last executing test programs: 10.710930113s ago: executing program 1 (id=1264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000100)=0x8) lseek(0xffffffffffffffff, 0x851, 0x1) 9.500250601s ago: executing program 3 (id=1268): openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.358397313s ago: executing program 1 (id=1269): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) 7.44874598s ago: executing program 3 (id=1272): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000040d80402c000000000000109022400010000200b0904000001030002000921fd7f000122e30109058103"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="12010000000000402509668000000000000109022400010000100309040000010300020009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x90) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000a09457"], 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e000000110081", 0x7}], 0x1}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c910", @ANYRESDEC=0x0], 0x0) 7.252071612s ago: executing program 1 (id=1273): syz_open_procfs(0x0, &(0x7f00000005c0)='environ\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) llistxattr(0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 7.081684007s ago: executing program 1 (id=1275): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x0, 0x0}) fremovexattr(r0, &(0x7f0000000100)=@known='system.posix_acl_default\x00') fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) (async) r2 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000480)='\x00', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r5, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r5, &(0x7f00000023c0)={0xa0, 0x0, r6, {{0x100004, 0x800001, 0x3, 0xfff, 0x1000, 0x7, {0x2, 0x3, 0x57, 0x5, 0xffffeffffffffe00, 0xffffffffffdffffa, 0x7, 0xfffffe6a, 0x3, 0x6000, 0x11001, 0x0, r7, 0x22, 0x41}}, {0x0, 0x10}}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001b00), 0x400, &(0x7f0000002480)={'trans=virtio,', {[{@cache_mmap}, {@afid={'afid', 0x3d, 0xd38}}, {@cache_none}, {@dfltuid}, {@cache_loose}, {@loose}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '^'}}, {@fowner_lt}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@hash}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x69, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r10 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e17fb55ae6f1221bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdb", 0xe6, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r9, r10}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 6.609754505s ago: executing program 1 (id=1278): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x1e, 0x4, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e21, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18}, 0x20002880) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0xfffffffd, 0x30314742, 0x1, @discrete={0x101, 0x1ff}}) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x8000000) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="cc0000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000244e2000014e2104000200800087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba4100000000000007000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003003792f23802afecd203020000000004000000000000000a0010"], 0xcc}}, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRES16=r4], 0xf8}, 0x1, 0x0, 0x0, 0x20004054}, 0x4000) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x2) connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 5.943820559s ago: executing program 0 (id=1279): r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002400010027bd7000000000000a06004000000000000000080099d70006c43c8591a5d04beca4f7b6cafa3280cf651bff60d46810601636ae8b77f8e327d54bf4439e2fddc792b250439a4fcfd81e3157612478017527dd638a91e107e6aff2e161449c160f6c149acafeec94fa80e3446fd3f7afbef8b9ead797"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x40084) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r7, 0x3b86, &(0x7f0000000340)={0x18, r9, 0xffffffffffffffff, 0x1c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x400) r10 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r10, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1}, 0xfd}, 0x18) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x186, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) pipe2$watch_queue(&(0x7f0000000300), 0x80) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) 5.582307468s ago: executing program 0 (id=1280): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x20) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x10, 0x8}, {0xa1b, 0x8211, 0x9}}}}, 0x15) setsockopt$sock_int(r4, 0x28, 0x1, 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@random={'system.', ',\'!.^\x00'}, &(0x7f0000000180)='wlan0\x00', 0x6, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40010041) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0x8, 0x2) getdents(0xffffffffffffffff, 0x0, 0x51) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f0000000380)=""/232, &(0x7f0000000480)=0xe8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 5.40535711s ago: executing program 2 (id=1281): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20042) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400000) r2 = io_uring_setup(0xbb8, &(0x7f0000000280)={0x0, 0xdc48, 0x2, 0xfffffffd, 0x345}) io_uring_enter(r2, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) mq_open(&(0x7f0000002900)='ip6gre0\x00', 0x40, 0xa0, &(0x7f0000002940)={0x9, 0x10001, 0x401, 0xb98e}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff00000000711033000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80000, 0x2e0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x38) sendfile(r6, r5, 0x0, 0x80000000a) r7 = dup(r4) ioctl$KIOCSOUND(r7, 0x4b2f, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000003cc0)={&(0x7f0000000380)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6}, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000003a40)=[{&(0x7f00000025c0)="47ce163012e91a0b48d851b46301cee2d32ccadce63b01a327bf0dfcd70d2ab60a09e8329f8c85bebaa630182eab2849df2906b219e774533120f1dffe09113049d54fc51971f327ef8c405e7373b7935e3cf0779fb5a865e47701efb30aa06e581d4df14557b98ddde5bf9672cc6aabfab9364fbd9f559ecf7830909b0698318900a3d271159d81e283ea3f9565fb9039abab80c9e53c5cb6739f032e105085140c573e1817d3d7f7703e85b3", 0xad}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000003680)}, {&(0x7f0000003780)="0c37f4b500172042ffc250d7e1afaeb8cd6b35f7fbcff35c6f9895eb99f1b241cd5ce67f67f61747bb1c5cc4c42561e6645d457d83e420c1aaeffa94d8f07cacd83f7c64df50ee7491d3ba2f8cb9141c78da9ae200", 0x55}, {&(0x7f0000003800)="835b693280febd163381f7e86366338b4857fd09bfec026cc03501e353c231196f4e49056e7ebdc07f8df9fb01be0ad3b8b5ba7b36f75c40e7ed141873c7ca85d9a144382bdf40a0ade9c795f7ce17e3d7be0f6326cc9efdc881d691912f08ad3e5d172770b9621e4a07687391d11e83c28529ca41a04955cdc5c6cd56b34a20c156e2895c679fc9d2decfb9c20f7b2b8144ee0d5e5cc6af1c3027c61591bc2d9afab8e71a39c9ef027fa0b1e7ae00fc1a11a7ea8fab3ff549f1e2233048c02f1f64aea8440c6e34b1f80d0a46d4f4aca642f6dd5e7627b1e38e728dd7a4a6febd19714ecd065b627380493c12004b0d16", 0xf1}, {&(0x7f0000003900)="b8f3b778b8afe5ed2431a375c35856cb028b13c7858c53e1e4e3d43c8cc7d25a1316e37a05fc98645d000f9e41dffe72af4e6d7c7057d5616ac831ae9570666d9bff6a987c292cc122ec887158736c", 0x4f}, {&(0x7f0000003980)="271ae18bafe743dd4897999cc29ea9b5dabc", 0x12}, {&(0x7f00000039c0)}, {&(0x7f0000003a00)}], 0x9, &(0x7f0000003b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x4008800) ioctl$SNDCTL_SEQ_RESETSAMPLES(r3, 0x40045109, &(0x7f0000000200)=0x80000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x50, r10, 0x403, 0xf0bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x61}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x309}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x10) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x200, &(0x7f0000000480)) r12 = open_tree(r7, &(0x7f0000000100)='./file0\x00', 0x8000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r12, 0x80585414, &(0x7f0000003d00)) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000080)=0x5) 5.103463384s ago: executing program 0 (id=1282): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000280)={0x2, 0x24e23, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x40001, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000005800)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) 4.85041288s ago: executing program 2 (id=1283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r7], 0x5c}}, 0x0) r8 = getpgrp(0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000040)=0x100000000005) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x68}}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002300090025bd7000ffd3df2501000000080001007f00000108000b00", @ANYRES32=0x0, @ANYBLOB="f19d1486bc4ec3778d7ab2794ac047ee698a11380801bbf57e8edd1ef321ee08fc3f1062b9bbd58065208950d72bedd52bc9eca8ffc31e2dc187dca00222b751bac1eedf8fca23ec782c1822aa36171a9f1ecb2e7c273475f0dc71bbbbf79fd0c9c68618cdbc0600000001f85d247d31ee95b251d5fc290b6d835b38d6aa68caf0fe8556760ff236466155d6b4611d5f7663be2f82552b6bcf718783cdaee431bb0a0ea955830600a613c7210736fe7c25e903df53a590f0b4c880ba9034fa50fb208b241b0c0c771b024371ecbf6ca1ae190263a1f6"], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20004080}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="06000000", @ANYRES16=r2, @ANYBLOB="000227bd7000fedbdf251b0000000c000600020000000000000008000300", @ANYRES32=r7, @ANYBLOB="0c000600030000000300000008000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES8, @ANYRES64], 0x44}, 0x1, 0x0, 0x0, 0x20000055}, 0x91) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[], 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000d0000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31c16886}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @private}, &(0x7f0000000040)=0xc) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r13, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.679134036s ago: executing program 3 (id=1284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) close_range(r3, r4, 0x0) 4.545096397s ago: executing program 0 (id=1285): syz_open_procfs(0x0, &(0x7f00000005c0)='environ\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 4.124875991s ago: executing program 0 (id=1286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) (fail_nth: 2) 3.594267326s ago: executing program 3 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DST={0x8, 0x1, @local}, @RTA_IIF={0x8}]}, 0x2c}}, 0x20000050) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}]}]}, 0x30}}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.854736494s ago: executing program 4 (id=1289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r5, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r5, &(0x7f00000023c0)={0xa0, 0x0, r6, {{0x100004, 0x800001, 0x3, 0xfff, 0x1000, 0x7, {0x2, 0x3, 0x57, 0x5, 0xffffeffffffffe00, 0xffffffffffdffffa, 0x7, 0xfffffe6a, 0x3, 0x6000, 0x11001, 0x0, r7, 0x22, 0x41}}, {0x0, 0x10}}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001b00), 0x400, &(0x7f0000002480)={'trans=virtio,', {[{@cache_mmap}, {@afid={'afid', 0x3d, 0xd38}}, {@cache_none}, {@dfltuid}, {@cache_loose}, {@loose}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '^'}}, {@fowner_lt}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@hash}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x69, 0x8}, @initr0, @exit]}, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r10 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e17fb55ae6f1221bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdb", 0xe6, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r9, r10}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 2.453760243s ago: executing program 4 (id=1290): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2000c885) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r6) sendmsg$NFC_CMD_DISABLE_SE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000400) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd700002dcdf000000080002000000", @ANYRES32=r5, @ANYBLOB="05002b0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 2.389898165s ago: executing program 2 (id=1291): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f026, 0x4}) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x7, 0x3a, 0x1000, 0x4003a, 0x0, 0xfffffff8, 0xffffffff}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10b001, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind:N-', @ANYRESDEC]) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000040)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x9905, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) 2.297316443s ago: executing program 3 (id=1292): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) process_vm_writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000100)=""/27, 0x1b}, {&(0x7f00000002c0)=""/104, 0x68}], 0x3, &(0x7f0000000640)=[{&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000400)=""/190, 0xbe}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000580)=""/186, 0xba}], 0x4, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000002980)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000280)={r6, 0x2, 0x1ff, 0x0, &(0x7f0000000200)}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) 2.17403774s ago: executing program 4 (id=1293): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20042) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400000) r2 = io_uring_setup(0xbb8, &(0x7f0000000280)={0x0, 0xdc48, 0x2, 0xfffffffd, 0x345}) io_uring_enter(r2, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) mq_open(&(0x7f0000002900)='ip6gre0\x00', 0x40, 0xa0, &(0x7f0000002940)={0x9, 0x10001, 0x401, 0xb98e}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff00000000711033000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80000, 0x2e0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x38) sendfile(r6, r5, 0x0, 0x80000000a) r7 = dup(r4) ioctl$KIOCSOUND(r7, 0x4b2f, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000003cc0)={&(0x7f0000000380)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6}, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000003a40)=[{&(0x7f00000025c0)="47ce163012e91a0b48d851b46301cee2d32ccadce63b01a327bf0dfcd70d2ab60a09e8329f8c85bebaa630182eab2849df2906b219e774533120f1dffe09113049d54fc51971f327ef8c405e7373b7935e3cf0779fb5a865e47701efb30aa06e581d4df14557b98ddde5bf9672cc6aabfab9364fbd9f559ecf7830909b0698318900a3d271159d81e283ea3f9565fb9039abab80c9e53c5cb6739f032e105085140c573e1817d3d7f7703e85b3", 0xad}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000003680)}, {&(0x7f0000003780)="0c37f4b500172042ffc250d7e1afaeb8cd6b35f7fbcff35c6f9895eb99f1b241cd5ce67f67f61747bb1c5cc4c42561e6645d457d83e420c1aaeffa94d8f07cacd83f7c64df50ee7491d3ba2f8cb9141c78da9ae200", 