last executing test programs: 22.603925114s ago: executing program 0 (id=1912): pipe2(0x0, 0x84800) mq_timedsend(0xffffffffffffffff, &(0x7f0000000240)="33ae84f71bb01c109b5624b5ba2d5934bf987b292295e880143e5326084cb9cc72e25c6f9f8dd01ad776b6c0259081c41d8b0bccca5c71139167fd18b38b07bef0f56c4ea6709c165551b12de708e38cc70b41d69bffe137bfd15f86504e8c33ea1f0a429f3f697a0e639341e8a7b4ddfa99aced7e08872c4775dcc1953e8202dba1634060180ffbfa497f1c71cd45a85cde2f1bd438693080c76a75ced5741f10608a", 0xa3, 0x8000000000000000, &(0x7f0000000340)) 22.449143013s ago: executing program 0 (id=1914): prctl$PR_SET_FPEXC(0xc, 0x100000) r0 = socket(0x2, 0x3, 0x6) syz_emit_ethernet(0x1248, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004e0c123a00670000062f9078ffffffff64010100071212e460587ca76c9d7e57e724594f5b47443c5831ac141415000000057f000001000000027f0000010000d2e76401010200000a287f00000100000006ffffffff0000000864010102000000044424c561e00000018000000000000000000000afac1e0001000000070000000000802000890fcbac141412ac14143300000000440cb1c3e0000002000000000717730a01010100000000ffffffffac14142d0a0101020c21880b0020000300060003a6543438940d24bdd9913260e9cd96c4870a299a24f3f9ca6ad9b395cfa89963040008000005500000002cb2e015307e393a39394eddc98368cc881ac48ef4d53aebc54adae67dad249bf48c1d9331fe997ecb58af586d32a96bfed887ffd00057c31ab1ff3cb6d1151835a72038b797089feeb8a8972c91b539ec189a003b90f0a49ac5afbf5ddce5351e5a943a1bdecc5eee4c33e046ccb54c531d2982121615c233d2294e676ffb9c7fefb38d69e39fd167f9a2c3bd864ce777f980ef4329aa689477e3c349001da6822323b417db8e56108760f96e335f2febeb12d9a63f5658c80ecfbe742b665287429d80061588c28a8bc48fba2aace921b13c4dfc5c5afda6a2a423b3f171c6b610f78df2adf4dcf9c299919ecbcae148290b53cb17138c7ca66f8011b200f8ef5bdffbbe68298450e238232b1ada220fa22a3666fe34b26a90e03e9fcbcb7ab0e87240356172b842ad6f3335d8f522374ae3ed1c76e5d46544c72e81d0f0d234ef2af4b906d7f9a2f9734fc92c956159ad1331af36a533d95af3d6ba942258a9cc4c6c46b5baaa2edd5c758568641a96e0c460cb1beb0855e09aaf0aa286058cbd7e6620eb11c1b08ec5976d7a6b53c20aef5ea204a39dec10d96465cb03293a94736b9a4e3cba746e2e5218f60dd8bf50ad89904d0d96d9c233c9d87ca0838f17028321d6cc0e2924e726c6bbb12e5363ecc3dc118403e18e29b542ad14c4e923fa8dd2f9276c06b7320da84769f3c9dbd576fd47b1c0fac56ed0e045662fa3d56a13d45d8653052550fb1c923d74c36310e8833841e5310264e732ab3a817744dabe448abb0d439cf0ca0c368f5385da8397342e2bdd92f5423edccf3c7905c4bf50bf7a5fd9200272f001bf9392171497dbf54527473512055e8a949ec2133ac243afe871df6d2838bd5a2260aa736d5a404180a080f408c4d923aa0459a6b473f65f6499b661053808e2b40d84de13bd4f6777af2b72b0cb7c698393a1fae342a6f5aaa3925595a705f61b04ef42d595affb8bf3d67f232e8c2efe2c2b32548ac9675dacfbe30ca27a968ec8f3a0b89a159a3699ffe153724f96c157301d06f056a67be3ecfd8351e73b8f958bbe6a133db77d62bbe4e97b7c0ec5eeeb16ec90ed528c9ec2475bbedc044075521ab5af10532ab54e61d4e3c52683e5c5b660e317fd0bfacb70f6911f12df945c32b492d71b9e8762b0e7c0a4bb7efd46637d677545280b24a02b87e009a7b084a311178b68d206db808f8283a301b883eef61055431fca772a6e35307865b6ae643e712841e39adb6f4d67d888269d1193e6ae8fa2b339e32d643cf9b219cd3ca489a18f6c4439fffb2833bad9d3864273090876553e705125e50094a8ffe4ed4f0e14f1dd9bde7ded496b62991974adbb8e41db64b63521b4dc98b3f59318c30bf7b456e4536501db7ebcad1c1c9355b11f1fba01abf7498ea6ebe0c901141a3b0d65925a4a19cffcd6e8b7b23fb8d02032d5ae8cf437d62a123b94731c9ead3bc476203a5f2377847b259659a4c404691d38d0e72038df7249fba980d7b13828a323bf29820edc599aabd4cc26a47e802d4164d1420a8e1ae3f568eb2571c72239f464bdf6e905e90efc682670d6545a0d25ebe9ee260c01d08a9f16e1757ce6ffdf938e8404fb7a8f5568dbb3e62ef23ffcb5b2fdf1dd786018730e187923eb167ee2becd91cbd970a218c8ef92d30064da6109cb1e59016d19347a6d659d560ae4febb7c86a6642a438a2947c1f7271152c4da4e7b4ba62506c684fac3e71b15cf835c0536292a78b6bc5efaecbf777fed13bb7e0ac60614879f612aa072686e6e8632b0d769fa5a2254635ca30efe7eb45b3dfedd6f64a4dcdfd2b62efaa5b5e1d13980cab7f9589f69929f47d001c68dde7de65b068426f6bb25229765bd0332d20680201932e598916ad808cf3f18faca3b0c6e0c60ab81e76361b163e8946bf9e133feee779560042ed91088b4b22646f15bb83161a7ea01a89bc2f109091e78169e3d88e0e595b122fba62cddc916dc9e885074f10bae6748701019e2841618533a60a1c53804d4f10c5edda0538cc30bc9f131f76151acbf797436e417ef423410a79ee984f0bd3533f054946660271d85f4b014995bbcf0e0f52635983a93a8742aea990dfd8fec220b57cecaa5713795e9648e667269d52b369148180e5958f47e05ef3ace6172e86c147b71e4c4c5a301fd4ffaeecb544749f21d137091f71c7ccab8d00675f84664ea89e69145876fa17e93920c95fcab6353c8b61c7231e3e8368540d413d8b9774984ddbe337efdcaaec01ec561937ff343dca5ab541554db6be2486233261c31d295be42f8ed19092801b329d320cc874c4c2ad361a614d33dad873e43a56da02c0e42d906994f7eafd1db8e1689d433cecf0189405fad64aa0e9ce07a8eecee914724e8e75a5ec87a85bba1f0f963d3811294b84abaf4cfdb3ff4c9771c96cece430903d8315a1ca86f7324079eabafd65373faeeac21816e3f6a023670d70ee865324eec919951a24bb1800ca76645f76d4cad633fc861c2d4307f3b5868fe36f5227a1824774e7f73096e49ced885c31f5f6fa0404b49652793851812153f71046fd74ae0726722f0bf968b70bc2e80005969ed4bbe99cbf74a4e6a8fe96adad3b5cad8f13ba9ef4b0de0353d792be0b7f364f0e45567c508e37228be368df1c19000e953f2c4400fbf2834ea5417d688768f7c78b8d00380a11cbc73689d8913d9085048011a5764a34263663dd25d304015df87b969b194696df9ee91a373e7cacbc54cceb9c455908344dc404fd725b21eca1a584d400fe5bfcfc909eb87333ddaa9a57326308329f57213df87d7d762821a776ee2fd8d0525460245d78c9f6a509877fc96727aeed24aa780f0f06c7b4aa127f13b17da508572180644e64afa10b82c31f9582426dd3fb4cd9ee34ee565ae28cc16370463c6a47cbe2c1a2a7f878d2635fc5dff835075f8073b750a3e0380be0a5d012fed4e83ad7c13fc4aa5cba0823422273269b32496c57bb3f3e10e23cc826998291a6e531eaa8da7519cb72993e552b7bff7aec6700829ab043221f805cfbd7d101534207b4f3ea0bd19bc17eb193764958d361967d6bc6640304c39333038a09838b61b1cdd86563bee7493dd516729cf59cb0078e2d57f18931ee11a283a9c0db7c3a9600e12e59568aa0ce323814ef339b9df9c515638b2069f80bd79b0d3b7c16d9bdfb30b9519b1691b69f51db4d91c1bae1a3613a78d29aab045dca6a50f5b686037951138155563a500f06cc1d27b417ed5ec875b7a0244caadfb0c384ded9df9d5829be2ed52bd9708457586ab286b654f2b94808d246e33afa7a43bc802b9c04c07efa0a7582b941a10aca9b2affaf5e9f3748148f7090a69e3f7f757b2a40c8c95fc70d66dfa339b1befb4a298633c2ba46eac06c13df875dc4b7a4a450fc0dcaf7a2d1adc7c016a6df1ad3ca6a0a5dda9cf3ffa270607d584e52faee4f7c503d2b08f1b0a083d75dd1f83ad786ef49448bd3e499fde58e94517700c42828a3706d39710197d72d4de68495b35ecaefe77e59a5b25e522c4b32701f00ff52c483ada6912ba57e782d7d11476fa25d3d8b2113bd62e90f0d5d2a7b21d46160a40bea9fb7159eef77fffa0fc35929f45a0866d37ea331f7efe4d307ba6924b0b88c174ba9955abea3ed32c8f624260b0d85c5a7344706c3405eb42038bd06f6daa27b834eadebce630451a1f299a4d61413df75c1cf2fa5286562786fa382213fb2edabe7b59b0353b623c1b1e34f159d92a784a553b1b2300b152f318683de0fa58be982c8e4f642d713a4bfd9aba08c81824846b1d5c3a0cc86e219b8a294e21f0a51ae4c5c8893cf8ac189861098e8b7e85a4712a2ed5adb676499d1bcb8c9e21ef0fda01c9723e3bfcd768bb09f29260b1d8c932118341915b785f905667fd3d18a3b3183cd03cfc17bc8e26295d0304a01a995ef48b18ba786a4d2d1541b05f084c2a4bc26e423cfc760ce9478eec153ec18f903a081fb99baeb3f93cff53b26b039f953f03a27f9c23b45f71e85cdff926c138d66863eea7e451cfde4064e3f17424ae8cd62a239f1b1fa77f8aa3bece465d948e02c2d6eb297a92fa84f653760cb28097fa42f217f9023bb7f800838954c1bf245e31489b8a08bc2ec6dc750c669d13d223687537fe1c83ce8d0b8fd84cbd9bc1fe0cd2ad024db75b070fb8b9ccdc97b2764ab87121d1958013429572ee12edcf316d33f004ca3d6e952387ef5b116b5ec9f09c6a18e20157f7300dcef5d118f93e4f8ab6471c787ce5a20c8eccb445347cf0333e981f00353310cc7c12caba201155222bc5a186ec2c2fb493bc25a19c6969383d25e3bb21a9896e9d52eb09a3abb459ad09b88e737e95c0ad4edb0c020ee78802f7e49fa73b77394dc72884b803b6c9818c33aa8cba2337480ce11920584035031edf76a3b6f2751fc8a3b49e61a9d1d5bd6235b2bf484dba409f4c8b0d0162d220bc19d89a0b648b603fd2fe9647736ebd8b4d463fb9743e22aa6da962325ed8fdcc696c072237e851d60948d80fab78c3ce8bf079b4c4c3c32a7a81f14426f1d79d9a189d450714d6bfd6e938cc723f6b59f3a87c411c54ed47c2230b94aa4e0e38bc9647c09cd245972c8e5e7b439083811fe15150eea5fa84207c27b089d5b4e2d78044fec791fae9108040445f55da22494f5724b6e761d893435c0a013ac327aa1478abb45805e653774920df82db40af47c0cb787d7854b47be2e7b03015c4c18105df46987780ec8f44a0420062873b07a4788fdc01e06455f500ce8510b35c0790bec451e26ad5a43912b89f514bf5b85416fbc149136523e09ea547e2a6a9c49fd5860f49d0da55abc69d118619f8192c4d77672af67fd5a015e396231dfd36a21fb39bff5b80d60d51d94329cdaaa9d1eb14ab0cff62e072fcaec7986b4e169438830a2157b97c43c82f506c6a971f0ff0bb14c75657d12c2be46b41a710eba8ffca7116ad6b2055542f3457ca678273bccd026f586950f7d3b342ad064facede1293a6395451e88f95e8c236b3ddf90fdb7946d919c87cbf9b680266fa35c91ec96a5f94ea8c4b18ffa050501954038ff9b0f6970441d67e68bf764dc98a777ce996e4e904df3ca6d9df74c8e40a724126d134cbdb5688078dfda2062bd6e1871f4a2a7bb0076ab172b942796a089364452807784073f0e7250de830c6d9e42c2b34ead53b711d73a4baf00701928595f83d5ea55d3e93c33c994f526c03390659a3e8fafae828c69976fcacda9b859d968c07c197cd8174255f722a070619b460adc4ec19ec48944d16c29ce1d0d5ee1f2c3a96de3c67ea69b4f0c8642322a737b1c549954ed189f99a1f78fed50a51d3ded1b8357ce52b32c2c00c0376ea5aaa51ed979a1425fa34c761039f7c861b1a4ec65dd163762aeeb3629be84da2497128d53447ad4543d3821da1918209eae4184edbb72b4595bde083ec198dd00d4d2e0a796ffa298ab760e7984beeaf7667494f26e0c75a4544352d9240e85a5eba367fd5d3df5acdfcdb9fd69b11492ce58567b3aff5d80ad52efbbd2ab1835eb9d5767cafb505fedf42b1f32532e6aba3f2ca262ce99f8886b6173c2f21f07a0f8fa56d6e518897e342b1c302d64ac20429b1ff405a4825aefa72326d53a761d2b4a2b51bdb6ebd0e2a6421759c477960854efb4e47f622e8cb412d393bde3e5f13c9484c28f8d1cb72169059f6f7fa1dba613d36ef403fc36bcbff5c5907059b83d499b5a641f2cf656faab690859ba56b11e000086dd00040009e0acd9e3ab15a70038a97ac9eb04c120691f573159dcc708888f35d3a6440b9aced7423910e6f7764bed2314c830abcb20a1d729388d956f03e166bd17039f835c8011f899e408ee6260f329a1c54301297451a423ffb0ec7bb357f05113e418d0fb06c8abe76336ebe55908b7d9cbfc03298ebdf05699069680b8efb46a163274b344b70b3e65906959548ed99f45d5a1c3e9571f6bb0bbaeef163ec3b00b7ec99da2cf3291cb283bae65b2b0b69b872be4b5a7a6c5bcb9aede8c242cfbec1d66badb92686dffc356b0ad080088be00000001140308020100000000000100080022eb0000000420c91f040200000000000002fffe4419080065580000000127843b0c41c163f242ad610d16d7580bca83f219882f14b9eab0a29dc74e7f0fadf95eddc6a1d03271971cfdca65faee4ae85adcfe3a0f02d6dcb0a2f401eb455e2257be40"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e05816d0c"], 0x7) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e01, 0x8000003, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}}, &(0x7f0000000040)=0x84) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r8 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') r9 = socket$inet(0x2, 0x1, 0x6) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) preadv(r8, &(0x7f0000000a40)=[{&(0x7f00000000c0)=""/34, 0x22}], 0x1, 0x2f, 0xfd4c) setsockopt(r4, 0x80, 0x80, &(0x7f00000014c0)="6d2fcd613ec0d3e7ba35bb428aa1fae5c1d6af102e62351529db1cd18db4e235722c4806d452f7e8c358718b1cdaed66c1c1b84c21d3ba2bc5", 0x39) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, 0x84) setuid(r2) 22.191195882s ago: executing program 0 (id=1915): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xe400, 0x70}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc7, 0xbe, "b516687d2a301b6fbe541a5646acbfbd6d4a1c0a47e1e351a71b22e2eaa99f02a56d15f64fd49e0aa1ab1fb26e3162f1b0fb4cbb14a57a4e614be699d0529bfb1cb1c7624fb4dd67b14860af9052124b02b5dfa045694703858f34ce79597b07f5e75900cd4c40cc12f82d348657652e22700f1605b824f3f05682e3d1c7ad184ae5f935150678060061c42fe290285e0dbdb461ff676c8d3f4eff82a32630dda45a0571811b30f97429ff733fb4fb64ceddcb6e2e0a53cb536b37ac6841f910c08d48"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000e00)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020001000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000, @value=r6}, 0x28) write(0xffffffffffffffff, &(0x7f0000000300)='ra', 0x2) 21.959424716s ago: executing program 0 (id=1920): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(&(0x7f0000000040)='./my_sys\x00', &(0x7f0000000140)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2a, 0x2, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x10, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x3543}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8}]}}]}, 0x48}}, 0x44080) socket$nl_xfrm(0x10, 0x3, 0x6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x100, 0xf4) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000a00)='1', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) 21.767365683s ago: executing program 0 (id=1922): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000004c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000024000000000000000100000001000000c481968855e8d6542425ff529e1f57483b225d20b257975314f4d8ed35b060bf3d6388e1852dd78a1806c5e80784b34a568b1efbc8d92dfb2a9cf3bba8304bf252", @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000"], 0x130, 0x1}}], 0x1, 0x0) 21.455328987s ago: executing program 0 (id=1923): r0 = semget$private(0x0, 0x3, 0x1e4) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1f4) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f00000003c0)=""/4096) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x70bd2b, 0x25dfdbfc, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x11}, 0x4, 0xb6e, 0x4e21, 0x2, 0xa, 0x80, 0x0, 0x3c}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x32}, @in6=@private2, {0x0, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0xc, 0x8001, 0xd43}, {0x4, 0x7fffffffffffffff, 0x7, 0x5}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc7539(pcbc(aes),sha3-256-ce)\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000080), &(0x7f0000000100)=0x4) 10.046425482s ago: executing program 4 (id=1951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac553", 0x1a, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f0000000540)=""/84, 0x54, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x0, 0x0, 0xfffd, 0x102, 0xa, 0x20, 0x30, 0x3a, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x200, 0x9, 0x4, 0xffffffffffffffff, 0x1}, {0x0, 0x5, 0x80000003, 0x800000000000002}, 0x0, 0x6e6bb2, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001800110101000000000000000ae0"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000000180)="6242870f0e6b4396205a2c501f10b0601e64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489a8ddc2b2190", 0x98}], 0x1}}], 0x1, 0x2000c044) socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r7, @ANYBLOB="05"], 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYRESOCT=r10], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffde, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x10, 0xffff}, 0x9a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r12 = syz_clone(0x20000000, &(0x7f00000005c0)="c86a4ae7429058d58f451bdaa8527bf73c6bfa9cc0ed6752200f856352a51e6d2416f2df65ecac01abc2dd5df6fbc63edc11411122ac7a226cde0aa0ed261c5fca4049dc869a9aeeb6d20a973bc37f4771057f56a2bdb3cd2e6e8a41ad35653ec16fe6a16207cb833e39273c47d861d7452a9aa8a71fa4a006392d5246c853d4fb1c6a53cb9001278aa5dbd3af31e9d8b1f563606c4dc7123f57e4ad87ceceb72d0436f1fc12896a67702d88c3", 0xad, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="2398ef018206253b0d878a2924b60b2cd195d142cec37cd7df8607e83c9db951969aed71753b52c08815e1bd316186d05dbb5685d773") fcntl$setown(r11, 0x8, r12) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a040007000000b6f1ff0c0100854105001a000000000000d74619edc700006040231e93e304ad59cac20e4acd8a1220bb64e6fda632eee8"], 0x38}}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 8.018983328s ago: executing program 2 (id=1955): unshare(0x2c020400) r0 = msgget$private(0x0, 0x240) msgsnd(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="02"], 0xfd1, 0x0) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) (fail_nth: 1) 7.715997029s ago: executing program 2 (id=1956): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000cf0000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411892f5466eb01820a43d8e5b1dc91c5499bea0977"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x5}, {0x45}, {0x6}]}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) 7.648406222s ago: executing program 4 (id=1959): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) lstat(&(0x7f0000000040)='./my_sys\x00', &(0x7f0000000140)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2a, 0x2, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x10, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x3543}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8}]}}]}, 0x48}}, 0x44080) socket$nl_xfrm(0x10, 0x3, 0x6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x100, 0xf4) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000a00)='1', 0x1) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) 7.035919535s ago: executing program 1 (id=1961): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) 6.803361061s ago: executing program 1 (id=1962): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4a, 0x4a, 0x2, [@datasec={0x10, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x7, 0xcf4f}, {0x5, 0x7, 0xfff}, {0x1, 0x2564, 0x2}], "13ab"}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr]}}, 0x0, 0x66}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCCBRK(r0, 0x5428) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b70200001400001e219999dcade5b2c9f000b7030000008900000000000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"], 0xfdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x20480, 0x0) 6.683456377s ago: executing program 4 (id=1963): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(&(0x7f0000000040)='./my_sys\x00', &(0x7f0000000140)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2a, 0x2, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x10, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x3543}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8}]}}]}, 0x48}}, 0x44080) socket$nl_xfrm(0x10, 0x3, 0x6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x100, 0xf4) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000a00)='1', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) 6.670059718s ago: executing program 2 (id=1964): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0450084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@authinfo={0x18, 0x84, 0x6, {0x2}}, @init={0x18, 0x84, 0x0, {0x0, 0xa, 0xf2, 0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x4, 0x0, 0x7, 0x4, 0x8, 0x10, 0xb}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}], 