last executing test programs: 9m41.455412388s ago: executing program 1 (id=2): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x8002000, 0x200008, 0x1}}) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fallocate(r4, 0x100000000000011, 0x2000, 0x2f93) 9m38.198370337s ago: executing program 1 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f00000006c0)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) mknod$loop(0x0, 0x6000, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0xff}, 0x10) 9m33.751654461s ago: executing program 1 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10) recvmmsg$unix(r0, 0x0, 0x0, 0x20, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48854) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x4000020) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r1, &(0x7f0000000800)='transport=loop,nqn=n', 0x14) 9m22.751593481s ago: executing program 2 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f00000006c0)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) mknod$loop(0x0, 0x6000, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0xff}, 0x10) 9m18.130282875s ago: executing program 32 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10) recvmmsg$unix(r0, 0x0, 0x0, 0x20, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48854) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x4000020) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r1, &(0x7f0000000800)='transport=loop,nqn=n', 0x14) 9m18.073248434s ago: executing program 2 (id=30): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r3 = syz_io_uring_setup(0x126b, &(0x7f0000000740)={0x0, 0x72de, 0x0, 0x0, 0x3a8}, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x2, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}, 0x20) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x1000}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000001c0)=0xf3f, 0x4) sendto$packet(r7, &(0x7f0000000400)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, &(0x7f0000000480)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 9m12.259699952s ago: executing program 2 (id=34): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000003f00)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f000001cf80)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x0, 0x4eac, 0x5, 0xce}}) r4 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x4c80, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0x0, 0x100}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) 9m9.438006838s ago: executing program 2 (id=35): fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') pread64(r3, &(0x7f0000000340)=""/102330, 0x18fba, 0x1c26) 9m4.560270774s ago: executing program 2 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f00000006c0)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) mknod$loop(0x0, 0x6000, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0xff}, 0x10) 9m3.344930926s ago: executing program 2 (id=40): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400000000", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x0, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0x9, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x3, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x6, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0xfa8, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x8001, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x494, 0x7, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0x2ee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x40, 0x800003, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7f7, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x8, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0xbe, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYBLOB="000000000000000408001d00"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 8m47.773416237s ago: executing program 33 (id=40): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400000000", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x0, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0x9, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x3, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x6, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0xfa8, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x8001, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x494, 0x7, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0x2ee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x40, 0x800003, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7f7, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x8, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0xbe, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYBLOB="000000000000000408001d00"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18.916442831s ago: executing program 4 (id=880): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xffea, 0x8000}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000780)={r1, 0x6000000, 0x4, 0x1fffe000000000}) unshare(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/mm/ksm/merge_across_nodes\x00', 0x4) syz_open_dev$dri(&(0x7f00000009c0), 0x5, 0x143000) (async) syz_open_dev$dri(&(0x7f00000009c0), 0x5, 0x143000) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000880)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000880)=0x7) getpid() (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000008c0)=0x6) (async) sched_setscheduler(r4, 0x2, &(0x7f00000008c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000900)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000940), 0x0, 0x0) read$msr(r5, &(0x7f0000001140)=""/102392, 0x18ff8) (async) read$msr(r5, &(0x7f0000001140)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f000001a140), 0x84042, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) syz_open_dev$dvb_frontend(&(0x7f000001a180), 0x0, 0x0) (async) r6 = syz_open_dev$dvb_frontend(&(0x7f000001a180), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f000001a1c0)={0x4, &(0x7f000001a200)=[{0x38, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x3}, {0x0, @svalue=0x9318}, {0x0, @uvalue=0xa182}]}, 0x3}, {0x12, '\x00', @buffer={"32b555889142a41ed045b3c734c839ba999e105f8f20f05915a84e2763edb306", 0x20}, 0xfff}, {0x39, '\x00', @buffer={"cd5a585529647c60c5ccc64aca130e0f968982e34913b76bd9482a68561e7b05", 0x20}, 0x5}, {0x46, '\x00', @data=0x2, 0x45}]}) (async) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f000001a1c0)={0x4, &(0x7f000001a200)=[{0x38, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x3}, {0x0, @svalue=0x9318}, {0x0, @uvalue=0xa182}]}, 0x3}, {0x12, '\x00', @buffer={"32b555889142a41ed045b3c734c839ba999e105f8f20f05915a84e2763edb306", 0x20}, 0xfff}, {0x39, '\x00', @buffer={"cd5a585529647c60c5ccc64aca130e0f968982e34913b76bd9482a68561e7b05", 0x20}, 0x5}, {0x46, '\x00', @data=0x2, 0x45}]}) ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x8, &(0x7f0000000980)={[0x85]}) mkdirat(0xffffffffffffff9c, &(0x7f000001a340)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f000001a380)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000001a3c0)='./sys/kernel/mm/ksm/merge_across_nodes\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000007c0)) r7 = add_key$keyring(&(0x7f0000001100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)=@secondary) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r7) (async) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r7) 16.517999359s ago: executing program 4 (id=886): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000100000c02000000000000000100000d00000000000000000000000000005f"], 0x0, 0x3c, 0x0, 0x0, 0x3}, 0x28) r1 = io_uring_setup(0x220c, &(0x7f0000000480)={0x0, 0xfffffffa, 0x40, 0x0, 0x6f}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f00000002c0)="a4b7826cbd331280bcb1fcd6a7b228ba51779eee54f2aac3", 0x18) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000500), 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000500), 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newsa={0xf8, 0x1a, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@private=0xa010102, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x2b}, @in6=@mcast1, {0x0, 0x2, 0x2, 0x0, 0x100000005, 0xfffffffffffffffe}, {0x0, 0x200000, 0x4}, {0x40000, 0xfffffffd, 0xae8}, 0xfffffffd, 0x0, 0xa, 0x2}, [@extra_flags={0x8, 0x23, 0x9}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000700), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000740)={r3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a91039026d1f3c4da06963c789d130e04d528539f3d3289737f0374c72a964a02447a71aae971602693a96ba193b7e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./trace\x00', 0x1ff) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f00000009c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) bind$rxrpc(r5, &(0x7f0000000a00)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) mount(0x0, &(0x7f00000008c0)='./trace\x00', &(0x7f0000000900)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./trace/set_event\x00', 0x2, 0x0) write(r6, &(0x7f0000000980)='!:*', 0x3) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x77, 0xfff, 0x2c, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x10, 0xe, 0x1}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000200)={0x830, {{0xa, 0x4e21, 0x0, @mcast1, 0x5f66}}}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000000950000000000000089e77f8ebcaddbfc4a227578d1cb976ecc68c344d8ff40ff622e0468de3e8635b575a60c2f52f68a3d09ae0786d54b8566432a45477d69e5253bd7789fc72a4a0a98dffafe6f807759dad9dd8a388bd108b1a1193dfad8076886fe0696fae3d18be4f67b3c32efec1fa3716b5081948eaa4462801032f5629435a871d5f4ed206bc04fb1cfebcaa01f15abc5266dfe125c3159992515f536b9c9108988abdea6df3dbb4d8a8998bdd76dea"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, r0, 0x8, &(0x7f0000000440)={0x0, 0x3}, 0x8}, 0x94) 11.33397016s ago: executing program 6 (id=897): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000"], 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x3c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.728892375s ago: executing program 5 (id=898): socket(0x10, 0x3, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000003580)={0x100000000000000}, &(0x7f0000003740)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_coalesce={0xf}}) r4 = syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000340)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe5, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c82900100000001e00", "00000000030000000010e809", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000004c0)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000500)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) getsockname$packet(0xffffffffffffffff, &(0x7f0000003540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x2, 0x0) ptrace$peeksig(0x4209, r6, &(0x7f0000000000)={0x5, 0x405}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000035c0)={'ip6_vti0\x00', &(0x7f0000003600)={'syztnl1\x00', r5, 0x0, 0xc1, 0xfe, 0x7, 0x16, @dev={0xfe, 0x80, '\x00', 0x1f}, @remote, 0x802f, 0x10, 0xffff, 0x2aa1f953}}) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') read$FUSE(r7, 0x0, 0x0) 9.465845908s ago: executing program 0 (id=900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 9.047419789s ago: executing program 0 (id=901): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x40042, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000340)=0x400) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x80) 8.592313417s ago: executing program 0 (id=902): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_io_uring_setup(0x126b, 0x0, 0x0, &(0x7f0000000800), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000008c0)={0x9, 0x0, &(0x7f0000000900)=[r3]}, 0x1) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x1000}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000001c0)=0xf3f, 0x4) sendto$packet(r7, &(0x7f0000000400)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, &(0x7f0000000480)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.456686168s ago: executing program 3 (id=903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a3100000000"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000a06030000000000000000000a000000340007800c000180080001407f0000010c00148008000140ac1e010106000440500000000600054054640000050007000600000005000100060000000900020073797a31"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 6.952140415s ago: executing program 0 (id=904): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x8002000, 0x200008, 0x1}}) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fallocate(r4, 0x100000000000011, 0x2000, 0x2f93) 6.931329947s ago: executing program 6 (id=905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x164, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x24044805}, 0x40) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000ffdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="2e003300d0000000ffffffffffff08021100000050505050505020000004"], 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x48}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 6.74560491s ago: executing program 3 (id=906): socket$nl_audit(0x10, 0x3, 0x9) openat(0xffffffffffffff9c, &(0x7f0000001180)='./file1\x00', 0x141442, 0x41) openat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000001200)={0xa, 0x400000000008d}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001280)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000012c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000013c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001400), 0x4000087, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000002500)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) 5.013840234s ago: executing program 4 (id=907): socket(0x10, 0x3, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000003580)={0x100000000000000}, &(0x7f0000003740)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_coalesce={0xf}}) r4 = syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000340)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe5, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c82900100000001e00", "00000000030000000010e809", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000004c0)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000500)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) getsockname$packet(0xffffffffffffffff, &(0x7f0000003540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x2, 0x0) ptrace$peeksig(0x4209, r6, &(0x7f0000000000)={0x5, 0x405}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000035c0)={'ip6_vti0\x00', &(0x7f0000003600)={'syztnl1\x00', r5, 0x0, 0xc1, 0xfe, 0x7, 0x16, @dev={0xfe, 0x80, '\x00', 0x1f}, @remote, 0x802f, 0x10, 0xffff, 0x2aa1f953}}) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') read$FUSE(r7, 0x0, 0x0) 3.599242742s ago: executing program 5 (id=908): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/ttyUSB0\x00', 0x0, 0x60) ioctl$TIOCMGET(r0, 0x5415, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x13, 0xa, 0x502, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0xc885}, 0x20000010) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000030000000200000003"], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x8, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, &(0x7f0000000180)="a66aacffc74d764d05996def6b4a236b657e898ba461aedb0a703f30c8335ea6269289d9dc2d6700ef5bb3d9570a9b260b5c6dff28995de4308dea5f84c6943652af4251f76b642c7a9988acdd8d937a24e942f1d9819440dbc881cba3bf375f71786b6ec054c6811d4a51a4c39a2b1ec74fe5f7b8", &(0x7f0000000200)=""/103}, 0x20) 3.357347111s ago: executing program 6 (id=909): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x147) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[@ANYBLOB="0303e2ee762f87b6941c"], 0xb, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 3.097577272s ago: executing program 3 (id=910): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {0x80000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x2000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="cc0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c000180140003"], 0xcc}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x4, @loopback={0x0, 0x1ff0000aa}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xa0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x8, &(0x7f0000000140)={[{@redirect_dir_off}, {@uuid_on}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x0, 0x0, 0x8000, 0x80000}, 0x50) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x1, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="79116000000000005501020000000000b70000000000000095000000000000008500000060000000b70000000000000095"], &(0x7f0000001340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000001900)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001940)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0xfffffffd, 0x32}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) write(r4, 0x0, 0x0) 2.678962038s ago: executing program 5 (id=911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2.611752404s ago: executing program 6 (id=912): rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000002c0)=0x6a2) close_range(r0, r0, 0x0) read(0xffffffffffffffff, &(0x7f0000000140)=""/36, 0x24) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f00000006c0)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r1, 0x0, 0xffff, 0x2) 2.557271248s