0x55}, {&(0x7f0000003800)="835b693280febd163381f7e86366338b4857fd09bfec026cc03501e353c231196f4e49056e7ebdc07f8df9fb01be0ad3b8b5ba7b36f75c40e7ed141873c7ca85d9a144382bdf40a0ade9c795f7ce17e3d7be0f6326cc9efdc881d691912f08ad3e5d172770b9621e4a07687391d11e83c28529ca41a04955cdc5c6cd56b34a20c156e2895c679fc9d2decfb9c20f7b2b8144ee0d5e5cc6af1c3027c61591bc2d9afab8e71a39c9ef027fa0b1e7ae00fc1a11a7ea8fab3ff549f1e2233048c02f1f64aea8440c6e34b1f80d0a46d4f4aca642f6dd5e7627b1e38e728dd7a4a6febd19714ecd065b627380493c12004b0d16", 0xf1}, {&(0x7f0000003900)="b8f3b778b8afe5ed2431a375c35856cb028b13c7858c53e1e4e3d43c8cc7d25a1316e37a05fc98645d000f9e41dffe72af4e6d7c7057d5616ac831ae9570666d9bff6a987c292cc122ec887158736c", 0x4f}, {&(0x7f0000003980)="271ae18bafe743dd4897999cc29ea9b5dabc", 0x12}, {&(0x7f00000039c0)}, {&(0x7f0000003a00)}], 0x9, &(0x7f0000003b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x4008800) ioctl$SNDCTL_SEQ_RESETSAMPLES(r3, 0x40045109, &(0x7f0000000200)=0x80000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x50, r10, 0x403, 0xf0bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x61}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x309}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x10) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x200, &(0x7f0000000480)) r12 = open_tree(r7, &(0x7f0000000100)='./file0\x00', 0x8000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r12, 0x80585414, &(0x7f0000003d00)) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000080)=0x5) 2.108732246s ago: executing program 1 (id=1294): setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, 0x0) shmctl$SHM_LOCK(r0, 0xb) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x5319) 1.025914616s ago: executing program 3 (id=1295): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000040d80402c000000000000109022400010000200b0904000001030002000921fd7f000122e30109058103"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="12010000000000402509668000000000000109022400010000100309040000010300020009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x90) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000a09457"], 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e000000110081", 0x7}], 0x1}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c910", @ANYRESDEC=0x0], 0x0) 1.02463028s ago: executing program 4 (id=1296): read$FUSE(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.024200388s ago: executing program 2 (id=1297): syz_open_procfs(0x0, &(0x7f00000005c0)='environ\x00') rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 713.325384ms ago: executing program 2 (id=1298): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x903, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x7}}}]}, 0x3c}}, 0x4000010) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071100e000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xd}, 0x94) listen(r4, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f0000000100)=""/22, 0x16}], 0x2, 0x7, 0x81) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x11001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6008009}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) syz_io_uring_setup(0x437d, &(0x7f0000000580)={0x0, 0x8b2, 0x2000, 0x400, 0x193}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000096231306e53f070c00c4df85e63ed5d1af108100002a9000070900be0083"], 0x0}, 0x0) syz_usb_ep_write(r6, 0x81, 0x2, &(0x7f0000000000)='BB') ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) 711.929279ms ago: executing program 4 (id=1299): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_io_uring_complete(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$dmmidi(0x0, 0x203, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) pread64(r1, &(0x7f0000000400)=""/4096, 0x1000, 0xd60c) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00@\x00', @ANYRES16=r4, @ANYBLOB="a183ffffffff000000000500000008000300", @ANYRES32, @ANYBLOB="0c009900ff0f000055000000"], 0x28}}, 0x4c044) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r3) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', 0x0, &(0x7f00000003c0)='q\xa9', 0x0) r5 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 4 (id=1300): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_io_uring_complete(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$dmmidi(0x0, 0x203, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) pread64(r1, &(0x7f0000000400)=""/4096, 0x1000, 0xd60c) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r3, 0x0, 0x4c044) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r3) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', 0x0, &(0x7f00000003c0)='q\xa9', 0x0) r4 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) kernel console output (not intermixed with test programs): umber 40 [ 390.693004][ T6473] usb 1-1: config 0 descriptor?? [ 390.758624][ T5706] usb 3-1: USB disconnect, device number 34 [ 391.199355][ T6473] usbhid 1-1:0.0: can't add hid device: -71 [ 391.199584][ T6473] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 391.250762][ T6473] usb 1-1: USB disconnect, device number 28 [ 391.394357][ T5714] usb 4-1: USB disconnect, device number 40 [ 391.621020][ T9015] FAULT_INJECTION: forcing a failure. [ 391.621020][ T9015] name failslab, interval 1, probability 0, space 0, times 0 [ 391.621058][ T9015] CPU: 1 UID: 0 PID: 9015 Comm: syz.4.994 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 391.621081][ T9015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 391.621093][ T9015] Call Trace: [ 391.621101][ T9015] [ 391.621108][ T9015] dump_stack_lvl+0xe8/0x150 [ 391.621140][ T9015] should_fail_ex+0x46b/0x600 [ 391.621178][ T9015] should_failslab+0xa8/0x100 [ 391.621205][ T9015] __kmalloc_noprof+0xdf/0x7b0 [ 391.621229][ T9015] ? tomoyo_encode+0x28b/0x550 [ 391.621267][ T9015] tomoyo_encode+0x28b/0x550 [ 391.621302][ T9015] tomoyo_realpath_from_path+0x58d/0x5d0 [ 391.621342][ T9015] ? tomoyo_path_number_perm+0x219/0x630 [ 391.621369][ T9015] tomoyo_path_number_perm+0x246/0x630 [ 391.621398][ T9015] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 391.621423][ T9015] ? __lock_acquire+0x6b5/0x2cf0 [ 391.621456][ T9015] ? do_raw_spin_lock+0x12b/0x2f0 [ 391.621514][ T9015] ? __fget_files+0x2a/0x420 [ 391.621538][ T9015] ? __fget_files+0x2a/0x420 [ 391.621555][ T9015] ? __fget_files+0x3a6/0x420 [ 391.621573][ T9015] ? __fget_files+0x2a/0x420 [ 391.621593][ T9015] security_file_ioctl+0xc3/0x2a0 [ 391.621623][ T9015] __se_sys_ioctl+0x47/0x170 [ 391.621646][ T9015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.621669][ T9015] do_syscall_64+0x15f/0xf80 [ 391.621690][ T9015] ? trace_irq_disable+0x3b/0x140 [ 391.621715][ T9015] ? clear_bhb_loop+0x40/0x90 [ 391.621747][ T9015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.621766][ T9015] RIP: 0033:0x7f6d2f56cdd9 [ 391.621787][ T9015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.621804][ T9015] RSP: 002b:00007f6d2d7be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.621827][ T9015] RAX: ffffffffffffffda RBX: 00007f6d2f7e5fa0 RCX: 00007f6d2f56cdd9 [ 391.621841][ T9015] RDX: 0000200000002340 RSI: 0000000081785501 RDI: 0000000000000003 [ 391.621854][ T9015] RBP: 00007f6d2d7be090 R08: 0000000000000000 R09: 0000000000000000 [ 391.621867][ T9015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.621880][ T9015] R13: 00007f6d2f7e6038 R14: 00007f6d2f7e5fa0 R15: 00007fffd8f85be8 [ 391.621916][ T9015] [ 391.753734][ T9015] ERROR: Out of memory at tomoyo_realpath_from_path. [ 391.992630][ T6473] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 392.877324][ T6473] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 392.877358][ T6473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.927324][ T6473] usb 1-1: config 0 descriptor?? [ 392.953506][ T6473] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 393.152998][ T6473] gp8psk: usb in 128 operation failed. [ 393.155088][ T6473] gp8psk: usb in 137 operation failed. [ 393.155107][ T6473] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 393.155151][ T6473] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 393.223186][ T6473] usb 1-1: USB disconnect, device number 29 [ 393.517796][ T9030] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 393.901676][ T9032] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1000'. [ 393.949179][ T9042] FAULT_INJECTION: forcing a failure. [ 393.949179][ T9042] name failslab, interval 1, probability 0, space 0, times 0 [ 393.949216][ T9042] CPU: 1 UID: 0 PID: 9042 Comm: syz.0.1002 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 393.949237][ T9042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 393.949247][ T9042] Call Trace: [ 393.949254][ T9042] [ 393.949263][ T9042] dump_stack_lvl+0xe8/0x150 [ 393.949294][ T9042] should_fail_ex+0x46b/0x600 [ 393.949338][ T9042] should_failslab+0xa8/0x100 [ 393.949362][ T9042] __kmalloc_noprof+0xdf/0x7b0 [ 393.949384][ T9042] ? tomoyo_encode+0x28b/0x550 [ 393.949421][ T9042] tomoyo_encode+0x28b/0x550 [ 393.949456][ T9042] tomoyo_realpath_from_path+0x58d/0x5d0 [ 393.949495][ T9042] ? tomoyo_path_number_perm+0x219/0x630 [ 393.949522][ T9042] tomoyo_path_number_perm+0x246/0x630 [ 393.949553][ T9042] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 393.949578][ T9042] ? __lock_acquire+0x6b5/0x2cf0 [ 393.949608][ T9042] ? do_raw_spin_lock+0x12b/0x2f0 [ 393.949666][ T9042] ? __fget_files+0x2a/0x420 [ 393.949688][ T9042] ? __fget_files+0x2a/0x420 [ 393.949704][ T9042] ? __fget_files+0x3a6/0x420 [ 393.949721][ T9042] ? __fget_files+0x2a/0x420 [ 393.949743][ T9042] security_file_ioctl+0xc3/0x2a0 [ 393.949773][ T9042] __se_sys_ioctl+0x47/0x170 [ 393.949798][ T9042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.949820][ T9042] do_syscall_64+0x15f/0xf80 [ 393.949841][ T9042] ? trace_irq_disable+0x3b/0x140 [ 393.949862][ T9042] ? clear_bhb_loop+0x40/0x90 [ 393.949886][ T9042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.949905][ T9042] RIP: 0033:0x7f429c97cdd9 [ 393.949925][ T9042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.949953][ T9042] RSP: 002b:00007f429abce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.949977][ T9042] RAX: ffffffffffffffda RBX: 00007f429cbf5fa0 RCX: 00007f429c97cdd9 [ 393.949991][ T9042] RDX: 00002000000001c0 RSI: 0000000000005393 RDI: 0000000000000003 [ 393.950004][ T9042] RBP: 00007f429abce090 R08: 0000000000000000 R09: 0000000000000000 [ 393.950017][ T9042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.950030][ T9042] R13: 00007f429cbf6038 R14: 00007f429cbf5fa0 R15: 00007ffd475c7178 [ 393.950065][ T9042] [ 393.950407][ T9042] ERROR: Out of memory at tomoyo_realpath_from_path. [ 394.462845][ T9053] FAULT_INJECTION: forcing a failure. [ 394.462845][ T9053] name failslab, interval 1, probability 0, space 0, times 0 [ 394.462882][ T9053] CPU: 1 UID: 0 PID: 9053 Comm: syz.2.1005 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 394.462907][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 394.462919][ T9053] Call Trace: [ 394.462936][ T9053] [ 394.462945][ T9053] dump_stack_lvl+0xe8/0x150 [ 394.462976][ T9053] should_fail_ex+0x46b/0x600 [ 394.463016][ T9053] should_failslab+0xa8/0x100 [ 394.463044][ T9053] kmem_cache_alloc_noprof+0x87/0x680 [ 394.463073][ T9053] ? io_submit_one+0x130/0x14c0 [ 394.463104][ T9053] io_submit_one+0x130/0x14c0 [ 394.463134][ T9053] ? irqentry_exit+0x218/0x730 [ 394.463158][ T9053] ? lockdep_hardirqs_on+0x7a/0x110 [ 394.463181][ T9053] ? irqentry_exit+0x218/0x730 [ 394.463210][ T9053] ? __pfx_io_submit_one+0x10/0x10 [ 394.463237][ T9053] ? __might_fault+0xaf/0x130 [ 394.463275][ T9053] ? __might_fault+0xaf/0x130 [ 394.463303][ T9053] __se_sys_io_submit+0x195/0x340 [ 394.463331][ T9053] ? __pfx___se_sys_io_submit+0x10/0x10 [ 394.463352][ T9053] ? ksys_write+0x248/0x270 [ 394.463391][ T9053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.463415][ T9053] do_syscall_64+0x15f/0xf80 [ 394.463437][ T9053] ? trace_irq_disable+0x3b/0x140 [ 394.463462][ T9053] ? clear_bhb_loop+0x40/0x90 [ 394.463488][ T9053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.463509][ T9053] RIP: 0033:0x7fb51756cdd9 [ 394.463529][ T9053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.463547][ T9053] RSP: 002b:00007fb5157be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 394.463571][ T9053] RAX: ffffffffffffffda RBX: 00007fb5177e5fa0 RCX: 00007fb51756cdd9 [ 394.463587][ T9053] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 00007fb51831f000 [ 394.463601][ T9053] RBP: 00007fb5157be090 R08: 0000000000000000 R09: 0000000000000000 [ 394.463614][ T9053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.463627][ T9053] R13: 00007fb5177e6038 R14: 00007fb5177e5fa0 R15: 00007ffd684363b8 [ 394.463662][ T9053] [ 394.513050][ T31] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 394.759098][ T31] usb 1-1: config index 0 descriptor too short (expected 53027, got 10) [ 394.759149][ T31] usb 1-1: config 0 has too many interfaces: 198, using maximum allowed: 32 [ 394.759170][ T31] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 394.759187][ T31] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 198 [ 394.759227][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 394.759251][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.850115][ T31] usb 1-1: config 0 descriptor?? [ 395.124552][ T10] usb 1-1: USB disconnect, device number 30 [ 396.630800][ T9086] usb usb7: usbfs: process 9086 (syz.4.1013) did not claim interface 0 before use [ 396.953113][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 397.103553][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 397.108942][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.108972][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.110922][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 397.110952][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 397.110973][ T10] usb 5-1: SerialNumber: syz [ 398.295428][ T10] usb 5-1: 0:2 : does not exist [ 399.110259][ T10] usb 5-1: USB disconnect, device number 41 [ 400.600482][ T10] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 400.885081][ T10] usb 5-1: config index 0 descriptor too short (expected 53027, got 10) [ 400.885114][ T10] usb 5-1: config 0 has too many interfaces: 198, using maximum allowed: 32 [ 400.885136][ T10] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 400.885155][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 198 [ 400.885195][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 400.885219][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.950380][ T9130] FAULT_INJECTION: forcing a failure. [ 400.950380][ T9130] name failslab, interval 1, probability 0, space 0, times 0 [ 400.950419][ T9130] CPU: 1 UID: 0 PID: 9130 Comm: syz.1.1023 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 400.950443][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 400.950456][ T9130] Call Trace: [ 400.950464][ T9130] [ 400.950473][ T9130] dump_stack_lvl+0xe8/0x150 [ 400.950506][ T9130] should_fail_ex+0x46b/0x600 [ 