last executing test programs: 12.065668632s ago: executing program 2 (id=4269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000003200)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040080}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e06010300000000000000000100000005000100070000000900020073797a30004000008afc5f122e950fa143b605622d955d900b2b0fd286fab4fceb439ded350ae7a00c47f9f7f3be7f554a"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x6400c804) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz1\x00', {0x3, 0xd, 0x4, 0x58e}, 0x17, [0x0, 0x2, 0xfffffff8, 0x7, 0x2, 0x2, 0xe737, 0x6, 0xfff, 0x5, 0x9, 0xfffffffc, 0x51f, 0x68000000, 0x10001, 0x9, 0x580e, 0x4, 0x7, 0x80, 0x0, 0xb, 0x5, 0x85, 0x1, 0x3, 0x4c3a, 0x1, 0x4, 0x1, 0x10001, 0x9, 0x6, 0x1, 0x0, 0xfff, 0x9, 0x9, 0x7b0, 0x1, 0x3, 0x3, 0x8, 0x1, 0xfffff8ba, 0x6, 0x9, 0x1, 0xfffffffb, 0x7ff, 0xfffff001, 0x400, 0x305, 0xd, 0x0, 0x6, 0x6000000, 0x10, 0x0, 0x7, 0x20000006, 0x2, 0xee1, 0x4], [0x2, 0x3, 0x7, 0xfffffe96, 0x9, 0x0, 0x80, 0xa, 0x80, 0x3c, 0x0, 0x1, 0x1ff, 0xa, 0x8, 0x4, 0xfffffffc, 0x365e, 0x3ff, 0x10, 0x4, 0x5, 0x8, 0x2, 0x7fff, 0x3, 0x3, 0xffff, 0xfffffa65, 0x2, 0x7fffffff, 0x9, 0x9, 0x5, 0x8, 0x6, 0xb, 0xf7, 0xcc7, 0x7fffffff, 0x10, 0x2, 0xfffffffb, 0x40, 0x0, 0x2, 0x2, 0x80000001, 0x9, 0x100000, 0x8, 0x4, 0x4, 0x1, 0x7, 0x100, 0x0, 0x0, 0x1d4, 0x1, 0x1, 0xfffffff9, 0xf7, 0x8], [0x8, 0x4cd, 0x3, 0x1, 0x3, 0x0, 0xb, 0x6, 0xffff, 0x4, 0x800, 0x101, 0xdce6, 0xa, 0xf, 0x8, 0x6, 0x1, 0x0, 0x101, 0x200, 0x22, 0xb, 0x0, 0x40, 0x0, 0xc, 0x9, 0xff, 0x37509810, 0x2, 0x0, 0xf2, 0x7ff, 0x7, 0xfffffffa, 0x24, 0x1, 0x3, 0x6, 0x8, 0x0, 0xe5, 0xfffffffa, 0x9, 0x7, 0x0, 0x9, 0x1, 0x4, 0xb, 0x4, 0x40, 0x6, 0x0, 0x7, 0x2d6c57e4, 0x8000, 0x7, 0x5, 0x6, 0x10, 0x7], [0x8000, 0x9, 0x32, 0x0, 0x7, 0x3, 0x6, 0x7f, 0x5, 0x7f, 0x4d1c, 0xffff, 0xfffff968, 0xee, 0x7, 0x1ff, 0x0, 0xfffffbff, 0x7, 0x101, 0xc80, 0x9, 0x9, 0x3, 0x7e, 0x71, 0x5, 0x1ff, 0x7, 0xfffffff8, 0x5, 0x8, 0x8d, 0x34, 0x9377, 0x4, 0x1, 0x6, 0x1ff, 0x1ff, 0x7ff, 0x40, 0xd, 0x4, 0x7, 0xffffffc0, 0x8, 0x1, 0x0, 0x65, 0x7e, 0x0, 0x1ea, 0x0, 0x800, 0x4, 0xc, 0x2, 0x10001, 0x7fffffff, 0x8, 0x1000, 0x0, 0xffffff7f]}, 0x45c) close(0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r5, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 10.778110659s ago: executing program 2 (id=4277): syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x80) setreuid(0xffffffffffffffff, 0xee00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x48, 0x37, 0x80, 0x9}, {0x6, 0x6, 0x2, 0x57c}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0xc0403d11, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='fd/3\x00') 9.766368491s ago: executing program 1 (id=4278): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {&(0x7f0000000780)}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x30}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x808, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1ac20, 0x404}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4894}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x0, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x6f4}}, 0x0) 9.370548139s ago: executing program 1 (id=4283): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002980)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @generic="25c491de19f3a847a24298ff9c23f68de11f154b476902821129dc2cfa594dd96cbbc154ddff228f3e08779ad7c5a364e26997b17611c3efa69a62497be3ea0eb00353f92245ec87e202a4ec475b2278ae4ff480f069096e87a6d68e8b87de552b1d36d50a9239855c59020efe1763609c6981ca3077bf0c22590477a2c8023361834c4eb86db1c1d9a41989cbe32076de91f4fa791e0ae9424c1454eac78d8fcb108324efd51f334af54c1a06e7b907b306f3b47a246bb6b75ac26f9aa7e65d918b3b858c784fc78a011d1ab37d739ec7eed8d021"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) 8.962255134s ago: executing program 1 (id=4288): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40010) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000100)) (fail_nth: 1) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r5, 0x0, 0x52) 7.565921598s ago: executing program 0 (id=4289): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000008b00000076000000000000002700000000cca51d9300000000000000990415e9fdddf411b40e47fe918fb8a776e6697c77f9c32feeb35916fc7ff7341e8323af3bccd00000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 7.167507947s ago: executing program 1 (id=4292): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r0], 0x50) r1 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, 0x0) 7.147643671s ago: executing program 0 (id=4293): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {&(0x7f0000000780)}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x30}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x808, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1ac20, 0x404}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4894}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x0, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x6f4}}, 0x0) 6.859429458s ago: executing program 0 (id=4297): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6.72483985s ago: executing program 0 (id=4298): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="068cba240a87", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x81, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x7, 0x65, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}}}}, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x174}, 0x1, 0x0, 0x0, 0x20040008}, 0x8001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x8}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x2, 0x3, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) 6.201481698s ago: executing program 4 (id=4299): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async) close(r2) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000240)=0x9, 0x4) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000926bd7000fcdbdf255700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ff0000003f0000000600950003000000060095000200000006009500ff7f0000060095000700000006009500040000000600950007000000060095000900000006009500480800000600950002000000fab3f8c7fb4b5a76cc83d8ffd80bb02781a39c1023d09c890d12a50853cb830f2d67c7317f409e2e3a1f9987efb441920b15a0473d3b6565799e1ae2a4667ea2445c4e2cf816e188b9fa2a321c748c54536b27c3540de2201d65f152acb3eb"], 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) (async) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000100000000000000000000006119c000000000009500000000000000f75764f7e6d1993cfde2734704296ff5d04a51b8f33604edab07bf47a10281fdd95ff4813d9d420c0afc92af01d97562d8c8dbc6ee39dd3d3fa7c75a86313004a3736af8f4fa94d0e5228992866fb3fc29f92dfc5d1ed4056ee490810ac00f66b712dd49"], &(0x7f0000000080)='GPL\x00'}, 0x80) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffa, 0x8080000, 0x0, 0xffffffffffffffff, 0x15}) 5.866106023s ago: executing program 0 (id=4302): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="200a0900000009ad"], 0x0, 0x0, 0x0}, 0x0) 5.864457447s ago: executing program 4 (id=4303): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r2, 0x0, r1}) (fail_nth: 1) 5.487427504s ago: executing program 4 (id=4305): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4196a}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x9}, @IFLA_VF_PORTS={0x4}]}, 0x40}}, 0x20084084) 5.457600541s ago: executing program 2 (id=4307): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {&(0x7f0000000780)}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x30}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x808, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1ac20, 0x404}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4894}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x0, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[], 0x6f4}}, 0x0) 5.262127945s ago: executing program 4 (id=4308): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 5.145906925s ago: executing program 2 (id=4310): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618", 0x6f}, {0x0}, {&(0x7f0000000780)}], 0x3}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x30}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, r0, 0x808, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r0, 0x1ac20, 0x404}}}}}}, @IFLA_AF_SPEC={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4894}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r2, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff08021100"], 0x6f4}}, 0x0) 5.067721077s ago: executing program 4 (id=4311): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd"], 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) madvise(&(0x7f0000a2b000/0x4000)=nil, 0x4000, 0x16) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 4.918392292s ago: executing program 1 (id=4313): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) membarrier(0x2, 0x0) r2 = io_uring_setup(0x2f08, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r1}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) preadv2(r2, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/230, 0xe6}, {&(0x7f00000006c0)=""/6, 0x6}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/85, 0x55}, {&(0x7f0000001900)=""/44, 0x2c}, {0x0}], 0x6, 0x6b3, 0x5, 0x41a6988b36f563b0) pipe(&(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002c80)={0x0, 0x5, 0x3, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000003080)={{r3}, 0x0, 0xa, @unused=[0xfffffffffffffffe, 0x1, 0x5, 0xd], @devid=r5}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x2b, '\x00', @buffer={"010d1de90c6171360aaf4716308a633fda925d1085c6b9f70f72ad6cc5f48537", 0x20}, 0xfffffff9}, {0xa, '\x00', @data, 0x7ff}, {0x26, '\x00', @st={0x4, [{0x3, @svalue=0x4}, {0x2, @svalue=0x775a}, {0x3, @svalue=0xd2}, {0x1, @svalue=0xfffffffffffffff8}]}, 0x7fe}]}) ftruncate(0xffffffffffffffff, 0xffffffffffffffff) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f00000001c0)=0xffffffe3) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = syz_io_uring_setup(0x111, &(0x7f0000000200)={0x0, 0xfec9, 0x400, 0x3, 0x3d4}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x4}, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r9, &(0x7f0000000180)=0xfe5f, 0x12) 4.448839322s ago: executing program 3 (id=4314): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) membarrier(0x2, 0x0) r2 = io_uring_setup(0x2f08, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r1}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) preadv2(r2, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/230, 0xe6}, {&(0x7f00000006c0)=""/6, 0x6}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/85, 0x55}, {&(0x7f0000001900)=""/44, 0x2c}, {0x0}], 0x6, 0x6b3, 0x5, 0x41a6988b36f563b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002c80)={0x0, 0x5, 0x3, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000003080)={{r3}, 0x0, 0xa, @unused=[0xfffffffffffffffe, 0x1, 0x5, 0xd], @devid=r5}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x2b, '\x00', @buffer={"010d1de90c6171360aaf4716308a633fda925d1085c6b9f70f72ad6cc5f48537", 0x20}, 0xfffffff9}, {0xa, '\x00', @data, 0x7ff}, {0x26, '\x00', @st={0x4, [{0x3, @svalue=0x4}, {0x2, @svalue=0x775a}, {0x3, @svalue=0xd2}, {0x1, @svalue=0xfffffffffffffff8}]}, 0x7fe}]}) ftruncate(0xffffffffffffffff, 0xffffffffffffffff) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f00000001c0)=0xffffffe3) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = syz_io_uring_setup(0x111, &(0x7f0000000200)={0x0, 0xfec9, 0x400, 0x3, 0x3d4}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x4}, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r9, &(0x7f0000000180)=0xfe5f, 0x12) 3.714204056s ago: executing program 2 (id=4315): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) recvfrom(r0, &(0x7f00000001c0)=""/20, 0x14, 0x40010103, &(0x7f0000000300)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x80) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x4}, 0x8) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="911a", 0x2}, {0x0}], 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x2000000, &(0x7f0000000280)="37b8"}) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f0000000140)=0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@fallback=r5, r5, 0x2f}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@fallback=r5, r6, 0x2f, 0x2030, 0x4}, 0x20) sendto$inet6(r1, &(0x7f0000000000)="92", 0x1, 0x810, &(0x7f0000000240)={0xa, 0x4e20, 0xfdfffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$DRM_IOCTL_INFO_BUFS(r7, 0xc0106418, &(0x7f0000000080)={0xa611, 0xf, 0x6, 0x0, 0x10, 0x6}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 2.265576994s ago: executing program 4 (id=4316): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x6b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000385352608"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xd}, 0x94) write$usbip_server(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) close_range(r5, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001", @ANYBLOB='\x00\x00\x00/'], 0x38, 0x40044}}], 0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r9, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2.146517633s ago: executing program 0 (id=4317): syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x80) setreuid(0xffffffffffffffff, 0xee00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x48, 0x37, 0x80, 0x9}, {0x6, 0x6, 0x2, 0x57c}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0xc0403d11, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='fd/3\x00') 1.431384602s ago: executing program 3 (id=4318): futex(&(0x7f0000000440)=0x2, 0x8b, 0x2, &(0x7f0000000480), 0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000280)={'team0\x00', {0x2, 0x4e21, @private=0xa010102}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x20000002, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022dbd70499f6cb4a2ce24f7681891000000085d01005c060000000003ee00000000", @ANYRES32=r6, @ANYBLOB="0c0099000000000032000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="700000000206010800000000020000000000000005000100070000000900020073797a3000000000240007800800134000000001050015000c00000008001340000004ff0800064041002b0c13000300686173683a6e65742c69666163650000050005000a000000050004"], 0x70}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000fffd58a70129ffffffffdbdf2500", @ANYRES32=0x0, @ANYBLOB="0000000022383e8c75cb3483d36f006d6163766c616e00040002800880f5ff00", @ANYRESDEC=r8, @ANYBLOB="82c313325efc634ac7b0f86a1991190f36265347f6f0e1d52fd4b6d8362296f4eb4f86433f6d1529f19d6a6794a3559f92274d03639cf16811b052a8796b1f0bf137ca0bc86ac9"], 0x44}, 0x1, 0x0, 0x0, 0x4004001}, 0x20040040) 488.971918ms ago: executing program 1 (id=4319): r0 = socket$phonet(0x23, 0x2, 0x1) getpeername$packet(r0, 0x0, &(0x7f0000002c40)) r1 = socket$kcm(0x10, 0x5, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0x5, 0x7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x5000) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000540)={0xa7, 0x32314247, 0x1, @stepwise={0x200, 0x0, 0x3, 0x8001, 0xca1f, 0x7f}}) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="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", 0x117}, {&(0x7f0000000400)="6a6f8e5e", 0x4}, {&(0x7f0000000280)="af446bf884839ec4ba6c61f93c8d9ee0db14daff8dd5a9502ac4a624253ba5c6b07677c5c03d1ae80bd6d8c53576a7cdff5474f594f215fef3cbbc2eb28b63108dfb51eafb3067d5e83126c5e3c5e960b43c49e9591b8fe105ae77586583986b2e33a89c38815f7c44ad096852adb2ed68b89c14dd55196add112acf5daf96d7379d66fb9331bb5346bbf822df7afedc1e0ce47c96ce45563c7eecb12172abfbd4500e63086b164fbefbe51378ca3431c0e7", 0xb2}], 0x3}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0x7d, &(0x7f00000000c0)={0x108, 0x0, 0x8006, 0x6, 0x39c1, 0x400004, 0x0, 0xc}, &(0x7f00000001c0)=0x20) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x4081, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000180), &(0x7f0000000200)=0x4) openat$comedi(0xffffff9c, 0x0, 0x2c83, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x88}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000200)={0x0, 0x2000000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) 439.948826ms ago: executing program 3 (id=4320): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1a9001, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000100)=0x200) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x100000001, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x50}}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) keyctl$clear(0x3, 0xfffffffffffffffc) request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='/dev/urandom\x00', 0x0) r7 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) sendfile(r6, r6, 0x0, 0x200000) 306.091671ms ago: executing program 3 (id=4321): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 277.490874ms ago: executing program 2 (id=4322): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x90, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 139.335889ms ago: executing program 3 (id=4323): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618", 0x6f}, {0x0}, {&(0x7f0000000780)}], 0x3}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x18}}], 0x2, 0x20000044) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, r1, 0x808, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x1ac20, 0x404}}}}}}, @IFLA_AF_SPEC={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4894}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x0, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0) 0s ago: executing program 3 (id=4324): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc9, 