ago: executing program 3 (id=913): syz_open_dev$vim2m(0x0, 0x800, 0x2) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000700)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffa, 0x4b, 0x0, 0x0) 2.264434285s ago: executing program 0 (id=914): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_io_uring_setup(0x126b, 0x0, 0x0, &(0x7f0000000800), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000008c0)={0x9, 0x0, &(0x7f0000000900)=[r3]}, 0x1) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x1000}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000001c0)=0xf3f, 0x4) sendto$packet(r7, &(0x7f0000000400)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, &(0x7f0000000480)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.24564818s ago: executing program 4 (id=915): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x100) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x8, 0x201e, 0x1}) (fail_nth: 1) 2.216073326s ago: executing program 3 (id=916): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='sys_mnt\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='\"lgo\"z\"', 0x7) 2.151659647s ago: executing program 5 (id=917): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000340)={0x7, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac14140000000064c1000000030006000000000002"], 0x50}}, 0x20008004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x4, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) fcntl$lock(r2, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x6, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x200005}) fcntl$lock(r2, 0x7, &(0x7f0000000180)={0x1, 0x2, 0x8, 0x73e9}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f00000002c0)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={r4, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000640)={r4, 0x80000001, 0x2c9, 0xfffffff9}, &(0x7f0000000680)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={r4, 0x5}, 0xc) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x108) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="640000000001010400000000141a000002000008240001801400018092eee40b123789b008000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x29, 0x301, 0x70bd2b, 0x25dfdbfd, {0x13}}, 0x14}, 0x1, 0x0, 0x0, 0x404c896}, 0x840) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9800000000b00101040000000000000000020000000c0018800000024000000ea0240001801400018008000100e08021c49078a3ca0c0000010c000280050001000000000054001880080001"], 0x98}, 0x1, 0x0, 0x0, 0x20000100}, 0x0) 1.733298803s ago: executing program 4 (id=918): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000013c0)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="2000000046000901fefffffffeffffff017c00000c0003804e2d", @ANYBLOB='cw'], 0x20}, 0x1, 0x0, 0x0, 0x8855}, 0xc000) syz_emit_vhci(&(0x7f0000003440)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRESHEX=r0], 0xfffffffffffffd7e) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0xe2, &(0x7f00000012c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa330800450800d400000000080190780a810101ac1414aa0b009078032c00004e0000000000000000890000e0000001ac1414aa862a00000002000d5e00020000020000005af300054eb8a600129606053d0006ff003a0000b61af93a93071f63ac1414bbffffffff0a010100640101007f000001ac14141aac1414aa86530000000000124b3defc5168c24ac88ad078c000a2189ea43a2149b84000bf7d11634eea26b75af000902a20948fd74060011ccf0294e2a3bdb4aa40b249e8e0c1a440800000000000800"/226], 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000001240)=0x401, 0x4) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r2, &(0x7f0000001280), 0x10) 1.559978499s ago: executing program 6 (id=919): getpgrp(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000013c0), 0xffffffffffffff97, 0x10, &(0x7f0000001400), 0x1}, 0x48) 1.559682052s ago: executing program 3 (id=920): socket$nl_audit(0x10, 0x3, 0x9) openat(0xffffffffffffff9c, &(0x7f0000001180)='./file1\x00', 0x141442, 0x41) openat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x40042, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000001240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001280)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000012c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000013c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001400), 0x4000087, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000002500)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) 1.419655801s ago: executing program 6 (id=921): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs\x00', 0x1ef) mount(0x0, &(0x7f0000000100)='./tracefs\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='100000', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000300)='0', 0x1) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs/instances/foo\x00', 0x1ff) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) 481.979842ms ago: executing program 5 (id=922): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs\x00', 0x1ef) mount(0x0, &(0x7f0000000100)='./tracefs\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='100000', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000300)='0', 0x1) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs/instances/foo\x00', 0x1ff) (fail_nth: 1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) 196.697114ms ago: executing program 0 (id=923): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a440000001c0a1f0400000000000000000a0000050900010073797a310000000018000480140001800a0001007265646972000000040002800900020073797a32"], 0x6c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs\x00', 0x1ef) mount(0x0, &(0x7f0000000100)='./tracefs\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0xd, [{@broadcast, 0x5}]}]}}}], 0x20}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test\x00', 0x777) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='100000', 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='1', 0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000680)) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f0000000300)='0', 0x1) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./tracefs/instances/foo\x00', 0x1f7) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) 65.856395ms ago: executing program 5 (id=924): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x8002000, 0x200008, 0x1}}) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fallocate(r4, 0x100000000000011, 0x2000, 0x2f93) 0s ago: executing program 4 (id=925): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) kernel console output (not intermixed with test programs): .347359][ T8934] should_fail_ex+0x447/0x5e0 [ 530.347384][ T8934] should_failslab+0xa8/0x100 [ 530.347406][ T8934] __kmalloc_noprof+0xf6/0x790 [ 530.347422][ T8934] ? tomoyo_realpath_from_path+0xf2/0x640 [ 530.347439][ T8934] ? tomoyo_realpath_from_path+0xf2/0x640 [ 530.347461][ T8934] tomoyo_realpath_from_path+0xf2/0x640 [ 530.347485][ T8934] ? tomoyo_path_number_perm+0x219/0x5f0 [ 530.347507][ T8934] tomoyo_path_number_perm+0x246/0x5f0 [ 530.347530][ T8934] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 530.347548][ T8934] ? __lock_acquire+0x747/0x2de0 [ 530.347584][ T8934] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 530.347624][ T8934] ? __fget_files+0x2a/0x420 [ 530.347650][ T8934] ? __fget_files+0x2a/0x420 [ 530.347669][ T8934] ? __fget_files+0x2a/0x420 [ 530.347694][ T8934] security_file_ioctl+0xc3/0x2a0 [ 530.347719][ T8934] __se_sys_ioctl+0x47/0x170 [ 530.347738][ T8934] do_syscall_64+0x166/0x520 [ 530.347756][ T8934] ? trace_irq_disable+0x3b/0x140 [ 530.347778][ T8934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.347797][ T8934] ? clear_bhb_loop+0x70/0xc0 [ 530.347815][ T8934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.347828][ T8934] RIP: 0033:0x7f694d2dfb19 [ 530.347842][ T8934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.347854][ T8934] RSP: 002b:00007f694b52e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.347871][ T8934] RAX: ffffffffffffffda RBX: 00007f694d565fa0 RCX: 00007f694d2dfb19 [ 530.347881][ T8934] RDX: 0000200000000780 RSI: 00000000c0405610 RDI: 0000000000000003 [ 530.347890][ T8934] RBP: 00007f694b52e090 R08: 0000000000000000 R09: 0000000000000000 [ 530.347899][ T8934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.347907][ T8934] R13: 00007f694d566038 R14: 00007f694d565fa0 R15: 00007ffd7d380558 [ 530.347931][ T8934] [ 530.353018][ T8934] ERROR: Out of memory at tomoyo_realpath_from_path. [ 530.565466][ T8941] fuse: Unknown parameter 'user_kd' [ 530.993111][ T8950] tmpfs: Unknown parameter 'subj_role' [ 531.129107][ T8952] netlink: 17 bytes leftover after parsing attributes in process `syz.4.513'. [ 531.148594][ T8952] netlink: 24 bytes leftover after parsing attributes in process `syz.4.513'. [ 531.177581][ T8928] device-mapper: ioctl: device has been removed from the dev hash table. [ 531.226111][ T8956] cougar: G6 mapped to space [ 531.498819][ T8827] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.499792][ T8827] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.499920][ T8827] bridge_slave_0: entered allmulticast mode [ 531.504879][ T8827] bridge_slave_0: entered promiscuous mode [ 531.544801][ T8827] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.544914][ T8827] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.545050][ T8827] bridge_slave_1: entered allmulticast mode [ 531.567026][ T8827] bridge_slave_1: entered promiscuous mode [ 531.943590][ T8963] jffs2: notice: (8963) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 532.068781][ T8827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.174597][ T8827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.611531][ T8971] FAULT_INJECTION: forcing a failure. [ 532.611531][ T8971] name failslab, interval 1, probability 0, space 0, times 0 [ 532.611563][ T8971] CPU: 0 UID: 0 PID: 8971 Comm: syz.4.516 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 532.611585][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 532.611595][ T8971] Call Trace: [ 532.611603][ T8971] [ 532.611611][ T8971] dump_stack_lvl+0xe8/0x150 [ 532.611646][ T8971] should_fail_ex+0x447/0x5e0 [ 532.611675][ T8971] should_failslab+0xa8/0x100 [ 532.611700][ T8971] __kmalloc_noprof+0xf6/0x790 [ 532.611719][ T8971] ? tomoyo_realpath_from_path+0xf2/0x640 [ 532.611740][ T8971] ? tomoyo_realpath_from_path+0xf2/0x640 [ 532.611767][ T8971] tomoyo_realpath_from_path+0xf2/0x640 [ 532.611797][ T8971] ? tomoyo_path_number_perm+0x219/0x5f0 [ 532.611823][ T8971] tomoyo_path_number_perm+0x246/0x5f0 [ 532.611851][ T8971] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 532.611874][ T8971] ? __lock_acquire+0x747/0x2de0 [ 532.611905][ T8827] team0: Port device team_slave_0 added [ 532.611916][ T8971] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 532.611957][ T8971] ? __fget_files+0x2a/0x420 [ 532.611986][ T8971] ? __fget_files+0x2a/0x420 [ 532.612013][ T8971] ? __fget_files+0x2a/0x420 [ 532.612049][ T8971] security_file_ioctl+0xc3/0x2a0 [ 532.612076][ T8971] __se_sys_ioctl+0x47/0x170 [ 532.612099][ T8971] do_syscall_64+0x166/0x520 [ 532.612119][ T8971] ? trace_irq_disable+0x3b/0x140 [ 532.612139][ T8971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.612157][ T8971] ? clear_bhb_loop+0x70/0xc0 [ 532.612179][ T8971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.612196][ T8971] RIP: 0033:0x7f694d2dfb19 [ 532.612214][ T8971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.612230][ T8971] RSP: 002b:00007f694b52e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.612250][ T8971] RAX: ffffffffffffffda RBX: 00007f694d565fa0 RCX: 00007f694d2dfb19 [ 532.612264][ T8971] RDX: 00002000000000c0 RSI: 00000000400452c8 RDI: 0000000000000004 [ 532.612276][ T8971] RBP: 00007f694b52e090 R08: 0000000000000000 R09: 0000000000000000 [ 532.612287][ T8971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.612298][ T8971] R13: 00007f694d566038 R14: 00007f694d565fa0 R15: 00007ffd7d380558 [ 532.612328][ T8971] [ 532.613551][ T8971] ERROR: Out of memory at tomoyo_realpath_from_path. [ 532.716313][ T8827] team0: Port device team_slave_1 added [ 532.956066][ T8827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.956081][ T8827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.956101][ T8827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.957844][ T8970] lo: entered allmulticast mode [ 533.024929][ T8827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.024947][ T8827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.024972][ T8827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.138402][ T8969] lo: left allmulticast mode [ 533.142612][ T8974] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 533.142674][ T8974] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 533.142713][ T8974] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 534.411281][ T8978] overlayfs: overlapping lowerdir path [ 534.465848][ T5604] usb 4-1: USB disconnect, device number 2 [ 534.735733][ T8827] hsr_slave_0: entered promiscuous mode [ 534.758855][ T8827] hsr_slave_1: entered promiscuous mode [ 534.759922][ T8827] debugfs: 'hsr0' already exists in 'hsr' [ 534.759954][ T8827] Cannot create hsr debugfs directory [ 534.876492][ T94] bridge_slave_1: left allmulticast mode [ 534.876529][ T94] bridge_slave_1: left promiscuous mode [ 534.876800][ T94] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.036069][ T94] bridge_slave_0: left allmulticast mode [ 535.036120][ T94] bridge_slave_0: left promiscuous mode [ 535.036954][ T94] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.096443][ T8991] jffs2: notice: (8991) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 535.981276][ T9003] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 537.248124][ T94] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.336775][ T94] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.398435][ T94] bond0 (unregistering): Released all slaves [ 538.455062][ T36] kauditd_printk_skb: 418 callbacks suppressed [ 538.455081][ T36] audit: type=1800 audit(1794136289.008:448): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.529" name=08 dev="sda1" ino=2052 res=0 errno=-22 [ 539.428153][ T8467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.822525][ T8467] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.953597][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.953806][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.080749][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.080864][ T8221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.643052][ T9056] FAULT_INJECTION: forcing a failure. [ 540.643052][ T9056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.643087][ T9056] CPU: 0 UID: 0 PID: 9056 Comm: syz.4.539 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 540.643109][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 540.643119][ T9056] Call Trace: [ 540.643127][ T9056] [ 540.643135][ T9056] dump_stack_lvl+0xe8/0x150 [ 540.643171][ T9056] should_fail_ex+0x447/0x5e0 [ 540.643201][ T9056] _copy_to_iter+0x1e4/0x17e0 [ 540.643308][ T9056] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 540.643338][ T9056] ? __pfx__copy_to_iter+0x10/0x10 [ 540.643367][ T9056] ? rt_spin_unlock+0x159/0x200 [ 540.643390][ T9056] __skb_datagram_iter+0xf8/0x980 [ 540.643451][ T9056] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 540.643482][ T9056] skb_copy_datagram_iter+0xb5/0x240 [ 540.643508][ T9056] netlink_recvmsg+0x2c8/0xa70 [ 540.643533][ T9056] ? __lock_acquire+0x747/0x2de0 [ 540.643566][ T9056] ? __pfx_netlink_recvmsg+0x10/0x10 [ 540.643600][ T9056] ? kstrtouint+0x6e/0xe0 [ 540.643620][ T9056] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 540.643640][ T9056] ? security_socket_recvmsg+0x7e/0x2c0 [ 540.643664][ T9056] ? __pfx_netlink_recvmsg+0x10/0x10 [ 540.643690][ T9056] sock_recvmsg+0x196/0x1e0 [ 540.643718][ T9056] sock_read_iter+0x233/0x300 [ 540.643743][ T9056] ? __pfx_sock_read_iter+0x10/0x10 [ 540.643772][ T9056] ? bpf_lsm_file_permission+0x9/0x20 [ 540.643790][ T9056] ? security_file_permission+0x75/0x260 [ 540.643829][ T9056] vfs_read+0x59e/0xa90 [ 540.643857][ T9056] ? __pfx_vfs_read+0x10/0x10 [ 540.643878][ T9056] ? __fget_files+0x3a8/0x420 [ 540.643903][ T9056] ? __fget_files+0x2a/0x420 [ 540.643931][ T9056] ? fdget+0x1b2/0x250 [ 540.643962][ T9056] ksys_read+0x156/0x270 [ 540.643983][ T9056] ? __pfx_ksys_read+0x10/0x10 [ 540.644012][ T9056] do_syscall_64+0x166/0x520 [ 540.644033][ T9056] ? trace_irq_disable+0x3b/0x140 [ 540.644052][ T9056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.644070][ T9056] ? clear_bhb_loop+0x70/0xc0 [ 540.644092][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.644110][ T9056] RIP: 0033:0x7f694d2dfb19 [ 540.644129][ T9056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.644145][ T9056] RSP: 002b:00007f694b52e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.644165][ T9056] RAX: ffffffffffffffda RBX: 00007f694d565fa0 RCX: 00007f694d2dfb19 [ 540.644179][ T9056] RDX: 000000000000fdef RSI: 0000200000000280 RDI: 0000000000000003 [ 540.644192][ T9056] RBP: 00007f694b52e090 R08: 0000000000000000 R09: 0000000000000000 [ 540.644204][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.644216][ T9056] R13: 00007f694d566038 R14: 00007f694d565fa0 R15: 00007ffd7d380558 [ 540.644245][ T9056] [ 540.986307][ T94] hsr_slave_0: left promiscuous mode [ 541.026129][ T94] hsr_slave_1: left promiscuous mode [ 541.027792][ T94] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.077055][ T94] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.334185][ T36] audit: type=1800 audit(1794136292.018:449): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.541" name=08 dev="sda1" ino=2052 res=0 errno=-22 [ 542.646515][ T94] team0 (unregistering): Port device team_slave_1 removed [ 542.707715][ T94] team0 (unregistering): Port device team_slave_0 removed [ 542.919537][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 543.897728][ T9094] netlink: 'syz.0.546': attribute type 9 has an invalid length. [ 544.751750][ T8467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.135757][ T8467] veth0_vlan: entered promiscuous mode [ 545.162693][ T8467] veth1_vlan: entered promiscuous mode [ 545.229442][ T8467] veth0_macvtap: entered promiscuous mode [ 545.258371][ T8467] veth1_macvtap: entered promiscuous mode [ 545.318920][ T9112] overlayfs: overlapping lowerdir path [ 545.386383][ T8467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.445741][ T8467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.350316][ T8221] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.542936][ T5935] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.545700][ T5935] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.545786][ T5935] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.339278][ T8827] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 547.397149][ T8827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 547.399037][ T8827] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 547.519060][ T9150] netlink: 48 bytes leftover after parsing attributes in process `syz.3.550'. [ 547.572947][ T8827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 547.602868][ T8827] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 547.712109][ T8827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 547.913212][ T8829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 547.943711][ T8829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 547.945099][ T8829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 547.955316][ T8829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 547.967070][ T8829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 548.154706][ T9169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.554'. [ 548.431573][ T8827] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 549.256674][ T9181] FAULT_INJECTION: forcing a failure. [ 549.256674][ T9181] name failslab, interval 1, probability 0, space 0, times 0 [ 549.256750][ T9181] CPU: 1 UID: 0 PID: 9181 Comm: syz.0.556 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 549.256774][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 549.256785][ T9181] Call Trace: [ 549.256793][ T9181] [ 549.256802][ T9181] dump_stack_lvl+0xe8/0x150 [ 549.256837][ T9181] should_fail_ex+0x447/0x5e0 [ 549.256867][ T9181] should_failslab+0xa8/0x100 [ 549.256890][ T9181] __kmalloc_noprof+0xf6/0x790 [ 549.256902][ T9181] ? tomoyo_realpath_from_path+0xf2/0x640 [ 549.256913][ T9181] ? tomoyo_realpath_from_path+0xf2/0x640 [ 549.256927][ T9181] tomoyo_realpath_from_path+0xf2/0x640 [ 549.256943][ T9181] ? tomoyo_path_number_perm+0x219/0x5f0 [ 549.256958][ T9181] tomoyo_path_number_perm+0x246/0x5f0 [ 549.256973][ T9181] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 549.256986][ T9181] ? __lock_acquire+0x747/0x2de0 [ 549.257009][ T9181] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 549.257034][ T9181] ? __fget_files+0x2a/0x420 [ 549.257049][ T9181] ? __fget_files+0x2a/0x420 [ 549.257063][ T9181] ? __fget_files+0x2a/0x420 [ 549.257079][ T9181] security_file_ioctl+0xc3/0x2a0 [ 549.257095][ T9181] __se_sys_ioctl+0x47/0x170 [ 549.257108][ T9181] do_syscall_64+0x166/0x520 [ 549.257120][ T9181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.257131][ T9181] ? clear_bhb_loop+0x70/0xc0 [ 549.257147][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.257157][ T9181] RIP: 0033:0x7fb45918fb19 [ 549.257168][ T9181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.257177][ T9181] RSP: 002b:00007fb4573bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.257189][ T9181] RAX: ffffffffffffffda RBX: 00007fb459416090 RCX: 00007fb45918fb19 [ 549.257197][ T9181] RDX: 00002000000007c0 RSI: 00000000c08c5334 RDI: 0000000000000003 [ 549.257204][ T9181] RBP: 00007fb4573bd090 R08: 0000000000000000 R09: 0000000000000000 [ 549.257210][ T9181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.257216][ T9181] R13: 00007fb459416128 R14: 00007fb459416090 R15: 00007fff7dc63298 [ 549.257233][ T9181] [ 549.257300][ T9181] ERROR: Out of memory at tomoyo_realpath_from_path. [ 549.622728][ T8827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 550.117131][ T4924] Bluetooth: hci4: command tx timeout [ 550.152852][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.251219][ T9190] hub 1-0:1.0: USB hub found [ 550.257804][ T9190] hub 1-0:1.0: 1 port detected [ 550.517304][ T8827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.712895][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.779218][ T8827] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.788042][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.823302][ T5932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.863269][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.863389][ T8221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.123768][ T9221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.564'. [ 551.148189][ T9223] tmpfs: Unsupported parameter 'huge' [ 551.255575][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.474789][ T36] audit: type=1326 audit(1794136302.028:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9222 comm="syz.0.567" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45918fb19 code=0x7ffc0000 [ 551.474911][ T36] audit: type=1326 audit(1794136302.028:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9222 comm="syz.0.567" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45918fb19 code=0x7ffc0000 [ 551.530808][ T36] audit: type=1326 audit(1794136302.088:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9222 comm="syz.0.567" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb45918fb19 code=0x7ffc0000 [ 551.530858][ T36] audit: type=1326 audit(1794136302.088:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9222 comm="syz.0.567" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45918fb19 code=0x7ffc0000 [ 551.530898][ T36] audit: type=1326 audit(1794136302.088:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9222 comm="syz.0.567" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45918fb19 code=0x7ffc0000 [ 551.624694][ T9163] rxe_eth0 speed is unknown, defaulting to 1000 [ 552.196145][ T4924] Bluetooth: hci4: command tx timeout [ 552.477243][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 552.656143][ T5899] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 552.865334][ T5899] usb 1-1: device descriptor read/64, error -71 [ 552.892878][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.154622][ T5899] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 553.228924][ T36] audit: type=1326 audit(1794136303.788:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9240 comm="syz.4.569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 553.229222][ T36] audit: type=1326 audit(1794136303.788:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9240 comm="syz.4.569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 553.260807][ T36] audit: type=1326 audit(1794136303.818:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9240 comm="syz.4.569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 553.260857][ T36] audit: type=1326 audit(1794136303.818:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9240 comm="syz.4.569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 553.273149][ T36] audit: type=1326 audit(1794136303.828:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9240 comm="syz.4.569" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 553.296086][ T5899] usb 1-1: device descriptor read/64, error -71 [ 553.406483][ T5899] usb usb1-port1: attempt power cycle [ 554.394332][ T4924] Bluetooth: hci4: command tx timeout [ 554.897082][ T5899] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 555.014784][ T5899] usb 1-1: device descriptor read/8, error -71 [ 556.097820][ T49] bridge_slave_1: left allmulticast mode [ 556.097857][ T49] bridge_slave_1: left promiscuous mode [ 556.098109][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.240968][ T49] bridge_slave_0: left allmulticast mode [ 556.241006][ T49] bridge_slave_0: left promiscuous mode [ 556.241243][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.436107][ T4924] Bluetooth: hci4: command tx timeout [ 557.945056][ T9273] jffs2: notice: (9273) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 558.058591][ T9274] jffs2: Checked all inodes but still 0x0 bytes of unchecked space? [ 558.058631][ T9274] jffs2: No space for garbage collection. Aborting GC thread [ 558.446146][ T5899] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 558.531580][ T9279] jffs2: notice: (9279) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 558.741070][ T5899] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.00 [ 558.810325][ T5899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.810368][ T5899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 558.854468][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 558.854510][ T5899] usb 1-1: SerialNumber: syz [ 558.864409][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.943305][ T5899] usb 1-1: 0:2 : does not exist [ 558.961452][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.023785][ T49] bond0 (unregistering): Released all slaves [ 559.587880][ T9294] FAULT_INJECTION: forcing a failure. [ 559.587880][ T9294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.587913][ T9294] CPU: 0 UID: 0 PID: 9294 Comm: syz.4.581 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 559.587938][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 559.587950][ T9294] Call Trace: [ 559.587957][ T9294] [ 559.587965][ T9294] dump_stack_lvl+0xe8/0x150 [ 559.588000][ T9294] should_fail_ex+0x447/0x5e0 [ 559.588031][ T9294] _copy_from_user+0x2d/0xb0 [ 559.588057][ T9294] ___sys_sendmsg+0x1c6/0x360 [ 559.588076][ T9294] ? __lock_acquire+0x747/0x2de0 [ 559.588109][ T9294] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.588165][ T9294] ? __fget_files+0x3a8/0x420 [ 559.588190][ T9294] ? __fget_files+0x2a/0x420 [ 559.588224][ T9294] __x64_sys_sendmsg+0x1b7/0x290 [ 559.588246][ T9294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 559.588288][ T9294] do_syscall_64+0x166/0x520 [ 559.588310][ T9294] ? trace_irq_disable+0x3b/0x140 [ 559.588330][ T9294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.588348][ T9294] ? clear_bhb_loop+0x70/0xc0 [ 559.588378][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.588397][ T9294] RIP: 0033:0x7f694d2dfb19 [ 559.588415][ T9294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.588431][ T9294] RSP: 002b:00007f694b50d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.588452][ T9294] RAX: ffffffffffffffda RBX: 00007f694d566090 RCX: 00007f694d2dfb19 [ 559.588466][ T9294] RDX: 0000000000008010 RSI: 0000200000000340 RDI: 0000000000000003 [ 559.588479][ T9294] RBP: 00007f694b50d090 R08: 0000000000000000 R09: 0000000000000000 [ 559.588491][ T9294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.588503][ T9294] R13: 00007f694d566128 R14: 00007f694d566090 R15: 00007ffd7d380558 [ 559.588535][ T9294] [ 559.946499][ T9134] usb 1-1: USB disconnect, device number 7 [ 560.261113][ T9302] workqueue: name exceeds WQ_NAME_LEN. Truncating to: (h\E3~ϱoR!Fo?< [ 560.654943][ T8827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.289890][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 562.292479][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.292611][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.292946][ T9163] bridge_slave_0: entered allmulticast mode [ 562.306794][ T9163] bridge_slave_0: entered promiscuous mode [ 562.466399][ T49] hsr_slave_0: left promiscuous mode [ 562.506783][ T49] hsr_slave_1: left promiscuous mode [ 562.507522][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.507538][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.559917][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.559936][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.761958][ T49] veth1_macvtap: left promiscuous mode [ 562.762069][ T49] veth0_macvtap: left promiscuous mode [ 562.798374][ T49] veth1_vlan: left promiscuous mode [ 562.798593][ T49] veth0_vlan: left promiscuous mode [ 562.864943][ T9345] Bluetooth: MGMT ver 1.23 [ 562.908841][ T9347] netlink: 'syz.4.590': attribute type 2 has an invalid length. [ 562.998563][ T1347] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.998634][ T1347] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.524504][ T36] kauditd_printk_skb: 153 callbacks suppressed [ 563.524557][ T36] audit: type=1800 audit(1794136313.698:613): pid=9353 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.592" name=08 dev="sda1" ino=2052 res=0 errno=-22 [ 565.221385][ T49] team0 (unregistering): Port device team_slave_1 removed [ 565.330137][ T49] team0 (unregistering): Port device team_slave_0 removed [ 567.804061][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.804186][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.804359][ T9163] bridge_slave_1: entered allmulticast mode [ 567.816738][ T9163] bridge_slave_1: entered promiscuous mode [ 568.029589][ T9163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.035503][ T9385] FAULT_INJECTION: forcing a failure. [ 568.035503][ T9385] name failslab, interval 1, probability 0, space 0, times 0 [ 568.035534][ T9385] CPU: 0 UID: 0 PID: 9385 Comm: syz.0.599 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 568.035556][ T9385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 568.035566][ T9385] Call Trace: [ 568.035574][ T9385] [ 568.035582][ T9385] dump_stack_lvl+0xe8/0x150 [ 568.035616][ T9385] should_fail_ex+0x447/0x5e0 [ 568.035646][ T9385] should_failslab+0xa8/0x100 [ 568.035670][ T9385] __kmalloc_noprof+0xf6/0x790 [ 568.035689][ T9385] ? tomoyo_realpath_from_path+0xf2/0x640 [ 568.035708][ T9385] ? tomoyo_realpath_from_path+0xf2/0x640 [ 568.035736][ T9385] tomoyo_realpath_from_path+0xf2/0x640 [ 568.035766][ T9385] ? tomoyo_path_number_perm+0x219/0x5f0 [ 568.035790][ T9385] tomoyo_path_number_perm+0x246/0x5f0 [ 568.035818][ T9385] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 568.035841][ T9385] ? __lock_acquire+0x747/0x2de0 [ 568.035880][ T9385] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 568.035924][ T9385] ? __fget_files+0x2a/0x420 [ 568.035953][ T9385] ? __fget_files+0x2a/0x420 [ 568.035977][ T9385] ? __fget_files+0x2a/0x420 [ 568.036004][ T9385] security_file_ioctl+0xc3/0x2a0 [ 568.036032][ T9385] __se_sys_ioctl+0x47/0x170 [ 568.036054][ T9385] do_syscall_64+0x166/0x520 [ 568.036074][ T9385] ? trace_irq_disable+0x3b/0x140 [ 568.036093][ T9385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.036112][ T9385] ? clear_bhb_loop+0x70/0xc0 [ 568.036134][ T9385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.036152][ T9385] RIP: 0033:0x7fb45918fb19 [ 568.036169][ T9385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.036186][ T9385] RSP: 002b:00007fb4573de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.036206][ T9385] RAX: ffffffffffffffda RBX: 00007fb459415fa0 RCX: 00007fb45918fb19 [ 568.036220][ T9385] RDX: 000000000000008e RSI: 0000000000000701 RDI: 0000000000000003 [ 568.036232][ T9385] RBP: 00007fb4573de090 R08: 0000000000000000 R09: 0000000000000000 [ 568.036244][ T9385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.036256][ T9385] R13: 00007fb459416038 R14: 00007fb459415fa0 R15: 00007fff7dc63298 [ 568.036287][ T9385] [ 568.050501][ T9163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.126190][ T9385] ERROR: Out of memory at tomoyo_realpath_from_path. [ 568.158966][ T9163] team0: Port device team_slave_0 added [ 568.180079][ T9163] team0: Port device team_slave_1 added [ 568.701339][ T9401] netlink: 256 bytes leftover after parsing attributes in process `syz.0.602'. [ 569.492634][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.492653][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.492679][ T9163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.553782][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.553799][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.553826][ T9163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.843597][ T9163] hsr_slave_0: entered promiscuous mode [ 569.844801][ T9163] hsr_slave_1: entered promiscuous mode [ 569.845610][ T9163] debugfs: 'hsr0' already exists in 'hsr' [ 569.845628][ T9163] Cannot create hsr debugfs directory [ 569.871616][ T8827] veth0_vlan: entered promiscuous mode [ 569.896492][ T9408] FAULT_INJECTION: forcing a failure. [ 569.896492][ T9408] name failslab, interval 1, probability 0, space 0, times 0 [ 569.896522][ T9408] CPU: 0 UID: 0 PID: 9408 Comm: syz.0.605 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 569.896544][ T9408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 569.896554][ T9408] Call Trace: [ 569.896562][ T9408] [ 569.896570][ T9408] dump_stack_lvl+0xe8/0x150 [ 569.896606][ T9408] should_fail_ex+0x447/0x5e0 [ 569.896637][ T9408] should_failslab+0xa8/0x100 [ 569.896661][ T9408] __kmalloc_noprof+0xf6/0x790 [ 569.896682][ T9408] ? tomoyo_realpath_from_path+0xf2/0x640 [ 569.896702][ T9408] ? tomoyo_realpath_from_path+0xf2/0x640 [ 569.896728][ T9408] tomoyo_realpath_from_path+0xf2/0x640 [ 569.896758][ T9408] ? tomoyo_path_number_perm+0x219/0x5f0 [ 569.896784][ T9408] tomoyo_path_number_perm+0x246/0x5f0 [ 569.896812][ T9408] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 569.896835][ T9408] ? __lock_acquire+0x747/0x2de0 [ 569.896877][ T9408] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 569.896922][ T9408] ? __fget_files+0x2a/0x420 [ 569.896949][ T9408] ? __fget_files+0x2a/0x420 [ 569.896973][ T9408] ? __fget_files+0x2a/0x420 [ 569.897000][ T9408] security_file_ioctl+0xc3/0x2a0 [ 569.897027][ T9408] __se_sys_ioctl+0x47/0x170 [ 569.897051][ T9408] do_syscall_64+0x166/0x520 [ 569.897071][ T9408] ? trace_irq_disable+0x3b/0x140 [ 569.897090][ T9408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.897108][ T9408] ? clear_bhb_loop+0x70/0xc0 [ 569.897129][ T9408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.897147][ T9408] RIP: 0033:0x7fb45918fb19 [ 569.897165][ T9408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.897181][ T9408] RSP: 002b:00007fb4573bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.897201][ T9408] RAX: ffffffffffffffda RBX: 00007fb459416090 RCX: 00007fb45918fb19 [ 569.897224][ T9408] RDX: 0000200000001640 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 569.897236][ T9408] RBP: 00007fb4573bd090 R08: 0000000000000000 R09: 0000000000000000 [ 569.897247][ T9408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.897259][ T9408] R13: 00007fb459416128 R14: 00007fb459416090 R15: 00007fff7dc63298 [ 569.897294][ T9408] [ 569.911726][ T9408] ERROR: Out of memory at tomoyo_realpath_from_path. [ 570.123153][ T9415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.123713][ T9415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.205079][ T8827] veth1_vlan: entered promiscuous mode [ 571.053365][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10 [ 571.091501][ T8827] veth0_macvtap: entered promiscuous mode [ 571.126624][ T8827] veth1_macvtap: entered promiscuous mode [ 572.174834][ T8827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.350121][ T8827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.428964][ T9463] FAULT_INJECTION: forcing a failure. [ 574.428964][ T9463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.429000][ T9463] CPU: 0 UID: 0 PID: 9463 Comm: syz.4.613 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 574.429050][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 574.429075][ T9463] Call Trace: [ 574.429090][ T9463] [ 574.429108][ T9463] dump_stack_lvl+0xe8/0x150 [ 574.429145][ T9463] should_fail_ex+0x447/0x5e0 [ 574.429175][ T9463] _copy_from_user+0x2d/0xb0 [ 574.429201][ T9463] __sys_sendto+0x2b5/0x5d0 [ 574.429226][ T9463] ? __pfx___sys_sendto+0x10/0x10 [ 574.429280][ T9463] ? __pfx_ksys_write+0x10/0x10 [ 574.429306][ T9463] __x64_sys_sendto+0xde/0x100 [ 574.429327][ T9463] do_syscall_64+0x166/0x520 [ 574.429349][ T9463] ? trace_irq_disable+0x3b/0x140 [ 574.429369][ T9463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.429388][ T9463] ? clear_bhb_loop+0x70/0xc0 [ 574.429410][ T9463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.429427][ T9463] RIP: 0033:0x7f694d2a034e [ 574.429445][ T9463] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 574.429461][ T9463] RSP: 002b:00007f694b52ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 574.429482][ T9463] RAX: ffffffffffffffda RBX: 00007f694b52e6c0 RCX: 00007f694d2a034e [ 574.429496][ T9463] RDX: 0000000000000020 RSI: 00007f694b52d000 RDI: 0000000000000003 [ 574.429508][ T9463] RBP: 0000000000000000 R08: 00007f694b52cf04 R09: 000000000000000c [ 574.429520][ T9463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 574.429531][ T9463] R13: 00007f694b52cf58 R14: 00007f694b52d000 R15: 0000000000000000 [ 574.429563][ T9463] [ 574.799218][ T9470] netlink: 68 bytes leftover after parsing attributes in process `syz.4.614'. [ 575.000396][ T5269] 8021q: adding VLAN 0 to HW filter on device eth11 [ 575.549676][ T9484] jffs2: notice: (9484) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 575.787578][ T9486] FAULT_INJECTION: forcing a failure. [ 575.787578][ T9486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.787624][ T9486] CPU: 0 UID: 0 PID: 9486 Comm: syz.3.618 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 575.787646][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 575.787657][ T9486] Call Trace: [ 575.787665][ T9486] [ 575.787674][ T9486] dump_stack_lvl+0xe8/0x150 [ 575.787709][ T9486] should_fail_ex+0x447/0x5e0 [ 575.787740][ T9486] _copy_to_user+0x31/0xb0 [ 575.787767][ T9486] simple_read_from_buffer+0xe1/0x170 [ 575.787798][ T9486] proc_fail_nth_read+0x1be/0x230 [ 575.787824][ T9486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 575.787848][ T9486] ? rw_verify_area+0x250/0x4d0 [ 575.787875][ T9486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 575.787896][ T9486] vfs_read+0x219/0xa90 [ 575.787922][ T9486] ? __pfx_vfs_read+0x10/0x10 [ 575.787944][ T9486] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 575.787970][ T9486] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 575.787994][ T9486] ? mutex_lock_nested+0x14d/0x1d0 [ 575.788019][ T9486] ? fdget_pos+0x11e/0x160 [ 575.788054][ T9486] ksys_read+0x156/0x270 [ 575.788075][ T9486] ? __pfx_ksys_read+0x10/0x10 [ 575.788105][ T9486] do_syscall_64+0x166/0x520 [ 575.788128][ T9486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.788153][ T9486] ? clear_bhb_loop+0x70/0xc0 [ 575.788176][ T9486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.788194][ T9486] RIP: 0033:0x7f23796d034e [ 575.788211][ T9486] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 575.788227][ T9486] RSP: 002b:00007f237793cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 575.788247][ T9486] RAX: ffffffffffffffda RBX: 00007f237793d6c0 RCX: 00007f23796d034e [ 575.788259][ T9486] RDX: 000000000000000f RSI: 00007f237793d0a0 RDI: 0000000000000003 [ 575.788272][ T9486] RBP: 00007f237793d090 R08: 0000000000000000 R09: 0000000000000000 [ 575.788281][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.788289][ T9486] R13: 00007f2379996128 R14: 00007f2379996090 R15: 00007fff2d2dc3b8 [ 575.788314][ T9486] [ 576.366879][ T8829] Bluetooth: hci0: command 0x0406 tx timeout [ 576.371108][ T4924] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 578.380239][ T9503] cgroup: name respecified [ 578.909279][ T9506] netlink: 108 bytes leftover after parsing attributes in process `syz.3.623'. [ 579.936116][ T1313] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.954859][ T1313] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.956351][ T94] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.956400][ T94] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.682256][ T8829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 580.752821][ T8829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 580.755572][ T8829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 580.771207][ T8829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 580.772121][ T8829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 581.903917][ T1313] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.919891][ T4924] Bluetooth: hci2: command tx timeout [ 584.914234][ T1313] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.996437][ T4924] Bluetooth: hci2: command tx timeout [ 585.285092][ T9581] FAULT_INJECTION: forcing a failure. [ 585.285092][ T9581] name failslab, interval 1, probability 0, space 0, times 0 [ 585.287573][ T9581] CPU: 1 UID: 0 PID: 9581 Comm: syz.4.637 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 585.287602][ T9581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 585.287613][ T9581] Call Trace: [ 585.287620][ T9581] [ 585.287628][ T9581] dump_stack_lvl+0xe8/0x150 [ 585.287670][ T9581] should_fail_ex+0x447/0x5e0 [ 585.287700][ T9581] should_failslab+0xa8/0x100 [ 585.287725][ T9581] __kmalloc_noprof+0xf6/0x790 [ 585.287744][ T9581] ? tomoyo_realpath_from_path+0xf2/0x640 [ 585.287764][ T9581] ? tomoyo_realpath_from_path+0xf2/0x640 [ 585.287789][ T9581] tomoyo_realpath_from_path+0xf2/0x640 [ 585.287812][ T9581] ? tomoyo_path_number_perm+0x219/0x5f0 [ 585.287832][ T9581] tomoyo_path_number_perm+0x246/0x5f0 [ 585.287853][ T9581] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 585.287871][ T9581] ? __lock_acquire+0x747/0x2de0 [ 585.287904][ T9581] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 585.287938][ T9581] ? __fget_files+0x2a/0x420 [ 585.287960][ T9581] ? __fget_files+0x2a/0x420 [ 585.287980][ T9581] ? __fget_files+0x2a/0x420 [ 585.288002][ T9581] security_file_ioctl+0xc3/0x2a0 [ 585.288025][ T9581] __se_sys_ioctl+0x47/0x170 [ 585.288043][ T9581] do_syscall_64+0x166/0x520 [ 585.288059][ T9581] ? trace_irq_disable+0x3b/0x140 [ 585.288074][ T9581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.288090][ T9581] ? clear_bhb_loop+0x70/0xc0 [ 585.288107][ T9581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.288121][ T9581] RIP: 0033:0x7f694d2dfb19 [ 585.288136][ T9581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.288148][ T9581] RSP: 002b:00007f694b50d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.288166][ T9581] RAX: ffffffffffffffda RBX: 00007f694d566090 RCX: 00007f694d2dfb19 [ 585.288177][ T9581] RDX: 0000200000000440 RSI: 000000004008ae6a RDI: 0000000000000004 [ 585.288186][ T9581] RBP: 00007f694b50d090 R08: 0000000000000000 R09: 0000000000000000 [ 585.288195][ T9581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.288203][ T9581] R13: 00007f694d566128 R14: 00007f694d566090 R15: 00007ffd7d380558 [ 585.288227][ T9581] [ 585.288247][ T9581] ERROR: Out of memory at tomoyo_realpath_from_path. [ 585.920589][ T1313] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.194791][ T9523] rxe_eth0 speed is unknown, defaulting to 1000 [ 586.637941][ T1313] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.853789][ T9163] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 586.940869][ T9163] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 587.057939][ T9163] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 587.076086][ T4924] Bluetooth: hci2: command tx timeout [ 587.228878][ T9163] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 587.234508][ T9163] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 587.435948][ T9163] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 587.471101][ T9163] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 587.637142][ T9163] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 588.232787][ T9626] FAULT_INJECTION: forcing a failure. [ 588.232787][ T9626] name failslab, interval 1, probability 0, space 0, times 0 [ 588.232818][ T9626] CPU: 0 UID: 0 PID: 9626 Comm: syz.4.642 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 588.232839][ T9626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 588.232851][ T9626] Call Trace: [ 588.232858][ T9626] [ 588.232866][ T9626] dump_stack_lvl+0xe8/0x150 [ 588.232901][ T9626] should_fail_ex+0x447/0x5e0 [ 588.232939][ T9626] should_failslab+0xa8/0x100 [ 588.232964][ T9626] __kmalloc_noprof+0xf6/0x790 [ 588.232983][ T9626] ? tomoyo_realpath_from_path+0xf2/0x640 [ 588.233001][ T9626] ? tomoyo_realpath_from_path+0xf2/0x640 [ 588.233024][ T9626] tomoyo_realpath_from_path+0xf2/0x640 [ 588.233046][ T9626] ? tomoyo_path_number_perm+0x219/0x5f0 [ 588.233067][ T9626] tomoyo_path_number_perm+0x246/0x5f0 [ 588.233088][ T9626] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 588.233106][ T9626] ? __lock_acquire+0x747/0x2de0 [ 588.233138][ T9626] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 588.233174][ T9626] ? __fget_files+0x2a/0x420 [ 588.233197][ T9626] ? __fget_files+0x2a/0x420 [ 588.233216][ T9626] ? __fget_files+0x2a/0x420 [ 588.233240][ T9626] security_file_ioctl+0xc3/0x2a0 [ 588.233265][ T9626] __se_sys_ioctl+0x47/0x170 [ 588.233285][ T9626] do_syscall_64+0x166/0x520 [ 588.233303][ T9626] ? trace_irq_disable+0x3b/0x140 [ 588.233319][ T9626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.233335][ T9626] ? clear_bhb_loop+0x70/0xc0 [ 588.233353][ T9626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.233368][ T9626] RIP: 0033:0x7f694d2dfb19 [ 588.233384][ T9626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.233397][ T9626] RSP: 002b:00007f694b52e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 588.233417][ T9626] RAX: ffffffffffffffda RBX: 00007f694d565fa0 RCX: 00007f694d2dfb19 [ 588.233430][ T9626] RDX: 0000200000000700 RSI: 00000000c008561c RDI: 0000000000000003 [ 588.233440][ T9626] RBP: 00007f694b52e090 R08: 0000000000000000 R09: 0000000000000000 [ 588.233451][ T9626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.233460][ T9626] R13: 00007f694d566038 R14: 00007f694d565fa0 R15: 00007ffd7d380558 [ 588.233488][ T9626] [ 588.233496][ T9626] ERROR: Out of memory at tomoyo_realpath_from_path. [ 588.598517][ T9625] Bluetooth: hci5: Frame reassembly failed (-90) [ 588.670718][ T1286] Bluetooth: hci5: Frame reassembly failed (-84) [ 589.028008][ T36] audit: type=1800 audit(1794136339.578:614): pid=9641 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.645" name=08 dev="sda1" ino=2052 res=0 errno=-22 [ 589.156410][ T8829] Bluetooth: hci2: command tx timeout [ 589.187321][ T1313] bridge_slave_1: left allmulticast mode [ 589.187357][ T1313] bridge_slave_1: left promiscuous mode [ 589.188102][ T1313] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.381126][ T1313] bridge_slave_0: left allmulticast mode [ 589.381164][ T1313] bridge_slave_0: left promiscuous mode [ 589.381440][ T1313] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.381848][ T36] audit: type=1326 audit(1794136340.938:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.4.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 590.381899][ T36] audit: type=1326 audit(1794136340.938:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.4.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 590.384449][ T36] audit: type=1326 audit(1794136340.938:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.4.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 590.392113][ T36] audit: type=1326 audit(1794136340.948:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.4.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 590.393307][ T36] audit: type=1326 audit(1794136340.948:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.4.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 590.423475][ T36] audit: type=1326 audit(1794136340.938:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.4.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 590.424503][ T36] audit: type=1326 audit(1794136340.978:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.4.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 590.424759][ T36] audit: type=1326 audit(1794136340.978:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.4.