15: 00007ffc570a4098 [ 557.935844][T11269] [ 558.860792][T11257] team0 (unregistering): Port device team_slave_0 removed [ 559.034266][T11257] team0 (unregistering): Port device team_slave_1 removed [ 559.069945][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1722'. [ 559.069972][T11283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1722'. [ 559.627089][ T5808] usbhid 4-1:0.0: can't add hid device: -71 [ 559.627219][ T5808] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 559.687575][ T5808] usb 4-1: USB disconnect, device number 29 [ 559.957561][T11287] netlink: 'syz.3.1725': attribute type 2 has an invalid length. [ 559.957585][T11287] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1725'. [ 560.581982][ T4899] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 560.594270][ T37] kauditd_printk_skb: 12111 callbacks suppressed [ 560.594288][ T37] audit: type=1400 audit(1786350904.202:173691): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 560.594332][ T37] audit: type=1400 audit(1786350904.202:173692): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="block" dev="sysfs" ino=13257 [ 560.594376][ T37] audit: type=1400 audit(1786350904.202:173693): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="loop4" dev="sysfs" ino=15539 [ 560.594419][ T37] audit: type=1400 audit(1786350904.212:173694): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="queue" dev="sysfs" ino=15585 [ 560.594471][ T37] audit: type=1400 audit(1786350904.212:173695): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sda1" ino=2 [ 560.594516][ T37] audit: type=1400 audit(1786350904.212:173696): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sysfs" ino=1 [ 560.594558][ T37] audit: type=1400 audit(1786350904.212:173697): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="devices" dev="sysfs" ino=18 [ 560.594602][ T37] audit: type=1400 audit(1786350904.212:173698): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 560.594646][ T37] audit: type=1400 audit(1786350904.212:173699): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="block" dev="sysfs" ino=13257 [ 560.594690][ T37] audit: type=1400 audit(1786350904.212:173700): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="loop4" dev="sysfs" ino=15539 [ 560.930602][ T4899] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 561.001701][T11310] FAULT_INJECTION: forcing a failure. [ 561.001701][T11310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.001733][T11310] CPU: 1 UID: 0 PID: 11310 Comm: syz.2.1733 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 561.001753][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 561.001764][T11310] Call Trace: [ 561.001770][T11310] [ 561.001778][T11310] dump_stack_lvl+0xe8/0x150 [ 561.001814][T11310] should_fail_ex+0x467/0x600 [ 561.001844][T11310] _copy_to_user+0x31/0xb0 [ 561.001865][T11310] simple_read_from_buffer+0xe1/0x170 [ 561.001887][T11310] proc_fail_nth_read+0x1be/0x230 [ 561.001910][T11310] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 561.001941][T11310] ? rw_verify_area+0x250/0x4d0 [ 561.001966][T11310] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 561.001987][T11310] vfs_read+0x219/0xa90 [ 561.002015][T11310] ? __pfx_vfs_read+0x10/0x10 [ 561.002037][T11310] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 561.002064][T11310] ? lockdep_hardirqs_on+0x7a/0x110 [ 561.002089][T11310] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 561.002113][T11310] ? mutex_lock_nested+0x152/0x1d0 [ 561.002143][T11310] ? fdget_pos+0x252/0x320 [ 561.002171][T11310] ksys_read+0x156/0x270 [ 561.002211][T11310] ? __pfx_ksys_read+0x10/0x10 [ 561.002242][T11310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.002264][T11310] do_syscall_64+0x174/0x580 [ 561.002293][T11310] ? trace_irq_disable+0x3b/0x140 [ 561.002324][T11310] ? clear_bhb_loop+0x70/0xc0 [ 561.002350][T11310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.002372][T11310] RIP: 0033:0x7fcbf814e90e [ 561.002391][T11310] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 561.002409][T11310] RSP: 002b:00007fcbf63e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 561.002430][T11310] RAX: ffffffffffffffda RBX: 00007fcbf63e66c0 RCX: 00007fcbf814e90e [ 561.002445][T11310] RDX: 000000000000000f RSI: 00007fcbf63e60a0 RDI: 0000000000000004 [ 561.002457][T11310] RBP: 00007fcbf63e6090 R08: 0000000000000000 R09: 0000000000000000 [ 561.002470][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.002482][T11310] R13: 00007fcbf8416038 R14: 00007fcbf8415fa0 R15: 00007ffe61038178 [ 561.002514][T11310] [ 561.010660][T11305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xc1ef instead [ 561.010730][T11305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xfe14 instead [ 561.010761][T11305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x517e instead [ 561.010793][T11305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x3979 instead [ 561.010817][T11305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x34e3 instead [ 561.010863][T11305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xc947 instead [ 561.010902][T11305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xcf49 instead [ 561.010971][T11305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x9159 instead [ 561.011032][T11305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x74de instead [ 561.011078][T11305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xf4ec instead [ 561.011119][T11305] jffs2: Further such events for this erase block will not be printed [ 561.011387][T11305] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 561.011411][T11305] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 561.911104][ T167] bridge_slave_1: left allmulticast mode [ 561.911140][ T167] bridge_slave_1: left promiscuous mode [ 561.911409][ T167] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.114520][ T167] bridge_slave_0: left allmulticast mode [ 562.114571][ T167] bridge_slave_0: left promiscuous mode [ 562.114807][ T167] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.289417][T11327] openvswitch: netlink: IP tunnel dst address not specified [ 562.509827][T11332] netlink: 'syz.4.1737': attribute type 11 has an invalid length. [ 562.989354][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.989423][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.736910][ T167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.936690][ T167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.163600][ T167] bond0 (unregistering): Released all slaves [ 564.482668][ T5245] 8021q: adding VLAN 0 to HW filter on device eth5 [ 564.860740][ T4899] Bluetooth: hci4: Unable to find connection for big 0x00 [ 565.376440][T11370] netlink: 'syz.4.1747': attribute type 21 has an invalid length. [ 565.376463][T11370] IPv6: NLM_F_CREATE should be specified when creating new route [ 565.403378][T11370] netlink: 'syz.4.1747': attribute type 1 has an invalid length. [ 565.407349][T11369] netlink: 'syz.3.1746': attribute type 2 has an invalid length. [ 565.407404][T11369] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1746'. [ 565.436337][T11370] FAULT_INJECTION: forcing a failure. [ 565.436337][T11370] name failslab, interval 1, probability 0, space 0, times 0 [ 565.436372][T11370] CPU: 1 UID: 0 PID: 11370 Comm: syz.4.1747 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 565.436396][T11370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 565.436409][T11370] Call Trace: [ 565.436416][T11370] [ 565.436425][T11370] dump_stack_lvl+0xe8/0x150 [ 565.436462][T11370] should_fail_ex+0x467/0x600 [ 565.436498][T11370] should_failslab+0xa8/0x100 [ 565.436524][T11370] kmem_cache_alloc_node_noprof+0xae/0x670 [ 565.436569][T11370] ? __alloc_skb+0x1d7/0x7a0 [ 565.436589][T11370] ? __alloc_skb+0x1d7/0x7a0 [ 565.436618][T11370] __alloc_skb+0x1d7/0x7a0 [ 565.436643][T11370] netlink_dump+0x1e7/0xee0 [ 565.436669][T11370] ? __netlink_lookup+0xc6/0x8b0 [ 565.436708][T11370] ? __pfx_netlink_dump+0x10/0x10 [ 565.436744][T11370] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 565.436793][T11370] __netlink_dump_start+0x589/0x7b0 [ 565.436824][T11370] netlink_diag_handler_dump+0x19e/0x240 [ 565.436844][T11370] ? sock_diag_lock_handler+0x19/0x290 [ 565.436879][T11370] ? __pfx_netlink_diag_handler_dump+0x10/0x10 [ 565.436913][T11370] ? __pfx_netlink_diag_dump+0x10/0x10 [ 565.436932][T11370] ? __pfx_netlink_diag_dump_done+0x10/0x10 [ 565.436956][T11370] ? sock_diag_lock_handler+0x19/0x290 [ 565.436988][T11370] ? sock_diag_lock_handler+0x19/0x290 [ 565.437024][T11370] sock_diag_rcv_msg+0x4b0/0x5f0 [ 565.437061][T11370] netlink_rcv_skb+0x226/0x4a0 [ 565.437086][T11370] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 565.437121][T11370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.437159][T11370] ? netlink_deliver_tap+0x2e/0x1b0 [ 565.437182][T11370] ? netlink_deliver_tap+0x2e/0x1b0 [ 565.437213][T11370] netlink_unicast+0x7f5/0x990 [ 565.437238][T11370] netlink_sendmsg+0x813/0xb40 [ 565.437263][T11370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.437283][T11370] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 565.437305][T11370] ? __kernel_text_address+0xd/0x30 [ 565.437330][T11370] ? unwind_get_return_address+0x4d/0x90 [ 565.437348][T11370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.437367][T11370] sock_sendmsg_nosec+0x13a/0x180 [ 565.437392][T11370] sock_write_iter+0x2e4/0x3f0 [ 565.437434][T11370] ? __pfx_sock_write_iter+0x10/0x10 [ 565.437475][T11370] do_iter_readv_writev+0x624/0x8d0 [ 565.437501][T11370] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 565.437529][T11370] ? bpf_lsm_file_permission+0x9/0x20 [ 565.437570][T11370] ? security_file_permission+0x75/0x260 [ 565.437589][T11370] ? rw_verify_area+0x209/0x4d0 [ 565.437611][T11370] vfs_writev+0x34c/0x990 [ 565.437638][T11370] ? do_raw_spin_lock+0x12b/0x2f0 [ 565.437664][T11370] ? __pfx_vfs_writev+0x10/0x10 [ 565.437699][T11370] ? __fget_files+0x2a/0x420 [ 565.437719][T11370] ? __fget_files+0x3a8/0x420 [ 565.437734][T11370] ? __fget_files+0x2a/0x420 [ 565.437756][T11370] do_writev+0x15a/0x2e0 [ 565.437783][T11370] ? __pfx_do_writev+0x10/0x10 [ 565.437814][T11370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.437833][T11370] do_syscall_64+0x174/0x580 [ 565.437858][T11370] ? trace_irq_disable+0x3b/0x140 [ 565.437885][T11370] ? clear_bhb_loop+0x70/0xc0 [ 565.437905][T11370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.437923][T11370] RIP: 0033:0x7fa59217e0d9 [ 565.437940][T11370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.437955][T11370] RSP: 002b:00007fa5903d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 565.437975][T11370] RAX: ffffffffffffffda RBX: 00007fa592405fa0 RCX: 00007fa59217e0d9 [ 565.437988][T11370] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 000000000000000c [ 565.437999][T11370] RBP: 00007fa5903d6090 R08: 0000000000000000 R09: 0000000000000000 [ 565.438009][T11370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.438019][T11370] R13: 00007fa592406038 R14: 00007fa592405fa0 R15: 00007ffc90964e08 [ 565.438047][T11370] [ 565.608987][ T5699] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 565.617398][ T37] kauditd_printk_skb: 10003 callbacks suppressed [ 565.617443][ T37] audit: type=1400 audit(1786350909.232:181919): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=11359 comm="syz.2.1745" path="/dev/raw-gadget" dev="devtmpfs" ino=814 [ 565.617602][ T37] audit: type=1400 audit(1786350909.232:181920): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=11359 comm="syz.2.1745" path="/dev/raw-gadget" dev="devtmpfs" ino=814 [ 565.619834][ T37] audit: type=1400 audit(1786350909.242:181921): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11350 comm="syz.1.1741" name="321" dev="tmpfs" ino=1739 [ 565.619956][ T37] audit: type=1400 audit(1786350909.242:181922): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11350 comm="syz.1.1741" name="321" dev="tmpfs" ino=1739 [ 565.724749][ T37] audit: type=1400 audit(1786350909.342:181923): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4950 comm="udevd" path="/sys/devices/virtual/block/loop3/uevent" dev="sysfs" ino=15417 [ 565.728775][ T37] audit: type=1400 audit(1786350909.352:181924): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4950 comm="udevd" path="/sys/devices/virtual/block/loop3/uevent" dev="sysfs" ino=15417 [ 565.728918][ T37] audit: type=1400 audit(1786350909.352:181925): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sda1" ino=2 [ 565.754997][ T37] audit: type=1400 audit(1786350909.372:181926): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="tmpfs" ino=1 [ 565.755139][ T37] audit: type=1400 audit(1786350909.372:181927): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 565.755255][ T37] audit: type=1400 audit(1786350909.372:181928): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=4950 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 566.226046][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 566.226880][ T5699] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 566.228412][ T5699] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 566.228438][ T5699] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.228458][ T5699] usb 3-1: config 0 has no interface number 0 [ 566.228505][ T5699] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 566.228543][ T5699] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 566.228570][ T5699] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 566.228594][ T5699] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 566.228618][ T5699] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 566.228640][ T5699] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 566.228663][ T5699] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 566.228686][ T5699] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 566.228707][ T5699] usb 3-1: config 0 interface 239 has no altsetting 0 [ 566.232543][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.232567][ T5699] usb 3-1: Product: syz [ 566.232581][ T5699] usb 3-1: Manufacturer: syz [ 566.232595][ T5699] usb 3-1: SerialNumber: syz [ 566.396309][ T5699] usb 3-1: config 0 descriptor?? [ 566.397936][T11360] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 566.398477][T11360] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 566.438951][T11376] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1749'. [ 566.554555][ T167] hsr_slave_0: left promiscuous mode [ 566.572555][ T4899] Bluetooth: hci3: urb ffff88802a6c9a00 submission failed (90) [ 566.636539][ T167] hsr_slave_1: left promiscuous mode [ 566.637576][ T167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.637602][ T167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.708033][ T167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.708063][ T167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.711298][ T2188] usb 3-1: USB disconnect, device number 21 [ 566.856371][T11379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1750'. [ 566.893242][ T167] veth1_macvtap: left promiscuous mode [ 566.893351][ T167] veth0_macvtap: left promiscuous mode [ 566.893593][ T167] veth1_vlan: left promiscuous mode [ 566.893768][ T167] veth0_vlan: left promiscuous mode [ 568.498948][T11389] vivid-000: kernel_thread() failed [ 568.671996][ T5811] kernel read not supported for file /video9 (pid: 5811 comm: kworker/1:7) [ 568.687967][ T167] team0 (unregistering): Port device team_slave_1 removed [ 568.736788][ T167] team0 (unregistering): Port device team_slave_0 removed [ 569.215820][T11125] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.224864][T11125] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.225441][T11125] bridge_slave_0: entered allmulticast mode [ 569.243929][T11125] bridge_slave_0: entered promiscuous mode [ 569.263254][T11125] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.263387][T11125] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.263571][T11125] bridge_slave_1: entered allmulticast mode [ 569.287185][T11125] bridge_slave_1: entered promiscuous mode [ 569.700979][T11125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.773175][ T37] kauditd_printk_skb: 9157 callbacks suppressed [ 570.773271][ T37] audit: type=1400 audit(1786350914.222:187738): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9684 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 570.774931][ T37] audit: type=1400 audit(1786350914.242:187740): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sda1" ino=2 [ 570.776108][ T37] audit: type=1400 audit(1786350914.252:187741): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="tmpfs" ino=1 [ 570.778773][ T37] audit: type=1400 audit(1786350914.252:187742): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5245 comm="dhcpcd" path="/proc/sys/net/ipv6/conf/eth7/accept_ra" dev="proc" ino=32876 [ 570.780160][ T37] audit: type=1400 audit(1786350914.302:187743): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5591 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 570.782689][ T37] audit: type=1400 audit(1786350914.242:187739): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9684 comm="udevd" name="block" dev="sysfs" ino=13257 [ 571.040715][ T37] audit: type=1400 audit(1786350914.322:187744): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9684 comm="udevd" name="/" dev="sda1" ino=2 [ 571.040765][ T37] audit: type=1400 audit(1786350914.332:187745): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5591 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 571.040803][ T37] audit: type=1400 audit(1786350914.352:187746): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5591 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 571.040839][ T37] audit: type=1400 audit(1786350914.352:187747): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11399 comm="syz.1.1756" name="newroot" dev="tmpfs" ino=2 [ 571.173856][T11125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.374050][T11411] netlink: 'syz.3.1757': attribute type 2 has an invalid length. [ 571.374068][T11411] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1757'. [ 571.478730][T11125] team0: Port device team_slave_0 added [ 571.484864][T11125] team0: Port device team_slave_1 added [ 571.537511][T11125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.537529][T11125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.537553][T11125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.539676][T11125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.539703][T11125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.539727][T11125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.093418][T11418] bond5: entered promiscuous mode [ 573.205762][T11125] hsr_slave_0: entered promiscuous mode [ 573.209297][T11125] hsr_slave_1: entered promiscuous mode [ 573.211581][T11125] debugfs: 'hsr0' already exists in 'hsr' [ 573.211644][T11125] Cannot create hsr debugfs directory [ 573.235877][T11420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1762'. [ 573.610741][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 573.670366][T11430] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 573.690315][T11433] FAULT_INJECTION: forcing a failure. [ 573.690315][T11433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.690354][T11433] CPU: 0 UID: 0 PID: 11433 Comm: syz.4.1765 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 