400.950543][ T9130] should_failslab+0xa8/0x100 [ 400.950572][ T9130] __kmalloc_cache_noprof+0x84/0x690 [ 400.950598][ T9130] ? resv_map_alloc+0x88/0x2e0 [ 400.950624][ T9130] resv_map_alloc+0x88/0x2e0 [ 400.950645][ T9130] hugetlbfs_get_inode+0x5d/0x650 [ 400.950682][ T9130] ? fput+0xa0/0xd0 [ 400.950714][ T9130] hugetlb_file_setup+0x21d/0x630 [ 400.950742][ T9130] ksys_mmap_pgoff+0x22e/0x720 [ 400.950766][ T9130] ? __x64_sys_mmap+0x7f/0x140 [ 400.950789][ T9130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.950813][ T9130] do_syscall_64+0x15f/0xf80 [ 400.950835][ T9130] ? trace_irq_disable+0x3b/0x140 [ 400.950859][ T9130] ? clear_bhb_loop+0x40/0x90 [ 400.950885][ T9130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.950906][ T9130] RIP: 0033:0x7ff7e0aecdd9 [ 400.950926][ T9130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.950944][ T9130] RSP: 002b:00007ff7ded3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 400.950969][ T9130] RAX: ffffffffffffffda RBX: 00007ff7e0d65fa0 RCX: 00007ff7e0aecdd9 [ 400.950984][ T9130] RDX: 0000000006000003 RSI: 0000000000800000 RDI: 0000200000800000 [ 400.950999][ T9130] RBP: 00007ff7ded3e090 R08: ffffffffffffffff R09: 0000000000000000 [ 400.951013][ T9130] R10: 0000000000042031 R11: 0000000000000246 R12: 0000000000000001 [ 400.951026][ T9130] R13: 00007ff7e0d66038 R14: 00007ff7e0d65fa0 R15: 00007fffff897898 [ 400.951060][ T9130] [ 401.087230][ T9132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1024'. [ 401.135124][ T10] usb 5-1: config 0 descriptor?? [ 401.845520][ T9153] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 401.972968][ T5599] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 401.978517][ T6473] usb 5-1: USB disconnect, device number 42 [ 402.103245][ T9158] FAULT_INJECTION: forcing a failure. [ 402.103245][ T9158] name failslab, interval 1, probability 0, space 0, times 0 [ 402.103284][ T9158] CPU: 0 UID: 0 PID: 9158 Comm: syz.4.1030 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 402.103308][ T9158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 402.103321][ T9158] Call Trace: [ 402.103328][ T9158] [ 402.103337][ T9158] dump_stack_lvl+0xe8/0x150 [ 402.103370][ T9158] should_fail_ex+0x46b/0x600 [ 402.103409][ T9158] should_failslab+0xa8/0x100 [ 402.103436][ T9158] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 402.103458][ T9158] ? __alloc_skb+0x1d0/0x7d0 [ 402.103480][ T9158] ? lockdep_hardirqs_on+0x7a/0x110 [ 402.103508][ T9158] __alloc_skb+0x1d0/0x7d0 [ 402.103547][ T9158] alloc_skb_with_frags+0xc8/0x760 [ 402.103568][ T9158] ? __lock_acquire+0x6b5/0x2cf0 [ 402.103592][ T9158] ? do_raw_spin_lock+0x12b/0x2f0 [ 402.103613][ T9158] sock_alloc_send_pskb+0x884/0x9a0 [ 402.103640][ T9158] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 402.103668][ T9158] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 402.103688][ T9158] ? __local_bh_enable+0x1e1/0x2f0 [ 402.103710][ T9158] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 402.103726][ T9158] ? lockdep_hardirqs_on+0x7a/0x110 [ 402.103748][ T9158] j1939_sk_sendmsg+0x775/0x1350 [ 402.103777][ T9158] ? unwind_next_frame+0xa6/0x2550 [ 402.103804][ T9158] ? j1939_sk_sendmsg+0x51a/0x1350 [ 402.103836][ T9158] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 402.103864][ T9158] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 402.103885][ T9158] ____sys_sendmsg+0x94c/0x9c0 [ 402.103911][ T9158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.103940][ T9158] ? import_iovec+0x73/0xa0 [ 402.103961][ T9158] ___sys_sendmsg+0x2a5/0x360 [ 402.103980][ T9158] ? __lock_acquire+0x6b5/0x2cf0 [ 402.104005][ T9158] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.104029][ T9158] ? kstrtouint+0x6e/0xe0 [ 402.104076][ T9158] ? __fget_files+0x2a/0x420 [ 402.104090][ T9158] ? __fget_files+0x3a6/0x420 [ 402.104114][ T9158] __sys_sendmmsg+0x282/0x4e0 [ 402.104139][ T9158] ? __pfx___sys_sendmmsg+0x10/0x10 [ 402.104169][ T9158] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 402.104207][ T9158] ? ksys_write+0x248/0x270 [ 402.104227][ T9158] ? __pfx_ksys_write+0x10/0x10 [ 402.104252][ T9158] __x64_sys_sendmmsg+0xa0/0xc0 [ 402.104272][ T9158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.104288][ T9158] do_syscall_64+0x15f/0xf80 [ 402.104305][ T9158] ? trace_irq_disable+0x3b/0x140 [ 402.104324][ T9158] ? clear_bhb_loop+0x40/0x90 [ 402.104344][ T9158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.104360][ T9158] RIP: 0033:0x7f6d2f56cdd9 [ 402.104375][ T9158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.104389][ T9158] RSP: 002b:00007f6d2d7be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 402.104408][ T9158] RAX: ffffffffffffffda RBX: 00007f6d2f7e5fa0 RCX: 00007f6d2f56cdd9 [ 402.104419][ T9158] RDX: 0000000000000001 RSI: 0000200000004d40 RDI: 0000000000000004 [ 402.104430][ T9158] RBP: 00007f6d2d7be090 R08: 0000000000000000 R09: 0000000000000000 [ 402.104439][ T9158] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000001 [ 402.104449][ T9158] R13: 00007f6d2f7e6038 R14: 00007f6d2f7e5fa0 R15: 00007fffd8f85be8 [ 402.104476][ T9158] [ 402.124200][ T5599] usb 3-1: Using ep0 maxpacket: 8 [ 402.222254][ T5599] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 402.222285][ T5599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.222303][ T5599] usb 3-1: Product: syz [ 402.222316][ T5599] usb 3-1: Manufacturer: syz [ 402.222328][ T5599] usb 3-1: SerialNumber: syz [ 402.243684][ T5599] usb 3-1: config 0 descriptor?? [ 402.512977][ T5599] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 402.882152][ T9169] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1034'. [ 403.623542][ T9150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1027'. [ 403.624574][ T9150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1027'. [ 404.470224][ T9188] FAULT_INJECTION: forcing a failure. [ 404.470224][ T9188] name failslab, interval 1, probability 0, space 0, times 0 [ 404.470259][ T9188] CPU: 0 UID: 0 PID: 9188 Comm: syz.0.1038 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 404.470279][ T9188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 404.470289][ T9188] Call Trace: [ 404.470295][ T9188] [ 404.470303][ T9188] dump_stack_lvl+0xe8/0x150 [ 404.470329][ T9188] should_fail_ex+0x46b/0x600 [ 404.470361][ T9188] should_failslab+0xa8/0x100 [ 404.470383][ T9188] __kmalloc_noprof+0xdf/0x7b0 [ 404.470402][ T9188] ? tomoyo_encode+0x28b/0x550 [ 404.470431][ T9188] tomoyo_encode+0x28b/0x550 [ 404.470461][ T9188] tomoyo_realpath_from_path+0x58d/0x5d0 [ 404.470496][ T9188] ? tomoyo_path_number_perm+0x219/0x630 [ 404.470518][ T9188] tomoyo_path_number_perm+0x246/0x630 [ 404.470542][ T9188] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 404.470564][ T9188] ? __lock_acquire+0x6b5/0x2cf0 [ 404.470590][ T9188] ? do_raw_spin_lock+0x12b/0x2f0 [ 404.470644][ T9188] ? __fget_files+0x2a/0x420 [ 404.470662][ T9188] ? __fget_files+0x2a/0x420 [ 404.470676][ T9188] ? __fget_files+0x3a6/0x420 [ 404.470691][ T9188] ? __fget_files+0x2a/0x420 [ 404.470711][ T9188] security_file_ioctl+0xc3/0x2a0 [ 404.470736][ T9188] __se_sys_ioctl+0x47/0x170 [ 404.470756][ T9188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.470781][ T9188] do_syscall_64+0x15f/0xf80 [ 404.470841][ T9188] ? trace_irq_disable+0x3b/0x140 [ 404.470861][ T9188] ? clear_bhb_loop+0x40/0x90 [ 404.470881][ T9188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.470897][ T9188] RIP: 0033:0x7f429c97cdd9 [ 404.470914][ T9188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.470928][ T9188] RSP: 002b:00007f429abce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.470948][ T9188] RAX: ffffffffffffffda RBX: 00007f429cbf5fa0 RCX: 00007f429c97cdd9 [ 404.470960][ T9188] RDX: 0000000000000000 RSI: 0000000000005418 RDI: 0000000000000003 [ 404.470971][ T9188] RBP: 00007f429abce090 R08: 0000000000000000 R09: 0000000000000000 [ 404.470981][ T9188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.470992][ T9188] R13: 00007f429cbf6038 R14: 00007f429cbf5fa0 R15: 00007ffd475c7178 [ 404.471021][ T9188] [ 404.471056][ T9188] ERROR: Out of memory at tomoyo_realpath_from_path. [ 405.691179][ T5599] usb write operation failed. (-71) [ 405.943152][ T5599] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 405.943990][ T5599] dvbdev: DVB: registering new adapter (Terratec H7) [ 405.944067][ T5599] usb 3-1: media controller created [ 405.980506][ T5599] usb read operation failed. (-71) [ 405.981044][ T5599] usb write operation failed. (-71) [ 406.048359][ T5599] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 406.174112][ T5599] usb 3-1: USB disconnect, device number 35 [ 406.220321][ T5585] udevd[5585]: setting owner of /dev/bus/usb/003/035 to uid=0, gid=0 failed: No such file or directory [ 406.235918][ T9216] netlink: 'syz.0.1049': attribute type 16 has an invalid length. [ 406.235939][ T9216] netlink: 'syz.0.1049': attribute type 17 has an invalid length. [ 406.407186][ T9216] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.431148][ T9216] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.808274][ T5714] hid_parser_main: 421 callbacks suppressed [ 406.808301][ T5714] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 406.808330][ T5714] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 406.808355][ T5714] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 406.808381][ T5714] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 406.808404][ T5714] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 406.808429][ T5714] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 406.808453][ T5714] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 406.808478][ T5714] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 406.808502][ T5714] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 406.808526][ T5714] hid-generic 0000:0000:0004.0023: unknown main item tag 0x0 [ 406.920307][ T5714] hid-generic 0000:0000:0004.0023: hidraw0: HID v0.03 Device [syz1] on syz0 [ 407.012775][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 407.021484][ T9230] fido_id[9230]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 407.025233][ T5706] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 407.168857][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.168894][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.168935][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 407.168958][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.176016][ T5706] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 407.176046][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.193805][ T10] usb 3-1: config 0 descriptor?? [ 407.203454][ T5706] usb 5-1: config 0 descriptor?? [ 407.232364][ T5706] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 407.467952][ T5706] gp8psk: usb in 128 operation failed. [ 407.556275][ T5706] gp8psk: usb in 137 operation failed. [ 407.556299][ T5706] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 407.556344][ T5706] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 407.586130][ T5706] usb 5-1: USB disconnect, device number 43 [ 407.759558][ T9244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.775739][ T9244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.796060][ T9246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1058'. [ 408.115871][ T9251] usb usb7: usbfs: process 9251 (syz.4.1061) did not claim interface 0 before use [ 408.252830][ T10] hid-picolcd 0003:04D8:C002.0024: No report with id 0x11 found [ 408.262645][ T5801] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 408.354248][ T36] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 408.389055][ T5599] usb 3-1: USB disconnect, device number 36 [ 408.435707][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 408.435751][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.435788][ T5801] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 408.435811][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.461468][ T5801] usb 1-1: config 0 descriptor?? [ 408.512844][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 408.515707][ T36] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.515734][ T36] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.517353][ T36] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 408.517382][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 408.517403][ T36] usb 5-1: SerialNumber: syz [ 408.611518][ T36] usb 5-1: 0:2 : does not exist [ 408.611612][ T36] usb 5-1: unit 5 not found! [ 408.645357][ T9260] 9p: Bad value for 'wfdno' [ 410.465841][ T5801] usbhid 1-1:0.0: can't add hid device: -71 [ 410.465977][ T5801] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 410.520186][ T5801] usb 1-1: USB disconnect, device number 31 [ 410.571908][ T37] audit: type=1326 audit(1777924655.584:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.2.1066" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51756cdd9 code=0x7ffc0000 [ 410.572071][ T37] audit: type=1326 audit(1777924655.584:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.2.1066" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51756cdd9 code=0x7ffc0000 [ 410.625476][ T37] audit: type=1326 audit(1777924655.584:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.2.1066" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51756cdd9 code=0x7ffc0000 [ 410.625534][ T37] audit: type=1326 audit(1777924655.594:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.2.1066" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51756cdd9 code=0x7ffc0000 [ 410.625583][ T37] audit: type=1326 audit(1777924655.594:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.2.1066" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fb51756cdd9 code=0x7ffc0000 [ 410.625629][ T37] audit: type=1326 audit(1777924655.594:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.2.1066" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51756cdd9 code=0x7ffc0000 [ 410.625675][ T37] audit: type=1326 audit(1777924655.604:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.2.1066" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51756cdd9 code=0x7ffc0000 [ 410.625731][ T37] audit: type=1326 audit(1777924655.604:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.2.1066" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51756cdd9 code=0x7ffc0000 [ 410.625777][ T37] audit: type=1326 audit(1777924655.604:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.2.1066" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fb51756cdd9 code=0x7ffc0000 [ 410.625821][ T37] audit: type=1326 audit(1777924655.604:1436): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.2.1066" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51756cdd9 code=0x7ffc0000 [ 410.642788][ T5714] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 410.685258][ T5713] usb 5-1: USB disconnect, device number 44 [ 410.794634][ T5714] usb 4-1: Using ep0 maxpacket: 16 [ 