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 590.471159][ T36] audit: type=1326 audit(1794136340.948:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.4.650" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 590.516172][ T4924] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 591.021311][ T9684] comedi comedi0: pcmmio: I/O base address not correctly aligned [ 591.181698][ T1313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.259487][ T1313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.378542][ T1313] bond0 (unregistering): Released all slaves [ 593.117459][ T9163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.489130][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 593.495591][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.495810][ T9523] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.519883][ T9523] bridge_slave_0: entered allmulticast mode [ 593.539396][ T9523] bridge_slave_0: entered promiscuous mode [ 593.579679][ T9523] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.579805][ T9523] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.579963][ T9523] bridge_slave_1: entered allmulticast mode [ 593.600228][ T9523] bridge_slave_1: entered promiscuous mode [ 593.752897][ T9163] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.781309][ T9523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.821120][ T9523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.021000][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.022661][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.176278][ T1313] hsr_slave_0: left promiscuous mode [ 594.216148][ T1313] hsr_slave_1: left promiscuous mode [ 594.217090][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.217111][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.267461][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.267490][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.345213][ T1313] veth1_macvtap: left promiscuous mode [ 594.345322][ T1313] veth0_macvtap: left promiscuous mode [ 594.345606][ T1313] veth1_vlan: left promiscuous mode [ 594.345797][ T1313] veth0_vlan: left promiscuous mode [ 595.169185][ T36] kauditd_printk_skb: 84 callbacks suppressed [ 595.169204][ T36] audit: type=1326 audit(1794136345.728:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9723 comm="syz.3.659" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 595.169331][ T36] audit: type=1326 audit(1794136345.728:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9723 comm="syz.3.659" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 595.174260][ T36] audit: type=1326 audit(1794136345.728:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9723 comm="syz.3.659" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 595.175519][ T36] audit: type=1326 audit(1794136345.728:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9723 comm="syz.3.659" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 595.258026][ T36] audit: type=1326 audit(1794136345.728:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9723 comm="syz.3.659" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 595.258077][ T36] audit: type=1326 audit(1794136345.738:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9723 comm="syz.3.659" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 595.258116][ T36] audit: type=1326 audit(1794136345.808:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9723 comm="syz.3.659" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 595.258155][ T36] audit: type=1326 audit(1794136345.808:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9723 comm="syz.3.659" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 595.265651][ T36] audit: type=1326 audit(1794136345.818:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9723 comm="syz.3.659" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 595.265702][ T36] audit: type=1326 audit(1794136345.818:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9723 comm="syz.3.659" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 595.636099][ T9727] netlink: 128 bytes leftover after parsing attributes in process `syz.4.660'. [ 595.927621][ T1313] team0 (unregistering): Port device team_slave_1 removed [ 596.087535][ T9735] FAULT_INJECTION: forcing a failure. [ 596.087535][ T9735] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 596.087568][ T9735] CPU: 1 UID: 0 PID: 9735 Comm: syz.0.663 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 596.087590][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 596.087601][ T9735] Call Trace: [ 596.087609][ T9735] [ 596.087617][ T9735] dump_stack_lvl+0xe8/0x150 [ 596.087653][ T9735] should_fail_ex+0x447/0x5e0 [ 596.087683][ T9735] prepare_alloc_pages+0x21e/0x650 [ 596.087715][ T9735] __alloc_frozen_pages_noprof+0x1a1/0x440 [ 596.087741][ T9735] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 596.087781][ T9735] alloc_pages_mpol+0xd4/0x280 [ 596.087811][ T9735] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 596.087838][ T9735] vma_alloc_folio_noprof+0xe1/0x1e0 [ 596.087865][ T9735] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 596.087895][ T9735] ? vma_has_anon_rmap+0xc9/0x270 [ 596.087923][ T9735] do_pte_missing+0x7fb/0x2970 [ 596.087952][ T9735] ? handle_mm_fault+0xe8/0x2130 [ 596.087982][ T9735] handle_mm_fault+0xd42/0x2130 [ 596.088014][ T9735] ? handle_mm_fault+0xe8/0x2130 [ 596.088047][ T9735] ? lock_vma_under_rcu+0x116/0x500 [ 596.088077][ T9735] ? __pfx_handle_mm_fault+0x10/0x10 [ 596.088100][ T9735] ? lock_vma_under_rcu+0x45a/0x500 [ 596.088125][ T9735] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 596.088182][ T9735] do_user_addr_fault+0xb35/0x1480 [ 596.088227][ T9735] ? trace_page_fault_user+0x84/0x1e0 [ 596.088253][ T9735] exc_page_fault+0x6a/0xc0 [ 596.088276][ T9735] asm_exc_page_fault+0x26/0x30 [ 596.088295][ T9735] RIP: 0033:0x7fb459056ec6 [ 596.088313][ T9735] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d ba 17 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 cc c7 fe ff 4d 85 ed 0f 84 2b 0a 00 [ 596.088329][ T9735] RSP: 002b:00007fb4573dbf60 EFLAGS: 00010206 [ 596.088347][ T9735] RAX: 0000000000000000 RBX: 00007fb459415fa0 RCX: 0000000000000000 [ 596.088360][ T9735] RDX: 00002000000004c0 RSI: 00002000000004c0 RDI: 00007fb45922866a [ 596.088373][ T9735] RBP: 00007fb4573de090 R08: 00007fb459043a30 R09: 0000000000000000 [ 596.088386][ T9735] R10: 0000000000000005 R11: 00002000000004c0 R12: 0000000000000036 [ 596.088398][ T9735] R13: 00002000000004c0 R14: 0000000000000005 R15: 00007fff7dc63298 [ 596.088430][ T9735] [ 596.088601][ T9735] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 596.991661][ T1313] team0 (unregistering): Port device team_slave_0 removed [ 597.116655][ T9134] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 597.276086][ T9134] usb 1-1: Using ep0 maxpacket: 32 [ 597.276898][ T9134] usb 1-1: New USB device found: idVendor=05ac, idProduct=0290, bcdDevice=0.40 [ 597.278242][ T9134] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 597.278273][ T9134] usb 1-1: config 1 interface 0 has no altsetting 0 [ 597.282318][ T9134] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.282341][ T9134] usb 1-1: Product: syz [ 597.282355][ T9134] usb 1-1: Manufacturer: syz [ 597.282369][ T9134] usb 1-1: SerialNumber: syz [ 597.384530][ T9523] team0: Port device team_slave_0 added [ 597.413165][ T9523] team0: Port device team_slave_1 added [ 597.500734][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.500849][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.611302][ T9523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.611321][ T9523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.611347][ T9523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.671736][ T9523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.671752][ T9523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.671780][ T9523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.782857][ T9741] FAULT_INJECTION: forcing a failure. [ 597.782857][ T9741] name failslab, interval 1, probability 0, space 0, times 0 [ 597.782897][ T9741] CPU: 1 UID: 0 PID: 9741 Comm: syz.4.665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 597.782918][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 597.782930][ T9741] Call Trace: [ 597.782938][ T9741] [ 597.782946][ T9741] dump_stack_lvl+0xe8/0x150 [ 597.782982][ T9741] should_fail_ex+0x447/0x5e0 [ 597.783013][ T9741] should_failslab+0xa8/0x100 [ 597.783038][ T9741] __kmalloc_noprof+0xf6/0x790 [ 597.783059][ T9741] ? tomoyo_realpath_from_path+0xf2/0x640 [ 597.783078][ T9741] ? tomoyo_realpath_from_path+0xf2/0x640 [ 597.783105][ T9741] tomoyo_realpath_from_path+0xf2/0x640 [ 597.783135][ T9741] ? tomoyo_path_number_perm+0x219/0x5f0 [ 597.783161][ T9741] tomoyo_path_number_perm+0x246/0x5f0 [ 597.783190][ T9741] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 597.783213][ T9741] ? __lock_acquire+0x747/0x2de0 [ 597.783256][ T9741] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 597.783302][ T9741] ? __fget_files+0x2a/0x420 [ 597.783330][ T9741] ? __fget_files+0x2a/0x420 [ 597.783356][ T9741] ? __fget_files+0x2a/0x420 [ 597.783385][ T9741] security_file_ioctl+0xc3/0x2a0 [ 597.783414][ T9741] __se_sys_ioctl+0x47/0x170 [ 597.783438][ T9741] do_syscall_64+0x166/0x520 [ 597.783459][ T9741] ? trace_irq_disable+0x3b/0x140 [ 597.783478][ T9741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.783497][ T9741] ? clear_bhb_loop+0x70/0xc0 [ 597.783520][ T9741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.783538][ T9741] RIP: 0033:0x7f694d2dfb19 [ 597.783556][ T9741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.783572][ T9741] RSP: 002b:00007f694b52e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.783592][ T9741] RAX: ffffffffffffffda RBX: 00007f694d565fa0 RCX: 00007f694d2dfb19 [ 597.783605][ T9741] RDX: 0000200000000180 RSI: 00000000000007a5 RDI: 0000000000000003 [ 597.783618][ T9741] RBP: 00007f694b52e090 R08: 0000000000000000 R09: 0000000000000000 [ 597.783630][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.783642][ T9741] R13: 00007f694d566038 R14: 00007f694d565fa0 R15: 00007ffd7d380558 [ 597.783677][ T9741] [ 597.792987][ T9741] ERROR: Out of memory at tomoyo_realpath_from_path. [ 597.854099][ T9134] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 [ 598.274830][ T9134] usb 1-1: USB disconnect, device number 8 [ 598.299647][ T9523] hsr_slave_0: entered promiscuous mode [ 598.303910][ T9523] hsr_slave_1: entered promiscuous mode [ 598.349887][ T9523] debugfs: 'hsr0' already exists in 'hsr' [ 598.349911][ T9523] Cannot create hsr debugfs directory [ 599.322230][ T9769] netlink: 60 bytes leftover after parsing attributes in process `syz.3.664'. [ 599.337875][ T9769] netlink: 60 bytes leftover after parsing attributes in process `syz.3.664'. [ 600.509704][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10 [ 601.487359][ T9796] netlink: 128 bytes leftover after parsing attributes in process `syz.4.673'. [ 602.059275][ T9807] netlink: 128 bytes leftover after parsing attributes in process `syz.4.674'. [ 602.641126][ T9163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.141859][ T9855] netlink: 128 bytes leftover after parsing attributes in process `syz.0.682'. [ 604.396421][ T9523] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 604.440112][ T9523] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 604.449284][ T9523] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 604.505117][ T9523] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 604.510267][ T9163] veth0_vlan: entered promiscuous mode [ 604.513219][ T9523] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 604.598123][ T9523] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 604.603617][ T9523] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 604.650082][ T9523] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 604.686148][ T9163] veth1_vlan: entered promiscuous mode [ 604.931462][ T9163] veth0_macvtap: entered promiscuous mode [ 604.955010][ T9163] veth1_macvtap: entered promiscuous mode [ 605.035377][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.115750][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.342788][ T9523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.776806][ T9523] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.964501][ T1289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.964520][ T1289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.965581][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.965720][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.104367][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.105351][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.255748][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.255771][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.279018][ T1289] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.417379][ T1291] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.526232][ T1291] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.636151][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.967719][ T5604] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 608.238267][ T5604] usb 1-1: Using ep0 maxpacket: 8 [ 608.249839][ T5604] usb 1-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 608.253755][ T5604] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 608.253807][ T5604] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 608.253832][ T5604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 608.253858][ T5604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 608.253884][ T5604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 48, changing to 9 [ 608.253908][ T5604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 8240, setting to 1024 [ 608.253931][ T5604] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.621977][ T5604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.622006][ T5604] usb 1-1: Product: syz [ 608.622020][ T5604] usb 1-1: Manufacturer: syz [ 608.622033][ T5604] usb 1-1: SerialNumber: syz [ 608.731653][ T5604] usb 1-1: config 0 descriptor?? [ 608.741852][ T9909] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 609.228082][ T9523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.561496][ T9936] netlink: 128 bytes leftover after parsing attributes in process `syz.3.692'. [ 609.955217][ T9950] netlink: 'syz.0.697': attribute type 10 has an invalid length. [ 610.008388][ T9950] syz_tun: entered promiscuous mode [ 610.084262][ T9950] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 610.098727][ T1289] bond0: (slave bond_slave_0): interface is now down [ 610.098761][ T1289] bond0: (slave bond_slave_1): interface is now down [ 610.098774][ T1289] bond0: (slave syz_tun): interface is now down [ 610.118999][ T8221] bond0: (slave bond_slave_0): interface is now down [ 610.119023][ T8221] bond0: (slave bond_slave_1): interface is now down [ 610.119036][ T8221] bond0: (slave syz_tun): interface is now down [ 610.179928][ T8221] bond0: now running without any active interface! [ 610.192274][ T9959] befs: (nullb0): No write support. Marking filesystem read-only [ 610.200685][ T5604] rc_core: IR keymap rc-snapstream-firefly not found [ 610.200704][ T5604] Registered IR keymap rc-empty [ 610.206964][ T5604] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 610.246169][ T9959] befs: (nullb0): invalid magic header [ 610.273767][ T5604] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 610.335817][ T9523] veth0_vlan: entered promiscuous mode [ 610.539143][ T9523] veth1_vlan: entered promiscuous mode [ 610.658614][ T9523] veth0_macvtap: entered promiscuous mode [ 611.881263][ T9523] veth1_macvtap: entered promiscuous mode [ 611.929830][ T5604] input: syz syz mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 612.370081][ T9523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.001733][ T5604] usb 1-1: USB disconnect, device number 9 [ 613.002825][ C1] ati_remote 1-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 613.071028][ T9523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.366319][ T4959] ati_remote 1-1:0.0: ati_remote_open: usb_submit_urb failed! [ 614.885045][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.885065][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.159335][ T14] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.336089][ T1172] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.347415][ T5934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.347435][ T5934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.347679][ T5934] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.363309][ T5934] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.440717][ T1347] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.440789][ T1347] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.177301][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 627.177320][ T36] audit: type=1326 audit(1794136377.728:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10098 comm="syz.4.736" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 627.177361][ T36] audit: type=1326 audit(1794136377.738:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10098 comm="syz.4.736" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 627.179720][ T36] audit: type=1326 audit(1794136377.738:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10098 comm="syz.4.736" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 627.179779][ T36] audit: type=1326 audit(1794136377.738:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10098 comm="syz.4.736" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 627.181048][ T36] audit: type=1326 audit(1794136377.738:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10098 comm="syz.4.736" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 627.199248][ T36] audit: type=1326 audit(1794136377.758:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10098 comm="syz.4.736" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 627.203541][ T36] audit: type=1326 audit(1794136377.758:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10098 comm="syz.4.736" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 627.212219][ T36] audit: type=1326 audit(1794136377.758:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10098 comm="syz.4.736" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 627.243500][ T36] audit: type=1326 audit(1794136377.798:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10098 comm="syz.4.736" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 627.268630][ T36] audit: type=1326 audit(1794136377.818:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10098 comm="syz.4.736" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 630.719316][T10129] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 630.736252][T10129] exFAT-fs (nullb0): invalid boot record signature [ 630.736269][T10129] exFAT-fs (nullb0): failed to read boot sector [ 630.736278][T10129] exFAT-fs (nullb0): failed to recognize exfat type [ 632.745850][T10162] FAULT_INJECTION: forcing a failure. [ 632.745850][T10162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.745878][T10162] CPU: 0 UID: 0 PID: 10162 Comm: syz.4.748 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 632.745900][T10162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 632.745909][T10162] Call Trace: [ 632.745915][T10162] [ 632.745923][T10162] dump_stack_lvl+0xe8/0x150 [ 632.745954][T10162] should_fail_ex+0x447/0x5e0 [ 632.745980][T10162] _copy_from_user+0x2d/0xb0 [ 632.746003][T10162] ___sys_recvmsg+0x173/0x5a0 [ 632.746030][T10162] ? __pfx____sys_recvmsg+0x10/0x10 [ 632.746050][T10162] ? lock_acquire+0x115/0x350 [ 632.746082][T10162] ? __fget_files+0x2a/0x420 [ 632.746101][T10162] ? __fget_files+0x3a8/0x420 [ 