573.690380][T11433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 573.690395][T11433] Call Trace: [ 573.690403][T11433] [ 573.690413][T11433] dump_stack_lvl+0xe8/0x150 [ 573.690453][T11433] should_fail_ex+0x467/0x600 [ 573.690494][T11433] _copy_from_iter+0x1d3/0x1660 [ 573.690534][T11433] ? rcu_is_watching+0x15/0xb0 [ 573.690572][T11433] ? trace_kmem_cache_alloc+0x29/0xe0 [ 573.690610][T11433] ? __pfx__copy_from_iter+0x10/0x10 [ 573.690644][T11433] ? __alloc_skb+0x276/0x7a0 [ 573.690665][T11433] ? __alloc_skb+0x276/0x7a0 [ 573.690694][T11433] ? netlink_sendmsg+0x650/0xb40 [ 573.690722][T11433] ? skb_put+0x112/0x210 [ 573.690754][T11433] netlink_sendmsg+0x6c0/0xb40 [ 573.690791][T11433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.690820][T11433] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 573.690852][T11433] ? __kernel_text_address+0xd/0x30 [ 573.690884][T11433] ? unwind_get_return_address+0x4d/0x90 [ 573.690910][T11433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.690937][T11433] sock_sendmsg_nosec+0x13a/0x180 [ 573.690991][T11433] ____sys_sendmsg+0x565/0x870 [ 573.691039][T11433] ? __might_fault+0xaf/0x130 [ 573.691069][T11433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.691114][T11433] ? import_iovec+0x73/0xa0 [ 573.691144][T11433] ___sys_sendmsg+0x2a5/0x360 [ 573.691174][T11433] ? __lock_acquire+0x683/0x2ce0 [ 573.691203][T11433] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.691277][T11433] ? __fget_files+0x2a/0x420 [ 573.691300][T11433] ? __fget_files+0x3a8/0x420 [ 573.691337][T11433] __x64_sys_sendmsg+0x1b7/0x290 [ 573.691371][T11433] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 573.691425][T11433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.691453][T11433] do_syscall_64+0x174/0x580 [ 573.691489][T11433] ? trace_irq_disable+0x3b/0x140 [ 573.691528][T11433] ? clear_bhb_loop+0x70/0xc0 [ 573.691559][T11433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.691585][T11433] RIP: 0033:0x7fa59217e0d9 [ 573.691609][T11433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.691631][T11433] RSP: 002b:00007fa5903d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.691658][T11433] RAX: ffffffffffffffda RBX: 00007fa592405fa0 RCX: 00007fa59217e0d9 [ 573.691677][T11433] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000008 [ 573.691693][T11433] RBP: 00007fa5903d6090 R08: 0000000000000000 R09: 0000000000000000 [ 573.691709][T11433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.691723][T11433] R13: 00007fa592406038 R14: 00007fa592405fa0 R15: 00007ffc90964e08 [ 573.691771][T11433] [ 573.757317][T11430] bond6 (unregistering): Released all slaves [ 574.571319][T11447] netlink: del zone limit has 8 unknown bytes [ 575.776287][ T37] kauditd_printk_skb: 9457 callbacks suppressed [ 575.776306][ T37] audit: type=1400 audit(1786350919.392:193926): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=5598 comm="syz-executor" name="342" dev="tmpfs" ino=1848 [ 575.776350][ T37] audit: type=1400 audit(1786350919.392:193927): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=9684 comm="udevd" path="/dev/loop3" dev="devtmpfs" ino=648 [ 575.776391][ T37] audit: type=1400 audit(1786350919.392:193928): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=5598 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 575.776435][ T37] audit: type=1400 audit(1786350919.402:193929): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=11463 comm="syz-executor" name="485" dev="tmpfs" ino=2543 [ 575.779547][ T37] audit: type=1400 audit(1786350919.402:193930): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11463 comm="syz-executor" name="485" dev="tmpfs" ino=2543 [ 575.779606][ T37] audit: type=1400 audit(1786350919.402:193931): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11463 comm="syz-executor" name="485" dev="tmpfs" ino=2543 [ 575.779650][ T37] audit: type=1400 audit(1786350919.402:193932): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=9684 comm="udevd" path="/dev/loop3" dev="devtmpfs" ino=648 [ 575.779694][ T37] audit: type=1400 audit(1786350919.402:193933): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=11463 comm="syz-executor" name="485" dev="tmpfs" ino=2543 [ 575.779740][ T37] audit: type=1400 audit(1786350919.402:193934): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9684 comm="udevd" name="/" dev="sda1" ino=2 [ 575.779784][ T37] audit: type=1400 audit(1786350919.402:193935): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9684 comm="udevd" name="/" dev="sysfs" ino=1 [ 576.002211][T11465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1776'. [ 577.045754][T11477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1779'. [ 577.227053][ T5245] 8021q: adding VLAN 0 to HW filter on device eth7 [ 577.596212][T10353] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 577.749693][T10353] usb 5-1: not running at top speed; connect to a high speed hub [ 577.749733][T10353] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 577.781310][T10353] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.781370][T10353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.833115][T10353] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 577.834987][T10353] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 577.835040][T10353] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 579.127477][T11509] FAULT_INJECTION: forcing a failure. [ 579.127477][T11509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.129082][T11509] CPU: 0 UID: 0 PID: 11509 Comm: syz.3.1789 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 579.129110][T11509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 579.129124][T11509] Call Trace: [ 579.129133][T11509] [ 579.129142][T11509] dump_stack_lvl+0xe8/0x150 [ 579.129180][T11509] should_fail_ex+0x467/0x600 [ 579.129218][T11509] _copy_from_user+0x2d/0xb0 [ 579.129243][T11509] __sys_connect+0x155/0x470 [ 579.129270][T11509] ? __pfx___sys_connect+0x10/0x10 [ 579.129306][T11509] ? __pfx_ksys_write+0x10/0x10 [ 579.129338][T11509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.129363][T11509] __x64_sys_connect+0x7a/0x90 [ 579.129387][T11509] do_syscall_64+0x174/0x580 [ 579.129419][T11509] ? trace_irq_disable+0x3b/0x140 [ 579.129453][T11509] ? clear_bhb_loop+0x70/0xc0 [ 579.129480][T11509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.129503][T11509] RIP: 0033:0x7f9d7a83e0d9 [ 579.129523][T11509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.129542][T11509] RSP: 002b:00007f9d78a96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 579.129566][T11509] RAX: ffffffffffffffda RBX: 00007f9d7aac5fa0 RCX: 00007f9d7a83e0d9 [ 579.129582][T11509] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 579.129595][T11509] RBP: 00007f9d78a96090 R08: 0000000000000000 R09: 0000000000000000 [ 579.129609][T11509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.129621][T11509] R13: 00007f9d7aac6038 R14: 00007f9d7aac5fa0 R15: 00007ffcf3ec4628 [ 579.129655][T11509] [ 579.685551][T11514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1791'. [ 579.711748][T11500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1787'. [ 580.408275][T11526] binder: 11525:11526 ioctl c018620c 200000000140 returned -22 [ 581.057735][ T37] kauditd_printk_skb: 15462 callbacks suppressed [ 581.057756][ T37] audit: type=1400 audit(1786350924.392:204473): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1191 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.161 dest=40238 netif=eth0 [ 581.057808][ T37] audit: type=1400 audit(1786350924.422:204474): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11540 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 581.057855][ T37] audit: type=1400 audit(1786350924.422:204475): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11540 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 581.057901][ T37] audit: type=1400 audit(1786350924.422:204476): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11540 comm="syz-executor" name="347" dev="tmpfs" ino=1879 [ 581.057946][ T37] audit: type=1400 audit(1786350924.422:204477): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=11540 comm="syz-executor" opid=11540 ocomm="syz-executor" [ 581.057991][ T37] audit: type=1400 audit(1786350924.422:204478): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11540 comm="syz-executor" name="347" dev="tmpfs" ino=1879 [ 581.058037][ T37] audit: type=1400 audit(1786350924.422:204479): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11540 comm="syz-executor" name="347" dev="tmpfs" ino=1879 [ 581.058083][ T37] audit: type=1400 audit(1786350924.422:204480): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=11540 comm="syz-executor" name="347" dev="tmpfs" ino=1879 [ 581.058129][ T37] audit: type=1400 audit(1786350924.422:204481): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11540 comm="syz-executor" name="347" dev="tmpfs" ino=1879 [ 581.058176][ T37] audit: type=1400 audit(1786350924.422:204482): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11540 comm="syz-executor" name="347" dev="tmpfs" ino=1879 [ 581.885431][T11545] FAULT_INJECTION: forcing a failure. [ 581.885431][T11545] name failslab, interval 1, probability 0, space 0, times 0 [ 581.885466][T11545] CPU: 1 UID: 0 PID: 11545 Comm: syz.2.1798 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 581.885489][T11545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 581.885502][T11545] Call Trace: [ 581.885510][T11545] [ 581.885518][T11545] dump_stack_lvl+0xe8/0x150 [ 581.885558][T11545] should_fail_ex+0x467/0x600 [ 581.885612][T11545] should_failslab+0xa8/0x100 [ 581.885639][T11545] kmem_cache_alloc_noprof+0xa4/0x650 [ 