410.796954][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.796983][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 410.797021][ T5714] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 410.797042][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.263434][ T9275] FAULT_INJECTION: forcing a failure. [ 411.263434][ T9275] name failslab, interval 1, probability 0, space 0, times 0 [ 411.263470][ T9275] CPU: 0 UID: 0 PID: 9275 Comm: syz.2.1069 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 411.263494][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 411.263507][ T9275] Call Trace: [ 411.263515][ T9275] [ 411.263524][ T9275] dump_stack_lvl+0xe8/0x150 [ 411.263555][ T9275] should_fail_ex+0x46b/0x600 [ 411.263595][ T9275] should_failslab+0xa8/0x100 [ 411.263622][ T9275] __kmalloc_noprof+0xdf/0x7b0 [ 411.263647][ T9275] ? tomoyo_encode+0x28b/0x550 [ 411.263686][ T9275] tomoyo_encode+0x28b/0x550 [ 411.263724][ T9275] tomoyo_realpath_from_path+0x58d/0x5d0 [ 411.263759][ T9275] ? tomoyo_domain+0xd8/0x130 [ 411.263795][ T9275] ? tomoyo_path_number_perm+0x219/0x630 [ 411.263823][ T9275] tomoyo_path_number_perm+0x246/0x630 [ 411.263854][ T9275] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 411.263880][ T9275] ? __lock_acquire+0x6b5/0x2cf0 [ 411.263912][ T9275] ? do_raw_spin_lock+0x12b/0x2f0 [ 411.263974][ T9275] ? __fget_files+0x2a/0x420 [ 411.263998][ T9275] ? __fget_files+0x2a/0x420 [ 411.264015][ T9275] ? __fget_files+0x3a6/0x420 [ 411.264034][ T9275] ? __fget_files+0x2a/0x420 [ 411.264058][ T9275] security_file_ioctl+0xc3/0x2a0 [ 411.264088][ T9275] __se_sys_ioctl+0x47/0x170 [ 411.264113][ T9275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.264136][ T9275] do_syscall_64+0x15f/0xf80 [ 411.264158][ T9275] ? trace_irq_disable+0x3b/0x140 [ 411.264183][ T9275] ? clear_bhb_loop+0x40/0x90 [ 411.264211][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.264231][ T9275] RIP: 0033:0x7fb51756cdd9 [ 411.264251][ T9275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.264269][ T9275] RSP: 002b:00007fb5157be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.264292][ T9275] RAX: ffffffffffffffda RBX: 00007fb5177e5fa0 RCX: 00007fb51756cdd9 [ 411.264308][ T9275] RDX: 0000000000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 411.264321][ T9275] RBP: 00007fb5157be090 R08: 0000000000000000 R09: 0000000000000000 [ 411.264335][ T9275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.264349][ T9275] R13: 00007fb5177e6038 R14: 00007fb5177e5fa0 R15: 00007ffd684363b8 [ 411.264385][ T9275] [ 411.264407][ T9275] ERROR: Out of memory at tomoyo_realpath_from_path. [ 411.512027][ T5714] usb 4-1: config 0 descriptor?? [ 411.689800][ T5714] usb 4-1: can't set config #0, error -71 [ 411.724529][ T5714] usb 4-1: USB disconnect, device number 41 [ 411.763923][ T5713] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 412.160072][ T5713] usb 5-1: Using ep0 maxpacket: 32 [ 412.818246][ T5713] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 412.818491][ T5713] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.818773][ T5713] usb 5-1: config 0 has no interface number 0 [ 412.819430][ T5713] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 412.977417][ T5713] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 412.977460][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.977481][ T5713] usb 5-1: Product: syz [ 412.977496][ T5713] usb 5-1: Manufacturer: syz [ 412.977511][ T5713] usb 5-1: SerialNumber: syz [ 413.206899][ T5713] usb 5-1: config 0 descriptor?? [ 413.237303][ T5713] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 413.442528][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.443222][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.582635][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 414.364176][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 414.481583][ T10] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 414.481616][ T10] usb 3-1: config 0 has no interface number 0 [ 414.481649][ T10] usb 3-1: too many endpoints for config 0 interface 49 altsetting 50: 56, using maximum allowed: 30 [ 414.481689][ T10] usb 3-1: config 0 interface 49 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 414.481717][ T10] usb 3-1: config 0 interface 49 has no altsetting 0 [ 414.522640][ T5713] usb 5-1: qt2_attach - failed to power on unit: -71 [ 414.522840][ T5713] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 414.568775][ T10] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 414.568797][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.568809][ T10] usb 3-1: Product: syz [ 414.568817][ T10] usb 3-1: Manufacturer: syz [ 414.568825][ T10] usb 3-1: SerialNumber: syz [ 414.628207][ T5713] usb 5-1: USB disconnect, device number 45 [ 414.629893][ T10] usb 3-1: config 0 descriptor?? [ 414.669839][ T9307] netlink: 'syz.0.1078': attribute type 63 has an invalid length. [ 414.877942][ T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 415.229065][ T10] gspca_topro: reg_w err -71 [ 415.262739][ T10] gspca_topro: Sensor soi763a [ 415.775253][ T10] usb 3-1: USB disconnect, device number 37 [ 415.969346][ T9320] loop8: detected capacity change from 0 to 8 [ 416.006303][ T9320] Dev loop8: unable to read RDB block 8 [ 416.006349][ T9320] loop8: unable to read partition table [ 416.006615][ T9320] loop8: partition table beyond EOD, truncated [ 416.006635][ T9320] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 416.037330][ T9325] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1084'. [ 416.188201][ T9330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.386312][ T5713] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 416.632547][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 416.637084][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.637121][ T5713] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 416.637167][ T5713] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 416.637191][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.825907][ T5713] usb 4-1: config 0 descriptor?? [ 416.911040][ T9344] FAULT_INJECTION: forcing a failure. [ 416.911040][ T9344] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 416.911078][ T9344] CPU: 0 UID: 0 PID: 9344 Comm: syz.2.1089 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 416.911104][ T9344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 416.911116][ T9344] Call Trace: [ 416.911124][ T9344] [ 416.911134][ T9344] dump_stack_lvl+0xe8/0x150 [ 416.911167][ T9344] should_fail_ex+0x46b/0x600 [ 416.911206][ T9344] prepare_alloc_pages+0x22a/0x6b0 [ 416.911242][ T9344] __alloc_frozen_pages_noprof+0x12f/0x380 [ 416.911275][ T9344] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 416.911307][ T9344] ? __pfx_policy_nodemask+0x10/0x10 [ 416.911341][ T9344] ? __lock_acquire+0x6b5/0x2cf0 [ 416.911376][ T9344] alloc_pages_mpol+0xd1/0x380 [ 416.911406][ T9344] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 416.911434][ T9344] vma_alloc_folio_noprof+0xe1/0x1e0 [ 416.911464][ T9344] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 416.911491][ T9344] ? __pte_offset_map+0x29/0x200 [ 416.911522][ T9344] do_pte_missing+0x822/0x2950 [ 416.911565][ T9344] handle_mm_fault+0xd0a/0x13c0 [ 416.911596][ T9344] ? handle_mm_fault+0xe7/0x13c0 [ 416.911624][ T9344] ? __pfx_handle_mm_fault+0x10/0x10 [ 416.911679][ T9344] ? lock_mm_and_find_vma+0xa7/0x340 [ 416.911709][ T9344] do_user_addr_fault+0x75b/0x1340 [ 416.911751][ T9344] exc_page_fault+0x6a/0xc0 [ 416.911778][ T9344] asm_exc_page_fault+0x26/0x30 [ 416.911797][ T9344] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 416.911826][ T9344] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 416.911843][ T9344] RSP: 0018:ffffc90005bbfb48 EFLAGS: 00050246 [ 416.911863][ T9344] RAX: ffffffff84a16501 RBX: 0000000000000040 RCX: 0000000000000040 [ 416.911877][ T9344] RDX: 0000000000000000 RSI: ffffc90005bbfbe0 RDI: 0000200000004500 [ 416.911891][ T9344] RBP: ffffc90005bbfc90 R08: ffffc90005bbfc1f R09: 1ffff92000b77f83 [ 416.911906][ T9344] R10: dffffc0000000000 R11: fffff52000b77f84 R12: 0000200000004540 [ 416.911921][ T9344] R13: 00007ffffffff000 R14: ffffc90005bbfbe0 R15: 0000200000004500 [ 416.911945][ T9344] ? _copy_to_user+0x31/0xb0 [ 416.911977][ T9344] _copy_to_user+0x8a/0xb0 [ 416.912003][ T9344] rng_dev_read+0x3ec/0x7a0 [ 416.912037][ T9344] ? __pfx_rng_dev_read+0x10/0x10 [ 416.912075][ T9344] ? rw_verify_area+0x2ac/0x4e0 [ 416.912099][ T9344] ? __pfx_rng_dev_read+0x10/0x10 [ 416.912129][ T9344] vfs_read+0x212/0xa80 [ 416.912163][ T9344] ? __pfx_vfs_read+0x10/0x10 [ 416.912187][ T9344] ? __fget_files+0x2a/0x420 [ 416.912209][ T9344] ? __fget_files+0x2a/0x420 [ 416.912249][ T9344] ? __fget_files+0x3a6/0x420 [ 416.912267][ T9344] ? __fget_files+0x2a/0x420 [ 416.912295][ T9344] ksys_read+0x156/0x270 [ 416.912320][ T9344] ? __pfx_ksys_read+0x10/0x10 [ 416.912352][ T9344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.912374][ T9344] do_syscall_64+0x15f/0xf80 [ 416.912410][ T9344] ? clear_bhb_loop+0x40/0x90 [ 416.912434][ T9344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.912454][ T9344] RIP: 0033:0x7fb51756cdd9 [ 416.912473][ T9344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.912490][ T9344] RSP: 002b:00007fb5157be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 416.912510][ T9344] RAX: ffffffffffffffda RBX: 00007fb5177e5fa0 RCX: 00007fb51756cdd9 [ 416.912524][ T9344] RDX: 00000000fffffe0c RSI: 0000200000004500 RDI: 0000000000000003 [ 416.912538][ T9344] RBP: 00007fb5157be090 R08: 0000000000000000 R09: 0000000000000000 [ 416.912550][ T9344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.912562][ T9344] R13: 00007fb5177e6038 R14: 00007fb5177e5fa0 R15: 00007ffd684363b8 [ 416.912596][ T9344] [ 417.831902][ T5713] HID 045e:07da: Invalid code 65791 type 1 [ 417.907847][ T5713] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0025/input/input38 [ 418.127191][ T5713] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 420.776051][ T10] usb 4-1: USB disconnect, device number 42 [ 421.028499][ T9374] 9p: Bad value for 'wfdno' [ 421.338700][ T9381] FAULT_INJECTION: forcing a failure. [ 421.338700][ T9381] name failslab, interval 1, probability 0, space 0, times 0 [ 421.338738][ T9381] CPU: 1 UID: 0 PID: 9381 Comm: syz.3.1103 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 421.338761][ T9381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 421.338774][ T9381] Call Trace: [ 421.338782][ T9381] [ 421.338791][ T9381] dump_stack_lvl+0xe8/0x150 [ 421.338823][ T9381] should_fail_ex+0x46b/0x600 [ 421.338863][ T9381] should_failslab+0xa8/0x100 [ 421.338891][ T9381] __kmalloc_noprof+0xdf/0x7b0 [ 421.338912][ T9381] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 421.338936][ T9381] ? alloc_pipe_info+0x1fc/0x4d0 [ 421.338961][ T9381] ? alloc_pipe_info+0xe8/0x4d0 [ 421.338991][ T9381] alloc_pipe_info+0x1fc/0x4d0 [ 421.339020][ T9381] splice_direct_to_actor+0xa19/0xc80 [ 421.339042][ T9381] ? __lock_acquire+0x6b5/0x2cf0 [ 421.339075][ T9381] ? kstrtouint+0x6e/0xe0 [ 421.339109][ T9381] ? __pfx_direct_splice_actor+0x10/0x10 [ 421.339139][ T9381] ? __lock_acquire+0x6b5/0x2cf0 [ 421.339166][ T9381] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 421.339200][ T9381] do_splice_direct+0x19b/0x2a0 [ 421.339226][ T9381] ? __pfx_do_splice_direct+0x10/0x10 [ 421.339249][ T9381] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 421.339280][ T9381] ? rw_verify_area+0x25b/0x4e0 [ 421.339314][ T9381] do_sendfile+0x547/0x7e0 [ 421.339352][ T9381] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.339385][ T9381] ? __pfx_do_sendfile+0x10/0x10 [ 421.339429][ T9381] __se_sys_sendfile64+0x144/0x1a0 [ 421.339460][ T9381] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 421.339499][ T9381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.339522][ T9381] do_syscall_64+0x15f/0xf80 [ 421.339544][ T9381] ? trace_irq_disable+0x3b/0x140 [ 421.339569][ T9381] ? clear_bhb_loop+0x40/0x90 [ 421.339595][ T9381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.339616][ T9381] RIP: 0033:0x7fda9645cdd9 [ 421.339636][ T9381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.339654][ T9381] RSP: 002b:00007fda946b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 421.339679][ T9381] RAX: ffffffffffffffda RBX: 00007fda966d5fa0 RCX: 00007fda9645cdd9 [ 421.339694][ T9381] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 421.339706][ T9381] RBP: 00007fda946b6090 R08: 0000000000000000 R09: 0000000000000000 [ 421.339720][ T9381] R10: 0000000002000081 R11: 0000000000000246 R12: 0000000000000001 [ 421.339734][ T9381] R13: 00007fda966d6038 R14: 00007fda966d5fa0 R15: 00007ffcafdbde38 [ 421.339768][ T9381] [ 421.359846][ T37] kauditd_printk_skb: 112 callbacks suppressed [ 421.359864][ T37] audit: type=1326 audit(1777924666.374:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9379 comm="syz.0.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429c97cdd9 code=0x7ffc0000 [ 421.359917][ T37] audit: type=1326 audit(1777924666.374:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9379 comm="syz.0.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429c97cdd9 code=0x7ffc0000 [ 421.359976][ T37] audit: type=1326 audit(1777924666.374:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9379 comm="syz.0.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429c97cdd9 code=0x7ffc0000 [ 421.362367][ T37] audit: type=1326 audit(1777924666.374:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9379 comm="syz.0.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f429c97cdd9 code=0x7ffc0000 [ 421.364131][ T37] audit: type=1326 audit(1777924666.384:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9379 comm="syz.0.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429c97cdd9 code=0x7ffc0000 [ 421.365412][ T37] audit: type=1326 audit(1777924666.384:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9379 comm="syz.0.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429c97cdd9 code=0x7ffc0000 [ 421.365702][ T37] audit: type=1326 audit(1777924666.384:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9379 comm="syz.0.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429c97cdd9 code=0x7ffc0000 [ 421.371291][ T37] audit: type=1326 audit(1777924666.384:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9379 comm="syz.0.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f429c97cdd9 code=0x7ffc0000 [ 421.371359][ T37] audit: type=1326 audit(1777924666.384:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9379 comm="syz.0.