0x8fcceee}}, './file0\x00'}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x80}) ioperm(0x4000000000000001, 0xc, 0x82) (async) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000080)={r0}) syz_clone(0x26223500, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0x10/0x10 [ 583.092252][T15359] ? __lock_acquire+0x6b5/0x2cf0 [ 583.092276][T15359] ? do_raw_spin_lock+0x12b/0x2f0 [ 583.092326][T15359] ? __fget_files+0x2a/0x420 [ 583.092345][T15359] ? __fget_files+0x2a/0x420 [ 583.092360][T15359] ? __fget_files+0x3a6/0x420 [ 583.092374][T15359] ? __fget_files+0x2a/0x420 [ 583.092394][T15359] security_file_ioctl+0xc3/0x2a0 [ 583.092419][T15359] __se_sys_ioctl+0x47/0x170 [ 583.092441][T15359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.092460][T15359] do_syscall_64+0x15f/0xf80 [ 583.092480][T15359] ? trace_irq_disable+0x3b/0x140 [ 583.092507][T15359] ? clear_bhb_loop+0x40/0x90 [ 583.092529][T15359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.092547][T15359] RIP: 0033:0x7fcf2c77ce59 [ 583.092565][T15359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.092580][T15359] RSP: 002b:00007fcf2a9b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.092600][T15359] RAX: ffffffffffffffda RBX: 00007fcf2c9f6090 RCX: 00007fcf2c77ce59 [ 583.092613][T15359] RDX: 0000200000000600 RSI: 000000008208ae63 RDI: 0000000000000004 [ 583.092625][T15359] RBP: 00007fcf2a9b5090 R08: 0000000000000000 R09: 0000000000000000 [ 583.092636][T15359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.092646][T15359] R13: 00007fcf2c9f6128 R14: 00007fcf2c9f6090 R15: 00007ffc2fad74c8 [ 583.092676][T15359] [ 583.092684][T15359] ERROR: Out of memory at tomoyo_realpath_from_path. [ 584.342715][T15390] hub 8-0:1.0: USB hub found [ 584.345087][T15390] hub 8-0:1.0: 1 port detected [ 585.414105][T15398] FAULT_INJECTION: forcing a failure. [ 585.414105][T15398] name failslab, interval 1, probability 0, space 0, times 0 [ 585.414221][T15398] CPU: 1 UID: 0 PID: 15398 Comm: syz.0.3726 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 585.414247][T15398] Tainted: [L]=SOFTLOCKUP [ 585.414255][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.414266][T15398] Call Trace: [ 585.414282][T15398] [ 585.414291][T15398] dump_stack_lvl+0xe8/0x150 [ 585.414318][T15398] should_fail_ex+0x46b/0x600 [ 585.414351][T15398] should_failslab+0xa8/0x100 [ 585.414374][T15398] __kmalloc_noprof+0xdf/0x7b0 [ 585.414393][T15398] ? kfree+0x4d/0x6c0 [ 585.414409][T15398] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 585.414446][T15398] tomoyo_realpath_from_path+0xe3/0x5d0 [ 585.414473][T15398] ? tomoyo_domain+0xd8/0x130 [ 585.414496][T15398] ? tomoyo_path_number_perm+0x219/0x630 [ 585.414519][T15398] tomoyo_path_number_perm+0x246/0x630 [ 585.414544][T15398] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 585.414565][T15398] ? __lock_acquire+0x6b5/0x2cf0 [ 585.414605][T15398] ? __pfx___schedule+0x10/0x10 [ 585.414646][T15398] ? __fget_files+0x2a/0x420 [ 585.414667][T15398] ? __fget_files+0x2a/0x420 [ 585.414683][T15398] ? __fget_files+0x3a6/0x420 [ 585.414699][T15398] ? __fget_files+0x2a/0x420 [ 585.414720][T15398] security_file_ioctl+0xc3/0x2a0 [ 585.414745][T15398] __se_sys_ioctl+0x47/0x170 [ 585.414767][T15398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.414787][T15398] do_syscall_64+0x15f/0xf80 [ 585.414810][T15398] ? clear_bhb_loop+0x40/0x90 [ 585.414833][T15398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.414851][T15398] RIP: 0033:0x7f7f389fce59 [ 585.414868][T15398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.414883][T15398] RSP: 002b:00007f7f36c2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.414902][T15398] RAX: ffffffffffffffda RBX: 00007f7f38c76090 RCX: 00007f7f389fce59 [ 585.414916][T15398] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 000000000000000a [ 585.414925][T15398] RBP: 00007f7f36c2d090 R08: 0000000000000000 R09: 0000000000000000 [ 585.414935][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.414944][T15398] R13: 00007f7f38c76128 R14: 00007f7f38c76090 R15: 00007fff6db9cb98 [ 585.414972][T15398] [ 585.415111][T15398] ERROR: Out of memory at tomoyo_realpath_from_path. [ 589.035142][T14822] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 589.402981][T15408] program syz.3.3729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 589.605267][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 590.265686][T15450] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 590.266026][T15450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3744'. [ 590.266050][T15450] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 590.619944][T15459] FAULT_INJECTION: forcing a failure. [ 590.619944][T15459] name failslab, interval 1, probability 0, space 0, times 0 [ 590.619979][T15459] CPU: 0 UID: 0 PID: 15459 Comm: syz.3.3750 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 590.620006][T15459] Tainted: [L]=SOFTLOCKUP [ 590.620012][T15459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 590.620024][T15459] Call Trace: [ 590.620032][T15459] [ 590.620040][T15459] dump_stack_lvl+0xe8/0x150 [ 590.620067][T15459] should_fail_ex+0x46b/0x600 [ 590.620101][T15459] should_failslab+0xa8/0x100 [ 590.620124][T15459] __kmalloc_cache_noprof+0x84/0x690 [ 590.620144][T15459] ? __kernel_text_address+0xd/0x30 [ 590.620168][T15459] ? alloc_pipe_info+0xe8/0x4d0 [ 590.620188][T15459] ? unwind_get_return_address+0x4d/0x90 [ 590.620215][T15459] alloc_pipe_info+0xe8/0x4d0 [ 590.620240][T15459] splice_direct_to_actor+0xa19/0xc80 [ 590.620262][T15459] ? _parse_integer_limit+0x1ae/0x1f0 [ 590.620291][T15459] ? __pfx_direct_splice_actor+0x10/0x10 [ 590.620314][T15459] ? kstrtouint+0x6e/0xe0 [ 590.620338][T15459] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 590.620356][T15459] ? get_pid_task+0x20/0x1f0 [ 590.620386][T15459] do_splice_direct+0x19b/0x2a0 [ 590.620403][T15459] ? vfs_copy_file_range+0x9bb/0x1390 [ 590.620428][T15459] ? __pfx_do_splice_direct+0x10/0x10 [ 590.620448][T15459] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 590.620480][T15459] vfs_copy_file_range+0xb20/0x1390 [ 590.620517][T15459] ? __pfx_vfs_copy_file_range+0x10/0x10 [ 590.620545][T15459] ? __fget_files+0x3a6/0x420 [ 590.620572][T15459] __se_sys_copy_file_range+0x2fb/0x480 [ 590.620596][T15459] ? fput+0xa0/0xd0 [ 590.620621][T15459] ? __pfx___se_sys_copy_file_range+0x10/0x10 [ 590.620643][T15459] ? __pfx_ksys_write+0x10/0x10 [ 590.620666][T15459] ? __x64_sys_copy_file_range+0x21/0xf0 [ 590.620686][T15459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.620705][T15459] do_syscall_64+0x15f/0xf80 [ 590.620732][T15459] ? trace_irq_disable+0x3b/0x140 [ 590.620752][T15459] ? clear_bhb_loop+0x40/0x90 [ 590.620774][T15459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.620792][T15459] RIP: 0033:0x7fc08deace59 [ 590.620809][T15459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.620824][T15459] RSP: 002b:00007fc08c106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 590.620845][T15459] RAX: ffffffffffffffda RBX: 00007fc08e125fa0 RCX: 00007fc08deace59 [ 590.620858][T15459] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 590.620869][T15459] RBP: 00007fc08c106090 R08: ffffffffa003e459 R09: 0700000000000000 [ 590.620882][T15459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.620893][T15459] R13: 00007fc08e126038 R14: 00007fc08e125fa0 R15: 00007ffe4bc453e8 [ 590.620923][T15459] [ 591.243443][T15474] FAULT_INJECTION: forcing a failure. [ 591.243443][T15474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.243478][T15474] CPU: 1 UID: 0 PID: 15474 Comm: syz.3.3756 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 591.243504][T15474] Tainted: [L]=SOFTLOCKUP [ 591.243511][T15474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.243522][T15474] Call Trace: [ 591.243530][T15474] [ 591.243538][T15474] dump_stack_lvl+0xe8/0x150 [ 591.243564][T15474] should_fail_ex+0x46b/0x600 [ 591.243597][T15474] _copy_from_user+0x2d/0xb0 [ 591.243618][T15474] __sys_bpf+0x229/0x950 [ 591.243641][T15474] ? __pfx___sys_bpf+0x10/0x10 [ 591.243660][T15474] ? rt_mutex_slowunlock+0x1cb/0x300 [ 591.243693][T15474] ? ksys_write+0x248/0x270 [ 591.243716][T15474] ? __pfx_ksys_write+0x10/0x10 [ 591.243739][T15474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.243760][T15474] __x64_sys_bpf+0x7c/0x90 [ 591.243780][T15474] do_syscall_64+0x15f/0xf80 [ 591.243801][T15474] ? trace_irq_disable+0x3b/0x140 [ 591.243821][T15474] ? clear_bhb_loop+0x40/0x90 [ 591.243843][T15474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.243860][T15474] RIP: 0033:0x7fc08deace59 [ 591.243886][T15474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.243901][T15474] RSP: 002b:00007fc08c106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 591.243921][T15474] RAX: ffffffffffffffda RBX: 00007fc08e125fa0 RCX: 00007fc08deace59 [ 591.243934][T15474] RDX: 0000000000000050 RSI: 0000200000004440 RDI: e4ffffff00000000 [ 591.243946][T15474] RBP: 00007fc08c106090 R08: 0000000000000000 R09: 0000000000000000 [ 591.243962][T15474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.243973][T15474] R13: 00007fc08e126038 R14: 00007fc08e125fa0 R15: 00007ffe4bc453e8 [ 591.244002][T15474] [ 591.513736][T15478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3758'. [ 592.215072][T12942] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 592.280456][T15505] FAULT_INJECTION: forcing a failure. [ 592.280456][T15505] name failslab, interval 1, probability 0, space 0, times 0 [ 592.280490][T15505] CPU: 0 UID: 0 PID: 15505 Comm: syz.3.3767 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 592.280515][T15505] Tainted: [L]=SOFTLOCKUP [ 592.280522][T15505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 592.280540][T15505] Call Trace: [ 592.280547][T15505] [ 592.280555][T15505] dump_stack_lvl+0xe8/0x150 [ 592.280582][T15505] should_fail_ex+0x46b/0x600 [ 592.280614][T15505] should_failslab+0xa8/0x100 [ 592.280636][T15505] __kmalloc_noprof+0xdf/0x7b0 [ 592.280654][T15505] ? kfree+0x4d/0x6c0 [ 592.280669][T15505] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 592.280702][T15505] tomoyo_realpath_from_path+0xe3/0x5d0 [ 592.280729][T15505] ? tomoyo_domain+0xd8/0x130 [ 592.280752][T15505] ? tomoyo_path_number_perm+0x219/0x630 [ 592.280775][T15505] tomoyo_path_number_perm+0x246/0x630 [ 592.280799][T15505] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 592.280820][T15505] ? __lock_acquire+0x6b5/0x2cf0 [ 592.280846][T15505] ? do_raw_spin_lock+0x12b/0x2f0 [ 592.280897][T15505] ? __fget_files+0x2a/0x420 [ 592.280916][T15505] ? __fget_files+0x2a/0x420 [ 592.280931][T15505] ? __fget_files+0x3a6/0x420 [ 592.280946][T15505] ? __fget_files+0x2a/0x420 [ 592.280967][T15505] security_file_ioctl+0xc3/0x2a0 [ 592.280993][T15505] __se_sys_ioctl+0x47/0x170 [ 592.281014][T15505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.281033][T15505] do_syscall_64+0x15f/0xf80 [ 592.281054][T15505] ? trace_irq_disable+0x3b/0x140 [ 592.281074][T15505] ? clear_bhb_loop+0x40/0x90 [ 592.281096][T15505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.281113][T15505] RIP: 0033:0x7fc08deace59 [ 592.281130][T15505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.281145][T15505] RSP: 002b:00007fc08c106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.281164][T15505] RAX: ffffffffffffffda RBX: 00007fc08e125fa0 RCX: 00007fc08deace59 [ 592.281178][T15505] RDX: 0000200000000280 RSI: 0000000040045701 RDI: 0000000000000003 [ 592.281190][T15505] RBP: 00007fc08c106090 R08: 0000000000000000 R09: 0000000000000000 [ 592.281201][T15505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.281212][T15505] R13: 00007fc08e126038 R14: 00007fc08e125fa0 R15: 00007ffe4bc453e8 [ 592.281242][T15505] [ 592.281249][T15505] ERROR: Out of memory at tomoyo_realpath_from_path. [ 592.432986][T12942] usb 5-1: Using ep0 maxpacket: 8 [ 592.490387][T12942] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 592.490447][T12942] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 592.490469][T12942] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 592.490493][T12942] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 592.490515][T12942] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 592.490554][T12942] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 592.490576][T12942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.543744][T15511] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 592.544183][T15511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3770'. [ 592.544205][T15511] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 592.880649][T12942] usb 5-1: GET_CAPABILITIES returned 0 [ 592.880698][T12942] usbtmc 5-1:16.0: can't read capabilities [ 592.906334][T15519] netlink: 'syz.2.3774': attribute type 21 has an invalid length. [ 593.087525][T12942] usb 5-1: USB disconnect, device number 42 [ 593.292593][T15527] FAULT_INJECTION: forcing a failure. [ 593.292593][T15527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.292626][T15527] CPU: 0 UID: 0 PID: 15527 Comm: syz.3.3777 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 593.292650][T15527] Tainted: [L]=SOFTLOCKUP [ 593.292656][T15527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 593.292667][T15527] Call Trace: [ 593.292675][T15527] [ 593.292683][T15527] dump_stack_lvl+0xe8/0x150 [ 593.292708][T15527] should_fail_ex+0x46b/0x600 [ 593.292739][T15527] _copy_from_user+0x2d/0xb0 [ 593.292759][T15527] ___sys_sendmsg+0x1c6/0x360 [ 593.292781][T15527] ? __lock_acquire+0x6b5/0x2cf0 [ 593.292807][T15527] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.292863][T15527] ? __fget_files+0x2a/0x420 [ 593.292879][T15527] ? __fget_files+0x3a6/0x420 [ 593.292904][T15527] __x64_sys_sendmsg+0x1c3/0x2a0 [ 593.292929][T15527] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 593.292960][T15527] ? __pfx_ksys_write+0x10/0x10 [ 593.292988][T15527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.293008][T15527] do_syscall_64+0x15f/0xf80 [ 593.293028][T15527] ? trace_irq_disable+0x3b/0x140 [ 593.293048][T15527] ? clear_bhb_loop+0x40/0x90 [ 593.293070][T15527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.293087][T15527] RIP: 0033:0x7fc08deace59 [ 593.293104][T15527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.293119][T15527] RSP: 002b:00007fc08c106028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.293138][T15527] RAX: ffffffffffffffda RBX: 00007fc08e125fa0 RCX: 00007fc08deace59 [ 593.293151][T15527] RDX: 0000000000000014 RSI: 0000200000000300 RDI: 0000000000000003 [ 593.293163][T15527] RBP: 00007fc08c106090 R08: 0000000000000000 R09: 0000000000000000 [ 593.293174][T15527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.293185][T15527] R13: 00007fc08e126038 R14: 00007fc08e125fa0 R15: 00007ffe4bc453e8 [ 593.293214][T15527] [ 593.739150][T15537] /dev/nullb0: Can't open blockdev [ 593.865882][T15544] /dev/nullb0: Can't open blockdev [ 593.874005][T15539] ip6gre1: entered promiscuous mode [ 593.874034][T15539] ip6gre1: entered allmulticast mode [ 594.113361][T15550] ip6gretap0: refused to change device tx_queue_len [ 594.139620][T15555] FAULT_INJECTION: forcing a failure. [ 594.139620][T15555] name failslab, interval 1, probability 0, space 0, times 0 [ 594.139654][T15555] CPU: 1 UID: 0 PID: 15555 Comm: syz.3.3790 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 594.139679][T15555] Tainted: [L]=SOFTLOCKUP [ 594.139686][T15555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 594.139696][T15555] Call Trace: [ 594.139703][T15555] [ 594.139711][T15555] dump_stack_lvl+0xe8/0x150 [ 594.139737][T15555] should_fail_ex+0x46b/0x600 [ 594.139769][T15555] should_failslab+0xa8/0x100 [ 594.139792][T15555] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 594.139812][T15555] ? __alloc_skb+0x1d0/0x7d0 [ 594.139830][T15555] ? __pfx_tcp_current_mss+0x10/0x10 [ 594.139857][T15555] __alloc_skb+0x1d0/0x7d0 [ 594.139882][T15555] tcp_stream_alloc_skb+0x3f/0x5c0 [ 594.139914][T15555] tcp_sendmsg_locked+0x134b/0x5370 [ 594.139959][T15555] ? __lock_acquire+0x6b5/0x2cf0 [ 594.140004][T15555] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 594.140034][T15555] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 594.140053][T15555] ? lockdep_hardirqs_on+0x7a/0x110 [ 594.140075][T15555] ? __pfx_inet_sendmsg+0x10/0x10 [ 594.140097][T15555] tcp_sendmsg+0x2f/0x50 [ 594.140120][T15555] __sys_sendto+0x5f1/0x710 [ 594.140145][T15555] ? __pfx___sys_sendto+0x10/0x10 [ 594.140189][T15555] ? ksys_write+0x248/0x270 [ 594.140210][T15555] ? __pfx_ksys_write+0x10/0x10 [ 594.140234][T15555] __x64_sys_sendto+0xde/0x100 [ 594.140254][T15555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.140275][T15555] do_syscall_64+0x15f/0xf80 [ 594.140295][T15555] ? trace_irq_disable+0x3b/0x140 [ 594.140314][T15555] ? clear_bhb_loop+0x40/0x90 [ 594.140335][T15555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.140351][T15555] RIP: 0033:0x7fc08deace59 [ 594.140367][T15555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.140381][T15555] RSP: 002b:00007fc08c106028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 594.140401][T15555] RAX: ffffffffffffffda RBX: 00007fc08e125fa0 RCX: 00007fc08deace59 [ 594.140414][T15555] RDX: ffffffffffffffef RSI: 00002000000000c0 RDI: 0000000000000003 [ 594.140425][T15555] RBP: 00007fc08c106090 R08: 0000000000000000 R09: 0000000000000000 [ 594.140436][T15555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.140447][T15555] R13: 00007fc08e126038 R14: 00007fc08e125fa0 R15: 00007ffe4bc453e8 [ 594.140473][T15555] [ 594.762177][T15573] NILFS (nullb0): couldn't find nilfs on the device [ 596.828751][T15583] FAULT_INJECTION: forcing a failure. [ 596.828751][T15583] name failslab, interval 1, probability 0, space 0, times 0 [ 596.828779][T15583] CPU: 1 UID: 0 PID: 15583 Comm: syz.0.3797 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 596.828798][T15583] Tainted: [L]=SOFTLOCKUP [ 596.828803][T15583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 596.828811][T15583] Call Trace: [ 596.828817][T15583] [ 596.828823][T15583] dump_stack_lvl+0xe8/0x150 [ 596.828845][T15583] should_fail_ex+0x46b/0x600 [ 596.828871][T15583] should_failslab+0xa8/0x100 [ 596.828892][T15583] __kmalloc_noprof+0xdf/0x7b0 [ 596.828906][T15583] ? kfree+0x4d/0x6c0 [ 596.828917][T15583] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 596.828941][T15583] tomoyo_realpath_from_path+0xe3/0x5d0 [ 596.828962][T15583] ? tomoyo_domain+0xd8/0x130 [ 596.828979][T15583] ? tomoyo_path_number_perm+0x219/0x630 [ 596.828996][T15583] tomoyo_path_number_perm+0x246/0x630 [ 596.829016][T15583] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 596.829032][T15583] ? __lock_acquire+0x6b5/0x2cf0 [ 596.829052][T15583] ? do_raw_spin_lock+0x12b/0x2f0 [ 596.829150][T15583] ? __fget_files+0x2a/0x420 [ 596.829166][T15583] ? __fget_files+0x2a/0x420 [ 596.829177][T15583] ? __fget_files+0x3a6/0x420 [ 596.829188][T15583] ? __fget_files+0x2a/0x420 [ 596.829203][T15583] security_file_ioctl+0xc3/0x2a0 [ 596.829222][T15583] __se_sys_ioctl+0x47/0x170 [ 596.829237][T15583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.829252][T15583] do_syscall_64+0x15f/0xf80 [ 596.829268][T15583] ? trace_irq_disable+0x3b/0x140 [ 596.829284][T15583] ? clear_bhb_loop+0x40/0x90 [ 596.829307][T15583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.829321][T15583] RIP: 0033:0x7f7f389fce59 [ 596.829336][T15583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.829348][T15583] RSP: 002b:00007f7f36c2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.829364][T15583] RAX: ffffffffffffffda RBX: 00007f7f38c76090 RCX: 00007f7f389fce59 [ 596.829374][T15583] RDX: 0000200000000c40 RSI: 00000000c1105518 RDI: 0000000000000003 [ 596.829383][T15583] RBP: 00007f7f36c2d090 R08: 0000000000000000 R09: 0000000000000000 [ 596.829391][T15583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.829399][T15583] R13: 00007f7f38c76128 R14: 00007f7f38c76090 R15: 00007fff6db9cb98 [ 596.829422][T15583] [ 596.864480][T15583] ERROR: Out of memory at tomoyo_realpath_from_path. [ 597.182565][T15586] 9pnet_fd: Insufficient options for proto=fd [ 598.335897][T15604] hub 8-0:1.0: USB hub found [ 598.340921][T15604] hub 8-0:1.0: 1 port detected [ 599.420805][T15628] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 599.437722][T15628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3813'. [ 599.437750][T15628] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 599.762513][T15638] program syz.4.3817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.939248][T15639] FAULT_INJECTION: forcing a failure. [ 599.939248][T15639] name failslab, interval 1, probability 0, space 0, times 0 [ 599.939284][T15639] CPU: 1 UID: 0 PID: 15639 Comm: syz.1.3814 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 599.939310][T15639] Tainted: [L]=SOFTLOCKUP [ 599.939317][T15639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 599.939328][T15639] Call Trace: [ 599.939335][T15639] [ 599.939343][T15639] dump_stack_lvl+0xe8/0x150 [ 599.939371][T15639] should_fail_ex+0x46b/0x600 [ 599.939403][T15639] should_failslab+0xa8/0x100 [ 599.939426][T15639] __kmalloc_noprof+0xdf/0x7b0 [ 599.939444][T15639] ? kfree+0x4d/0x6c0 [ 599.939460][T15639] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 599.939493][T15639] tomoyo_realpath_from_path+0xe3/0x5d0 [ 599.939521][T15639] ? tomoyo_domain+0xd8/0x130 [ 599.939544][T15639] ? tomoyo_path_number_perm+0x219/0x630 [ 599.939567][T15639] tomoyo_path_number_perm+0x246/0x630 [ 599.939593][T15639] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 599.939614][T15639] ? __lock_acquire+0x6b5/0x2cf0 [ 599.939639][T15639] ? do_raw_spin_lock+0x12b/0x2f0 [ 599.939692][T15639] ? __fget_files+0x2a/0x420 [ 599.939712][T15639] ? __fget_files+0x2a/0x420 [ 599.939727][T15639] ? __fget_files+0x3a6/0x420 [ 599.939742][T15639] ? __fget_files+0x2a/0x420 [ 599.939763][T15639] security_file_ioctl+0xc3/0x2a0 [ 599.939799][T15639] __se_sys_ioctl+0x47/0x170 [ 599.939818][T15639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.939836][T15639] do_syscall_64+0x15f/0xf80 [ 599.939855][T15639] ? trace_irq_disable+0x3b/0x140 [ 599.939875][T15639] ? clear_bhb_loop+0x40/0x90 [ 599.939896][T15639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.939912][T15639] RIP: 0033:0x7f26f3e6ce59 [ 599.939927][T15639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.939941][T15639] RSP: 002b:00007f26f20be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.939959][T15639] RAX: ffffffffffffffda RBX: 00007f26f40e5fa0 RCX: 00007f26f3e6ce59 [ 599.939971][T15639] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 599.939981][T15639] RBP: 00007f26f20be090 R08: 0000000000000000 R09: 0000000000000000 [ 599.939992][T15639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.940003][T15639] R13: 00007f26f40e6038 R14: 00007f26f40e5fa0 R15: 00007fff4f261608 [ 599.940032][T15639] [ 599.940039][T15639] ERROR: Out of memory at tomoyo_realpath_from_path. [ 601.863923][T15661] FAULT_INJECTION: forcing a failure. [ 601.863923][T15661] name failslab, interval 1, probability 0, space 0, times 0 [ 601.863957][T15661] CPU: 0 UID: 0 PID: 15661 Comm: syz.3.3822 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 601.863983][T15661] Tainted: [L]=SOFTLOCKUP [ 601.863989][T15661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 601.864000][T15661] Call Trace: [ 601.864007][T15661] [ 601.864015][T15661] dump_stack_lvl+0xe8/0x150 [ 601.864042][T15661] should_fail_ex+0x46b/0x600 [ 601.864074][T15661] should_failslab+0xa8/0x100 [ 601.864097][T15661] kmem_cache_alloc_noprof+0x87/0x680 [ 601.864117][T15661] ? do_getname+0x2e/0x250 [ 601.864139][T15661] ? lock_vma_under_rcu+0x45a/0x500 [ 601.864164][T15661] do_getname+0x2e/0x250 [ 601.864184][T15661] ? getname_flags+0x11/0x20 [ 601.864208][T15661] do_sys_openat2+0xca/0x200 [ 601.864236][T15661] ? __pfx_do_sys_openat2+0x10/0x10 [ 601.864261][T15661] ? exc_page_fault+0x6a/0xc0 [ 601.864286][T15661] ? do_user_addr_fault+0xc6f/0x1340 [ 601.864310][T15661] __x64_sys_openat+0x138/0x170 [ 601.864337][T15661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.864356][T15661] do_syscall_64+0x15f/0xf80 [ 601.864377][T15661] ? trace_irq_disable+0x3b/0x140 [ 601.864397][T15661] ? clear_bhb_loop+0x40/0x90 [ 601.864420][T15661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.864437][T15661] RIP: 0033:0x7fc08de6d68e [ 601.864455][T15661] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 601.864470][T15661] RSP: 002b:00007fc08c0c3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 601.864489][T15661] RAX: ffffffffffffffda RBX: 00007fc08c0c46c0 RCX: 00007fc08de6d68e [ 601.864502][T15661] RDX: 0000000000000000 RSI: 00007fc08c0c3c00 RDI: ffffffffffffff9c [ 601.864515][T15661] RBP: 00007fc08c0c3c00 R08: 0000000000000000 R09: 0000000000000000 [ 601.864526][T15661] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 601.864538][T15661] R13: 00007fc08e126218 R14: 00007fc08e126180 R15: 00007ffe4bc453e8 [ 601.864566][T15661] [ 602.390812][T15663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.551517][T15675] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.962101][ T5610] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 607.487402][T15712] FAULT_INJECTION: forcing a failure. [ 607.487402][T15712] name failslab, interval 1, probability 0, space 0, times 0 [ 607.487712][T15712] CPU: 0 UID: 0 PID: 15712 Comm: syz.4.3841 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 607.487739][T15712] Tainted: [L]=SOFTLOCKUP [ 607.487745][T15712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 607.487756][T15712] Call Trace: [ 607.487762][T15712] [ 607.487770][T15712] dump_stack_lvl+0xe8/0x150 [ 607.487797][T15712] should_fail_ex+0x46b/0x600 [ 607.487826][T15712] should_failslab+0xa8/0x100 [ 607.487849][T15712] __kmalloc_noprof+0xdf/0x7b0 [ 607.487867][T15712] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 607.487896][T15712] tomoyo_realpath_from_path+0xe3/0x5d0 [ 607.487923][T15712] ? tomoyo_domain+0xd8/0x130 [ 607.487947][T15712] tomoyo_path_perm+0x283/0x560 [ 607.487967][T15712] ? tomoyo_path_perm+0x251/0x560 [ 607.487987][T15712] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 607.488014][T15712] ? kvm_sched_clock_read+0x11/0x20 [ 607.488040][T15712] ? do_raw_spin_lock+0x12b/0x2f0 [ 607.488077][T15712] ? __fget_files+0x2a/0x420 [ 607.488096][T15712] ? __fget_files+0x3a6/0x420 [ 607.488117][T15712] security_inode_getattr+0x12b/0x310 [ 607.488138][T15712] __x64_sys_newfstat+0x13b/0x270 [ 607.488163][T15712] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 607.488212][T15712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.488232][T15712] do_syscall_64+0x15f/0xf80 [ 607.488253][T15712] ? clear_bhb_loop+0x40/0x90 [ 607.488276][T15712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.488292][T15712] RIP: 0033:0x7ff35cbbce59 [ 607.488308][T15712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.488322][T15712] RSP: 002b:00007ff35adf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 607.488340][T15712] RAX: ffffffffffffffda RBX: 00007ff35ce36090 RCX: 00007ff35cbbce59 [ 607.488353][T15712] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 607.488365][T15712] RBP: 00007ff35adf5090 R08: 0000000000000000 R09: 0000000000000000 [ 607.488375][T15712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.488384][T15712] R13: 00007ff35ce36128 R14: 00007ff35ce36090 R15: 00007ffe862e6c48 [ 607.488410][T15712] [ 607.489293][T15712] ERROR: Out of memory at tomoyo_realpath_from_path. [ 608.631473][T15727] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 610.332027][T15748] FAULT_INJECTION: forcing a failure. [ 610.332027][T15748] name failslab, interval 1, probability 0, space 0, times 0 [ 610.332062][T15748] CPU: 0 UID: 0 PID: 15748 Comm: syz.3.3854 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 610.332087][T15748] Tainted: [L]=SOFTLOCKUP [ 610.332094][T15748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 610.332105][T15748] Call Trace: [ 610.332112][T15748] [ 610.332120][T15748] dump_stack_lvl+0xe8/0x150 [ 610.332147][T15748] should_fail_ex+0x46b/0x600 [ 610.332179][T15748] should_failslab+0xa8/0x100 [ 610.332203][T15748] __kmalloc_noprof+0xdf/0x7b0 [ 610.332221][T15748] ? kfree+0x4d/0x6c0 [ 610.332237][T15748] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 610.332267][T15748] tomoyo_realpath_from_path+0xe3/0x5d0 [ 610.332294][T15748] ? tomoyo_domain+0xd8/0x130 [ 610.332317][T15748] ? tomoyo_path_number_perm+0x219/0x630 [ 610.332340][T15748] tomoyo_path_number_perm+0x246/0x630 [ 610.332366][T15748] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 610.332388][T15748] ? __lock_acquire+0x6b5/0x2cf0 [ 610.332414][T15748] ? do_raw_spin_lock+0x12b/0x2f0 [ 610.332466][T15748] ? __fget_files+0x2a/0x420 [ 610.332485][T15748] ? __fget_files+0x2a/0x420 [ 610.332501][T15748] ? __fget_files+0x3a6/0x420 [ 610.332516][T15748] ? __fget_files+0x2a/0x420 [ 610.332537][T15748] security_file_ioctl+0xc3/0x2a0 [ 610.332563][T15748] __se_sys_ioctl+0x47/0x170 [ 610.332584][T15748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.332606][T15748] do_syscall_64+0x15f/0xf80 [ 610.332627][T15748] ? trace_irq_disable+0x3b/0x140 [ 610.332649][T15748] ? clear_bhb_loop+0x40/0x90 [ 610.332671][T15748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.332690][T15748] RIP: 0033:0x7fc08deace59 [ 610.332707][T15748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.332722][T15748] RSP: 002b:00007fc08c0c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.332749][T15748] RAX: ffffffffffffffda RBX: 00007fc08e126180 RCX: 00007fc08deace59 [ 610.332763][T15748] RDX: 0000000000000000 RSI: 000000004008b100 RDI: 0000000000000007 [ 610.332775][T15748] RBP: 00007fc08c0c4090 R08: 0000000000000000 R09: 0000000000000000 [ 610.332786][T15748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.332798][T15748] R13: 00007fc08e126218 R14: 00007fc08e126180 R15: 00007ffe4bc453e8 [ 610.332829][T15748] [ 610.332837][T15748] ERROR: Out of memory at tomoyo_realpath_from_path. [ 610.819386][T15723] FAULT_INJECTION: forcing a failure. [ 610.819386][T15723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.819419][T15723] CPU: 1 UID: 0 PID: 15723 Comm: syz.4.3847 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 610.819443][T15723] Tainted: [L]=SOFTLOCKUP [ 610.819449][T15723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 610.819460][T15723] Call Trace: [ 610.819467][T15723] [ 610.819474][T15723] dump_stack_lvl+0xe8/0x150 [ 610.819499][T15723] should_fail_ex+0x46b/0x600 [ 610.819527][T15723] _copy_from_user+0x2d/0xb0 [ 610.819547][T15723] ___sys_sendmsg+0x1c6/0x360 [ 610.819569][T15723] ? __lock_acquire+0x6b5/0x2cf0 [ 610.819595][T15723] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.819645][T15723] ? __fget_files+0x2a/0x420 [ 610.819661][T15723] ? __fget_files+0x3a6/0x420 [ 610.819687][T15723] __x64_sys_sendmsg+0x1c3/0x2a0 [ 610.819710][T15723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 610.819738][T15723] ? __pfx_ksys_write+0x10/0x10 [ 610.819766][T15723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.819786][T15723] do_syscall_64+0x15f/0xf80 [ 610.819807][T15723] ? trace_irq_disable+0x3b/0x140 [ 610.819826][T15723] ? clear_bhb_loop+0x40/0x90 [ 610.819847][T15723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.819864][T15723] RIP: 0033:0x7ff35cbbce59 [ 610.819882][T15723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.819897][T15723] RSP: 002b:00007ff35ae16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.819916][T15723] RAX: ffffffffffffffda RBX: 00007ff35ce35fa0 RCX: 00007ff35cbbce59 [ 610.819930][T15723] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000007 [ 610.819942][T15723] RBP: 00007ff35ae16090 R08: 0000000000000000 R09: 0000000000000000 [ 610.819953][T15723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.819972][T15723] R13: 00007ff35ce36038 R14: 00007ff35ce35fa0 R15: 00007ffe862e6c48 [ 610.820002][T15723] [ 612.747609][T15773] FAULT_INJECTION: forcing a failure. [ 612.747609][T15773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.747637][T15773] CPU: 1 UID: 0 PID: 15773 Comm: syz.2.3861 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 612.747656][T15773] Tainted: [L]=SOFTLOCKUP [ 612.747661][T15773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 612.747669][T15773] Call Trace: [ 612.747675][T15773] [ 612.747682][T15773] dump_stack_lvl+0xe8/0x150 [ 612.747705][T15773] should_fail_ex+0x46b/0x600 [ 612.747730][T15773] _copy_from_user+0x2d/0xb0 [ 612.747746][T15773] __sys_connect+0x156/0x450 [ 612.747776][T15773] ? __pfx___sys_connect+0x10/0x10 [ 612.747802][T15773] ? __pfx_ksys_write+0x10/0x10 [ 612.747824][T15773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.747840][T15773] __x64_sys_connect+0x7a/0x90 [ 612.747856][T15773] do_syscall_64+0x15f/0xf80 [ 612.747872][T15773] ? trace_irq_disable+0x3b/0x140 [ 612.747887][T15773] ? clear_bhb_loop+0x40/0x90 [ 612.747903][T15773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.747916][T15773] RIP: 0033:0x7fcf2c77ce59 [ 612.747931][T15773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.747943][T15773] RSP: 002b:00007fcf2a9d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 612.747958][T15773] RAX: ffffffffffffffda RBX: 00007fcf2c9f5fa0 RCX: 00007fcf2c77ce59 [ 612.747968][T15773] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000003 [ 612.747977][T15773] RBP: 00007fcf2a9d6090 R08: 0000000000000000 R09: 0000000000000000 [ 612.747986][T15773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.747994][T15773] R13: 00007fcf2c9f6038 R14: 00007fcf2c9f5fa0 R15: 00007ffc2fad74c8 [ 612.748018][T15773] [ 613.373944][T15776] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 614.030905][T15785] NILFS (nullb0): couldn't find nilfs on the device [ 616.460753][T15798] FAULT_INJECTION: forcing a failure. [ 616.460753][T15798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.460788][T15798] CPU: 1 UID: 0 PID: 15798 Comm: syz.3.3870 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 616.460813][T15798] Tainted: [L]=SOFTLOCKUP [ 616.460820][T15798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 616.460831][T15798] Call Trace: [ 616.460839][T15798] [ 616.460847][T15798] dump_stack_lvl+0xe8/0x150 [ 616.460873][T15798] should_fail_ex+0x46b/0x600 [ 616.460905][T15798] _copy_from_user+0x2d/0xb0 [ 616.460927][T15798] core_sys_select+0x57a/0xc30 [ 616.460968][T15798] ? __pfx_core_sys_select+0x10/0x10 [ 616.461014][T15798] ? __pfx_set_user_sigmask+0x10/0x10 [ 616.461033][T15798] ? rt_mutex_slowunlock+0x1cb/0x300 [ 616.461052][T15798] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 616.461080][T15798] __se_sys_pselect6+0x267/0x320 [ 616.461110][T15798] ? __pfx___se_sys_pselect6+0x10/0x10 [ 616.461133][T15798] ? __pfx_ksys_write+0x10/0x10 [ 616.461158][T15798] ? __x64_sys_pselect6+0x21/0xf0 [ 616.461181][T15798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.461201][T15798] do_syscall_64+0x15f/0xf80 [ 616.461222][T15798] ? trace_irq_disable+0x3b/0x140 [ 616.461242][T15798] ? clear_bhb_loop+0x40/0x90 [ 616.461265][T15798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.461282][T15798] RIP: 