581.885675][T11545] ? security_file_alloc+0x34/0x310 [ 581.885695][T11545] ? security_file_alloc+0x34/0x310 [ 581.885724][T11545] security_file_alloc+0x34/0x310 [ 581.885748][T11545] init_file+0x96/0x2d0 [ 581.885784][T11545] alloc_empty_file+0x74/0x1d0 [ 581.885821][T11545] dentry_open+0x44/0xa0 [ 581.885856][T11545] ima_calc_file_hash+0x168/0x8a0 [ 581.885887][T11545] ? is_bpf_text_address+0x292/0x2b0 [ 581.885912][T11545] ? is_bpf_text_address+0x26/0x2b0 [ 581.885936][T11545] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 581.885969][T11545] ? kernel_text_address+0xa5/0xe0 [ 581.886007][T11545] ? __kernel_text_address+0xd/0x30 [ 581.886042][T11545] ? unwind_get_return_address+0x4d/0x90 [ 581.886065][T11545] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 581.886099][T11545] ? arch_stack_walk+0xfb/0x150 [ 581.886126][T11545] ? inode_query_iversion+0x120/0x180 [ 581.886152][T11545] ? __pfx_inode_query_iversion+0x10/0x10 [ 581.886182][T11545] ? stack_trace_save+0xa9/0x100 [ 581.886221][T11545] ? generic_fillattr+0x59c/0x840 [ 581.886259][T11545] ? shmem_getattr+0x37b/0x4b0 [ 581.886297][T11545] ima_collect_measurement+0x521/0xa10 [ 581.886337][T11545] ? __pfx_ima_collect_measurement+0x10/0x10 [ 581.886411][T11545] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 581.886445][T11545] process_measurement+0x1282/0x1c20 [ 581.886489][T11545] ? __pfx_process_measurement+0x10/0x10 [ 581.886517][T11545] ? _parse_integer_limit+0x192/0x1e0 [ 581.886582][T11545] ? get_pid_task+0x20/0x1f0 [ 581.886612][T11545] ? get_pid_task+0x20/0x1f0 [ 581.886659][T11545] ima_file_mmap+0x1b0/0x200 [ 581.886687][T11545] ? __pfx_ima_file_mmap+0x10/0x10 [ 581.886720][T11545] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 581.886757][T11545] security_mmap_file+0x773/0xa20 [ 581.886782][T11545] vm_mmap_pgoff+0x134/0x4e0 [ 581.886818][T11545] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 581.886857][T11545] ? __fget_files+0x2a/0x420 [ 581.886877][T11545] ? __fget_files+0x3a8/0x420 [ 581.886898][T11545] ? __fget_files+0x2a/0x420 [ 581.886924][T11545] ksys_mmap_pgoff+0x4a6/0x720 [ 581.886965][T11545] ? __x64_sys_mmap+0x7f/0x140 [ 581.887000][T11545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.887025][T11545] do_syscall_64+0x174/0x580 [ 581.887055][T11545] ? trace_irq_disable+0x3b/0x140 [ 581.887090][T11545] ? clear_bhb_loop+0x70/0xc0 [ 581.887119][T11545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.887141][T11545] RIP: 0033:0x7fcbf818e0d9 [ 581.887162][T11545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.887181][T11545] RSP: 002b:00007fcbf63e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 581.887205][T11545] RAX: ffffffffffffffda RBX: 00007fcbf8415fa0 RCX: 00007fcbf818e0d9 [ 581.887220][T11545] RDX: 0000000001000005 RSI: 0000000000c00000 RDI: 0000000000000000 [ 581.887234][T11545] RBP: 00007fcbf63e6090 R08: 0000000000000003 R09: 0000000008000000 [ 581.887248][T11545] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 581.887261][T11545] R13: 00007fcbf8416038 R14: 00007fcbf8415fa0 R15: 00007ffe61038178 [ 581.887296][T11545] [ 583.965635][ T4899] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 584.551660][T11567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1803'. [ 584.915483][T11574] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 585.163297][T11574] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.811031][T11574] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.861951][T11574] bridge0: entered allmulticast mode [ 586.069248][ T37] kauditd_printk_skb: 9242 callbacks suppressed [ 586.069268][ T37] audit: type=1400 audit(1786350929.682:208426): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11583 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 586.069315][ T37] audit: type=1400 audit(1786350929.682:208427): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11583 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 586.069359][ T37] audit: type=1400 audit(1786350929.682:208428): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11583 comm="syz-executor" name="356" dev="tmpfs" ino=1913 [ 586.069403][ T37] audit: type=1400 audit(1786350929.682:208429): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=11583 comm="syz-executor" opid=11583 ocomm="syz-executor" [ 586.069448][ T37] audit: type=1400 audit(1786350929.682:208430): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11583 comm="syz-executor" name="356" dev="tmpfs" ino=1913 [ 586.069492][ T37] audit: type=1400 audit(1786350929.682:208431): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11583 comm="syz-executor" name="356" dev="tmpfs" ino=1913 [ 586.069537][ T37] audit: type=1400 audit(1786350929.682:208432): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=11583 comm="syz-executor" name="356" dev="tmpfs" ino=1913 [ 586.069580][ T37] audit: type=1400 audit(1786350929.682:208433): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11583 comm="syz-executor" name="356" dev="tmpfs" ino=1913 [ 586.069624][ T37] audit: type=1400 audit(1786350929.682:208434): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11583 comm="syz-executor" name="356" dev="tmpfs" ino=1913 [ 586.069669][ T37] audit: type=1400 audit(1786350929.682:208435): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=11583 comm="syz-executor" name="356" dev="tmpfs" ino=1913 [ 586.801628][T11590] 9p: Bad value for 'rfdno' [ 586.979994][T11590] hfs: can't find a HFS filesystem on dev loop2 [ 587.601980][T11600] 9p: Bad value for 'rfdno' [ 587.780570][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'. [ 587.994189][T11609] FAULT_INJECTION: forcing a failure. [ 587.994189][T11609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.994225][T11609] CPU: 0 UID: 0 PID: 11609 Comm: syz.3.1816 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 587.994249][T11609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 587.994267][T11609] Call Trace: [ 587.994275][T11609] [ 587.994284][T11609] dump_stack_lvl+0xe8/0x150 [ 587.994321][T11609] should_fail_ex+0x467/0x600 [ 587.994357][T11609] _copy_to_user+0x31/0xb0 [ 587.994384][T11609] put_timespec64+0xc8/0x130 [ 587.994408][T11609] ? __pfx_put_timespec64+0x10/0x10 [ 587.994443][T11609] poll_select_finish+0x46f/0x5e0 [ 587.994481][T11609] ? __pfx_poll_select_finish+0x10/0x10 [ 587.994521][T11609] ? __pfx_set_user_sigmask+0x10/0x10 [ 587.994548][T11609] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 587.994581][T11609] __se_sys_pselect6+0x27e/0x320 [ 587.994620][T11609] ? __pfx___se_sys_pselect6+0x10/0x10 [ 587.994654][T11609] ? __pfx_ksys_write+0x10/0x10 [ 587.994685][T11609] ? __x64_sys_pselect6+0x21/0xf0 [ 587.994728][T11609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.994768][T11609] do_syscall_64+0x174/0x580 [ 587.994800][T11609] ? trace_irq_disable+0x3b/0x140 [ 587.994833][T11609] ? clear_bhb_loop+0x70/0xc0 [ 587.994860][T11609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.994891][T11609] RIP: 0033:0x7f9d7a83e0d9 [ 587.994911][T11609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.994930][T11609] RSP: 002b:00007f9d78a96028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 587.994954][T11609] RAX: ffffffffffffffda RBX: 00007f9d7aac5fa0 RCX: 00007f9d7a83e0d9 [ 587.994969][T11609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000900 [ 587.994982][T11609] RBP: 00007f9d78a96090 R08: 0000200000000280 R09: 0000000000000000 [ 587.994997][T11609] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 587.995011][T11609] R13: 00007f9d7aac6038 R14: 00007f9d7aac5fa0 R15: 00007ffcf3ec4628 [ 587.995045][T11609] [ 588.401975][T11612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.425686][T11612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.258492][ T37] kauditd_printk_skb: 3698 callbacks suppressed [ 591.258513][ T37] audit: type=1400 audit(1786350934.562:211342): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sda1" ino=2 [ 591.259858][ T37] audit: type=1400 audit(1786350934.562:211343): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11619 comm="cmp" name="/" dev="sda1" ino=2 [ 591.259907][ T37] audit: type=1400 audit(1786350934.862:211344): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5586 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 591.259952][ T37] audit: type=1400 audit(1786350934.862:211345): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5598 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 591.260012][ T37] audit: type=1400 audit(1786350934.882:211346): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1191 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.161 dest=40238 netif=eth0 [ 591.260077][ T37] audit: type=1400 audit(1786350934.882:211347): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1191 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.161 dest=40238 netif=eth0 [ 591.260126][ T37] audit: type=1400 audit(1786350934.882:211348): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1191 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.161 dest=40238 netif=eth0 [ 591.269347][ T37] audit: type=1400 audit(1786350934.892:211349): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11619 comm="cmp" name="etc" dev="sda1" ino=116 [ 591.269396][ T37] audit: type=1400 audit(1786350934.892:211350): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11619 comm="cmp" name="/" dev="sda1" ino=2 [ 591.269438][ T37] audit: type=1400 audit(1786350934.892:211351): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11619 comm="cmp" name="etc" dev="sda1" ino=116 [ 593.025793][T11648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.026737][T11648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.267041][ T5699] usb 5-1: USB