last executing test programs: 10.867493345s ago: executing program 0 (id=2149): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtaction={0x18, 0x30, 0xb, 0x70bd2b, 0xfffffffb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000c804}, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8dc3, 0x900) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40040) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045520, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='noswap']) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x24024080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@getchain={0x44, 0x66, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xa, 0x4}, {0xf, 0xf}}, [{0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x1400}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x10}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000880}, 0x220040d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/177, 0xb1, 0xa1}}], 0x1, 0x2040300, &(0x7f0000003700)={0x77359400}) 10.284659916s ago: executing program 1 (id=2159): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xf151fbeec6f74608}, 0x40000) 10.198495823s ago: executing program 1 (id=2160): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000480)={0x529d40, 0x614e8c6eeb60b636, 0x1}, 0x18) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000010801"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) r1 = socket$tipc(0x1e, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) modify_ldt$write(0x1, &(0x7f0000000f00)={0x6, 0x0, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect(0x3, 0x164, &(0x7f0000000280)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e010000082406", @ANYRESOCT, @ANYBLOB="b18357840bee739ccf7fa42def8a86775b90b71033ff56066219579aa3d7aa880dc1420d42534e03c3e185deb62e2fdfe503f82b34b286f6bca1fc8fdded324e692a995f1f1d91514b06916fb58e0f90146c93cc7cd6f498679d98378cca4132"], 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) syz_open_dev$sndmidi(&(0x7f0000000240), 0xa, 0x90800) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008884}, 0x8805) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 9.667976885s ago: executing program 0 (id=2164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000180)={0x40, 0x10, 0x4, "ece46cef"}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}}, 0x24000000) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f0000001a80)=""/4147, 0x1033}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000004500)=""/4093, 0xffd}, {&(0x7f0000000700)=""/60, 0x3c}, {&(0x7f0000000780)=""/21, 0x15}], 0x6}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x40000009}, {{0x0, 0x0, 0x0}}], 0x4, 0x40000102, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000a40)="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", 0x1000, 0x4000000, &(0x7f0000001a40)={0xa, 0x4e23, 0x1ff, @empty, 0xd2}, 0x1c) 8.256200278s ago: executing program 3 (id=2171): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b708000000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.31628854s ago: executing program 3 (id=2174): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f00000000c0), &(0x7f0000000200)=@udp, 0x2}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000033c0)=@newsa={0xec, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x33}, {@in=@private=0xa010102, 0x0, 0x3c}, @in6=@mcast2, {0x0, 0xfffffffffffffffc}, {0x1, 0x0, 0x8000002, 0x20200}, {0x0, 0x0, 0x2}, 0x0, 0x40000, 0x2, 0x0, 0x0, 0xcd}}, 0xec}, 0x1, 0x0, 0x0, 0x14}, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000089142460"], 0xb2) 6.968175166s ago: executing program 1 (id=2177): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902"], 0x0) chroot(&(0x7f0000000000)='./file0/file1/file2/file3/file5\x00') r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x10, 0x8}, {0x0, 0xff}, {}, @raw32={[0x0, 0x100]}}, {0x0, 0x0, 0x0, 0xfc, @time, {0x3}, {}, @raw8={"b72b538a2591b8725426cede"}}], 0x38) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2802, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket(0x2000000015, 0x80005, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x8001}, 0x1c) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000080)={0x4, 0x2, 0x7ff, 0x4, 0x6bf9}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r8}, 0x4) dup(r3) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r9) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r10, 0xaff49dcb2601bfbb, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c0810}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x2000000000000185, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a50500000000faaf499ce711af231687e562b27a1b88e8e8f55facd435f69485c63dbfbd7d659d6de9f4f63a6fae05f9c27ccc638a78c07e08508a298216e51ffc61be32e3c2277f454393a619", @ANYRES64=r10, @ANYRES32, @ANYBLOB="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", @ANYBLOB="4547fc23186ee3575f276e70e6e67bb8887a4279", @ANYBLOB="1374fef4ea8b68b57878975d6f75f1b6c04b3cddb8fc08ef3edbd5640c07674b6034600b9669b5ac8808deee88214b004596268f8ae61c8fafd909117e6ade46710f757de47e16b5416e6be2febfa9df4a06d88a086c88be0b44da124ba142d29c6891bd185c300297095b29a8c84a54536bbe23e5a9df1313c2d912eb395e2ed104eaad5fb79bda9d70209e68a3d1623bf69486ba1f008f9c6579abd075d37544685fb1a687e468844acd6f91ab89949859d23d65fd64072b2f565efd6b854c0517d88045f7909f0fcd0cfa651fae3599310c0fc58e28c2f9212aa169cc5750f6d531bd", @ANYRES32=r8, @ANYRESDEC=r2], &(0x7f0000000080)='GPL\x00', 0x5, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @sk_skb, r8, 0x6}, 0x94) 6.935761781s ago: executing program 3 (id=2179): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000000c0)=@sg0, r0, &(0x7f0000002b80)) nanosleep(&(0x7f0000000200)={0x1}, 0x0) ioctl(0xffffffffffffffff, 0xffffffff, &(0x7f0000000400)="03000000010000000100"/20) 5.156213382s ago: executing program 0 (id=2188): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000280)=@raw=[@exit], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x7, &(0x7f0000000340)=""/7, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet6(0xa, 0x5, 0xe) r0 = syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000001000850000007a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000}, 0x94) 5.155972772s ago: executing program 2 (id=2189): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x891f, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_hwaddr=@random="8562163aa2e6"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=@delnexthop={0x20, 0x69, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) 4.895044269s ago: executing program 0 (id=2190): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) geteuid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x1}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x884, &(0x7f0000000180)={[{@max={'max', 0x3d, 0x4}}], [{@uid_gt={'uid>', 0xee00}}, {@dont_measure}, {@seclabel}, {@subj_role={'subj_role', 0x3d, '/dev/sequencer\x00'}}]}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x19, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x807}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xf, 0x5}}}}}]}}]}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xcbdf, &(0x7f00000000c0)) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x1) write$P9_RSTATu(r1, &(0x7f00000004c0)=ANY=[@ANYRES8=r2], 0x232) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x514b5317c0b6cb10, 0x0, 0x0, 0x0, 0xff, 0x17ef, 0x60fe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf1, 0xf0, 0x10, "", [{{0x9, 0x4, 0x0, 0x6, 0xd, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x6, 0xf, 0x1, {0x22, 0xbc0}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x2, 0x70}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x9, 0x5}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x3, 0x6, 0xf7, 0xff, 0x5}, 0x104, &(0x7f0000000380)={0x5, 0xf, 0x104, 0x3, [@generic={0xdd, 0x10, 0xa, "db9a2ccb71a00941b59920b48043b06fcdb914c941fa408ef12adb9af147d54235e2bc4b375531a1ed3e7256bb696d19db1aafa52623a1b75042b1de0faa43ee39d317b9ae01d765f0d4fcbb46ddbdc4dcc0183ab423af537ee7bbbc7b08197c4489f1cb53b06ba94c528d595ac3bc40d188673c7cb0a70127a0b834210f102b72805b2cb56ec83315a0a56e484e3f483f96e3dbce6c78e7ddce6a6863f5e7f8e5425dc17be22fe632e98bd7b337f71f9c1c2e7faf0506baf4fd01f2d6879a0bfe0173be5f05872ab880c3495f7e535c6634d205565fefe6a741"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0xfa, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7ffffff, 0xff0f, 0x8000, [0x30, 0xffffd1, 0x57dc0dbff09a6de9]}]}, 0x6, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41e}}, {0xc, &(0x7f00000005c0)=@string={0xc, 0x3, "fc08fc31420532b867ff"}}, {0x0, 0x0}, {0x6a, &(0x7f0000000640)=@string={0x6a, 0x3, "0f03fbde6354ededb1de530dc033c73fa15b602c4cee3253715a17e0b069d3ada35c04e88a423e7c90c6f57e8eca61dc8ccbd0feec683124b795187aba0bdc42e167a5e2e221e32a6d49cef123b7de758b29243451cdaa78badda90972f0c1944d8d69cf247b875b"}}]}) 4.705190933s ago: executing program 2 (id=2192): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xf151fbeec6f74608}, 0x40000) 4.560324974s ago: executing program 2 (id=2193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0445624, &(0x7f00000000c0)={0x100980001, 0x204, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae", 0x40, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, [0x10, 0x0, 0x3]}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x200010) 4.372755894s ago: executing program 2 (id=2194): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x82, 0x0) write$vga_arbiter(r0, &(0x7f00000002c0)=@other={'trylock', ' ', 'io+mem'}, 0xf) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) sendfile(r4, r3, 0x0, 0xc00) close(r4) 4.253694987s ago: executing program 3 (id=2195): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000300)="f341b61a35d4", 0x6}], 0x1, &(0x7f00000007c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (fail_nth: 2) 4.253341593s ago: executing program 4 (id=2196): r0 = socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0xa, 0x40010, r0, 0x3fea2000) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101042, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) r3 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ppoll(&(0x7f0000000100)=[{r3, 0x10b8}, {r2, 0x8024}, {r2, 0x40}, {r2, 0xc080}, {r1, 0x400}, {r1, 0x8000}, {r1, 0x8000}, {r2, 0x1000}, {r0, 0x1002}], 0x9, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)={[0x2]}, 0x8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r2, 0xc0186445, &(0x7f0000000240)={0x81, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r2, 0xc0106450, &(0x7f0000000280)={r5, 0x1, 0x3}) fsetxattr$security_evm(r1, &(0x7f00000002c0), &(0x7f0000000300)=@v1={0x2, "d49bccac91e05358a76acb1cd088e3d4df"}, 0x12, 0x1) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000000340)=0x3) r6 = syz_open_dev$vim2m(&(0x7f0000000380), 0x2, 0x2) ppoll(&(0x7f00000003c0)=[{r2, 0x2800}, {r1, 0x4100}, {r3, 0x200}, {r6, 0x10}, {r2, 0x1}, {r1, 0x210}, {r1, 0x20d4}], 0x7, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440)={[0x7]}, 0x8) sync_file_range(r0, 0x0, 0x7, 0x1) r7 = syz_open_dev$dri(&(0x7f0000000480), 0x9, 0xb4000) ioctl$DRM_IOCTL_SG_ALLOC(r7, 0xc0106438, &(0x7f0000000500)={0x4}) r8 = syz_open_dev$vcsn(&(0x7f0000000540), 0x0, 0x200002) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000580)="660b355104c8bf57df41ee0faf55a3496f18236098cb73297ef8615c6bf322a10467a55d76ddcc40d7735a91a802dd005ee46a41a277979a67771a63c8aca61390afe6f0dc5e780eca1e236c167067789685f12f063c14a8f3025f55e1de57eb196aac71815fabf8cb5d995d80b1681602714926435f161d2bcf5874a746e28a7bd6fe22b20d51b150669e793f", 0x8d) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r9, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xac}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000014) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, &(0x7f0000000780)={0x6, 0x3166, 0x6, 0x7, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000800)={'pim6reg\x00', @multicast}) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000000940)={&(0x7f0000000900)=[{&(0x7f0000000840)="a52302cc2b6ccb88b8769885a0b38bdbb9859cca42a53d584563a06d9b111f9c0dd5f1afedadaaee930716d36ed72eac37f390d2c5a7248ec34ba44f6a047ac60430a603c2faf58fb5d65c790bf8ce498a473dcb1feb094ed7fb7e72bfef8b650049a39c6ff12b245fe2dd7b81c80d8157c35919946f9a12ba047ddca068da311de6102eaa00f8ca1ca8f47f7103587933e7c50a9f565f5053ed", 0x9a}], 0x1, 0x76d, 0x0, 0x8, 0x6, 0xfffffffffffffff9, 0x6, 0x200}) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r2) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r11, 0x100, 0x70bd26, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FAMILY={0x5, 0xd, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4818) 4.253223248s ago: executing program 2 (id=2197): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000300)="f341b61a35d4", 0x6}], 0x1, &(0x7f00000007c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 4.196950861s ago: executing program 4 (id=2198): socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000001000011f00"/20, @ANYRES32=0x0, @ANYBLOB="57630700000000001c0012800b00010067656e65766500000c00028005000900010000001400030067656e65766531000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b20009058501"], 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd000000000010003c000a030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa00000000000000000300"], 0x80}}, 0x40d0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000200)={0x0, 0xf, 0x1012}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.765435527s ago: executing program 2 (id=2199): socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000001000011f00"/20, @ANYRES32=0x0, @ANYBLOB="57630700000000001c0012800b00010067656e65766500000c00028005000900010000001400030067656e65766531000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b20009058501"], 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd000000000010003c000a030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa00000000000000000300"], 0x80}}, 0x40d0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000200)={0x0, 0xf, 0x1012}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.6145069s ago: executing program 1 (id=2201): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 3.60607196s ago: executing program 3 (id=2202): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) 2.86639094s ago: executing program 4 (id=2203): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xf151fbeec6f74608}, 0x40000) 2.427259579s ago: executing program 3 (id=2204): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000700)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="0016000000f0"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.363566613s ago: executing program 1 (id=2205): kexec_load(0x3, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x48040) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2.032362817s ago: executing program 4 (id=2206): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2081, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = io_uring_setup(0x32df, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 2.032171694s ago: executing program 1 (id=2207): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000000c0)=@sg0, r0, &(0x7f0000002b80)) nanosleep(&(0x7f0000000200)={0x1}, 0x0) ioctl(0xffffffffffffffff, 0xffffffff, &(0x7f0000000400)="03000000010000000100"/20) 1.849199048s ago: executing program 0 (id=2208): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x82, 0x0) write$vga_arbiter(r0, &(0x7f00000002c0)=@other={'trylock', ' ', 'io+mem'}, 0xf) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) sendfile(r4, r3, 0x0, 0xc00) close(r4) 1.693032523s ago: executing program 4 (id=2209): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000700)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="001614000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) 424.721933ms ago: executing program 4 (id=2210): syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40109710780001010203010902270001010080fa0904000003ffffff00070581031000010705820240000007050302400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 0s ago: executing program 0 (id=2211): bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = socket(0x10, 0x803, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000140)=0xfffffffe) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x8, 0x2}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000e0603000000000000000000000000020900020073797a300000d6000900020073797a3000000000050001"], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x77359400}}, 0x0) kernel console output (not intermixed with test programs): no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 488.043105][T11110] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 488.043153][T11110] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 488.043206][T11110] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 488.043240][T11110] Node 0 DMA32 free:958648kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:784kB inactive_anon:301124kB active_file:119524kB inactive_file:149680kB unevictable:1536kB writepending:1180kB zspages:1244kB present:3129332kB managed:2560556kB mlocked:0kB bounce:0kB free_pcp:7716kB local_pcp:3028kB free_cma:0kB [ 488.043299][T11110] lowmem_reserve[]: 0 0 1 1 1 [ 488.043329][T11110] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 488.043383][T11110] lowmem_reserve[]: 0 0 0 0 0 [ 488.043413][T11110] Node 1 Normal free:3943636kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 488.043469][T11110] lowmem_reserve[]: 0 0 0 0 0 [ 488.043500][T11110] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 488.043605][T11110] Node 