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429c97cdd9 code=0x7ffc0000 [ 421.373783][ T37] audit: type=1326 audit(1777924666.394:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9379 comm="syz.0.1101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429c97cdd9 code=0x7ffc0000 [ 421.379993][ T9380] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1101'. [ 422.547839][ T31] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 423.031237][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 423.033433][ T31] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 423.242856][ T31] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 423.242888][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.242909][ T31] usb 5-1: config 0 has no interface number 0 [ 423.242958][ T31] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 423.242982][ T31] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 423.243006][ T31] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.263193][ T31] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 423.263223][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.263244][ T31] usb 5-1: config 0 has no interface number 0 [ 423.263295][ T31] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 423.263319][ T31] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 423.263360][ T31] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.303265][ T31] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 423.303295][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.303315][ T31] usb 5-1: config 0 has no interface number 0 [ 423.303375][ T31] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 423.303398][ T31] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 423.303422][ T31] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.366733][ T31] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 423.366766][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.366787][ T31] usb 5-1: config 0 has no interface number 0 [ 423.366840][ T31] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 423.366862][ T31] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 423.366885][ T31] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.396838][ T31] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 423.396870][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.396890][ T31] usb 5-1: config 0 has no interface number 0 [ 423.396941][ T31] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 423.396965][ T31] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 423.396990][ T31] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.439835][ T31] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 423.439865][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.439885][ T31] usb 5-1: config 0 has no interface number 0 [ 423.439937][ T31] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 423.439961][ T31] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 423.439985][ T31] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.782068][ T31] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 423.782100][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.782121][ T31] usb 5-1: config 0 has no interface number 0 [ 423.782166][ T31] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 423.782185][ T31] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 423.782207][ T31] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.792634][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 423.854625][ T31] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 423.854654][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.854675][ T31] usb 5-1: config 0 has no interface number 0 [ 423.854725][ T31] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 423.854748][ T31] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 423.854771][ T31] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.864192][ T31] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 423.864224][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.864245][ T31] usb 5-1: Product: syz [ 423.864259][ T31] usb 5-1: Manufacturer: syz [ 423.864274][ T31] usb 5-1: SerialNumber: syz [ 423.904271][ T819] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 423.923420][ T31] usb 5-1: config 0 descriptor?? [ 423.942608][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 423.945408][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.955861][ T10] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 423.955890][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.955908][ T10] usb 1-1: Product: syz [ 423.955921][ T10] usb 1-1: Manufacturer: syz [ 423.955935][ T10] usb 1-1: SerialNumber: syz [ 423.980223][ T10] usb 1-1: config 0 descriptor?? [ 424.026543][ T31] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 424.053659][ T819] usb 4-1: Using ep0 maxpacket: 32 [ 424.057839][ T819] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 424.057870][ T819] usb 4-1: config 0 has no interface number 0 [ 424.065603][ T819] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 424.065631][ T819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.065650][ T819] usb 4-1: Product: syz [ 424.065663][ T819] usb 4-1: Manufacturer: syz [ 424.065676][ T819] usb 4-1: SerialNumber: syz [ 424.115065][ T819] usb 4-1: config 0 descriptor?? [ 424.148067][ T31] usb 5-1: USB disconnect, device number 46 [ 424.414239][ T10] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 424.447650][ T10] usb 1-1: USB disconnect, device number 32 [ 424.501795][ T1127] usb 1-1: Failed to submit usb control message: -19 [ 424.501837][ T1127] usb 1-1: unable to send the bmi data to the device: -19 [ 424.501857][ T1127] usb 1-1: unable to get target info from device [ 424.501872][ T1127] usb 1-1: could not get target info (-19) [ 424.501891][ T1127] usb 1-1: could not probe fw (-19) [ 425.195391][ T819] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 425.195426][ T819] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 425.196229][ T819] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 425.196578][ T819] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 425.364402][ T819] usb 4-1: USB disconnect, device number 43 [ 425.557273][ T9427] FAULT_INJECTION: forcing a failure. [ 425.557273][ T9427] name failslab, interval 1, probability 0, space 0, times 0 [ 425.557309][ T9427] CPU: 1 UID: 0 PID: 9427 Comm: syz.3.1116 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 425.557332][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 425.557344][ T9427] Call Trace: [ 425.557352][ T9427] [ 425.557362][ T9427] dump_stack_lvl+0xe8/0x150 [ 425.557394][ T9427] should_fail_ex+0x46b/0x600 [ 425.557433][ T9427] should_failslab+0xa8/0x100 [ 425.557460][ T9427] __kmalloc_noprof+0xdf/0x7b0 [ 425.557485][ T9427] ? tomoyo_encode+0x28b/0x550 [ 425.557524][ T9427] tomoyo_encode+0x28b/0x550 [ 425.557571][ T9427] tomoyo_realpath_from_path+0x58d/0x5d0 [ 425.557616][ T9427] ? tomoyo_path_number_perm+0x219/0x630 [ 425.557644][ T9427] tomoyo_path_number_perm+0x246/0x630 [ 425.557675][ T9427] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 425.557702][ T9427] ? __lock_acquire+0x6b5/0x2cf0 [ 425.557734][ T9427] ? do_raw_spin_lock+0x12b/0x2f0 [ 425.557795][ T9427] ? __fget_files+0x2a/0x420 [ 425.557818][ T9427] ? __fget_files+0x2a/0x420 [ 425.557836][ T9427] ? __fget_files+0x3a6/0x420 [ 425.557855][ T9427] ? __fget_files+0x2a/0x420 [ 425.557880][ T9427] security_file_ioctl+0xc3/0x2a0 [ 425.557912][ T9427] __se_sys_ioctl+0x47/0x170 [ 425.557938][ T9427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.557962][ T9427] do_syscall_64+0x15f/0xf80 [ 425.557984][ T9427] ? trace_irq_disable+0x3b/0x140 [ 425.558026][ T9427] ? clear_bhb_loop+0x40/0x90 [ 425.558053][ T9427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.558074][ T9427] RIP: 0033:0x7fda9645cdd9 [ 425.558094][ T9427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.558111][ T9427] RSP: 002b:00007fda94695028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.558134][ T9427] RAX: ffffffffffffffda RBX: 00007fda966d6090 RCX: 00007fda9645cdd9 [ 425.558149][ T9427] RDX: 00002000000000c0 RSI: 000000000000127f RDI: 0000000000000003 [ 425.558163][ T9427] RBP: 00007fda94695090 R08: 0000000000000000 R09: 0000000000000000 [ 425.558177][ T9427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.558189][ T9427] R13: 00007fda966d6128 R14: 00007fda966d6090 R15: 00007ffcafdbde38 [ 425.558224][ T9427] [ 425.558245][ T9427] ERROR: Out of memory at tomoyo_realpath_from_path. [ 426.266399][ T9430] netlink: 'syz.3.1117': attribute type 9 has an invalid length. [ 426.266425][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 426.307426][ T9430] gretap0: entered promiscuous mode [ 426.328817][ T9430] macvlan2: entered promiscuous mode [ 426.329103][ T9430] macvlan2: entered allmulticast mode [ 426.329125][ T9430] gretap0: entered allmulticast mode [ 426.550981][ T9437] FAULT_INJECTION: forcing a failure. [ 426.550981][ T9437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.551019][ T9437] CPU: 1 UID: 0 PID: 9437 Comm: syz.3.1119 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 426.551044][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 426.551057][ T9437] Call Trace: [ 426.551065][ T9437] [ 426.551074][ T9437] dump_stack_lvl+0xe8/0x150 [ 426.551107][ T9437] should_fail_ex+0x46b/0x600 [ 426.551146][ T9437] _copy_from_user+0x2d/0xb0 [ 426.551172][ T9437] sctp_setsockopt+0x1c4/0x12c0 [ 426.551198][ T9437] ? sock_common_setsockopt+0x36/0xc0 [ 426.551220][ T9437] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 426.551253][ T9437] do_sock_setsockopt+0x17c/0x1b0 [ 426.551286][ T9437] __x64_sys_setsockopt+0x143/0x1b0 [ 426.551314][ T9437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.551338][ T9437] do_syscall_64+0x15f/0xf80 [ 426.551360][ T9437] ? trace_irq_disable+0x3b/0x140 [ 426.551386][ T9437] ? clear_bhb_loop+0x40/0x90 [ 426.551413][ T9437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.551435][ T9437] RIP: 0033:0x7fda9645cdd9 [ 426.551455][ T9437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.551474][ T9437] RSP: 002b:00007fda94695028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 426.551498][ T9437] RAX: ffffffffffffffda RBX: 00007fda966d6090 RCX: 00007fda9645cdd9 [ 426.551514][ T9437] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000003 [ 426.551533][ T9437] RBP: 00007fda94695090 R08: 0000000000000008 R09: 0000000000000000 [ 426.551546][ T9437] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 426.551560][ T9437] R13: 00007fda966d6128 R14: 00007fda966d6090 R15: 00007ffcafdbde38 [ 426.551595][ T9437] [ 427.818139][ T819] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 428.572681][ T819] usb 5-1: Using ep0 maxpacket: 16 [ 428.580483][ T819] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 428.580516][ T819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.580536][ T819] usb 5-1: Product: syz [ 428.580551][ T819] usb 5-1: Manufacturer: syz [ 428.580566][ T819] usb 5-1: SerialNumber: syz [ 428.871379][ T819] usb 5-1: config 0 descriptor?? [ 428.885222][ T819] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 429.166463][ T9465] FAULT_INJECTION: forcing a failure. [ 429.166463][ T9465] name failslab, interval 1, probability 0, space 0, times 0 [ 429.166499][ T9465] CPU: 0 UID: 0 PID: 9465 Comm: syz.1.1130 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 429.166536][ T9465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 429.166549][ T9465] Call Trace: [ 429.166557][ T9465] [ 429.166566][ T9465] dump_stack_lvl+0xe8/0x150 [ 429.166597][ T9465] should_fail_ex+0x46b/0x600 [ 429.166634][ T9465] should_failslab+0xa8/0x100 [ 429.166662][ T9465] __kmalloc_noprof+0xdf/0x7b0 [ 429.166683][ T9465] ? tomoyo_encode+0x28b/0x550 [ 429.166721][ T9465] tomoyo_encode+0x28b/0x550 [ 429.166757][ T9465] tomoyo_realpath_from_path+0x58d/0x5d0 [ 429.166800][ T9465] ? tomoyo_path_number_perm+0x219/0x630 [ 429.166828][ T9465] tomoyo_path_number_perm+0x246/0x630 [ 429.166859][ T9465] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 429.166890][ T9465] ? __lock_acquire+0x6b5/0x2cf0 [ 429.166923][ T9465] ? do_raw_spin_lock+0x12b/0x2f0 [ 429.166984][ T9465] ? __fget_files+0x2a/0x420 [ 429.167007][ T9465] ? __fget_files+0x2a/0x420 [ 429.167024][ T9465] ? __fget_files+0x3a6/0x420 [ 429.167043][ T9465] ? __fget_files+0x2a/0x420 [ 429.167065][ T9465] security_file_ioctl+0xc3/0x2a0 [ 429.167097][ T9465] __se_sys_ioctl+0x47/0x170 [ 429.167123][ T9465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.167147][ T9465] do_syscall_64+0x15f/0xf80 [ 429.167172][ T9465] ? clear_bhb_loop+0x40/0x90 [ 429.167198][ T9465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.167218][ T9465] RIP: 0033:0x7ff7e0aecdd9 [ 429.167239][ T9465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.167257][ T9465] RSP: 002b:00007ff7ded3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.167279][ T9465] RAX: ffffffffffffffda RBX: 00007ff7e0d65fa0 RCX: 00007ff7e0aecdd9 [ 429.167295][ T9465] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 429.167308][ T9465] RBP: 00007ff7ded3e090 R08: 0000000000000000 R09: 0000000000000000 [ 429.167321][ T9465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.167333][ T9465] R13: 00007ff7e0d66038 R14: 00007ff7e0d65fa0 R15: 00007fffff897898 [ 429.167370][ T9465] [ 429.169136][ T9465] ERROR: Out of memory at tomoyo_realpath_from_path. [ 429.184169][ T36] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 429.335884][ T36] usb 1-1: Using ep0 maxpacket: 8 [ 429.340155][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.340208][ T36] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 429.340229][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.407834][ T36] usb 1-1: config 0 descriptor?? [ 429.445838][ T36] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 429.696264][ T9461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.727466][ T819] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 429.771911][ T9461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.794432][ T819] usb 5-1: USB disconnect, device number 47 [ 430.431827][ T2376] pvrusb2: request_firmware fatal error with code=-110 [ 430.431846][ T2376] pvrusb2: Failure uploading firmware1 [ 430.431855][ T2376] pvrusb2: Device initialization was not successful. [ 430.431862][ T2376] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 430.431872][ T2376] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 430.442721][ T9] pvrusb2: Device being rendered inoperable [ 430.494874][ T36] gspca_vc032x: reg_r err -110 [ 430.494984][ T36] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 430.746266][ T9] usb 1-1: USB disconnect, device number 33 [ 432.593571][ T819] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 432.835634][ T819] usb 3-1: Using ep0 maxpacket: 8 [ 432.853747][ T819] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 190, changing to 7 [ 432.873857][ T819] usb 3-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 432.873889][ T819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.873910][ T819] usb 3-1: Manufacturer: ಈꅠ眹㰗쪉ࠩ㿦朦㊳칻ໜ壓ྤཟ喲é€å–²è„¬ [ 432.873929][ T819] usb 3-1: SerialNumber: syz [ 433.013588][ T9512] ALSA: mixer_oss: invalid OSS volume 'ress' [ 433.013687][ T9512] ALSA: mixer_oss: invalid OSS volume '' [ 433.044288][ T5801] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 