0x78, 0x8000084}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000058000000060a0104"], 0xcc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bb"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000380)={0x4000000, 0xf, &(0x7f0000000080)=[0x83, 0xffffffff, 0x4, 0x204, 0x65e, 0xfffbfff9, 0x7, 0xfffffff7, 0x8, 0x9, 0xffffffff, 0x42, 0x9, 0x4, 0x6], 0x1, 0x1}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.456158411s ago: executing program 1 (id=1965): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000002140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, &(0x7f00000020c0)='net/ip_tables_targets\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x1800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000024c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000002500)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000280)=[@dead_binder_done={0x40086310, 0xfcff}], 0x0, 0x0, 0x0}) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mbind(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x8000, &(0x7f0000000080)=0x9, 0x9c6, 0x1) get_mempolicy(&(0x7f00000000c0), &(0x7f00000001c0), 0x5, &(0x7f0000006000/0x4000)=nil, 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000021c0), 0xc2900, 0x0) ioprio_set$pid(0x2, 0x0, 0x1000) sendfile(r3, r4, 0x0, 0x201f00) socket$unix(0x1, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0xfffffffffffffffc, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000002180)="ae", 0x1, 0xfffffffffffffffe) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 3.286936754s ago: executing program 4 (id=1966): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x1, {0x2, 0x0, 0x6}}, 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @mcast1, 0x9}, 0x1c) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x10b8}, 0xff4c) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r1, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000f40)="dde32ac6", 0x4}], 0x1}}], 0x1, 0x240088d5) sendto$inet6(r0, 0x0, 0x0, 0x400c80c1, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0xfffb, 0x404c845, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2001, 0x0, 0x0) 2.807369686s ago: executing program 3 (id=1967): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff2}, {0xa, 0xd}, {0x47276c24c47c1f2a, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x0, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x2000006, 0xffc, 0x67ae, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0x5, 0x0, 0x5, 0x8, 0x5, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x3, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x10001, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3e, 0x0, 0x247, 0x2, 0x1, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xfffffffc, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x7, 0x665195e5, 0xfe3, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x7ff, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x3, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x3, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x770b, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x0, 0x9f85, 0x65, 0x0, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x3, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x100003, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x2, 0x10002, 0x5, 0xb, 0x1b]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x44800}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.528972777s ago: executing program 4 (id=1968): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(&(0x7f0000000040)='./my_sys\x00', &(0x7f0000000140)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2a, 0x2, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x10, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x3543}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8}]}}]}, 0x48}}, 0x44080) socket$nl_xfrm(0x10, 0x3, 0x6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x100, 0xf4) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000a00)='1', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) 2.38816953s ago: executing program 2 (id=1969): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r5, 0x6f6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x18, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 2.192544267s ago: executing program 1 (id=1970): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000030000000200000085"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000400000000000000850000002a0000001811ffff", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff004f017d4b22f6f3", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) open_tree(r2, &(0x7f0000000080)='./file0\x00', 0x80001) 1.979780019s ago: executing program 3 (id=1971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.862752108s ago: executing program 1 (id=1972): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff2}, {0xa, 0xd}, {0x47276c24c47c1f2a, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x0, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x2000006, 0xffc, 0x67ae, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0x5, 0x0, 0x5, 0x8, 0x5, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x3, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x10001, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3e, 0x0, 0x247, 0x2, 0x1, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xfffffffc, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x7, 0x665195e5, 0xfe3, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x7ff, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x3, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x3, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x770b, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x0, 0x9f85, 0x65, 0x0, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x3, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x100003, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x2, 0x10002, 0x5, 0xb, 0x1b]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x44800}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (fail_nth: 1) 1.837590582s ago: executing program 3 (id=1973): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000cf0000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411892f5466eb01820a43d8e5b1dc91c5499bea0977"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x5}, {0x45}, {0x6}]}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) 1.35564796s ago: executing program 2 (id=1974): ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100", @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000140640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e23", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB='c'], 0x0) 1.207290912s ago: executing program 1 (id=1975): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4a, 0x4a, 0x2, [@datasec={0x10, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x7, 0xcf4f}, {0x5, 0x7, 0xfff}, {0x1, 0x2564, 0x2}], "13ab"}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr]}}, 0x0, 0x66}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCCBRK(r0, 0x5428) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b70200001400001e219999dcade5b2c9f000b7030000008900000000000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"], 0xfdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x20480, 0x0) 1.046371546s ago: executing program 2 (id=1976): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xe400, 0x70}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc7, 0xbe, "b516687d2a301b6fbe541a5646acbfbd6d4a1c0a47e1e351a71b22e2eaa99f02a56d15f64fd49e0aa1ab1fb26e3162f1b0fb4cbb14a57a4e614be699d0529bfb1cb1c7624fb4dd67b14860af9052124b02b5dfa045694703858f34ce79597b07f5e75900cd4c40cc12f82d348657652e22700f1605b824f3f05682e3d1c7ad184ae5f935150678060061c42fe290285e0dbdb461ff676c8d3f4eff82a32630dda45a0571811b30f97429ff733fb4fb64ceddcb6e2e0a53cb536b37ac6841f910c08d48"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000e00)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020001000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000, @value=r6}, 0x28) write(0xffffffffffffffff, &(0x7f0000000300)='ra', 0x2) 889.758491ms ago: executing program 3 (id=1977): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/power/pm_test', 0x82, 0x10a) io_setup(0x4fe, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f0000000000)="46cac79185c264", 0x7, 0x9, 0x0, 0x0, r0}]) 596.051609ms ago: executing program 3 (id=1978): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x80, 0x0, 0x30}, 0x18) r3 = openat(r2, &(0x7f00000000c0)='./file1\x00', 0x163042, 0x0) sendfile(r1, r3, 0x0, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) (async) write(r0, 0x0, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x80, 0x0, 0x30}, 0x18) (async) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x163042, 0x0) (async) sendfile(r1, r3, 0x0, 0x9) (async) 65.215774ms ago: executing program 4 (id=1979): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlockall(0x7) (fail_nth: 1) 0s ago: executing program 3 (id=1980): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlockall(0x7) kernel console output (not intermixed with test programs): uous mode [ 455.769507][ T9068] FAULT_INJECTION: forcing a failure. [ 455.769507][ T9068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.769546][ T9068] CPU: 0 UID: 0 PID: 9068 Comm: syz.4.987 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 455.769573][ T9068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.769587][ T9068] Call Trace: [ 455.769597][ T9068] [ 455.769607][ T9068] dump_stack_lvl+0xe8/0x150 [ 455.769645][ T9068] should_fail_ex+0x467/0x600 [ 455.769682][ T9068] _copy_from_user+0x2d/0xb0 [ 455.769707][ T9068] __sys_bpf+0x2e7/0xd90 [ 455.769739][ T9068] ? __pfx___sys_bpf+0x10/0x10 [ 455.769771][ T9068] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 455.769803][ T9068] ? rt_mutex_slowunlock+0x219/0x460 [ 455.769858][ T9068] ? ksys_write+0x248/0x270 [ 455.769888][ T9068] ? __pfx_ksys_write+0x10/0x10 [ 455.769927][ T9068] __x64_sys_bpf+0xba/0xd0 [ 455.769962][ T9068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.769988][ T9068] do_syscall_64+0x174/0x580 [ 455.770011][ T9068] ? trace_irq_disable+0x3b/0x140 [ 455.770046][ T9068] ? clear_bhb_loop+0x40/0x90 [ 455.770075][ T9068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.770100][ T9068] RIP: 0033:0x7f5210b2e0d9 [ 455.770121][ T9068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.770142][ T9068] RSP: 002b:00007f520ed86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 455.770167][ T9068] RAX: ffffffffffffffda RBX: 00007f5210db5fa0 RCX: 00007f5210b2e0d9 [ 455.770184][ T9068] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000009 [ 455.770199][ T9068] RBP: 00007f520ed86090 R08: 0000000000000000 R09: 0000000000000000 [ 455.770214][ T9068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.770228][ T9068] R13: 00007f5210db6038 R14: 00007f5210db5fa0 R15: 00007ffe6b9a3fd8 [ 455.770263][ T9068] [ 456.225023][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.990'. [ 456.566729][ T8887] udevd[8887]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 456.588444][ T8788] udevd[8788]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 456.601948][ T9084] FAULT_INJECTION: forcing a failure. [ 456.601948][ T9084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.602049][ T9084] CPU: 1 UID: 0 PID: 9084 Comm: syz.0.979 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 456.602119][ T9084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.602152][ T9084] Call Trace: [ 456.602161][ T9084] [ 456.602170][ T9084] dump_stack_lvl+0xe8/0x150 [ 456.602207][ T9084] should_fail_ex+0x467/0x600 [ 456.602244][ T9084] _copy_to_user+0x31/0xb0 [ 456.602270][ T9084] simple_read_from_buffer+0xe1/0x170 [ 456.602298][ T9084] proc_fail_nth_read+0x1be/0x230 [ 456.602375][ T9084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 456.602455][ T9084] ? rw_verify_area+0x250/0x4d0 [ 456.602528][ T9084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 456.602611][ T9084] vfs_read+0x219/0xa90 [ 456.602710][ T9084] ? __pfx_vfs_read+0x10/0x10 [ 456.602804][ T9084] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 456.602857][ T9084] ? lockdep_hardirqs_on+0x7a/0x110 [ 456.602957][ T9084] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 456.603021][ T9084] ? mutex_lock_nested+0x152/0x1d0 [ 456.603096][ T9084] ? fdget_pos+0x252/0x320 [ 456.603181][ T9084] ksys_read+0x156/0x270 [ 456.603259][ T9084] ? __pfx_ksys_read+0x10/0x10 [ 456.603345][ T9084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.603408][ T9084] do_syscall_64+0x174/0x580 [ 456.603503][ T9084] ? trace_irq_disable+0x3b/0x140 [ 456.603596][ T9084] ? clear_bhb_loop+0x40/0x90 [ 456.603669][ T9084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.603741][ T9084] RIP: 0033:0x7f9ecbb5e90e [ 456.603795][ T9084] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 456.603847][ T9084] RSP: 002b:00007f9ec9df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 456.603917][ T9084] RAX: ffffffffffffffda RBX: 00007f9ec9df66c0 RCX: 00007f9ecbb5e90e [ 456.603978][ T9084] RDX: 000000000000000f RSI: 00007f9ec9df60a0 RDI: 0000000000000003 [ 456.604027][ T9084] RBP: 00007f9ec9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 456.604066][ T9084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.604101][ T9084] R13: 00007f9ecbe26038 R14: 00007f9ecbe25fa0 R15: 00007ffd17748c68 [ 456.604195][ T9084] [ 456.618217][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 456.778206][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 456.847297][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 456.893762][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 456.893798][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.893821][ T9] usb 4-1: Product: 觃㽭頔㠺⿙韻㶺岳岦뭘譌禒 [ 456.893840][ T9] usb 4-1: Manufacturer: 㮮謩㿾皺밣볳鿾꬐㤍ⅇ쟸㍉⡦笙譡걜柿뾲턎쟗툯ྒྷ屲삧๼욞井課堁轭䜑崐䲷톶꤬쵊식ꆞရ阎쬎頴瀰푠짰䗟귒㫜鐾㗆뜞璔戭ꯛ쳓캄䝩咄闔௞ﴬ蛻﹭㾸倮 [ 456.893872][ T9] usb 4-1: SerialNumber: 㽼컁퓁਍퟿鈞ᗽ缁歚⑉쯔春つ곇㴹ꇍ谤ⅷ㭇斗樆祏ꝥ楍걆㰯ชꞧ氞鎎껆잸嫛뵗ꩯ檐怙쫑⩠䔇쿢珹糮舡㷛헀県䝂렢刔䪕郲㆖⒲띳욦Զ湑擝훓䀯븂䩃섪뾿싗扯沬⎃祹힩⁾丫ꖘ倱뽣뛤氮祦槒↣꧛핐骎탦꠪詩玁ૻᒶ箍 [ 456.915967][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 457.042091][ T9] usb 4-1: selecting invalid altsetting 1 [ 457.043234][ T9] usb 4-1: unit 3 not found! [ 457.067577][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 457.130613][ T9] usb 4-1: selecting invalid altsetting 1 [ 457.131500][ T9] usb 4-1: unit 3 not found! [ 457.153254][ T9] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 457.170491][ T9] usb 4-1: selecting invalid altsetting 1 [ 457.171385][ T9] usb 4-1: unit 3 not found! [ 457.485334][ T9] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 457.814080][ T9] usb 4-1: USB disconnect, device number 7 [ 459.434385][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.842482][ T9119] FAULT_INJECTION: forcing a failure. [ 459.842482][ T9119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.842510][ T9119] CPU: 0 UID: 0 PID: 9119 Comm: syz.4.999 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 459.842569][ T9119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 459.842582][ T9119] Call Trace: [ 459.842591][ T9119] [ 459.842601][ T9119] dump_stack_lvl+0xe8/0x150 [ 459.842638][ T9119] should_fail_ex+0x467/0x600 [ 459.842675][ T9119] _copy_from_user+0x2d/0xb0 [ 459.842692][ T9119] ___sys_sendmsg+0x1c6/0x360 [ 459.842709][ T9119] ? __lock_acquire+0x683/0x2ce0 [ 459.842728][ T9119] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.842771][ T9119] ? __fget_files+0x2a/0x420 [ 459.842786][ T9119] ? __fget_files+0x3a8/0x420 [ 459.842809][ T9119] __x64_sys_sendmsg+0x1b7/0x290 [ 459.842831][ T9119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.842862][ T9119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.842880][ T9119] do_syscall_64+0x174/0x580 [ 459.842897][ T9119] ? trace_irq_disable+0x3b/0x140 [ 459.842923][ T9119] ? clear_bhb_loop+0x40/0x90 [ 459.842943][ T9119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.842959][ T9119] RIP: 0033:0x7f5210b2e0d9 [ 459.842975][ T9119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.842989][ T9119] RSP: 002b:00007f520ed86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.843006][ T9119] RAX: ffffffffffffffda RBX: 00007f5210db5fa0 RCX: 00007f5210b2e0d9 [ 459.843019][ T9119] RDX: 0000000000000010 RSI: 0000200000002c40 RDI: 0000000000000003 [ 459.843029][ T9119] RBP: 00007f520ed86090 R08: 0000000000000000 R09: 0000000000000000 [ 459.843039][ T9119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.843048][ T9119] R13: 00007f5210db6038 R14: 00007f5210db5fa0 R15: 00007ffe6b9a3fd8 [ 459.843072][ T9119] [ 461.554355][ T37] audit: type=1326 audit(1786065192.620:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9132 comm="syz.3.1002" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84bb85e0d9 code=0x0 [ 462.154169][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 462.510948][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 462.510987][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1008'. [ 462.846625][ T9152] vxlan0: entered promiscuous mode [ 462.846788][ T9152] vxlan0: entered allmulticast mode [ 463.244735][ T66] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.678309][ T8064] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 463.678622][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 463.721910][ T6958] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.725515][ T6958] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.725573][ T6958] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.889194][ T8064] usb 2-1: device descriptor read/64, error -32 [ 464.103825][ T9160] capability: warning: `syz.0.1008' uses 32-bit capabilities (legacy support in use) [ 464.131749][ T8064] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 464.166968][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1009'. [ 464.301635][ T8064] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.301666][ T8064] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.303162][ T8064] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 464.303195][ T8064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 