0 DMA32: 2068*4kB (UM) 1635*8kB (UME) 800*16kB (UM) 522*32kB (UME) 356*64kB (UM) 114*128kB (UM) 48*256kB (UME) 26*512kB (UME) 13*1024kB (UM) 6*2048kB (UE) 200*4096kB (UM) = 958632kB [ 488.043749][T11110] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 488.043840][T11110] Node 1 Normal: 3*4kB (U) 3*8kB (UM) 11*16kB (UM) 6*32kB (UM) 11*64kB (UM) 7*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3943636kB [ 488.044104][T11110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 488.044122][T11110] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 488.044137][T11110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 488.044183][T11110] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 488.044199][T11110] 137481 total pagecache pages [ 488.044207][T11110] 2 pages in swap cache [ 488.044214][T11110] Free swap = 124528kB [ 488.044222][T11110] Total swap = 124996kB [ 488.044230][T11110] 2097051 pages RAM [ 488.044237][T11110] 0 pages HighMem/MovableOnly [ 488.044244][T11110] 424834 pages reserved [ 488.044251][T11110] 0 pages cma reserved [ 488.745914][ T6214] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 489.039105][ T6214] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.039142][ T6214] usb 4-1: config 0 interface 0 has no altsetting 0 [ 489.039175][ T6214] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 489.039199][ T6214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.093907][ T6214] usb 4-1: config 0 descriptor?? [ 489.312255][T11105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.312927][T11105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.332059][ T6214] usbhid 4-1:0.0: can't add hid device: -71 [ 489.332187][ T6214] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 489.366662][ T6214] usb 4-1: USB disconnect, device number 76 [ 489.422761][T11120] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.775680][ T199] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 489.824325][T11141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.824962][T11141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.975774][ T199] usb 1-1: Using ep0 maxpacket: 32 [ 489.978811][ T199] usb 1-1: unable to get BOS descriptor or descriptor too short [ 489.980068][ T199] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 489.982479][ T199] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 489.982509][ T199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.982529][ T199] usb 1-1: Product: syz [ 489.982543][ T199] usb 1-1: Manufacturer: syz [ 489.982557][ T199] usb 1-1: SerialNumber: syz [ 490.115657][ T6214] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 490.265649][ T6214] usb 3-1: Using ep0 maxpacket: 8 [ 490.270361][ T6214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 490.270404][ T6214] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 490.270631][ T6214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.328375][ T6214] usb 3-1: config 0 descriptor?? [ 490.579321][ T199] usb 1-1: Cannot retrieve CPort count: -110 [ 490.579363][ T199] usb 1-1: Cannot retrieve CPort count: -110 [ 490.579400][ T199] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 490.698995][ T6214] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 490.740706][T11143] FAULT_INJECTION: forcing a failure. [ 490.740706][T11143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.740738][T11143] CPU: 0 UID: 0 PID: 11143 Comm: syz.2.1769 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 490.740758][T11143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.740769][T11143] Call Trace: [ 490.740777][T11143] [ 490.740786][T11143] dump_stack_lvl+0xe8/0x150 [ 490.740820][T11143] should_fail_ex+0x467/0x600 [ 490.740853][T11143] strncpy_from_user+0x36/0x2c0 [ 490.740882][T11143] do_getname+0x77/0x250 [ 490.740904][T11143] do_sys_openat2+0xcc/0x200 [ 490.740928][T11143] ? __pfx_do_sys_openat2+0x10/0x10 [ 490.740949][T11143] ? ksys_write+0x248/0x270 [ 490.740973][T11143] ? __pfx_ksys_write+0x10/0x10 [ 490.740999][T11143] __x64_sys_openat+0x138/0x170 [ 490.741021][T11143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.741039][T11143] do_syscall_64+0x174/0x580 [ 490.741063][T11143] ? trace_irq_disable+0x3b/0x140 [ 490.741083][T11143] ? clear_bhb_loop+0x40/0x90 [ 490.741105][T11143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.741123][T11143] RIP: 0033:0x7f0047bbe90e [ 490.741141][T11143] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 490.741156][T11143] RSP: 002b:00007f0045e55b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 490.741175][T11143] RAX: ffffffffffffffda RBX: 00007f0045e566c0 RCX: 00007f0047bbe90e [ 490.741188][T11143] RDX: 0000000000000002 RSI: 00007f0045e55c00 RDI: ffffffffffffff9c [ 490.741200][T11143] RBP: 00007f0045e56090 R08: 0000000000000000 R09: 0000000000000000 [ 490.741210][T11143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.741218][T11143] R13: 00007f0047e86038 R14: 00007f0047e85fa0 R15: 00007fffa5243d88 [ 490.741243][T11143] [ 490.946398][ T6214] usb 3-1: USB disconnect, device number 69 [ 491.288320][T11162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.291082][T11162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.475816][T10413] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 491.543984][T11168] FAULT_INJECTION: forcing a failure. [ 491.543984][T11168] name failslab, interval 1, probability 0, space 0, times 0 [ 491.544020][T11168] CPU: 0 UID: 0 PID: 11168 Comm: syz.2.1776 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 491.544043][T11168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.544054][T11168] Call Trace: [ 491.544063][T11168] [ 491.544072][T11168] dump_stack_lvl+0xe8/0x150 [ 491.544106][T11168] should_fail_ex+0x467/0x600 [ 491.544142][T11168] should_failslab+0xa8/0x100 [ 491.544178][T11168] __kmalloc_noprof+0xfe/0x780 [ 491.544201][T11168] ? tomoyo_encode+0x2ad/0x570 [ 491.544225][T11168] ? tomoyo_encode+0x2ad/0x570 [ 491.544256][T11168] tomoyo_encode+0x2ad/0x570 [ 491.544287][T11168] tomoyo_realpath_from_path+0x5fa/0x640 [ 491.544323][T11168] ? tomoyo_path_number_perm+0x219/0x5f0 [ 491.544346][T11168] tomoyo_path_number_perm+0x246/0x5f0 [ 491.544371][T11168] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 491.544392][T11168] ? __lock_acquire+0x683/0x2ce0 [ 491.544428][T11168] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 491.544453][T11168] ? hook_file_ioctl+0x1f3/0x600 [ 491.544472][T11168] ? lockdep_hardirqs_on+0x7a/0x110 [ 491.544515][T11168] ? __fget_files+0x2a/0x420 [ 491.544540][T11168] ? __fget_files+0x2a/0x420 [ 491.544559][T11168] ? __fget_files+0x3a8/0x420 [ 491.544579][T11168] ? __fget_files+0x2a/0x420 [ 491.544604][T11168] security_file_ioctl+0xc3/0x2a0 [ 491.544633][T11168] __se_sys_ioctl+0x47/0x170 [ 491.544658][T11168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.544688][T11168] do_syscall_64+0x174/0x580 [ 491.544713][T11168] ? trace_irq_disable+0x3b/0x140 [ 491.544734][T11168] ? clear_bhb_loop+0x40/0x90 [ 491.544759][T11168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.544779][T11168] RIP: 0033:0x7f0047bfe0d9 [ 491.544797][T11168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.544814][T11168] RSP: 002b:00007f0045e56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.544836][T11168] RAX: ffffffffffffffda RBX: 00007f0047e85fa0 RCX: 00007f0047bfe0d9 [ 491.544851][T11168] RDX: 0000000000000000 RSI: 00000000800448d5 RDI: 0000000000000004 [ 491.544906][T11168] RBP: 00007f0045e56090 R08: 0000000000000000 R09: 0000000000000000 [ 491.544919][T11168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.544931][T11168] R13: 00007f0047e86038 R14: 00007f0047e85fa0 R15: 00007fffa5243d88 [ 491.544963][T11168] [ 491.561986][T11168] ERROR: Out of memory at tomoyo_realpath_from_path. [ 491.758505][T10413] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.758559][T10413] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 491.758585][T10413] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.758638][T10413] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 491.758662][T10413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.769578][T10413] usb 4-1: config 0 descriptor?? [ 492.057437][T10413] usb 5-1: USB disconnect, device number 55 [ 492.092942][ T5794] usb 4-1: USB disconnect, device number 77 [ 492.410847][T11183] tun0: tun_chr_ioctl cmd 2148553947 [ 492.411335][T11183] binder: Unknown parameter 'uid>00000000000000060928' [ 492.745688][ T6214] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 492.898430][ T6214] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.898550][ T6214] usb 5-1: config 0 interface 0 has no altsetting 0 [ 492.898585][ T6214] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 492.898609][ T6214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.905229][ T6214] usb 5-1: config 0 descriptor?? [ 493.118619][T11183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.138562][T11183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.170140][ T6214] usbhid 5-1:0.0: can't add hid device: -71 [ 493.170274][ T6214] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 493.194698][ T6214] usb 5-1: USB disconnect, device number 56 [ 493.721796][ T5607] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 493.866024][ T5607] usb 4-1: Using ep0 maxpacket: 16 [ 493.877285][ T5607] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 493.877317][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.877338][ T5607] usb 4-1: Product: syz [ 493.877352][ T5607] usb 4-1: Manufacturer: syz [ 493.877367][ T5607] usb 4-1: SerialNumber: syz [ 494.115660][ T6214] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 494.135191][ T5607] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 494.142233][ T5607] usb 4-1: USB disconnect, device number 78 [ 494.266601][ T6214] usb 2-1: too many configurations: 139, using maximum allowed: 8 [ 494.268212][ T6214] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.269502][ T6214] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.270928][ T6214] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.272002][ T6214] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.273759][ T6214] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.335655][ T6214] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.367372][ T6214] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.368531][ T6214] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.405803][ T6214] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 494.405844][ T6214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.405866][ T6214] usb 2-1: Product: syz [ 494.405879][ T6214] usb 2-1: Manufacturer: syz [ 494.405894][ T6214] usb 2-1: SerialNumber: syz [ 494.582279][T11217] FAULT_INJECTION: forcing a failure. [ 494.582279][T11217] name failslab, interval 1, probability 0, space 0, times 0 [ 494.582312][T11217] CPU: 0 UID: 0 PID: 11217 Comm: syz.4.1794 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 494.582343][T11217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 494.582356][T11217] Call Trace: [ 494.582364][T11217] [ 494.582374][T11217] dump_stack_lvl+0xe8/0x150 [ 494.582410][T11217] should_fail_ex+0x467/0x600 [ 494.582446][T11217] should_failslab+0xa8/0x100 [ 494.582472][T11217] __kmalloc_cache_node_noprof+0xa9/0x6a0 [ 494.582496][T11217] ? __get_vm_area_node+0x136/0x300 [ 494.582524][T11217] ? __get_vm_area_node+0x136/0x300 [ 494.582558][T11217] __get_vm_area_node+0x136/0x300 [ 494.582592][T11217] __vmalloc_node_range_noprof+0x358/0x1730 [ 494.582614][T11217] ? kernel_read_file+0x3f3/0x680 [ 494.582657][T11217] ? __kernel_text_address+0xd/0x30 [ 494.582678][T11217] ? unwind_get_return_address+0x4d/0x90 [ 494.582719][T11217] ? do_raw_spin_lock+0x12b/0x2f0 [ 494.582748][T11217] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 494.582769][T11217] ? __pfx_ima_read_file+0x10/0x10 [ 494.582803][T11217] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 494.582830][T11217] ? kernel_read_file+0x3f3/0x680 [ 494.582858][T11217] vmalloc_noprof+0xb2/0xe0 [ 494.582877][T11217] ? kernel_read_file+0x3f3/0x680 [ 494.582906][T11217] kernel_read_file+0x3f3/0x680 [ 494.582944][T11217] ? __pfx_kernel_read_file+0x10/0x10 [ 494.582969][T11217] ? rt_spin_unlock+0x157/0x200 [ 494.583000][T11217] __se_sys_finit_module+0x433/0x730 [ 494.583099][T11217] ? __pfx___se_sys_finit_module+0x10/0x10 [ 494.583131][T11217] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 494.583169][T11217] ? __pfx_ksys_write+0x10/0x10 [ 494.583202][T11217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.583224][T11217] do_syscall_64+0x174/0x580 [ 494.583250][T11217] ? trace_irq_disable+0x3b/0x140 [ 494.583270][T11217] ? clear_bhb_loop+0x40/0x90 [ 494.583294][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.583314][T11217] RIP: 0033:0x7f05a92be0d9 [ 494.583338][T11217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.583355][T11217] RSP: 002b:00007f05a7516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 494.583377][T11217] RAX: ffffffffffffffda RBX: 00007f05a9545fa0 RCX: 00007f05a92be0d9 [ 494.583392][T11217] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 [ 494.583405][T11217] RBP: 00007f05a7516090 R08: 0000000000000000 R09: 0000000000000000 [ 494.583418][T11217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.583430][T11217] R13: 00007f05a9546038 R14: 00007f05a9545fa0 R15: 00007ffc050ec138 [ 494.583460][T11217] [ 494.973734][T11236] netlink: 'syz.0.1802': attribute type 4 has an invalid length. [ 494.990997][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1801'. [ 494.991058][T11235] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 495.073431][T11240] FAULT_INJECTION: forcing a failure. [ 495.073431][T11240] name failslab, interval 1, probability 0, space 0, times 0 [ 495.073480][T11240] CPU: 0 UID: 0 PID: 11240 Comm: syz.4.1805 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 495.073503][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.073516][T11240] Call Trace: [ 495.073525][T11240] [ 495.073534][T11240] dump_stack_lvl+0xe8/0x150 [ 495.073569][T11240] should_fail_ex+0x467/0x600 [ 495.073600][T11240] should_failslab+0xa8/0x100 [ 495.073626][T11240] __kmalloc_node_track_caller_noprof+0x102/0x7c0 [ 495.073651][T11240] ? nfs_get_tree+0xe45/0x1650 [ 495.073710][T11240] ? nfs_get_tree+0xe45/0x1650 [ 495.073740][T11240] kmemdup_nul+0x36/0xf0 [ 495.073770][T11240] nfs_get_tree+0xe45/0x1650 [ 495.073800][T11240] vfs_get_tree+0x92/0x2a0 [ 495.073827][T11240] vfs_cmd_create+0xa2/0x200 [ 495.073856][T11240] __se_sys_fsconfig+0x6bf/0x810 [ 495.073886][T11240] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 495.073909][T11240] ? ksys_write+0x248/0x270 [ 495.073934][T11240] ? __pfx_ksys_write+0x10/0x10 [ 495.073961][T11240] ? __x64_sys_fsconfig+0x20/0xc0 [ 495.073986][T11240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.074009][T11240] do_syscall_64+0x174/0x580 [ 495.074035][T11240] ? trace_irq_disable+0x3b/0x140 [ 495.074056][T11240] ? clear_bhb_loop+0x40/0x90 [ 495.074078][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.074096][T11240] RIP: 0033:0x7f05a92be0d9 [ 495.074112][T11240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.074126][T11240] RSP: 002b:00007f05a7516028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 495.074146][T11240] RAX: ffffffffffffffda RBX: 00007f05a9545fa0 RCX: 00007f05a92be0d9 [ 495.074158][T11240] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 495.074168][T11240] RBP: 00007f05a7516090 R08: 0000000000000000 R09: 0000000000000000 [ 495.074179][T11240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.074189][T11240] R13: 00007f05a9546038 R14: 00007f05a9545fa0 R15: 00007ffc050ec138 [ 495.074216][T11240] [ 495.217132][T11242] tun0: tun_chr_ioctl cmd 2148553947 [ 495.219154][T11242] binder: Unknown parameter 'uid>00000000000000060928' [ 495.249909][T11242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.250555][T11242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.285076][T11242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.308150][T11242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.376616][T11251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.377168][T11251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.473831][T10413] usb 2-1: USB disconnect, device number 57 [ 495.715701][ T5607] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 495.867817][ T5607] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.867870][ T5607] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 495.867896][ T5607] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.867937][ T5607] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 495.867960][ T5607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.877555][ T5607] usb 5-1: config 0 descriptor?? [ 495.895649][T10413] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 496.048963][T10413] usb 2-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 496.048995][T10413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.161185][ T5607] usb 5-1: USB disconnect, device number 57 [ 496.413751][T10413] usb 2-1: 1:1: cannot set freq 48000 to ep 0x81 [ 496.508842][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1822'. [ 496.508898][T11287] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 496.708074][T11294] netlink: 'syz.1.1825': attribute type 4 has an invalid length. [ 496.940406][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 496.940439][ T37] audit: type=1326 audit(1785953892.940:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.1.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 496.940498][ T37] audit: type=1326 audit(1785953892.940:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.1.