disconnect, device number 27 [ 593.280785][ T5699] garmin_gps 5-1:1.0: device disconnected [ 593.729026][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1826'. [ 594.665287][T11657] FAULT_INJECTION: forcing a failure. [ 594.665287][T11657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.665328][T11657] CPU: 0 UID: 0 PID: 11657 Comm: syz.2.1829 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 594.665346][T11657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 594.665356][T11657] Call Trace: [ 594.665361][T11657] [ 594.665368][T11657] dump_stack_lvl+0xe8/0x150 [ 594.665395][T11657] should_fail_ex+0x467/0x600 [ 594.665440][T11657] _copy_to_user+0x31/0xb0 [ 594.665472][T11657] simple_read_from_buffer+0xe1/0x170 [ 594.665492][T11657] proc_fail_nth_read+0x1be/0x230 [ 594.665511][T11657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.665530][T11657] ? rw_verify_area+0x250/0x4d0 [ 594.665550][T11657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.665565][T11657] vfs_read+0x219/0xa90 [ 594.665589][T11657] ? __pfx_vfs_read+0x10/0x10 [ 594.665608][T11657] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 594.665645][T11657] ? lockdep_hardirqs_on+0x7a/0x110 [ 594.665676][T11657] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 594.665708][T11657] ? mutex_lock_nested+0x152/0x1d0 [ 594.665732][T11657] ? fdget_pos+0x252/0x320 [ 594.665769][T11657] ksys_read+0x156/0x270 [ 594.665798][T11657] ? __pfx_ksys_read+0x10/0x10 [ 594.665834][T11657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.665857][T11657] do_syscall_64+0x174/0x580 [ 594.665891][T11657] ? clear_bhb_loop+0x70/0xc0 [ 594.665919][T11657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.665944][T11657] RIP: 0033:0x7fcbf814e90e [ 594.665964][T11657] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 594.665984][T11657] RSP: 002b:00007fcbf63a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 594.666007][T11657] RAX: ffffffffffffffda RBX: 00007fcbf63a46c0 RCX: 00007fcbf814e90e [ 594.666022][T11657] RDX: 000000000000000f RSI: 00007fcbf63a40a0 RDI: 0000000000000005 [ 594.666035][T11657] RBP: 00007fcbf63a4090 R08: 0000000000000000 R09: 0000000000000000 [ 594.666048][T11657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.666060][T11657] R13: 00007fcbf8416218 R14: 00007fcbf8416180 R15: 00007ffe61038178 [ 594.666096][T11657] [ 595.103218][T11659] 9p: Bad value for 'rfdno' [ 595.297599][T11125] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 595.464636][T11125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 595.465897][T11125] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 595.560727][T11125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 595.769563][T11673] bond3: option lacp_rate: invalid value (4) [ 595.879082][T11673] bond3 (unregistering): Released all slaves [ 596.277382][ T37] kauditd_printk_skb: 12624 callbacks suppressed [ 596.277403][ T37] audit: type=1400 audit(1786350939.892:220097): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sda1" ino=2 [ 596.277471][ T37] audit: type=1400 audit(1786350939.892:220098): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sysfs" ino=1 [ 596.277516][ T37] audit: type=1400 audit(1786350939.892:220099): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="devices" dev="sysfs" ino=18 [ 596.277561][ T37] audit: type=1400 audit(1786350939.892:220100): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 596.277621][ T37] audit: type=1400 audit(1786350939.892:220101): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="block" dev="sysfs" ino=13257 [ 596.277668][ T37] audit: type=1400 audit(1786350939.892:220102): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="loop4" dev="sysfs" ino=15539 [ 596.277713][ T37] audit: type=1400 audit(1786350939.892:220103): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4950 comm="udevd" name="holders" dev="sysfs" ino=15583 [ 596.277760][ T37] audit: type=1400 audit(1786350939.892:220104): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4950 comm="udevd" path="/sys/devices/virtual/block/loop4/holders" dev="sysfs" ino=15583 [ 596.277807][ T37] audit: type=1400 audit(1786350939.892:220105): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4950 comm="udevd" path="/sys/devices/virtual/block/loop4/holders" dev="sysfs" ino=15583 [ 596.277854][ T37] audit: type=1400 audit(1786350939.892:220106): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11687 comm="modprobe" name="lib" dev="sda1" ino=264 [ 596.797487][T11125] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 597.204716][T11125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 597.211622][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1838'. [ 597.224846][T11125] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 597.303645][T11125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 597.519034][T11706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1841'. [ 598.465593][T11720] 9p: Bad value for 'rfdno' [ 599.493412][T11125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.063098][T11125] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.288889][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1850'. [ 600.288920][T11755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1850'. [ 600.307377][ T997] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 600.407569][T11760] 9pnet_fd: Insufficient options for proto=fd [ 600.458475][ T997] usb 5-1: Using ep0 maxpacket: 32 [ 600.491986][ T997] usb 5-1: unable to get BOS descriptor or descriptor too short [ 600.492047][ T997] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 600.494727][ T997] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 600.494755][ T997] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 600.494779][ T997] usb 5-1: config 14 has no interface number 0 [ 600.494799][ T997] usb 5-1: config 14 has no interface number 1 [ 600.494875][ T997] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 600.494903][ T997] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 600.494938][ T997] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 600.494967][ T997] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 600.494998][ T997] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 600.495028][ T997] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.495057][ T997] usb 5-1: config 14 interface 57 has no altsetting 0 [ 600.495077][ T997] usb 5-1: config 14 interface 228 has no altsetting 0 [ 600.647845][ T997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.647875][ T997] usb 5-1: Product: syz [ 600.647891][ T997] usb 5-1: Manufacturer: syz [ 600.647906][ T997] usb 5-1: SerialNumber: syz [ 601.017255][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.017574][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.282709][ T2870] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.283701][ T2870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.305163][ T37] kauditd_printk_skb: 11384 callbacks suppressed [ 601.305183][ T37] audit: type=1400 audit(1786350944.922:227759): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10715 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 601.305230][ T37] audit: type=1400 audit(1786350944.922:227760): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10715 comm="udevd" name="data" dev="tmpfs" ino=14 [ 601.305274][ T37] audit: type=1400 audit(1786350944.922:227761): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=10715 comm="udevd" name="c10:232" dev="tmpfs" ino=6348 [ 601.305320][ T37] audit: type=1400 audit(1786350944.922:227762): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=10715 comm="udevd" path="/run/udev/data/c10:232" dev="tmpfs" ino=6348 [ 601.305366][ T37] audit: type=1400 audit(1786350944.922:227763): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1191 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.161 dest=40238 netif=eth0 [ 601.394509][ T37] audit: type=1400 audit(1786350944.992:227764): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=10715 comm="udevd" path="/run/udev/data/c10:232" dev="tmpfs" ino=6348 [ 601.394996][ T37] audit: type=1400 audit(1786350945.002:227765): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10715 comm="udevd" name="/" dev="sda1" ino=2 [ 601.395257][ T37] audit: type=1400 audit(1786350945.002:227766): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10715 comm="udevd" name="/" dev="sysfs" ino=1 [ 601.426316][ T37] audit: type=1400 audit(1786350945.032:227767): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10715 comm="udevd" name="devices" dev="sysfs" ino=18 [ 601.426592][ T37] audit: type=1400 audit(1786350945.032:227768): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10715 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 601.660002][ T997] legousbtower 5-1:14.57: interrupt endpoints not found [ 602.069073][ T997] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 602.165403][ T997] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 602.459232][T11784] FAULT_INJECTION: forcing a failure. [ 602.459232][T11784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.459261][T11784] CPU: 1 UID: 0 PID: 11784 Comm: syz.2.1859 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 602.459281][T11784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 602.459291][T11784] Call Trace: [ 602.459298][T11784] [ 602.459305][T11784] dump_stack_lvl+0xe8/0x150 [ 602.459338][T11784] should_fail_ex+0x467/0x600 [ 602.459369][T11784] _copy_from_user+0x2d/0xb0 [ 602.459388][T11784] ___sys_sendmsg+0x1c6/0x360 [ 602.459409][T11784] ? __lock_acquire+0x683/0x2ce0 [ 602.459428][T11784] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.459472][T11784] ? kstrtouint+0x6e/0xe0 [ 602.459521][T11784] ? __fget_files+0x2a/0x420 [ 602.459541][T11784] ? __fget_files+0x3a8/0x420 [ 602.459566][T11784] __sys_sendmmsg+0x279/0x4d0 [ 602.459591][T11784] ? __pfx___sys_sendmmsg+0x10/0x10 [ 602.459619][T11784] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 602.459650][T11784] ? ksys_write+0x248/0x270 [ 602.459673][T11784] ? __pfx_ksys_write+0x10/0x10 [ 602.459699][T11784] __x64_sys_sendmmsg+0xa0/0xc0 [ 602.459720][T11784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.459740][T11784] do_syscall_64+0x174/0x580 [ 602.459767][T11784] ? trace_irq_disable+0x3b/0x140 [ 602.459796][T11784] ? clear_bhb_loop+0x70/0xc0 [ 602.459820][T11784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.459843][T11784] RIP: 0033:0x7fcbf818e0d9 [ 602.459861][T11784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.459880][T11784] RSP: 002b:00007fcbf63e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 602.459900][T11784] RAX: ffffffffffffffda RBX: 00007fcbf8415fa0 RCX: 00007fcbf818e0d9 [ 602.459912][T11784] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 602.459924][T11784] RBP: 00007fcbf63e6090 R08: 0000000000000000 R09: 0000000000000000 [ 602.459935][T11784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.459945][T11784] R13: 00007fcbf8416038 R14: 00007fcbf8415fa0 R15: 00007ffe61038178 [ 602.459971][T11784] [ 603.010602][T11796] 9pnet_fd: Insufficient options for proto=fd [ 603.072585][T11798] FAULT_INJECTION: forcing a failure. [ 603.072585][T11798] name failslab, interval 1, probability 0, space 0, times 0 [ 603.072621][T11798] CPU: 0 UID: 0 PID: 11798 Comm: syz.1.1862 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 603.072647][T11798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 603.072662][T11798] Call Trace: [ 603.072672][T11798] [ 603.072682][T11798] dump_stack_lvl+0xe8/0x150 [ 603.072720][T11798] should_fail_ex+0x467/0x600 [ 603.072758][T11798] should_failslab+0xa8/0x100 [ 603.072799][T11798] __kmalloc_noprof+0xfe/0x780 [ 603.072822][T11798] ? tomoyo_encode+0x2ad/0x570 [ 603.072847][T11798] ? tomoyo_encode+0x2ad/0x570 [ 603.072880][T11798] tomoyo_encode+0x2ad/0x570 [ 603.072914][T11798] tomoyo_realpath_from_path+0x5fa/0x640 [ 603.072955][T11798] ? tomoyo_path_number_perm+0x219/0x5f0 [ 603.072992][T11798] tomoyo_path_number_perm+0x246/0x5f0 [ 603.073032][T11798] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 603.073067][T11798] ? __lock_acquire+0x683/0x2ce0 [ 603.073105][T11798] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 603.073136][T11798] ? hook_file_ioctl+0x1f3/0x600 [ 603.073167][T11798] ? lockdep_hardirqs_on+0x7a/0x110 [ 603.073218][T11798] ? __fget_files+0x2a/0x420 [ 603.073243][T11798] ? __fget_files+0x2a/0x420 [ 603.073263][T11798] ? __fget_files+0x3a8/0x420 [ 603.073283][T11798] ? __fget_files+0x2a/0x420 [ 603.073309][T11798] security_file_ioctl+0xc3/0x2a0 [ 603.073334][T11798] __se_sys_ioctl+0x47/0x170 [ 603.073364][T11798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.073389][T11798] do_syscall_64+0x174/0x580 [ 603.073422][T11798] ? trace_irq_disable+0x3b/0x140 [ 603.073461][T11798] ? clear_bhb_loop+0x70/0xc0 [ 603.073489][T11798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.073511][T11798] RIP: 0033:0x7f6c1c1de0d9 [ 603.073532][T11798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.073553][T11798] RSP: 002b:00007f6c1a436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.073576][T11798] RAX: ffffffffffffffda RBX: 00007f6c1c465fa0 RCX: 00007f6c1c1de0d9 [ 603.073593][T11798] RDX: 0000200000000100 RSI: 00000000c0145608 RDI: 0000000000000003 [ 603.073607][T11798] RBP: 00007f6c1a436090 R08: 0000000000000000 R09: 0000000000000000 [ 603.073621][T11798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.073634][T11798] R13: 00007f6c1c466038 R14: 00007f6c1c465fa0 R15: 00007ffc570a4098 [ 603.073669][T11798] [ 603.086476][T11798] ERROR: Out of memory at tomoyo_realpath_from_path. [ 605.051286][ T997] usb 5-1: USB disconnect, device number 28 [ 605.276869][ T997] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 605.317398][T11825] FAULT_INJECTION: forcing a failure. [ 605.317398][T11825] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 605.317429][T11825] CPU: 0 UID: 0 PID: 11825 Comm: syz.1.1869 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 605.317471][T11825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.317482][T11825] Call Trace: [ 605.317489][T11825] [ 605.317496][T11825] dump_stack_lvl+0xe8/0x150 [ 605.317526][T11825] should_fail_ex+0x467/0x600 [ 605.317554][T11825] prepare_alloc_pages+0x223/0x690 [ 605.317577][T11825] __alloc_frozen_pages_noprof+0x12f/0x380 [ 605.317598][T11825] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 605.317616][T11825] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 605.317636][T11825] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 605.317658][T11825] ? __pfx_policy_nodemask+0x10/0x10 [ 605.317677][T11825] ? lockdep_hardirqs_on+0x7a/0x110 [ 605.317705][T11825] __alloc_pages_noprof+0x10/0x100 [ 605.317727][T11825] alloc_pages_bulk_noprof+0x67e/0x890 [ 605.317748][T11825] ? alloc_pages_mpol+0x115/0x280 [ 605.317773][T11825] ? alloc_pages_noprof+0x161/0x2f0 [ 605.317796][T11825] __kasan_populate_vmalloc+0xb7/0x1c0 [ 605.317822][T11825] ? rt_spin_unlock+0x163/0x200 [ 605.317843][T11825] alloc_vmap_area+0xd1a/0x1420 [ 605.317878][T11825] ? __pfx_alloc_vmap_area+0x10/0x10 [ 605.317905][T11825] ? __kmalloc_cache_node_noprof+0x47b/0x6a0 [ 605.317927][T11825] ? __get_vm_area_node+0x136/0x300 [ 605.317954][T11825] ? __get_vm_area_node+0x136/0x300 [ 605.317988][T11825] __get_vm_area_node+0x1f2/0x300 [ 605.318024][T11825] __vmalloc_node_range_noprof+0x358/0x1730 [ 605.318058][T11825] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 605.318086][T11825] ? is_bpf_text_address+0x26/0x2b0 [ 605.318144][T11825] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 605.318178][T11825] ? is_bpf_text_address+0x26/0x2b0 [ 605.318206][T11825] ? kernel_text_address+0xa5/0xe0 [ 605.318255][T11825] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 605.318277][T11825] __vmalloc_noprof+0xd2/0x120 [ 605.318311][T11825] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 605.318337][T11825] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 605.318359][T11825] ? bpf_prog_alloc+0x2a/0x1a0 [ 605.318383][T11825] bpf_prog_alloc+0x3c/0x1a0 [ 605.318409][T11825] bpf_prog_load+0x7f8/0x1c00 [ 605.318444][T11825] ? __pfx_bpf_prog_load+0x10/0x10 [ 605.318493][T11825] __sys_bpf+0xd0d/0xd90 [ 605.318523][T11825] ? __pfx___sys_bpf+0x10/0x10 [ 605.318548][T11825] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 605.318584][T11825] ? rt_mutex_slowunlock+0x219/0x460 [ 605.318630][T11825] ? ksys_write+0x248/0x270 [ 605.318659][T11825] ? __pfx_ksys_write+0x10/0x10 [ 605.318692][T11825] __x64_sys_bpf+0xba/0xd0 [ 605.318724][T11825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.318748][T11825] do_syscall_64+0x174/0x580 [ 605.318779][T11825] ? trace_irq_disable+0x3b/0x140 [ 605.318815][T11825] ? clear_bhb_loop+0x70/0xc0 [ 605.318842][T11825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.318865][T11825] RIP: 0033:0x7f6c1c1de0d9 [ 605.318887][T11825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.318907][T11825] RSP: 002b:00007f6c1a436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 605.318932][T11825] RAX: ffffffffffffffda RBX: 00007f6c1c465fa0 RCX: 00007f6c1c1de0d9 [ 605.318949][T11825] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 605.318963][T11825] RBP: 00007f6c1a436090 R08: 0000000000000000 R09: 0000000000000000 [ 605.318977][T11825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.318990][T11825] R13: 00007f6c1c466038 R14: 00007f6c1c465fa0 R15: 00007ffc570a4098 [ 605.319025][T11825] [ 605.362452][T11825] syz.1.1869: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 605.362638][T11825] CPU: 0 UID: 0 PID: 11825 Comm: syz.1.1869 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 605.362715][T11825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.362755][T11825] Call Trace: [ 605.362783][T11825] [ 605.362812][T11825] dump_stack_lvl+0xe8/0x150 [ 605.362906][T11825] warn_alloc+0x24c/0x270 [ 605.362967][T11825] ? kasan_quarantine_put+0xbb/0x1f0 [ 605.363057][T11825] ? __pfx_warn_alloc+0x10/0x10 [ 605.363125][T11825] ? __get_vm_area_node+0x20b/0x300 [ 605.363226][T11825] ? __get_vm_area_node+0x20b/0x300 [ 605.363339][T11825] __vmalloc_node_range_noprof+0x37d/0x1730 [ 605.363445][T11825] ? is_bpf_text_address+0x26/0x2b0 [ 605.363578][T11825] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 605.363655][T11825] ? is_bpf_text_address+0x26/0x2b0 [ 605.363740][T11825] ? kernel_text_address+0xa5/0xe0 [ 605.363841][T11825] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 605.363899][T11825] __vmalloc_noprof+0xd2/0x120 [ 605.363935][T11825] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 605.363997][T11825] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 605.364064][T11825] ? bpf_prog_alloc+0x2a/0x1a0 [ 605.364151][T11825] bpf_prog_alloc+0x3c/0x1a0 [ 605.364229][T11825] bpf_prog_load+0x7f8/0x1c00 [ 605.364313][T11825] ? __pfx_bpf_prog_load+0x10/0x10 [ 605.364434][T11825] __sys_bpf+0xd0d/0xd90 [ 605.364506][T11825] ? __pfx___sys_bpf+0x10/0x10 [ 605.364567][T11825] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 605.364663][T11825] ? rt_mutex_slowunlock+0x219/0x460 [ 605.364767][T11825] ? ksys_write+0x248/0x270 [ 605.364840][T11825] ? __pfx_ksys_write+0x10/0x10 [ 605.364917][T11825] __x64_sys_bpf+0xba/0xd0 [ 605.365005][T11825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.365062][T11825] do_syscall_64+0x174/0x580 [ 605.365138][T11825] ? trace_irq_disable+0x3b/0x140 [ 605.365217][T11825] ? clear_bhb_loop+0x70/0xc0 [ 605.365284][T11825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.365339][T11825] RIP: 0033:0x7f6c1c1de0d9 [ 605.365372][T11825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.365390][T11825] RSP: 002b:00007f6c1a436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 605.365410][T11825] RAX: ffffffffffffffda RBX: 00007f6c1c465fa0 RCX: 00007f6c1c1de0d9 [ 605.365425][T11825] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 605.365438][T11825] RBP: 00007f6c1a436090 R08: 0000000000000000 R09: 0000000000000000 [ 605.365489][T11825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.365519][T11825] R13: 00007f6c1c466038 R14: 00007f6c1c465fa0 R15: 00007ffc570a4098 [ 605.365603][T11825] [ 605.411228][T11825] Mem-Info: [ 605.411269][T11825] active_anon:194 inactive_anon:8187 isolated_anon:0 [ 605.411269][T11825] active_file:22741 inactive_file:37762 isolated_file:0 [ 605.411269][T11825] unevictable:14 dirty:310 writeback:0 [ 605.411269][T11825] slab_reclaimable:10596 slab_unreclaimable:103394 [ 605.411269][T11825] mapped:25596 shmem:530 pagetables:1324 [ 605.411269][T11825] sec_pagetables:0 bounce:0 [ 605.411269][T11825] kernel_misc_reclaimable:0 [ 605.411269][T11825] free:1307587 free_pcp:3719 free_cma:0 [ 605.411375][T11825] Node 0 active_anon:776kB inactive_anon:32748kB active_file:90772kB inactive_file:151048kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:102384kB dirty:1240kB writeback:0kB shmem:2120kB kernel_stack:13452kB pagetables:5128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 605.411548][T11825] Node 1 active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 605.411685][T11825] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 605.411860][T11825] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 605.411967][T11825] Node 0 DMA32 free:1276096kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:776kB inactive_anon:32748kB active_file:90772kB inactive_file:151048kB unevictable:56kB writepending:1240kB zspages:0kB present:3129332kB managed:2560652kB mlocked:60kB bounce:0kB free_pcp:14872kB local_pcp:2392kB free_cma:0kB [ 605.412144][T11825] lowmem_reserve[]: 0 0 1 1 1 [ 605.412261][T11825] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1856kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 605.412423][T11825] lowmem_reserve[]: 0 0 0 0 0 [ 605.412514][T11825] Node 1 Normal free:3938892kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 605.412684][T11825] lowmem_reserve[]: 0 0 0 0 0 [ 605.412807][T11825] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 605.424817][T11825] Node 0 DMA32: 1140*4kB (UME) 487*8kB (UME) 507*16kB (UME) 737*32kB (UME) 365*64kB (UME) 195*128kB (UME) 53*256kB (UME) 45*512kB (UME) 36*1024kB (UME) 12*2048kB (UME) 266*4096kB (UM) = 1276056kB [ 605.425622][T11825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 605.425875][T11825] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 4*16kB (UM) 5*32kB (UM) 7*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 4*2048kB (UM) 958*4096kB (M) = 3938892kB [ 605.441971][T11825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 605.442036][T11825] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 605.442073][T11825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 605.442131][T11825] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 605.442199][T11825] 61039 total pagecache pages [ 605.442258][T11825] 10 pages in swap cache [ 605.442273][T11825] Free swap = 124956kB [ 605.442280][T11825] Total swap = 124996kB [ 605.442310][T11825] 2097051 pages RAM [ 605.442332][T11825] 0 pages HighMem/MovableOnly [ 605.442353][T11825] 424809 pages reserved [ 605.442373][T11825] 0 pages cma reserved [ 606.307566][ T37] kauditd_printk_skb: 7688 callbacks suppressed [ 606.307587][ T37] audit: type=1400 audit(1786350949.932:234276): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 606.310572][ T37] audit: type=1400 audit(1786350949.932:234278): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1191 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.161 dest=40238 netif=eth0 [ 606.313073][ T37] audit: type=1400 audit(1786350949.932:234277): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="block" dev="sysfs" ino=13257 [ 606.313127][ T37] audit: type=1400 audit(1786350949.932:234279): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="loop4" dev="sysfs" ino=15539 [ 606.313171][ T37] audit: type=1400 audit(1786350949.932:234280): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sda1" ino=2 [ 606.313214][ T37] audit: type=1400 audit(1786350949.932:234281): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sysfs" ino=1 [ 606.313257][ T37] audit: type=1400 audit(1786350949.932:234282): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="devices" dev="sysfs" ino=18 [ 606.313301][ T37] audit: type=1400 audit(1786350949.932:234283): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 606.313344][ T37] audit: type=1400 audit(1786350949.932:234284): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="block" dev="sysfs" ino=13257 [ 606.313405][ T37] audit: type=1400 audit(1786350949.932:234285): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="loop4" dev="sysfs" ino=15539 [ 607.702225][T11138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 607.765442][T11138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 607.783533][T11138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 607.801251][T11138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 607.827497][T11138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 608.002273][T11839] 9pnet_fd: Insufficient options for proto=fd [ 608.671519][T11855] fuse: Unknown parameter 'group_id00000000000000000000' [ 609.641208][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1881'. [ 609.641239][T11869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1881'. [ 609.760335][T11871] netlink: 'syz.2.1882': attribute type 4 has an invalid length. [ 609.949641][T11138] Bluetooth: hci3: command tx timeout [ 610.094422][ T997] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 610.258430][ T997] usb 3-1: Using ep0 maxpacket: 16 [ 610.260361][ T997] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 610.264431][ T997] usb 3-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 610.264456][ T997] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 610.348830][ T997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.348859][ T997] usb 3-1: Product: syz [ 610.348874][ T997] usb 3-1: Manufacturer: syz [ 610.348889][ T997] usb 3-1: SerialNumber: syz [ 610.422669][ T997] usb 3-1: 0:2 : does not exist [ 610.433095][T11138] Bluetooth: hci4: Unable to find connection for big 0x00 [ 610.615895][ T997] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 610.920689][ T997] usb 3-1: USB disconnect, device number 22 [ 611.106127][ T9684] udevd[9684]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 611.151772][T11882] FAULT_INJECTION: forcing a failure. [ 611.151772][T11882] name failslab, interval 1, probability 0, space 0, times 0 [ 611.151812][T11882] CPU: 0 UID: 0 PID: 11882 Comm: syz.4.1885 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 611.151839][T11882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 611.151854][T11882] Call Trace: [ 611.151864][T11882] [ 611.151874][T11882] dump_stack_lvl+0xe8/0x150 [ 611.151915][T11882] should_fail_ex+0x467/0x600 [ 611.151960][T11882] should_failslab+0xa8/0x100 [ 611.151989][T11882] __kmalloc_node_track_caller_noprof+0x102/0x7c0 [ 611.152017][T11882] ? kobject_set_name_vargs+0x61/0x110 [ 611.152042][T11882] ? kobject_set_name_vargs+0x61/0x110 [ 611.152075][T11882] kvasprintf+0xeb/0x1a0 [ 611.152105][T11882] ? __pfx_kvasprintf+0x10/0x10 [ 611.152133][T11882] ? do_raw_spin_lock+0x12b/0x2f0 [ 611.152182][T11882] ? kvasprintf_const+0xe8/0x240 [ 611.152212][T11882] kobject_set_name_vargs+0x61/0x110 [ 611.152240][T11882] dev_set_name+0xe2/0x140 [ 611.152276][T11882] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 611.152311][T11882] ? rt_mutex_slowunlock+0x219/0x460 [ 611.152342][T11882] ? __pfx_dev_set_name+0x10/0x10 [ 611.152396][T11882] pci_setup_device+0x56c/0x2670 [ 611.152431][T11882] ? do_syscall_64+0x174/0x580 [ 611.152464][T11882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.152504][T11882] ? __pfx_pci_setup_device+0x10/0x10 [ 611.152576][T11882] ? __kasan_kmalloc+0x93/0xb0 [ 611.152602][T11882] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 611.152642][T11882] pci_scan_single_device+0x139/0x230 [ 611.152667][T11882] ? __pfx_pci_scan_single_device+0x10/0x10 [ 611.152694][T11882] ? pci_find_next_bus+0x1b/0x70 [ 611.152726][T11882] pci_scan_slot+0x1ba/0x5a0 [ 611.152752][T11882] ? __pfx_pci_scan_slot+0x10/0x10 [ 611.152788][T11882] pci_scan_child_bus_extend+0x68/0x7c0 [ 611.152824][T11882] pci_rescan_bus+0x18/0x40 [ 611.152848][T11882] rescan_store+0xcc/0x150 [ 611.152884][T11882] ? __pfx_rescan_store+0x10/0x10 [ 611.152922][T11882] ? sysfs_file_kobj+0x1e4/0x230 [ 611.152960][T11882] ? sysfs_kf_write+0x166/0x260 [ 611.153001][T11882] ? __pfx_sysfs_kf_write+0x10/0x10 [ 611.153036][T11882] kernfs_fop_write_iter+0x3a5/0x540 [ 611.153075][T11882] vfs_write+0x61e/0xbb0 [ 611.153114][T11882] ? __pfx_vfs_write+0x10/0x10 [ 611.153152][T11882] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 611.153187][T11882] ? lockdep_hardirqs_on+0x7a/0x110 [ 611.153223][T11882] ? mutex_lock_nested+0x152/0x1d0 [ 611.153248][T11882] ? fdget_pos+0x252/0x320 [ 611.153282][T11882] ksys_write+0x156/0x270 [ 611.153314][T11882] ? __pfx_ksys_write+0x10/0x10 [ 611.153353][T11882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.153379][T11882] do_syscall_64+0x174/0x580 [ 611.153412][T11882] ? trace_irq_disable+0x3b/0x140 [ 611.153448][T11882] ? clear_bhb_loop+0x70/0xc0 [ 611.153478][T11882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.153503][T11882] RIP: 0033:0x7fa59217e0d9 [ 611.153525][T11882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.153546][T11882] RSP: 002b:00007fa590394028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 611.153582][T11882] RAX: ffffffffffffffda RBX: 00007fa592406180 RCX: 00007fa59217e0d9 [ 611.153598][T11882] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 611.153612][T11882] RBP: 00007fa590394090 R08: 0000000000000000 R09: 0000000000000000 [ 611.153626][T11882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.153656][T11882] R13: 00007fa592406218 R14: 00007fa592406180 R15: 00007ffc90964e08 [ 611.153695][T11882] [ 611.318038][ C1] audit_log_start: 10338 callbacks suppressed [ 611.318090][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 611.318129][ C1] audit: audit_lost=33599 audit_rate_limit=0 audit_backlog_limit=64 [ 611.318166][ C1] audit: backlog limit exceeded [ 611.399885][ T4950] audit: audit_backlog=65 > audit_backlog_limit=64 [ 611.399905][ T4950] audit: audit_lost=33600 audit_rate_limit=0 audit_backlog_limit=64 [ 611.399921][ T4950] audit: backlog limit exceeded [ 611.399948][ T4950] audit: audit_backlog=65 > audit_backlog_limit=64 [ 611.399961][ T4950] audit: audit_lost=33601 audit_rate_limit=0 audit_backlog_limit=64 [ 611.399977][ T4950] audit: backlog limit exceeded [ 611.399999][ T4950] audit: audit_backlog=65 > audit_backlog_limit=64 [ 611.517235][T11882] pci (null): [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 611.633062][T11882] ------------[ cut here ]------------ [ 611.633078][T11882] ret < 0 [ 611.633096][T11882] WARNING: drivers/pci/probe.c:2768 at pci_device_add+0x1542/0x1910, CPU#0: syz.4.1885/11882 [ 611.633155][T11882] Modules linked in: [ 611.633181][T11882] CPU: 0 UID: 0 PID: 11882 Comm: syz.4.1885 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 611.633206][T11882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 611.633221][T11882] RIP: 0010:pci_device_add+0x1542/0x1910 [ 611.633243][T11882] Code: f8 ff ff e9 77 f8 ff ff e8 db c9 bd fc 90 0f 0b 90 e9 a2 f8 ff ff e8 cd c9 bd fc 90 0f 0b 90 e9 69 fc ff ff e8 bf c9 bd fc 90 <0f> 0b 90 e9 2f fd ff ff 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 4d eb [ 611.633263][T11882] RSP: 0018:ffffc9000444f8a0 EFLAGS: 00010293 [ 611.633283][T11882] RAX: ffffffff8507fe71 RBX: 00000000ffffffea RCX: ffff888020ffbe00 [ 611.633301][T11882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 611.633315][T11882] RBP: ffffc9000444f9b0 R08: 0000000000000000 R09: 0000000000000000 [ 611.633330][T11882] R10: dffffc0000000000 R11: ffffed1007d94c22 R12: 1ffff11007d94ca8 [ 611.633348][T11882] R13: ffff888021ef8030 R14: ffff88813fe51000 R15: ffff88803eca6000 [ 611.633366][T11882] FS: 00007fa5903946c0(0000) GS:ffff888125c46000(0000) knlGS:0000000000000000 [ 611.633386][T11882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.633402][T11882] CR2: 00007fa5921cb7c0 CR3: 000000003504a000 CR4: 00000000003526f0 [ 611.633421][T11882] Call Trace: [ 611.633431][T11882] [ 611.633449][T11882] ? __pfx_pci_device_add+0x10/0x10 [ 611.633474][T11882] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 611.633515][T11882] pci_scan_single_device+0x1dd/0x230 [ 611.633539][T11882] ? __pfx_pci_scan_single_device+0x10/0x10 [ 611.633566][T11882] ? pci_find_next_bus+0x1b/0x70 [ 611.633598][T11882] pci_scan_slot+0x1ba/0x5a0 [ 611.633624][T11882] ? __pfx_pci_scan_slot+0x10/0x10 [ 611.633659][T11882] pci_scan_child_bus_extend+0x68/0x7c0 [ 611.633694][T11882] pci_rescan_bus+0x18/0x40 [ 611.633718][T11882] rescan_store+0xcc/0x150 [ 611.633754][T11882] ? __pfx_rescan_store+0x10/0x10 [ 611.633792][T11882] ? sysfs_file_kobj+0x1e4/0x230 [ 611.633827][T11882] ? sysfs_kf_write+0x166/0x260 [ 611.633877][T11882] ? __pfx_sysfs_kf_write+0x10/0x10 [ 611.633910][T11882] kernfs_fop_write_iter+0x3a5/0x540 [ 611.633945][T11882] vfs_write+0x61e/0xbb0 [ 611.633999][T11882] ? __pfx_vfs_write+0x10/0x10 [ 611.634030][T11882] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 611.634086][T11882] ? lockdep_hardirqs_on+0x7a/0x110 [ 611.634122][T11882] ? mutex_lock_nested+0x152/0x1d0 [ 611.634146][T11882] ? fdget_pos+0x252/0x320 [ 611.634179][T11882] ksys_write+0x156/0x270 [ 611.634209][T11882] ? __pfx_ksys_write+0x10/0x10 [ 611.634247][T11882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.634273][T11882] do_syscall_64+0x174/0x580 [ 611.634305][T11882] ? trace_irq_disable+0x3b/0x140 [ 611.634341][T11882] ? clear_bhb_loop+0x70/0xc0 [ 611.634371][T11882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.634394][T11882] RIP: 0033:0x7fa59217e0d9 [ 611.634415][T11882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.634451][T11882] RSP: 002b:00007fa590394028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 611.634475][T11882] RAX: ffffffffffffffda RBX: 00007fa592406180 RCX: 00007fa59217e0d9 [ 611.634492][T11882] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 611.634507][T11882] RBP: 00007fa590394090 R08: 0000000000000000 R09: 0000000000000000 [ 611.634522][T11882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.634536][T11882] R13: 00007fa592406218 R14: 00007fa592406180 R15: 00007ffc90964e08 [ 611.634575][T11882] [ 611.634596][T11882] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 611.634612][T11882] CPU: 0 UID: 0 PID: 11882 Comm: syz.4.1885 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 611.634637][T11882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 611.634651][T11882] Call Trace: [ 611.634661][T11882] [ 611.634671][T11882] vpanic+0x56c/0xa60 [ 611.634709][T11882] ? __pfx__printk+0x10/0x10 [ 611.634735][T11882] ? __pfx_vpanic+0x10/0x10 [ 611.634769][T11882] ? is_bpf_text_address+0x292/0x2b0 [ 611.634795][T11882] ? is_bpf_text_address+0x26/0x2b0 [ 611.634831][T11882] panic+0xc5/0xd0 [ 611.634866][T11882] ? __pfx_panic+0x10/0x10 [ 611.634922][T11882] __warn+0x315/0x4c0 [ 611.634956][T11882] ? pci_device_add+0x1542/0x1910 [ 611.634982][T11882] ? pci_device_add+0x1542/0x1910 [ 611.635004][T11882] __report_bug+0x276/0x570 [ 611.635043][T11882] ? pci_device_add+0x1542/0x1910 [ 611.635076][T11882] ? __pfx___report_bug+0x10/0x10 [ 611.635132][T11882] ? pci_device_add+0x1542/0x1910 [ 611.635155][T11882] report_bug+0x16a/0x220 [ 611.635190][T11882] ? pci_device_add+0x1542/0x1910 [ 611.635211][T11882] ? pci_device_add+0x1544/0x1910 [ 611.635233][T11882] handle_bug+0x9c/0x200 [ 611.635257][T11882] exc_invalid_op+0x1a/0x50 [ 611.635280][T11882] asm_exc_invalid_op+0x1a/0x20 [ 611.635313][T11882] RIP: 0010:pci_device_add+0x1542/0x1910 [ 611.635335][T11882] Code: f8 ff ff e9 77 f8 ff ff e8 db c9 bd fc 90 0f 0b 90 e9 a2 f8 ff ff e8 cd c9 bd fc 90 0f 0b 90 e9 69 fc ff ff e8 bf c9 bd fc 90 <0f> 0b 90 e9 2f fd ff ff 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 4d eb [ 611.635354][T11882] RSP: 0018:ffffc9000444f8a0 EFLAGS: 00010293 [ 611.635373][T11882] RAX: ffffffff8507fe71 RBX: 00000000ffffffea RCX: ffff888020ffbe00 [ 611.635390][T11882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 611.635403][T11882] RBP: ffffc9000444f9b0 R08: 0000000000000000 R09: 0000000000000000 [ 611.635418][T11882] R10: dffffc0000000000 R11: ffffed1007d94c22 R12: 1ffff11007d94ca8 [ 611.635434][T11882] R13: ffff888021ef8030 R14: ffff88813fe51000 R15: ffff88803eca6000 [ 611.635461][T11882] ? pci_device_add+0x1541/0x1910 [ 611.635498][T11882] ? __pfx_pci_device_add+0x10/0x10 [ 611.635523][T11882] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 611.635560][T11882] pci_scan_single_device+0x1dd/0x230 [ 611.635584][T11882] ? __pfx_pci_scan_single_device+0x10/0x10 [ 611.635611][T11882] ? pci_find_next_bus+0x1b/0x70 [ 611.635640][T11882] pci_scan_slot+0x1ba/0x5a0 [ 611.635666][T11882] ? __pfx_pci_scan_slot+0x10/0x10 [ 611.635701][T11882] pci_scan_child_bus_extend+0x68/0x7c0 [ 611.635734][T11882] pci_rescan_bus+0x18/0x40 [ 611.635759][T11882] rescan_store+0xcc/0x150 [ 611.635792][T11882] ? __pfx_rescan_store+0x10/0x10 [ 611.635827][T11882] ? sysfs_file_kobj+0x1e4/0x230 [ 611.635861][T11882] ? sysfs_kf_write+0x166/0x260 [ 611.635901][T11882] ? __pfx_sysfs_kf_write+0x10/0x10 [ 611.635937][T11882] kernfs_fop_write_iter+0x3a5/0x540 [ 611.635972][T11882] vfs_write+0x61e/0xbb0 [ 611.636010][T11882] ? __pfx_vfs_write+0x10/0x10 [ 611.636041][T11882] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 611.636081][T11882] ? lockdep_hardirqs_on+0x7a/0x110 [ 611.636116][T11882] ? mutex_lock_nested+0x152/0x1d0 [ 611.636141][T11882] ? fdget_pos+0x252/0x320 [ 611.636174][T11882] ksys_write+0x156/0x270 [ 611.636204][T11882] ? __pfx_ksys_write+0x10/0x10 [ 611.636253][T11882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.636277][T11882] do_syscall_64+0x174/0x580 [ 611.636307][T11882] ? trace_irq_disable+0x3b/0x140 [ 611.636341][T11882] ? clear_bhb_loop+0x70/0xc0 [ 611.636368][T11882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.636390][T11882] RIP: 0033:0x7fa59217e0d9 [ 611.636409][T11882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.636428][T11882] RSP: 002b:00007fa590394028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 611.636448][T11882] RAX: ffffffffffffffda RBX: 00007fa592406180 RCX: 00007fa59217e0d9 [ 611.636464][T11882] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 611.636478][T11882] RBP: 00007fa590394090 R08: 0000000000000000 R09: 0000000000000000 [ 611.636492][T11882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.636506][T11882] R13: 00007fa592406218 R14: 00007fa592406180 R15: 00007ffc90964e08 [ 611.636541][T11882] [ 611.637150][T11882] Kernel Offset: disabled