433.293964][ T819] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 433.333814][ T819] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 433.343042][ T5801] usb 5-1: Using ep0 maxpacket: 32 [ 433.360719][ T5801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.360755][ T5801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.360797][ T5801] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 433.360821][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.412096][ T5801] usb 5-1: config 0 descriptor?? [ 433.431406][ T5801] hub 5-1:0.0: USB hub found [ 433.439369][ T9515] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1146'. [ 433.439425][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 433.557159][ T819] usb 3-1: USB disconnect, device number 38 [ 433.692594][ T9508] netlink: 'syz.4.1143': attribute type 41 has an invalid length. [ 433.870750][ T5801] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 433.950228][ T5801] usbhid 5-1:0.0: can't add hid device: -71 [ 433.950366][ T5801] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 433.971378][ T5587] udevd[5587]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.023506][ T5801] usb 5-1: USB disconnect, device number 48 [ 434.082536][ T9522] ALSA: mixer_oss: invalid OSS volume 'ress' [ 434.082560][ T9522] ALSA: mixer_oss: invalid OSS volume '' [ 434.436894][ T9533] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 434.436922][ T9533] netlink: 'syz.3.1154': attribute type 2 has an invalid length. [ 434.587024][ T9533] tipc: Started in network mode [ 434.587091][ T9533] tipc: Node identity 76017c09023c, cluster identity 4711 [ 434.587589][ T9533] tipc: Enabled bearer , priority 0 [ 434.588761][ T9533] syzkaller0: entered promiscuous mode [ 434.588785][ T9533] syzkaller0: entered allmulticast mode [ 434.758444][ T9535] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1154'. [ 434.793335][ T9533] tipc: Resetting bearer [ 435.854721][ T9533] tipc: Disabling bearer [ 436.474372][ T9552] FAULT_INJECTION: forcing a failure. [ 436.474372][ T9552] name failslab, interval 1, probability 0, space 0, times 0 [ 436.474416][ T9552] CPU: 1 UID: 0 PID: 9552 Comm: syz.4.1161 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 436.474442][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 436.474455][ T9552] Call Trace: [ 436.474463][ T9552] [ 436.474472][ T9552] dump_stack_lvl+0xe8/0x150 [ 436.474505][ T9552] should_fail_ex+0x46b/0x600 [ 436.474544][ T9552] should_failslab+0xa8/0x100 [ 436.474572][ T9552] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 436.474596][ T9552] ? __alloc_skb+0x1d0/0x7d0 [ 436.474618][ T9552] ? lockdep_hardirqs_on+0x7a/0x110 [ 436.474649][ T9552] __alloc_skb+0x1d0/0x7d0 [ 436.474679][ T9552] netlink_sendmsg+0x5d4/0xb40 [ 436.474716][ T9552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.474745][ T9552] ? unwind_get_return_address+0x4d/0x90 [ 436.474778][ T9552] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.474806][ T9552] ____sys_sendmsg+0x94c/0x9c0 [ 436.474841][ T9552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.474878][ T9552] ? import_iovec+0x73/0xa0 [ 436.474906][ T9552] ___sys_sendmsg+0x2a5/0x360 [ 436.474932][ T9552] ? __lock_acquire+0x6b5/0x2cf0 [ 436.474965][ T9552] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.475031][ T9552] ? __fget_files+0x2a/0x420 [ 436.475050][ T9552] ? __fget_files+0x3a6/0x420 [ 436.475082][ T9552] __x64_sys_sendmsg+0x1c3/0x2a0 [ 436.475112][ T9552] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.475149][ T9552] ? __pfx_ksys_write+0x10/0x10 [ 436.475184][ T9552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.475207][ T9552] do_syscall_64+0x15f/0xf80 [ 436.475240][ T9552] ? clear_bhb_loop+0x40/0x90 [ 436.475267][ T9552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.475289][ T9552] RIP: 0033:0x7f6d2f56cdd9 [ 436.475309][ T9552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.475327][ T9552] RSP: 002b:00007f6d2d7be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.475351][ T9552] RAX: ffffffffffffffda RBX: 00007f6d2f7e5fa0 RCX: 00007f6d2f56cdd9 [ 436.475366][ T9552] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 436.475380][ T9552] RBP: 00007f6d2d7be090 R08: 0000000000000000 R09: 0000000000000000 [ 436.475393][ T9552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.475407][ T9552] R13: 00007f6d2f7e6038 R14: 00007f6d2f7e5fa0 R15: 00007fffd8f85be8 [ 436.475442][ T9552] [ 437.334490][ T5801] tipc: Node number set to 1950186505 [ 437.802760][ T31] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 437.943130][ T819] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 437.962916][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 437.967455][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.967507][ T31] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 437.967533][ T31] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 437.969128][ T31] usb 4-1: string descriptor 0 read error: -71 [ 437.969299][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 437.969324][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.073172][ T31] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 438.073200][ T31] usb 4-1: no configuration chosen from 1 choice [ 438.104770][ T31] usb 4-1: USB disconnect, device number 44 [ 438.113477][ T819] usb 3-1: Using ep0 maxpacket: 16 [ 438.116019][ T819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.116048][ T819] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 438.116087][ T819] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 438.116108][ T819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.205158][ T819] usb 3-1: config 0 descriptor?? [ 438.890179][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 438.942657][ T31] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 439.029608][ T819] usbhid 3-1:0.0: can't add hid device: -71 [ 439.029746][ T819] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 439.059919][ T819] usb 3-1: USB disconnect, device number 39 [ 439.092815][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 439.095506][ T31] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.095542][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 439.095588][ T31] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 439.095611][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.136458][ T9603] 9p: Bad value for 'rfdno' [ 439.207070][ T31] usb 1-1: config 0 descriptor?? [ 439.453156][ T31] hid_parser_main: 514 callbacks suppressed [ 439.453184][ T31] nzxt-smart2 0003:1E71:2009.0026: unknown main item tag 0x0 [ 439.453218][ T31] nzxt-smart2 0003:1E71:2009.0026: unknown main item tag 0x0 [ 439.453243][ T31] nzxt-smart2 0003:1E71:2009.0026: unknown main item tag 0x0 [ 439.453268][ T31] nzxt-smart2 0003:1E71:2009.0026: unknown main item tag 0x0 [ 439.453294][ T31] nzxt-smart2 0003:1E71:2009.0026: unknown main item tag 0x0 [ 439.516517][ T31] nzxt-smart2 0003:1E71:2009.0026: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 439.681840][ T31] usb 1-1: USB disconnect, device number 34 [ 439.937598][ T9613] fido_id[9613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 439.998890][ T37] kauditd_printk_skb: 112 callbacks suppressed [ 439.998911][ T37] audit: type=1326 audit(1777924685.014:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1185" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9645cdd9 code=0x7ffc0000 [ 440.000654][ T37] audit: type=1326 audit(1777924685.014:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1185" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9645cdd9 code=0x7ffc0000 [ 440.013419][ T9587] sctp: [Deprecated]: syz.1.1174 (pid 9587) Use of int in maxseg socket option. [ 440.013419][ T9587] Use struct sctp_assoc_value instead [ 440.027649][ T37] audit: type=1326 audit(1777924685.044:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1185" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9645cdd9 code=0x7ffc0000 [ 440.027701][ T37] audit: type=1326 audit(1777924685.044:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1185" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9645cdd9 code=0x7ffc0000 [ 440.028931][ T37] audit: type=1326 audit(1777924685.044:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1185" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fda9645cdd9 code=0x7ffc0000 [ 440.028977][ T37] audit: type=1326 audit(1777924685.044:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1185" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9645cdd9 code=0x7ffc0000 [ 440.029017][ T37] audit: type=1326 audit(1777924685.044:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1185" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9645cdd9 code=0x7ffc0000 [ 440.029057][ T37] audit: type=1326 audit(1777924685.044:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1185" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda9645cdd9 code=0x7ffc0000 [ 440.029105][ T37] audit: type=1326 audit(1777924685.044:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1185" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9645cdd9 code=0x7ffc0000 [ 440.029144][ T37] audit: type=1326 audit(1777924685.044:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1185" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9645cdd9 code=0x7ffc0000 [ 440.496208][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.496289][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.299895][ T9639] 9p: Bad value for 'rfdno' [ 442.590479][ T6473] hid-generic 0007:0001:FFFFFFFC.0027: item fetching failed at offset 5/6 [ 442.627638][ T6473] hid-generic 0007:0001:FFFFFFFC.0027: probe with driver hid-generic failed with error -22 [ 442.660440][ T9646] tmpfs: Bad value for 'mpol' [ 443.240178][ T9657] FAULT_INJECTION: forcing a failure. [ 443.240178][ T9657] name failslab, interval 1, probability 0, space 0, times 0 [ 443.240215][ T9657] CPU: 1 UID: 0 PID: 9657 Comm: syz.2.1198 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 443.240239][ T9657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 443.240251][ T9657] Call Trace: [ 443.240260][ T9657] [ 443.240269][ T9657] dump_stack_lvl+0xe8/0x150 [ 443.240301][ T9657] should_fail_ex+0x46b/0x600 [ 443.240341][ T9657] should_failslab+0xa8/0x100 [ 443.240369][ T9657] __kmalloc_noprof+0xdf/0x7b0 [ 443.240395][ T9657] ? tomoyo_encode+0x28b/0x550 [ 443.240433][ T9657] tomoyo_encode+0x28b/0x550 [ 443.240471][ T9657] tomoyo_realpath_from_path+0x58d/0x5d0 [ 443.240506][ T9657] ? tomoyo_domain+0xd8/0x130 [ 443.240534][ T9657] ? tomoyo_path_number_perm+0x219/0x630 [ 443.240562][ T9657] tomoyo_path_number_perm+0x246/0x630 [ 443.240593][ T9657] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 443.240619][ T9657] ? __lock_acquire+0x6b5/0x2cf0 [ 443.240651][ T9657] ? do_raw_spin_lock+0x12b/0x2f0 [ 443.240713][ T9657] ? __fget_files+0x2a/0x420 [ 443.240738][ T9657] ? __fget_files+0x2a/0x420 [ 443.240756][ T9657] ? __fget_files+0x3a6/0x420 [ 443.240776][ T9657] ? __fget_files+0x2a/0x420 [ 443.240801][ T9657] security_file_ioctl+0xc3/0x2a0 [ 443.240832][ T9657] __se_sys_ioctl+0x47/0x170 [ 443.240864][ T9657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.240888][ T9657] do_syscall_64+0x15f/0xf80 [ 443.240911][ T9657] ? trace_irq_disable+0x3b/0x140 [ 443.240937][ T9657] ? clear_bhb_loop+0x40/0x90 [ 443.240964][ T9657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.240986][ T9657] RIP: 0033:0x7fb51756cdd9 [ 443.241006][ T9657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.241025][ T9657] RSP: 002b:00007fb5157be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.241048][ T9657] RAX: ffffffffffffffda RBX: 00007fb5177e5fa0 RCX: 00007fb51756cdd9 [ 443.241064][ T9657] RDX: 0000200000000000 RSI: 000000004008ae89 RDI: 0000000000000005 [ 443.241077][ T9657] RBP: 00007fb5157be090 R08: 0000000000000000 R09: 0000000000000000 [ 443.241091][ T9657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.241112][ T9657] R13: 00007fb5177e6038 R14: 00007fb5177e5fa0 R15: 00007ffd684363b8 [ 443.241148][ T9657] [ 443.241197][ T9657] ERROR: Out of memory at tomoyo_realpath_from_path. [ 443.682913][ T6473] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 443.837226][ T6473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 443.837265][ T6473] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.837310][ T6473] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 443.837334][ T6473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.896359][ T6473] usb 4-1: config 0 descriptor?? [ 445.157798][ T6473] microsoft 0003:045E:00F9.0028: unknown main item tag 0x0 [ 445.157843][ T6473] microsoft 0003:045E:00F9.0028: unknown main item tag 0x0 [ 445.157870][ T6473] microsoft 0003:045E:00F9.0028: unknown main item tag 0x0 [ 445.157895][ T6473] microsoft 0003:045E:00F9.0028: unknown main item tag 0x0 [ 445.157920][ T6473] microsoft 0003:045E:00F9.0028: unknown main item tag 0x0 [ 445.157946][ T6473] microsoft 0003:045E:00F9.0028: unknown main item tag 0x0 [ 445.157971][ T6473] microsoft 0003:045E:00F9.0028: unknown main item tag 0x0 [ 445.157996][ T6473] microsoft 0003:045E:00F9.0028: unknown main item tag 0x0 [ 445.158021][ T6473] microsoft 0003:045E:00F9.0028: unknown main item tag 0x0 [ 445.158047][ T6473] microsoft 0003:045E:00F9.0028: unknown main item tag 0x0 [ 445.301877][ T9655] netlink: 'syz.3.1197': attribute type 21 has an invalid length. [ 445.301903][ T9655] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1197'. [ 445.302008][ T9655] netlink: 'syz.3.1197': attribute type 5 has an invalid length. [ 445.302022][ T9655] netlink: 'syz.3.1197': attribute type 6 has an invalid length. [ 445.302035][ T9655] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1197'. [ 445.374939][ T6473] microsoft 0003:045E:00F9.0028: hidraw0: USB HID v0.01 Device [HID 045e:00f9] on usb-dummy_hcd.3-1/input0 [ 445.374976][ T6473] microsoft 0003:045E:00F9.0028: no inputs found [ 445.374991][ T6473] microsoft 0003:045E:00F9.0028: could not initialize ff, continuing anyway [ 445.426962][ T6473] usb 4-1: USB disconnect, device number 45 [ 446.037337][ T9688] 9p: Bad value for 'rfdno' [ 447.052869][ T5713] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 447.054417][ T5714] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 447.202524][ T5713] usb 2-1: Using ep0 maxpacket: 16 [ 447.202732][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 447.206505][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.206539][ T5713] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 447.206676][ T5713] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 447.206701][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.232553][ T9705] fido_id[9705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 447.287405][ T5714] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 447.287438][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.287458][ T5714] usb 5-1: Product: syz [ 447.287473][ T5714] usb 5-1: Manufacturer: syz [ 447.287487][ T5714] usb 5-1: SerialNumber: syz [ 447.343491][ T5713] usb 2-1: config 0 descriptor?? [ 447.383499][ T5714] r8152-cfgselector 5-1: Unknown version 0x0000 [ 447.383527][ T5714] r8152-cfgselector 5-1: config 0 descriptor?? [ 447.741417][ T5801] IPVS: starting estimator thread 0... [ 447.863912][ T9717] FAULT_INJECTION: forcing a failure. [ 447.863912][ T9717] name failslab, interval 1, probability 0, space 0, times 0 [ 447.863983][ T9717] CPU: 0 UID: 0 PID: 9717 Comm: syz.0.1214 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 447.864008][ T9717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.864019][ T9717] Call Trace: [ 447.864028][ T9717] [ 447.864038][ T9717] dump_stack_lvl+0xe8/0x150 [ 447.864070][ T9717] should_fail_ex+0x46b/0x600 [ 447.864110][ T9717] should_failslab+0xa8/0x100 [ 447.864139][ T9717] __kmalloc_noprof+0xdf/0x7b0 [ 447.864164][ T9717] ? sock_kmalloc+0xd6/0x160 [ 447.864198][ T9717] sock_kmalloc+0xd6/0x160 [ 447.864228][ T9717] af_alg_alloc_areq+0x99/0x200 [ 447.864259][ T9717] skcipher_recvmsg+0x321/0x1140 [ 447.864298][ T9717] ? __pfx___schedule+0x10/0x10 [ 447.864318][ T9717] ? __lock_acquire+0x6b5/0x2cf0 [ 447.864362][ T9717] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 447.864387][ T9717] ? __lock_acquire+0x6b5/0x2cf0 [ 447.864419][ T9717] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 447.864440][ T9717] ? security_socket_recvmsg+0x7e/0x2c0 [ 447.864467][ T9717] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 447.864495][ T9717] sock_recvmsg+0x172/0x1b0 [ 447.864532][ T9717] ____sys_recvmsg+0x1f2/0x4b0 [ 447.864570][ T9717] ? __pfx_____sys_recvmsg+0x10/0x10 [ 447.864616][ T9717] ? import_iovec+0x73/0xa0 [ 447.864645][ T9717] ___sys_recvmsg+0x215/0x590 [ 447.864680][ T9717] ? __pfx____sys_recvmsg+0x10/0x10 [ 447.864714][ T9717] ? __fget_files+0x2a/0x420 [ 447.864755][ T9717] ? __fget_files+0x3a6/0x420 [ 447.864787][ T9717] __x64_sys_recvmsg+0x1c0/0x2a0 [ 447.864818][ T9717] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 447.864858][ T9717] ? rcu_is_watching+0x15/0xb0 [ 447.864899][ T9717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.864924][ T9717] do_syscall_64+0x15f/0xf80 [ 447.864950][ T9717] ? clear_bhb_loop+0x40/0x90 [ 447.864974][ T9717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.864996][ T9717] RIP: 0033:0x7f429c97cdd9 [ 447.865016][ T9717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.865033][ T9717] RSP: 002b:00007f429ab8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 447.865057][ T9717] RAX: ffffffffffffffda RBX: 00007f429cbf6180 RCX: 00007f429c97cdd9 [ 447.865074][ T9717] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000009 [ 447.865087][ T9717] RBP: 00007f429ab8c090 R08: 0000000000000000 R09: 0000000000000000 [ 447.865100][ T9717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.865113][ T9717] R13: 00007f429cbf6218 R14: 00007f429cbf6180 R15: 00007ffd475c7178 [ 447.865149][ T9717] [ 448.099309][ T9713] IPVS: using max 7 ests per chain, 16800 per kthread [ 448.723703][ T5713] HID 045e:07da: Invalid code 65791 type 1 [ 448.790767][ T9721] FAULT_INJECTION: forcing a failure. [ 448.790767][ T9721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.791565][ T819] r8152-cfgselector 5-1: USB disconnect, device number 49 [ 448.791573][ T9721] CPU: 1 UID: 0 PID: 9721 Comm: syz.2.1215 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.791600][ T9721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 448.791611][ T9721] Call Trace: [ 448.791618][ T9721] [ 448.791627][ T9721] dump_stack_lvl+0xe8/0x150 [ 448.791659][ T9721] should_fail_ex+0x46b/0x600 [ 448.791698][ T9721] _copy_to_user+0x31/0xb0 [ 448.791725][ T9721] simple_read_from_buffer+0xe1/0x170 [ 448.791764][ T9721] proc_fail_nth_read+0x1be/0x230 [ 448.791801][ T9721] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.791856][ T9721] ? rw_verify_area+0x2ac/0x4e0 [ 448.791880][ T9721] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.791918][ T9721] vfs_read+0x212/0xa80 [ 448.791951][ T9721] ? __pfx_vfs_read+0x10/0x10 [ 448.791975][ T9721] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 448.791998][ T9721] ? lockdep_hardirqs_on+0x7a/0x110 [ 448.792029][ T9721] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 448.792050][ T9721] ? mutex_lock_nested+0x152/0x1d0 [ 448.792077][ T9721] ? fdget_pos+0x252/0x320 [ 448.792107][ T9721] ksys_read+0x156/0x270 [ 448.792133][ T9721] ? __pfx_ksys_read+0x10/0x10 [ 448.792166][ T9721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.792189][ T9721] do_syscall_64+0x15f/0xf80 [ 448.792218][ T9721] ? trace_irq_disable+0x3b/0x140 [ 448.792244][ T9721] ? clear_bhb_loop+0x40/0x90 [ 448.792272][ T9721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.792293][ T9721] RIP: 0033:0x7fb51752d60e [ 448.792313][ T9721] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 448.792331][ T9721] RSP: 002b:00007fb5157bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 448.792355][ T9721] RAX: ffffffffffffffda RBX: 00007fb5157be6c0 RCX: 00007fb51752d60e [ 448.792371][ T9721] RDX: 000000000000000f RSI: 00007fb5157be0a0 RDI: 0000000000000004 [ 448.792385][ T9721] RBP: 00007fb5157be090 R08: 0000000000000000 R09: 0000000000000000 [ 448.792398][ T9721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.792409][ T9721] R13: 00007fb5177e6038 R14: 00007fb5177e5fa0 R15: 00007ffd684363b8 [ 448.792444][ T9721] [ 449.028155][ T5713] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0029/input/input39 [ 449.123364][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 449.195946][ T5713] microsoft 0003:045E:07DA.0029: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 449.234002][ T5713] usb 2-1: USB disconnect, device number 21 [ 449.275088][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 449.298274][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.298309][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 449.298352][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 449.298376][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.306562][ T9732] FAULT_INJECTION: forcing a failure. [ 449.306562][ T9732] name failslab, interval 1, probability 0, space 0, times 0 [ 449.306594][ T9732] CPU: 1 UID: 0 PID: 9732 Comm: syz.4.1218 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 449.306615][ T9732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 449.306626][ T9732] Call Trace: [ 449.306633][ T9732] [ 449.306641][ T9732] dump_stack_lvl+0xe8/0x150 [ 449.306669][ T9732] should_fail_ex+0x46b/0x600 [ 449.306703][ T9732] should_failslab+0xa8/0x100 [ 449.306726][ T9732] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 449.306747][ T9732] ? __alloc_skb+0x1d0/0x7d0 [ 449.306766][ T9732] ? lockdep_hardirqs_on+0x7a/0x110 [ 449.306792][ T9732] __alloc_skb+0x1d0/0x7d0 [ 449.306817][ T9732] netlink_sendmsg+0x5d4/0xb40 [ 449.306849][ T9732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.306872][ T9732] ? unwind_get_return_address+0x4d/0x90 [ 449.306900][ T9732] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.306923][ T9732] ____sys_sendmsg+0x94c/0x9c0 [ 449.306952][ T9732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.306983][ T9732] ? import_iovec+0x73/0xa0 [ 449.307007][ T9732] ___sys_sendmsg+0x2a5/0x360 [ 449.307028][ T9732] ? __lock_acquire+0x6b5/0x2cf0 [ 449.307056][ T9732] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.307112][ T9732] ? __fget_files+0x2a/0x420 [ 449.307129][ T9732] ? __fget_files+0x3a6/0x420 [ 449.307155][ T9732] __x64_sys_sendmsg+0x1c3/0x2a0 [ 449.307181][ T9732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.307213][ T9732] ? __pfx_ksys_write+0x10/0x10 [ 449.307251][ T9732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.307271][ T9732] do_syscall_64+0x15f/0xf80 [ 449.307290][ T9732] ? trace_irq_disable+0x3b/0x140 [ 449.307310][ T9732] ? clear_bhb_loop+0x40/0x90 [ 449.307333][ T9732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.307352][ T9732] RIP: 0033:0x7f6d2f56cdd9 [ 449.307371][ T9732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.307389][ T9732] RSP: 002b:00007f6d2d7be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.307412][ T9732] RAX: ffffffffffffffda RBX: 00007f6d2f7e5fa0 RCX: 00007f6d2f56cdd9 [ 449.307427][ T9732] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 449.307439][ T9732] RBP: 00007f6d2d7be090 R08: 0000000000000000 R09: 0000000000000000 [ 449.307451][ T9732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.307462][ T9732] R13: 00007f6d2f7e6038 R14: 00007f6d2f7e5fa0 R15: 00007fffd8f85be8 [ 449.307495][ T9732] [ 449.392555][ T5714] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 449.572577][ T5714] usb 3-1: Using ep0 maxpacket: 16 [ 449.575810][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.575841][ T5714] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 449.575880][ T5714] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 449.575900][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.753539][ T10] usb 4-1: config 0 descriptor?? [ 449.757570][ T9737] fido_id[9737]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 449.803645][ T5714] usb 3-1: config 0 descriptor?? [ 450.206260][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 450.263565][ T5714] HID 045e:07da: Invalid code 65791 type 1 [ 450.270379][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.002A/input/input40 [ 450.322262][ T37] kauditd_printk_skb: 249 callbacks suppressed [ 450.322282][ T37] audit: type=1326 audit(1777924695.334:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.1222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 450.328650][ T37] audit: type=1326 audit(1777924695.334:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.1222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 450.340902][ T37] audit: type=1326 audit(1777924695.344:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.1222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 450.340960][ T37] audit: type=1326 audit(1777924695.344:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.1222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 450.341017][ T37] audit: type=1326 audit(1777924695.354:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.1222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 450.341065][ T37] audit: type=1326 audit(1777924695.354:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.1222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 450.341115][ T37] audit: type=1326 audit(1777924695.354:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.1222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 450.341161][ T37] audit: type=1326 audit(1777924695.354:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.1222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 450.346117][ T5714] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002B/input/input41 [ 450.347504][ T37] audit: type=1326 audit(1777924695.364:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.1222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 450.347610][ T37] audit: type=1326 audit(1777924695.364:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.1222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 450.382282][ T9744] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1222'. [ 450.686144][ T10] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 450.897185][ T5714] microsoft 0003:045E:07DA.002B: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 450.933724][ T6473] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 451.113749][ T6473] usb 5-1: Using ep0 maxpacket: 32 [ 451.161117][ T6473] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 451.161148][ T6473] usb 5-1: config 0 has no interface number 0 [ 451.164237][ T6473] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 451.164267][ T6473] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 451.164293][ T6473] usb 5-1: config 0 interface 85 has no altsetting 0 [ 451.201972][ T6473] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 451.202001][ T6473] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.202020][ T6473] usb 5-1: Product: syz [ 451.203678][ T6473] usb 5-1: Manufacturer: syz [ 451.203697][ T6473] usb 5-1: SerialNumber: syz [ 451.293714][ T6473] usb 5-1: config 0 descriptor?? [ 451.376882][ T10] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 451.537527][ T10] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 451.537560][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.606593][ T10] usb 2-1: config 0 descriptor?? [ 451.724159][ T9] usb 4-1: USB disconnect, device number 46 [ 451.731344][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 451.883844][ T10] gp8psk: usb in 128 operation failed. [ 451.885021][ C0] raw-gadget.3 gadget.1: ignoring, device is not running [ 451.885532][ T10] gp8psk: usb in 137 operation failed. [ 451.885549][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 451.885590][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 451.938076][ T9746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.941484][ T9746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.976423][ T10] usb 2-1: USB disconnect, device number 22 [ 452.052158][ T6473] appletouch 5-1:0.85: Failed to request geyser raw mode [ 452.052389][ T6473] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 452.549880][ T5713] usb 3-1: USB disconnect, device number 40 [ 452.576082][ T6473] usb 5-1: USB disconnect, device number 50 [ 453.352605][ T5713] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 453.562548][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 453.570245][ T5713] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 453.570280][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.570299][ T5713] usb 3-1: Product: syz [ 453.570313][ T5713] usb 3-1: Manufacturer: syz [ 453.570328][ T5713] usb 3-1: SerialNumber: syz [ 454.169328][ T5713] r8152-cfgselector 3-1: Unknown version 0x0000 [ 454.169358][ T5713] r8152-cfgselector 3-1: config 0 descriptor?? [ 454.619711][ T9794] FAULT_INJECTION: forcing a failure. [ 454.619711][ T9794] name failslab, interval 1, probability 0, space 0, times 0 [ 454.619773][ T9794] CPU: 1 UID: 0 PID: 9794 Comm: syz.0.1233 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 454.619799][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 454.619811][ T9794] Call Trace: [ 454.619819][ T9794] [ 454.619828][ T9794] dump_stack_lvl+0xe8/0x150 [ 454.619861][ T9794] should_fail_ex+0x46b/0x600 [ 454.619902][ T9794] should_failslab+0xa8/0x100 [ 454.619930][ T9794] __kmalloc_noprof+0xdf/0x7b0 [ 454.619962][ T9794] ? tomoyo_encode+0x28b/0x550 [ 454.620001][ T9794] tomoyo_encode+0x28b/0x550 [ 454.620039][ T9794] tomoyo_realpath_from_path+0x58d/0x5d0 [ 454.620072][ T9794] ? tomoyo_path_number_perm+0x219/0x630 [ 454.620093][ T9794] tomoyo_path_number_perm+0x246/0x630 [ 454.620113][ T9794] ? irqentry_exit+0x218/0x730 [ 