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 496.943452][ T37] audit: type=1326 audit(1785953892.940:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.1.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 496.943583][ T37] audit: type=1326 audit(1785953892.940:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.1.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 496.943984][ T37] audit: type=1326 audit(1785953892.940:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.1.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 496.944108][ T37] audit: type=1326 audit(1785953892.940:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.1.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 496.944240][ T37] audit: type=1326 audit(1785953892.940:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.1.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 496.949814][ T37] audit: type=1326 audit(1785953892.950:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.1.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63290ce90e code=0x7ffc0000 [ 496.949868][ T37] audit: type=1326 audit(1785953892.950:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.1.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f632910dd6b code=0x7ffc0000 [ 496.956733][ T37] audit: type=1326 audit(1785953892.950:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.1.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f632910dd6b code=0x7ffc0000 [ 497.091575][T11310] binder: Unknown parameter 'uid>00000000000000060928' [ 497.148767][T11307] tun0: tun_chr_ioctl cmd 2148553947 [ 497.355766][ T36] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 497.389100][ T5607] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 497.521770][ T36] usb 4-1: unable to get BOS descriptor or descriptor too short [ 497.523076][ T36] usb 4-1: config 4 has an invalid interface number: 48 but max is 0 [ 497.523104][ T36] usb 4-1: config 4 has no interface number 0 [ 497.523152][ T36] usb 4-1: config 4 interface 48 has no altsetting 0 [ 497.525297][ T36] usb 4-1: New USB device found, idVendor=2100, idProduct=9e56, bcdDevice= 0.18 [ 497.525324][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.525335][ T36] usb 4-1: Product: syz [ 497.525348][ T36] usb 4-1: Manufacturer: syz [ 497.525356][ T36] usb 4-1: SerialNumber: syz [ 497.578689][ T5607] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.578726][ T5607] usb 5-1: config 0 interface 0 has no altsetting 0 [ 497.578761][ T5607] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 497.578785][ T5607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.717998][ T5607] usb 5-1: config 0 descriptor?? [ 497.881144][ T36] ftdi_sio 4-1:4.48: FTDI USB Serial Device converter detected [ 497.946340][ T36] usb 4-1: Detected SIO [ 498.009158][T11328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.012272][T11328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.022075][ T36] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 498.208055][ T36] usb 4-1: USB disconnect, device number 79 [ 498.335048][T11302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.337475][T11302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.357848][T11328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.360909][ T36] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 498.364027][ T36] ftdi_sio 4-1:4.48: device disconnected [ 498.364664][ T5607] usbhid 5-1:0.0: can't add hid device: -71 [ 498.364789][ T5607] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 498.367889][T11328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.415144][ T5607] usb 5-1: USB disconnect, device number 58 [ 499.171064][ T199] usb 1-1: USB disconnect, device number 69 [ 499.200822][T10413] usb 2-1: USB disconnect, device number 58 [ 499.594101][T11363] FAULT_INJECTION: forcing a failure. [ 499.594101][T11363] name failslab, interval 1, probability 0, space 0, times 0 [ 499.594132][T11363] CPU: 0 UID: 0 PID: 11363 Comm: syz.4.1855 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 499.594149][T11363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.594159][T11363] Call Trace: [ 499.594166][T11363] [ 499.594174][T11363] dump_stack_lvl+0xe8/0x150 [ 499.594203][T11363] should_fail_ex+0x467/0x600 [ 499.594230][T11363] should_failslab+0xa8/0x100 [ 499.594250][T11363] kmem_cache_alloc_node_noprof+0xae/0x670 [ 499.594268][T11363] ? __alloc_skb+0x1d7/0x7a0 [ 499.594285][T11363] ? __alloc_skb+0x1d7/0x7a0 [ 499.594328][T11363] __alloc_skb+0x1d7/0x7a0 [ 499.594348][T11363] netlink_sendmsg+0x5d4/0xb40 [ 499.594375][T11363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.594395][T11363] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 499.594417][T11363] ? __kernel_text_address+0xd/0x30 [ 499.594433][T11363] ? unwind_get_return_address+0x4d/0x90 [ 499.594460][T11363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.594478][T11363] sock_sendmsg_nosec+0x13a/0x180 [ 499.594496][T11363] ____sys_sendmsg+0x565/0x870 [ 499.594514][T11363] ? __might_fault+0xaf/0x130 [ 499.594535][T11363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.594559][T11363] ? import_iovec+0x73/0xa0 [ 499.594579][T11363] ___sys_sendmsg+0x2a5/0x360 [ 499.594596][T11363] ? __lock_acquire+0x683/0x2ce0 [ 499.594615][T11363] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.594658][T11363] ? __fget_files+0x2a/0x420 [ 499.594672][T11363] ? __fget_files+0x3a8/0x420 [ 499.594695][T11363] __x64_sys_sendmsg+0x1b7/0x290 [ 499.594715][T11363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.594746][T11363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.594761][T11363] do_syscall_64+0x174/0x580 [ 499.594781][T11363] ? trace_irq_disable+0x3b/0x140 [ 499.594796][T11363] ? clear_bhb_loop+0x40/0x90 [ 499.594814][T11363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.594828][T11363] RIP: 0033:0x7f05a92be0d9 [ 499.594843][T11363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.594855][T11363] RSP: 002b:00007f05a7516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.594872][T11363] RAX: ffffffffffffffda RBX: 00007f05a9545fa0 RCX: 00007f05a92be0d9 [ 499.594883][T11363] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 499.594892][T11363] RBP: 00007f05a7516090 R08: 0000000000000000 R09: 0000000000000000 [ 499.594901][T11363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.594909][T11363] R13: 00007f05a9546038 R14: 00007f05a9545fa0 R15: 00007ffc050ec138 [ 499.594932][T11363] [ 499.906296][T10413] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 499.909820][T11371] fuse: Bad value for 'fd' [ 500.126997][T11376] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 500.363281][T11395] FAULT_INJECTION: forcing a failure. [ 500.363281][T11395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.363315][T11395] CPU: 1 UID: 0 PID: 11395 Comm: syz.2.1867 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 500.363338][T11395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.363351][T11395] Call Trace: [ 500.363360][T11395] [ 500.363368][T11395] dump_stack_lvl+0xe8/0x150 [ 500.363414][T11395] should_fail_ex+0x467/0x600 [ 500.363452][T11395] _copy_to_user+0x31/0xb0 [ 500.363480][T11395] simple_read_from_buffer+0xe1/0x170 [ 500.363509][T11395] proc_fail_nth_read+0x1be/0x230 [ 500.363532][T11395] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 500.363563][T11395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.363588][T11395] ? rw_verify_area+0x250/0x4d0 [ 500.363616][T11395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.363637][T11395] vfs_read+0x219/0xa90 [ 500.363670][T11395] ? __pfx_vfs_read+0x10/0x10 [ 500.363698][T11395] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 500.363724][T11395] ? lockdep_hardirqs_on+0x7a/0x110 [ 500.363751][T11395] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 500.363778][T11395] ? mutex_lock_nested+0x152/0x1d0 [ 500.363797][T11395] ? fdget_pos+0x252/0x320 [ 500.363828][T11395] ksys_read+0x156/0x270 [ 500.363855][T11395] ? __pfx_ksys_read+0x10/0x10 [ 500.363887][T11395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.363910][T11395] do_syscall_64+0x174/0x580 [ 500.363936][T11395] ? trace_irq_disable+0x3b/0x140 [ 500.363958][T11395] ? clear_bhb_loop+0x40/0x90 [ 500.363982][T11395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.364002][T11395] RIP: 0033:0x7f0047bbe90e [ 500.364021][T11395] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 500.364037][T11395] RSP: 002b:00007f0045e34fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 500.364059][T11395] RAX: ffffffffffffffda RBX: 00007f0045e356c0 RCX: 00007f0047bbe90e [ 500.364074][T11395] RDX: 000000000000000f RSI: 00007f0045e350a0 RDI: 0000000000000005 [ 500.364089][T11395] RBP: 00007f0045e35090 R08: 0000000000000000 R09: 0000000000000000 [ 500.364101][T11395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.364113][T11395] R13: 00007f0047e86128 R14: 00007f0047e86090 R15: 00007fffa5243d88 [ 500.364145][T11395] [ 500.625624][T11399] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1866'. [ 501.445767][T10413] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 501.604336][T10413] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 501.604361][T10413] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 501.604372][T10413] usb 2-1: Product: syz [ 501.604380][T10413] usb 2-1: SerialNumber: syz [ 501.618425][T10413] usb 2-1: config 0 descriptor?? [ 503.138631][T10413] usb 2-1: USB disconnect, device number 60 [ 503.803510][T11480] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 503.814827][T11487] FAULT_INJECTION: forcing a failure. [ 503.814827][T11487] name failslab, interval 1, probability 0, space 0, times 0 [ 503.814860][T11487] CPU: 1 UID: 0 PID: 11487 Comm: syz.2.1903 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 503.814881][T11487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 503.814890][T11487] Call Trace: [ 503.814898][T11487] [ 503.814906][T11487] dump_stack_lvl+0xe8/0x150 [ 503.814938][T11487] should_fail_ex+0x467/0x600 [ 503.814970][T11487] should_failslab+0xa8/0x100 [ 503.814994][T11487] kmem_cache_alloc_node_noprof+0xae/0x670 [ 503.815014][T11487] ? __alloc_skb+0x1d7/0x7a0 [ 503.815036][T11487] ? __alloc_skb+0x1d7/0x7a0 [ 503.815060][T11487] __alloc_skb+0x1d7/0x7a0 [ 503.815086][T11487] netlink_sendmsg+0x5d4/0xb40 [ 503.815122][T11487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.815149][T11487] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 503.815177][T11487] ? __kernel_text_address+0xd/0x30 [ 503.815198][T11487] ? unwind_get_return_address+0x4d/0x90 [ 503.815223][T11487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.815247][T11487] sock_sendmsg_nosec+0x13a/0x180 [ 503.815271][T11487] ____sys_sendmsg+0x565/0x870 [ 503.815296][T11487] ? __might_fault+0xaf/0x130 [ 503.815323][T11487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.815358][T11487] ? import_iovec+0x73/0xa0 [ 503.815384][T11487] ___sys_sendmsg+0x2a5/0x360 [ 503.815409][T11487] ? __lock_acquire+0x683/0x2ce0 [ 503.815434][T11487] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.815489][T11487] ? __fget_files+0x2a/0x420 [ 503.815510][T11487] ? __fget_files+0x3a8/0x420 [ 503.815540][T11487] __x64_sys_sendmsg+0x1b7/0x290 [ 503.815576][T11487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.815619][T11487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.815640][T11487] do_syscall_64+0x174/0x580 [ 503.815667][T11487] ? trace_irq_disable+0x3b/0x140 [ 503.815686][T11487] ? clear_bhb_loop+0x40/0x90 [ 503.815710][T11487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.815730][T11487] RIP: 0033:0x7f0047bfe0d9 [ 503.815748][T11487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.815764][T11487] RSP: 002b:00007f0045e56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.815785][T11487] RAX: ffffffffffffffda RBX: 00007f0047e85fa0 RCX: 00007f0047bfe0d9 [ 503.815800][T11487] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 503.815813][T11487] RBP: 00007f0045e56090 R08: 0000000000000000 R09: 0000000000000000 [ 503.815826][T11487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.815838][T11487] R13: 00007f0047e86038 R14: 00007f0047e85fa0 R15: 00007fffa5243d88 [ 503.815868][T11487] [ 503.866708][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1901'. [ 504.006346][T11490] FAULT_INJECTION: forcing a failure. [ 504.006346][T11490] name failslab, interval 1, probability 0, space 0, times 0 [ 504.006382][T11490] CPU: 1 UID: 0 PID: 11490 Comm: syz.2.1904 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 504.006414][T11490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.006427][T11490] Call Trace: [ 504.006435][T11490] [ 504.006443][T11490] dump_stack_lvl+0xe8/0x150 [ 504.006479][T11490] should_fail_ex+0x467/0x600 [ 504.006514][T11490] should_failslab+0xa8/0x100 [ 504.006540][T11490] kmem_cache_alloc_node_noprof+0xae/0x670 [ 504.006563][T11490] ? __alloc_skb+0x1d7/0x7a0 [ 504.006585][T11490] ? __alloc_skb+0x1d7/0x7a0 [ 504.006612][T11490] __alloc_skb+0x1d7/0x7a0 [ 504.006637][T11490] netlink_sendmsg+0x5d4/0xb40 [ 504.006671][T11490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.006698][T11490] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 504.006727][T11490] ? __kernel_text_address+0xd/0x30 [ 504.006746][T11490] ? unwind_get_return_address+0x4d/0x90 [ 504.006769][T11490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.006793][T11490] sock_sendmsg_nosec+0x13a/0x180 [ 504.006815][T11490] ____sys_sendmsg+0x565/0x870 [ 504.006840][T11490] ? __might_fault+0xaf/0x130 [ 504.006866][T11490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.006898][T11490] ? import_iovec+0x73/0xa0 [ 504.006924][T11490] ___sys_sendmsg+0x2a5/0x360 [ 504.006947][T11490] ? __lock_acquire+0x683/0x2ce0 [ 504.006971][T11490] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.007026][T11490] ? __fget_files+0x2a/0x420 [ 504.007049][T11490] ? __fget_files+0x3a8/0x420 [ 504.007077][T11490] __x64_sys_sendmsg+0x1b7/0x290 [ 504.007104][T11490] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.007145][T11490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.007165][T11490] do_syscall_64+0x174/0x580 [ 504.007190][T11490] ? trace_irq_disable+0x3b/0x140 [ 504.007210][T11490] ? clear_bhb_loop+0x40/0x90 [ 504.007233][T11490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.007252][T11490] RIP: 0033:0x7f0047bfe0d9 [ 504.007269][T11490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.007284][T11490] RSP: 002b:00007f0045e56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.007305][T11490] RAX: ffffffffffffffda RBX: 00007f0047e85fa0 RCX: 00007f0047bfe0d9 [ 504.007320][T11490] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 504.007333][T11490] RBP: 00007f0045e56090 R08: 0000000000000000 R09: 0000000000000000 [ 504.007346][T11490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.007357][T11490] R13: 00007f0047e86038 R14: 00007f0047e85fa0 R15: 00007fffa5243d88 [ 504.007386][T11490] [ 504.124435][T10413] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 504.279874][T10413] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 504.279907][T10413] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 504.279928][T10413] usb 1-1: Product: syz [ 504.279943][T10413] usb 1-1: SerialNumber: syz [ 504.324283][T10413] usb 1-1: config 0 descriptor?? [ 504.705616][ T5715] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 504.869027][ T5715] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 183, using maximum allowed: 30 [ 504.869075][ T5715] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 183 [ 504.869117][ T5715] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 504.869139][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.926439][ T5715] usb 5-1: config 0 descriptor?? [ 504.940865][ T5715] cp210x 5-1:0.0: cp210x converter detected [ 504.975666][ T6214] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 505.134681][ T6214] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 505.134712][ T6214] usb 4-1: config 220 has 0 interfaces, different from the descriptor's value: 3 [ 505.185304][ T6214] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 505.185397][ T6214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.185420][ T6214] usb 4-1: Product: syz [ 505.185435][ T6214] usb 4-1: Manufacturer: syz [ 505.185450][ T6214] usb 4-1: SerialNumber: syz [ 505.360053][ T5715] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 505.740000][ T5715] usb 5-1: cp210x converter now attached to ttyUSB0 [ 505.822739][ T36] usb 5-1: USB disconnect, device number 59 [ 506.107730][T11504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.116351][T11504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.304873][ T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 506.784264][ T6214] usb 4-1: USB disconnect, device number 80 [ 506.911171][ T36] cp210x 5-1:0.0: device disconnected [ 507.011668][T10413] usb 1-1: USB disconnect, device number 70 [ 507.083431][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1928'. [ 507.265673][ T36] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 507.422729][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.422783][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 507.422800][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 507.422824][ T36] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 507.422837][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.454707][ T36] usb 5-1: config 0 descriptor?? [ 507.515744][T10413] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 507.665589][T10413] usb 1-1: Using ep0 maxpacket: 8 [ 507.670187][T10413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 507.670226][T10413] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 507.670240][T10413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.681481][T10413] usb 1-1: config 0 descriptor?? [ 507.716548][ T6214] usb 5-1: USB disconnect, device number 60 [ 507.969427][T10413] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 508.277408][T10413] usb 1-1: USB disconnect, device number 71 [ 508.325705][ T6214] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 508.355662][ T5845] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 508.430573][T11579] FAULT_INJECTION: forcing a failure. [ 508.430573][T11579] name failslab, interval 1, probability 0, space 0, times 0 [ 508.430596][T11579] CPU: 1 UID: 0 PID: 11579 Comm: syz.4.1941 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 508.430609][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.430616][T11579] Call Trace: [ 508.430621][T11579] [ 508.430627][T11579] dump_stack_lvl+0xe8/0x150 [ 508.430649][T11579] should_fail_ex+0x467/0x600 [ 508.430670][T11579] should_failslab+0xa8/0x100 [ 508.430685][T11579] kmem_cache_alloc_node_noprof+0xae/0x670 [ 508.430697][T11579] ? __alloc_skb+0x1d7/0x7a0 [ 508.430711][T11579] ? __alloc_skb+0x1d7/0x7a0 [ 508.430725][T11579] __alloc_skb+0x1d7/0x7a0 [ 508.430739][T11579] netlink_sendmsg+0x5d4/0xb40 [ 508.430759][T11579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.430774][T11579] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 508.430790][T11579] ? __kernel_text_address+0xd/0x30 [ 508.430801][T11579] ? unwind_get_return_address+0x4d/0x90 [ 508.430816][T11579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.430829][T11579] sock_sendmsg_nosec+0x13a/0x180 [ 508.430842][T11579] ____sys_sendmsg+0x565/0x870 [ 508.430855][T11579] ? __might_fault+0xaf/0x130 [ 508.430871][T11579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.430888][T11579] ? import_iovec+0x73/0xa0 [ 508.430904][T11579] ___sys_sendmsg+0x2a5/0x360 [ 508.430917][T11579] ? __lock_acquire+0x683/0x2ce0 [ 508.430932][T11579] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.430962][T11579] ? __fget_files+0x2a/0x420 [ 508.430973][T11579] ? __fget_files+0x3a8/0x420 [ 508.430989][T11579] __x64_sys_sendmsg+0x1b7/0x290 [ 508.431004][T11579] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 508.431026][T11579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.431038][T11579] do_syscall_64+0x174/0x580 [ 508.431053][T11579] ? trace_irq_disable+0x3b/0x140 [ 508.431071][T11579] ? clear_bhb_loop+0x40/0x90 [ 508.431084][T11579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.431095][T11579] RIP: 0033:0x7f05a92be0d9 [ 508.431106][T11579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.431115][T11579] RSP: 002b:00007f05a7516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.431127][T11579] RAX: ffffffffffffffda RBX: 00007f05a9545fa0 RCX: 00007f05a92be0d9 [ 508.431135][T11579] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 508.431143][T11579] RBP: 00007f05a7516090 R08: 0000000000000000 R09: 0000000000000000 [ 508.431149][T11579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.431156][T11579] R13: 00007f05a9546038 R14: 00007f05a9545fa0 R15: 00007ffc050ec138 [ 508.431173][T11579] [ 508.579072][ T5845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.579154][ T5845] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 508.579180][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.747481][ T6214] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 508.747511][ T6214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 508.747532][ T6214] usb 2-1: Product: syz [ 508.747545][ T6214] usb 2-1: Manufacturer: syz [ 508.753301][ T5845] usb 4-1: config 0 descriptor?? [ 508.802096][ T5845] pwc: Askey VC010 type 2 USB webcam detected. [ 508.847976][ T6214] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input14 [ 509.239220][T11595] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1949'. [ 509.325730][ T5845] pwc: send_video_command error -71 [ 509.325763][ T5845] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 509.325989][ T5845] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 509.380435][ T5845] usb 4-1: USB disconnect, device number 81 [ 509.806107][T11602] netlink: 'syz.4.1950': attribute type 4 has an invalid length. [ 510.173087][T11622] FAULT_INJECTION: forcing a failure. [ 510.173087][T11622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.173118][T11622] CPU: 1 UID: 0 PID: 11622 Comm: syz.4.1958 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 510.173135][T11622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.173145][T11622] Call Trace: [ 510.173152][T11622] [ 510.173160][T11622] dump_stack_lvl+0xe8/0x150 [ 510.173190][T11622] should_fail_ex+0x467/0x600 [ 510.173218][T11622] _copy_from_user+0x2d/0xb0 [ 510.173263][T11622] __copy_msghdr+0x390/0x590 [ 510.173288][T11622] ___sys_sendmsg+0x213/0x360 [ 510.173306][T11622] ? __lock_acquire+0x683/0x2ce0 [ 510.173326][T11622] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.173369][T11622] ? __fget_files+0x2a/0x420 [ 510.173386][T11622] ? __fget_files+0x3a8/0x420 [ 510.173409][T11622] __x64_sys_sendmsg+0x1b7/0x290 [ 510.173432][T11622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.173464][T11622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.173482][T11622] do_syscall_64+0x174/0x580 [ 510.173504][T11622] ? trace_irq_disable+0x3b/0x140 [ 510.173519][T11622] ? clear_bhb_loop+0x40/0x90 [ 510.173537][T11622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.173550][T11622] RIP: 0033:0x7f05a92be0d9 [ 510.173565][T11622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.173577][T11622] RSP: 002b:00007f05a7516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.173593][T11622] RAX: ffffffffffffffda RBX: 00007f05a9545fa0 RCX: 00007f05a92be0d9 [ 510.173603][T11622] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000004 [ 510.173612][T11622] RBP: 00007f05a7516090 R08: 0000000000000000 R09: 0000000000000000 [ 510.173621][T11622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.173630][T11622] R13: 00007f05a9546038 R14: 00007f05a9545fa0 R15: 00007ffc050ec138 [ 510.173652][T11622] [ 510.328915][T11625] netlink: 'syz.2.1959': attribute type 21 has an invalid length. [ 510.560643][T11631] FAULT_INJECTION: forcing a failure. [ 510.560643][T11631] name failslab, interval 1, probability 0, space 0, times 0 [ 510.560679][T11631] CPU: 1 UID: 0 PID: 11631 Comm: syz.4.1961 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 510.560700][T11631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.560711][T11631] Call Trace: [ 510.560718][T11631] [ 510.560727][T11631] dump_stack_lvl+0xe8/0x150 [ 510.560761][T11631] should_fail_ex+0x467/0x600 [ 510.560793][T11631] should_failslab+0xa8/0x100 [ 510.560816][T11631] kmem_cache_alloc_node_noprof+0xae/0x670 [ 510.560837][T11631] ? __alloc_skb+0x1d7/0x7a0 [ 510.560856][T11631] ? __alloc_skb+0x1d7/0x7a0 [ 510.560881][T11631] __alloc_skb+0x1d7/0x7a0 [ 510.560905][T11631] netlink_sendmsg+0x5d4/0xb40 [ 510.560949][T11631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.560976][T11631] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 510.561004][T11631] ? __kernel_text_address+0xd/0x30 [ 510.561027][T11631] ? unwind_get_return_address+0x4d/0x90 [ 510.561051][T11631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.561075][T11631] sock_sendmsg_nosec+0x13a/0x180 [ 510.561108][T11631] ____sys_sendmsg+0x565/0x870 [ 510.561132][T11631] ? __might_fault+0xaf/0x130 [ 510.561159][T11631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.561191][T11631] ? import_iovec+0x73/0xa0 [ 510.561217][T11631] ___sys_sendmsg+0x2a5/0x360 [ 510.561241][T11631] ? __lock_acquire+0x683/0x2ce0 [ 510.561272][T11631] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.561328][T11631] ? __fget_files+0x2a/0x420 [ 510.561348][T11631] ? __fget_files+0x3a8/0x420 [ 510.561382][ T6214] usb 2-1: USB disconnect, device number 61 [ 510.561385][T11631] __x64_sys_sendmsg+0x1b7/0x290 [ 510.561412][T11631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.561449][T11631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.561468][T11631] do_syscall_64+0x174/0x580 [ 510.561493][T11631] ? trace_irq_disable+0x3b/0x140 [ 510.561512][T11631] ? clear_bhb_loop+0x40/0x90 [ 510.561534][T11631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.561554][T11631] RIP: 0033:0x7f05a92be0d9 [ 510.561572][T11631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.561588][T11631] RSP: 002b:00007f05a7516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.561609][T11631] RAX: ffffffffffffffda RBX: 00007f05a9545fa0 RCX: 00007f05a92be0d9 [ 510.561622][T11631] RDX: 0000000000000080 RSI: 0000200000000840 RDI: 0000000000000003 [ 510.561634][T11631] RBP: 00007f05a7516090 R08: 0000000000000000 R09: 0000000000000000 [ 510.561646][T11631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.561658][T11631] R13: 00007f05a9546038 R14: 00007f05a9545fa0 R15: 00007ffc050ec138 [ 510.561688][T11631] [ 510.664816][T11633] netlink: 436 bytes leftover after parsing attributes in process `syz.0.1962'. [ 511.216313][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.216386][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.358356][ T5607] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 511.518910][ T5607] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 511.518939][ T5607] usb 1-1: config 220 has 0 interfaces, different from the descriptor's value: 3 [ 511.522300][ T5607] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 511.522331][ T5607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.522350][ T5607] usb 1-1: Product: syz [ 511.522364][ T5607] usb 1-1: Manufacturer: syz [ 511.522379][ T5607] usb 1-1: SerialNumber: syz [ 511.701091][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1973'. [ 511.701127][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1973'. [ 511.993467][T11640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.994022][T11640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.135724][ T6214] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 512.288314][ T6214] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 183, using maximum allowed: 30 [ 512.288361][ T6214] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 183 [ 512.288402][ T6214] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 512.288426][ T6214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.357466][ T6214] usb 4-1: config 0 descriptor?? [ 512.380352][ T6214] cp210x 4-1:0.0: cp210x converter detected [ 512.866664][ T6214] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 513.073026][ T5607] usb 1-1: USB disconnect, device number 72 [ 513.144396][ T6214] usb 4-1: cp210x converter now attached to ttyUSB0 [ 513.321634][ T5728] usb 4-1: USB disconnect, device number 82 [ 513.339338][ T5728] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 513.365680][T10413] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 513.545644][T10413] usb 3-1: Using ep0 maxpacket: 16 [ 513.549454][T10413] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 513.549511][T10413] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 513.549537][T10413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 513.549563][T10413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 513.549591][T10413] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.549633][T10413] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 513.549656][T10413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.571062][T10413] usb 3-1: config 0 descriptor?? [ 513.573379][T11684] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 513.592333][T10413] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 513.614893][ T5728] cp210x 4-1:0.0: device disconnected [ 513.929451][T10413] usb 3-1: USB disconnect, device number 70 [ 513.974110][ T4949] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 514.060647][T11695] dlm: Unknown command passed to DLM device : 133 [ 514.060647][T11695] [ 514.106429][T11697] FAULT_INJECTION: forcing a failure. [ 514.106429][T11697] name failslab, interval 1, probability 0, space 0, times 0 [ 514.106463][T11697] CPU: 1 UID: 0 PID: 11697 Comm: syz.3.1986 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 514.106484][T11697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.106494][T11697] Call Trace: [ 514.106501][T11697] [ 514.106509][T11697] dump_stack_lvl+0xe8/0x150 [ 514.106544][T11697] should_fail_ex+0x467/0x600 [ 514.106578][T11697] should_failslab+0xa8/0x100 [ 514.106603][T11697] kmem_cache_alloc_node_noprof+0xae/0x670 [ 514.106625][T11697] ? __alloc_skb+0x1d7/0x7a0 [ 514.106647][T11697] ? __alloc_skb+0x1d7/0x7a0 [ 514.106672][T11697] __alloc_skb+0x1d7/0x7a0 [ 514.106696][T11697] netlink_sendmsg+0x5d4/0xb40 [ 514.106731][T11697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.106758][T11697] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 514.106788][T11697] ? __kernel_text_address+0xd/0x30 [ 514.106809][T11697] ? unwind_get_return_address+0x4d/0x90 [ 514.106835][T11697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.106858][T11697] sock_sendmsg_nosec+0x13a/0x180 [ 514.106880][T11697] ____sys_sendmsg+0x565/0x870 [ 514.106905][T11697] ? __might_fault+0xaf/0x130 [ 514.106930][T11697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.106962][T11697] ? import_iovec+0x73/0xa0 [ 514.106993][T11697] ___sys_sendmsg+0x2a5/0x360 [ 514.107024][T11697] ? __lock_acquire+0x683/0x2ce0 [ 514.107047][T11697] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.107101][T11697] ? __fget_files+0x2a/0x420 [ 514.107120][T11697] ? __fget_files+0x3a8/0x420 [ 514.107148][T11697] __x64_sys_sendmsg+0x1b7/0x290 [ 514.107173][T11697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 514.107214][T11697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.107236][T11697] do_syscall_64+0x174/0x580 [ 514.107262][T11697] ? trace_irq_disable+0x3b/0x140 [ 514.107283][T11697] ? clear_bhb_loop+0x40/0x90 [ 514.107307][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.107326][T11697] RIP: 0033:0x7fd4cc65e0d9 [ 514.107345][T11697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.107361][T11697] RSP: 002b:00007fd4ca8b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.107382][T11697] RAX: ffffffffffffffda RBX: 00007fd4cc8e5fa0 RCX: 00007fd4cc65e0d9 [ 514.107397][T11697] RDX: 0000000000000080 RSI: 0000200000000840 RDI: 0000000000000003 [ 514.107409][T11697] RBP: 00007fd4ca8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 514.107421][T11697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.107433][T11697] R13: 00007fd4cc8e6038 R14: 00007fd4cc8e5fa0 R15: 00007ffc8d0b8c28 [ 514.107462][T11697] [ 514.921598][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 514.992164][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 514.992182][ T37] audit: type=1326 audit(1785953910.990:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11718 comm="syz.4.1996" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05a92be0d9 code=0x0 [ 515.044702][T11731] FAULT_INJECTION: forcing a failure. [ 515.044702][T11731] name failslab, interval 1, probability 0, space 0, times 0 [ 515.044732][T11731] CPU: 1 UID: 0 PID: 11731 Comm: syz.0.2001 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 515.044749][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.044758][T11731] Call Trace: [ 515.044765][T11731] [ 515.044773][T11731] dump_stack_lvl+0xe8/0x150 [ 515.044803][T11731] should_fail_ex+0x467/0x600 [ 515.044830][T11731] should_failslab+0xa8/0x100 [ 515.044850][T11731] kmem_cache_alloc_node_noprof+0xae/0x670 [ 515.044866][T11731] ? __alloc_skb+0x1d7/0x7a0 [ 515.044892][T11731] ? __alloc_skb+0x1d7/0x7a0 [ 515.044912][T11731] __alloc_skb+0x1d7/0x7a0 [ 515.044931][T11731] netlink_sendmsg+0x5d4/0xb40 [ 515.044957][T11731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.044978][T11731] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 515.045000][T11731] ? __kernel_text_address+0xd/0x30 [ 515.045015][T11731] ? unwind_get_return_address+0x4d/0x90 [ 515.045036][T11731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.045053][T11731] sock_sendmsg_nosec+0x13a/0x180 [ 515.045071][T11731] ____sys_sendmsg+0x565/0x870 [ 515.045089][T11731] ? __might_fault+0xaf/0x130 [ 515.045110][T11731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.045139][T11731] ? import_iovec+0x73/0xa0 [ 515.045159][T11731] ___sys_sendmsg+0x2a5/0x360 [ 515.045176][T11731] ? __lock_acquire+0x683/0x2ce0 [ 515.045195][T11731] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.045237][T11731] ? __fget_files+0x2a/0x420 [ 515.045253][T11731] ? __fget_files+0x3a8/0x420 [ 515.045275][T11731] __x64_sys_sendmsg+0x1b7/0x290 [ 515.045295][T11731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.045327][T11731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.045343][T11731] do_syscall_64+0x174/0x580 [ 515.045363][T11731] ? trace_irq_disable+0x3b/0x140 [ 515.045380][T11731] ? clear_bhb_loop+0x40/0x90 [ 515.045398][T11731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.045413][T11731] RIP: 0033:0x7fd3d447e0d9 [ 515.045428][T11731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.045441][T11731] RSP: 002b:00007fd3d26d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.045458][T11731] RAX: ffffffffffffffda RBX: 00007fd3d4705fa0 RCX: 00007fd3d447e0d9 [ 515.045470][T11731] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 515.045479][T11731] RBP: 00007fd3d26d6090 R08: 0000000000000000 R09: 0000000000000000 [ 515.045488][T11731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.045497][T11731] R13: 