632.746120][T10162] ? __fget_files+0x2a/0x420 [ 632.746142][T10162] ? fdget+0x1b2/0x250 [ 632.746164][T10162] do_recvmmsg+0x320/0x800 [ 632.746187][T10162] ? __pfx_do_recvmmsg+0x10/0x10 [ 632.746203][T10162] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 632.746231][T10162] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 632.746256][T10162] __x64_sys_recvmmsg+0x198/0x250 [ 632.746275][T10162] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 632.746303][T10162] do_syscall_64+0x166/0x520 [ 632.746320][T10162] ? trace_irq_disable+0x3b/0x140 [ 632.746336][T10162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.746397][T10162] ? clear_bhb_loop+0x70/0xc0 [ 632.746416][T10162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.746430][T10162] RIP: 0033:0x7f694d2dfb19 [ 632.746446][T10162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.746460][T10162] RSP: 002b:00007f694b52e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 632.746479][T10162] RAX: ffffffffffffffda RBX: 00007f694d565fa0 RCX: 00007f694d2dfb19 [ 632.746490][T10162] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004 [ 632.746500][T10162] RBP: 00007f694b52e090 R08: 0000000000000000 R09: 0000000000000000 [ 632.746508][T10162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.746517][T10162] R13: 00007f694d566038 R14: 00007f694d565fa0 R15: 00007ffd7d380558 [ 632.746542][T10162] [ 632.939362][T10166] FAULT_INJECTION: forcing a failure. [ 632.939362][T10166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.939395][T10166] CPU: 0 UID: 0 PID: 10166 Comm: syz.4.755 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 632.939417][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 632.939428][T10166] Call Trace: [ 632.939435][T10166] [ 632.939443][T10166] dump_stack_lvl+0xe8/0x150 [ 632.939477][T10166] should_fail_ex+0x447/0x5e0 [ 632.939508][T10166] _copy_from_user+0x2d/0xb0 [ 632.939533][T10166] __sys_bpf+0x2e7/0xe00 [ 632.939563][T10166] ? vfs_write+0x980/0xbb0 [ 632.939581][T10166] ? __pfx___sys_bpf+0x10/0x10 [ 632.939635][T10166] ? ksys_write+0x202/0x270 [ 632.939655][T10166] ? __pfx_ksys_write+0x10/0x10 [ 632.939678][T10166] __x64_sys_bpf+0xba/0xd0 [ 632.939703][T10166] do_syscall_64+0x166/0x520 [ 632.939725][T10166] ? trace_irq_disable+0x3b/0x140 [ 632.939745][T10166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.939763][T10166] ? clear_bhb_loop+0x70/0xc0 [ 632.939785][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.939803][T10166] RIP: 0033:0x7f694d2dfb19 [ 632.939821][T10166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.939844][T10166] RSP: 002b:00007f694b52e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 632.939865][T10166] RAX: ffffffffffffffda RBX: 00007f694d565fa0 RCX: 00007f694d2dfb19 [ 632.939879][T10166] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 000000000000000f [ 632.939891][T10166] RBP: 00007f694b52e090 R08: 0000000000000000 R09: 0000000000000000 [ 632.939903][T10166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.939915][T10166] R13: 00007f694d566038 R14: 00007f694d565fa0 R15: 00007ffd7d380558 [ 632.939946][T10166] [ 634.259884][T10180] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 634.259913][T10180] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 634.260748][T10180] vhci_hcd vhci_hcd.0: Device attached [ 634.337720][T10181] usbip_core: unknown command [ 634.337736][T10181] vhci_hcd: unknown pdu 808464432 [ 634.337774][T10181] usbip_core: unknown command [ 634.398920][ T8797] vhci_hcd vhci_hcd.6: stop threads [ 634.399018][ T8797] vhci_hcd vhci_hcd.6: release socket [ 634.399191][ T8797] vhci_hcd vhci_hcd.6: disconnect device [ 634.496289][T10189] netlink: 36 bytes leftover after parsing attributes in process `syz.4.763'. [ 634.526350][T10190] netlink: 128 bytes leftover after parsing attributes in process `syz.0.759'. [ 634.604497][T10191] FAULT_INJECTION: forcing a failure. [ 634.604497][T10191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.604531][T10191] CPU: 1 UID: 0 PID: 10191 Comm: syz.5.762 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 634.604554][T10191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 634.604566][T10191] Call Trace: [ 634.604575][T10191] [ 634.604583][T10191] dump_stack_lvl+0xe8/0x150 [ 634.604619][T10191] should_fail_ex+0x447/0x5e0 [ 634.604650][T10191] _copy_from_user+0x2d/0xb0 [ 634.604684][T10191] mptcp_setsockopt+0x18ef/0x3570 [ 634.604784][T10191] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 634.604815][T10191] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 634.604844][T10191] ? __fget_files+0x2a/0x420 [ 634.604878][T10191] ? sock_common_setsockopt+0x36/0xc0 [ 634.604905][T10191] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 634.604932][T10191] do_sock_setsockopt+0x17c/0x1b0 [ 634.604957][T10191] __x64_sys_setsockopt+0x143/0x1b0 [ 634.604983][T10191] do_syscall_64+0x166/0x520 [ 634.605005][T10191] ? trace_irq_disable+0x3b/0x140 [ 634.605026][T10191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.605046][T10191] ? clear_bhb_loop+0x70/0xc0 [ 634.605068][T10191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.605088][T10191] RIP: 0033:0x7f78a16afb19 [ 634.605106][T10191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.605123][T10191] RSP: 002b:00007f789f8fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 634.605144][T10191] RAX: ffffffffffffffda RBX: 00007f78a1935fa0 RCX: 00007f78a16afb19 [ 634.605158][T10191] RDX: 0000000000000003 RSI: 0000000000000006 RDI: 0000000000000003 [ 634.605171][T10191] RBP: 00007f789f8fe090 R08: 0000000000000004 R09: 0000000000000000 [ 634.605183][T10191] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 634.605195][T10191] R13: 00007f78a1936038 R14: 00007f78a1935fa0 R15: 00007ffe3ac1d1c8 [ 634.605227][T10191] [ 634.980246][T10195] FAULT_INJECTION: forcing a failure. [ 634.980246][T10195] name failslab, interval 1, probability 0, space 0, times 0 [ 634.980277][T10195] CPU: 1 UID: 0 PID: 10195 Comm: syz.4.764 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 634.980299][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 634.980310][T10195] Call Trace: [ 634.980318][T10195] [ 634.980327][T10195] dump_stack_lvl+0xe8/0x150 [ 634.980362][T10195] should_fail_ex+0x447/0x5e0 [ 634.980392][T10195] should_failslab+0xa8/0x100 [ 634.980417][T10195] __kmalloc_noprof+0xf6/0x790 [ 634.980437][T10195] ? tomoyo_realpath_from_path+0xf2/0x640 [ 634.980457][T10195] ? tomoyo_realpath_from_path+0xf2/0x640 [ 634.980484][T10195] tomoyo_realpath_from_path+0xf2/0x640 [ 634.980513][T10195] ? tomoyo_path_number_perm+0x219/0x5f0 [ 634.980540][T10195] tomoyo_path_number_perm+0x246/0x5f0 [ 634.980568][T10195] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 634.980592][T10195] ? __lock_acquire+0x747/0x2de0 [ 634.980633][T10195] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 634.980680][T10195] ? __fget_files+0x2a/0x420 [ 634.980709][T10195] ? __fget_files+0x2a/0x420 [ 634.980734][T10195] ? __fget_files+0x2a/0x420 [ 634.980764][T10195] security_file_ioctl+0xc3/0x2a0 [ 634.980792][T10195] __se_sys_ioctl+0x47/0x170 [ 634.980816][T10195] do_syscall_64+0x166/0x520 [ 634.980837][T10195] ? trace_irq_disable+0x3b/0x140 [ 634.980857][T10195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.980876][T10195] ? clear_bhb_loop+0x70/0xc0 [ 634.980898][T10195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.980917][T10195] RIP: 0033:0x7f694d2dfb19 [ 634.980934][T10195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.980950][T10195] RSP: 002b:00007f694b52e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.980971][T10195] RAX: ffffffffffffffda RBX: 00007f694d565fa0 RCX: 00007f694d2dfb19 [ 634.980985][T10195] RDX: 0000200000000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 634.980997][T10195] RBP: 00007f694b52e090 R08: 0000000000000000 R09: 0000000000000000 [ 634.981009][T10195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.981021][T10195] R13: 00007f694d566038 R14: 00007f694d565fa0 R15: 00007ffd7d380558 [ 634.981052][T10195] [ 634.981073][T10195] ERROR: Out of memory at tomoyo_realpath_from_path. [ 635.754553][T10197] input: syz1 as /devices/virtual/input/input9 [ 636.160228][ T36] kauditd_printk_skb: 232 callbacks suppressed [ 636.160248][ T36] audit: type=1326 audit(1794136386.718:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 636.160290][ T36] audit: type=1326 audit(1794136386.718:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 636.186965][ T36] audit: type=1326 audit(1794136386.748:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 636.187251][ T36] audit: type=1326 audit(1794136386.748:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 636.252118][ T36] audit: type=1326 audit(1794136386.808:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 636.252164][ T36] audit: type=1326 audit(1794136386.808:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 636.252201][ T36] audit: type=1326 audit(1794136386.808:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 636.274017][T10203] netlink: 128 bytes leftover after parsing attributes in process `syz.5.765'. [ 636.291556][ T36] audit: type=1326 audit(1794136386.848:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 636.291612][ T36] audit: type=1326 audit(1794136386.848:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 636.297670][ T36] audit: type=1326 audit(1794136386.858:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f694d2dfb19 code=0x7ffc0000 [ 636.552351][T10202] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 636.837371][T10217] jffs2: notice: (10217) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 637.490026][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.775'. [ 637.517535][T10228] netlink: 36 bytes leftover after parsing attributes in process `syz.4.774'. [ 637.600650][T10232] FAULT_INJECTION: forcing a failure. [ 637.600650][T10232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.600684][T10232] CPU: 1 UID: 0 PID: 10232 Comm: syz.6.776 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 637.600706][T10232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 637.600717][T10232] Call Trace: [ 637.600724][T10232] [ 637.600733][T10232] dump_stack_lvl+0xe8/0x150 [ 637.600767][T10232] should_fail_ex+0x447/0x5e0 [ 637.600798][T10232] _copy_from_user+0x2d/0xb0 [ 637.600823][T10232] __se_sys_file_setattr+0x1f5/0x4b0 [ 637.600881][T10232] ? __pfx___se_sys_file_setattr+0x10/0x10 [ 637.600901][T10232] ? fput+0xa0/0xd0 [ 637.600925][T10232] ? ksys_write+0x248/0x270 [ 637.600955][T10232] ? __x64_sys_file_setattr+0x20/0xc0 [ 637.600977][T10232] do_syscall_64+0x166/0x520 [ 637.600999][T10232] ? trace_irq_disable+0x3b/0x140 [ 637.601019][T10232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.601038][T10232] ? clear_bhb_loop+0x70/0xc0 [ 637.601061][T10232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.601079][T10232] RIP: 0033:0x7f6b3b12fb19 [ 637.601097][T10232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.601113][T10232] RSP: 002b:00007f6b39386028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d5 [ 637.601133][T10232] RAX: ffffffffffffffda RBX: 00007f6b3b3b5fa0 RCX: 00007f6b3b12fb19 [ 637.601148][T10232] RDX: 00002000000003c0 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 637.601161][T10232] RBP: 00007f6b39386090 R08: 0000000000001000 R09: 0000000000000000 [ 637.601173][T10232] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 637.601185][T10232] R13: 00007f6b3b3b6038 R14: 00007f6b3b3b5fa0 R15: 00007ffd5ff80cd8 [ 637.601215][T10232] [ 639.610252][T10251] netlink: 128 bytes leftover after parsing attributes in process `syz.5.782'. [ 640.870794][T10256] FAULT_INJECTION: forcing a failure. [ 640.870794][T10256] name failslab, interval 1, probability 0, space 0, times 0 [ 640.870825][T10256] CPU: 0 UID: 0 PID: 10256 Comm: syz.5.785 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 640.870846][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 640.870857][T10256] Call Trace: [ 640.870865][T10256] [ 640.870873][T10256] dump_stack_lvl+0xe8/0x150 [ 640.870909][T10256] should_fail_ex+0x447/0x5e0 [ 640.870939][T10256] should_failslab+0xa8/0x100 [ 640.870964][T10256] __kmalloc_noprof+0xf6/0x790 [ 640.870984][T10256] ? tomoyo_realpath_from_path+0xf2/0x640 [ 640.871013][T10256] ? tomoyo_realpath_from_path+0xf2/0x640 [ 640.871041][T10256] tomoyo_realpath_from_path+0xf2/0x640 [ 640.871071][T10256] ? tomoyo_path_number_perm+0x219/0x5f0 [ 640.871097][T10256] tomoyo_path_number_perm+0x246/0x5f0 [ 640.871126][T10256] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 640.871149][T10256] ? __lock_acquire+0x747/0x2de0 [ 640.871191][T10256] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 640.871237][T10256] ? __fget_files+0x2a/0x420 [ 640.871266][T10256] ? __fget_files+0x2a/0x420 [ 640.871291][T10256] ? __fget_files+0x2a/0x420 [ 640.871324][T10256] security_file_ioctl+0xc3/0x2a0 [ 640.871354][T10256] __se_sys_ioctl+0x47/0x170 [ 640.871378][T10256] do_syscall_64+0x166/0x520 [ 640.871400][T10256] ? trace_irq_disable+0x3b/0x140 [ 640.871419][T10256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.871437][T10256] ? clear_bhb_loop+0x70/0xc0 [ 640.871459][T10256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.871477][T10256] RIP: 0033:0x7f78a16afb19 [ 640.871494][T10256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.871509][T10256] RSP: 002b:00007f789f8fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 640.871528][T10256] RAX: ffffffffffffffda RBX: 00007f78a1935fa0 RCX: 00007f78a16afb19 [ 640.871541][T10256] RDX: 0000200000000380 RSI: 0000000000008947 RDI: 0000000000000004 [ 640.871554][T10256] RBP: 00007f789f8fe090 R08: 0000000000000000 R09: 0000000000000000 [ 640.871563][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.871571][T10256] R13: 00007f78a1936038 R14: 00007f78a1935fa0 R15: 00007ffe3ac1d1c8 [ 640.871595][T10256] [ 640.871611][T10256] ERROR: Out of memory at tomoyo_realpath_from_path. [ 641.065747][T10261] netlink: 36 bytes leftover after parsing attributes in process `syz.5.787'. [ 643.901451][T10290] netlink: 128 bytes leftover after parsing attributes in process `syz.6.795'. [ 644.054455][ T36] kauditd_printk_skb: 143 callbacks suppressed [ 644.054473][ T36] audit: type=1326 audit(1794136394.608:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 644.059930][ T36] audit: type=1326 audit(1794136394.608:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 644.114759][ T36] audit: type=1326 audit(1794136394.668:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 644.115305][ T36] audit: type=1326 audit(1794136394.668:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 644.115348][ T36] audit: type=1326 audit(1794136394.668:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 644.194934][ T36] audit: type=1326 audit(1794136394.748:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 644.194983][ T36] audit: type=1326 audit(1794136394.748:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f237970f882 code=0x7ffc0000 [ 644.254325][ T36] audit: type=1326 audit(1794136394.788:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 644.254374][ T36] audit: type=1326 audit(1794136394.808:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f237970f917 code=0x7ffc0000 [ 644.254413][ T36] audit: type=1326 audit(1794136394.808:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237970fb19 code=0x7ffc0000 [ 644.692287][T10303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.799'. [ 646.696248][ T5753] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 646.961515][ T5753] usb 4-1: device descriptor read/64, error -71 [ 647.236077][ T5753] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 647.299160][T10323] [U]  [ 647.320759][T10325] FAULT_INJECTION: forcing a failure. [ 647.320759][T10325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.320792][T10325] CPU: 0 UID: 0 PID: 10325 Comm: syz.0.804 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 647.320813][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 647.320823][T10325] Call Trace: [ 647.320831][T10325] [ 647.320840][T10325] dump_stack_lvl+0xe8/0x150 [ 647.320882][T10325] should_fail_ex+0x447/0x5e0 [ 647.320911][T10325] _copy_from_user+0x2d/0xb0 [ 647.320929][T10325] __sys_bpf+0x2e7/0xe00 [ 647.320947][T10325] ? __pfx___sys_bpf+0x10/0x10 [ 647.320961][T10325] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 647.320977][T10325] ? rt_mutex_slowunlock+0x219/0x460 [ 647.320999][T10325] ? rcu_is_watching+0x16/0xb0 [ 647.321014][T10325] __x64_sys_bpf+0xba/0xd0 [ 647.321027][T10325] do_syscall_64+0x166/0x520 [ 647.321039][T10325] ? trace_irq_disable+0x3b/0x140 [ 647.321050][T10325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.321060][T10325] ? clear_bhb_loop+0x70/0xc0 [ 647.321072][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.321082][T10325] RIP: 0033:0x7fb45918fb19 [ 647.321093][T10325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.321102][T10325] RSP: 002b:00007fb4573de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 647.321114][T10325] RAX: ffffffffffffffda RBX: 00007fb459415fa0 RCX: 00007fb45918fb19 [ 647.321122][T10325] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 647.321128][T10325] RBP: 00007fb4573de090 R08: 0000000000000000 R09: 0000000000000000 [ 647.321134][T10325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.321141][T10325] R13: 00007fb459416038 R14: 00007fb459415fa0 R15: 00007fff7dc63298 [ 647.321157][T10325] [ 647.416202][ T5753] usb 4-1: device