464.303219][ T8064] usb 2-1: SerialNumber: syz [ 466.062930][ T8064] usb 2-1: 0:2 : does not exist [ 466.063023][ T8064] usb 2-1: unit 5: unexpected type 0x0b [ 467.888944][ T8064] usb 2-1: USB disconnect, device number 7 [ 468.414094][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 468.600694][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.300708][ T9224] FAULT_INJECTION: forcing a failure. [ 470.300708][ T9224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.300747][ T9224] CPU: 0 UID: 0 PID: 9224 Comm: syz.1.1023 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 470.300775][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 470.300790][ T9224] Call Trace: [ 470.300799][ T9224] [ 470.300808][ T9224] dump_stack_lvl+0xe8/0x150 [ 470.300847][ T9224] should_fail_ex+0x467/0x600 [ 470.300892][ T9224] _copy_to_user+0x31/0xb0 [ 470.300918][ T9224] simple_read_from_buffer+0xe1/0x170 [ 470.300948][ T9224] proc_fail_nth_read+0x1be/0x230 [ 470.300977][ T9224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 470.301005][ T9224] ? rw_verify_area+0x250/0x4d0 [ 470.301035][ T9224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 470.301058][ T9224] vfs_read+0x219/0xa90 [ 470.301095][ T9224] ? __pfx_vfs_read+0x10/0x10 [ 470.301124][ T9224] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 470.301151][ T9224] ? lockdep_hardirqs_on+0x7a/0x110 [ 470.301175][ T9224] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 470.301201][ T9224] ? mutex_lock_nested+0x152/0x1d0 [ 470.301233][ T9224] ? fdget_pos+0x252/0x320 [ 470.301263][ T9224] ksys_read+0x156/0x270 [ 470.301293][ T9224] ? __pfx_ksys_read+0x10/0x10 [ 470.301329][ T9224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.301354][ T9224] do_syscall_64+0x174/0x580 [ 470.301378][ T9224] ? trace_irq_disable+0x3b/0x140 [ 470.301414][ T9224] ? clear_bhb_loop+0x40/0x90 [ 470.301443][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.301466][ T9224] RIP: 0033:0x7ff6e5b2e90e [ 470.301487][ T9224] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 470.301508][ T9224] RSP: 002b:00007ff6e3da4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 470.301532][ T9224] RAX: ffffffffffffffda RBX: 00007ff6e3da56c0 RCX: 00007ff6e5b2e90e [ 470.301550][ T9224] RDX: 000000000000000f RSI: 00007ff6e3da50a0 RDI: 0000000000000004 [ 470.301563][ T9224] RBP: 00007ff6e3da5090 R08: 0000000000000000 R09: 0000000000000000 [ 470.301577][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.301590][ T9224] R13: 00007ff6e5df6128 R14: 00007ff6e5df6090 R15: 00007fffd2587e58 [ 470.301625][ T9224] [ 470.718439][ T9231] FAULT_INJECTION: forcing a failure. [ 470.718439][ T9231] name failslab, interval 1, probability 0, space 0, times 0 [ 470.718478][ T9231] CPU: 0 UID: 0 PID: 9231 Comm: syz.0.1025 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 470.718506][ T9231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 470.718521][ T9231] Call Trace: [ 470.718529][ T9231] [ 470.718539][ T9231] dump_stack_lvl+0xe8/0x150 [ 470.718574][ T9231] should_fail_ex+0x467/0x600 [ 470.718602][ T9231] should_failslab+0xa8/0x100 [ 470.718625][ T9231] __kmalloc_noprof+0xfe/0x780 [ 470.718641][ T9231] ? rcu_is_watching+0x15/0xb0 [ 470.718663][ T9231] ? tomoyo_realpath_from_path+0xef/0x640 [ 470.718682][ T9231] ? tomoyo_realpath_from_path+0xef/0x640 [ 470.718708][ T9231] tomoyo_realpath_from_path+0xef/0x640 [ 470.718736][ T9231] ? tomoyo_path_number_perm+0x219/0x5f0 [ 470.718763][ T9231] tomoyo_path_number_perm+0x246/0x5f0 [ 470.718793][ T9231] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 470.718831][ T9231] ? __lock_acquire+0x683/0x2ce0 [ 470.718861][ T9231] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 470.718893][ T9231] ? hook_file_ioctl+0x1f3/0x600 [ 470.718915][ T9231] ? lockdep_hardirqs_on+0x7a/0x110 [ 470.718949][ T9231] ? __fget_files+0x2a/0x420 [ 470.718969][ T9231] ? __fget_files+0x2a/0x420 [ 470.718985][ T9231] ? __fget_files+0x3a8/0x420 [ 470.719001][ T9231] ? __fget_files+0x2a/0x420 [ 470.719021][ T9231] security_file_ioctl+0xc3/0x2a0 [ 470.719051][ T9231] __se_sys_ioctl+0x47/0x170 [ 470.719074][ T9231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.719094][ T9231] do_syscall_64+0x174/0x580 [ 470.719114][ T9231] ? trace_irq_disable+0x3b/0x140 [ 470.719142][ T9231] ? clear_bhb_loop+0x40/0x90 [ 470.719164][ T9231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.719182][ T9231] RIP: 0033:0x7f9ecbb9e0d9 [ 470.719199][ T9231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.719215][ T9231] RSP: 002b:00007f9ec9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.719235][ T9231] RAX: ffffffffffffffda RBX: 00007f9ecbe25fa0 RCX: 00007f9ecbb9e0d9 [ 470.719248][ T9231] RDX: 000000000000012e RSI: 000000004008700c RDI: 0000000000000003 [ 470.719260][ T9231] RBP: 00007f9ec9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 470.719272][ T9231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.719282][ T9231] R13: 00007f9ecbe26038 R14: 00007f9ecbe25fa0 R15: 00007ffd17748c68 [ 470.719310][ T9231] [ 470.719392][ T9231] ERROR: Out of memory at tomoyo_realpath_from_path. [ 471.249402][ T9234] FAULT_INJECTION: forcing a failure. [ 471.249402][ T9234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.249440][ T9234] CPU: 0 UID: 0 PID: 9234 Comm: syz.1.1026 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 471.249467][ T9234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.249481][ T9234] Call Trace: [ 471.249490][ T9234] [ 471.249499][ T9234] dump_stack_lvl+0xe8/0x150 [ 471.249538][ T9234] should_fail_ex+0x467/0x600 [ 471.249574][ T9234] _copy_from_user+0x2d/0xb0 [ 471.249603][ T9234] ___sys_recvmsg+0x173/0x5a0 [ 471.249637][ T9234] ? __pfx____sys_recvmsg+0x10/0x10 [ 471.249667][ T9234] ? __fget_files+0x2a/0x420 [ 471.249709][ T9234] ? __fget_files+0x3a8/0x420 [ 471.249749][ T9234] do_recvmmsg+0x320/0x7f0 [ 471.249785][ T9234] ? __pfx_do_recvmmsg+0x10/0x10 [ 471.249811][ T9234] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 471.249845][ T9234] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 471.249891][ T9234] __x64_sys_recvmmsg+0x198/0x250 [ 471.249920][ T9234] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 471.249953][ T9234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.249994][ T9234] do_syscall_64+0x174/0x580 [ 471.250019][ T9234] ? trace_irq_disable+0x3b/0x140 [ 471.250056][ T9234] ? clear_bhb_loop+0x40/0x90 [ 471.250083][ T9234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.250106][ T9234] RIP: 0033:0x7ff6e5b6e0d9 [ 471.250127][ T9234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.250146][ T9234] RSP: 002b:00007ff6e3dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 471.250170][ T9234] RAX: ffffffffffffffda RBX: 00007ff6e5df5fa0 RCX: 00007ff6e5b6e0d9 [ 471.250187][ T9234] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 471.250201][ T9234] RBP: 00007ff6e3dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 471.250215][ T9234] R10: 0000000000012041 R11: 0000000000000246 R12: 0000000000000001 [ 471.250228][ T9234] R13: 00007ff6e5df6038 R14: 00007ff6e5df5fa0 R15: 00007fffd2587e58 [ 471.250259][ T9234] [ 471.602304][ T9241] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1028'. [ 471.602334][ T9241] nbd: must specify at least one socket [ 471.782985][ T9238] overlayfs: conflicting options: userxattr,metacopy=on [ 471.897127][ T9249] binder: binder_mmap: 9248 0-1000 bad vm_flags failed -1 [ 472.037085][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1030'. [ 476.512746][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'. [ 479.856374][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'. [ 479.856891][ T9334] gre0: Master is either lo or non-ether device [ 479.985431][ T9336] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1040'. [ 479.985459][ T9336] nbd: must specify at least one socket [ 480.232893][ T9346] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1057'. [ 482.638845][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 482.639311][ T9351] gre0: Master is either lo or non-ether device [ 485.404186][ T8064] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 485.992258][ T8064] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.992291][ T8064] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 485.993767][ T8064] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 485.993799][ T8064] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 485.993833][ T8064] usb 4-1: SerialNumber: syz [ 489.494859][ T8064] usb 4-1: 0:2 : does not exist [ 489.494951][ T8064] usb 4-1: unit 5: unexpected type 0x0c [ 491.058623][ T9411] hsr0: entered promiscuous mode [ 491.112272][ T9410] hsr0: left promiscuous mode [ 491.413567][ T8064] usb 4-1: USB disconnect, device number 8 [ 491.704021][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.689836][ T9455] FAULT_INJECTION: forcing a failure. [ 496.689836][ T9455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.689877][ T9455] CPU: 0 UID: 0 PID: 9455 Comm: syz.1.1072 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 496.689904][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.689919][ T9455] Call Trace: [ 496.689928][ T9455] [ 496.689938][ T9455] dump_stack_lvl+0xe8/0x150 [ 496.689976][ T9455] should_fail_ex+0x467/0x600 [ 496.690013][ T9455] _copy_from_user+0x2d/0xb0 [ 496.690037][ T9455] __sys_bpf+0x2e7/0xd90 [ 496.690069][ T9455] ? __pfx___sys_bpf+0x10/0x10 [ 496.690104][ T9455] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 496.690135][ T9455] ? rt_mutex_slowunlock+0x219/0x460 [ 496.690189][ T9455] ? ksys_write+0x248/0x270 [ 496.690220][ T9455] ? __pfx_ksys_write+0x10/0x10 [ 496.690254][ T9455] __x64_sys_bpf+0xba/0xd0 [ 496.690286][ T9455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.690311][ T9455] do_syscall_64+0x174/0x580 [ 496.690384][ T9455] ? trace_irq_disable+0x3b/0x140 [ 496.690419][ T9455] ? clear_bhb_loop+0x40/0x90 [ 496.690447][ T9455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.690472][ T9455] RIP: 0033:0x7ff6e5b6e0d9 [ 496.690493][ T9455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.690514][ T9455] RSP: 002b:00007ff6e3da5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 496.690538][ T9455] RAX: ffffffffffffffda RBX: 00007ff6e5df6090 RCX: 00007ff6e5b6e0d9 [ 496.690554][ T9455] RDX: 0000000000000010 RSI: 0000200000000a00 RDI: 000000000000000f [ 496.690568][ T9455] RBP: 00007ff6e3da5090 R08: 0000000000000000 R09: 0000000000000000 [ 496.690581][ T9455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.690594][ T9455] R13: 00007ff6e5df6128 R14: 00007ff6e5df6090 R15: 00007fffd2587e58 [ 496.690630][ T9455] [ 499.892831][ T10] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 501.153157][ T10] usb 3-1: config 237 has too many interfaces: 218, using maximum allowed: 32 [ 501.153193][ T10] usb 3-1: config 237 has an invalid descriptor of length 0, skipping remainder of the config [ 501.153255][ T10] usb 3-1: config 237 has 2 interfaces, different from the descriptor's value: 218 [ 501.216873][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 501.216909][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.216934][ T10] usb 3-1: Product: syz [ 501.216951][ T10] usb 3-1: Manufacturer: syz [ 501.217005][ T10] usb 3-1: SerialNumber: syz [ 501.736947][ T9501] device-mapper: ioctl: Invalid ioctl structure: name mypoo, dev f801 [ 503.348879][ T10] usb 3-1: unit 4 not found! [ 503.787331][ T10] usb 3-1: USB disconnect, device number 9 [ 503.930301][ T9534] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1110'. [ 504.830401][ T9534] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1110'. [ 504.835523][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:237.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.129597][ T9555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1113'. [ 507.165850][ T9566] hub 8-0:1.0: USB hub found [ 507.258811][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.258872][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.374627][ T9566] hub 8-0:1.0: 1 port detected [ 510.299115][ T8788] udevd[8788]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 510.482116][ T9623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1134'. [ 510.687161][ T37] audit: type=1800 audit(1786065241.780:52): pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1126" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 510.687863][ T9594] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 510.687894][ T9594] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 510.687935][ T9594] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 511.050553][ T8056] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 511.230916][ T8056] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.230947][ T8056] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 511.232407][ T8056] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 511.232439][ T8056] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 511.232462][ T8056] usb 5-1: SerialNumber: syz [ 512.820193][ T8788] udevd[8788]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 513.371525][ T9662] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 513.373479][ T9662] qnx6: wrong signature (magic) in superblock #1. [ 513.373517][ T9662] qnx6: unable to read the first superblock [ 514.688657][ T36] hsr0: left promiscuous mode [ 514.748682][ T8056] usb 5-1: 0:2 : does not exist [ 514.748773][ T8056] usb 5-1: unit 5: unexpected type 0x0c [ 514.910079][ T8056] usb 5-1: USB disconnect, device number 6 [ 514.988147][ T36] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 515.096291][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.167192][ T36] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.167220][ T36] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 515.223495][ T36] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 515.223521][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 515.223537][ T36] usb 4-1: SerialNumber: syz [ 516.731776][ T36] usb 4-1: 0:2 : does not exist [ 516.731867][ T36] usb 4-1: unit 5: unexpected type 0x0c [ 517.011311][ T36] usb 4-1: USB disconnect, device number 9 [ 518.051808][ T1387] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.161466][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.536895][ T9737] siw: device registration error -23 [ 519.596717][ T9738] FAULT_INJECTION: forcing a failure. [ 519.596717][ T9738] name failslab, interval 1, probability 0, space 0, times 0 [ 519.596747][ T9738] CPU: 1 UID: 0 PID: 9738 Comm: syz.0.1177 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 519.596767][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.596777][ T9738] Call Trace: [ 519.596784][ T9738] [ 519.596790][ T9738] dump_stack_lvl+0xe8/0x150 [ 519.596819][ T9738] should_fail_ex+0x467/0x600 [ 519.596845][ T9738] should_failslab+0xa8/0x100 [ 519.596865][ T9738] __kmalloc_noprof+0xfe/0x780 [ 519.596880][ T9738] ? rcu_is_watching+0x15/0xb0 [ 519.596900][ T9738] ? tomoyo_realpath_from_path+0xef/0x640 [ 519.596917][ T9738] ? tomoyo_realpath_from_path+0xef/0x640 [ 519.596945][ T9738] tomoyo_realpath_from_path+0xef/0x640 [ 519.596971][ T9738] ? tomoyo_path_number_perm+0x219/0x5f0 [ 519.596996][ T9738] tomoyo_path_number_perm+0x246/0x5f0 [ 519.597023][ T9738] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 519.597047][ T9738] ? __lock_acquire+0x683/0x2ce0 [ 519.597074][ T9738] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 519.597092][ T9738] ? hook_file_ioctl+0x1f3/0x600 [ 519.597112][ T9738] ? lockdep_hardirqs_on+0x7a/0x110 [ 519.597145][ T9738] ? __fget_files+0x2a/0x420 [ 519.597164][ T9738] ? __fget_files+0x2a/0x420 [ 519.597178][ T9738] ? __fget_files+0x3a8/0x420 [ 519.597193][ T9738] ? __fget_files+0x2a/0x420 [ 519.597211][ T9738] security_file_ioctl+0xc3/0x2a0 [ 519.597239][ T9738] __se_sys_ioctl+0x47/0x170 [ 519.597260][ T9738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.597278][ T9738] do_syscall_64+0x174/0x580 [ 519.597296][ T9738] ? trace_irq_disable+0x3b/0x140 [ 519.597321][ T9738] ? clear_bhb_loop+0x40/0x90 [ 519.597341][ T9738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.597358][ T9738] RIP: 0033:0x7f9ecbb9e0d9 [ 519.597373][ T9738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.597387][ T9738] RSP: 002b:00007f9ec9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.597404][ T9738] RAX: ffffffffffffffda RBX: 00007f9ecbe25fa0 RCX: 00007f9ecbb9e0d9 [ 519.597440][ T9738] RDX: 0000200000000000 RSI: 000000004068aea3 RDI: 0000000000000004 [ 519.597456][ T9738] RBP: 00007f9ec9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 519.597476][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.597486][ T9738] R13: 00007f9ecbe26038 R14: 00007f9ecbe25fa0 R15: 00007ffd17748c68 [ 519.597512][ T9738] [ 519.597518][ T9738] ERROR: Out of memory at tomoyo_realpath_from_path. [ 523.075543][ T10] hsr0: entered promiscuous mode [ 526.118189][ T36] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 526.273700][ T36] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.273734][ T36] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 526.275274][ T36] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 526.275306][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 526.275331][ T36] usb 3-1: SerialNumber: syz [ 526.817025][ T6805] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 526.817066][ T6805] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 526.821863][ T6805] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 526.960691][ T36] usb 3-1: 0:2 : does not exist [ 526.960782][ T36] usb 3-1: unit 5: unexpected type 0x0c [ 527.026358][ T9810] FAULT_INJECTION: forcing a failure. [ 527.026358][ T9810] name failslab, interval 1, probability 0, space 0, times 0 [ 527.026426][ T9810] CPU: 0 UID: 0 PID: 9810 Comm: syz.0.1202 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 527.026453][ T9810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 527.026468][ T9810] Call Trace: [ 527.026477][ T9810] [ 527.026487][ T9810] dump_stack_lvl+0xe8/0x150 [ 527.026525][ T9810] should_fail_ex+0x467/0x600 [ 527.026561][ T9810] should_failslab+0xa8/0x100 [ 527.026591][ T9810] __kmalloc_noprof+0xfe/0x780 [ 527.026613][ T9810] ? rcu_is_watching+0x15/0xb0 [ 527.026641][ T9810] ? tomoyo_realpath_from_path+0xef/0x640 [ 527.026667][ T9810] ? tomoyo_realpath_from_path+0xef/0x640 [ 527.026699][ T9810] tomoyo_realpath_from_path+0xef/0x640 [ 527.026734][ T9810] ? tomoyo_path_number_perm+0x219/0x5f0 [ 527.026767][ T9810] tomoyo_path_number_perm+0x246/0x5f0 [ 527.026803][ T9810] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 527.026837][ T9810] ? __lock_acquire+0x683/0x2ce0 [ 527.026874][ T9810] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 527.026900][ T9810] ? hook_file_ioctl+0x1f3/0x600 [ 527.026928][ T9810] ? lockdep_hardirqs_on+0x7a/0x110 [ 527.026974][ T9810] ? __fget_files+0x2a/0x420 [ 527.027000][ T9810] ? __fget_files+0x2a/0x420 [ 527.027021][ T9810] ? __fget_files+0x3a8/0x420 [ 527.027043][ T9810] ? __fget_files+0x2a/0x420 [ 527.027068][ T9810] security_file_ioctl+0xc3/0x2a0 [ 527.027105][ T9810] __se_sys_ioctl+0x47/0x170 [ 527.027133][ T9810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.027157][ T9810] do_syscall_64+0x174/0x580 [ 527.027181][ T9810] ? trace_irq_disable+0x3b/0x140 [ 527.027215][ T9810] ? clear_bhb_loop+0x40/0x90 [ 527.027252][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.027275][ T9810] RIP: 0033:0x7f9ecbb9e0d9 [ 527.027296][ T9810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.027315][ T9810] RSP: 002b:00007f9ec9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.027339][ T9810] RAX: ffffffffffffffda RBX: 00007f9ecbe25fa0 RCX: 00007f9ecbb9e0d9 [ 527.027355][ T9810] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000003 [ 527.027369][ T9810] RBP: 00007f9ec9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 527.027382][ T9810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.027395][ T9810] R13: 00007f9ecbe26038 R14: 00007f9ecbe25fa0 R15: 00007ffd17748c68 [ 527.027430][ T9810] [ 527.027439][ T9810] ERROR: Out of memory at tomoyo_realpath_from_path. [ 527.557413][ T36] usb 3-1: USB disconnect, device number 10 [ 527.863906][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.127130][ T37] audit: type=1326 audit(1786065259.210:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9830 comm="syz.2.1210" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47f4e7e0d9 code=0x0 [ 528.543189][ T6805] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 528.543232][ T6805] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 528.543799][ T6805] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 530.850884][ T6805] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 530.850921][ T6805] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 530.908303][ T6805] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 532.137546][ T37] audit: type=1326 audit(1786065263.200:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.4.1232" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5210b2e0d9 code=0x0 [ 535.229825][ T6805] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 535.229863][ T6805] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 535.230830][ T6805] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 536.428735][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 536.742138][ T9930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1247'. [ 536.859680][ T9918] Process accounting resumed [ 537.095195][ T37] audit: type=1326 audit(1786065268.180:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.4.1249" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5210b2e0d9 code=0x0 [ 539.572424][ T6805] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 539.572458][ T6805] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 539.597516][ T6805] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 539.949006][ T8788] udevd[8788]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 540.878815][ T9970] FAULT_INJECTION: forcing a failure. [ 540.878815][ T9970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.878856][ T9970] CPU: 0 UID: 0 PID: 9970 Comm: syz.3.1238 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 540.878883][ T9970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 540.878898][ T9970] Call Trace: [ 540.878907][ T9970] [ 540.878917][ T9970] dump_stack_lvl+0xe8/0x150 [ 540.878960][ T9970] should_fail_ex+0x467/0x600 [ 540.878997][ T9970] _copy_from_user+0x2d/0xb0 [ 540.879022][ T9970] ___sys_sendmsg+0x1c6/0x360 [ 540.879046][ T9970] ? __lock_acquire+0x683/0x2ce0 [ 540.879073][ T9970] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.879135][ T9970] ? __fget_files+0x2a/0x420 [ 540.879157][ T9970] ? __fget_files+0x3a8/0x420 [ 540.879191][ T9970] __x64_sys_sendmsg+0x1b7/0x290 [ 540.879220][ T9970] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 540.879280][ T9970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.879305][ T9970] do_syscall_64+0x174/0x580 [ 540.879332][ T9970] ? clear_bhb_loop+0x40/0x90 [ 540.879361][ T9970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.879386][ T9970] RIP: 0033:0x7f84bb85e0d9 [ 540.879407][ T9970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.879428][ T9970] RSP: 002b:00007f84b9ab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.879453][ T9970] RAX: ffffffffffffffda RBX: 00007f84bbae5fa0 RCX: 00007f84bb85e0d9 [ 540.879471][ T9970] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000003 [ 540.879485][ T9970] RBP: 00007f84b9ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 540.879499][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.879513][ T9970] R13: 00007f84bbae6038 R14: 00007f84bbae5fa0 R15: 00007fff64a829c8 [ 540.879548][ T9970] [ 541.762239][ T9992] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1266'. [ 542.678114][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'. [ 543.428154][ T36] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 543.583305][ T36] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.583338][ T36] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 543.584900][ T36] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 543.584934][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 543.584957][ T36] usb 4-1: SerialNumber: syz [ 544.127735][ T36] usb 4-1: 0:2 : does not exist [ 544.127839][ T36] usb 4-1: unit 5: unexpected type 0x0c [ 544.339159][ T36] usb 4-1: USB disconnect, device number 10 [ 545.545360][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 545.910683][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 547.094349][T10080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1300'. [ 547.618126][T10104] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 547.620163][T10104] qnx6: wrong signature (magic) in superblock #1. [ 547.620202][T10104] qnx6: unable to read the first superblock [ 549.092125][T10125] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1317'. [ 549.231195][ T8788] udevd[8788]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 550.045742][T10139] openvswitch: netlink: Flow actions attr not present in new flow. [ 551.941917][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 552.264109][T10172] hsr0: entered promiscuous mode [ 552.264991][T10171] hsr0: left promiscuous mode [ 552.786104][T10185] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 552.788157][T10185] qnx6: wrong signature (magic) in superblock #1. [ 552.788208][T10185] qnx6: unable to read the first superblock [ 553.825464][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 554.777939][T10211] openvswitch: netlink: Flow actions attr not present in new flow. [ 555.266392][T10227] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 555.268344][T10227] qnx6: wrong signature (magic) in superblock #1. [ 555.268391][T10227] qnx6: unable to read the first superblock [ 561.122521][T10305] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 561.124494][T10305] qnx6: wrong signature (magic) in superblock #1. [ 561.124530][T10305] qnx6: unable to read the first superblock [ 564.156085][T10316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1393'. [ 565.203606][ T8788] udevd[8788]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 568.247599][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 568.261589][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.261663][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.422536][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.422567][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.425484][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 568.425518][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 568.425542][ T10] usb 2-1: SerialNumber: syz [ 569.031051][T10385] openvswitch: netlink: Flow actions attr not present in new flow. [ 569.180501][ T10] usb 2-1: 0:2 : does not exist [ 569.180591][ T10] usb 2-1: unit 5 not found! [ 569.272222][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 569.678830][ T10] usb 2-1: USB disconnect, device number 8 [ 571.154307][T10402] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 571.154588][T10402] qnx6: wrong signature (magic) in superblock #1. [ 571.154599][T10402] qnx6: unable to read the first superblock [ 572.044541][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.994404][T10424] geneve1: entered promiscuous mode [ 574.994433][T10424] geneve1: entered allmulticast mode [ 582.955407][T10535] FAULT_INJECTION: forcing a failure. [ 582.955407][T10535] name failslab, interval 1, probability 0, space 0, times 0 [ 582.955454][T10535] CPU: 1 UID: 0 PID: 10535 Comm: syz.1.1478 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 582.955482][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 582.955497][T10535] Call Trace: [ 582.955505][T10535] [ 582.955515][T10535] dump_stack_lvl+0xe8/0x150 [ 582.955554][T10535] should_fail_ex+0x467/0x600 [ 582.955591][T10535] should_failslab+0xa8/0x100 [ 582.955625][T10535] kmem_cache_alloc_noprof+0xa4/0x650 [ 582.955745][T10535] ? do_getname+0x2e/0x250 [ 582.955802][T10535] ? do_getname+0x2e/0x250 [ 582.955842][T10535] do_getname+0x2e/0x250 [ 582.955873][T10535] ? getname_flags+0x11/0x20 [ 582.955908][T10535] __x64_sys_newstat+0x107/0x1e0 [ 582.955943][T10535] ? __pfx___x64_sys_newstat+0x10/0x10 [ 582.955999][T10535] ? __pfx_ksys_write+0x10/0x10 [ 582.956040][T10535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.956067][T10535] do_syscall_64+0x174/0x580 [ 582.956099][T10535] ? trace_irq_disable+0x3b/0x140 [ 582.956145][T10535] ? clear_bhb_loop+0x40/0x90 [ 582.956174][T10535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.956199][T10535] RIP: 0033:0x7ff6e5b6e0d9 [ 582.956226][T10535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.956246][T10535] RSP: 002b:00007ff6e3da5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 582.956275][T10535] RAX: ffffffffffffffda RBX: 00007ff6e5df6090 RCX: 00007ff6e5b6e0d9 [ 582.956293][T10535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 582.956307][T10535] RBP: 00007ff6e3da5090 R08: 0000000000000000 R09: 0000000000000000 [ 582.956320][T10535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.956334][T10535] R13: 00007ff6e5df6128 R14: 00007ff6e5df6090 R15: 00007fffd2587e58 [ 582.956369][T10535] [ 586.919345][T10566] FAULT_INJECTION: forcing a failure. [ 586.919345][T10566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.919397][T10566] CPU: 1 UID: 0 PID: 10566 Comm: syz.4.1487 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 586.919424][T10566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 586.919439][T10566] Call Trace: [ 586.919447][T10566] [ 586.919457][T10566] dump_stack_lvl+0xe8/0x150 [ 586.919507][T10566] should_fail_ex+0x467/0x600 [ 586.919543][T10566] _copy_from_user+0x2d/0xb0 [ 586.919566][T10566] ___sys_sendmsg+0x1c6/0x360 [ 586.919591][T10566] ? __lock_acquire+0x683/0x2ce0 [ 586.919619][T10566] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.919682][T10566] ? __fget_files+0x2a/0x420 [ 586.919705][T10566] ? __fget_files+0x3a8/0x420 [ 586.919739][T10566] __x64_sys_sendmsg+0x1b7/0x290 [ 586.919767][T10566] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 586.919812][T10566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.919838][T10566] do_syscall_64+0x174/0x580 [ 586.919863][T10566] ? trace_irq_disable+0x3b/0x140 [ 586.919898][T10566] ? clear_bhb_loop+0x40/0x90 [ 586.919927][T10566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.919951][T10566] RIP: 0033:0x7f5210b2e0d9 [ 586.919972][T10566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.919993][T10566] RSP: 002b:00007f520ed65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.920018][T10566] RAX: ffffffffffffffda RBX: 00007f5210db6090 RCX: 00007f5210b2e0d9 [ 586.920034][T10566] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 586.920048][T10566] RBP: 00007f520ed65090 R08: 0000000000000000 R09: 0000000000000000 [ 586.920062][T10566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.920082][T10566] R13: 00007f5210db6128 R14: 00007f5210db6090 R15: 00007ffe6b9a3fd8 [ 586.920117][T10566] [ 592.380266][T10617] siw: device registration error -23 [ 592.381785][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'. [ 593.348205][ T1750] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 593.524496][ T1750] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.524527][ T1750] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 593.548271][ T1750] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 593.548309][ T1750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 593.548332][ T1750] usb 4-1: SerialNumber: syz [ 594.184943][ T1750] usb 4-1: 0:2 : does not exist [ 594.185401][ T1750] usb 4-1: unit 5: unexpected type 0x0c [ 594.317403][ T1750] usb 4-1: USB disconnect, device number 11 [ 594.509983][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 594.674306][T10658] siw: device registration error -23 [ 594.675672][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 597.474953][T10708] siw: device registration error -23 [ 597.476311][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 597.637685][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 598.515174][T10735] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 599.498656][T10746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1556'. [ 601.932075][ T8785] udevd[8785]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 601.973291][ T8788] udevd[8788]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 602.066355][T10798] FAULT_INJECTION: forcing a failure. [ 602.066355][T10798] name failslab, interval 1, probability 0, space 0, times 0 [ 602.066393][T10798] CPU: 0 UID: 0 PID: 10798 Comm: syz.0.1572 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 602.066416][T10798] Tainted: [L]=SOFTLOCKUP [ 602.066422][T10798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 602.066432][T10798] Call Trace: [ 602.066438][T10798] [ 602.066444][T10798] dump_stack_lvl+0xe8/0x150 [ 602.066472][T10798] should_fail_ex+0x467/0x600 [ 602.066498][T10798] should_failslab+0xa8/0x100 [ 602.066518][T10798] kmem_cache_alloc_noprof+0xa4/0x650 [ 602.066544][T10798] ? dst_alloc+0x105/0x170 [ 602.066562][T10798] ? dst_alloc+0x105/0x170 [ 602.066585][T10798] dst_alloc+0x105/0x170 [ 602.066607][T10798] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 602.066637][T10798] ? ip_route_output_key_hash+0xd8/0x2a0 [ 602.066660][T10798] ip_route_output_key_hash+0x18d/0x2a0 [ 602.066684][T10798] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 602.066719][T10798] ip_route_output_flow+0x2a/0x150 [ 602.066738][T10798] ? security_sk_classify_flow+0x6d/0x150 [ 602.066830][T10798] raw_sendmsg+0x110d/0x1a20 [ 602.066863][T10798] ? __pfx_raw_sendmsg+0x10/0x10 [ 602.066895][T10798] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 602.066941][T10798] ? is_bpf_text_address+0x292/0x2b0 [ 602.066986][T10798] ? sock_rps_record_flow+0x19/0x350 [ 602.067010][T10798] ? inet_sendmsg+0x298/0x320 [ 602.067030][T10798] ? unwind_get_return_address+0x4d/0x90 [ 602.067071][T10798] ? __pfx_inet_sendmsg+0x10/0x10 [ 602.067091][T10798] sock_sendmsg_nosec+0x10e/0x180 [ 602.067116][T10798] sock_write_iter+0x2e4/0x3f0 [ 602.067139][T10798] ? __pfx_sock_write_iter+0x10/0x10 [ 602.067173][T10798] do_iter_readv_writev+0x624/0x8d0 [ 602.067196][T10798] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 602.067221][T10798] ? bpf_lsm_file_permission+0x9/0x20 [ 602.067274][T10798] ? security_file_permission+0x75/0x260 [ 602.067300][T10798] ? rw_verify_area+0x209/0x4d0 [ 602.067322][T10798] vfs_writev+0x34c/0x990 [ 602.067348][T10798] ? do_raw_spin_lock+0x12b/0x2f0 [ 602.067379][T10798] ? __pfx_vfs_writev+0x10/0x10 [ 602.067414][T10798] ? __fget_files+0x2a/0x420 [ 602.067432][T10798] ? __fget_files+0x3a8/0x420 [ 602.067447][T10798] ? __fget_files+0x2a/0x420 [ 602.067468][T10798] do_writev+0x15a/0x2e0 [ 602.067494][T10798] ? __pfx_do_writev+0x10/0x10 [ 602.067524][T10798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.067542][T10798] do_syscall_64+0x174/0x580 [ 602.067559][T10798] ? trace_irq_disable+0x3b/0x140 [ 602.067585][T10798] ? clear_bhb_loop+0x40/0x90 [ 602.067605][T10798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.067621][T10798] RIP: 0033:0x7f9ecbb9e0d9 [ 602.067636][T10798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.067650][T10798] RSP: 002b:00007f9ec9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 602.067668][T10798] RAX: ffffffffffffffda RBX: 00007f9ecbe25fa0 RCX: 00007f9ecbb9e0d9 [ 602.067681][T10798] RDX: 0000000000000001 RSI: 00002000000019c0 RDI: 0000000000000003 [ 602.067691][T10798] RBP: 00007f9ec9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 602.067701][T10798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.067711][T10798] R13: 00007f9ecbe26038 R14: 00007f9ecbe25fa0 R15: 00007ffd17748c68 [ 602.067736][T10798] [ 603.044839][T10822] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1577'. [ 603.791945][T10840] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 606.877579][ T8785] udevd[8785]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 606.979558][ T8788] udevd[8788]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 607.026984][T10877] FAULT_INJECTION: forcing a failure. [ 607.026984][T10877] name failslab, interval 1, probability 0, space 