00007fd3d4706038 R14: 00007fd3d4705fa0 R15: 00007ffdcfa55218 [ 515.045519][T11731] [ 515.184140][T11733] FAULT_INJECTION: forcing a failure. [ 515.184140][T11733] name failslab, interval 1, probability 0, space 0, times 0 [ 515.184176][T11733] CPU: 0 UID: 0 PID: 11733 Comm: syz.2.2002 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 515.184199][T11733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.184211][T11733] Call Trace: [ 515.184219][T11733] [ 515.184227][T11733] dump_stack_lvl+0xe8/0x150 [ 515.184262][T11733] should_fail_ex+0x467/0x600 [ 515.184297][T11733] should_failslab+0xa8/0x100 [ 515.184322][T11733] kmem_cache_alloc_node_noprof+0xae/0x670 [ 515.184345][T11733] ? __alloc_skb+0x1d7/0x7a0 [ 515.184373][T11733] ? __alloc_skb+0x1d7/0x7a0 [ 515.184399][T11733] __alloc_skb+0x1d7/0x7a0 [ 515.184425][T11733] netlink_sendmsg+0x5d4/0xb40 [ 515.184458][T11733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.184486][T11733] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 515.184515][T11733] ? __kernel_text_address+0xd/0x30 [ 515.184535][T11733] ? unwind_get_return_address+0x4d/0x90 [ 515.184560][T11733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.184584][T11733] sock_sendmsg_nosec+0x13a/0x180 [ 515.184608][T11733] ____sys_sendmsg+0x565/0x870 [ 515.184632][T11733] ? __might_fault+0xaf/0x130 [ 515.184656][T11733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.184689][T11733] ? import_iovec+0x73/0xa0 [ 515.184715][T11733] ___sys_sendmsg+0x2a5/0x360 [ 515.184739][T11733] ? __lock_acquire+0x683/0x2ce0 [ 515.184763][T11733] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.184819][T11733] ? __fget_files+0x2a/0x420 [ 515.184838][T11733] ? __fget_files+0x3a8/0x420 [ 515.184866][T11733] __x64_sys_sendmsg+0x1b7/0x290 [ 515.184892][T11733] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.184933][T11733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.184954][T11733] do_syscall_64+0x174/0x580 [ 515.184980][T11733] ? trace_irq_disable+0x3b/0x140 [ 515.185000][T11733] ? clear_bhb_loop+0x40/0x90 [ 515.185022][T11733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.185042][T11733] RIP: 0033:0x7f0047bfe0d9 [ 515.185061][T11733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.185077][T11733] RSP: 002b:00007f0045e56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.185099][T11733] RAX: ffffffffffffffda RBX: 00007f0047e85fa0 RCX: 00007f0047bfe0d9 [ 515.185114][T11733] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 515.185126][T11733] RBP: 00007f0045e56090 R08: 0000000000000000 R09: 0000000000000000 [ 515.185139][T11733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.185151][T11733] R13: 00007f0047e86038 R14: 00007f0047e85fa0 R15: 00007fffa5243d88 [ 515.185181][T11733] [ 515.678724][ T6214] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 515.822480][ T6214] usb 1-1: device descriptor read/64, error -71 [ 515.961077][T11750] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 515.993244][T11752] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2010'. [ 516.046672][ T5728] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 516.066069][ T6214] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 516.195696][ T6214] usb 1-1: device descriptor read/64, error -71 [ 516.201852][ T5728] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 516.201885][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.201899][ T5728] usb 3-1: Product: syz [ 516.201907][ T5728] usb 3-1: Manufacturer: syz [ 516.201915][ T5728] usb 3-1: SerialNumber: syz [ 516.252350][ T5728] gspca_main: spca500-2.14.0 probing 046d:0900 [ 516.275681][ T5715] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 516.305968][ T6214] usb usb1-port1: attempt power cycle [ 516.335805][ T5845] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 516.425740][ T199] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 516.432741][ T5715] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 516.432773][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 516.432793][ T5715] usb 2-1: Product: syz [ 516.432808][ T5715] usb 2-1: SerialNumber: syz [ 516.453013][ T5715] usb 2-1: config 0 descriptor?? [ 516.493547][ T5845] usb 4-1: not running at top speed; connect to a high speed hub [ 516.509567][ T5845] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 516.509670][ T5845] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 516.509704][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.585070][ T5845] gspca_main: spca501-2.14.0 probing 0000:0000 [ 516.599290][ T199] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.599406][ T199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 516.599436][ T199] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.599479][ T199] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 516.599556][ T199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.615189][ T199] usb 5-1: config 0 descriptor?? [ 516.665046][ T6214] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 516.688648][ T6214] usb 1-1: device descriptor read/8, error -71 [ 516.749126][ T5728] gspca_spca500: reg write: error -71 [ 516.750808][ T5728] gspca_spca500: reg write: error -71 [ 516.751197][ T5728] gspca_spca500: reg write: error -71 [ 516.751746][ T5728] gspca_spca500: reg write: error -71 [ 516.753931][ T5728] gspca_spca500: reg write: error -71 [ 516.757345][ T5728] gspca_spca500: reg write: error -71 [ 516.789834][ T5728] gspca_spca500: reg write: error -71 [ 516.796041][ T5728] gspca_spca500: reg write: error -71 [ 516.796467][ T5728] gspca_spca500: reg write: error -71 [ 516.796840][ T5728] gspca_spca500: reg write: error -71 [ 516.797213][ T5728] gspca_spca500: reg write: error -71 [ 516.797582][ T5728] gspca_spca500: reg write: error -71 [ 516.797946][ T5728] gspca_spca500: reg write: error -71 [ 516.798314][ T5728] gspca_spca500: reg write: error -71 [ 516.869578][ T5728] usb 3-1: USB disconnect, device number 71 [ 516.927066][ T6214] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 516.930483][T11764] FAULT_INJECTION: forcing a failure. [ 516.930483][T11764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.930506][T11764] CPU: 0 UID: 0 PID: 11764 Comm: syz.2.2013 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 516.930522][T11764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 516.930529][T11764] Call Trace: [ 516.930534][T11764] [ 516.930539][T11764] dump_stack_lvl+0xe8/0x150 [ 516.930563][T11764] should_fail_ex+0x467/0x600 [ 516.930583][T11764] _copy_from_user+0x2d/0xb0 [ 516.930598][T11764] kstrtouint_from_user+0xd6/0x180 [ 516.930618][T11764] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 516.930628][T11764] ? __lock_acquire+0x683/0x2ce0 [ 516.930648][T11764] proc_fail_nth_write+0x8e/0x210 [ 516.930661][T11764] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 516.930677][T11764] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 516.930688][T11764] vfs_write+0x29f/0xbb0 [ 516.930707][T11764] ? __pfx_vfs_write+0x10/0x10 [ 516.930722][T11764] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 516.930737][T11764] ? lockdep_hardirqs_on+0x7a/0x110 [ 516.930752][T11764] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 516.930766][T11764] ? mutex_lock_nested+0x152/0x1d0 [ 516.930776][T11764] ? fdget_pos+0x252/0x320 [ 516.930792][T11764] ksys_write+0x156/0x270 [ 516.930813][T11764] ? __pfx_ksys_write+0x10/0x10 [ 516.930844][T11764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.930865][T11764] do_syscall_64+0x174/0x580 [ 516.930889][T11764] ? trace_irq_disable+0x3b/0x140 [ 516.930909][T11764] ? clear_bhb_loop+0x40/0x90 [ 516.930927][T11764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.930938][T11764] RIP: 0033:0x7f0047bbe90e [ 516.930949][T11764] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 516.930959][T11764] RSP: 002b:00007f0045e34fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 516.930972][T11764] RAX: ffffffffffffffda RBX: 00007f0045e356c0 RCX: 00007f0047bbe90e [ 516.930980][T11764] RDX: 0000000000000001 RSI: 00007f0045e350a0 RDI: 0000000000000006 [ 516.930987][T11764] RBP: 00007f0045e35090 R08: 0000000000000000 R09: 0000000000000000 [ 516.930994][T11764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.931001][T11764] R13: 00007f0047e86128 R14: 00007f0047e86090 R15: 00007fffa5243d88 [ 516.931017][T11764] [ 516.948209][ T6214] usb 1-1: device descriptor read/8, error -71 [ 516.950543][ T199] usb 5-1: USB disconnect, device number 61 [ 517.006430][ T5845] gspca_spca501: reg write: error -71 [ 517.006449][ T5845] spca501 4-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 517.006590][ T5845] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 517.060147][ T6214] usb usb1-port1: unable to enumerate USB device [ 517.079820][ T5845] uvcvideo 4-1:1.0: Found UVC 1.00 device (0000:0000) [ 517.094863][ T5845] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 517.102421][ T5845] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 517.102592][ T5845] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 517.149942][ T5845] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 517.383081][ T5845] usb 4-1: USB disconnect, device number 83 [ 517.892304][T11785] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2023'. [ 517.892432][T11785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2023'. [ 518.259236][T11803] FAULT_INJECTION: forcing a failure. [ 518.259236][T11803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.259265][T11803] CPU: 1 UID: 0 PID: 11803 Comm: syz.3.2030 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 518.259283][T11803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 518.259292][T11803] Call Trace: [ 518.259299][T11803] [ 518.259306][T11803] dump_stack_lvl+0xe8/0x150 [ 518.259336][T11803] should_fail_ex+0x467/0x600 [ 518.259365][T11803] _copy_from_user+0x2d/0xb0 [ 518.259385][T11803] __copy_msghdr+0x390/0x590 [ 518.259412][T11803] ___sys_sendmsg+0x213/0x360 [ 518.259433][T11803] ? __lock_acquire+0x683/0x2ce0 [ 518.259454][T11803] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.259501][T11803] ? __fget_files+0x2a/0x420 [ 518.259516][T11803] ? __fget_files+0x3a8/0x420 [ 518.259538][T11803] __x64_sys_sendmsg+0x1b7/0x290 [ 518.259559][T11803] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.259595][T11803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.259612][T11803] do_syscall_64+0x174/0x580 [ 518.259632][T11803] ? trace_irq_disable+0x3b/0x140 [ 518.259658][T11803] ? clear_bhb_loop+0x40/0x90 [ 518.259676][T11803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.259690][T11803] RIP: 0033:0x7fd4cc65e0d9 [ 518.259706][T11803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.259719][T11803] RSP: 002b:00007fd4ca8b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.259735][T11803] RAX: ffffffffffffffda RBX: 00007fd4cc8e5fa0 RCX: 00007fd4cc65e0d9 [ 518.259745][T11803] RDX: 000000003400c8d4 RSI: 0000200000000140 RDI: 0000000000000003 [ 518.259755][T11803] RBP: 00007fd4ca8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 518.259764][T11803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.259773][T11803] R13: 00007fd4cc8e6038 R14: 00007fd4cc8e5fa0 R15: 00007ffc8d0b8c28 [ 518.259795][T11803] [ 518.982338][ T5715] usb 2-1: USB disconnect, device number 62 [ 519.194226][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2040'. [ 519.545709][T10413] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 519.701507][T10413] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.701558][T10413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 519.701585][T10413] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 519.701622][T10413] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 519.701645][T10413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.759855][T10413] usb 5-1: config 0 descriptor?? [ 519.860118][T11853] binder: 11852:11853 ioctl c0046209 200000001340 returned -22 [ 519.915850][T11857] FAULT_INJECTION: forcing a failure. [ 519.915850][T11857] name failslab, interval 1, probability 0, space 0, times 0 [ 519.915885][T11857] CPU: 1 UID: 0 PID: 11857 Comm: syz.3.2052 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 519.915907][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.915918][T11857] Call Trace: [ 519.915927][T11857] [ 519.915935][T11857] dump_stack_lvl+0xe8/0x150 [ 519.915969][T11857] should_fail_ex+0x467/0x600 [ 519.916003][T11857] should_failslab+0xa8/0x100 [ 519.916026][T11857] kmem_cache_alloc_node_noprof+0xae/0x670 [ 519.916047][T11857] ? __alloc_skb+0x1d7/0x7a0 [ 519.916070][T11857] ? __alloc_skb+0x1d7/0x7a0 [ 519.916095][T11857] __alloc_skb+0x1d7/0x7a0 [ 519.916118][T11857] netlink_sendmsg+0x5d4/0xb40 [ 519.916153][T11857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.916179][T11857] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 519.916204][T11857] ? __kernel_text_address+0xd/0x30 [ 519.916223][T11857] ? unwind_get_return_address+0x4d/0x90 [ 519.916247][T11857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.916268][T11857] sock_sendmsg_nosec+0x13a/0x180 [ 519.916300][T11857] ____sys_sendmsg+0x565/0x870 [ 519.916322][T11857] ? __might_fault+0xaf/0x130 [ 519.916346][T11857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.916376][T11857] ? import_iovec+0x73/0xa0 [ 519.916402][T11857] ___sys_sendmsg+0x2a5/0x360 [ 519.916425][T11857] ? __lock_acquire+0x683/0x2ce0 [ 519.916449][T11857] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.916502][T11857] ? __fget_files+0x2a/0x420 [ 519.916522][T11857] ? __fget_files+0x3a8/0x420 [ 519.916551][T11857] __x64_sys_sendmsg+0x1b7/0x290 [ 519.916579][T11857] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.916621][T11857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.916642][T11857] do_syscall_64+0x174/0x580 [ 519.916667][T11857] ? trace_irq_disable+0x3b/0x140 [ 519.916686][T11857] ? clear_bhb_loop+0x40/0x90 [ 519.916709][T11857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.916728][T11857] RIP: 0033:0x7fd4cc65e0d9 [ 519.916745][T11857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.916761][T11857] RSP: 002b:00007fd4ca8b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.916782][T11857] RAX: ffffffffffffffda RBX: 00007fd4cc8e5fa0 RCX: 00007fd4cc65e0d9 [ 519.916797][T11857] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 519.916810][T11857] RBP: 00007fd4ca8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 519.916822][T11857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.916834][T11857] R13: 00007fd4cc8e6038 R14: 00007fd4cc8e5fa0 R15: 00007ffc8d0b8c28 [ 519.916865][T11857] [ 520.024244][ T5845] usb 5-1: USB disconnect, device number 62 [ 521.575731][T11888] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 521.588824][ T5728] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 521.742463][ T5728] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 183, using maximum allowed: 30 [ 521.742514][ T5728] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 183 [ 521.742561][ T5728] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 521.742692][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.799674][ T5728] usb 4-1: config 0 descriptor?? [ 521.817808][ T5728] cp210x 4-1:0.0: cp210x converter detected [ 522.000746][ T5735] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 522.040771][T11903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2069'. [ 522.150182][ T5735] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 522.150215][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 522.150236][ T5735] usb 2-1: Product: syz [ 522.150251][ T5735] usb 2-1: SerialNumber: syz [ 522.169259][ T5735] usb 2-1: config 0 descriptor?? [ 522.215830][ T5728] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 522.454345][ T5728] usb 4-1: cp210x converter now attached to ttyUSB0 [ 522.696030][ T5728] usb 4-1: USB disconnect, device number 84 [ 522.728439][ T5728] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 522.827061][T11914] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5602] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11914] [ 523.139546][ T5728] cp210x 4-1:0.0: device disconnected [ 523.288684][ T5330] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 523.428990][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2077'. [ 523.459645][ T5330] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 523.459664][ T5330] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 523.459675][ T5330] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 523.459703][ T5330] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 523.459718][ T5330] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 523.476338][ T5330] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 523.476423][ T5330] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 523.476444][ T5330] usb 1-1: Product: syz [ 523.476459][ T5330] usb 1-1: Manufacturer: syz [ 523.656391][ T5330] cdc_wdm 1-1:1.0: skipping garbage [ 523.656443][ T5330] cdc_wdm 1-1:1.0: skipping garbage [ 523.863826][ T5330] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 523.863859][ T5330] cdc_wdm 1-1:1.0: Unknown control protocol [ 524.575710][T11944] FAULT_INJECTION: forcing a failure. [ 524.575710][T11944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.575745][T11944] CPU: 1 UID: 0 PID: 11944 Comm: syz.0.2074 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 524.575766][T11944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.575777][T11944] Call Trace: [ 524.575785][T11944] [ 524.575793][T11944] dump_stack_lvl+0xe8/0x150 [ 524.575828][T11944] should_fail_ex+0x467/0x600 [ 