0033:0x7fc08deace59 [ 616.461300][T15798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.461315][T15798] RSP: 002b:00007fc08c0e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 616.461335][T15798] RAX: ffffffffffffffda RBX: 00007fc08e126090 RCX: 00007fc08deace59 [ 616.461349][T15798] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 616.461362][T15798] RBP: 00007fc08c0e5090 R08: 0000000000000000 R09: 0000000000000000 [ 616.461374][T15798] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.461385][T15798] R13: 00007fc08e126128 R14: 00007fc08e126090 R15: 00007ffe4bc453e8 [ 616.461415][T15798] [ 616.677511][T15801] smc: net device wlan0 applied user defined pnetid SYZ1 [ 617.291844][T15809] FAULT_INJECTION: forcing a failure. [ 617.291844][T15809] name failslab, interval 1, probability 0, space 0, times 0 [ 617.291877][T15809] CPU: 0 UID: 0 PID: 15809 Comm: syz.3.3874 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 617.291903][T15809] Tainted: [L]=SOFTLOCKUP [ 617.291910][T15809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 617.291920][T15809] Call Trace: [ 617.291928][T15809] [ 617.291936][T15809] dump_stack_lvl+0xe8/0x150 [ 617.291966][T15809] should_fail_ex+0x46b/0x600 [ 617.291999][T15809] should_failslab+0xa8/0x100 [ 617.292020][T15809] __kmalloc_noprof+0xdf/0x7b0 [ 617.292039][T15809] ? kfree+0x4d/0x6c0 [ 617.292055][T15809] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 617.292087][T15809] tomoyo_realpath_from_path+0xe3/0x5d0 [ 617.292114][T15809] ? tomoyo_domain+0xd8/0x130 [ 617.292137][T15809] ? tomoyo_path_number_perm+0x219/0x630 [ 617.292160][T15809] tomoyo_path_number_perm+0x246/0x630 [ 617.292185][T15809] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 617.292207][T15809] ? __lock_acquire+0x6b5/0x2cf0 [ 617.292233][T15809] ? do_raw_spin_lock+0x12b/0x2f0 [ 617.292306][T15809] ? __fget_files+0x2a/0x420 [ 617.292326][T15809] ? __fget_files+0x2a/0x420 [ 617.292340][T15809] ? __fget_files+0x3a6/0x420 [ 617.292355][T15809] ? __fget_files+0x2a/0x420 [ 617.292374][T15809] security_file_ioctl+0xc3/0x2a0 [ 617.292397][T15809] __se_sys_ioctl+0x47/0x170 [ 617.292418][T15809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.292438][T15809] do_syscall_64+0x15f/0xf80 [ 617.292460][T15809] ? trace_irq_disable+0x3b/0x140 [ 617.292480][T15809] ? clear_bhb_loop+0x40/0x90 [ 617.292503][T15809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.292521][T15809] RIP: 0033:0x7fc08deace59 [ 617.292538][T15809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.292554][T15809] RSP: 002b:00007fc08c106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.292573][T15809] RAX: ffffffffffffffda RBX: 00007fc08e125fa0 RCX: 00007fc08deace59 [ 617.292587][T15809] RDX: 00002000000003c0 RSI: 0000000040103e05 RDI: 0000000000000007 [ 617.292599][T15809] RBP: 00007fc08c106090 R08: 0000000000000000 R09: 0000000000000000 [ 617.292611][T15809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.292623][T15809] R13: 00007fc08e126038 R14: 00007fc08e125fa0 R15: 00007ffe4bc453e8 [ 617.292653][T15809] [ 617.292683][T15809] ERROR: Out of memory at tomoyo_realpath_from_path. [ 617.905244][T15814] NILFS (nullb0): couldn't find nilfs on the device [ 618.944242][T15819] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20000 [ 620.628060][ T31] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 620.748527][ T31] usb 5-1: device descriptor read/64, error -71 [ 620.798368][T12942] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 620.861609][T15861] FAULT_INJECTION: forcing a failure. [ 620.861609][T15861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.861644][T15861] CPU: 0 UID: 0 PID: 15861 Comm: syz.1.3895 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 620.861669][T15861] Tainted: [L]=SOFTLOCKUP [ 620.861676][T15861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 620.861686][T15861] Call Trace: [ 620.861693][T15861] [ 620.861701][T15861] dump_stack_lvl+0xe8/0x150 [ 620.861728][T15861] should_fail_ex+0x46b/0x600 [ 620.861761][T15861] _copy_from_user+0x2d/0xb0 [ 620.861782][T15861] __se_sys_splice+0x301/0x490 [ 620.861809][T15861] ? __pfx___se_sys_splice+0x10/0x10 [ 620.861833][T15861] ? __x64_sys_splice+0x21/0xf0 [ 620.861852][T15861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.861872][T15861] do_syscall_64+0x15f/0xf80 [ 620.861894][T15861] ? trace_irq_disable+0x3b/0x140 [ 620.861915][T15861] ? clear_bhb_loop+0x40/0x90 [ 620.861937][T15861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.861976][T15861] RIP: 0033:0x7f26f3e6ce59 [ 620.861993][T15861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.862009][T15861] RSP: 002b:00007f26f20be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 620.862028][T15861] RAX: ffffffffffffffda RBX: 00007f26f40e5fa0 RCX: 00007f26f3e6ce59 [ 620.862042][T15861] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000000003 [ 620.862054][T15861] RBP: 00007f26f20be090 R08: 0000000000000807 R09: 0000000000000000 [ 620.862065][T15861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.862076][T15861] R13: 00007f26f40e6038 R14: 00007f26f40e5fa0 R15: 00007fff4f261608 [ 620.862106][T15861] [ 620.959665][T12942] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 620.959704][T12942] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.959740][T12942] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 620.959760][T12942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.986630][ T31] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 621.016501][T12942] hub 3-1:4.0: USB hub found [ 621.117458][T15865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3897'. [ 621.117586][T15865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.120628][ T31] usb 5-1: device descriptor read/64, error -71 [ 621.209078][T15865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.226350][ T31] usb usb5-port1: attempt power cycle [ 621.236993][T12942] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 621.332610][T12942] usb 3-1: USB disconnect, device number 36 [ 621.569766][ T31] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 621.591029][ T31] usb 5-1: device descriptor read/8, error -71 [ 621.834586][ T31] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 622.066160][ T31] usb 5-1: device descriptor read/8, error -71 [ 622.418911][ T31] usb usb5-port1: unable to enumerate USB device [ 622.663557][T15913] IPv6: addrconf: prefix option has invalid lifetime [ 623.702366][T15924] hub 8-0:1.0: USB hub found [ 623.702561][T15924] hub 8-0:1.0: 1 port detected [ 623.895400][T15932] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 623.927081][T15932] VFS: Can't find a romfs filesystem on dev nullb0. [ 623.927081][T15932] [ 624.020954][T15934] FAULT_INJECTION: forcing a failure. [ 624.020954][T15934] name failslab, interval 1, probability 0, space 0, times 0 [ 624.020989][T15934] CPU: 0 UID: 0 PID: 15934 Comm: syz.3.3925 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 624.021019][T15934] Tainted: [L]=SOFTLOCKUP [ 624.021026][T15934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 624.021036][T15934] Call Trace: [ 624.021043][T15934] [ 624.021052][T15934] dump_stack_lvl+0xe8/0x150 [ 624.021078][T15934] should_fail_ex+0x46b/0x600 [ 624.021111][T15934] should_failslab+0xa8/0x100 [ 624.021134][T15934] __kmalloc_noprof+0xdf/0x7b0 [ 624.021152][T15934] ? kfree+0x4d/0x6c0 [ 624.021168][T15934] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 624.021200][T15934] tomoyo_realpath_from_path+0xe3/0x5d0 [ 624.021227][T15934] ? tomoyo_domain+0xd8/0x130 [ 624.021251][T15934] ? tomoyo_path_number_perm+0x219/0x630 [ 624.021274][T15934] tomoyo_path_number_perm+0x246/0x630 [ 624.021300][T15934] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 624.021321][T15934] ? __lock_acquire+0x6b5/0x2cf0 [ 624.021346][T15934] ? do_raw_spin_lock+0x12b/0x2f0 [ 624.021407][T15934] ? __fget_files+0x2a/0x420 [ 624.021428][T15934] ? __fget_files+0x2a/0x420 [ 624.021442][T15934] ? __fget_files+0x3a6/0x420 [ 624.021458][T15934] ? __fget_files+0x2a/0x420 [ 624.021478][T15934] security_file_ioctl+0xc3/0x2a0 [ 624.021504][T15934] __se_sys_ioctl+0x47/0x170 [ 624.021525][T15934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.021546][T15934] do_syscall_64+0x15f/0xf80 [ 624.021568][T15934] ? clear_bhb_loop+0x40/0x90 [ 624.021591][T15934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.021609][T15934] RIP: 0033:0x7fc08deace59 [ 624.021627][T15934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.021642][T15934] RSP: 002b:00007fc08c106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.021662][T15934] RAX: ffffffffffffffda RBX: 00007fc08e125fa0 RCX: 00007fc08deace59 [ 624.021676][T15934] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 624.021687][T15934] RBP: 00007fc08c106090 R08: 0000000000000000 R09: 0000000000000000 [ 624.021699][T15934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.021710][T15934] R13: 00007fc08e126038 R14: 00007fc08e125fa0 R15: 00007ffe4bc453e8 [ 624.021741][T15934] [ 624.021760][T15934] ERROR: Out of memory at tomoyo_realpath_from_path. [ 624.072994][T14822] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 624.122788][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.122859][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.162816][T15936] loop8: detected capacity change from 0 to 7 [ 624.177245][T15936] Dev loop8: unable to read RDB block 7 [ 624.177293][T15936] loop8: unable to read partition table [ 624.182193][T15936] loop8: partition table beyond EOD, truncated [ 624.182227][T15936] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 624.227547][T14822] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 624.227585][T14822] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.227620][T14822] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 624.227642][T14822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.268781][T14822] hub 1-1:4.0: USB hub found [ 624.692459][T14822] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 624.754720][T14822] usb 1-1: USB disconnect, device number 23 [ 626.145612][T15966] FAULT_INJECTION: forcing a failure. [ 626.145612][T15966] name failslab, interval 1, probability 0, space 0, times 0 [ 626.145672][T15966] CPU: 1 UID: 0 PID: 15966 Comm: syz.1.3933 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 626.145728][T15966] Tainted: [L]=SOFTLOCKUP [ 626.145744][T15966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 626.145772][T15966] Call Trace: [ 626.145790][T15966] [ 626.145809][T15966] dump_stack_lvl+0xe8/0x150 [ 626.145866][T15966] should_fail_ex+0x46b/0x600 [ 626.145922][T15966] should_failslab+0xa8/0x100 [ 626.145945][T15966] kmem_cache_alloc_noprof+0x87/0x680 [ 626.145965][T15966] ? do_getname+0x2e/0x250 [ 626.145993][T15966] do_getname+0x2e/0x250 [ 626.146014][T15966] ? getname_flags+0x11/0x20 [ 626.146039][T15966] do_sys_openat2+0xca/0x200 [ 626.146063][T15966] ? lockdep_hardirqs_on+0x7a/0x110 [ 626.146086][T15966] ? __pfx_do_sys_openat2+0x10/0x10 [ 626.146118][T15966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.146150][T15966] __x64_sys_openat+0x138/0x170 [ 626.146178][T15966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.146197][T15966] do_syscall_64+0x15f/0xf80 [ 626.146219][T15966] ? clear_bhb_loop+0x40/0x90 [ 626.146242][T15966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.146260][T15966] RIP: 0033:0x7f26f3e6ce59 [ 626.146278][T15966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.146293][T15966] RSP: 002b:00007f26f207c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 626.146313][T15966] RAX: ffffffffffffffda RBX: 00007f26f40e6180 RCX: 00007f26f3e6ce59 [ 626.146326][T15966] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 626.146339][T15966] RBP: 00007f26f207c090 R08: 0000000000000000 R09: 0000000000000000 [ 626.146351][T15966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.146362][T15966] R13: 00007f26f40e6218 R14: 00007f26f40e6180 R15: 00007fff4f261608 [ 626.146391][T15966] [ 627.010016][T15974] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 627.027642][T15974] VFS: Can't find a romfs filesystem on dev nullb0. [ 627.027642][T15974] [ 627.911584][T15997] netlink: 'syz.0.3946': attribute type 1 has an invalid length. [ 627.911606][T15997] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3946'. [ 629.110826][T16009] FAULT_INJECTION: forcing a failure. [ 629.110826][T16009] name failslab, interval 1, probability 0, space 0, times 0 [ 629.110860][T16009] CPU: 1 UID: 0 PID: 16009 Comm: syz.4.3948 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 629.110885][T16009] Tainted: [L]=SOFTLOCKUP [ 629.110892][T16009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 629.110903][T16009] Call Trace: [ 629.110911][T16009] [ 629.110919][T16009] dump_stack_lvl+0xe8/0x150 [ 629.110945][T16009] should_fail_ex+0x46b/0x600 [ 629.110978][T16009] should_failslab+0xa8/0x100 [ 629.111001][T16009] __kmalloc_noprof+0xdf/0x7b0 [ 629.111019][T16009] ? kfree+0x4d/0x6c0 [ 629.111036][T16009] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 629.111074][T16009] tomoyo_realpath_from_path+0xe3/0x5d0 [ 629.111102][T16009] ? tomoyo_domain+0xd8/0x130 [ 629.111123][T16009] ? tomoyo_path_number_perm+0x219/0x630 [ 629.111145][T16009] tomoyo_path_number_perm+0x246/0x630 [ 629.111169][T16009] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 629.111190][T16009] ? __lock_acquire+0x6b5/0x2cf0 [ 629.111218][T16009] ? do_raw_spin_lock+0x12b/0x2f0 [ 629.111268][T16009] ? __fget_files+0x2a/0x420 [ 629.111288][T16009] ? __fget_files+0x2a/0x420 [ 629.111303][T16009] ? __fget_files+0x3a6/0x420 [ 629.111318][T16009] ? __fget_files+0x2a/0x420 [ 629.111339][T16009] security_file_ioctl+0xc3/0x2a0 [ 629.111365][T16009] __se_sys_ioctl+0x47/0x170 [ 629.111387][T16009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.111407][T16009] do_syscall_64+0x15f/0xf80 [ 629.111428][T16009] ? trace_irq_disable+0x3b/0x140 [ 629.111449][T16009] ? clear_bhb_loop+0x40/0x90 [ 629.111472][T16009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.111491][T16009] RIP: 0033:0x7ff35cbbce59 [ 629.111507][T16009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.111523][T16009] RSP: 002b:00007ff35ae16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.111542][T16009] RAX: ffffffffffffffda RBX: 00007ff35ce35fa0 RCX: 00007ff35cbbce59 [ 629.111554][T16009] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 629.111566][T16009] RBP: 00007ff35ae16090 R08: 0000000000000000 R09: 0000000000000000 [ 629.111578][T16009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.111589][T16009] R13: 00007ff35ce36038 R14: 00007ff35ce35fa0 R15: 00007ffe862e6c48 [ 629.111620][T16009] [ 629.115560][T16009] ERROR: Out of memory at tomoyo_realpath_from_path. [ 632.950112][T16054] FAULT_INJECTION: forcing a failure. [ 632.950112][T16054] name failslab, interval 1, probability 0, space 0, times 0 [ 632.950135][T16054] CPU: 0 UID: 0 PID: 16054 Comm: syz.0.3965 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 632.950150][T16054] Tainted: [L]=SOFTLOCKUP [ 632.950154][T16054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 632.950160][T16054] Call Trace: [ 632.950164][T16054] [ 632.950169][T16054] dump_stack_lvl+0xe8/0x150 [ 632.950186][T16054] should_fail_ex+0x46b/0x600 [ 632.950206][T16054] should_failslab+0xa8/0x100 [ 632.950220][T16054] __kmalloc_noprof+0xdf/0x7b0 [ 632.950231][T16054] ? iter_file_splice_write+0x1dd/0x10f0 [ 632.950245][T16054] iter_file_splice_write+0x1dd/0x10f0 [ 632.950254][T16054] ? __lock_acquire+0x6b5/0x2cf0 [ 632.950273][T16054] ? kstrtouint+0x6e/0xe0 [ 632.950293][T16054] ? __pfx_iter_file_splice_write+0x10/0x10 [ 632.950302][T16054] ? do_splice+0xe69/0x1940 [ 632.950312][T16054] ? do_splice+0xe69/0x1940 [ 632.950329][T16054] ? __pfx_iter_file_splice_write+0x10/0x10 [ 632.950339][T16054] do_splice+0xef8/0x1940 [ 632.950361][T16054] ? __pfx_do_splice+0x10/0x10 [ 632.950376][T16054] __se_sys_splice+0x353/0x490 [ 632.950395][T16054] ? __pfx___se_sys_splice+0x10/0x10 [ 632.950409][T16054] ? __x64_sys_splice+0x21/0xf0 [ 632.950421][T16054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.950433][T16054] do_syscall_64+0x15f/0xf80 [ 632.950446][T16054] ? trace_irq_disable+0x3b/0x140 [ 632.950458][T16054] ? clear_bhb_loop+0x40/0x90 [ 632.950471][T16054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.950481][T16054] RIP: 0033:0x7f7f389fce59 [ 632.950491][T16054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.950500][T16054] RSP: 002b:00007f7f36c4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 632.950511][T16054] RAX: ffffffffffffffda RBX: 00007f7f38c75fa0 RCX: 00007f7f389fce59 [ 632.950518][T16054] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 632.950524][T16054] RBP: 00007f7f36c4e090 R08: 0000000000000004 R09: 0000000000000000 [ 632.950530][T16054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.950536][T16054] R13: 00007f7f38c76038 R14: 00007f7f38c75fa0 R15: 00007fff6db9cb98 [ 632.950552][T16054] [ 633.250089][ T5704] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 633.317447][T16062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3967'. [ 633.317778][T16063] FAULT_INJECTION: forcing a failure. [ 633.317778][T16063] name failslab, interval 1, probability 0, space 0, times 0 [ 633.317803][T16063] CPU: 0 UID: 0 PID: 16063 Comm: syz.3.3968 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 633.317821][T16063] Tainted: [L]=SOFTLOCKUP [ 633.317826][T16063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 633.317835][T16063] Call Trace: [ 633.317841][T16063] [ 