0, times 0 [ 607.027015][T10877] CPU: 1 UID: 0 PID: 10877 Comm: syz.0.1598 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 607.027039][T10877] Tainted: [L]=SOFTLOCKUP [ 607.027045][T10877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.027055][T10877] Call Trace: [ 607.027061][T10877] [ 607.027068][T10877] dump_stack_lvl+0xe8/0x150 [ 607.027097][T10877] should_fail_ex+0x467/0x600 [ 607.027123][T10877] should_failslab+0xa8/0x100 [ 607.027142][T10877] __kmalloc_noprof+0xfe/0x780 [ 607.027158][T10877] ? rcu_is_watching+0x15/0xb0 [ 607.027178][T10877] ? tomoyo_realpath_from_path+0xef/0x640 [ 607.027196][T10877] ? tomoyo_realpath_from_path+0xef/0x640 [ 607.027219][T10877] tomoyo_realpath_from_path+0xef/0x640 [ 607.027244][T10877] ? tomoyo_path_number_perm+0x219/0x5f0 [ 607.027270][T10877] tomoyo_path_number_perm+0x246/0x5f0 [ 607.027296][T10877] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 607.027320][T10877] ? __lock_acquire+0x683/0x2ce0 [ 607.027346][T10877] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 607.027364][T10877] ? hook_file_ioctl+0x1f3/0x600 [ 607.027384][T10877] ? lockdep_hardirqs_on+0x7a/0x110 [ 607.027425][T10877] ? __fget_files+0x2a/0x420 [ 607.027446][T10877] ? __fget_files+0x2a/0x420 [ 607.027460][T10877] ? __fget_files+0x3a8/0x420 [ 607.027475][T10877] ? __fget_files+0x2a/0x420 [ 607.027493][T10877] security_file_ioctl+0xc3/0x2a0 [ 607.027520][T10877] __se_sys_ioctl+0x47/0x170 [ 607.027541][T10877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.027559][T10877] do_syscall_64+0x174/0x580 [ 607.027577][T10877] ? trace_irq_disable+0x3b/0x140 [ 607.027603][T10877] ? clear_bhb_loop+0x40/0x90 [ 607.027623][T10877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.027639][T10877] RIP: 0033:0x7f9ecbb9e0d9 [ 607.027654][T10877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.027669][T10877] RSP: 002b:00007f9ec9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.027686][T10877] RAX: ffffffffffffffda RBX: 00007f9ecbe25fa0 RCX: 00007f9ecbb9e0d9 [ 607.027698][T10877] RDX: 0000200000000280 RSI: 00000000802c542a RDI: 0000000000000004 [ 607.027708][T10877] RBP: 00007f9ec9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 607.027718][T10877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.027727][T10877] R13: 00007f9ecbe26038 R14: 00007f9ecbe25fa0 R15: 00007ffd17748c68 [ 607.027752][T10877] [ 607.027774][T10877] ERROR: Out of memory at tomoyo_realpath_from_path. [ 607.448179][ T37] audit: type=1326 audit(1786065338.530:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10884 comm="syz.1.1600" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6e5b6e0d9 code=0x0 [ 608.623768][T10907] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1605'. [ 610.784668][T10937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1613'. [ 613.066180][ T8785] udevd[8785]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 613.087287][ T8788] udevd[8788]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 614.468888][T10997] FAULT_INJECTION: forcing a failure. [ 614.468888][T10997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.468929][T10997] CPU: 1 UID: 0 PID: 10997 Comm: syz.2.1633 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 614.468961][T10997] Tainted: [L]=SOFTLOCKUP [ 614.468970][T10997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 614.468989][T10997] Call Trace: [ 614.468998][T10997] [ 614.469007][T10997] dump_stack_lvl+0xe8/0x150 [ 614.469046][T10997] should_fail_ex+0x467/0x600 [ 614.469092][T10997] _copy_from_user+0x2d/0xb0 [ 614.469116][T10997] io_submit_one+0xd2/0x13d0 [ 614.469238][T10997] ? lockdep_hardirqs_on+0x7a/0x110 [ 614.469263][T10997] ? irqentry_exit+0x218/0x8f0 [ 614.469292][T10997] ? __pfx_io_submit_one+0x10/0x10 [ 614.469322][T10997] ? __might_fault+0xaf/0x130 [ 614.469388][T10997] ? __might_fault+0xaf/0x130 [ 614.469415][T10997] __se_sys_io_submit+0x195/0x340 [ 614.469443][T10997] ? __pfx___se_sys_io_submit+0x10/0x10 [ 614.469467][T10997] ? ksys_write+0x248/0x270 [ 614.469510][T10997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.469536][T10997] do_syscall_64+0x174/0x580 [ 614.469560][T10997] ? trace_irq_disable+0x3b/0x140 [ 614.469597][T10997] ? clear_bhb_loop+0x40/0x90 [ 614.469626][T10997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.469650][T10997] RIP: 0033:0x7f47f4e7e0d9 [ 614.469671][T10997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.469691][T10997] RSP: 002b:00007f47f30d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 614.469716][T10997] RAX: ffffffffffffffda RBX: 00007f47f5105fa0 RCX: 00007f47f4e7e0d9 [ 614.469734][T10997] RDX: 0000200000000c40 RSI: 0000000000000001 RDI: 00007f47f3093000 [ 614.469749][T10997] RBP: 00007f47f30d6090 R08: 0000000000000000 R09: 0000000000000000 [ 614.469764][T10997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.469777][T10997] R13: 00007f47f5106038 R14: 00007f47f5105fa0 R15: 00007ffcfb48d598 [ 614.469813][T10997] [ 614.581996][T11004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1635'. [ 616.679537][ T8788] udevd[8788]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 616.735708][ T8788] udevd[8788]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 618.252950][T11067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1656'. [ 618.861886][T11090] openvswitch: netlink: Flow actions attr not present in new flow. [ 618.909777][T11091] FAULT_INJECTION: forcing a failure. [ 618.909777][T11091] name failslab, interval 1, probability 0, space 0, times 0 [ 618.909820][T11091] CPU: 1 UID: 0 PID: 11091 Comm: syz.0.1669 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 618.909853][T11091] Tainted: [L]=SOFTLOCKUP [ 618.909862][T11091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.909876][T11091] Call Trace: [ 618.909885][T11091] [ 618.909896][T11091] dump_stack_lvl+0xe8/0x150 [ 618.909935][T11091] should_fail_ex+0x467/0x600 [ 618.909970][T11091] should_failslab+0xa8/0x100 [ 618.909999][T11091] __kmalloc_noprof+0xfe/0x780 [ 618.910020][T11091] ? rcu_is_watching+0x15/0xb0 [ 618.910046][T11091] ? tomoyo_realpath_from_path+0xef/0x640 [ 618.910080][T11091] ? tomoyo_realpath_from_path+0xef/0x640 [ 618.910113][T11091] tomoyo_realpath_from_path+0xef/0x640 [ 618.910153][T11091] ? tomoyo_path_number_perm+0x219/0x5f0 [ 618.910187][T11091] tomoyo_path_number_perm+0x246/0x5f0 [ 618.910225][T11091] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 618.910259][T11091] ? __lock_acquire+0x683/0x2ce0 [ 618.910297][T11091] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 618.910322][T11091] ? hook_file_ioctl+0x1f3/0x600 [ 618.910350][T11091] ? lockdep_hardirqs_on+0x7a/0x110 [ 618.910394][T11091] ? __fget_files+0x2a/0x420 [ 618.910422][T11091] ? __fget_files+0x2a/0x420 [ 618.910443][T11091] ? __fget_files+0x3a8/0x420 [ 618.910465][T11091] ? __fget_files+0x2a/0x420 [ 618.910491][T11091] security_file_ioctl+0xc3/0x2a0 [ 618.910530][T11091] __se_sys_ioctl+0x47/0x170 [ 618.910559][T11091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.910586][T11091] do_syscall_64+0x174/0x580 [ 618.910611][T11091] ? trace_irq_disable+0x3b/0x140 [ 618.910647][T11091] ? clear_bhb_loop+0x40/0x90 [ 618.910676][T11091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.910699][T11091] RIP: 0033:0x7f9ecbb9e0d9 [ 618.910722][T11091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.910740][T11091] RSP: 002b:00007f9ec9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.910764][T11091] RAX: ffffffffffffffda RBX: 00007f9ecbe25fa0 RCX: 00007f9ecbb9e0d9 [ 618.910781][T11091] RDX: 0000200000000140 RSI: 00000000c00caee0 RDI: 0000000000000004 [ 618.910796][T11091] RBP: 00007f9ec9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 618.910811][T11091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.910824][T11091] R13: 00007f9ecbe26038 R14: 00007f9ecbe25fa0 R15: 00007ffd17748c68 [ 618.910858][T11091] [ 618.912643][T11091] ERROR: Out of memory at tomoyo_realpath_from_path. [ 619.925060][T11113] xfrm0: entered promiscuous mode [ 619.925091][T11113] xfrm0: entered allmulticast mode [ 620.158923][T11118] FAULT_INJECTION: forcing a failure. [ 620.158923][T11118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.158966][T11118] CPU: 1 UID: 0 PID: 11118 Comm: syz.0.1678 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 620.158998][T11118] Tainted: [L]=SOFTLOCKUP [ 620.159007][T11118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.159021][T11118] Call Trace: [ 620.159030][T11118] [ 620.159040][T11118] dump_stack_lvl+0xe8/0x150 [ 620.159078][T11118] should_fail_ex+0x467/0x600 [ 620.159123][T11118] _copy_from_user+0x2d/0xb0 [ 620.159148][T11118] __sys_bpf+0x2e7/0xd90 [ 620.159181][T11118] ? __pfx___sys_bpf+0x10/0x10 [ 620.159207][T11118] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 620.159239][T11118] ? rt_mutex_slowunlock+0x219/0x460 [ 620.159294][T11118] ? ksys_write+0x248/0x270 [ 620.159326][T11118] ? __pfx_ksys_write+0x10/0x10 [ 620.159359][T11118] __x64_sys_bpf+0xba/0xd0 [ 620.159394][T11118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.159420][T11118] do_syscall_64+0x174/0x580 [ 620.159456][T11118] ? trace_irq_disable+0x3b/0x140 [ 620.159492][T11118] ? clear_bhb_loop+0x40/0x90 [ 620.159522][T11118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.159545][T11118] RIP: 0033:0x7f9ecbb9e0d9 [ 620.159569][T11118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.159590][T11118] RSP: 002b:00007f9ec9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 620.159615][T11118] RAX: ffffffffffffffda RBX: 00007f9ecbe25fa0 RCX: 00007f9ecbb9e0d9 [ 620.159633][T11118] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 620.159648][T11118] RBP: 00007f9ec9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 620.159663][T11118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.159677][T11118] R13: 00007f9ecbe26038 R14: 00007f9ecbe25fa0 R15: 00007ffd17748c68 [ 620.159714][T11118] [ 620.711326][T11125] openvswitch: netlink: Flow actions attr not present in new flow. [ 621.128780][T11140] FAULT_INJECTION: forcing a failure. [ 621.128780][T11140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.128823][T11140] CPU: 0 UID: 0 PID: 11140 Comm: syz.0.1687 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 621.128855][T11140] Tainted: [L]=SOFTLOCKUP [ 621.128863][T11140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 621.128877][T11140] Call Trace: [ 621.128886][T11140] [ 621.128896][T11140] dump_stack_lvl+0xe8/0x150 [ 621.128946][T11140] should_fail_ex+0x467/0x600 [ 621.128983][T11140] _copy_from_user+0x2d/0xb0 [ 621.129007][T11140] io_submit_one+0xd2/0x13d0 [ 621.129044][T11140] ? lockdep_hardirqs_on+0x7a/0x110 [ 621.129070][T11140] ? irqentry_exit+0x218/0x8f0 [ 621.129099][T11140] ? __pfx_io_submit_one+0x10/0x10 [ 621.129129][T11140] ? __might_fault+0xaf/0x130 [ 621.129165][T11140] ? __might_fault+0xaf/0x130 [ 621.129192][T11140] __se_sys_io_submit+0x195/0x340 [ 621.129222][T11140] ? __pfx___se_sys_io_submit+0x10/0x10 [ 621.129246][T11140] ? ksys_write+0x248/0x270 [ 621.129288][T11140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.129314][T11140] do_syscall_64+0x174/0x580 [ 621.129338][T11140] ? trace_irq_disable+0x3b/0x140 [ 621.129373][T11140] ? clear_bhb_loop+0x40/0x90 [ 621.129401][T11140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.129424][T11140] RIP: 0033:0x7f9ecbb9e0d9 [ 621.129444][T11140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.129464][T11140] RSP: 002b:00007f9ec9df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 621.129488][T11140] RAX: ffffffffffffffda RBX: 00007f9ecbe25fa0 RCX: 00007f9ecbb9e0d9 [ 621.129504][T11140] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 00007f9ecc963000 [ 621.129519][T11140] RBP: 00007f9ec9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 621.129533][T11140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.129546][T11140] R13: 00007f9ecbe26038 R14: 00007f9ecbe25fa0 R15: 00007ffd17748c68 [ 621.129580][T11140] [ 621.438146][ T36] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 621.626485][ T36] usb 5-1: not running at top speed; connect to a high speed hub [ 621.632168][ T36] usb 5-1: config 247 has an invalid interface number: 234 but max is 0 [ 621.632207][ T36] usb 5-1: config 247 has no interface number 0 [ 621.632248][ T36] usb 5-1: config 247 interface 234 altsetting 7 endpoint 0xD has invalid maxpacket 1536, setting to 64 [ 621.632270][ T36] usb 5-1: config 247 interface 234 altsetting 7 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 621.632290][ T36] usb 5-1: config 247 interface 234 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 621.632308][ T36] usb 5-1: config 247 interface 234 altsetting 7 has an endpoint descriptor with address 0x91, changing to 0x81 [ 621.632333][ T36] usb 5-1: config 247 interface 234 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 621.632353][ T36] usb 5-1: config 247 interface 234 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 621.632370][ T36] usb 5-1: config 247 interface 234 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 621.632388][ T36] usb 5-1: config 247 interface 234 has no altsetting 0 [ 621.742909][ T36] usb 5-1: New USB device found, idVendor=045b, idProduct=023c, bcdDevice=4c.cc [ 621.743099][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.743124][ T36] usb 5-1: Product: 귍㘘៴瞫鸚敂択ꠇ片徆翪簕㏓陝ಀ㵭㿿눧㧾콛咱떳췫楁㝋콰ﵔᩄ⍎儻懱聧뎶퐙ᙎᚴ㉯坞 [ 621.743149][ T36] usb 5-1: SerialNumber: 飅觖訷蚊Ὦ䆧坊ꬄ眦됆嗉⃫ꔣ䣉琑ೲ㊂ᛲ㚁ﶾ뤁鍸獘㠚碳偀䓼禂囆冉㢼첫뾤笧濠㖖呶ꍡ짯Ⲥ䙁⃻璚㇘씄㯣識䑓㷷狭ㆼ䧚弔諽瞛迬悚뫀眔伓㋀冫俼ﺦ伴뉺覃터ꄏ可啉懞뷛⚶ꄉ儑忆꜓쿯邀ᙪ눊фﻴ蹺ᅩꑷᰁ┡쎃꤄늖毇琟ጲꧤ䱩鮐䩿了㋉왖ツ [ 621.940005][T11151] tap0: tun_chr_ioctl cmd 1074025681 [ 622.162157][ T36] usb 5-1: USB disconnect, device number 7 [ 622.379538][T11160] openvswitch: netlink: Flow actions attr not present in new flow. [ 622.770277][T11174] FAULT_INJECTION: forcing a failure. [ 622.770277][T11174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.770398][T11174] CPU: 0 UID: 0 PID: 11174 Comm: syz.3.1700 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 622.770432][T11174] Tainted: [L]=SOFTLOCKUP [ 622.770440][T11174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 622.770454][T11174] Call Trace: [ 622.770463][T11174] [ 622.770473][T11174] dump_stack_lvl+0xe8/0x150 [ 622.770578][T11174] should_fail_ex+0x467/0x600 [ 622.770653][T11174] _copy_from_user+0x2d/0xb0 [ 622.770678][T11174] ___sys_recvmsg+0x173/0x5a0 [ 622.770713][T11174] ? __pfx____sys_recvmsg+0x10/0x10 [ 622.770744][T11174] ? __fget_files+0x2a/0x420 [ 622.770787][T11174] ? __fget_files+0x3a8/0x420 [ 622.770821][T11174] do_recvmmsg+0x320/0x7f0 [ 622.770855][T11174] ? __pfx_do_recvmmsg+0x10/0x10 [ 622.770882][T11174] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 622.770918][T11174] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 622.770962][T11174] __x64_sys_recvmmsg+0x198/0x250 [ 622.770990][T11174] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 622.771025][T11174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.771052][T11174] do_syscall_64+0x174/0x580 [ 622.771077][T11174] ? trace_irq_disable+0x3b/0x140 [ 622.771112][T11174] ? clear_bhb_loop+0x40/0x90 [ 622.771142][T11174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.771166][T11174] RIP: 0033:0x7f84bb85e0d9 [ 622.771189][T11174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.771210][T11174] RSP: 002b:00007f84b9ab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 622.771236][T11174] RAX: ffffffffffffffda RBX: 00007f84bbae5fa0 RCX: 00007f84bb85e0d9 [ 622.771255][T11174] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000003 [ 622.771272][T11174] RBP: 00007f84b9ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 622.771287][T11174] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 622.771300][T11174] R13: 00007f84bbae6038 R14: 00007f84bbae5fa0 R15: 00007fff64a829c8 [ 622.771337][T11174] [ 625.044362][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1721'. [ 625.045542][T11222] FAULT_INJECTION: forcing a failure. [ 625.045542][T11222] name failslab, interval 1, probability 0, space 0, times 0 [ 625.045584][T11222] CPU: 1 UID: 0 PID: 11222 Comm: syz.4.1715 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 625.045620][T11222] Tainted: [L]=SOFTLOCKUP [ 625.045629][T11222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 625.045644][T11222] Call Trace: [ 625.045654][T11222] [ 625.045665][T11222] dump_stack_lvl+0xe8/0x150 [ 625.045706][T11222] should_fail_ex+0x467/0x600 [ 625.045747][T11222] should_failslab+0xa8/0x100 [ 625.045778][T11222] __kmalloc_noprof+0xfe/0x780 [ 625.045803][T11222] ? rcu_is_watching+0x15/0xb0 [ 625.045833][T11222] ? tomoyo_realpath_from_path+0xef/0x640 [ 625.045859][T11222] ? tomoyo_realpath_from_path+0xef/0x640 [ 625.045895][T11222] tomoyo_realpath_from_path+0xef/0x640 [ 625.045934][T11222] ? tomoyo_path_number_perm+0x219/0x5f0 [ 625.045971][T11222] tomoyo_path_number_perm+0x246/0x5f0 [ 625.046012][T11222] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 625.046048][T11222] ? __lock_acquire+0x683/0x2ce0 [ 625.046091][T11222] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 625.046119][T11222] ? hook_file_ioctl+0x1f3/0x600 [ 625.046149][T11222] ? lockdep_hardirqs_on+0x7a/0x110 [ 625.046198][T11222] ? __fget_files+0x2a/0x420 [ 625.046226][T11222] ? __fget_files+0x2a/0x420 [ 625.046250][T11222] ? __fget_files+0x3a8/0x420 [ 625.046272][T11222] ? __fget_files+0x2a/0x420 [ 625.046295][T11222] security_file_ioctl+0xc3/0x2a0 [ 625.046329][T11222] __se_sys_ioctl+0x47/0x170 [ 625.046365][T11222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.046392][T11222] do_syscall_64+0x174/0x580 [ 625.046413][T11222] ? trace_irq_disable+0x3b/0x140 [ 625.046445][T11222] ? clear_bhb_loop+0x40/0x90 [ 625.046470][T11222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.046491][T11222] RIP: 0033:0x7f5210b2e0d9 [ 625.046510][T11222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.046529][T11222] RSP: 002b:00007f520ed86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.046551][T11222] RAX: ffffffffffffffda RBX: 00007f5210db5fa0 RCX: 00007f5210b2e0d9 [ 625.046566][T11222] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 625.046578][T11222] RBP: 00007f520ed86090 R08: 0000000000000000 R09: 0000000000000000 [ 