524.575863][T11944] _copy_from_user+0x2d/0xb0 [ 524.575887][T11944] kstrtouint_from_user+0xd6/0x180 [ 524.575904][T11944] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 524.575918][T11944] ? __lock_acquire+0x683/0x2ce0 [ 524.575956][T11944] proc_fail_nth_write+0x8e/0x210 [ 524.575974][T11944] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 524.575996][T11944] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 524.576012][T11944] vfs_write+0x29f/0xbb0 [ 524.576038][T11944] ? __pfx_vfs_write+0x10/0x10 [ 524.576057][T11944] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 524.576078][T11944] ? lockdep_hardirqs_on+0x7a/0x110 [ 524.576100][T11944] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 524.576120][T11944] ? mutex_lock_nested+0x152/0x1d0 [ 524.576135][T11944] ? fdget_pos+0x252/0x320 [ 524.576158][T11944] ksys_write+0x156/0x270 [ 524.576178][T11944] ? __pfx_ksys_write+0x10/0x10 [ 524.576202][T11944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.576219][T11944] do_syscall_64+0x174/0x580 [ 524.576239][T11944] ? trace_irq_disable+0x3b/0x140 [ 524.576254][T11944] ? clear_bhb_loop+0x40/0x90 [ 524.576271][T11944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.576286][T11944] RIP: 0033:0x7fd3d443e90e [ 524.576299][T11944] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 524.576320][T11944] RSP: 002b:00007fd3d2693fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 524.576337][T11944] RAX: ffffffffffffffda RBX: 00007fd3d26946c0 RCX: 00007fd3d443e90e [ 524.576348][T11944] RDX: 0000000000000001 RSI: 00007fd3d26940a0 RDI: 0000000000000005 [ 524.576357][T11944] RBP: 00007fd3d2694090 R08: 0000000000000000 R09: 0000000000000000 [ 524.576367][T11944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.576375][T11944] R13: 00007fd3d4706218 R14: 00007fd3d4706180 R15: 00007ffdcfa55218 [ 524.576399][T11944] [ 524.686017][ T5735] usb 2-1: USB disconnect, device number 63 [ 524.802181][ T5715] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 524.828430][T11946] tipc: Withdrawal distribution failure [ 524.988413][ T5715] usb 4-1: not running at top speed; connect to a high speed hub [ 524.993545][ T5715] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 524.993597][ T5715] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 524.993621][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.078097][ T5715] gspca_main: spca501-2.14.0 probing 0000:0000 [ 525.093863][T11948] FAULT_INJECTION: forcing a failure. [ 525.093863][T11948] name failslab, interval 1, probability 0, space 0, times 0 [ 525.093896][T11948] CPU: 1 UID: 0 PID: 11948 Comm: syz.1.2087 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 525.093919][T11948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 525.093929][T11948] Call Trace: [ 525.093940][T11948] [ 525.093949][T11948] dump_stack_lvl+0xe8/0x150 [ 525.093996][T11948] should_fail_ex+0x467/0x600 [ 525.094031][T11948] should_failslab+0xa8/0x100 [ 525.094056][T11948] __kmalloc_cache_noprof+0xa0/0x6b0 [ 525.094076][T11948] ? io_ring_ctx_alloc+0x53/0xc60 [ 525.094122][T11948] ? io_ring_ctx_alloc+0x53/0xc60 [ 525.094149][T11948] io_ring_ctx_alloc+0x53/0xc60 [ 525.094169][T11948] ? io_prepare_config+0x8c8/0xc70 [ 525.094213][T11948] io_uring_create+0x50/0x990 [ 525.094237][T11948] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 525.094265][T11948] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 525.094288][T11948] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 525.094329][T11948] ? __pfx_ksys_write+0x10/0x10 [ 525.094360][T11948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.094381][T11948] do_syscall_64+0x174/0x580 [ 525.094408][T11948] ? clear_bhb_loop+0x40/0x90 [ 525.094431][T11948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.094450][T11948] RIP: 0033:0x7f632910e0d9 [ 525.094468][T11948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.094483][T11948] RSP: 002b:00007f6327365ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 525.094502][T11948] RAX: ffffffffffffffda RBX: 0000200000000508 RCX: 00007f632910e0d9 [ 525.094514][T11948] RDX: 0000200000000588 RSI: 0000200000000508 RDI: 0000000000000e26 [ 525.094526][T11948] RBP: 0000200000000500 R08: 0000200000000340 R09: 0000000000000000 [ 525.094537][T11948] R10: 0000200000000590 R11: 0000000000000206 R12: 0000200000000588 [ 525.094548][T11948] R13: 0000200000000590 R14: 00007f6327365fd8 R15: 0000000000000000 [ 525.094573][T11948] [ 525.478103][ T5715] gspca_spca501: reg write: error -71 [ 525.478117][ T5715] spca501 4-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 525.478174][ T5715] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 525.528497][ T5715] uvcvideo 4-1:1.0: Found UVC 1.00 device (0000:0000) [ 525.533031][ T5715] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 525.534328][ T5715] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 525.534381][ T5715] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 525.605847][ T5715] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 525.606465][ T5735] usb 1-1: USB disconnect, device number 77 [ 525.727658][ T5715] usb 4-1: USB disconnect, device number 85 [ 525.765158][T11958] FAULT_INJECTION: forcing a failure. [ 525.765158][T11958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.765192][T11958] CPU: 0 UID: 0 PID: 11958 Comm: syz.0.2091 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 525.765215][T11958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 525.765232][T11958] Call Trace: [ 525.765241][T11958] [ 525.765249][T11958] dump_stack_lvl+0xe8/0x150 [ 525.765285][T11958] should_fail_ex+0x467/0x600 [ 525.765319][T11958] _copy_from_user+0x2d/0xb0 [ 525.765353][T11958] ___sys_sendmsg+0x1c6/0x360 [ 525.765379][T11958] ? __lock_acquire+0x683/0x2ce0 [ 525.765405][T11958] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.765426][T11958] ? __lock_acquire+0x683/0x2ce0 [ 525.765449][T11958] ? kstrtouint+0x6e/0xe0 [ 525.765505][T11958] __sys_sendmmsg+0x279/0x4d0 [ 525.765533][T11958] ? __pfx___sys_sendmmsg+0x10/0x10 [ 525.765563][T11958] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 525.765596][T11958] ? ksys_write+0x248/0x270 [ 525.765622][T11958] ? __pfx_ksys_write+0x10/0x10 [ 525.765650][T11958] __x64_sys_sendmmsg+0xa0/0xc0 [ 525.765675][T11958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.765695][T11958] do_syscall_64+0x174/0x580 [ 525.765719][T11958] ? trace_irq_disable+0x3b/0x140 [ 525.765739][T11958] ? clear_bhb_loop+0x40/0x90 [ 525.765762][T11958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.765781][T11958] RIP: 0033:0x7fd3d447e0d9 [ 525.765799][T11958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.765815][T11958] RSP: 002b:00007fd3d26d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 525.765834][T11958] RAX: ffffffffffffffda RBX: 00007fd3d4705fa0 RCX: 00007fd3d447e0d9 [ 525.765847][T11958] RDX: 0000000000000002 RSI: 000020000000a440 RDI: 0000000000000004 [ 525.765858][T11958] RBP: 00007fd3d26d6090 R08: 0000000000000000 R09: 0000000000000000 [ 525.765869][T11958] R10: 0000000000044051 R11: 0000000000000246 R12: 0000000000000001 [ 525.765880][T11958] R13: 00007fd3d4706038 R14: 00007fd3d4705fa0 R15: 00007ffdcfa55218 [ 525.765907][T11958] [ 526.466435][ T5735] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 526.625614][ T5735] usb 1-1: Using ep0 maxpacket: 16 [ 526.627645][ T5735] usb 1-1: config 0 has no interfaces? [ 526.630167][ T5735] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 526.630197][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.630218][ T5735] usb 1-1: Product: syz [ 526.630232][ T5735] usb 1-1: Manufacturer: syz [ 526.630245][ T5735] usb 1-1: SerialNumber: syz [ 526.676152][ T5715] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 526.679446][ T5735] usb 1-1: config 0 descriptor?? [ 526.832682][ T5715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 526.835314][ T5715] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 8 [ 526.835348][ T5715] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 526.835374][ T5715] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.835401][ T5715] usb 4-1: config 1 interface 0 has no altsetting 0 [ 526.843564][ T5715] usb 4-1: string descriptor 0 read error: -22 [ 526.843719][ T5715] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 526.843742][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.879635][T11970] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 526.879826][T11970] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 526.883203][ T5715] usb 4-1: No union descriptors [ 526.924449][ T5735] usb 1-1: USB disconnect, device number 78 [ 527.072399][T11989] ip6gre1: entered promiscuous mode [ 527.072429][T11989] ip6gre1: entered allmulticast mode [ 527.084845][ T7122] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.085138][ T7122] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.095858][ T5330] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.100593][ T5845] usb 4-1: USB disconnect, device number 86 [ 527.285714][ T199] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 527.315730][ T5715] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 527.435721][ T199] usb 5-1: Using ep0 maxpacket: 16 [ 527.438819][ T199] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.438876][ T199] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.438892][ T199] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 527.438905][ T199] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 527.440012][ T199] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 527.441606][ T199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 527.441622][ T199] usb 5-1: SerialNumber: syz [ 527.445867][ T5845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.455785][ T5715] usb 2-1: device descriptor read/64, error -71 [ 527.483208][ T199] hub 5-1:1.0: bad descriptor, ignoring hub [ 527.483256][ T199] hub 5-1:1.0: probe with driver hub failed with error -5 [ 527.495007][ T199] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 527.706001][ T5715] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 527.710849][T11982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.711466][T11982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.825677][ T5728] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 527.846743][ T199] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.847898][ T5715] usb 2-1: device descriptor read/64, error -71 [ 527.890634][T12031] comedi comedi2: comedi_config --init_data is deprecated [ 527.890954][T12031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2122'. [ 527.956368][ T5715] usb usb2-port1: attempt power cycle [ 527.985678][ T5728] usb 1-1: Using ep0 maxpacket: 32 [ 527.988754][ T5728] usb 1-1: unable to get BOS descriptor or descriptor too short [ 528.005686][T11982] raw-gadget.0 gadget.4: fail, usb_ep_set_wedge returned -11 [ 528.024891][ T5728] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 528.037185][ T5728] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 528.037227][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.037245][ T5728] usb 1-1: Product: syz [ 528.037256][ T5728] usb 1-1: Manufacturer: syz [ 528.037268][ T5728] usb 1-1: SerialNumber: syz [ 528.133605][ T5845] usb 5-1: USB disconnect, device number 63 [ 528.306206][ T5715] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 528.327192][ T5715] usb 2-1: device descriptor read/8, error -71 [ 528.488228][T12044] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2126'. [ 528.575787][ T5715] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 528.595880][ T5728] usb 1-1: Cannot retrieve CPort count: -110 [ 528.595933][ T5728] usb 1-1: Cannot retrieve CPort count: -110 [ 528.595969][ T5728] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 528.596312][ T5715] usb 2-1: device descriptor read/8, error -71 [ 528.706071][ T5715] usb usb2-port1: unable to enumerate USB device [ 529.018777][ T5715] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 529.170765][ T5715] usb 5-1: unable to get BOS descriptor or descriptor too short [ 529.173226][ T5715] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 8 [ 529.173257][ T5715] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 529.173278][ T5715] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.173301][ T5715] usb 5-1: config 1 interface 0 has no altsetting 0 [ 529.183323][ T5715] usb 5-1: string descriptor 0 read error: -22 [ 529.183461][ T5715] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 529.183485][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.204632][T12054] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 529.205240][T12054] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 529.214684][ T5715] usb 5-1: No union descriptors [ 529.270291][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2141'. [ 529.270314][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2141'. [ 529.300314][T12077] FAULT_INJECTION: forcing a failure. [ 529.300314][T12077] name failslab, interval 1, probability 0, space 0, times 0 [ 529.300338][T12077] CPU: 0 UID: 0 PID: 12077 Comm: syz.3.2141 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 529.300352][T12077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.300359][T12077] Call Trace: [ 529.300364][T12077] [ 529.300369][T12077] dump_stack_lvl+0xe8/0x150 [ 529.300391][T12077] should_fail_ex+0x467/0x600 [ 529.300416][T12077] should_failslab+0xa8/0x100 [ 529.300431][T12077] kmem_cache_alloc_node_noprof+0xae/0x670 [ 529.300444][T12077] ? __alloc_skb+0x1d7/0x7a0 [ 529.300457][T12077] ? __alloc_skb+0x1d7/0x7a0 [ 529.300472][T12077] __alloc_skb+0x1d7/0x7a0 [ 529.300486][T12077] netlink_sendmsg+0x5d4/0xb40 [ 529.300506][T12077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.300521][T12077] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 529.300538][T12077] ? __kernel_text_address+0xd/0x30 [ 529.300549][T12077] ? unwind_get_return_address+0x4d/0x90 [ 529.300564][T12077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.300577][T12077] sock_sendmsg_nosec+0x13a/0x180 [ 529.300589][T12077] ____sys_sendmsg+0x565/0x870 [ 529.300604][T12077] ? __might_fault+0xaf/0x130 [ 529.300619][T12077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.300637][T12077] ? import_iovec+0x73/0xa0 [ 529.300651][T12077] ___sys_sendmsg+0x2a5/0x360 [ 529.300665][T12077] ? __lock_acquire+0x683/0x2ce0 [ 529.300679][T12077] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.300709][T12077] ? __fget_files+0x2a/0x420 [ 529.300720][T12077] ? __fget_files+0x3a8/0x420 [ 529.300736][T12077] __x64_sys_sendmsg+0x1b7/0x290 [ 529.300751][T12077] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.300773][T12077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.300785][T12077] do_syscall_64+0x174/0x580 [ 529.300800][T12077] ? trace_irq_disable+0x3b/0x140 [ 529.300811][T12077] ? clear_bhb_loop+0x40/0x90 [ 529.300824][T12077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.300835][T12077] RIP: 0033:0x7fd4cc65e0d9 [ 529.300846][T12077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.300859][T12077] RSP: 002b:00007fd4ca8b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.300871][T12077] RAX: ffffffffffffffda RBX: 00007fd4cc8e5fa0 RCX: 00007fd4cc65e0d9 [ 529.300879][T12077] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 529.300886][T12077] RBP: 00007fd4ca8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 529.300893][T12077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.300899][T12077] R13: 00007fd4cc8e6038 R14: 00007fd4cc8e5fa0 R15: 00007ffc8d0b8c28 [ 529.300943][T12077] [ 529.417229][ T5715] usb 5-1: USB disconnect, device number 64 [ 529.642910][T12088] FAULT_INJECTION: forcing a failure. [ 529.642910][T12088] name failslab, interval 1, probability 0, space 0, times 0 [ 529.642946][T12088] CPU: 1 UID: 0 PID: 12088 Comm: syz.3.2147 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 529.642970][T12088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.642983][T12088] Call Trace: [ 529.642991][T12088] [ 529.643004][T12088] dump_stack_lvl+0xe8/0x150 [ 529.643047][T12088] should_fail_ex+0x467/0x600 [ 529.643082][T12088] should_failslab+0xa8/0x100 [ 529.643108][T12088] kmem_cache_alloc_node_noprof+0xae/0x670 [ 529.643132][T12088] ? __alloc_skb+0x1d7/0x7a0 [ 529.643154][T12088] ? __alloc_skb+0x1d7/0x7a0 [ 529.643182][T12088] __alloc_skb+0x1d7/0x7a0 [ 529.643208][T12088] netlink_sendmsg+0x5d4/0xb40 [ 529.643243][T12088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.643268][T12088] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 529.643296][T12088] ? __kernel_text_address+0xd/0x30 [ 529.643317][T12088] ? unwind_get_return_address+0x4d/0x90 [ 529.643342][T12088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.643367][T12088] sock_sendmsg_nosec+0x13a/0x180 [ 529.643391][T12088] ____sys_sendmsg+0x565/0x870 [ 529.643415][T12088] ? __might_fault+0xaf/0x130 [ 529.643439][T12088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.643470][T12088] ? import_iovec+0x73/0xa0 [ 529.643496][T12088] ___sys_sendmsg+0x2a5/0x360 [ 529.643518][T12088] ? __lock_acquire+0x683/0x2ce0 [ 529.643538][T12088] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.643582][T12088] ? __fget_files+0x2a/0x420 [ 529.643602][T12088] ? __fget_files+0x3a8/0x420 [ 529.643631][T12088] __x64_sys_sendmsg+0x1b7/0x290 [ 529.643659][T12088] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.643701][T12088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.643723][T12088] do_syscall_64+0x174/0x580 [ 529.643749][T12088] ? trace_irq_disable+0x3b/0x140 [ 529.643769][T12088] ? clear_bhb_loop+0x40/0x90 [ 