633.317847][T16063] dump_stack_lvl+0xe8/0x150 [ 633.317869][T16063] should_fail_ex+0x46b/0x600 [ 633.317895][T16063] should_failslab+0xa8/0x100 [ 633.317913][T16063] __kmalloc_noprof+0xdf/0x7b0 [ 633.317928][T16063] ? kfree+0x4d/0x6c0 [ 633.317941][T16063] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 633.317965][T16063] tomoyo_realpath_from_path+0xe3/0x5d0 [ 633.317985][T16063] ? tomoyo_domain+0xd8/0x130 [ 633.318004][T16063] ? tomoyo_path_number_perm+0x219/0x630 [ 633.318023][T16063] tomoyo_path_number_perm+0x246/0x630 [ 633.318043][T16063] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 633.318060][T16063] ? __lock_acquire+0x6b5/0x2cf0 [ 633.318081][T16063] ? do_raw_spin_lock+0x12b/0x2f0 [ 633.318124][T16063] ? __fget_files+0x2a/0x420 [ 633.318141][T16063] ? __fget_files+0x2a/0x420 [ 633.318152][T16063] ? __fget_files+0x3a6/0x420 [ 633.318167][T16063] ? __fget_files+0x2a/0x420 [ 633.318185][T16063] security_file_ioctl+0xc3/0x2a0 [ 633.318210][T16063] __se_sys_ioctl+0x47/0x170 [ 633.318230][T16063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.318248][T16063] do_syscall_64+0x15f/0xf80 [ 633.318267][T16063] ? trace_irq_disable+0x3b/0x140 [ 633.318287][T16063] ? clear_bhb_loop+0x40/0x90 [ 633.318308][T16063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.318323][T16063] RIP: 0033:0x7fc08deace59 [ 633.318339][T16063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.318354][T16063] RSP: 002b:00007fc08c106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.318373][T16063] RAX: ffffffffffffffda RBX: 00007fc08e125fa0 RCX: 00007fc08deace59 [ 633.318385][T16063] RDX: 0000200000000100 RSI: 000000004054561e RDI: 0000000000000003 [ 633.318396][T16063] RBP: 00007fc08c106090 R08: 0000000000000000 R09: 0000000000000000 [ 633.318406][T16063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.318415][T16063] R13: 00007fc08e126038 R14: 00007fc08e125fa0 R15: 00007ffe4bc453e8 [ 633.318448][T16063] [ 633.318595][T16063] ERROR: Out of memory at tomoyo_realpath_from_path. [ 633.391281][ T5704] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 633.391307][ T5704] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 633.391325][ T5704] usb 5-1: config 8 has no interface number 0 [ 633.391366][ T5704] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 633.447632][ T5704] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 633.447661][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.447679][ T5704] usb 5-1: Product: syz [ 633.447695][ T5704] usb 5-1: Manufacturer: syz [ 633.447709][ T5704] usb 5-1: SerialNumber: syz [ 633.828385][ T5704] usb 5-1: USB disconnect, device number 47 [ 634.702114][T16083] openvswitch: netlink: Duplicate or invalid key (type 0). [ 634.702151][T16083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.007689][T16120] hub 8-0:1.0: USB hub found [ 638.009740][T16120] hub 8-0:1.0: 1 port detected [ 639.256112][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3991'. [ 640.033846][T16147] hub 8-0:1.0: USB hub found [ 640.052423][T16147] hub 8-0:1.0: 1 port detected [ 641.097085][T16153] team_slave_0: mtu less than device minimum [ 641.414781][T16163] NILFS (nullb0): couldn't find nilfs on the device [ 643.001479][T16170] hub 8-0:1.0: USB hub found [ 643.002002][T16170] hub 8-0:1.0: 1 port detected [ 643.252173][T16174] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4007'. [ 643.988581][T16187] FAULT_INJECTION: forcing a failure. [ 643.988581][T16187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.988617][T16187] CPU: 1 UID: 0 PID: 16187 Comm: syz.2.4012 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 643.988643][T16187] Tainted: [L]=SOFTLOCKUP [ 643.988650][T16187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 643.988661][T16187] Call Trace: [ 643.988669][T16187] [ 643.988677][T16187] dump_stack_lvl+0xe8/0x150 [ 643.988704][T16187] should_fail_ex+0x46b/0x600 [ 643.988737][T16187] copy_fpstate_to_sigframe+0xaab/0xd60 [ 643.988757][T16187] ? __kasan_slab_free+0x5c/0x80 [ 643.988775][T16187] ? kmem_cache_free+0x187/0x6c0 [ 643.988794][T16187] ? __dequeue_signal+0x487/0x5b0 [ 643.988827][T16187] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 643.988869][T16187] ? fpu__alloc_mathframe+0xac/0x130 [ 643.988890][T16187] get_sigframe+0x5f7/0x820 [ 643.988924][T16187] ? __pfx_get_sigframe+0x10/0x10 [ 643.988949][T16187] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 643.988967][T16187] ? reacquire_held_locks+0x104/0x190 [ 643.988991][T16187] ? rt_spin_lock+0x1e0/0x400 [ 643.989015][T16187] x64_setup_rt_frame+0x161/0xcb0 [ 643.989038][T16187] ? rt_spin_unlock+0x14f/0x200 [ 643.989059][T16187] ? rt_spin_unlock+0x160/0x200 [ 643.989080][T16187] ? get_signal+0x1120/0x1310 [ 643.989106][T16187] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 643.989141][T16187] arch_do_signal_or_restart+0x44b/0x850 [ 643.989170][T16187] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 643.989202][T16187] ? ksys_read+0x248/0x270 [ 643.989231][T16187] exit_to_user_mode_loop+0x8c/0x4d0 [ 643.989252][T16187] ? rcu_is_watching+0x15/0xb0 [ 643.989278][T16187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.989298][T16187] do_syscall_64+0x33e/0xf80 [ 643.989318][T16187] ? trace_irq_disable+0x3b/0x140 [ 643.989339][T16187] ? clear_bhb_loop+0x40/0x90 [ 643.989369][T16187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.989388][T16187] RIP: 0033:0x7fcf2c77ce59 [ 643.989404][T16187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.989420][T16187] RSP: 002b:00007fcf2a9d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 643.989439][T16187] RAX: fffffffffffffffc RBX: 00007fcf2c9f5fa0 RCX: 00007fcf2c77ce59 [ 643.989453][T16187] RDX: 00000000000000d1 RSI: 0000200000000200 RDI: 0000000000000003 [ 643.989466][T16187] RBP: 00007fcf2a9d6090 R08: 0000000000000000 R09: 0000000000000000 [ 643.989477][T16187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.989489][T16187] R13: 00007fcf2c9f6038 R14: 00007fcf2c9f5fa0 R15: 00007ffc2fad74c8 [ 643.989523][T16187] [ 644.726397][T16206] FAULT_INJECTION: forcing a failure. [ 644.726397][T16206] name failslab, interval 1, probability 0, space 0, times 0 [ 644.726420][T16206] CPU: 1 UID: 0 PID: 16206 Comm: syz.3.4022 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 644.726435][T16206] Tainted: [L]=SOFTLOCKUP [ 644.726439][T16206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 644.726445][T16206] Call Trace: [ 644.726450][T16206] [ 644.726454][T16206] dump_stack_lvl+0xe8/0x150 [ 644.726471][T16206] should_fail_ex+0x46b/0x600 [ 644.726491][T16206] should_failslab+0xa8/0x100 [ 644.726505][T16206] __kmalloc_noprof+0xdf/0x7b0 [ 644.726516][T16206] ? kfree+0x4d/0x6c0 [ 644.726524][T16206] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 644.726544][T16206] tomoyo_realpath_from_path+0xe3/0x5d0 [ 644.726559][T16206] ? tomoyo_domain+0xd8/0x130 [ 644.726572][T16206] ? tomoyo_path_number_perm+0x219/0x630 [ 644.726585][T16206] tomoyo_path_number_perm+0x246/0x630 [ 644.726600][T16206] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 644.726612][T16206] ? __lock_acquire+0x6b5/0x2cf0 [ 644.726627][T16206] ? do_raw_spin_lock+0x12b/0x2f0 [ 644.726655][T16206] ? __fget_files+0x2a/0x420 [ 644.726666][T16206] ? __fget_files+0x2a/0x420 [ 644.726674][T16206] ? __fget_files+0x3a6/0x420 [ 644.726682][T16206] ? __fget_files+0x2a/0x420 [ 644.726693][T16206] security_file_ioctl+0xc3/0x2a0 [ 644.726708][T16206] __se_sys_ioctl+0x47/0x170 [ 644.726721][T16206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.726732][T16206] do_syscall_64+0x15f/0xf80 [ 644.726744][T16206] ? trace_irq_disable+0x3b/0x140 [ 644.726757][T16206] ? clear_bhb_loop+0x40/0x90 [ 644.726769][T16206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.726779][T16206] RIP: 0033:0x7fc08deace59 [ 644.726790][T16206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.726798][T16206] RSP: 002b:00007fc08c106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 644.726810][T16206] RAX: ffffffffffffffda RBX: 00007fc08e125fa0 RCX: 00007fc08deace59 [ 644.726817][T16206] RDX: 0000200000000180 RSI: 00000000c00464d2 RDI: 0000000000000003 [ 644.726823][T16206] RBP: 00007fc08c106090 R08: 0000000000000000 R09: 0000000000000000 [ 644.726830][T16206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.726835][T16206] R13: 00007fc08e126038 R14: 00007fc08e125fa0 R15: 00007ffe4bc453e8 [ 644.726851][T16206] [ 644.726856][T16206] ERROR: Out of memory at tomoyo_realpath_from_path. [ 646.429722][ T5874] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 646.613773][ T5874] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 646.613799][ T5874] usb 3-1: config 0 has no interface number 0 [ 646.617715][ T5874] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 646.617743][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.617760][ T5874] usb 3-1: Product: syz [ 646.617772][ T5874] usb 3-1: Manufacturer: syz [ 646.617786][ T5874] usb 3-1: SerialNumber: syz [ 646.757113][ T5874] usb 3-1: config 0 descriptor?? [ 646.829640][ T5874] usb 3-1: selecting invalid altsetting 1 [ 646.830964][ T5874] dvb_ttusb_budget: ttusb_init_controller: error [ 646.863142][ T5874] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 647.551083][ T5874] DVB: Unable to find symbol stv0299_attach() [ 647.776773][ T5874] DVB: Unable to find symbol tda8083_attach() [ 647.776787][ T5874] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 647.789048][ T5874] usb 3-1: USB disconnect, device number 37 [ 648.445045][T16260] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4043'. [ 648.548129][T16270] NILFS (nullb0): couldn't find nilfs on the device [ 651.307054][T16290] FAULT_INJECTION: forcing a failure. [ 651.307054][T16290] name failslab, interval 1, probability 0, space 0, times 0 [ 651.307087][T16290] CPU: 0 UID: 0 PID: 16290 Comm: syz.3.4052 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 651.307112][T16290] Tainted: [L]=SOFTLOCKUP [ 651.307119][T16290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 651.307131][T16290] Call Trace: [ 651.307138][T16290] [ 651.307145][T16290] dump_stack_lvl+0xe8/0x150 [ 651.307172][T16290] should_fail_ex+0x46b/0x600 [ 651.307203][T16290] should_failslab+0xa8/0x100 [ 651.307227][T16290] __kmalloc_noprof+0xdf/0x7b0 [ 651.307245][T16290] ? kfree+0x4d/0x6c0 [ 651.307260][T16290] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 651.307292][T16290] tomoyo_realpath_from_path+0xe3/0x5d0 [ 651.307320][T16290] ? tomoyo_domain+0xd8/0x130 [ 651.307343][T16290] ? tomoyo_path_number_perm+0x219/0x630 [ 651.307365][T16290] tomoyo_path_number_perm+0x246/0x630 [ 651.307390][T16290] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 651.307411][T16290] ? __lock_acquire+0x6b5/0x2cf0 [ 651.307438][T16290] ? do_raw_spin_lock+0x12b/0x2f0 [ 651.307489][T16290] ? __fget_files+0x2a/0x420 [ 651.307508][T16290] ? __fget_files+0x2a/0x420 [ 651.307521][T16290] ? __fget_files+0x3a6/0x420 [ 651.307536][T16290] ? __fget_files+0x2a/0x420 [ 651.307554][T16290] security_file_ioctl+0xc3/0x2a0 [ 651.307578][T16290] __se_sys_ioctl+0x47/0x170 [ 651.307597][T16290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.307616][T16290] do_syscall_64+0x15f/0xf80 [ 651.307638][T16290] ? trace_irq_disable+0x3b/0x140 [ 651.307658][T16290] ? clear_bhb_loop+0x40/0x90 [ 651.307679][T16290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.307695][T16290] RIP: 0033:0x7fc08deace59 [ 651.307712][T16290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.307727][T16290] RSP: 002b:00007fc08c106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.307747][T16290] RAX: ffffffffffffffda RBX: 00007fc08e125fa0 RCX: 00007fc08deace59 [ 651.307760][T16290] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000003 [ 651.307772][T16290] RBP: 00007fc08c106090 R08: 0000000000000000 R09: 0000000000000000 [ 651.307784][T16290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.307796][T16290] R13: 00007fc08e126038 R14: 00007fc08e125fa0 R15: 00007ffe4bc453e8 [ 651.307825][T16290] [ 651.307841][T16290] ERROR: Out of memory at tomoyo_realpath_from_path. [ 651.748350][T16297] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 651.755938][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4056'. [ 651.755964][T16297] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 652.715957][T16310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4061'. [ 652.945050][ T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 653.069198][ T10] usb 1-1: device descriptor read/64, error -71 [ 653.231112][ T1243] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 653.298769][ T10] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 653.381461][ T1243] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 653.381492][ T1243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 653.381515][ T1243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 653.397472][ T1243] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 653.397500][ T1243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.397518][ T1243] usb 5-1: Product: syz [ 653.397531][ T1243] usb 5-1: Manufacturer: syz [ 653.397543][ T1243] usb 5-1: SerialNumber: syz [ 653.414622][ T1243] usb 5-1: config 0 descriptor?? [ 653.421274][ T10] usb 1-1: device descriptor read/64, error -71 [ 653.427475][T16308] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 653.526830][ T10] usb usb1-port1: attempt power cycle [ 653.595124][T16329] FAULT_INJECTION: forcing a failure. [ 653.595124][T16329] name failslab, interval 1, probability 0, space 0, times 0 [ 653.595156][T16329] CPU: 0 UID: 0 PID: 16329 Comm: syz.1.4066 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 653.595180][T16329] Tainted: [L]=SOFTLOCKUP [ 653.595187][T16329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 653.595198][T16329] Call Trace: [ 653.595205][T16329] [ 653.595213][T16329] dump_stack_lvl+0xe8/0x150 [ 653.595239][T16329] should_fail_ex+0x46b/0x600 [ 653.595271][T16329] should_failslab+0xa8/0x100 [ 653.595294][T16329] kmem_cache_alloc_noprof+0x87/0x680 [ 653.595314][T16329] ? do_getname+0x2e/0x250 [ 653.595335][T16329] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 653.595371][T16329] do_getname+0x2e/0x250 [ 653.595391][T16329] ? user_path_at+0x1e/0x160 [ 653.595410][T16329] user_path_at+0x2a/0x160 [ 653.595431][T16329] __se_sys_mount+0x2dc/0x420 [ 653.595465][T16329] ? __pfx___se_sys_mount+0x10/0x10 [ 653.595496][T16329] ? __x64_sys_mount+0x20/0xc0 [ 653.595519][T16329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.595539][T16329] do_syscall_64+0x15f/0xf80 [ 653.595559][T16329] ? trace_irq_disable+0x3b/0x140 [ 653.595580][T16329] ? clear_bhb_loop+0x40/0x90 [ 653.595601][T16329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.595619][T16329] RIP: 0033:0x7f26f3e6ce59 [ 653.595636][T16329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.595650][T16329] RSP: 002b:00007f26f20be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 653.595670][T16329] RAX: ffffffffffffffda RBX: 00007f26f40e5fa0 RCX: 00007f26f3e6ce59 [ 653.595683][T16329] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 653.595695][T16329] RBP: 00007f26f20be090 R08: 0000000000000000 R09: 0000000000000000 [ 653.595706][T16329] R10: 0000000000020000 R11: 0000000000000246 R12: 0000000000000001 [ 653.595718][T16329] R13: 00007f26f40e6038 R14: 00007f26f40e5fa0 R15: 00007fff4f261608 [ 653.595748][T16329] [ 653.707298][ T1243] rc_core: IR keymap rc-streamzap not found [ 653.707317][ T1243] Registered IR keymap rc-empty [ 653.709635][ T1243] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 653.726498][ T1243] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input41 [ 654.019348][ T5704] usb 5-1: USB disconnect, device number 48 [ 654.107573][ T10] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 654.127362][ T10] usb 1-1: device descriptor read/8, error -71 [ 654.251676][T16340] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 654.252761][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4071'. [ 654.252784][T16340] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 654.373914][ T10] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 654.393609][ T10] usb 1-1: device descriptor read/8, error -71 [ 654.632942][ T10] usb usb1-port1: unable to enumerate USB device [ 655.620905][T16354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4080'. [ 655.891017][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4083'. [ 656.889544][T16379] vivid-000: disconnect [ 657.565277][ T5874] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 657.669900][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 657.718891][ T5874] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 657.718920][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.758782][ T5874] usb 3-1: config 0 descriptor?? [ 657.780399][ T5874] cp210x 3-1:0.0: cp210x converter detected [ 657.822123][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 657.825309][ T9] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 657.825334][ T9] usb 1-1: config 0 has no interface number 0 [ 657.825439][ T9] usb 1-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 657.825461][ T9] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 657.830261][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 657.830289][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.830364][ T9] usb 1-1: Product: syz [ 657.830378][ T9] usb 1-1: Manufacturer: syz [ 657.830391][ T9] usb 1-1: SerialNumber: syz [ 657.956658][ T31] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 658.039684][ T9] usb 1-1: config 0 descriptor?? [ 658.078522][ T9] asix 