descriptor read/64, error -71 [ 647.526255][ T5753] usb usb4-port1: attempt power cycle [ 647.886093][ T5753] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 647.907666][ T5733] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 647.916267][ T5753] usb 4-1: device descriptor read/8, error -71 [ 648.056872][ T5733] usb 1-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 648.057975][ T5733] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.060581][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 648.060606][ T5733] usb 1-1: Product: syz [ 648.060619][ T5733] usb 1-1: Manufacturer: syz [ 648.156088][ T5753] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 648.165380][ T5733] usb 1-1: selecting invalid altsetting 1 [ 648.176615][ T5753] usb 4-1: device descriptor read/8, error -71 [ 648.203581][ T5733] dvb_ttusb_budget: ttusb_init_controller: error [ 648.203795][ T5733] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 648.287840][ T5753] usb usb4-port1: unable to enumerate USB device [ 648.738482][T10341] netlink: 128 bytes leftover after parsing attributes in process `syz.5.810'. [ 648.968382][ T5733] DVB: Unable to find symbol cx22700_attach() [ 649.039396][T10345] device-mapper: table: 248:2: crypt: Error decoding and setting key (-ENOKEY) [ 649.039422][T10345] device-mapper: ioctl: error adding target to table [ 649.094638][T10348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.812'. [ 649.125758][ T5733] DVB: Unable to find symbol tda10046_attach() [ 649.125774][ T5733] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 649.227436][T10351] openvswitch: netlink: Unknown key attributes 2 [ 649.332483][T10345] netlink: 36 bytes leftover after parsing attributes in process `syz.5.811'. [ 649.343037][T10345] netlink: 68 bytes leftover after parsing attributes in process `syz.5.811'. [ 649.352391][ T5733] usb 1-1: USB disconnect, device number 10 [ 650.621120][T10384] netlink: zone id is out of range [ 650.621136][T10384] netlink: zone id is out of range [ 650.621144][T10384] netlink: zone id is out of range [ 650.621151][T10384] netlink: zone id is out of range [ 650.621159][T10384] netlink: zone id is out of range [ 650.621166][T10384] netlink: zone id is out of range [ 650.621174][T10384] netlink: zone id is out of range [ 650.621181][T10384] netlink: zone id is out of range [ 650.621188][T10384] netlink: zone id is out of range [ 650.709881][T10373] 9p: Bad value for 'rfdno' [ 650.755569][T10387] FAULT_INJECTION: forcing a failure. [ 650.755569][T10387] name failslab, interval 1, probability 0, space 0, times 0 [ 650.755601][T10387] CPU: 1 UID: 0 PID: 10387 Comm: syz.6.822 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 650.755622][T10387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 650.755632][T10387] Call Trace: [ 650.755639][T10387] [ 650.755650][T10387] dump_stack_lvl+0xe8/0x150 [ 650.755688][T10387] should_fail_ex+0x447/0x5e0 [ 650.755720][T10387] should_failslab+0xa8/0x100 [ 650.755747][T10387] __kmalloc_noprof+0xf6/0x790 [ 650.755767][T10387] ? tomoyo_realpath_from_path+0xf2/0x640 [ 650.755789][T10387] ? tomoyo_realpath_from_path+0xf2/0x640 [ 650.755815][T10387] tomoyo_realpath_from_path+0xf2/0x640 [ 650.755843][T10387] ? tomoyo_path_number_perm+0x219/0x5f0 [ 650.755868][T10387] tomoyo_path_number_perm+0x246/0x5f0 [ 650.755896][T10387] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 650.755918][T10387] ? __lock_acquire+0x747/0x2de0 [ 650.755959][T10387] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 650.756003][T10387] ? __fget_files+0x2a/0x420 [ 650.756031][T10387] ? __fget_files+0x2a/0x420 [ 650.756055][T10387] ? __fget_files+0x2a/0x420 [ 650.756092][T10387] security_file_ioctl+0xc3/0x2a0 [ 650.756119][T10387] __se_sys_ioctl+0x47/0x170 [ 650.756143][T10387] do_syscall_64+0x166/0x520 [ 650.756165][T10387] ? trace_irq_disable+0x3b/0x140 [ 650.756185][T10387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.756204][T10387] ? clear_bhb_loop+0x70/0xc0 [ 650.756226][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.756245][T10387] RIP: 0033:0x7f6b3b12fb19 [ 650.756261][T10387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.756277][T10387] RSP: 002b:00007f6b39386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 650.756298][T10387] RAX: ffffffffffffffda RBX: 00007f6b3b3b5fa0 RCX: 00007f6b3b12fb19 [ 650.756312][T10387] RDX: 0000200000000400 RSI: 00000000c0cc5616 RDI: 0000000000000003 [ 650.756324][T10387] RBP: 00007f6b39386090 R08: 0000000000000000 R09: 0000000000000000 [ 650.756336][T10387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.756348][T10387] R13: 00007f6b3b3b6038 R14: 00007f6b3b3b5fa0 R15: 00007ffd5ff80cd8 [ 650.756381][T10387] [ 650.785546][T10387] ERROR: Out of memory at tomoyo_realpath_from_path. [ 651.158290][T10392] netlink: 20 bytes leftover after parsing attributes in process `syz.6.824'. [ 651.400317][T10398] FAULT_INJECTION: forcing a failure. [ 651.400317][T10398] name failslab, interval 1, probability 0, space 0, times 0 [ 651.400338][T10398] CPU: 1 UID: 0 PID: 10398 Comm: syz.6.826 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 651.400351][T10398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 651.400357][T10398] Call Trace: [ 651.400362][T10398] [ 651.400367][T10398] dump_stack_lvl+0xe8/0x150 [ 651.400388][T10398] should_fail_ex+0x447/0x5e0 [ 651.400406][T10398] should_failslab+0xa8/0x100 [ 651.400422][T10398] __kmalloc_noprof+0xf6/0x790 [ 651.400435][T10398] ? tomoyo_realpath_from_path+0xf2/0x640 [ 651.400453][T10398] ? tomoyo_realpath_from_path+0xf2/0x640 [ 651.400479][T10398] tomoyo_realpath_from_path+0xf2/0x640 [ 651.400508][T10398] ? tomoyo_path_number_perm+0x219/0x5f0 [ 651.400534][T10398] tomoyo_path_number_perm+0x246/0x5f0 [ 651.400562][T10398] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 651.400585][T10398] ? __lock_acquire+0x747/0x2de0 [ 651.400609][T10398] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 651.400640][T10398] ? __fget_files+0x2a/0x420 [ 651.400657][T10398] ? __fget_files+0x2a/0x420 [ 651.400670][T10398] ? __fget_files+0x2a/0x420 [ 651.400686][T10398] security_file_ioctl+0xc3/0x2a0 [ 651.400702][T10398] __se_sys_ioctl+0x47/0x170 [ 651.400715][T10398] do_syscall_64+0x166/0x520 [ 651.400727][T10398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.400738][T10398] ? clear_bhb_loop+0x70/0xc0 [ 651.400750][T10398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.400761][T10398] RIP: 0033:0x7f6b3b12fb19 [ 651.400771][T10398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.400780][T10398] RSP: 002b:00007f6b39365028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.400792][T10398] RAX: ffffffffffffffda RBX: 00007f6b3b3b6090 RCX: 00007f6b3b12fb19 [ 651.400800][T10398] RDX: 0000000000000000 RSI: 0000000000005514 RDI: 0000000000000004 [ 651.400806][T10398] RBP: 00007f6b39365090 R08: 0000000000000000 R09: 0000000000000000 [ 651.400812][T10398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.400818][T10398] R13: 00007f6b3b3b6128 R14: 00007f6b3b3b6090 R15: 00007ffd5ff80cd8 [ 651.400835][T10398] [ 651.401608][T10398] ERROR: Out of memory at tomoyo_realpath_from_path. [ 652.211469][T10408] 9p: Bad value for 'rfdno' [ 653.185074][T10430] netlink: 128 bytes leftover after parsing attributes in process `syz.0.835'. [ 653.325190][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.836'. [ 654.542450][ T36] kauditd_printk_skb: 88 callbacks suppressed [ 654.542473][ T36] audit: type=1326 audit(1794136405.098:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.5.848" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a16afb19 code=0x7ffc0000 [ 654.542517][ T36] audit: type=1326 audit(1794136405.098:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.5.848" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a16afb19 code=0x7ffc0000 [ 654.607842][ T36] audit: type=1326 audit(1794136405.118:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.5.848" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a16afb19 code=0x7ffc0000 [ 654.607895][ T36] audit: type=1326 audit(1794136405.168:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.5.848" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a16afb19 code=0x7ffc0000 [ 654.608889][ T36] audit: type=1326 audit(1794136405.168:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.5.848" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f78a16afb19 code=0x7ffc0000 [ 654.615157][ T36] audit: type=1326 audit(1794136405.168:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.5.848" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a16afb19 code=0x7ffc0000 [ 654.615208][ T36] audit: type=1326 audit(1794136405.168:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.5.848" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a16afb19 code=0x7ffc0000 [ 654.622961][ T36] audit: type=1326 audit(1794136405.178:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.5.848" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a16afb19 code=0x7ffc0000 [ 654.623019][ T36] audit: type=1326 audit(1794136405.178:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.5.848" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a16afb19 code=0x7ffc0000 [ 654.676545][ T36] audit: type=1326 audit(1794136405.228:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.5.848" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f78a16afb19 code=0x7ffc0000 [ 655.019729][T10462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.850'. [ 655.242917][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.849'. [ 655.359418][T10479] netlink: 128 bytes leftover after parsing attributes in process `syz.3.852'. [ 655.449182][T10481] FAULT_INJECTION: forcing a failure. [ 655.449182][T10481] name failslab, interval 1, probability 0, space 0, times 0 [ 655.449217][T10481] CPU: 1 UID: 0 PID: 10481 Comm: syz.5.854 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 655.449238][T10481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 655.449249][T10481] Call Trace: [ 655.449257][T10481] [ 655.449266][T10481] dump_stack_lvl+0xe8/0x150 [ 655.449301][T10481] should_fail_ex+0x447/0x5e0 [ 655.449331][T10481] should_failslab+0xa8/0x100 [ 655.449357][T10481] __kmalloc_cache_noprof+0x9c/0x670 [ 655.449379][T10481] ? __se_sys_io_uring_register+0xed9/0x1a20 [ 655.449475][T10481] ? __se_sys_io_uring_register+0xed9/0x1a20 [ 655.449505][T10481] __se_sys_io_uring_register+0xed9/0x1a20 [ 655.449539][T10481] ? __se_sys_futex+0x3a8/0x450 [ 655.449566][T10481] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 655.449595][T10481] ? rcu_is_watching+0x16/0xb0 [ 655.449632][T10481] do_syscall_64+0x166/0x520 [ 655.449656][T10481] ? trace_irq_disable+0x3b/0x140 [ 655.449676][T10481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.449696][T10481] ? clear_bhb_loop+0x70/0xc0 [ 655.449719][T10481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.449737][T10481] RIP: 0033:0x7f78a16afb19 [ 655.449756][T10481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.449772][T10481] RSP: 002b:00007f789f8fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 655.449794][T10481] RAX: ffffffffffffffda RBX: 00007f78a1935fa0 RCX: 00007f78a16afb19 [ 655.449809][T10481] RDX: 0000200000000400 RSI: 0000000000000025 RDI: ffffffffffffffff [ 655.449824][T10481] RBP: 00007f78a1747b70 R08: 0000000000000000 R09: 0000000000000000 [ 655.449836][T10481] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 655.449848][T10481] R13: 00007f78a1936038 R14: 00007f78a1935fa0 R15: 00007ffe3ac1d1c8 [ 655.449879][T10481] [ 655.851632][T10487] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 655.989888][T10487] bond1 (unregistering): Released all slaves [ 657.870577][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.863'. [ 658.710573][T10526] FAULT_INJECTION: forcing a failure. [ 658.710573][T10526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.710604][T10526] CPU: 0 UID: 0 PID: 10526 Comm: syz.0.866 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 658.710629][T10526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 658.710640][T10526] Call Trace: [ 658.710647][T10526] [ 658.710656][T10526] dump_stack_lvl+0xe8/0x150 [ 658.710690][T10526] should_fail_ex+0x447/0x5e0 [ 658.710720][T10526] _copy_to_user+0x31/0xb0 [ 658.710747][T10526] simple_read_from_buffer+0xe1/0x170 [ 658.710778][T10526] proc_fail_nth_read+0x1be/0x230 [ 658.710805][T10526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 658.710828][T10526] ? rw_verify_area+0x250/0x4d0 [ 658.710856][T10526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 658.710877][T10526] vfs_read+0x219/0xa90 [ 658.710904][T10526] ? __pfx_vfs_read+0x10/0x10 [ 658.710925][T10526] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 658.710951][T10526] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 658.710969][T10526] ? mutex_lock_nested+0x14d/0x1d0 [ 658.710993][T10526] ? fdget_pos+0x11e/0x160 [ 658.711027][T10526] ksys_read+0x156/0x270 [ 658.711047][T10526] ? __pfx_ksys_read+0x10/0x10 [ 658.711077][T10526] do_syscall_64+0x166/0x520 [ 658.711099][T10526] ? trace_irq_disable+0x3b/0x140 [ 658.711118][T10526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.711137][T10526] ? clear_bhb_loop+0x70/0xc0 [ 658.711161][T10526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.711188][T10526] RIP: 0033:0x7fb45915034e [ 658.711207][T10526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 658.711223][T10526] RSP: 002b:00007fb4573bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 658.711242][T10526] RAX: ffffffffffffffda RBX: 00007fb4573bd6c0 RCX: 00007fb45915034e [ 658.711255][T10526] RDX: 000000000000000f RSI: 00007fb4573bd0a0 RDI: 0000000000000003 [ 658.711267][T10526] RBP: 00007fb4573bd090 R08: 0000000000000000 R09: 0000000000000000 [ 658.711279][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.711291][T10526] R13: 00007fb459416128 R14: 00007fb459416090 R15: 00007fff7dc63298 [ 658.711323][T10526] [ 659.775901][T10544] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 659.848013][T10544] bond1 (unregistering): Released all slaves [ 661.014623][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 661.309001][T10563] veth2: entered allmulticast mode [ 661.846429][T10571] FAULT_INJECTION: forcing a failure. [ 661.846429][T10571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.846458][T10571] CPU: 1 UID: 0 PID: 10571 Comm: syz.6.881 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 661.846477][T10571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 661.846487][T10571] Call Trace: [ 661.846493][T10571] [ 661.846501][T10571] dump_stack_lvl+0xe8/0x150 [ 661.846531][T10571] should_fail_ex+0x447/0x5e0 [ 661.846555][T10571] _copy_from_user+0x2d/0xb0 [ 661.846575][T10571] ___sys_sendmsg+0x1c6/0x360 [ 661.846591][T10571] ? __lock_acquire+0x747/0x2de0 [ 661.846616][T10571] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.846657][T10571] ? __fget_files+0x3a8/0x420 [ 661.846678][T10571] ? __fget_files+0x2a/0x420 [ 661.846705][T10571] __x64_sys_sendmsg+0x1b7/0x290 [ 661.846724][T10571] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.846756][T10571] do_syscall_64+0x166/0x520 [ 661.846775][T10571] ? trace_irq_disable+0x3b/0x140 [ 661.846791][T10571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.846807][T10571] ? clear_bhb_loop+0x70/0xc0 [ 661.846827][T10571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.846843][T10571] RIP: 0033:0x7f6b3b12fb19 [ 661.846860][T10571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.846876][T10571] RSP: 002b:00007f6b39386028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.846896][T10571] RAX: ffffffffffffffda RBX: 00007f6b3b3b5fa0 RCX: 00007f6b3b12fb19 [ 661.846910][T10571] RDX: 0000000004000010 RSI: 0000200000001200 RDI: 0000000000000003 [ 661.846922][T10571] RBP: 00007f6b39386090 R08: 0000000000000000 R09: 0000000000000000 [ 661.846933][T10571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.846944][T10571] R13: 00007f6b3b3b6038 R14: 00007f6b3b3b5fa0 R15: 00007ffd5ff80cd8 [ 661.846974][T10571] [ 665.184715][ T5604] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 665.352321][ T5604] usb 7-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 665.354288][ T5604] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 665.354314][ T5604] usb 7-1: config 0 has no interface number 0 [ 665.354350][ T5604] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 665.354364][ T5604] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 665.372885][ T5604] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.372904][ T5604] usb 7-1: Product: syz [ 665.372911][ T5604] usb 7-1: Manufacturer: syz [ 665.372919][ T5604] usb 7-1: SerialNumber: syz [ 665.436619][ T5604] usb 7-1: config 0 descriptor?? [ 665.443696][T10577] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 665.459813][ T5604] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 665.601991][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.889'. [ 665.604325][ T5604] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 666.804757][ T5752] usb 7-1: USB disconnect, device number 2 [ 667.096645][ T5752] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 667.126513][ T5752] cyberjack 7-1:0.69: device disconnected [ 668.786010][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 668.786029][ T36] audit: type=1326 audit(1794136418.738:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10612 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 668.786325][ T36] audit: type=1326 