625.046591][T11222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.046602][T11222] R13: 00007f5210db6038 R14: 00007f5210db5fa0 R15: 00007ffe6b9a3fd8 [ 625.046634][T11222] [ 625.088226][T11222] ERROR: Out of memory at tomoyo_realpath_from_path. [ 625.499134][T11237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1722'. [ 625.803916][T11246] kAFS: Can only specify source 'none' with -o dyn [ 626.364138][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1734'. [ 628.065928][T11273] FAULT_INJECTION: forcing a failure. [ 628.065928][T11273] name failslab, interval 1, probability 0, space 0, times 0 [ 628.065983][T11273] CPU: 0 UID: 0 PID: 11273 Comm: syz.0.1736 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 628.066016][T11273] Tainted: [L]=SOFTLOCKUP [ 628.066023][T11273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 628.066037][T11273] Call Trace: [ 628.066046][T11273] [ 628.066056][T11273] dump_stack_lvl+0xe8/0x150 [ 628.066095][T11273] should_fail_ex+0x467/0x600 [ 628.066134][T11273] should_failslab+0xa8/0x100 [ 628.066162][T11273] __kmalloc_noprof+0xfe/0x780 [ 628.066183][T11273] ? rcu_is_watching+0x15/0xb0 [ 628.066211][T11273] ? tomoyo_realpath_from_path+0xef/0x640 [ 628.066236][T11273] ? tomoyo_realpath_from_path+0xef/0x640 [ 628.066270][T11273] tomoyo_realpath_from_path+0xef/0x640 [ 628.066307][T11273] ? tomoyo_path_number_perm+0x219/0x5f0 [ 628.066342][T11273] tomoyo_path_number_perm+0x246/0x5f0 [ 628.066380][T11273] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 628.066413][T11273] ? __lock_acquire+0x683/0x2ce0 [ 628.066450][T11273] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 628.066475][T11273] ? hook_file_ioctl+0x1f3/0x600 [ 628.066502][T11273] ? lockdep_hardirqs_on+0x7a/0x110 [ 628.066547][T11273] ? __fget_files+0x2a/0x420 [ 628.066573][T11273] ? __fget_files+0x2a/0x420 [ 628.066595][T11273] ? __fget_files+0x3a8/0x420 [ 628.066616][T11273] ? __fget_files+0x2a/0x420 [ 628.066643][T11273] security_file_ioctl+0xc3/0x2a0 [ 628.066733][T11273] __se_sys_ioctl+0x47/0x170 [ 628.066763][T11273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.066789][T11273] do_syscall_64+0x174/0x580 [ 628.066814][T11273] ? trace_irq_disable+0x3b/0x140 [ 628.066848][T11273] ? clear_bhb_loop+0x40/0x90 [ 628.066877][T11273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.066901][T11273] RIP: 0033:0x7f9ecbb9e0d9 [ 628.066923][T11273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.066943][T11273] RSP: 002b:00007f9ec9db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.066967][T11273] RAX: ffffffffffffffda RBX: 00007f9ecbe26180 RCX: 00007f9ecbb9e0d9 [ 628.066984][T11273] RDX: 0000200000000000 RSI: 000000004020ae46 RDI: 0000000000000004 [ 628.066999][T11273] RBP: 00007f9ec9db4090 R08: 0000000000000000 R09: 0000000000000000 [ 628.067013][T11273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.067026][T11273] R13: 00007f9ecbe26218 R14: 00007f9ecbe26180 R15: 00007ffd17748c68 [ 628.067061][T11273] [ 628.068279][T11273] ERROR: Out of memory at tomoyo_realpath_from_path. [ 628.849731][T11276] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 628.849777][T11276] UDF-fs: Scanning with blocksize 512 failed [ 628.991780][T11276] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 628.991832][T11276] UDF-fs: Scanning with blocksize 1024 failed [ 629.009029][T11276] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 629.009053][T11276] UDF-fs: Scanning with blocksize 2048 failed [ 629.009331][T11276] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 629.009346][T11276] UDF-fs: Scanning with blocksize 4096 failed [ 629.703575][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.703644][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.494986][T11313] FAULT_INJECTION: forcing a failure. [ 632.494986][T11313] name failslab, interval 1, probability 0, space 0, times 0 [ 632.495027][T11313] CPU: 1 UID: 0 PID: 11313 Comm: syz.1.1738 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 632.495059][T11313] Tainted: [L]=SOFTLOCKUP [ 632.495067][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 632.495081][T11313] Call Trace: [ 632.495090][T11313] [ 632.495100][T11313] dump_stack_lvl+0xe8/0x150 [ 632.495139][T11313] should_fail_ex+0x467/0x600 [ 632.495177][T11313] should_failslab+0xa8/0x100 [ 632.495204][T11313] __kmalloc_noprof+0xfe/0x780 [ 632.495226][T11313] ? rcu_is_watching+0x15/0xb0 [ 632.495254][T11313] ? tomoyo_realpath_from_path+0xef/0x640 [ 632.495278][T11313] ? tomoyo_realpath_from_path+0xef/0x640 [ 632.495312][T11313] tomoyo_realpath_from_path+0xef/0x640 [ 632.495349][T11313] ? tomoyo_path_number_perm+0x219/0x5f0 [ 632.495383][T11313] tomoyo_path_number_perm+0x246/0x5f0 [ 632.495430][T11313] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 632.495463][T11313] ? __lock_acquire+0x683/0x2ce0 [ 632.495502][T11313] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 632.495526][T11313] ? hook_file_ioctl+0x1f3/0x600 [ 632.495554][T11313] ? lockdep_hardirqs_on+0x7a/0x110 [ 632.495600][T11313] ? __fget_files+0x2a/0x420 [ 632.495627][T11313] ? __fget_files+0x2a/0x420 [ 632.495647][T11313] ? __fget_files+0x3a8/0x420 [ 632.495669][T11313] ? __fget_files+0x2a/0x420 [ 632.495696][T11313] security_file_ioctl+0xc3/0x2a0 [ 632.495733][T11313] __se_sys_ioctl+0x47/0x170 [ 632.495762][T11313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.495792][T11313] do_syscall_64+0x174/0x580 [ 632.495816][T11313] ? trace_irq_disable+0x3b/0x140 [ 632.495852][T11313] ? clear_bhb_loop+0x40/0x90 [ 632.495881][T11313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.495905][T11313] RIP: 0033:0x7ff6e5b6e0d9 [ 632.495927][T11313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.495947][T11313] RSP: 002b:00007ff6e3dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.495970][T11313] RAX: ffffffffffffffda RBX: 00007ff6e5df5fa0 RCX: 00007ff6e5b6e0d9 [ 632.495987][T11313] RDX: 0000000000000000 RSI: 0000000000003b72 RDI: 0000000000000003 [ 632.496001][T11313] RBP: 00007ff6e3dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 632.496015][T11313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.496029][T11313] R13: 00007ff6e5df6038 R14: 00007ff6e5df5fa0 R15: 00007fffd2587e58 [ 632.496065][T11313] [ 632.548314][T11313] ERROR: Out of memory at tomoyo_realpath_from_path. [ 632.922554][T11318] FAULT_INJECTION: forcing a failure. [ 632.922554][T11318] name failslab, interval 1, probability 0, space 0, times 0 [ 632.922596][T11318] CPU: 1 UID: 0 PID: 11318 Comm: syz.2.1757 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 632.922628][T11318] Tainted: [L]=SOFTLOCKUP [ 632.922637][T11318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 632.922650][T11318] Call Trace: [ 632.922659][T11318] [ 632.922675][T11318] dump_stack_lvl+0xe8/0x150 [ 632.922713][T11318] should_fail_ex+0x467/0x600 [ 632.922753][T11318] should_failslab+0xa8/0x100 [ 632.922782][T11318] __kvmalloc_node_noprof+0x17a/0x8a0 [ 632.922810][T11318] ? proc_sys_call_handler+0x3d1/0x830 [ 632.922897][T11318] ? proc_sys_call_handler+0x3d1/0x830 [ 632.922934][T11318] proc_sys_call_handler+0x3d1/0x830 [ 632.922962][T11318] ? vfs_write+0x231/0xbb0 [ 632.922992][T11318] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 632.923034][T11318] vfs_write+0x61e/0xbb0 [ 632.923071][T11318] ? __pfx_vfs_write+0x10/0x10 [ 632.923101][T11318] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 632.923128][T11318] ? lockdep_hardirqs_on+0x7a/0x110 [ 632.923155][T11318] ? mutex_lock_nested+0x152/0x1d0 [ 632.923194][T11318] ? fdget_pos+0x252/0x320 [ 632.923228][T11318] ksys_write+0x156/0x270 [ 632.923258][T11318] ? __pfx_ksys_write+0x10/0x10 [ 632.923294][T11318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.923321][T11318] do_syscall_64+0x174/0x580 [ 632.923345][T11318] ? trace_irq_disable+0x3b/0x140 [ 632.923382][T11318] ? clear_bhb_loop+0x40/0x90 [ 632.923410][T11318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.923434][T11318] RIP: 0033:0x7f47f4e7e0d9 [ 632.923456][T11318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.923476][T11318] RSP: 002b:00007f47f30d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 632.923500][T11318] RAX: ffffffffffffffda RBX: 00007f47f5105fa0 RCX: 00007f47f4e7e0d9 [ 632.923516][T11318] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 632.923531][T11318] RBP: 00007f47f30d6090 R08: 0000000000000000 R09: 0000000000000000 [ 632.923545][T11318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.923558][T11318] R13: 00007f47f5106038 R14: 00007f47f5105fa0 R15: 00007ffcfb48d598 [ 632.923594][T11318] [ 634.409881][ T8064] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 634.570396][ T8064] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.570424][ T8064] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 634.602056][ T8064] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 634.602099][ T8064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 634.602122][ T8064] usb 2-1: SerialNumber: syz [ 635.010985][T11347] FAULT_INJECTION: forcing a failure. [ 635.010985][T11347] name failslab, interval 1, probability 0, space 0, times 0 [ 635.011019][T11347] CPU: 0 UID: 0 PID: 11347 Comm: syz.2.1768 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 635.011055][T11347] Tainted: [L]=SOFTLOCKUP [ 635.011061][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 635.011072][T11347] Call Trace: [ 635.011079][T11347] [ 635.011086][T11347] dump_stack_lvl+0xe8/0x150 [ 635.011118][T11347] should_fail_ex+0x467/0x600 [ 635.011148][T11347] should_failslab+0xa8/0x100 [ 635.011171][T11347] __kmalloc_noprof+0xfe/0x780 [ 635.011188][T11347] ? rcu_is_watching+0x15/0xb0 [ 635.011209][T11347] ? tomoyo_realpath_from_path+0xef/0x640 [ 635.011228][T11347] ? tomoyo_realpath_from_path+0xef/0x640 [ 635.011252][T11347] tomoyo_realpath_from_path+0xef/0x640 [ 635.011279][T11347] ? tomoyo_path_number_perm+0x219/0x5f0 [ 635.011305][T11347] tomoyo_path_number_perm+0x246/0x5f0 [ 635.011333][T11347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 635.011358][T11347] ? __lock_acquire+0x683/0x2ce0 [ 635.011386][T11347] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 635.011407][T11347] ? hook_file_ioctl+0x1f3/0x600 [ 635.011429][T11347] ? lockdep_hardirqs_on+0x7a/0x110 [ 635.011464][T11347] ? __fget_files+0x2a/0x420 [ 635.011485][T11347] ? __fget_files+0x2a/0x420 [ 635.011501][T11347] ? __fget_files+0x3a8/0x420 [ 635.011516][T11347] ? __fget_files+0x2a/0x420 [ 635.011540][T11347] security_file_ioctl+0xc3/0x2a0 [ 635.011576][T11347] __se_sys_ioctl+0x47/0x170 [ 635.011606][T11347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.011627][T11347] do_syscall_64+0x174/0x580 [ 635.011649][T11347] ? trace_irq_disable+0x3b/0x140 [ 635.011679][T11347] ? clear_bhb_loop+0x40/0x90 [ 635.011701][T11347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.011719][T11347] RIP: 0033:0x7f47f4e7e0d9 [ 635.011735][T11347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.011769][T11347] RSP: 002b:00007f47f30b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.011788][T11347] RAX: ffffffffffffffda RBX: 00007f47f5106090 RCX: 00007f47f4e7e0d9 [ 635.011801][T11347] RDX: 0000200000000080 RSI: 0000000000005412 RDI: 0000000000000004 [ 635.011812][T11347] RBP: 00007f47f30b5090 R08: 0000000000000000 R09: 0000000000000000 [ 635.011823][T11347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.011837][T11347] R13: 00007f47f5106128 R14: 00007f47f5106090 R15: 00007ffcfb48d598 [ 635.011865][T11347] [ 635.014996][T11347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 635.098485][ T36] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 635.362701][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1749'. [ 635.412638][ T36] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 635.412731][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.412755][ T36] usb 5-1: Product: syz [ 635.412771][ T36] usb 5-1: Manufacturer: syz [ 635.412786][ T36] usb 5-1: SerialNumber: syz [ 635.473913][ T36] usb 5-1: config 0 descriptor?? [ 635.510106][ T36] ch341 5-1:0.0: ch341-uart converter detected [ 635.512209][ T8064] usb 2-1: 0:2 : does not exist [ 635.512304][ T8064] usb 2-1: unit 5: unexpected type 0x0c [ 635.847658][ T36] usb 5-1: failed to receive control message: -121 [ 635.847724][ T36] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 635.923456][ T8064] usb 2-1: USB disconnect, device number 9 [ 636.125482][ T8785] udevd[8785]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 637.736821][T11382] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 637.739266][T11382] qnx6: wrong signature (magic) in superblock #1. [ 637.739304][T11382] qnx6: unable to read the first superblock [ 639.176976][T11394] FAULT_INJECTION: forcing a failure. [ 639.176976][T11394] name failslab, interval 1, probability 0, space 0, times 0 [ 639.177017][T11394] CPU: 0 UID: 0 PID: 11394 Comm: syz.3.1783 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 639.177051][T11394] Tainted: [L]=SOFTLOCKUP [ 639.177059][T11394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 639.177073][T11394] Call Trace: [ 639.177083][T11394] [ 639.177092][T11394] dump_stack_lvl+0xe8/0x150 [ 639.177133][T11394] should_fail_ex+0x467/0x600 [ 639.177171][T11394] should_failslab+0xa8/0x100 [ 639.177200][T11394] __kmalloc_noprof+0xfe/0x780 [ 639.177221][T11394] ? rcu_is_watching+0x15/0xb0 [ 639.177248][T11394] ? tomoyo_realpath_from_path+0xef/0x640 [ 639.177288][T11394] ? tomoyo_realpath_from_path+0xef/0x640 [ 639.177323][T11394] tomoyo_realpath_from_path+0xef/0x640 [ 639.177360][T11394] ? tomoyo_path_number_perm+0x219/0x5f0 [ 639.177396][T11394] tomoyo_path_number_perm+0x246/0x5f0 [ 639.177435][T11394] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 639.177470][T11394] ? __lock_acquire+0x683/0x2ce0 [ 639.177510][T11394] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 639.177535][T11394] ? hook_file_ioctl+0x1f3/0x600 [ 639.177563][T11394] ? lockdep_hardirqs_on+0x7a/0x110 [ 639.177608][T11394] ? __fget_files+0x2a/0x420 [ 639.177635][T11394] ? __fget_files+0x2a/0x420 [ 639.177657][T11394] ? __fget_files+0x3a8/0x420 [ 639.177679][T11394] ? __fget_files+0x2a/0x420 [ 639.177706][T11394] security_file_ioctl+0xc3/0x2a0 [ 639.177745][T11394] __se_sys_ioctl+0x47/0x170 [ 639.177776][T11394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.177802][T11394] do_syscall_64+0x174/0x580 [ 639.177827][T11394] ? trace_irq_disable+0x3b/0x140 [ 639.177864][T11394] ? clear_bhb_loop+0x40/0x90 [ 639.177894][T11394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.177918][T11394] RIP: 0033:0x7f84bb85e0d9 [ 639.177940][T11394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.177960][T11394] RSP: 002b:00007f84b9a95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 639.177984][T11394] RAX: ffffffffffffffda RBX: 00007f84bbae6090 RCX: 00007f84bb85e0d9 [ 639.178001][T11394] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 639.178015][T11394] RBP: 00007f84b9a95090 R08: 0000000000000000 R09: 0000000000000000 [ 639.178030][T11394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.178044][T11394] R13: 00007f84bbae6128 R14: 00007f84bbae6090 R15: 00007fff64a829c8 [ 639.178081][T11394] [ 639.459327][T11394] ERROR: Out of memory at tomoyo_realpath_from_path. [ 639.600329][ T8064] usb 5-1: USB disconnect, device number 8 [ 639.654393][ T8064] ch341 5-1:0.0: device disconnected [ 639.859131][ T37] audit: type=1326 audit(1786065370.940:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11400 comm="syz.4.1786" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5210b2e0d9 code=0x0 [ 640.121060][T11403] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1788'. [ 640.167631][T11416] FAULT_INJECTION: forcing a failure. [ 640.167631][T11416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.167670][T11416] CPU: 1 UID: 0 PID: 11416 Comm: syz.3.1792 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 640.167693][T11416] Tainted: [L]=SOFTLOCKUP [ 640.167698][T11416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 640.167709][T11416] Call Trace: [ 640.167715][T11416] [ 640.167722][T11416] dump_stack_lvl+0xe8/0x150 [ 640.167750][T11416] should_fail_ex+0x467/0x600 [ 640.167776][T11416] _copy_from_user+0x2d/0xb0 [ 640.167792][T11416] do_sock_getsockopt+0x200/0x7e0 [ 640.167815][T11416] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 640.167843][T11416] ? __fget_files+0x3a8/0x420 [ 640.167859][T11416] ? __fget_files+0x2a/0x420 [ 640.167912][T11416] __x64_sys_getsockopt+0x1aa/0x250 [ 640.167943][T11416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.167970][T11416] do_syscall_64+0x174/0x580 [ 640.167993][T11416] ? trace_irq_disable+0x3b/0x140 [ 640.168028][T11416] ? clear_bhb_loop+0x40/0x90 [ 640.168056][T11416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.168080][T11416] RIP: 0033:0x7f84bb85e0d9 [ 640.168100][T11416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.168119][T11416] RSP: 002b:00007f84b9ab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 640.168142][T11416] RAX: ffffffffffffffda RBX: 00007f84bbae5fa0 RCX: 00007f84bb85e0d9 [ 640.168159][T11416] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000004 [ 640.168172][T11416] RBP: 00007f84b9ab6090 R08: 0000200000000280 R09: 0000000000000000 [ 640.168187][T11416] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 640.168201][T11416] R13: 00007f84bbae6038 R14: 00007f84bbae5fa0 R15: 00007fff64a829c8 [ 640.168236][T11416] [ 641.229297][T11438] FAULT_INJECTION: forcing a failure. [ 641.229297][T11438] name failslab, interval 1, probability 0, space 0, times 0 [ 641.229346][T11438] CPU: 1 UID: 0 PID: 11438 Comm: syz.0.1802 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 641.229380][T11438] Tainted: [L]=SOFTLOCKUP [ 641.229388][T11438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 641.229402][T11438] Call Trace: [ 641.229410][T11438] [ 641.229419][T11438] dump_stack_lvl+0xe8/0x150 [ 641.229457][T11438] should_fail_ex+0x467/0x600 [ 641.229494][T11438] should_failslab+0xa8/0x100 [ 641.229521][T11438] __kmalloc_noprof+0xfe/0x780 [ 641.229541][T11438] ? rcu_is_watching+0x15/0xb0 [ 641.229568][T11438] ? tomoyo_realpath_from_path+0xef/0x640 [ 641.229592][T11438] ? tomoyo_realpath_from_path+0xef/0x640 [ 641.229624][T11438] tomoyo_realpath_from_path+0xef/0x640 [ 641.229665][T11438] ? tomoyo_path_number_perm+0x219/0x5f0 [ 641.229699][T11438] tomoyo_path_number_perm+0x246/0x5f0 [ 641.229737][T11438] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 641.229769][T11438] ? __lock_acquire+0x683/0x2ce0 [ 641.229807][T11438] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 641.229831][T11438] ? hook_file_ioctl+0x1f3/0x600 [ 641.229859][T11438] ? lockdep_hardirqs_on+0x7a/0x110 [ 641.229903][T11438] ? __fget_files+0x2a/0x420 [ 641.229929][T11438] ? __fget_files+0x2a/0x420 [ 641.229951][T11438] ? __fget_files+0x3a8/0x420 [ 641.229970][T11438] ? __fget_files+0x2a/0x420 [ 641.229996][T11438] security_file_ioctl+0xc3/0x2a0 [ 641.230035][T11438] __se_sys_ioctl+0x47/0x170 [ 641.230064][T11438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.230088][T11438] do_syscall_64+0x174/0x580 [ 641.230114][T11438] ? clear_bhb_loop+0x40/0x90 [ 641.230150][T11438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.230173][T11438] RIP: 0033:0x7f9ecbb9e0d9 [ 641.230192][T11438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.230212][T11438] RSP: 002b:00007f9ec9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.230235][T11438] RAX: ffffffffffffffda RBX: 00007f9ecbe25fa0 RCX: 00007f9ecbb9e0d9 [ 641.230251][T11438] RDX: 0000200000000040 RSI: 0000000000004b67 RDI: 0000000000000003 [ 641.230266][T11438] RBP: 00007f9ec9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 641.230279][T11438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.230293][T11438] R13: 00007f9ecbe26038 R14: 00007f9ecbe25fa0 R15: 00007ffd17748c68 [ 641.230328][T11438] [ 641.230337][T11438] ERROR: Out of memory at tomoyo_realpath_from_path. [ 641.408303][ T8064] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 641.572248][ T8064] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.572281][ T8064] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 641.574954][T11440] binder: BINDER_SET_CONTEXT_MGR already set [ 641.574970][T11440] binder: 11439:11440 ioctl 4018620d 200000000040 returned -16 [ 641.577015][ T8064] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 641.577048][ T8064] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 641.577072][ T8064] usb 5-1: SerialNumber: syz [ 642.098292][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1806'. [ 642.233898][ T8064] usb 5-1: 0:2 : does not exist [ 642.233989][ T8064] usb 5-1: unit 5: unexpected type 0x0b [ 642.485377][ T8064] usb 5-1: USB disconnect, device number 9 [ 642.748237][ T36] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 642.786860][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 642.901059][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.901100][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.901142][ T36] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 642.901169][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.957216][ T36] usb 3-1: config 0 descriptor?? [ 643.602053][ T36] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 643.602099][ T36] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 643.602129][ T36] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 643.602156][ T36] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 643.602186][ T36] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 643.602214][ T36] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 643.602242][ T36] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 645.976079][ T36] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 646.103401][ T36] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 646.103462][ T36] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 646.807012][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1830'. [ 646.842694][ T36] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -71 [ 646.957474][ T36] usb 3-1: USB disconnect, device number 11 [ 647.000685][T11493] fido_id[11493]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1E7D:2CF6.0002/report_descriptor': No such device [ 649.981808][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 650.133394][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.133427][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 650.134934][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 650.134965][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 650.134989][ T9] usb 2-1: SerialNumber: syz [ 650.683642][T11594] ubi16: attaching mtd0 [ 651.170040][T11594] ubi16: scanning is finished [ 651.170086][T11594] ubi16: empty MTD device detected [ 651.922340][ T9] usb 2-1: 0:2 : does not exist [ 651.922441][ T9] usb 2-1: unit 5: unexpected type 0x0b [ 651.984022][T11609] FAULT_INJECTION: forcing a failure. [ 651.984022][T11609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.984055][T11609] CPU: 0 UID: 0 PID: 11609 Comm: syz.0.1865 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 651.984081][T11609] Tainted: [L]=SOFTLOCKUP [ 651.984087][T11609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 651.984100][T11609] Call Trace: [ 651.984106][T11609] [ 651.984113][T11609] dump_stack_lvl+0xe8/0x150 [ 651.984145][T11609] should_fail_ex+0x467/0x600 [ 651.984173][T11609] _copy_from_user+0x2d/0xb0 [ 651.984191][T11609] ___sys_recvmsg+0x173/0x5a0 [ 651.984218][T11609] ? __pfx____sys_recvmsg+0x10/0x10 [ 651.984242][T11609] ? __fget_files+0x2a/0x420 [ 651.984273][T11609] ? __fget_files+0x3a8/0x420 [ 651.984299][T11609] __x64_sys_recvmsg+0x1b4/0x290 [ 651.984322][T11609] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 651.984357][T11609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.984381][T11609] do_syscall_64+0x174/0x580 [ 651.984400][T11609] ? trace_irq_disable+0x3b/0x140 [ 651.984429][T11609] ? clear_bhb_loop+0x40/0x90 [ 651.984451][T11609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.984472][T11609] RIP: 0033:0x7f9ecbb9e0d9 [ 651.984489][T11609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.984505][T11609] RSP: 002b:00007f9ec9df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 651.984524][T11609] RAX: ffffffffffffffda RBX: 00007f9ecbe25fa0 RCX: 00007f9ecbb9e0d9 [ 651.984538][T11609] RDX: 0000000000008dff RSI: 0000200000000340 RDI: 0000000000000004 [ 651.984550][T11609] RBP: 00007f9ec9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 651.984561][T11609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.984572][T11609] R13: 00007f9ecbe26038 R14: 00007f9ecbe25fa0 R15: 00007ffd17748c68 [ 651.984599][T11609] [ 652.328081][ T8064] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 652.458281][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1867'. [ 652.492169][ T8064] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 652.492207][ T8064] usb 3-1: config 0 interface 0 has no altsetting 0 [ 652.492242][ T8064] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 652.492266][ T8064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.543324][ T8064] usb 3-1: config 0 descriptor?? [ 654.388047][ T9] usb 2-1: USB disconnect, device number 10 [ 654.924454][ T8064] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 654.924500][ T8064] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 654.924531][ T8064] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 654.924560][ T8064] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 654.924588][ T8064] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 654.924617][ T8064] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 654.924646][ T8064] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 654.924674][ T8064] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 654.924703][ T8064] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 654.924739][ T8064] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 655.027806][T11625] binder: BINDER_SET_CONTEXT_MGR already set [ 655.027822][T11625] binder: 11606:11625 ioctl 4018620d 200000000100 returned -16 [ 655.054292][T11608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.054944][T11608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.092062][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.092210][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.092311][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.092411][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.092520][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.092628][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.092728][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.092827][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.092938][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.093049][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.093148][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.093248][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.093349][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.093458][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.093559][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.093677][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.093778][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.093885][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.093994][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.094091][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.094191][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.094307][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.094407][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.094512][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d4bd0 returned -22 [ 655.094613][T11608] binder: 11606:11608 ioctl 4020ae46 7f47f30d48d0 returned -22 [ 655.285524][T11625] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1866'. [ 655.524095][ T8064] waltop 0003:172F:0032.0003: hidraw0: USB HID v0.13 Device [HID 172f:0032] on usb-dummy_hcd.2-1/input0 [ 655.576986][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 655.967383][T11633] FAULT_INJECTION: forcing a failure. [ 655.967383][T11633] name failslab, interval 1, probability 0, space 0, times 0 [ 655.967440][T11633] CPU: 1 UID: 0 PID: 11633 Comm: syz.4.1875 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 655.967473][T11633] Tainted: [L]=SOFTLOCKUP [ 655.967480][T11633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.967496][T11633] Call Trace: [ 655.967504][T11633] [ 655.967514][T11633] dump_stack_lvl+0xe8/0x150 [ 655.967554][T11633] should_fail_ex+0x467/0x600 [ 655.967589][T11633] should_failslab+0xa8/0x100 [ 655.967615][T11633] __kmalloc_cache_noprof+0xa0/0x6b0 [ 655.967728][T11633] ? trace_parse_run_command+0x5f/0x380 [ 655.967861][T11633] ? trace_parse_run_command+0x5f/0x380 [ 655.967912][T11633] trace_parse_run_command+0x5f/0x380 [ 655.967957][T11633] ? __pfx_create_dyn_event+0x10/0x10 [ 655.967985][T11633] ? __pfx_dyn_event_write+0x10/0x10 [ 655.968012][T11633] vfs_write+0x29f/0xbb0 [ 655.968050][T11633] ? __pfx_vfs_write+0x10/0x10 [ 655.968078][T11633] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 655.968105][T11633] ? lockdep_hardirqs_on+0x7a/0x110 [ 655.968128][T11633] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 655.968154][T11633] ? mutex_lock_nested+0x152/0x1d0 [ 655.968187][T11633] ? fdget_pos+0x252/0x320 [ 655.968220][T11633] ksys_write+0x156/0x270 [ 655.968254][T11633] ? __pfx_ksys_write+0x10/0x10 [ 655.968290][T11633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.968318][T11633] do_syscall_64+0x174/0x580 [ 655.968343][T11633] ? trace_irq_disable+0x3b/0x140 [ 655.968378][T11633] ? clear_bhb_loop+0x40/0x90 [ 655.968409][T11633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.968433][T11633] RIP: 0033:0x7f5210b2e0d9 [ 655.968457][T11633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.968476][T11633] RSP: 002b:00007f520ed86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 655.968502][T11633] RAX: ffffffffffffffda RBX: 00007f5210db5fa0 RCX: 00007f5210b2e0d9 [ 655.968520][T11633] RDX: 000000000000001b RSI: 0000200000000100 RDI: 0000000000000003 [ 655.968535][T11633] RBP: 00007f520ed86090 R08: 0000000000000000 R09: 0000000000000000 [ 655.968550][T11633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.968565][T11633] R13: 00007f5210db6038 R14: 00007f5210db5fa0 R15: 00007ffe6b9a3fd8 [ 655.968603][T11633] [ 656.350798][ T8064] usb 3-1: USB disconnect, device number 12 [ 656.467400][T11594] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 656.467423][T11594] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 656.467436][T11594] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 656.467449][T11594] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 656.467461][T11594] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 656.467473][T11594] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 656.467485][T11594] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 325329203 [ 656.467501][T11594] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 656.471590][T11634] ubi16: background thread "ubi_bgt16d" started, PID 11634 [ 657.253559][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1882'. [ 661.476167][T11672] FAULT_INJECTION: forcing a failure. [ 661.476167][T11672] name failslab, interval 1, probability 0, space 0, times 0 [ 661.476208][T11672] CPU: 1 UID: 0 PID: 11672 Comm: syz.2.1890 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 661.476239][T11672] Tainted: [L]=SOFTLOCKUP [ 661.476247][T11672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.476267][T11672] Call Trace: [ 661.476275][T11672] [ 661.476283][T11672] dump_stack_lvl+0xe8/0x150 [ 661.476335][T11672] should_fail_ex+0x467/0x600 [ 661.476371][T11672] should_failslab+0xa8/0x100 [ 661.476399][T11672] __kmalloc_noprof+0xfe/0x780 [ 661.476420][T11672] ? rcu_is_watching+0x15/0xb0 [ 661.476449][T11672] ? tomoyo_realpath_from_path+0xef/0x640 [ 661.476474][T11672] ? tomoyo_realpath_from_path+0xef/0x640 [ 661.476507][T11672] tomoyo_realpath_from_path+0xef/0x640 [ 661.476543][T11672] ? tomoyo_path_number_perm+0x219/0x5f0 [ 661.476578][T11672] tomoyo_path_number_perm+0x246/0x5f0 [ 661.476621][T11672] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 661.476656][T11672] ? __lock_acquire+0x683/0x2ce0 [ 661.476694][T11672] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 661.476718][T11672] ? hook_file_ioctl+0x1f3/0x600 [ 661.476747][T11672] ? lockdep_hardirqs_on+0x7a/0x110 [ 661.476789][T11672] ? __fget_files+0x2a/0x420 [ 661.476813][T11672] ? __fget_files+0x2a/0x420 [ 661.476830][T11672] ? __fget_files+0x3a8/0x420 [ 661.476848][T11672] ? __fget_files+0x2a/0x420 [ 661.476874][T11672] security_file_ioctl+0xc3/0x2a0 [ 661.476912][T11672] __se_sys_ioctl+0x47/0x170 [ 661.476941][T11672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.476967][T11672] do_syscall_64+0x174/0x580 [ 661.476993][T11672] ? clear_bhb_loop+0x40/0x90 [ 661.477022][T11672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.477046][T11672] RIP: 0033:0x7f47f4e7e0d9 [ 661.477067][T11672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.477087][T11672] RSP: 002b:00007f47f30d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.477112][T11672] RAX: ffffffffffffffda RBX: 00007f47f5105fa0 RCX: 00007f47f4e7e0d9 [ 661.477128][T11672] RDX: 0000200000000000 RSI: 0000000000004b4b RDI: 0000000000000003 [ 661.477142][T11672] RBP: 00007f47f30d6090 R08: 0000000000000000 R09: 0000000000000000 [ 661.477156][T11672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.477169][T11672] R13: 00007f47f5106038 R14: 00007f47f5105fa0 R15: 00007ffcfb48d598 [ 661.477205][T11672] [ 661.529259][T11672] ERROR: Out of memory at tomoyo_realpath_from_path. [ 664.176536][T11706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1902'. [ 664.595007][T11717] FAULT_INJECTION: forcing a failure. [ 664.595007][T11717] name failslab, interval 1, probability 0, space 0, times 0 [ 664.595047][T11717] CPU: 1 UID: 0 PID: 11717 Comm: syz.0.1906 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 664.595077][T11717] Tainted: [L]=SOFTLOCKUP [ 664.595085][T11717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 664.595099][T11717] Call Trace: [ 664.595108][T11717] [ 664.595117][T11717] dump_stack_lvl+0xe8/0x150 [ 664.595155][T11717] should_fail_ex+0x467/0x600 [ 664.595192][T11717] should_failslab+0xa8/0x100 [ 664.595221][T11717] __kmalloc_noprof+0xfe/0x780 [ 664.595242][T11717] ? vfs_write+0x231/0xbb0 [ 664.595274][T11717] ? kernfs_fop_write_iter+0x158/0x540 [ 664.595304][T11717] ? kernfs_fop_write_iter+0x158/0x540 [ 664.595342][T11717] kernfs_fop_write_iter+0x158/0x540 [ 664.595379][T11717] vfs_write+0x61e/0xbb0 [ 664.595416][T11717] ? __pfx_vfs_write+0x10/0x10 [ 664.595444][T11717] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 664.595469][T11717] ? lockdep_hardirqs_on+0x7a/0x110 [ 664.595495][T11717] ? mutex_lock_nested+0x152/0x1d0 [ 664.595525][T11717] ? fdget_pos+0x252/0x320 [ 664.595557][T11717] ksys_write+0x156/0x270 [ 664.595591][T11717] ? __pfx_ksys_write+0x10/0x10 [ 664.595635][T11717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.595661][T11717] do_syscall_64+0x174/0x580 [ 664.595685][T11717] ? trace_irq_disable+0x3b/0x140 [ 664.595722][T11717] ? clear_bhb_loop+0x40/0x90 [ 664.595751][T11717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.595775][T11717] RIP: 0033:0x7f9ecbb9e0d9 [ 664.595796][T11717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.595815][T11717] RSP: 002b:00007f9ec9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 664.595839][T11717] RAX: ffffffffffffffda RBX: 00007f9ecbe25fa0 RCX: 00007f9ecbb9e0d9 [ 664.595856][T11717] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000003 [ 664.595870][T11717] RBP: 00007f9ec9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 664.595885][T11717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.595899][T11717] R13: 00007f9ecbe26038 R14: 00007f9ecbe25fa0 R15: 00007ffd17748c68 [ 664.595937][T11717] [ 665.199412][ T8788] udevd[8788]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 665.845182][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'. [ 666.234814][T11751] tracefs: Unknown parameter 'discard' [ 666.387855][T11758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1919'. [ 