1-1:0.188: probe with driver asix failed with error -22 [ 658.100766][ T31] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 658.100793][ T31] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.100814][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 658.100826][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.205684][ T31] hub 5-1:4.0: USB hub found [ 658.409424][ T31] hub 5-1:4.0: config failed, can't read hub descriptor (err -90) [ 658.492827][ T31] usb 1-1: USB disconnect, device number 28 [ 658.625525][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4097'. [ 658.686872][ T5874] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 658.709001][ T5704] usb 5-1: USB disconnect, device number 49 [ 658.741695][ T5874] usb 3-1: cp210x converter now attached to ttyUSB0 [ 659.276792][ T5874] usb 3-1: USB disconnect, device number 38 [ 659.282949][T16376] vivid-000: reconnect [ 659.306386][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 659.441774][ T5874] cp210x 3-1:0.0: device disconnected [ 659.700350][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 659.843908][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 659.843934][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 659.843945][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.877264][ T10] usb 1-1: config 0 descriptor?? [ 660.029405][T16431] FAULT_INJECTION: forcing a failure. [ 660.029405][T16431] name failslab, interval 1, probability 0, space 0, times 0 [ 660.029443][T16431] CPU: 1 UID: 0 PID: 16431 Comm: syz.3.4110 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 660.029469][T16431] Tainted: [L]=SOFTLOCKUP [ 660.029476][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 660.029487][T16431] Call Trace: [ 660.029495][T16431] [ 660.029503][T16431] dump_stack_lvl+0xe8/0x150 [ 660.029529][T16431] should_fail_ex+0x46b/0x600 [ 660.029560][T16431] should_failslab+0xa8/0x100 [ 660.029581][T16431] __kmalloc_noprof+0xdf/0x7b0 [ 660.029599][T16431] ? kfree+0x4d/0x6c0 [ 660.029615][T16431] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 660.029646][T16431] tomoyo_realpath_from_path+0xe3/0x5d0 [ 660.029673][T16431] ? tomoyo_domain+0xd8/0x130 [ 660.029695][T16431] ? tomoyo_path_number_perm+0x219/0x630 [ 660.029718][T16431] tomoyo_path_number_perm+0x246/0x630 [ 660.029744][T16431] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 660.029765][T16431] ? __lock_acquire+0x6b5/0x2cf0 [ 660.029791][T16431] ? do_raw_spin_lock+0x12b/0x2f0 [ 660.029841][T16431] ? __fget_files+0x2a/0x420 [ 660.029860][T16431] ? __fget_files+0x2a/0x420 [ 660.029876][T16431] ? __fget_files+0x3a6/0x420 [ 660.029891][T16431] ? __fget_files+0x2a/0x420 [ 660.029911][T16431] security_file_ioctl+0xc3/0x2a0 [ 660.029943][T16431] __se_sys_ioctl+0x47/0x170 [ 660.029965][T16431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.029984][T16431] do_syscall_64+0x15f/0xf80 [ 660.030004][T16431] ? trace_irq_disable+0x3b/0x140 [ 660.030025][T16431] ? clear_bhb_loop+0x40/0x90 [ 660.030044][T16431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.030060][T16431] RIP: 0033:0x7fc08deace59 [ 660.030077][T16431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.030092][T16431] RSP: 002b:00007fc08c106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.030111][T16431] RAX: ffffffffffffffda RBX: 00007fc08e125fa0 RCX: 00007fc08deace59 [ 660.030125][T16431] RDX: 0000200000000100 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 660.030137][T16431] RBP: 00007fc08c106090 R08: 0000000000000000 R09: 0000000000000000 [ 660.030148][T16431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.030159][T16431] R13: 00007fc08e126038 R14: 00007fc08e125fa0 R15: 00007ffe4bc453e8 [ 660.030188][T16431] [ 660.030296][T16431] ERROR: Out of memory at tomoyo_realpath_from_path. [ 660.413359][ T10] (null): keene_cmd_main failed (-110) [ 660.543665][ T10] video4linux radio48: keene_cmd_main failed (-71) [ 660.543691][ T10] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 660.553738][ T10] usb 1-1: USB disconnect, device number 29 [ 660.644512][T16434] netlink: 'syz.1.4111': attribute type 1 has an invalid length. [ 660.644535][T16434] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4111'. [ 661.024531][ C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 661.346317][T16451] FAULT_INJECTION: forcing a failure. [ 661.346317][T16451] name failslab, interval 1, probability 0, space 0, times 0 [ 661.346350][T16451] CPU: 1 UID: 0 PID: 16451 Comm: syz.4.4119 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 661.346374][T16451] Tainted: [L]=SOFTLOCKUP [ 661.346381][T16451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 661.346391][T16451] Call Trace: [ 661.346398][T16451] [ 661.346405][T16451] dump_stack_lvl+0xe8/0x150 [ 661.346431][T16451] should_fail_ex+0x46b/0x600 [ 661.346462][T16451] should_failslab+0xa8/0x100 [ 661.346483][T16451] __kmalloc_noprof+0xdf/0x7b0 [ 661.346500][T16451] ? kfree+0x4d/0x6c0 [ 661.346514][T16451] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 661.346557][T16451] tomoyo_realpath_from_path+0xe3/0x5d0 [ 661.346581][T16451] ? tomoyo_domain+0xd8/0x130 [ 661.346603][T16451] ? tomoyo_path_number_perm+0x219/0x630 [ 661.346625][T16451] tomoyo_path_number_perm+0x246/0x630 [ 661.346648][T16451] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 661.346667][T16451] ? __lock_acquire+0x6b5/0x2cf0 [ 661.346685][T16451] ? do_raw_spin_lock+0x12b/0x2f0 [ 661.346712][T16451] ? __fget_files+0x2a/0x420 [ 661.346723][T16451] ? __fget_files+0x2a/0x420 [ 661.346731][T16451] ? __fget_files+0x3a6/0x420 [ 661.346739][T16451] ? __fget_files+0x2a/0x420 [ 661.346750][T16451] security_file_ioctl+0xc3/0x2a0 [ 661.346769][T16451] __se_sys_ioctl+0x47/0x170 [ 661.346788][T16451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.346808][T16451] do_syscall_64+0x15f/0xf80 [ 661.346824][T16451] ? trace_irq_disable+0x3b/0x140 [ 661.346836][T16451] ? clear_bhb_loop+0x40/0x90 [ 661.346849][T16451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.346859][T16451] RIP: 0033:0x7ff35cbbce59 [ 661.346869][T16451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.346878][T16451] RSP: 002b:00007ff35ae16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.346890][T16451] RAX: ffffffffffffffda RBX: 00007ff35ce35fa0 RCX: 00007ff35cbbce59 [ 661.346901][T16451] RDX: 0000200000001040 RSI: 000000004018aebd RDI: 0000000000000004 [ 661.346908][T16451] RBP: 00007ff35ae16090 R08: 0000000000000000 R09: 0000000000000000 [ 661.346914][T16451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.346920][T16451] R13: 00007ff35ce36038 R14: 00007ff35ce35fa0 R15: 00007ffe862e6c48 [ 661.346936][T16451] [ 662.220247][T16451] ERROR: Out of memory at tomoyo_realpath_from_path. [ 662.626363][T16461] FAULT_INJECTION: forcing a failure. [ 662.626363][T16461] name failslab, interval 1, probability 0, space 0, times 0 [ 662.626397][T16461] CPU: 1 UID: 0 PID: 16461 Comm: syz.4.4122 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 662.626435][T16461] Tainted: [L]=SOFTLOCKUP [ 662.626441][T16461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 662.626455][T16461] Call Trace: [ 662.626462][T16461] [ 662.626470][T16461] dump_stack_lvl+0xe8/0x150 [ 662.626497][T16461] should_fail_ex+0x46b/0x600 [ 662.626529][T16461] should_failslab+0xa8/0x100 [ 662.626552][T16461] __kmalloc_noprof+0xdf/0x7b0 [ 662.626569][T16461] ? kfree+0x4d/0x6c0 [ 662.626584][T16461] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 662.626616][T16461] tomoyo_realpath_from_path+0xe3/0x5d0 [ 662.626641][T16461] ? tomoyo_domain+0xd8/0x130 [ 662.626664][T16461] ? tomoyo_path_number_perm+0x219/0x630 [ 662.626697][T16461] tomoyo_path_number_perm+0x246/0x630 [ 662.626726][T16461] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 662.626751][T16461] ? __lock_acquire+0x6b5/0x2cf0 [ 662.626783][T16461] ? do_raw_spin_lock+0x12b/0x2f0 [ 662.626847][T16461] ? __fget_files+0x2a/0x420 [ 662.626882][T16461] ? __fget_files+0x2a/0x420 [ 662.626905][T16461] ? __fget_files+0x3a6/0x420 [ 662.626920][T16461] ? __fget_files+0x2a/0x420 [ 662.626957][T16461] security_file_ioctl+0xc3/0x2a0 [ 662.626982][T16461] __se_sys_ioctl+0x47/0x170 [ 662.627009][T16461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.627029][T16461] do_syscall_64+0x15f/0xf80 [ 662.627063][T16461] ? clear_bhb_loop+0x40/0x90 [ 662.627092][T16461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.627118][T16461] RIP: 0033:0x7ff35cbbce59 [ 662.627137][T16461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.627152][T16461] RSP: 002b:00007ff35ae16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 662.627176][T16461] RAX: ffffffffffffffda RBX: 00007ff35ce35fa0 RCX: 00007ff35cbbce59 [ 662.627190][T16461] RDX: 0000200000000180 RSI: 0000000040046109 RDI: 0000000000000003 [ 662.627206][T16461] RBP: 00007ff35ae16090 R08: 0000000000000000 R09: 0000000000000000 [ 662.627223][T16461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.627235][T16461] R13: 00007ff35ce36038 R14: 00007ff35ce35fa0 R15: 00007ffe862e6c48 [ 662.627283][T16461] [ 662.652220][T16461] ERROR: Out of memory at tomoyo_realpath_from_path. [ 663.916101][T16478] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4129'. [ 664.058667][T16474] FAULT_INJECTION: forcing a failure. [ 664.058667][T16474] name failslab, interval 1, probability 0, space 0, times 0 [ 664.058700][T16474] CPU: 0 UID: 0 PID: 16474 Comm: syz.3.4127 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 664.058724][T16474] Tainted: [L]=SOFTLOCKUP [ 664.058731][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 664.058741][T16474] Call Trace: [ 664.058749][T16474] [ 664.058756][T16474] dump_stack_lvl+0xe8/0x150 [ 664.058782][T16474] should_fail_ex+0x46b/0x600 [ 664.058819][T16474] should_failslab+0xa8/0x100 [ 664.058842][T16474] __kmalloc_noprof+0xdf/0x7b0 [ 664.058861][T16474] ? kfree+0x4d/0x6c0 [ 664.058877][T16474] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 664.058908][T16474] tomoyo_realpath_from_path+0xe3/0x5d0 [ 664.058935][T16474] ? tomoyo_domain+0xd8/0x130 [ 664.058958][T16474] ? tomoyo_path_number_perm+0x219/0x630 [ 664.058978][T16474] tomoyo_path_number_perm+0x246/0x630 [ 664.059003][T16474] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 664.059023][T16474] ? __lock_acquire+0x6b5/0x2cf0 [ 664.059047][T16474] ? do_raw_spin_lock+0x12b/0x2f0 [ 664.059096][T16474] ? __fget_files+0x2a/0x420 [ 664.059115][T16474] ? __fget_files+0x2a/0x420 [ 664.059131][T16474] ? __fget_files+0x3a6/0x420 [ 664.059146][T16474] ? __fget_files+0x2a/0x420 [ 664.059165][T16474] security_file_ioctl+0xc3/0x2a0 [ 664.059189][T16474] __se_sys_ioctl+0x47/0x170 [ 664.059208][T16474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.059228][T16474] do_syscall_64+0x15f/0xf80 [ 664.059250][T16474] ? trace_irq_disable+0x3b/0x140 [ 664.059271][T16474] ? clear_bhb_loop+0x40/0x90 [ 664.059303][T16474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.059321][T16474] RIP: 0033:0x7fc08deace59 [ 664.059339][T16474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.059354][T16474] RSP: 002b:00007fc08c106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.059373][T16474] RAX: ffffffffffffffda RBX: 00007fc08e125fa0 RCX: 00007fc08deace59 [ 664.059387][T16474] RDX: 0000200000000100 RSI: 00000000c0085504 RDI: 0000000000000003 [ 664.059399][T16474] RBP: 00007fc08c106090 R08: 0000000000000000 R09: 0000000000000000 [ 664.059409][T16474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.059420][T16474] R13: 00007fc08e126038 R14: 00007fc08e125fa0 R15: 00007ffe4bc453e8 [ 664.059450][T16474] [ 664.059552][T16474] ERROR: Out of memory at tomoyo_realpath_from_path. [ 664.502581][T16483] FAULT_INJECTION: forcing a failure. [ 664.502581][T16483] name failslab, interval 1, probability 0, space 0, times 0 [ 664.502603][T16483] CPU: 1 UID: 0 PID: 16483 Comm: syz.0.4131 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 664.502618][T16483] Tainted: [L]=SOFTLOCKUP [ 664.502622][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 664.502628][T16483] Call Trace: [ 664.502633][T16483] [ 664.502637][T16483] dump_stack_lvl+0xe8/0x150 [ 664.502654][T16483] should_fail_ex+0x46b/0x600 [ 664.502673][T16483] should_failslab+0xa8/0x100 [ 664.502687][T16483] __kmalloc_cache_noprof+0x84/0x690 [ 664.502698][T16483] ? alloc_pipe_info+0xe8/0x4d0 [ 664.502713][T16483] alloc_pipe_info+0xe8/0x4d0 [ 664.502726][T16483] splice_direct_to_actor+0xa19/0xc80 [ 664.502736][T16483] ? __lock_acquire+0x6b5/0x2cf0 [ 664.502750][T16483] ? kstrtouint+0x6e/0xe0 [ 664.502766][T16483] ? __pfx_direct_splice_actor+0x10/0x10 [ 664.502778][T16483] ? __lock_acquire+0x6b5/0x2cf0 [ 664.502791][T16483] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 664.502805][T16483] do_splice_direct+0x19b/0x2a0 [ 664.502816][T16483] ? __pfx_do_splice_direct+0x10/0x10 [ 664.502827][T16483] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 664.502840][T16483] ? rw_verify_area+0x25b/0x4e0 [ 664.502853][T16483] do_sendfile+0x547/0x7e0 [ 664.502867][T16483] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 664.502883][T16483] ? __pfx_do_sendfile+0x10/0x10 [ 664.502902][T16483] __se_sys_sendfile64+0x144/0x1a0 [ 664.502918][T16483] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 664.502935][T16483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.502945][T16483] do_syscall_64+0x15f/0xf80 [ 664.502957][T16483] ? trace_irq_disable+0x3b/0x140 [ 664.502969][T16483] ? clear_bhb_loop+0x40/0x90 [ 664.502981][T16483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.502991][T16483] RIP: 0033:0x7f7f389fce59 [ 664.503001][T16483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.503009][T16483] RSP: 002b:00007f7f36c4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 664.503021][T16483] RAX: ffffffffffffffda RBX: 00007f7f38c75fa0 RCX: 00007f7f389fce59 [ 664.503028][T16483] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 664.503034][T16483] RBP: 00007f7f36c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 664.503040][T16483] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.503046][T16483] R13: 00007f7f38c76038 R14: 00007f7f38c75fa0 R15: 00007fff6db9cb98 [ 664.503062][T16483] [ 665.033775][T16487] FAULT_INJECTION: forcing a failure. [ 665.033775][T16487] name failslab, interval 1, probability 0, space 0, times 0 [ 665.033834][T16487] CPU: 0 UID: 0 PID: 16487 Comm: syz.3.4133 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 665.033860][T16487] Tainted: [L]=SOFTLOCKUP [ 665.033867][T16487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 665.033879][T16487] Call Trace: [ 665.033886][T16487] [ 665.033895][T16487] dump_stack_lvl+0xe8/0x150 [ 665.033923][T16487] should_fail_ex+0x46b/0x600 [ 665.033956][T16487] should_failslab+0xa8/0x100 [ 665.033980][T16487] __kmalloc_noprof+0xdf/0x7b0 [ 665.033999][T16487] ? kfree+0x4d/0x6c0 [ 665.034015][T16487] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 665.034047][T16487] tomoyo_realpath_from_path+0xe3/0x5d0 [ 665.034074][T16487] ? tomoyo_domain+0xd8/0x130 [ 665.034098][T16487] ? tomoyo_path_number_perm+0x219/0x630 [ 665.034121][T16487] tomoyo_path_number_perm+0x246/0x630 [ 665.034146][T16487] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 665.034167][T16487] ? __lock_acquire+0x6b5/0x2cf0 [ 665.034195][T16487] ? __pfx___schedule+0x10/0x10 [ 665.034245][T16487] ? __fget_files+0x2a/0x420 [ 665.034265][T16487] ? __fget_files+0x2a/0x420 [ 665.034280][T16487] ? __fget_files+0x3a6/0x420 [ 665.034296][T16487] ? __fget_files+0x2a/0x420 [ 665.034317][T16487] security_file_ioctl+0xc3/0x2a0 [ 665.034342][T16487] __se_sys_ioctl+0x47/0x170 [ 665.034364][T16487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.034384][T16487] do_syscall_64+0x15f/0xf80 [ 665.034407][T16487] ? clear_bhb_loop+0x40/0x90 [ 665.034437][T16487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.034455][T16487] RIP: 0033:0x7fc08deace59 [ 665.034472][T16487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.034487][T16487] RSP: 002b:00007fc08c0c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 665.034507][T16487] RAX: ffffffffffffffda RBX: 00007fc08e126180 RCX: 00007fc08deace59 [ 665.034521][T16487] RDX: 0000200000000040 RSI: 0000000000003b83 RDI: 0000000000000006 [ 665.034534][T16487] RBP: 00007fc08c0c4090 R08: 0000000000000000 R09: 0000000000000000 [ 665.034546][T16487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.034557][T16487] R13: 00007fc08e126218 R14: 00007fc08e126180 R15: 00007ffe4bc453e8 [ 665.034588][T16487] [ 665.034620][T16487] ERROR: Out of memory at tomoyo_realpath_from_path. [ 665.049258][T16487] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 666.316833][T16500] FAULT_INJECTION: forcing a failure. [ 666.316833][T16500] name failslab, interval 1, probability 0, space 0, times 0 [ 666.316891][T16500] CPU: 1 UID: 0 PID: 16500 Comm: syz.0.4137 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 666.316918][T16500] Tainted: [L]=SOFTLOCKUP [ 666.316925][T16500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 666.316936][T16500] Call Trace: [ 666.316944][T16500] [ 666.316952][T16500] dump_stack_lvl+0xe8/0x150 [ 666.316979][T16500] should_fail_ex+0x46b/0x600 [ 666.317012][T16500] should_failslab+0xa8/0x100 [ 666.317043][T16500] __kmalloc_noprof+0xdf/0x7b0 [ 666.317063][T16500] ? sock_kmalloc+0xd6/0x160 [ 666.317092][T16500] sock_kmalloc+0xd6/0x160 [ 666.317117][T16500] alg_setkey+0x55/0x190 [ 666.317137][T16500] ? alg_setsockopt+0x3c5/0x4a0 [ 666.317160][T16500] alg_setsockopt+0x3da/0x4a0 [ 666.317181][T16500] ? __pfx_alg_setsockopt+0x10/0x10 [ 666.317204][T16500] do_sock_setsockopt+0x17c/0x1b0 [ 