529.643791][T12088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.643810][T12088] RIP: 0033:0x7fd4cc65e0d9 [ 529.643829][T12088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.643846][T12088] RSP: 002b:00007fd4ca8b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.643867][T12088] RAX: ffffffffffffffda RBX: 00007fd4cc8e5fa0 RCX: 00007fd4cc65e0d9 [ 529.643882][T12088] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 529.643895][T12088] RBP: 00007fd4ca8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 529.643908][T12088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.643921][T12088] R13: 00007fd4cc8e6038 R14: 00007fd4cc8e5fa0 R15: 00007ffc8d0b8c28 [ 529.643952][T12088] [ 530.023816][T12098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.024588][T12098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.465723][ T5728] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 530.568367][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2160'. [ 530.568393][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2160'. [ 530.568407][T12122] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 530.572535][ T37] audit: type=1326 audit(1785953926.570:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12121 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 530.573450][ T37] audit: type=1326 audit(1785953926.570:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12121 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 530.574339][ T37] audit: type=1326 audit(1785953926.570:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12121 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 530.574619][ T37] audit: type=1326 audit(1785953926.570:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12121 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 530.575082][ T37] audit: type=1326 audit(1785953926.570:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12121 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 530.575132][ T37] audit: type=1326 audit(1785953926.570:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12121 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 530.575412][ T37] audit: type=1326 audit(1785953926.570:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12121 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 530.610463][ T37] audit: type=1326 audit(1785953926.610:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12121 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 530.610514][ T37] audit: type=1326 audit(1785953926.610:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12121 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 530.610555][ T37] audit: type=1326 audit(1785953926.610:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12121 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f632910e0d9 code=0x7ffc0000 [ 530.675609][ T5728] usb 5-1: Using ep0 maxpacket: 16 [ 530.825644][ T5728] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 530.825692][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.825712][ T5728] usb 5-1: Product: syz [ 530.825727][ T5728] usb 5-1: Manufacturer: syz [ 530.825741][ T5728] usb 5-1: SerialNumber: syz [ 531.184203][ T5715] usb 1-1: USB disconnect, device number 79 [ 531.280511][T12134] FAULT_INJECTION: forcing a failure. [ 531.280511][T12134] name failslab, interval 1, probability 0, space 0, times 0 [ 531.280541][T12134] CPU: 0 UID: 0 PID: 12134 Comm: syz.2.2166 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 531.280558][T12134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 531.280566][T12134] Call Trace: [ 531.280572][T12134] [ 531.280579][T12134] dump_stack_lvl+0xe8/0x150 [ 531.280609][T12134] should_fail_ex+0x467/0x600 [ 531.280636][T12134] should_failslab+0xa8/0x100 [ 531.280655][T12134] kmem_cache_alloc_node_noprof+0xae/0x670 [ 531.280671][T12134] ? __alloc_skb+0x1d7/0x7a0 [ 531.280688][T12134] ? __alloc_skb+0x1d7/0x7a0 [ 531.280719][T12134] __alloc_skb+0x1d7/0x7a0 [ 531.280736][T12134] netlink_sendmsg+0x5d4/0xb40 [ 531.280763][T12134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.280782][T12134] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 531.280803][T12134] ? __kernel_text_address+0xd/0x30 [ 531.280821][T12134] ? unwind_get_return_address+0x4d/0x90 [ 531.280840][T12134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.280856][T12134] sock_sendmsg_nosec+0x13a/0x180 [ 531.280873][T12134] ____sys_sendmsg+0x565/0x870 [ 531.280891][T12134] ? __might_fault+0xaf/0x130 [ 531.280911][T12134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.280934][T12134] ? import_iovec+0x73/0xa0 [ 531.280957][T12134] ___sys_sendmsg+0x2a5/0x360 [ 531.280977][T12134] ? __lock_acquire+0x683/0x2ce0 [ 531.281000][T12134] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.281049][T12134] ? __fget_files+0x2a/0x420 [ 531.281068][T12134] ? __fget_files+0x3a8/0x420 [ 531.281093][T12134] __x64_sys_sendmsg+0x1b7/0x290 [ 531.281120][T12134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 531.281161][T12134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.281180][T12134] do_syscall_64+0x174/0x580 [ 531.281207][T12134] ? clear_bhb_loop+0x40/0x90 [ 531.281229][T12134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.281248][T12134] RIP: 0033:0x7f0047bfe0d9 [ 531.281267][T12134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.281283][T12134] RSP: 002b:00007f0045e56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.281305][T12134] RAX: ffffffffffffffda RBX: 00007f0047e85fa0 RCX: 00007f0047bfe0d9 [ 531.281320][T12134] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 531.281333][T12134] RBP: 00007f0045e56090 R08: 0000000000000000 R09: 0000000000000000 [ 531.281345][T12134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.281358][T12134] R13: 00007f0047e86038 R14: 00007f0047e85fa0 R15: 00007fffa5243d88 [ 531.281389][T12134] [ 531.417370][ T5845] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 531.453314][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 531.725751][ T5715] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 531.762651][ T5728] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 531.776732][ T5728] usb 5-1: USB disconnect, device number 65 [ 531.896845][ T5715] usb 1-1: Using ep0 maxpacket: 32 [ 531.972468][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.972504][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.972575][ T5715] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 531.972589][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.014009][ T5715] usb 1-1: config 0 descriptor?? [ 532.058920][ T5715] hub 1-1:0.0: USB hub found [ 532.264077][ T5715] hub 1-1:0.0: 1 port detected [ 532.580691][T12150] FAULT_INJECTION: forcing a failure. [ 532.580691][T12150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.580728][T12150] CPU: 1 UID: 0 PID: 12150 Comm: syz.4.2169 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 532.580752][T12150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.580764][T12150] Call Trace: [ 532.580772][T12150] [ 532.580782][T12150] dump_stack_lvl+0xe8/0x150 [ 532.580819][T12150] should_fail_ex+0x467/0x600 [ 532.580855][T12150] _copy_to_iter+0x404/0x1810 [ 532.580881][T12150] ? lockdep_hardirqs_on+0x7a/0x110 [ 532.580915][T12150] ? __pfx__copy_to_iter+0x10/0x10 [ 532.580937][T12150] ? reacquire_held_locks+0x104/0x190 [ 532.580969][T12150] ? rt_spin_unlock+0x157/0x200 [ 532.580994][T12150] __skb_datagram_iter+0xf8/0x980 [ 532.581024][T12150] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 532.581058][T12150] skb_copy_datagram_iter+0xb5/0x240 [ 532.581089][T12150] netlink_recvmsg+0x2b9/0xa50 [ 532.581125][T12150] ? __pfx_netlink_recvmsg+0x10/0x10 [ 532.581154][T12150] ? __lock_acquire+0x683/0x2ce0 [ 532.581178][T12150] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 532.581205][T12150] ? security_socket_recvmsg+0x7e/0x2c0 [ 532.581226][T12150] ? __pfx_netlink_recvmsg+0x10/0x10 [ 532.581252][T12150] sock_recvmsg+0x196/0x1e0 [ 532.581275][T12150] ____sys_recvmsg+0x1f2/0x4b0 [ 532.581309][T12150] ? __pfx_____sys_recvmsg+0x10/0x10 [ 532.581349][T12150] ? import_iovec+0x73/0xa0 [ 532.581375][T12150] ___sys_recvmsg+0x213/0x5a0 [ 532.581406][T12150] ? __pfx____sys_recvmsg+0x10/0x10 [ 532.581436][T12150] ? __fget_files+0x2a/0x420 [ 532.581473][T12150] ? __fget_files+0x3a8/0x420 [ 532.581502][T12150] do_recvmmsg+0x320/0x7f0 [ 532.581546][T12150] ? __pfx_do_recvmmsg+0x10/0x10 [ 532.581572][T12150] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 532.581607][T12150] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 532.581640][T12150] __x64_sys_recvmmsg+0x198/0x250 [ 532.581669][T12150] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 532.581703][T12150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.581725][T12150] do_syscall_64+0x174/0x580 [ 532.581750][T12150] ? trace_irq_disable+0x3b/0x140 [ 532.581769][T12150] ? clear_bhb_loop+0x40/0x90 [ 532.581793][T12150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.581814][T12150] RIP: 0033:0x7f05a92be0d9 [ 532.581833][T12150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.581850][T12150] RSP: 002b:00007f05a7516028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 532.581871][T12150] RAX: ffffffffffffffda RBX: 00007f05a9545fa0 RCX: 00007f05a92be0d9 [ 532.581886][T12150] RDX: 0000000000000004 RSI: 0000200000004480 RDI: 0000000000000003 [ 532.581899][T12150] RBP: 00007f05a7516090 R08: 0000000000000000 R09: 0000000000000000 [ 532.581912][T12150] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 532.581924][T12150] R13: 00007f05a9546038 R14: 00007f05a9545fa0 R15: 00007ffc050ec138 [ 532.581954][T12150] [ 533.644099][T12164] sg_write: data in/out 24576/136 bytes for SCSI command 0x0-- guessing data in; [ 533.644099][T12164] program syz.3.2174 not setting count and/or reply_len properly [ 533.815660][ T5728] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 533.857566][ T5715] hub 1-1:0.0: activate --> -90 [ 534.056406][ T5728] usb 5-1: Using ep0 maxpacket: 32 [ 534.058805][ T5728] usb 5-1: unable to get BOS descriptor or descriptor too short [ 534.060283][ T5728] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 534.062571][ T5728] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 534.062598][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.062615][ T5728] usb 5-1: Product: syz [ 534.062628][ T5728] usb 5-1: Manufacturer: syz [ 534.062641][ T5728] usb 5-1: SerialNumber: syz [ 534.380122][ T5330] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 534.538781][ T5845] usb 2-1: device descriptor read/64, error -71 [ 534.543544][ T5330] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 534.543632][ T5330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 534.543653][ T5330] usb 4-1: Product: syz [ 534.543668][ T5330] usb 4-1: Manufacturer: syz [ 534.813256][ T5330] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input17 [ 534.838033][ T5845] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 534.918922][ T5728] usb 5-1: Cannot retrieve CPort count: -110 [ 534.918970][ T5728] usb 5-1: Cannot retrieve CPort count: -110 [ 534.919007][ T5728] es2_ap_driver 5-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 535.008029][ T5845] usb 2-1: Using ep0 maxpacket: 16 [ 535.019916][ T5845] usb 2-1: config 0 has no interfaces? [ 535.026590][ T5845] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 535.026684][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.026706][ T5845] usb 2-1: Product: syz [ 535.026720][ T5845] usb 2-1: Manufacturer: syz [ 535.026733][ T5845] usb 2-1: SerialNumber: syz [ 535.121276][ T5845] r8152-cfgselector 2-1: Unknown version 0x0000 [ 535.121305][ T5845] r8152-cfgselector 2-1: config 0 descriptor?? [ 535.207558][T12191] FAULT_INJECTION: forcing a failure. [ 535.207558][T12191] name failslab, interval 1, probability 0, space 0, times 0 [ 535.207589][T12191] CPU: 1 UID: 0 PID: 12191 Comm: syz.2.2187 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 535.207608][T12191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 535.207617][T12191] Call Trace: [ 535.207623][T12191] [ 535.207630][T12191] dump_stack_lvl+0xe8/0x150 [ 535.207660][T12191] should_fail_ex+0x467/0x600 [ 535.207687][T12191] should_failslab+0xa8/0x100 [ 535.207707][T12191] kmem_cache_alloc_node_noprof+0xae/0x670 [ 535.207724][T12191] ? __alloc_skb+0x1d7/0x7a0 [ 535.207741][T12191] ? __alloc_skb+0x1d7/0x7a0 [ 535.207760][T12191] __alloc_skb+0x1d7/0x7a0 [ 535.207778][T12191] netlink_sendmsg+0x5d4/0xb40 [ 535.207805][T12191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.207825][T12191] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 535.207847][T12191] ? __kernel_text_address+0xd/0x30 [ 535.207875][T12191] ? unwind_get_return_address+0x4d/0x90 [ 535.207893][T12191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.207911][T12191] sock_sendmsg_nosec+0x13a/0x180 [ 535.207929][T12191] ____sys_sendmsg+0x565/0x870 [ 535.207947][T12191] ? __might_fault+0xaf/0x130 [ 535.207967][T12191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.207995][T12191] ? import_iovec+0x73/0xa0 [ 535.208015][T12191] ___sys_sendmsg+0x2a5/0x360 [ 535.208033][T12191] ? __lock_acquire+0x683/0x2ce0 [ 535.208058][T12191] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.208100][T12191] ? __fget_files+0x2a/0x420 [ 535.208115][T12191] ? __fget_files+0x3a8/0x420 [ 535.208137][T12191] __x64_sys_sendmsg+0x1b7/0x290 [ 535.208158][T12191] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.208188][T12191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.208204][T12191] do_syscall_64+0x174/0x580 [ 535.208224][T12191] ? trace_irq_disable+0x3b/0x140 [ 535.208239][T12191] ? clear_bhb_loop+0x40/0x90 [ 535.208257][T12191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.208272][T12191] RIP: 0033:0x7f0047bfe0d9 [ 535.208287][T12191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.208300][T12191] RSP: 002b:00007f0045e56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.208316][T12191] RAX: ffffffffffffffda RBX: 00007f0047e85fa0 RCX: 00007f0047bfe0d9 [ 535.208326][T12191] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 535.208335][T12191] RBP: 00007f0045e56090 R08: 0000000000000000 R09: 0000000000000000 [ 535.208344][T12191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.208352][T12191] R13: 00007f0047e86038 R14: 00007f0047e85fa0 R15: 00007fffa5243d88 [ 535.208376][T12191] [ 535.492052][ T5845] usb 1-1: USB disconnect, device number 80 [ 536.025405][T12205] tun0: tun_chr_ioctl cmd 2148553947 [ 536.055101][T12203] binder: Unknown parameter 'uid>00000000000000060928' [ 536.159303][ T36] r8152-cfgselector 2-1: USB disconnect, device number 69 [ 536.375579][ T5845] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 536.450730][ T5330] input: failed to attach handler mousedev to device input17, error: -71 [ 536.555432][T12219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.559390][T12219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.587927][ T5845] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.587964][ T5845] usb 1-1: config 0 interface 0 has no altsetting 0 [ 536.588000][ T5845] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 536.588024][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.602596][ T5845] usb 1-1: config 0 descriptor?? [ 536.620296][T12221] FAULT_INJECTION: forcing a failure. [ 536.620296][T12221] name failslab, interval 1, probability 0, space 0, times 0 [ 536.620451][T12221] CPU: 0 UID: 0 PID: 12221 Comm: syz.3.2195 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 536.620475][T12221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 536.620488][T12221] Call Trace: [ 536.620496][T12221] [ 536.620505][T12221] dump_stack_lvl+0xe8/0x150 [ 536.620542][T12221] should_fail_ex+0x467/0x600 [ 536.620580][T12221] should_failslab+0xa8/0x100 [ 536.620616][T12221] __kmalloc_noprof+0xfe/0x780 [ 536.620650][T12221] ? sock_kmalloc+0xd6/0x160 [ 536.620676][T12221] ? sock_kmalloc+0xd6/0x160 [ 536.620709][T12221] sock_kmalloc+0xd6/0x160 [ 536.620738][T12221] af_alg_alloc_areq+0x8c/0x200 [ 536.620786][T12221] aead_recvmsg+0x465/0xd10 [ 536.620829][T12221] ? __pfx_aead_recvmsg+0x10/0x10 [ 536.620853][T12221] ? __lock_acquire+0x683/0x2ce0 [ 536.620880][T12221] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 536.620906][T12221] ? security_socket_recvmsg+0x7e/0x2c0 [ 536.620929][T12221] ? __pfx_aead_recvmsg+0x10/0x10 [ 536.620955][T12221] sock_recvmsg+0x196/0x1e0 [ 536.620980][T12221] ____sys_recvmsg+0x1f2/0x4b0 [ 536.621016][T12221] ? __pfx_____sys_recvmsg+0x10/0x10 [ 536.621057][T12221] ? import_iovec+0x73/0xa0 [ 536.621085][T12221] ___sys_recvmsg+0x213/0x5a0 [ 536.621117][T12221] ? __pfx____sys_recvmsg+0x10/0x10 [ 536.621146][T12221] ? __fget_files+0x2a/0x420 [ 536.621185][T12221] ? __fget_files+0x3a8/0x420 [ 536.621216][T12221] __x64_sys_recvmsg+0x1b4/0x290 [ 536.621246][T12221] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 536.621289][T12221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.621311][T12221] do_syscall_64+0x174/0x580 [ 536.621340][T12221] ? clear_bhb_loop+0x40/0x90 [ 536.621364][T12221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.621384][T12221] RIP: 0033:0x7fd4cc65e0d9 [ 536.621403][T12221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.621420][T12221] RSP: 002b:00007fd4ca8b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 536.621441][T12221] RAX: ffffffffffffffda RBX: 00007fd4cc8e5fa0 RCX: 00007fd4cc65e0d9 [ 536.621457][T12221] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 536.621470][T12221] RBP: 00007fd4ca8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 536.621483][T12221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.621496][T12221] R13: 