667.469540][T11779] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 667.471463][T11779] qnx6: wrong signature (magic) in superblock #1. [ 667.471477][T11779] qnx6: unable to read the first superblock [ 668.314388][ T8788] udevd[8788]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 668.477531][T11247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 668.535151][T11247] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 668.557282][T11247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 668.594347][T11247] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 668.604468][T11247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 668.756502][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 671.249538][ T6805] Bluetooth: hci5: command tx timeout [ 672.817225][T11826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1936'. [ 673.291668][ T6805] Bluetooth: hci5: command tx timeout [ 673.328393][T11783] wlan0 speed is unknown, defaulting to 1000 [ 673.865831][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 673.940155][ T8788] udevd[8788]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 674.219257][ T37] audit: type=1326 audit(1786065405.310:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11843 comm="syz.2.1942" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47f4e7e0d9 code=0x0 [ 674.490382][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.490423][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.379080][ T6805] Bluetooth: hci5: command tx timeout [ 677.448086][ T6805] Bluetooth: hci5: command tx timeout [ 678.361888][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.361930][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.448137][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 678.636331][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.636361][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.637764][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 678.637797][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 678.637821][ T9] usb 5-1: SerialNumber: syz [ 679.135786][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.135822][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.297084][T11889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.316841][ T9] usb 5-1: 0:2 : does not exist [ 679.316923][ T9] usb 5-1: unit 5: unexpected type 0x0b [ 679.662327][ T9] usb 5-1: USB disconnect, device number 10 [ 679.714872][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 680.115707][T11894] FAULT_INJECTION: forcing a failure. [ 680.115707][T11894] name failslab, interval 1, probability 0, space 0, times 0 [ 680.115748][T11894] CPU: 1 UID: 0 PID: 11894 Comm: syz.2.1955 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 680.115781][T11894] Tainted: [L]=SOFTLOCKUP [ 680.115790][T11894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 680.115804][T11894] Call Trace: [ 680.115813][T11894] [ 680.115822][T11894] dump_stack_lvl+0xe8/0x150 [ 680.115861][T11894] should_fail_ex+0x467/0x600 [ 680.115897][T11894] should_failslab+0xa8/0x100 [ 680.115926][T11894] __kmalloc_node_noprof+0x107/0x7d0 [ 680.115952][T11894] ? load_msg+0x41/0x3b0 [ 680.116048][T11894] ? load_msg+0x41/0x3b0 [ 680.116082][T11894] load_msg+0x41/0x3b0 [ 680.116116][T11894] do_msgrcv+0x278/0x13f0 [ 680.116149][T11894] ? __pfx_do_msg_fill+0x10/0x10 [ 680.116184][T11894] ? do_sys_openat2+0x14e/0x200 [ 680.116267][T11894] ? __pfx_do_msgrcv+0x10/0x10 [ 680.116299][T11894] ? ksys_write+0x202/0x270 [ 680.116329][T11894] ? __pfx_ksys_write+0x10/0x10 [ 680.116364][T11894] ? __x64_sys_msgrcv+0x20/0xd0 [ 680.116394][T11894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.116424][T11894] do_syscall_64+0x174/0x580 [ 680.116450][T11894] ? trace_irq_disable+0x3b/0x140 [ 680.116484][T11894] ? clear_bhb_loop+0x40/0x90 [ 680.116514][T11894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.116539][T11894] RIP: 0033:0x7f47f4e7e0d9 [ 680.116561][T11894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.116582][T11894] RSP: 002b:00007f47f30d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 680.116607][T11894] RAX: ffffffffffffffda RBX: 00007f47f5105fa0 RCX: 00007f47f4e7e0d9 [ 680.116625][T11894] RDX: 00000000fffffcef RSI: 0000200000000000 RDI: 0000000000000000 [ 680.116641][T11894] RBP: 00007f47f30d6090 R08: 0000000000004800 R09: 0000000000000000 [ 680.116656][T11894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.116671][T11894] R13: 00007f47f5106038 R14: 00007f47f5105fa0 R15: 00007ffcfb48d598 [ 680.116707][T11894] [ 680.505234][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.505278][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.557562][ T37] audit: type=1326 audit(1786065411.640:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11895 comm="syz.2.1956" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47f4e7e0d9 code=0x0 [ 681.483915][T11783] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.484041][T11783] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.484291][T11783] bridge_slave_0: entered allmulticast mode [ 681.521796][T11783] bridge_slave_0: entered promiscuous mode [ 683.705590][T11783] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.705820][T11783] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.706068][T11783] bridge_slave_1: entered allmulticast mode [ 683.713634][T11783] bridge_slave_1: entered promiscuous mode [ 685.001517][ T8055] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 685.155279][ T8055] usb 3-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=61.47 [ 685.155323][ T8055] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.209956][ T8055] usb 3-1: config 0 descriptor?? [ 685.247514][ T8055] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 685.360596][T11783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.729709][ T8055] usb 3-1: USB disconnect, device number 13 [ 685.947681][T11783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.358934][ T37] audit: type=1326 audit(1786065417.450:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11953 comm="syz.3.1973" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84bb85e0d9 code=0x0 [ 686.399014][T11955] FAULT_INJECTION: forcing a failure. [ 686.399014][T11955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.399049][T11955] CPU: 1 UID: 0 PID: 11955 Comm: syz.1.1972 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 686.399075][T11955] Tainted: [L]=SOFTLOCKUP [ 686.399081][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 686.399093][T11955] Call Trace: [ 686.399100][T11955] [ 686.399107][T11955] dump_stack_lvl+0xe8/0x150 [ 686.399138][T11955] should_fail_ex+0x467/0x600 [ 686.399166][T11955] _copy_from_user+0x2d/0xb0 [ 686.399184][T11955] do_sys_poll+0x258/0xf50 [ 686.399300][T11955] ? __lock_acquire+0x683/0x2ce0 [ 686.399327][T11955] ? __pfx_do_sys_poll+0x10/0x10 [ 686.399355][T11955] ? is_bpf_text_address+0x292/0x2b0 [ 686.399374][T11955] ? is_bpf_text_address+0x26/0x2b0 [ 686.399465][T11955] ? set_user_sigmask+0xcd/0x1c0 [ 686.399519][T11955] ? __pfx_set_user_sigmask+0x10/0x10 [ 686.399539][T11955] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 686.399571][T11955] __se_sys_ppoll+0x209/0x2b0 [ 686.399597][T11955] ? fput+0xa0/0xd0 [ 686.399625][T11955] ? __pfx___se_sys_ppoll+0x10/0x10 [ 686.399651][T11955] ? __pfx_ksys_write+0x10/0x10 [ 686.399676][T11955] ? __x64_sys_ppoll+0x20/0xc0 [ 686.399701][T11955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.399720][T11955] do_syscall_64+0x174/0x580 [ 686.399738][T11955] ? trace_irq_disable+0x3b/0x140 [ 686.399765][T11955] ? clear_bhb_loop+0x40/0x90 [ 686.399787][T11955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.399804][T11955] RIP: 0033:0x7ff6e5b6e0d9 [ 686.399823][T11955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.399838][T11955] RSP: 002b:00007ff6e3da5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 686.399857][T11955] RAX: ffffffffffffffda RBX: 00007ff6e5df6090 RCX: 00007ff6e5b6e0d9 [ 686.399869][T11955] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 686.399880][T11955] RBP: 00007ff6e3da5090 R08: 0000000000000000 R09: 0000000000000000 [ 686.399891][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.399901][T11955] R13: 00007ff6e5df6128 R14: 00007ff6e5df6090 R15: 00007fffd2587e58 [ 686.399926][T11955] [ 686.802926][T11783] team0: Port device team_slave_0 added [ 686.853252][T11958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1974'. [ 687.052929][ T12] bridge_slave_1: left allmulticast mode [ 687.053131][ T12] bridge_slave_1: left promiscuous mode [ 687.090275][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.393564][ T12] bridge_slave_0: left allmulticast mode [ 687.393720][ T12] bridge_slave_0: left promiscuous mode [ 687.394016][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.191892][T11983] FAULT_INJECTION: forcing a failure. [ 690.191892][T11983] name failslab, interval 1, probability 0, space 0, times 0 [ 690.191926][T11983] CPU: 1 UID: 0 PID: 11983 Comm: syz.4.1979 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 690.191950][T11983] Tainted: [L]=SOFTLOCKUP [ 690.191955][T11983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 690.191965][T11983] Call Trace: [ 690.191972][T11983] [ 690.191980][T11983] dump_stack_lvl+0xe8/0x150 [ 690.192008][T11983] should_fail_ex+0x467/0x600 [ 690.192038][T11983] should_failslab+0xa8/0x100 [ 690.192059][T11983] kmem_cache_alloc_noprof+0xa4/0x650 [ 690.192085][T11983] ? mas_alloc_nodes+0x291/0x350 [ 690.192101][T11983] ? mas_alloc_nodes+0x291/0x350 [ 690.192127][T11983] mas_alloc_nodes+0x291/0x350 [ 690.192147][T11983] mas_preallocate+0x2cf/0x630 [ 690.192169][T11983] ? __pfx_mas_preallocate+0x10/0x10 [ 690.192192][T11983] ? __asan_memset+0x22/0x50 [ 690.192284][T11983] ? init_multi_vma_prep+0x466/0x550 [ 690.192343][T11983] commit_merge+0x20f/0x650 [ 690.192366][T11983] ? __pfx_commit_merge+0x10/0x10 [ 690.192391][T11983] ? vma_modify+0xbcd/0x1ec0 [ 690.192419][T11983] vma_modify+0x1788/0x1ec0 [ 690.192450][T11983] vma_modify_flags+0x24b/0x330 [ 690.192472][T11983] ? __pfx_vma_modify_flags+0x10/0x10 [ 690.192513][T11983] mlock_fixup+0x3bf/0x830 [ 690.192540][T11983] ? __pfx_mlock_fixup+0x10/0x10 [ 690.192564][T11983] ? mas_find+0xab1/0xcf0 [ 690.192587][T11983] apply_mlockall_flags+0x310/0x400 [ 690.192611][T11983] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 690.192642][T11983] ? bpf_lsm_capable+0x9/0x20 [ 690.192664][T11983] __se_sys_mlockall+0x28a/0x510 [ 690.192687][T11983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.192704][T11983] do_syscall_64+0x174/0x580 [ 690.192722][T11983] ? trace_irq_disable+0x3b/0x140 [ 690.192747][T11983] ? clear_bhb_loop+0x40/0x90 [ 690.192767][T11983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.192783][T11983] RIP: 0033:0x7f5210b2e0d9 [ 690.192799][T11983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.192813][T11983] RSP: 002b:00007f520ed65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 690.192837][T11983] RAX: ffffffffffffffda RBX: 00007f5210db6090 RCX: 00007f5210b2e0d9 [ 690.192854][T11983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 690.192863][T11983] RBP: 00007f520ed65090 R08: 0000000000000000 R09: 0000000000000000 [ 690.192873][T11983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.192888][T11983] R13: 00007f5210db6128 R14: 00007f5210db6090 R15: 00007ffe6b9a3fd8 [ 690.192914][T11983] [ 690.337772][ T8788] ------------[ cut here ]------------ [ 690.337815][ T8788] kcov->t != t [ 690.337855][ T8788] WARNING: kernel/kcov.c:475 at kcov_task_exit+0x181/0x240, CPU#0: udevd/8788 [ 690.338121][ T8788] Modules linked in: [ 690.338199][ T8788] CPU: 0 UID: 0 PID: 8788 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 690.338285][ T8788] Tainted: [L]=SOFTLOCKUP [ 690.338307][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 690.338329][ T8788] RIP: 0010:kcov_task_exit+0x181/0x240 [ 690.338424][ T8788] Code: 90 00 00 00 e8 a0 d3 57 00 4c 89 f7 5b 41 5e 41 5f e9 83 93 5d 00 7c 40 5b 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 690.338499][ T8788] RSP: 0018:ffffc90004357d20 EFLAGS: 00010206 [ 690.338560][ T8788] RAX: acc57263dcf1d600 RBX: ffff888029581f00 RCX: 0000000000000000 [ 690.338649][ T8788] RDX: 00000000b78cd3ad RSI: ffffffff8bca5360 RDI: 00000000ffffffff [ 690.338694][ T8788] RBP: ffffc90004357e80 R08: ffffffff8b43fb20 R09: 0000000000000000 [ 690.338739][ T8788] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 690.338782][ T8788] R13: ffff888029581f00 R14: ffff888036001300 R15: ffff888036001308 [ 690.338827][ T8788] FS: 00007f1cc4bb8880(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 690.338893][ T8788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.338930][ T8788] CR2: 00007f1cc535be80 CR3: 0000000031a92000 CR4: 00000000003526f0 [ 690.338981][ T8788] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 690.339017][ T8788] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 690.339066][ T8788] Call Trace: [ 690.339089][ T8788] [ 690.339115][ T8788] do_exit+0x159/0x2360 [ 690.339268][ T8788] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 690.339343][ T8788] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 690.339460][ T8788] ? reacquire_held_locks+0x104/0x190 [ 690.339536][ T8788] ? __pfx_do_exit+0x10/0x10 [ 690.339650][ T8788] ? rt_spin_unlock+0x157/0x200 [ 690.339777][ T8788] ? rt_spin_unlock+0x163/0x200 [ 690.339889][ T8788] do_group_exit+0x22d/0x2f0 [ 690.339995][ T8788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.340063][ T8788] __x64_sys_exit_group+0x3f/0x40 [ 690.340159][ T8788] x64_sys_call+0x221a/0x2240 [ 690.340254][ T8788] do_syscall_64+0x174/0x580 [ 690.340320][ T8788] ? trace_irq_disable+0x3b/0x140 [ 690.340428][ T8788] ? clear_bhb_loop+0x40/0x90 [ 690.340505][ T8788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.340582][ T8788] RIP: 0033:0x7f1cc4cf06c5 [ 690.340645][ T8788] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 690.340699][ T8788] RSP: 002b:00007ffcdb69a688 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 690.340765][ T8788] RAX: ffffffffffffffda RBX: 000055dcd5d8a440 RCX: 00007f1cc4cf06c5 [ 690.340809][ T8788] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 690.340844][ T8788] RBP: 000055dcd5d76910 R08: 0000000000000000 R09: 0000000000000000 [ 690.340880][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.340915][ T8788] R13: 00007ffcdb69a6d0 R14: 0000000000000000 R15: 0000000000000000 [ 690.341003][ T8788] [ 690.341047][ T8788] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 690.341102][ T8788] CPU: 0 UID: 0 PID: 8788 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 690.341219][ T8788] Tainted: [L]=SOFTLOCKUP [ 690.341244][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 690.341278][ T8788] Call Trace: [ 690.341301][ T8788] [ 690.341323][ T8788] vpanic+0x56c/0xa60 [ 690.341429][ T8788] ? __pfx__printk+0x10/0x10 [ 690.341504][ T8788] ? __pfx_vpanic+0x10/0x10 [ 690.341591][ T8788] ? is_bpf_text_address+0x292/0x2b0 [ 690.341658][ T8788] ? is_bpf_text_address+0x26/0x2b0 [ 690.341737][ T8788] panic+0xc5/0xd0 [ 690.341770][ T8788] ? __pfx_panic+0x10/0x10 [ 690.341822][ T8788] __warn+0x315/0x4c0 [ 690.341854][ T8788] ? kcov_task_exit+0x181/0x240 [ 690.341888][ T8788] ? kcov_task_exit+0x181/0x240 [ 690.341922][ T8788] __report_bug+0x276/0x570 [ 690.341954][ T8788] ? kcov_task_exit+0x181/0x240 [ 690.341987][ T8788] ? __pfx___report_bug+0x10/0x10 [ 690.342015][ T8788] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 690.342053][ T8788] ? rt_spin_lock+0x1e0/0x400 [ 690.342088][ T8788] ? rt_spin_lock+0x1e0/0x400 [ 690.342124][ T8788] ? kcov_task_exit+0x181/0x240 [ 690.342158][ T8788] report_bug+0x16a/0x220 [ 690.342185][ T8788] ? kcov_task_exit+0x181/0x240 [ 690.342218][ T8788] ? kcov_task_exit+0x183/0x240 [ 690.342250][ T8788] handle_bug+0x9c/0x200 [ 690.342282][ T8788] exc_invalid_op+0x1a/0x50 [ 690.342313][ T8788] asm_exc_invalid_op+0x1a/0x20 [ 690.342337][ T8788] RIP: 0010:kcov_task_exit+0x181/0x240 [ 690.342381][ T8788] Code: 90 00 00 00 e8 a0 d3 57 00 4c 89 f7 5b 41 5e 41 5f e9 83 93 5d 00 7c 40 5b 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 690.342404][ T8788] RSP: 0018:ffffc90004357d20 EFLAGS: 00010206 [ 690.342425][ T8788] RAX: acc57263dcf1d600 RBX: ffff888029581f00 RCX: 0000000000000000 [ 690.342443][ T8788] RDX: 00000000b78cd3ad RSI: ffffffff8bca5360 RDI: 00000000ffffffff [ 690.342460][ T8788] RBP: ffffc90004357e80 R08: ffffffff8b43fb20 R09: 0000000000000000 [ 690.342477][ T8788] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 690.342492][ T8788] R13: ffff888029581f00 R14: ffff888036001300 R15: ffff888036001308 [ 690.342518][ T8788] ? rt_spin_lock+0x1e0/0x400 [ 690.342563][ T8788] do_exit+0x159/0x2360 [ 690.342596][ T8788] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 690.342623][ T8788] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 690.342660][ T8788] ? reacquire_held_locks+0x104/0x190 [ 690.342689][ T8788] ? __pfx_do_exit+0x10/0x10 [ 690.342730][ T8788] ? rt_spin_unlock+0x157/0x200 [ 690.342770][ T8788] ? rt_spin_unlock+0x163/0x200 [ 690.342808][ T8788] do_group_exit+0x22d/0x2f0 [ 690.342847][ T8788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.342874][ T8788] __x64_sys_exit_group+0x3f/0x40 [ 690.342913][ T8788] x64_sys_call+0x221a/0x2240 [ 690.342950][ T8788] do_syscall_64+0x174/0x580 [ 690.342975][ T8788] ? trace_irq_disable+0x3b/0x140 [ 690.343013][ T8788] ? clear_bhb_loop+0x40/0x90 [ 690.343044][ T8788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.343069][ T8788] RIP: 0033:0x7f1cc4cf06c5 [ 690.343090][ T8788] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 690.343112][ T8788] RSP: 002b:00007ffcdb69a688 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 690.343136][ T8788] RAX: ffffffffffffffda RBX: 000055dcd5d8a440 RCX: 00007f1cc4cf06c5 [ 690.343154][ T8788] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 690.343169][ T8788] RBP: 000055dcd5d76910 R08: 0000000000000000 R09: 0000000000000000 [ 690.343184][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.343199][ T8788] R13: 00007ffcdb69a6d0 R14: 0000000000000000 R15: 0000000000000000 [ 690.343233][ T8788] [ 690.343847][ T8788] Kernel Offset: disabled