666.317231][T16500] __x64_sys_setsockopt+0x143/0x1b0 [ 666.317255][T16500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.317275][T16500] do_syscall_64+0x15f/0xf80 [ 666.317299][T16500] ? clear_bhb_loop+0x40/0x90 [ 666.317321][T16500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.317339][T16500] RIP: 0033:0x7f7f389fce59 [ 666.317356][T16500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.317372][T16500] RSP: 002b:00007f7f36c0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 666.317392][T16500] RAX: ffffffffffffffda RBX: 00007f7f38c76180 RCX: 00007f7f389fce59 [ 666.317406][T16500] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000008 [ 666.317417][T16500] RBP: 00007f7f36c0c090 R08: 0000000000000018 R09: 0000000000000000 [ 666.317429][T16500] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000000000000001 [ 666.317441][T16500] R13: 00007f7f38c76218 R14: 00007f7f38c76180 R15: 00007fff6db9cb98 [ 666.317472][T16500] [ 668.719457][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 669.004182][T16542] FAULT_INJECTION: forcing a failure. [ 669.004182][T16542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.004218][T16542] CPU: 0 UID: 0 PID: 16542 Comm: syz.3.4150 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 669.004244][T16542] Tainted: [L]=SOFTLOCKUP [ 669.004251][T16542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 669.004263][T16542] Call Trace: [ 669.004270][T16542] [ 669.004279][T16542] dump_stack_lvl+0xe8/0x150 [ 669.004306][T16542] should_fail_ex+0x46b/0x600 [ 669.004370][T16542] _copy_from_user+0x2d/0xb0 [ 669.004393][T16542] ___sys_recvmsg+0x175/0x590 [ 669.004416][T16542] ? get_pid_task+0x20/0x1f0 [ 669.004438][T16542] ? get_pid_task+0x20/0x1f0 [ 669.004463][T16542] ? __pfx____sys_recvmsg+0x10/0x10 [ 669.004491][T16542] ? __fget_files+0x2a/0x420 [ 669.004532][T16542] ? __fget_files+0x3a6/0x420 [ 669.004559][T16542] __x64_sys_recvmsg+0x1c0/0x2a0 [ 669.004585][T16542] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 669.004626][T16542] ? __pfx_ksys_write+0x10/0x10 [ 669.004656][T16542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.004677][T16542] do_syscall_64+0x15f/0xf80 [ 669.004699][T16542] ? trace_irq_disable+0x3b/0x140 [ 669.004719][T16542] ? clear_bhb_loop+0x40/0x90 [ 669.004748][T16542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.004767][T16542] RIP: 0033:0x7fc08deace59 [ 669.004784][T16542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.004799][T16542] RSP: 002b:00007fc08c0c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 669.004818][T16542] RAX: ffffffffffffffda RBX: 00007fc08e126180 RCX: 00007fc08deace59 [ 669.004832][T16542] RDX: 0000000000000160 RSI: 00002000000005c0 RDI: 0000000000000009 [ 669.004844][T16542] RBP: 00007fc08c0c4090 R08: 0000000000000000 R09: 0000000000000000 [ 669.004856][T16542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.004867][T16542] R13: 00007fc08e126218 R14: 00007fc08e126180 R15: 00007ffe4bc453e8 [ 669.004896][T16542] [ 669.835788][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 669.866573][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 669.886261][ T9] usb 1-1: config 5 has an invalid descriptor of length 30, skipping remainder of the config [ 669.886286][ T9] usb 1-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 669.936309][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=5523, bcdDevice=8d.37 [ 669.936337][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.936355][ T9] usb 1-1: Product: syz [ 669.936367][ T9] usb 1-1: Manufacturer: syz [ 669.936380][ T9] usb 1-1: SerialNumber: syz [ 670.125518][T16546] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4152'. [ 670.864111][T16526] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4146'. [ 671.157612][T16561] FAULT_INJECTION: forcing a failure. [ 671.157612][T16561] name failslab, interval 1, probability 0, space 0, times 0 [ 671.157647][T16561] CPU: 0 UID: 0 PID: 16561 Comm: syz.2.4154 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 671.157676][T16561] Tainted: [L]=SOFTLOCKUP [ 671.157683][T16561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 671.157694][T16561] Call Trace: [ 671.157701][T16561] [ 671.157709][T16561] dump_stack_lvl+0xe8/0x150 [ 671.157736][T16561] should_fail_ex+0x46b/0x600 [ 671.157767][T16561] should_failslab+0xa8/0x100 [ 671.157790][T16561] __kmalloc_noprof+0xdf/0x7b0 [ 671.157808][T16561] ? kfree+0x4d/0x6c0 [ 671.157833][T16561] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 671.157865][T16561] tomoyo_realpath_from_path+0xe3/0x5d0 [ 671.157890][T16561] ? tomoyo_domain+0xd8/0x130 [ 671.157912][T16561] ? tomoyo_path_number_perm+0x219/0x630 [ 671.157934][T16561] tomoyo_path_number_perm+0x246/0x630 [ 671.157956][T16561] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 671.157975][T16561] ? __lock_acquire+0x6b5/0x2cf0 [ 671.157998][T16561] ? do_raw_spin_lock+0x12b/0x2f0 [ 671.158045][T16561] ? __fget_files+0x2a/0x420 [ 671.158063][T16561] ? __fget_files+0x2a/0x420 [ 671.158076][T16561] ? __fget_files+0x3a6/0x420 [ 671.158089][T16561] ? __fget_files+0x2a/0x420 [ 671.158107][T16561] security_file_ioctl+0xc3/0x2a0 [ 671.158131][T16561] __se_sys_ioctl+0x47/0x170 [ 671.158152][T16561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.158173][T16561] do_syscall_64+0x15f/0xf80 [ 671.158194][T16561] ? trace_irq_disable+0x3b/0x140 [ 671.158215][T16561] ? clear_bhb_loop+0x40/0x90 [ 671.158237][T16561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.158256][T16561] RIP: 0033:0x7fcf2c77ce59 [ 671.158272][T16561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.158286][T16561] RSP: 002b:00007fcf2a9b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 671.158305][T16561] RAX: ffffffffffffffda RBX: 00007fcf2c9f6090 RCX: 00007fcf2c77ce59 [ 671.158319][T16561] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 671.158329][T16561] RBP: 00007fcf2a9b5090 R08: 0000000000000000 R09: 0000000000000000 [ 671.158340][T16561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.158350][T16561] R13: 00007fcf2c9f6128 R14: 00007fcf2c9f6090 R15: 00007ffc2fad74c8 [ 671.158377][T16561] [ 671.165010][T16561] ERROR: Out of memory at tomoyo_realpath_from_path. [ 671.237822][T16565] 9p: Bad value for 'rfdno' [ 671.261178][T16526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.261806][T16526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.633759][T16560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.646936][T16560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.729957][ T9] usb 1-1: USB disconnect, device number 30 [ 673.339744][T16625] 9p: Unknown Cache mode or invalid value fscacheÿÿÿ [ 674.963634][T16641] FAULT_INJECTION: forcing a failure. [ 674.963634][T16641] name failslab, interval 1, probability 0, space 0, times 0 [ 674.963666][T16641] CPU: 0 UID: 0 PID: 16641 Comm: syz.4.4191 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 674.963689][T16641] Tainted: [L]=SOFTLOCKUP [ 674.963695][T16641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 674.963707][T16641] Call Trace: [ 674.963715][T16641] [ 674.963723][T16641] dump_stack_lvl+0xe8/0x150 [ 674.963748][T16641] should_fail_ex+0x46b/0x600 [ 674.963769][T16641] should_failslab+0xa8/0x100 [ 674.963783][T16641] kmem_cache_alloc_noprof+0x87/0x680 [ 674.963794][T16641] ? do_getname+0x2e/0x250 [ 674.963809][T16641] do_getname+0x2e/0x250 [ 674.963821][T16641] ? getname_flags+0x11/0x20 [ 674.963835][T16641] do_sys_openat2+0xca/0x200 [ 674.963850][T16641] ? __pfx___schedule+0x10/0x10 [ 674.963861][T16641] ? __pfx_do_sys_openat2+0x10/0x10 [ 674.963881][T16641] __x64_sys_openat+0x138/0x170 [ 674.963897][T16641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.963908][T16641] do_syscall_64+0x15f/0xf80 [ 674.963921][T16641] ? clear_bhb_loop+0x40/0x90 [ 674.963934][T16641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.963943][T16641] RIP: 0033:0x7ff35cbbce59 [ 674.963953][T16641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.963962][T16641] RSP: 002b:00007ff35adf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 674.963973][T16641] RAX: ffffffffffffffda RBX: 00007ff35ce36090 RCX: 00007ff35cbbce59 [ 674.963980][T16641] RDX: 000000000000275a RSI: 0000200000000840 RDI: ffffffffffffff9c [ 674.963987][T16641] RBP: 00007ff35adf5090 R08: 0000000000000000 R09: 0000000000000000 [ 674.963994][T16641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.964000][T16641] R13: 00007ff35ce36128 R14: 00007ff35ce36090 R15: 00007ffe862e6c48 [ 674.964015][T16641] [ 676.706676][T16674] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4202'. [ 676.721310][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 676.847443][ T5330] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 676.863089][T16680] FAULT_INJECTION: forcing a failure. [ 676.863089][T16680] name failslab, interval 1, probability 0, space 0, times 0 [ 676.863192][T16680] CPU: 0 UID: 0 PID: 16680 Comm: syz.1.4184 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 676.863218][T16680] Tainted: [L]=SOFTLOCKUP [ 676.863225][T16680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 676.863236][T16680] Call Trace: [ 676.863244][T16680] [ 676.863252][T16680] dump_stack_lvl+0xe8/0x150 [ 676.863279][T16680] should_fail_ex+0x46b/0x600 [ 676.863311][T16680] should_failslab+0xa8/0x100 [ 676.863332][T16680] __kmalloc_noprof+0xdf/0x7b0 [ 676.863351][T16680] ? kfree+0x4d/0x6c0 [ 676.863367][T16680] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 676.863398][T16680] tomoyo_realpath_from_path+0xe3/0x5d0 [ 676.863425][T16680] ? tomoyo_domain+0xd8/0x130 [ 676.863449][T16680] ? tomoyo_path_number_perm+0x219/0x630 [ 676.863472][T16680] tomoyo_path_number_perm+0x246/0x630 [ 676.863498][T16680] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 676.863520][T16680] ? __lock_acquire+0x6b5/0x2cf0 [ 676.863578][T16680] ? __fget_files+0x2a/0x420 [ 676.863599][T16680] ? __fget_files+0x2a/0x420 [ 676.863615][T16680] ? __fget_files+0x3a6/0x420 [ 676.863630][T16680] ? __fget_files+0x2a/0x420 [ 676.863651][T16680] security_file_ioctl+0xc3/0x2a0 [ 676.863677][T16680] __se_sys_ioctl+0x47/0x170 [ 676.863696][T16680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.863716][T16680] do_syscall_64+0x15f/0xf80 [ 676.863737][T16680] ? clear_bhb_loop+0x40/0x90 [ 676.863758][T16680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.863775][T16680] RIP: 0033:0x7f26f3e6ce59 [ 676.863792][T16680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.863808][T16680] RSP: 002b:00007f26f209d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 676.863828][T16680] RAX: ffffffffffffffda RBX: 00007f26f40e6090 RCX: 00007f26f3e6ce59 [ 676.863841][T16680] RDX: 0000200000000440 RSI: 0000000000003b72 RDI: 0000000000000007 [ 676.863854][T16680] RBP: 00007f26f209d090 R08: 0000000000000000 R09: 0000000000000000 [ 676.863865][T16680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.863877][T16680] R13: 00007f26f40e6128 R14: 00007f26f40e6090 R15: 00007fff4f261608 [ 676.863907][T16680] [ 676.864084][T16680] ERROR: Out of memory at tomoyo_realpath_from_path. [ 676.997243][ T5330] usb 1-1: Using ep0 maxpacket: 16 [ 677.226031][ T9] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 677.226057][ T9] usb 5-1: config 0 has no interface number 0 [ 677.226083][ T9] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 677.226120][ T9] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 677.226145][ T9] usb 5-1: config 0 interface 255 has no altsetting 0 [ 677.226223][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 677.226280][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.283593][ T5330] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.283757][ T5330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 677.283783][ T5330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 677.283803][ T5330] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 677.283832][ T5330] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.379320][ T5330] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 677.379348][ T5330] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 677.379367][ T5330] usb 1-1: Manufacturer: syz [ 677.597148][ T5330] usb 1-1: config 0 descriptor?? [ 677.611373][ T9] usb 5-1: config 0 descriptor?? [ 677.717686][ T9] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 677.957210][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4198'. [ 678.261857][T16697] loop2: detected capacity change from 0 to 7 [ 678.558989][T16697] Dev loop2: unable to read RDB block 7 [ 678.559031][T16697] loop2: unable to read partition table [ 678.571592][T16697] loop2: partition table beyond EOD, truncated [ 678.571658][T16697] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 678.899171][ T9] usb 5-1: USB disconnect, device number 50 [ 679.055023][ T5330] rc_core: IR keymap rc-hauppauge not found [ 679.055043][ T5330] Registered IR keymap rc-empty [ 679.055201][ T5330] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.073928][ T5330] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.359304][ T5330] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 679.373467][ T5330] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input42 [ 679.402730][ T5330] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.416816][ T5330] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.436101][ T5330] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.481177][ T5330] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.520169][T16721] hub 8-0:1.0: USB hub found [ 679.521964][T16721] hub 8-0:1.0: 1 port detected [ 679.526817][ T5330] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.550888][ T5330] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.590682][ T5330] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.630762][ T5330] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.656033][ T5330] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.736403][ T5330] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 680.306521][ T5330] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 680.306546][ T5330] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 680.453916][ T5330] usb 1-1: USB disconnect, device number 31 [ 680.611645][T16730] netlink: 508 bytes leftover after parsing attributes in process `syz.2.4219'. [ 680.611684][T16730] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4219'. [ 680.619699][T16730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4219'. [ 680.943512][T16743] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4226'. [ 681.139597][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4227'. [ 682.896408][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 682.896478][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 683.222575][T16783] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4240'. [ 683.289726][T16788] sg_write: data in/out 455644/242 bytes for SCSI command 0x0-- guessing data in; [ 683.289726][T16788] program syz.0.4240 not setting count and/or reply_len properly [ 683.560327][T14822] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 683.674624][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 683.674641][ T36] audit: type=1326 audit(1778749201.866:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16800 comm="syz.0.4247" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f389fce59 code=0x7ffc0000 [ 683.674682][ T36] audit: type=1326 audit(1778749201.866:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16800 comm="syz.0.4247" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f389fce59 code=0x7ffc0000 [ 683.676685][ T36] audit: type=1326 audit(1778749201.877:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16800 comm="syz.0.4247" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f389fce59 code=0x7ffc0000 [ 683.677129][ T36] audit: type=1326 audit(1778749201.877:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16800 comm="syz.0.4247" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f389fce59 code=0x7ffc0000 [ 683.681239][ T36] audit: type=1326 audit(1778749201.877:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16800 comm="syz.0.4247" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7f389fce59 code=0x7ffc0000 [ 683.681604][ T36] audit: type=1326 audit(1778749201.877:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16800 comm="syz.0.4247" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f389fce59 code=0x7ffc0000 [ 683.683349][ T36] audit: type=1326 audit(1778749201.877:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16800 comm="syz.0.4247" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f389fce59 code=0x7ffc0000 [ 683.684024][ T36] audit: type=1326 audit(1778749201.877:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16800 comm="syz.0.4247" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f389fce59 code=0x7ffc0000 [ 683.688543][ T36] audit: type=1326 audit(1778749201.887:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16800 comm="syz.0.4247" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f7f389fce59 code=0x7ffc0000 [ 683.688593][ T36] audit: type=1326 audit(1778749201.887:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16800 comm="syz.0.4247" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f389fce59 code=0x7ffc0000 [ 683.706564][T14822] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 683.706595][T14822] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.706631][T14822] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 683.706651][T14822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.778800][T14822] hub 5-1:4.0: USB hub