audit(1794136418.738:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10612 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 668.786798][ T36] audit: type=1326 audit(1794136418.738:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10612 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 668.869364][ T36] audit: type=1326 audit(1794136418.822:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10612 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 668.869675][ T36] audit: type=1326 audit(1794136418.822:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10612 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 668.870339][ T36] audit: type=1326 audit(1794136418.822:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10612 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 668.961005][ T36] audit: type=1326 audit(1794136418.822:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10612 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 668.962643][ T36] audit: type=1326 audit(1794136418.907:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10612 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 669.072614][ T36] audit: type=1326 audit(1794136419.009:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10612 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 669.072671][ T36] audit: type=1326 audit(1794136419.009:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10612 comm="syz.6.895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 670.192205][T10623] overlayfs: overlapping lowerdir path [ 670.994683][T10627] netlink: 40 bytes leftover after parsing attributes in process `syz.3.896'. [ 671.719748][T10640] loop6: detected capacity change from 0 to 1 [ 673.502817][ T4924] Bluetooth: hci4: command 0x0406 tx timeout [ 673.525499][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'. [ 673.860760][T10640] Dev loop6: unable to read RDB block 1 [ 673.860804][T10640] loop6: unable to read partition table [ 673.883718][T10640] loop6: partition table beyond EOD, truncated [ 673.883752][T10640] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 677.683187][T10690] netlink: 64 bytes leftover after parsing attributes in process `syz.3.910'. [ 677.683236][T10690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.910'. [ 677.731175][T10690] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 677.731195][T10690] overlayfs: missing 'lowerdir' [ 678.078250][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 678.078270][ T36] audit: type=1326 audit(1794136427.437:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.6.912" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 678.078383][ T36] audit: type=1326 audit(1794136427.437:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.6.912" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 678.083838][ T36] audit: type=1326 audit(1794136427.437:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.6.912" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 678.109692][ T36] audit: type=1326 audit(1794136427.437:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.6.912" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 678.111237][ T36] audit: type=1326 audit(1794136427.465:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.6.912" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 678.111294][ T36] audit: type=1326 audit(1794136427.465:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.6.912" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 678.112271][ T36] audit: type=1326 audit(1794136427.465:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.6.912" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 678.114138][ T36] audit: type=1326 audit(1794136427.465:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.6.912" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 678.114458][ T36] audit: type=1326 audit(1794136427.465:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.6.912" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 678.117175][ T36] audit: type=1326 audit(1794136427.465:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10695 comm="syz.6.912" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3b12fb19 code=0x7ffc0000 [ 678.508150][T10708] netlink: 16 bytes leftover after parsing attributes in process `syz.5.917'. [ 678.512149][T10705] FAULT_INJECTION: forcing a failure. [ 678.512149][T10705] name failslab, interval 1, probability 0, space 0, times 0 [ 678.512181][T10705] CPU: 1 UID: 0 PID: 10705 Comm: syz.4.915 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 678.512203][T10705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 678.512214][T10705] Call Trace: [ 678.512222][T10705] [ 678.512231][T10705] dump_stack_lvl+0xe8/0x150 [ 678.512269][T10705] should_fail_ex+0x447/0x5e0 [ 678.512300][T10705] should_failslab+0xa8/0x100 [ 678.512326][T10705] __kmalloc_noprof+0xf6/0x790 [ 678.512346][T10705] ? tomoyo_realpath_from_path+0xf2/0x640 [ 678.512366][T10705] ? tomoyo_realpath_from_path+0xf2/0x640 [ 678.512393][T10705] tomoyo_realpath_from_path+0xf2/0x640 [ 678.512422][T10705] ? tomoyo_path_number_perm+0x219/0x5f0 [ 678.512448][T10705] tomoyo_path_number_perm+0x246/0x5f0 [ 678.512477][T10705] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 678.512500][T10705] ? __lock_acquire+0x747/0x2de0 [ 678.512544][T10705] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 678.512589][T10705] ? __fget_files+0x2a/0x420 [ 678.512618][T10705] ? __fget_files+0x2a/0x420 [ 678.512643][T10705] ? __fget_files+0x2a/0x420 [ 678.512673][T10705] security_file_ioctl+0xc3/0x2a0 [ 678.512707][T10705] __se_sys_ioctl+0x47/0x170 [ 678.512732][T10705] do_syscall_64+0x166/0x520 [ 678.512753][T10705] ? trace_irq_disable+0x3b/0x140 [ 678.512772][T10705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.512791][T10705] ? clear_bhb_loop+0x70/0xc0 [ 678.512814][T10705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.512833][T10705] RIP: 0033:0x7f694d2dfb19 [ 678.512852][T10705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.512868][T10705] RSP: 002b:00007f694b52e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 678.512889][T10705] RAX: ffffffffffffffda RBX: 00007f694d565fa0 RCX: 00007f694d2dfb19 [ 678.512903][T10705] RDX: 0000200000000100 RSI: 00000000c0305602 RDI: 0000000000000003 [ 678.512916][T10705] RBP: 00007f694b52e090 R08: 0000000000000000 R09: 0000000000000000 [ 678.512928][T10705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.512940][T10705] R13: 00007f694d566038 R14: 00007f694d565fa0 R15: 00007ffd7d380558 [ 678.512971][T10705] [ 678.514020][T10705] ERROR: Out of memory at tomoyo_realpath_from_path. [ 680.196742][T10718] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 680.274857][T10722] FAULT_INJECTION: forcing a failure. [ 680.274857][T10722] name failslab, interval 1, probability 0, space 0, times 0 [ 680.274889][T10722] CPU: 0 UID: 0 PID: 10722 Comm: syz.5.922 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 680.274916][T10722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 680.274928][T10722] Call Trace: [ 680.274935][T10722] [ 680.274944][T10722] dump_stack_lvl+0xe8/0x150 [ 680.274978][T10722] should_fail_ex+0x447/0x5e0 [ 680.275008][T10722] should_failslab+0xa8/0x100 [ 680.275031][T10722] ? do_getname+0x2e/0x250 [ 680.275054][T10722] kmem_cache_alloc_noprof+0x99/0x680 [ 680.275083][T10722] ? do_getname+0x2e/0x250 [ 680.275111][T10722] do_getname+0x2e/0x250 [ 680.275131][T10722] ? __se_sys_mkdirat+0x18/0x150 [ 680.275156][T10722] __se_sys_mkdirat+0x24/0x150 [ 680.275180][T10722] do_syscall_64+0x166/0x520 [ 680.275203][T10722] ? trace_irq_disable+0x3b/0x140 [ 680.275222][T10722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.275242][T10722] ? clear_bhb_loop+0x70/0xc0 [ 680.275264][T10722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.275283][T10722] RIP: 0033:0x7f78a16afb19 [ 680.275300][T10722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.275317][T10722] RSP: 002b:00007f789f8fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 680.275338][T10722] RAX: ffffffffffffffda RBX: 00007f78a1935fa0 RCX: 00007f78a16afb19 [ 680.275352][T10722] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 680.275365][T10722] RBP: 00007f789f8fe090 R08: 0000000000000000 R09: 0000000000000000 [ 680.275378][T10722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.275389][T10722] R13: 00007f78a1936038 R14: 00007f78a1935fa0 R15: 00007ffe3ac1d1c8 [ 680.275421][T10722] [ 680.291360][T10722] erspan0: entered promiscuous mode [ 680.584077][T10718] ------------[ cut here ]------------ [ 680.584095][T10718] failed to allocate ring buffer on CPU 0 [ 680.584117][T10718] WARNING: kernel/trace/ring_buffer.c:8095 at trace_rb_cpu_prepare+0x330/0x3c0, CPU#0: syz.6.921/10718 [ 680.606456][T10718] Modules linked in: [ 680.610403][T10718] CPU: 0 UID: 0 PID: 10718 Comm: syz.6.921 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 680.620290][T10718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 680.630408][T10718] RIP: 0010:trace_rb_cpu_prepare+0x332/0x3c0 [ 680.636476][T10718] Code: 08 f0 48 0f ab 03 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e7 29 fc ff 48 8d 3d 70 a9 0d 0f 89 ee <67> 48 0f b9 3a b8 f4 ff ff ff eb d2 e8 cd 29 fc ff e9 ef fe ff ff [ 680.656153][T10718] RSP: 0018:ffffc9000941f7b0 EFLAGS: 00010202 [ 680.662287][T10718] RAX: ffffffff81cbafb9 RBX: dffffc0000000000 RCX: ffff888027d50000 [ 680.670315][T10718] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffffffff90d95930 [ 680.678342][T10718] RBP: 0000000000000000 R08: ffffffff90d5a7bf R09: 1ffffffff21ab4f7 [ 680.686368][T10718] R10: dffffc0000000000 R11: fffffbfff21ab4f8 R12: 0000000000000000 [ 680.694364][T10718] R13: ffff88803fe4ad00 R14: ffff8880611550a0 R15: 0000000000000000 [ 680.702400][T10718] FS: 00007f6b393866c0(0000) GS:ffff88812470f000(0000) knlGS:0000000000000000 [ 680.711385][T10718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 680.718017][T10718] CR2: 00007fb4573ddff8 CR3: 000000002c85c000 CR4: 00000000003526f0 [ 680.726008][T10718] Call Trace: [ 680.729340][T10718] [ 680.732285][T10718] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 680.738031][T10718] cpuhp_invoke_callback+0x498/0x810 [ 680.743397][T10718] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 680.749180][T10718] cpuhp_issue_call+0x3f0/0x750 [ 680.754096][T10718] ? mutex_lock_nested+0x14d/0x1d0 [ 680.759247][T10718] ? __cpuhp_state_add_instance_cpuslocked+0x126/0x560 [ 680.766186][T10718] __cpuhp_state_add_instance_cpuslocked+0x225/0x560 [ 680.772955][T10718] __cpuhp_state_add_instance+0x25/0x40 [ 680.778540][T10718] alloc_buffer+0x188f/0x1d70 [ 680.783321][T10718] __ring_buffer_alloc+0x2c/0x40 [ 680.788289][T10718] allocate_trace_buffer+0x1d2/0x950 [ 680.793646][T10718] ? __kmalloc_node_track_caller_noprof+0x587/0x7b0 [ 680.800295][T10718] ? trace_array_create_systems+0x75/0xe60 [ 680.806165][T10718] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 680.811999][T10718] ? __raw_spin_lock_init+0x45/0x100 [ 680.817351][T10718] trace_array_create_systems+0x590/0xe60 [ 680.823092][T10718] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 680.828969][T10718] ? mutex_lock_nested+0x14d/0x1d0 [ 680.834129][T10718] instance_mkdir+0xd5/0x140 [ 680.838795][T10718] tracefs_syscall_mkdir+0x11a/0x190 [ 680.844166][T10718] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 680.850070][T10718] ? __pfx_tracefs_permission+0x10/0x10 [ 680.855655][T10718] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 680.861555][T10718] ? security_inode_mkdir+0xc3/0x340 [ 680.866883][T10718] vfs_mkdir+0x417/0x670 [ 680.871213][T10718] filename_mkdirat+0x288/0x560 [ 680.876099][T10718] ? __pfx_filename_mkdirat+0x10/0x10 [ 680.881586][T10718] ? do_getname+0x151/0x250 [ 680.886134][T10718] __se_sys_mkdirat+0x35/0x150 [ 680.890974][T10718] do_syscall_64+0x166/0x520 [ 680.895601][T10718] ? trace_irq_disable+0x3b/0x140 [ 680.900693][T10718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.906786][T10718] ? clear_bhb_loop+0x70/0xc0 [ 680.912737][T10718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.918664][T10718] RIP: 0033:0x7f6b3b12fb19 [ 680.923141][T10718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.942818][T10718] RSP: 002b:00007f6b39386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 680.951260][T10718] RAX: ffffffffffffffda RBX: 00007f6b3b3b5fa0 RCX: 00007f6b3b12fb19 [ 680.959299][T10718] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 680.967338][T10718] RBP: 00007f6b3b1c7b70 R08: 0000000000000000 R09: 0000000000000000 [ 680.975369][T10718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.983365][T10718] R13: 00007f6b3b3b6038 R14: 00007f6b3b3b5fa0 R15: 00007ffd5ff80cd8 [ 680.991410][T10718] [ 680.994462][T10718] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 681.001752][T10718] CPU: 0 UID: 0 PID: 10718 Comm: syz.6.921 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 681.011574][T10718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 681.021642][T10718] Call Trace: [ 681.024932][T10718] [ 681.027870][T10718] vpanic+0x26f/0x710 [ 681.031909][T10718] panic+0xc5/0xd0 [ 681.035638][T10718] ? __pfx_panic+0x10/0x10 [ 681.040091][T10718] __warn+0x315/0x4c0 [ 681.044082][T10718] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 681.049472][T10718] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 681.054859][T10718] __report_bug+0x276/0x570 [ 681.059476][T10718] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 681.064860][T10718] ? __pfx___report_bug+0x10/0x10 [ 681.069925][T10718] ? rb_allocate_cpu_buffer+0x5cf/0x3070 [ 681.075576][T10718] report_bug_entry+0x19b/0x290 [ 681.080439][T10718] ? trace_rb_cpu_prepare+0x332/0x3c0 [ 681.085823][T10718] ? trace_rb_cpu_prepare+0x337/0x3c0 [ 681.091207][T10718] handle_bug+0xce/0x200 [ 681.095464][T10718] exc_invalid_op+0x1a/0x50 [ 681.099985][T10718] asm_exc_invalid_op+0x1a/0x20 [ 681.104852][T10718] RIP: 0010:trace_rb_cpu_prepare+0x332/0x3c0 [ 681.110838][T10718] Code: 08 f0 48 0f ab 03 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e7 29 fc ff 48 8d 3d 70 a9 0d 0f 89 ee <67> 48 0f b9 3a b8 f4 ff ff ff eb d2 e8 cd 29 fc ff e9 ef fe ff ff [ 681.130491][T10718] RSP: 0018:ffffc9000941f7b0 EFLAGS: 00010202 [ 681.136578][T10718] RAX: ffffffff81cbafb9 RBX: dffffc0000000000 RCX: ffff888027d50000 [ 681.144560][T10718] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffffffff90d95930 [ 681.152542][T10718] RBP: 0000000000000000 R08: ffffffff90d5a7bf R09: 1ffffffff21ab4f7 [ 681.160524][T10718] R10: dffffc0000000000 R11: fffffbfff21ab4f8 R12: 0000000000000000 [ 681.168514][T10718] R13: ffff88803fe4ad00 R14: ffff8880611550a0 R15: 0000000000000000 [ 681.176510][T10718] ? trace_rb_cpu_prepare+0x329/0x3c0 [ 681.181916][T10718] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 681.187663][T10718] cpuhp_invoke_callback+0x498/0x810 [ 681.192982][T10718] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 681.198738][T10718] cpuhp_issue_call+0x3f0/0x750 [ 681.203611][T10718] ? mutex_lock_nested+0x14d/0x1d0 [ 681.208743][T10718] ? __cpuhp_state_add_instance_cpuslocked+0x126/0x560 [ 681.215615][T10718] __cpuhp_state_add_instance_cpuslocked+0x225/0x560 [ 681.222323][T10718] __cpuhp_state_add_instance+0x25/0x40 [ 681.227888][T10718] alloc_buffer+0x188f/0x1d70 [ 681.232611][T10718] __ring_buffer_alloc+0x2c/0x40 [ 681.237570][T10718] allocate_trace_buffer+0x1d2/0x950 [ 681.242861][T10718] ? __kmalloc_node_track_caller_noprof+0x587/0x7b0 [ 681.249464][T10718] ? trace_array_create_systems+0x75/0xe60 [ 681.255278][T10718] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 681.261103][T10718] ? __raw_spin_lock_init+0x45/0x100 [ 681.266409][T10718] trace_array_create_systems+0x590/0xe60 [ 681.272133][T10718] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 681.277961][T10718] ? mutex_lock_nested+0x14d/0x1d0 [ 681.283194][T10718] instance_mkdir+0xd5/0x140 [ 681.287804][T10718] tracefs_syscall_mkdir+0x11a/0x190 [ 681.293113][T10718] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 681.298956][T10718] ? __pfx_tracefs_permission+0x10/0x10 [ 681.304518][T10718] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 681.309540][T10718] ? security_inode_mkdir+0xc3/0x340 [ 681.314846][T10718] vfs_mkdir+0x417/0x670 [ 681.319194][T10718] filename_mkdirat+0x288/0x560 [ 681.324066][T10718] ? __pfx_filename_mkdirat+0x10/0x10 [ 681.329452][T10718] ? do_getname+0x151/0x250 [ 681.333967][T10718] __se_sys_mkdirat+0x35/0x150 [ 681.338737][T10718] do_syscall_64+0x166/0x520 [ 681.343336][T10718] ? trace_irq_disable+0x3b/0x140 [ 681.348371][T10718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.354441][T10718] ? clear_bhb_loop+0x70/0xc0 [ 681.359138][T10718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.365042][T10718] RIP: 0033:0x7f6b3b12fb19 [ 681.369471][T10718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.389087][T10718] RSP: 002b:00007f6b39386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 681.397503][T10718] RAX: ffffffffffffffda RBX: 00007f6b3b3b5fa0 RCX: 00007f6b3b12fb19 [ 681.405474][T10718] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 681.413449][T10718] RBP: 00007f6b3b1c7b70 R08: 0000000000000000 R09: 0000000000000000 [ 681.421423][T10718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.429399][T10718] R13: 00007f6b3b3b6038 R14: 00007f6b3b3b5fa0 R15: 00007ffd5ff80cd8 [ 681.437389][T10718] [ 681.440568][T10718] Kernel Offset: disabled [ 681.444902][T10718] Rebooting in 86400 seconds..