00007fd4cc8e6038 R14: 00007fd4cc8e5fa0 R15: 00007ffc8d0b8c28 [ 536.621528][T12221] [ 537.034088][T12203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.034727][T12203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.066050][ T5845] usbhid 1-1:0.0: can't add hid device: -71 [ 537.066195][ T5845] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 537.098495][ T5845] usb 1-1: USB disconnect, device number 81 [ 537.247064][ T5330] usb 4-1: USB disconnect, device number 87 [ 537.861605][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 538.071855][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 538.087266][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 538.087624][T12231] netlink: 'syz.1.2201': attribute type 12 has an invalid length. [ 538.087665][T12231] netlink: 'syz.1.2201': attribute type 29 has an invalid length. [ 538.087684][T12231] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2201'. [ 538.177665][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 538.189258][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 538.705611][ T36] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 538.863959][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.864035][ T36] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 538.864059][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.915729][ T36] usb 4-1: config 0 descriptor?? [ 538.935745][ T36] pwc: Askey VC010 type 2 USB webcam detected. [ 539.025670][ T5728] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 539.139469][ T36] pwc: send_video_command error -71 [ 539.139488][ T36] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 539.139595][ T36] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 539.183426][ T36] usb 4-1: USB disconnect, device number 88 [ 539.195074][ T5728] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 539.195107][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 539.195127][ T5728] usb 2-1: Product: syz [ 539.195142][ T5728] usb 2-1: Manufacturer: syz [ 539.253627][ T5728] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input19 [ 539.334800][T12254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.335406][T12254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.604646][T12254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.605287][T12254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.685687][ T36] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 539.862596][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.863060][ T36] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 539.863086][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.915315][ T36] usb 4-1: config 0 descriptor?? [ 539.981428][ T36] pwc: Askey VC010 type 2 USB webcam detected. [ 540.015688][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 540.331881][ T36] pwc: recv_control_msg error -32 req 02 val 2b00 [ 540.346386][ T36] pwc: recv_control_msg error -32 req 02 val 2700 [ 540.350813][ T36] pwc: recv_control_msg error -32 req 02 val 2c00 [ 540.353635][ T36] pwc: recv_control_msg error -32 req 04 val 1000 [ 540.357327][ T36] pwc: recv_control_msg error -32 req 04 val 1300 [ 540.386489][ T36] pwc: recv_control_msg error -32 req 04 val 1400 [ 540.388652][ T36] pwc: recv_control_msg error -32 req 02 val 2000 [ 540.391271][ T36] pwc: recv_control_msg error -32 req 02 val 2100 [ 540.395034][ T36] pwc: recv_control_msg error -32 req 04 val 1500 [ 540.434717][ T36] pwc: recv_control_msg error -32 req 02 val 2500 [ 540.499420][ T5609] Bluetooth: hci5: command tx timeout [ 540.588769][T12261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.610320][T12261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.611230][ T5728] input: failed to attach handler mousedev to device input19, error: -71 [ 540.680373][ T36] pwc: recv_control_msg error -71 req 02 val 2600 [ 540.682339][ T36] pwc: recv_control_msg error -71 req 02 val 2900 [ 540.682863][ T36] pwc: recv_control_msg error -71 req 02 val 2800 [ 540.685001][ T36] pwc: recv_control_msg error -71 req 04 val 1100 [ 540.721457][ T36] pwc: recv_control_msg error -71 req 04 val 1200 [ 540.742835][ T36] pwc: Registered as video103. [ 540.764951][ T36] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 540.782006][ T5728] videodev: could not get a free minor [ 540.782037][ T5728] sur40 2-1:1.0: Unable to register video subdevice. [ 540.782144][ T5728] sur40 2-1:1.0: probe with driver sur40 failed with error -23 [ 540.840854][ T4949] ================================================================== [ 540.840871][ T4949] BUG: KASAN: slab-use-afte[ 540.840871][ T4949] BUG: KASAN: slab-use-after-free in sur40_open+0xa1/0x470 [ 540.840933][ T4949] Read of size 8 at addr ffff88803d7ce000 by task acpid/4949 [ 540.840948][ T4949] [ 540.840961][ T4949] CPU: 0 UID: 0 PID: 4949 Comm: acpid Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 540.840982][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 540.840993][ T4949] Call Trace: [ 540.841001][ T4949] [ 540.841010][ T4949] dump_stack_lvl+0xe8/0x150 [ 540.841040][ T4949] print_address_description+0x55/0x1e0 [ 540.841086][ T4949] ? sur40_open+0xa1/0x470 [ 540.841109][ T4949] print_report+0x58/0x70 [ 540.841133][ T4949] kasan_report+0x117/0x150 [ 540.841158][ T4949] ? sur40_open+0xa1/0x470 [ 540.841193][ T4949] sur40_open+0xa1/0x470 [ 540.841218][ T4949] input_open_device+0x1f9/0x3b0 [ 540.841253][ T4949] evdev_open+0x4d1/0x5f0 [ 540.841280][ T4949] chrdev_open+0x4dc/0x600 [ 540.841307][ T4949] ? __pfx_chrdev_open+0x10/0x10 [ 540.841332][ T4949] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 540.841365][ T4949] ? __pfx_chrdev_open+0x10/0x10 [ 540.841394][ T4949] do_dentry_open+0x849/0x1420 [ 540.841418][ T4949] vfs_open+0x3b/0x350 [ 540.841439][ T4949] ? path_openat+0x2e49/0x3850 [ 540.841462][ T4949] path_openat+0x2e60/0x3850 [ 540.841489][ T4949] ? kmem_cache_alloc_noprof+0x355/0x650 [ 540.841509][ T4949] ? __x64_sys_openat+0x138/0x170 [ 540.841527][ T4949] ? do_syscall_64+0x174/0x580 [ 540.841552][ T4949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.841581][ T4949] do_file_open+0x23e/0x4a0 [ 540.841602][ T4949] ? lockdep_hardirqs_on+0x7a/0x110 [ 540.841628][ T4949] ? __pfx_do_file_open+0x10/0x10 [ 540.841657][ T4949] ? alloc_fd+0x654/0x6d0 [ 540.841678][ T4949] do_sys_openat2+0x115/0x200 [ 540.841696][ T4949] ? __pfx_do_sys_openat2+0x10/0x10 [ 540.841715][ T4949] ? rcu_is_watching+0x15/0xb0 [ 540.841739][ T4949] __x64_sys_openat+0x138/0x170 [ 540.841760][ T4949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.841778][ T4949] do_syscall_64+0x174/0x580 [ 540.841800][ T4949] ? clear_bhb_loop+0x40/0x90 [ 540.841821][ T4949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.841839][ T4949] RIP: 0033:0x7fa080233407 [ 540.841858][ T4949] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 540.841878][ T4949] RSP: 002b:00007ffd901bb2f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 540.841898][ T4949] RAX: ffffffffffffffda RBX: 00007fa0801a9780 RCX: 00007fa080233407 [ 540.841912][ T4949] RDX: 0000000000080800 RSI: 00007ffd901bb500 RDI: ffffffffffffff9c [ 540.841926][ T4949] RBP: 00007ffd901bb500 R08: 0000000000000000 R09: 0000000000000000 [ 540.841939][ T4949] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040 [ 540.841951][ T4949] R13: 00007ffd901bb600 R14: 000055adc01927fe R15: 00007ffd901bb620 [ 540.841972][ T4949] [ 540.841997][ T4949] [ 540.842010][ T4949] Allocated by task 5728: [ 540.842028][ T4949] kasan_save_track+0x3e/0x80 [ 540.842047][ T4949] __kasan_kmalloc+0x93/0xb0 [ 540.842065][ T4949] __kmalloc_cache_noprof+0x3d2/0x6b0 [ 540.842083][ T4949] sur40_probe+0x16d/0xfb0 [ 540.842104][ T4949] usb_probe_interface+0x653/0xc60 [ 540.842132][ T4949] really_probe+0x254/0xae0 [ 540.842157][ T4949] __driver_probe_device+0x1e8/0x360 [ 540.842188][ T4949] driver_probe_device+0x4f/0x240 [ 540.842212][ T4949] __device_attach_driver+0x270/0x410 [ 540.842236][ T4949] bus_for_each_drv+0x25b/0x2f0 [ 540.842254][ T4949] __device_attach+0x2c7/0x450 [ 540.842276][ T4949] device_initial_probe+0xa1/0xd0 [ 540.842299][ T4949] bus_probe_device+0x12d/0x220 [ 540.842318][ T4949] device_add+0x7d7/0xb80 [ 540.842343][ T4949] usb_set_configuration+0x1ad8/0x2180 [ 540.842362][ T4949] usb_generic_driver_probe+0x8d/0x150 [ 540.842396][ T4949] usb_probe_device+0x1c3/0x3b0 [ 540.842416][ T4949] really_probe+0x254/0xae0 [ 540.842440][ T4949] __driver_probe_device+0x1e8/0x360 [ 540.842462][ T4949] driver_probe_device+0x4f/0x240 [ 540.842486][ T4949] __device_attach_driver+0x270/0x410 [ 540.842510][ T4949] bus_for_each_drv+0x25b/0x2f0 [ 540.842528][ T4949] __device_attach+0x2c7/0x450 [ 540.842551][ T4949] device_initial_probe+0xa1/0xd0 [ 540.842574][ T4949] bus_probe_device+0x12d/0x220 [ 540.842592][ T4949] device_add+0x7d7/0xb80 [ 540.842624][ T4949] usb_new_device+0x98d/0x1610 [ 540.842643][ T4949] hub_event+0x28cf/0x4cf0 [ 540.842660][ T4949] process_scheduled_works+0xa8e/0x14e0 [ 540.842681][ T4949] worker_thread+0xa47/0xfb0 [ 540.842700][ T4949] kthread+0x388/0x470 [ 540.842729][ T4949] ret_from_fork+0x514/0xb70 [ 540.842762][ T4949] ret_from_fork_asm+0x1a/0x30 [ 540.842779][ T4949] [ 540.842784][ T4949] Freed by task 5728: [ 540.842794][ T4949] kasan_save_track+0x3e/0x80 [ 540.842811][ T4949] kasan_save_free_info+0x40/0x50 [ 540.842833][ T4949] __kasan_slab_free+0x5c/0x80 [ 540.842851][ T4949] kfree+0x1c5/0x6c0 [ 540.842865][ T4949] sur40_probe+0x923/0xfb0 [ 540.842885][ T4949] usb_probe_interface+0x653/0xc60 [ 540.842906][ T4949] really_probe+0x254/0xae0 [ 540.842930][ T4949] __driver_probe_device+0x1e8/0x360 [ 540.842953][ T4949] driver_probe_device+0x4f/0x240 [ 540.842977][ T4949] __device_attach_driver+0x270/0x410 [ 540.843002][ T4949] bus_for_each_drv+0x25b/0x2f0 [ 540.843020][ T4949] __device_attach+0x2c7/0x450 [ 540.843041][ T4949] device_initial_probe+0xa1/0xd0 [ 540.843064][ T4949] bus_probe_device+0x12d/0x220 [ 540.843081][ T4949] device_add+0x7d7/0xb80 [ 540.843107][ T4949] usb_set_configuration+0x1ad8/0x2180 [ 540.843127][ T4949] usb_generic_driver_probe+0x8d/0x150 [ 540.843144][ T4949] usb_probe_device+0x1c3/0x3b0 [ 540.843164][ T4949] really_probe+0x254/0xae0 [ 540.843195][ T4949] __driver_probe_device+0x1e8/0x360 [ 540.843218][ T4949] driver_probe_device+0x4f/0x240 [ 540.843243][ T4949] __device_attach_driver+0x270/0x410 [ 540.843283][ T4949] bus_for_each_drv+0x25b/0x2f0 [ 540.843299][ T4949] __device_attach+0x2c7/0x450 [ 540.843321][ T4949] device_initial_probe+0xa1/0xd0 [ 540.843345][ T4949] bus_probe_device+0x12d/0x220 [ 540.843362][ T4949] device_add+0x7d7/0xb80 [ 540.843380][ T4949] usb_new_device+0x98d/0x1610 [ 540.843393][ T4949] hub_event+0x28cf/0x4cf0 [ 540.843409][ T4949] process_scheduled_works+0xa8e/0x14e0 [ 540.843429][ T4949] worker_thread+0xa47/0xfb0 [ 540.843448][ T4949] kthread+0x388/0x470 [ 540.843469][ T4949] ret_from_fork+0x514/0xb70 [ 540.843493][ T4949] ret_from_fork_asm+0x1a/0x30 [ 540.843510][ T4949] [ 540.843515][ T4949] The buggy address belongs to the object at ffff88803d7ce000 [ 540.843515][ T4949] which belongs to the cache kmalloc-4k of size 4096 [ 540.843533][ T4949] The buggy address is located 0 bytes inside of [ 540.843533][ T4949] freed 4096-byte region [ffff88803d7ce000, ffff88803d7cf000) [ 540.843553][ T4949] [ 540.843559][ T4949] The buggy address belongs to the physical page: [ 540.843576][ T4949] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3d7c8 [ 540.843668][ T4949] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 540.843684][ T4949] flags: 0x80000000000040(head|node=0|zone=1) [ 540.843705][ T4949] page_type: f5(slab) [ 540.843756][ T4949] raw: 0080000000000040 ffff88813ffb3140 dead000000000122 0000000000000000 [ 540.843774][ T4949] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 540.843792][ T4949] head: 0080000000000040 ffff88813ffb3140 dead000000000122 0000000000000000 [ 540.843808][ T4949] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 540.843826][ T4949] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 540.843842][ T4949] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 540.843853][ T4949] page dumped because: kasan: bad access detected [ 540.843867][ T4949] page_owner tracks the page as allocated [ 540.843875][ T4949] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5728, tgid 5728 (kworker/1:4), ts 539249019821, free_ts 538987462862 [ 540.843907][ T4949] post_alloc_hook+0x1f9/0x250 [ 540.843925][ T4949] get_page_from_freelist+0x262a/0x26a0 [ 540.843945][ T4949] __alloc_frozen_pages_noprof+0x18d/0x380 [ 540.843965][ T4949] allocate_slab+0x79/0x5e0 [ 540.843988][ T4949] refill_objects+0x2d8/0x350 [ 540.844010][ T4949] __pcs_replace_empty_main+0x330/0x690 [ 540.844033][ T4949] __kmalloc_cache_noprof+0x468/0x6b0 [ 540.844051][ T4949] sur40_probe+0x16d/0xfb0 [ 540.844073][ T4949] usb_probe_interface+0x653/0xc60 [ 540.844095][ T4949] really_probe+0x254/0xae0 [ 540.844119][ T4949] __driver_probe_device+0x1e8/0x360 [ 540.844142][ T4949] driver_probe_device+0x4f/0x240 [ 540.844166][ T4949] __device_attach_driver+0x270/0x410 [ 540.844196][ T4949] bus_for_each_drv+0x25b/0x2f0 [ 540.844214][ T4949] __device_attach+0x2c7/0x450 [ 540.844236][ T4949] device_initial_probe+0xa1/0xd0 [ 540.844259][ T4949] page last free pid 12249 tgid 12249 stack trace: [ 540.844272][ T4949] __free_frozen_pages+0x10e7/0x11c0 [ 540.844290][ T4949] __slab_free+0x252/0x2a0 [ 540.844307][ T4949] qlist_free_all+0x99/0x100 [ 540.844323][ T4949] kasan_quarantine_reduce+0x148/0x160 [ 540.844340][ T4949] __kasan_slab_alloc+0x22/0x80 [ 540.844359][ T4949] kmem_cache_alloc_noprof+0x355/0x650 [ 540.844376][ T4949] __anon_vma_prepare+0xc3/0x4e0 [ 540.844393][ T4949] do_pte_missing+0x1d2a/0x28f0 [ 540.844414][ T4949] handle_mm_fault+0xd28/0x13f0 [ 540.844431][ T4949] do_user_addr_fault+0xa4d/0x1340 [ 540.844449][ T4949] exc_page_fault+0x6a/0xc0 [ 540.844471][ T4949] asm_exc_page_fault+0x26/0x30 [ 540.844489][ T4949] [ 540.844494][ T4949] Memory state around the buggy address: [ 540.844514][ T4949] ffff88803d7cdf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 540.844528][ T4949] ffff88803d7cdf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 540.844541][ T4949] >ffff88803d7ce000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 540.844551][ T4949] ^ [ 540.844561][ T4949] ffff88803d7ce080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 540.844574][ T4949] ffff88803d7ce100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 540.844584][ T4949] ================================================================== [ 540.856802][ T4949] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 540.856825][ T4949] CPU: 0 UID: 0 PID: 4949 Comm: acpid Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 540.856849][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 540.856862][ T4949] Call Trace: [ 540.856870][ T4949] [ 540.856878][ T4949] vpanic+0x56c/0xa60 [ 540.856903][ T4949] ? rcu_is_watching+0x15/0xb0 [ 540.856927][ T4949] ? __pfx_vpanic+0x10/0x10 [ 540.856949][ T4949] panic+0xc5/0xd0 [ 540.856965][ T4949] ? __pfx_panic+0x10/0x10 [ 540.856983][ T4949] ? preempt_schedule_thunk+0x16/0x40 [ 540.857015][ T4949] ? preempt_schedule_thunk+0x16/0x40 [ 540.857036][ T4949] ? sur40_open+0xa1/0x470 [ 540.857168][ T4949] check_panic_on_warn+0x89/0xb0 [ 540.857204][ T4949] ? sur40_open+0xa1/0x470 [ 540.857231][ T4949] end_report+0x73/0x170 [ 540.857255][ T4949] ? sur40_open+0xa1/0x470 [ 540.857277][ T4949] kasan_report+0x128/0x150 [ 540.857299][ T4949] ? sur40_open+0xa1/0x470 [ 540.857326][ T4949] sur40_open+0xa1/0x470 [ 540.857350][ T4949] input_open_device+0x1f9/0x3b0 [ 540.857379][ T4949] evdev_open+0x4d1/0x5f0 [ 540.857401][ T4949] chrdev_open+0x4dc/0x600 [ 540.857431][ T4949] ? __pfx_chrdev_open+0x10/0x10 [ 540.857455][ T4949] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 540.857481][ T4949] ? __pfx_chrdev_open+0x10/0x10 [ 540.857501][ T4949] do_dentry_open+0x849/0x1420 [ 540.857521][ T4949] vfs_open+0x3b/0x350 [ 540.857535][ T4949] ? path_openat+0x2e49/0x3850 [ 540.857737][ T4949] path_openat+0x2e60/0x3850 [ 540.857784][ T4949] ? kmem_cache_alloc_noprof+0x355/0x650 [ 540.857804][ T4949] ? __x64_sys_openat+0x138/0x170 [ 540.857822][ T4949] ? do_syscall_64+0x174/0x580 [ 540.857887][ T4949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.857917][ T4949] do_file_open+0x23e/0x4a0 [ 540.857940][ T4949] ? lockdep_hardirqs_on+0x7a/0x110 [ 540.857966][ T4949] ? __pfx_do_file_open+0x10/0x10 [ 540.858000][ T4949] ? alloc_fd+0x654/0x6d0 [ 540.858028][ T4949] do_sys_openat2+0x115/0x200 [ 540.858049][ T4949] ? __pfx_do_sys_openat2+0x10/0x10 [ 540.858070][ T4949] ? rcu_is_watching+0x15/0xb0 [ 540.858098][ T4949] __x64_sys_openat+0x138/0x170 [ 540.858118][ T4949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.858137][ T4949] do_syscall_64+0x174/0x580 [ 540.858162][ T4949] ? clear_bhb_loop+0x40/0x90 [ 540.858183][ T4949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.858202][ T4949] RIP: 0033:0x7fa080233407 [ 540.858222][ T4949] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 540.858239][ T4949] RSP: 002b:00007ffd901bb2f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 540.858261][ T4949] RAX: ffffffffffffffda RBX: 00007fa0801a9780 RCX: 00007fa080233407 [ 540.858276][ T4949] RDX: 0000000000080800 RSI: 00007ffd901bb500 RDI: ffffffffffffff9c [ 540.858289][ T4949] RBP: 00007ffd901bb500 R08: 0000000000000000 R09: 0000000000000000 [ 540.858302][ T4949] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040 [ 540.858313][ T4949] R13: 00007ffd901bb600 R14: 000055adc01927fe R15: 00007ffd901bb620 [ 540.858334][ T4949] [ 540.858733][ T4949] Kernel Offset: disabled