found [ 684.049182][T14822] hub 5-1:4.0: config failed, can't read hub descriptor (err -90) [ 684.570635][ T31] usb 5-1: USB disconnect, device number 51 [ 684.753653][T16818] FAULT_INJECTION: forcing a failure. [ 684.753653][T16818] name failslab, interval 1, probability 0, space 0, times 0 [ 684.753675][T16818] CPU: 1 UID: 0 PID: 16818 Comm: syz.3.4255 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 684.753690][T16818] Tainted: [L]=SOFTLOCKUP [ 684.753693][T16818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 684.753699][T16818] Call Trace: [ 684.753704][T16818] [ 684.753709][T16818] dump_stack_lvl+0xe8/0x150 [ 684.753725][T16818] should_fail_ex+0x46b/0x600 [ 684.753744][T16818] ? __pfx_sock_alloc_inode+0x10/0x10 [ 684.753760][T16818] should_failslab+0xa8/0x100 [ 684.753773][T16818] ? __pfx_sock_alloc_inode+0x10/0x10 [ 684.753786][T16818] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 684.753797][T16818] ? sock_alloc_inode+0x2c/0x190 [ 684.753813][T16818] ? __pfx_sock_alloc_inode+0x10/0x10 [ 684.753827][T16818] sock_alloc_inode+0x2c/0x190 [ 684.753842][T16818] ? __pfx_sock_alloc_inode+0x10/0x10 [ 684.753855][T16818] alloc_inode+0x6a/0x1b0 [ 684.753870][T16818] do_accept+0x144/0x760 [ 684.753880][T16818] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 684.753893][T16818] ? __pfx_do_accept+0x10/0x10 [ 684.753914][T16818] __sys_accept4+0x139/0x230 [ 684.753926][T16818] ? __pfx___sys_accept4+0x10/0x10 [ 684.753937][T16818] ? __pfx_ksys_write+0x10/0x10 [ 684.753951][T16818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.753962][T16818] __x64_sys_accept+0x7d/0x90 [ 684.753973][T16818] do_syscall_64+0x15f/0xf80 [ 684.753986][T16818] ? trace_irq_disable+0x3b/0x140 [ 684.753998][T16818] ? clear_bhb_loop+0x40/0x90 [ 684.754011][T16818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.754021][T16818] RIP: 0033:0x7fc08deace59 [ 684.754031][T16818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.754039][T16818] RSP: 002b:00007fc08c106028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 684.754051][T16818] RAX: ffffffffffffffda RBX: 00007fc08e125fa0 RCX: 00007fc08deace59 [ 684.754058][T16818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 684.754065][T16818] RBP: 00007fc08c106090 R08: 0000000000000000 R09: 0000000000000000 [ 684.754070][T16818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.754076][T16818] R13: 00007fc08e126038 R14: 00007fc08e125fa0 R15: 00007ffe4bc453e8 [ 684.754091][T16818] [ 685.474281][T16846] 9p: Bad value for 'rfdno' [ 685.608714][ T5610] Bluetooth: hci4: command 0x0406 tx timeout [ 686.851126][T16868] hub 8-0:1.0: USB hub found [ 686.852920][T16868] hub 8-0:1.0: 1 port detected [ 687.739892][T16867] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4275'. [ 688.143177][T16880] erspan0: entered promiscuous mode [ 688.226747][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4281'. [ 689.162956][T16902] FAULT_INJECTION: forcing a failure. [ 689.162956][T16902] name failslab, interval 1, probability 0, space 0, times 0 [ 689.163015][T16902] CPU: 0 UID: 0 PID: 16902 Comm: syz.1.4288 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 689.163043][T16902] Tainted: [L]=SOFTLOCKUP [ 689.163051][T16902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 689.163063][T16902] Call Trace: [ 689.163071][T16902] [ 689.163078][T16902] dump_stack_lvl+0xe8/0x150 [ 689.163095][T16902] should_fail_ex+0x46b/0x600 [ 689.163115][T16902] should_failslab+0xa8/0x100 [ 689.163129][T16902] __kmalloc_noprof+0xdf/0x7b0 [ 689.163139][T16902] ? kfree+0x4d/0x6c0 [ 689.163148][T16902] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 689.163170][T16902] tomoyo_realpath_from_path+0xe3/0x5d0 [ 689.163186][T16902] ? tomoyo_domain+0xd8/0x130 [ 689.163199][T16902] ? tomoyo_path_number_perm+0x219/0x630 [ 689.163212][T16902] tomoyo_path_number_perm+0x246/0x630 [ 689.163227][T16902] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 689.163242][T16902] ? preempt_schedule_thunk+0x16/0x30 [ 689.163273][T16902] ? __rcu_read_unlock+0x83/0xe0 [ 689.163285][T16902] ? __fget_files+0x2a/0x420 [ 689.163294][T16902] ? __fget_files+0x3a6/0x420 [ 689.163302][T16902] ? __fget_files+0x2a/0x420 [ 689.163313][T16902] security_file_ioctl+0xc3/0x2a0 [ 689.163328][T16902] __se_sys_ioctl+0x47/0x170 [ 689.163340][T16902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.163351][T16902] do_syscall_64+0x15f/0xf80 [ 689.163365][T16902] ? clear_bhb_loop+0x40/0x90 [ 689.163378][T16902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.163388][T16902] RIP: 0033:0x7f26f3e6ce59 [ 689.163398][T16902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.163407][T16902] RSP: 002b:00007f26f209d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.163418][T16902] RAX: ffffffffffffffda RBX: 00007f26f40e6090 RCX: 00007f26f3e6ce59 [ 689.163426][T16902] RDX: 0000200000000100 RSI: 0000000000004b41 RDI: 0000000000000004 [ 689.163432][T16902] RBP: 00007f26f209d090 R08: 0000000000000000 R09: 0000000000000000 [ 689.163438][T16902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.163444][T16902] R13: 00007f26f40e6128 R14: 00007f26f40e6090 R15: 00007fff4f261608 [ 689.163460][T16902] [ 689.163484][T16902] ERROR: Out of memory at tomoyo_realpath_from_path. [ 691.136395][T14822] IPVS: starting estimator thread 0... [ 691.247748][T16930] IPVS: using max 7 ests per chain, 16800 per kthread [ 691.730744][T16946] FAULT_INJECTION: forcing a failure. [ 691.730744][T16946] name failslab, interval 1, probability 0, space 0, times 0 [ 691.734510][T16942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 691.735626][T16946] CPU: 0 UID: 0 PID: 16946 Comm: syz.4.4303 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 691.735655][T16946] Tainted: [L]=SOFTLOCKUP [ 691.735661][T16946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 691.735671][T16946] Call Trace: [ 691.735679][T16946] [ 691.735688][T16946] dump_stack_lvl+0xe8/0x150 [ 691.735714][T16946] should_fail_ex+0x46b/0x600 [ 691.735746][T16946] should_failslab+0xa8/0x100 [ 691.735769][T16946] __kmalloc_noprof+0xdf/0x7b0 [ 691.735788][T16946] ? kfree+0x4d/0x6c0 [ 691.735804][T16946] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 691.735842][T16946] tomoyo_realpath_from_path+0xe3/0x5d0 [ 691.735869][T16946] ? tomoyo_domain+0xd8/0x130 [ 691.735893][T16946] ? tomoyo_path_number_perm+0x219/0x630 [ 691.735915][T16946] tomoyo_path_number_perm+0x246/0x630 [ 691.735942][T16946] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 691.735963][T16946] ? __lock_acquire+0x6b5/0x2cf0 [ 691.735990][T16946] ? do_raw_spin_lock+0x12b/0x2f0 [ 691.736042][T16946] ? __fget_files+0x2a/0x420 [ 691.736062][T16946] ? __fget_files+0x2a/0x420 [ 691.736077][T16946] ? __fget_files+0x3a6/0x420 [ 691.736093][T16946] ? __fget_files+0x2a/0x420 [ 691.736113][T16946] security_file_ioctl+0xc3/0x2a0 [ 691.736140][T16946] __se_sys_ioctl+0x47/0x170 [ 691.736162][T16946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.736182][T16946] do_syscall_64+0x15f/0xf80 [ 691.736204][T16946] ? trace_irq_disable+0x3b/0x140 [ 691.736224][T16946] ? clear_bhb_loop+0x40/0x90 [ 691.736246][T16946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.736264][T16946] RIP: 0033:0x7ff35cbbce59 [ 691.736280][T16946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.736294][T16946] RSP: 002b:00007ff35adf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 691.736313][T16946] RAX: ffffffffffffffda RBX: 00007ff35ce36090 RCX: 00007ff35cbbce59 [ 691.736326][T16946] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 691.736338][T16946] RBP: 00007ff35adf5090 R08: 0000000000000000 R09: 0000000000000000 [ 691.736349][T16946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.736360][T16946] R13: 00007ff35ce36128 R14: 00007ff35ce36090 R15: 00007ffe862e6c48 [ 691.736392][T16946] [ 691.736400][T16946] ERROR: Out of memory at tomoyo_realpath_from_path. [ 692.076427][T14822] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 692.221912][T14822] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 692.221945][T14822] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.221981][T14822] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 692.222001][T14822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.283374][T14822] hub 1-1:4.0: USB hub found [ 692.517554][T14822] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 693.954619][ T5330] usb 1-1: USB disconnect, device number 32 [ 694.533788][T15197] Bluetooth: hci3: command 0x0406 tx timeout [ 696.958574][T16992] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 696.958601][T16992] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 696.958696][T16992] vhci_hcd vhci_hcd.0: Device attached [ 697.135494][ T5732] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 697.204074][ T9] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 697.281273][ T5732] usb 5-1: Using ep0 maxpacket: 8 [ 697.376364][ T5732] usb 5-1: unable to get BOS descriptor or descriptor too short [ 697.376447][ T5732] usb 5-1: no configurations [ 697.376460][ T5732] usb 5-1: can't read configurations, error -22 [ 697.448816][T16997] usb 41-1: recv xbuf, 0 [ 697.454755][T16998] ================================================================== [ 697.454773][T16998] BUG: KASAN: slab-use-after-free in vhci_tx_loop+0x3e9/0x1c50 [ 697.454803][T16998] Read of size 8 at addr ffff888025a4b720 by task vhci_tx/16998 [ 697.454819][T16998] [ 697.454833][T16998] CPU: 1 UID: 0 PID: 16998 Comm: vhci_tx Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 697.454857][T16998] Tainted: [L]=SOFTLOCKUP [ 697.454865][T16998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 697.454876][T16998] Call Trace: [ 697.454884][T16998] [ 697.454892][T16998] dump_stack_lvl+0xe8/0x150 [ 697.454914][T16998] print_address_description+0x55/0x1e0 [ 697.454935][T16998] ? vhci_tx_loop+0x3e9/0x1c50 [ 697.454956][T16998] print_report+0x58/0x70 [ 697.454973][T16998] kasan_report+0x117/0x150 [ 697.454995][T16998] ? vhci_tx_loop+0x3e9/0x1c50 [ 697.455019][T16998] vhci_tx_loop+0x3e9/0x1c50 [ 697.455040][T16998] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 697.455062][T16998] ? __set_cpus_allowed_ptr_locked+0x7bb/0x19c0 [ 697.455093][T16998] ? __pfx_vhci_tx_loop+0x10/0x10 [ 697.455119][T16998] ? __lock_acquire+0x6b5/0x2cf0 [ 697.455158][T16998] ? do_raw_spin_lock+0x12b/0x2f0 [ 697.455177][T16998] ? lock_acquire+0x106/0x350 [ 697.455202][T16998] ? __pfx_autoremove_wake_function+0x10/0x10 [ 697.455224][T16998] ? __kthread_parkme+0x7a/0x1f0 [ 697.455247][T16998] kthread+0x388/0x470 [ 697.455268][T16998] ? __pfx_vhci_tx_loop+0x10/0x10 [ 697.455289][T16998] ? __pfx_kthread+0x10/0x10 [ 697.455310][T16998] ret_from_fork+0x514/0xb70 [ 697.455331][T16998] ? __pfx_ret_from_fork+0x10/0x10 [ 697.455349][T16998] ? __switch_to+0xc79/0x1410 [ 697.455374][T16998] ? __pfx_kthread+0x10/0x10 [ 697.455393][T16998] ret_from_fork_asm+0x1a/0x30 [ 697.455419][T16998] [ 697.455425][T16998] [ 697.455433][T16998] Allocated by task 9: [ 697.455441][T16998] kasan_save_track+0x3e/0x80 [ 697.455454][T16998] __kasan_kmalloc+0x93/0xb0 [ 697.455468][T16998] __kmalloc_cache_noprof+0x3a6/0x690 [ 697.455483][T16998] vhci_urb_enqueue+0x5c9/0xe10 [ 697.455500][T16998] usb_hcd_submit_urb+0x323/0x1b50 [ 697.455518][T16998] usb_start_wait_urb+0x13f/0x5b0 [ 697.455532][T16998] usb_control_msg+0x234/0x3e0 [ 697.455545][T16998] hub_port_init+0xb1e/0x28c0 [ 697.455560][T16998] hub_event+0x25d3/0x4f60 [ 697.455574][T16998] process_scheduled_works+0xb5d/0x1860 [ 697.455591][T16998] worker_thread+0xa53/0xfc0 [ 697.455607][T16998] kthread+0x388/0x470 [ 697.455625][T16998] ret_from_fork+0x514/0xb70 [ 697.455640][T16998] ret_from_fork_asm+0x1a/0x30 [ 697.455658][T16998] [ 697.455663][T16998] Freed by task 16997: [ 697.455670][T16998] kasan_save_track+0x3e/0x80 [ 697.455683][T16998] kasan_save_free_info+0x46/0x50 [ 697.455702][T16998] __kasan_slab_free+0x5c/0x80 [ 697.455717][T16998] kfree+0x1c5/0x6c0 [ 697.455731][T16998] pickup_urb_and_free_priv+0x225/0x3f0 [ 697.455750][T16998] vhci_rx_loop+0x3c5/0xa00 [ 697.455769][T1[ 697.455769][T16998] kthread+0x388/0x470 [ 697.455787][T16998] ret_from_fork+0x514/0xb70 [ 697.455802][T16998] ret_from_fork_asm+0x1a/0x30 [ 697.455821][T16998] [ 697.455825][T16998] The buggy address belongs to the object at ffff888025a4b700 [ 697.455825][T16998] which belongs to the cache kmalloc-64 of size 64 [ 697.455841][T16998] The buggy address is located 32 bytes inside of [ 697.455841][T16998] freed 64-byte region [ffff888025a4b700, ffff888025a4b740) [ 697.455860][T16998] [ 697.455864][T16998] The buggy address belongs to the physical page: [ 697.455883][T16998] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25a4b [ 697.455901][T16998] flags: 0x80000000000000(node=0|zone=1) [ 697.455919][T16998] page_type: f5(slab) [ 697.455937][T16998] raw: 0080000000000000 ffff88801a0108c0 dead000000000100 dead000000000122 [ 697.455951][T16998] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 697.455960][T16998] page dumped because: kasan: bad access detected [ 697.455974][T16998] page_owner tracks the page as allocated [ 697.455980][T16998] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21068060516, free_ts 21067304845 [ 697.456011][T16998] post_alloc_hook+0x231/0x280 [ 697.456027][T16998] get_page_from_freelist+0x27c8/0x2840 [ 697.456046][T16998] __alloc_frozen_pages_noprof+0x18d/0x380 [ 697.456065][T16998] allocate_slab+0x77/0x660 [ 697.456085][T16998] refill_objects+0x33c/0x3d0 [ 697.456104][T16998] __pcs_replace_empty_main+0x373/0x720 [ 697.456125][T16998] __kmalloc_noprof+0x530/0x7b0 [ 697.456148][T16998] tomoyo_get_name+0x20c/0x590 [ 697.456172][T16998] tomoyo_parse_name_union+0xd9/0x130 [ 697.456190][T16998] tomoyo_update_mount_acl+0xe9/0x2d0 [ 697.456208][T16998] tomoyo_write_file+0xae4/0xc50 [ 697.456227][T16998] tomoyo_supervisor+0x1208/0x1570 [ 697.456241][T16998] tomoyo_mount_permission+0x624/0x9d0 [ 697.456262][T16998] security_sb_mount+0xe4/0x320 [ 697.456277][T16998] path_mount+0xbc/0x10e0 [ 697.456297][T16998] init_mount+0xc3/0x110 [ 697.456317][T16998] page last free pid 1 tgid 1 stack trace: [ 697.456326][T16998] free_unref_folios+0xc50/0x1970 [ 697.456343][T16998] folios_put_refs+0x7cb/0x8d0 [ 697.456360][T16998] truncate_inode_pages_range+0x3e0/0xe30 [ 697.456380][T16998] blkdev_flush_mapping+0x10c/0x2f0 [ 697.456403][T16998] bdev_release+0x422/0x660 [ 697.456421][T16998] blkdev_release+0x15/0x20 [ 697.456442][T16998] __fput+0x461/0xa70 [ 697.456463][T16998] task_work_run+0x1d9/0x270 [ 697.456483][T16998] mount_root_generic+0x1bf/0x450 [ 697.456505][T16998] prepare_namespace+0x66/0xc0 [ 697.456519][T16998] kernel_init_freeable+0x2ee/0x3e0 [ 697.456540][T16998] kernel_init+0x1d/0x1d0 [ 697.456561][T16998] ret_from_fork+0x514/0xb70 [ 697.456577][T16998] ret_from_fork_asm+0x1a/0x30 [ 697.456595][T16998] [ 697.456600][T16998] Memory state around the buggy address: [ 697.456609][T16998] ffff888025a4b600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 697.456621][T16998] ffff888025a4b680: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 697.456633][T16998] >ffff888025a4b700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 697.456642][T16998] ^ [ 697.456651][T16998] ffff888025a4b780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 697.456663][T16998] ffff888025a4b800: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 697.456671][T16998] ================================================================== [ 697.523671][T17008] 9p: Bad value for 'rfdno' [ 697.737784][ T9] usb 41-1: device descriptor read/64, error -71 [ 697.780402][T16998] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 697.780426][T16998] CPU: 1 UID: 0 PID: 16998 Comm: vhci_tx Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 697.780452][T16998] Tainted: [L]=SOFTLOCKUP [ 697.780459][T16998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 697.780471][T16998] Call Trace: [ 697.780478][T16998] [ 697.780486][T16998] vpanic+0x56c/0xa60 [ 697.780513][T16998] ? __pfx_vpanic+0x10/0x10 [ 697.780538][T16998] panic+0xc5/0xd0 [ 697.780557][T16998] ? __pfx_panic+0x10/0x10 [ 697.780578][T16998] ? preempt_schedule_thunk+0x16/0x30 [ 697.780604][T16998] ? vhci_tx_loop+0x3e9/0x1c50 [ 697.780625][T16998] ? preempt_schedule_thunk+0x16/0x30 [ 697.780649][T16998] ? vhci_tx_loop+0x3e9/0x1c50 [ 697.780669][T16998] check_panic_on_warn+0x89/0xb0 [ 697.780692][T16998] ? vhci_tx_loop+0x3e9/0x1c50 [ 697.780712][T16998] end_report+0x73/0x170 [ 697.780732][T16998] ? vhci_tx_loop+0x3e9/0x1c50 [ 697.780752][T16998] kasan_report+0x128/0x150 [ 697.780772][T16998] ? vhci_tx_loop+0x3e9/0x1c50 [ 697.780796][T16998] vhci_tx_loop+0x3e9/0x1c50 [ 697.780816][T16998] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 697.780838][T16998] ? __set_cpus_allowed_ptr_locked+0x7bb/0x19c0 [ 697.780877][T16998] ? __pfx_vhci_tx_loop+0x10/0x10 [ 697.780903][T16998] ? __lock_acquire+0x6b5/0x2cf0 [ 697.780934][T16998] ? do_raw_spin_lock+0x12b/0x2f0 [ 697.780953][T16998] ? lock_acquire+0x106/0x350 [ 697.780978][T16998] ? __pfx_autoremove_wake_function+0x10/0x10 [ 697.780999][T16998] ? __kthread_parkme+0x7a/0x1f0 [ 697.781022][T16998] kthread+0x388/0x470 [ 697.781044][T16998] ? __pfx_vhci_tx_loop+0x10/0x10 [ 697.781062][T16998] ? __pfx_kthread+0x10/0x10 [ 697.781083][T16998] ret_from_fork+0x514/0xb70 [ 697.781102][T16998] ? __pfx_ret_from_fork+0x10/0x10 [ 697.781119][T16998] ? __switch_to+0xc79/0x1410 [ 697.781143][T16998] ? __pfx_kthread+0x10/0x10 [ 697.781164][T16998] ret_from_fork_asm+0x1a/0x30 [ 697.781191][T16998] [ 697.781576][T16998] Kernel Offset: disabled