454.620132][ T9794] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 454.620167][ T9794] ? hook_file_ioctl+0xdc/0x5d0 [ 454.620203][ T9794] ? __fget_files+0x2a/0x420 [ 454.620220][ T9794] ? __fget_files+0x2a/0x420 [ 454.620234][ T9794] ? __fget_files+0x3a6/0x420 [ 454.620247][ T9794] ? __fget_files+0x2a/0x420 [ 454.620265][ T9794] security_file_ioctl+0xc3/0x2a0 [ 454.620288][ T9794] __se_sys_ioctl+0x47/0x170 [ 454.620306][ T9794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.620323][ T9794] do_syscall_64+0x15f/0xf80 [ 454.620342][ T9794] ? clear_bhb_loop+0x40/0x90 [ 454.620362][ T9794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.620377][ T9794] RIP: 0033:0x7f429c97cdd9 [ 454.620393][ T9794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.620407][ T9794] RSP: 002b:00007f429ab8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.620425][ T9794] RAX: ffffffffffffffda RBX: 00007f429cbf6180 RCX: 00007f429c97cdd9 [ 454.620437][ T9794] RDX: 0000200000000240 RSI: 0000000000003b83 RDI: 0000000000000005 [ 454.620447][ T9794] RBP: 00007f429ab8c090 R08: 0000000000000000 R09: 0000000000000000 [ 454.620457][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.620466][ T9794] R13: 00007f429cbf6218 R14: 00007f429cbf6180 R15: 00007ffd475c7178 [ 454.620493][ T9794] [ 454.620646][ T9794] ERROR: Out of memory at tomoyo_realpath_from_path. [ 455.613779][ T37] kauditd_printk_skb: 67 callbacks suppressed [ 455.613800][ T37] audit: type=1326 audit(1777924700.624:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.4.1234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f56cdd9 code=0x7ffc0000 [ 455.613869][ T37] audit: type=1326 audit(1777924700.624:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.4.1234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f56cdd9 code=0x7ffc0000 [ 455.613917][ T37] audit: type=1326 audit(1777924700.624:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.4.1234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f56cdd9 code=0x7ffc0000 [ 455.613965][ T37] audit: type=1326 audit(1777924700.624:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.4.1234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f6d2f56cdd9 code=0x7ffc0000 [ 455.614012][ T37] audit: type=1326 audit(1777924700.624:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.4.1234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f56cdd9 code=0x7ffc0000 [ 455.614060][ T37] audit: type=1326 audit(1777924700.624:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.4.1234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f56cdd9 code=0x7ffc0000 [ 455.614106][ T37] audit: type=1326 audit(1777924700.624:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.4.1234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f56cdd9 code=0x7ffc0000 [ 455.640969][ T37] audit: type=1326 audit(1777924700.654:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.4.1234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f56cdd9 code=0x7ffc0000 [ 455.641021][ T37] audit: type=1326 audit(1777924700.654:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.4.1234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d2f56cdd9 code=0x7ffc0000 [ 455.641060][ T37] audit: type=1326 audit(1777924700.654:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.4.1234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f56cdd9 code=0x7ffc0000 [ 455.725752][ T9797] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1234'. [ 455.746360][ T9] r8152-cfgselector 3-1: USB disconnect, device number 41 [ 456.095777][ T9804] usb usb7: usbfs: process 9804 (syz.3.1237) did not claim interface 0 before use [ 456.506031][ T5714] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 456.562574][ T5713] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 456.652637][ T5714] usb 4-1: Using ep0 maxpacket: 16 [ 456.655201][ T5714] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.655227][ T5714] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 456.657010][ T5714] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 456.657038][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 456.657060][ T5714] usb 4-1: SerialNumber: syz [ 456.712699][ T5713] usb 2-1: Using ep0 maxpacket: 16 [ 456.716625][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.716658][ T5713] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 456.716701][ T5713] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 456.716725][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.796074][ T5713] usb 2-1: config 0 descriptor?? [ 456.831772][ T5714] usb 4-1: 0:2 : does not exist [ 457.100979][ T9825] FAULT_INJECTION: forcing a failure. [ 457.100979][ T9825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.101019][ T9825] CPU: 1 UID: 0 PID: 9825 Comm: syz.4.1243 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 457.101042][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 457.101054][ T9825] Call Trace: [ 457.101061][ T9825] [ 457.101069][ T9825] dump_stack_lvl+0xe8/0x150 [ 457.101099][ T9825] should_fail_ex+0x46b/0x600 [ 457.101135][ T9825] _copy_from_iter+0x1d3/0x1670 [ 457.101155][ T9825] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 457.101188][ T9825] ? __pfx_policy_nodemask+0x10/0x10 [ 457.101213][ T9825] ? lockdep_hardirqs_on+0x7a/0x110 [ 457.101235][ T9825] ? __pfx__copy_from_iter+0x10/0x10 [ 457.101261][ T9825] ? alloc_pages_mpol+0x2ae/0x380 [ 457.101294][ T9825] copy_page_from_iter+0x220/0x2d0 [ 457.101321][ T9825] tun_get_user+0x1bfa/0x4400 [ 457.101344][ T9825] ? is_bpf_text_address+0x292/0x2b0 [ 457.101371][ T9825] ? tun_get_user+0x8a1/0x4400 [ 457.101415][ T9825] ? __pfx_tun_get_user+0x10/0x10 [ 457.101441][ T9825] ? __lock_acquire+0x6b5/0x2cf0 [ 457.101482][ T9825] ? ref_tracker_alloc+0x332/0x4a0 [ 457.101502][ T9825] ? get_pid_task+0x20/0x1f0 [ 457.101530][ T9825] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 457.101552][ T9825] ? tun_get+0x1c/0x2f0 [ 457.101574][ T9825] ? tun_get+0x1c/0x2f0 [ 457.101602][ T9825] ? tun_get+0x1c/0x2f0 [ 457.101623][ T9825] ? tun_get+0x1c/0x2f0 [ 457.101650][ T9825] tun_chr_write_iter+0x119/0x200 [ 457.101676][ T9825] vfs_write+0x629/0xba0 [ 457.101711][ T9825] ? __pfx_vfs_write+0x10/0x10 [ 457.101742][ T9825] ? __fget_files+0x2a/0x420 [ 457.101772][ T9825] ksys_write+0x156/0x270 [ 457.101799][ T9825] ? __pfx_ksys_write+0x10/0x10 [ 457.101831][ T9825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.101864][ T9825] do_syscall_64+0x15f/0xf80 [ 457.101886][ T9825] ? trace_irq_disable+0x3b/0x140 [ 457.101909][ T9825] ? clear_bhb_loop+0x40/0x90 [ 457.101935][ T9825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.101955][ T9825] RIP: 0033:0x7f6d2f52d60e [ 457.101974][ T9825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 457.101990][ T9825] RSP: 002b:00007f6d2d7bdfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 457.102012][ T9825] RAX: ffffffffffffffda RBX: 00007f6d2d7be6c0 RCX: 00007f6d2f52d60e [ 457.102028][ T9825] RDX: 0000000000000036 RSI: 0000200000000080 RDI: 00000000000000c8 [ 457.102041][ T9825] RBP: 00007f6d2d7be090 R08: 0000000000000000 R09: 0000000000000000 [ 457.102054][ T9825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.102066][ T9825] R13: 00007f6d2f7e6038 R14: 00007f6d2f7e5fa0 R15: 00007fffd8f85be8 [ 457.102098][ T9825] [ 457.339428][ T5713] HID 045e:07da: Invalid code 65791 type 1 [ 457.409561][ T5713] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002C/input/input43 [ 457.596971][ T9833] FAULT_INJECTION: forcing a failure. [ 457.596971][ T9833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.597010][ T9833] CPU: 0 UID: 0 PID: 9833 Comm: syz.0.1244 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 457.597034][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 457.597046][ T9833] Call Trace: [ 457.597055][ T9833] [ 457.597065][ T9833] dump_stack_lvl+0xe8/0x150 [ 457.597097][ T9833] should_fail_ex+0x46b/0x600 [ 457.597203][ T9833] _copy_to_user+0x31/0xb0 [ 457.597236][ T9833] simple_read_from_buffer+0xe1/0x170 [ 457.597274][ T9833] proc_fail_nth_read+0x1be/0x230 [ 457.597311][ T9833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.597348][ T9833] ? rw_verify_area+0x2ac/0x4e0 [ 457.597372][ T9833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.597407][ T9833] vfs_read+0x212/0xa80 [ 457.597442][ T9833] ? __pfx_vfs_read+0x10/0x10 [ 457.597469][ T9833] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 457.597495][ T9833] ? lockdep_hardirqs_on+0x7a/0x110 [ 457.597519][ T9833] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 457.597544][ T9833] ? mutex_lock_nested+0x152/0x1d0 [ 457.597586][ T9833] ? fdget_pos+0x252/0x320 [ 457.597618][ T9833] ksys_read+0x156/0x270 [ 457.597645][ T9833] ? __pfx_ksys_read+0x10/0x10 [ 457.597679][ T9833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.597703][ T9833] do_syscall_64+0x15f/0xf80 [ 457.597727][ T9833] ? trace_irq_disable+0x3b/0x140 [ 457.597753][ T9833] ? clear_bhb_loop+0x40/0x90 [ 457.597779][ T9833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.597801][ T9833] RIP: 0033:0x7f429c93d60e [ 457.597822][ T9833] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 457.597841][ T9833] RSP: 002b:00007f429ab8bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 457.597882][ T9833] RAX: ffffffffffffffda RBX: 00007f429ab8c6c0 RCX: 00007f429c93d60e [ 457.597896][ T9833] RDX: 000000000000000f RSI: 00007f429ab8c0a0 RDI: 0000000000000006 [ 457.597908][ T9833] RBP: 00007f429ab8c090 R08: 0000000000000000 R09: 0000000000000000 [ 457.597921][ T9833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.597935][ T9833] R13: 00007f429cbf6218 R14: 00007f429cbf6180 R15: 00007ffd475c7178 [ 457.597972][ T9833] [ 458.346580][ T5713] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 459.246900][ T5714] usb 2-1: USB disconnect, device number 23 [ 459.394032][ T9849] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1249'. [ 459.725524][ T5713] usb 4-1: USB disconnect, device number 47 [ 459.757602][ T9859] FAULT_INJECTION: forcing a failure. [ 459.757602][ T9859] name failslab, interval 1, probability 0, space 0, times 0 [ 459.757639][ T9859] CPU: 1 UID: 0 PID: 9859 Comm: syz.1.1252 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 459.757661][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 459.757674][ T9859] Call Trace: [ 459.757682][ T9859] [ 459.757691][ T9859] dump_stack_lvl+0xe8/0x150 [ 459.757724][ T9859] should_fail_ex+0x46b/0x600 [ 459.757763][ T9859] should_failslab+0xa8/0x100 [ 459.757791][ T9859] __kmalloc_noprof+0xdf/0x7b0 [ 459.757815][ T9859] ? tomoyo_encode+0x28b/0x550 [ 459.757862][ T9859] tomoyo_encode+0x28b/0x550 [ 459.757898][ T9859] tomoyo_realpath_from_path+0x58d/0x5d0 [ 459.757942][ T9859] ? tomoyo_path_number_perm+0x219/0x630 [ 459.757968][ T9859] tomoyo_path_number_perm+0x246/0x630 [ 459.757998][ T9859] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 459.758023][ T9859] ? __lock_acquire+0x6b5/0x2cf0 [ 459.758053][ T9859] ? do_raw_spin_lock+0x12b/0x2f0 [ 459.758113][ T9859] ? __fget_files+0x2a/0x420 [ 459.758136][ T9859] ? __fget_files+0x2a/0x420 [ 459.758155][ T9859] ? __fget_files+0x3a6/0x420 [ 459.758173][ T9859] ? __fget_files+0x2a/0x420 [ 459.758198][ T9859] security_file_ioctl+0xc3/0x2a0 [ 459.758229][ T9859] __se_sys_ioctl+0x47/0x170 [ 459.758255][ T9859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.758278][ T9859] do_syscall_64+0x15f/0xf80 [ 459.758301][ T9859] ? trace_irq_disable+0x3b/0x140 [ 459.758326][ T9859] ? clear_bhb_loop+0x40/0x90 [ 459.758352][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.758373][ T9859] RIP: 0033:0x7ff7e0aecdd9 [ 459.758394][ T9859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.758412][ T9859] RSP: 002b:00007ff7ded1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.758435][ T9859] RAX: ffffffffffffffda RBX: 00007ff7e0d66090 RCX: 00007ff7e0aecdd9 [ 459.758451][ T9859] RDX: 0000200000000140 RSI: 0000000040084146 RDI: 0000000000000009 [ 459.758465][ T9859] RBP: 00007ff7ded1d090 R08: 0000000000000000 R09: 0000000000000000 [ 459.758479][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.758492][ T9859] R13: 00007ff7e0d66128 R14: 00007ff7e0d66090 R15: 00007fffff897898 [ 459.758528][ T9859] [ 459.758552][ T9859] ERROR: Out of memory at tomoyo_realpath_from_path. [ 463.093171][ T9904] FAULT_INJECTION: forcing a failure. [ 463.093171][ T9904] name failslab, interval 1, probability 0, space 0, times 0 [ 463.093233][ T9904] CPU: 0 UID: 0 PID: 9904 Comm: syz.4.1265 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 463.093258][ T9904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 463.093269][ T9904] Call Trace: [ 463.093277][ T9904] [ 463.093285][ T9904] dump_stack_lvl+0xe8/0x150 [ 463.093313][ T9904] should_fail_ex+0x46b/0x600 [ 463.093336][ T9904] should_failslab+0xa8/0x100 [ 463.093352][ T9904] __kmalloc_noprof+0xdf/0x7b0 [ 463.093366][ T9904] ? tomoyo_encode+0x28b/0x550 [ 463.093388][ T9904] tomoyo_encode+0x28b/0x550 [ 463.093408][ T9904] tomoyo_realpath_from_path+0x58d/0x5d0 [ 463.093432][ T9904] ? tomoyo_path_number_perm+0x219/0x630 [ 463.093447][ T9904] tomoyo_path_number_perm+0x246/0x630 [ 463.093464][ T9904] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 463.093479][ T9904] ? __lock_acquire+0x6b5/0x2cf0 [ 463.093504][ T9904] ? __pfx___schedule+0x10/0x10 [ 463.093528][ T9904] ? __fget_files+0x2a/0x420 [ 463.093542][ T9904] ? __fget_files+0x2a/0x420 [ 463.093552][ T9904] ? __fget_files+0x3a6/0x420 [ 463.093562][ T9904] ? __fget_files+0x2a/0x420 [ 463.093575][ T9904] security_file_ioctl+0xc3/0x2a0 [ 463.093593][ T9904] __se_sys_ioctl+0x47/0x170 [ 463.093607][ T9904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.093621][ T9904] do_syscall_64+0x15f/0xf80 [ 463.093634][ T9904] ? clear_bhb_loop+0x40/0x90 [ 463.093649][ T9904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.093661][ T9904] RIP: 0033:0x7f6d2f56cdd9 [ 463.093673][ T9904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.093684][ T9904] RSP: 002b:00007f6d2d79d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.093698][ T9904] RAX: ffffffffffffffda RBX: 00007f6d2f7e6090 RCX: 00007f6d2f56cdd9 [ 463.093707][ T9904] RDX: 0000200000000040 RSI: 0000000040046109 RDI: 0000000000000007 [ 463.093715][ T9904] RBP: 00007f6d2d79d090 R08: 0000000000000000 R09: 0000000000000000 [ 463.093723][ T9904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.093730][ T9904] R13: 00007f6d2f7e6128 R14: 00007f6d2f7e6090 R15: 00007fffd8f85be8 [ 463.093749][ T9904] [ 463.093789][ T9904] ERROR: Out of memory at tomoyo_realpath_from_path. [ 464.400998][ T9910] FAULT_INJECTION: forcing a failure. [ 464.400998][ T9910] name failslab, interval 1, probability 0, space 0, times 0 [ 464.401024][ T9910] CPU: 1 UID: 0 PID: 9910 Comm: syz.0.1270 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 464.401039][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 464.401046][ T9910] Call Trace: [ 464.401051][ T9910] [ 464.401057][ T9910] dump_stack_lvl+0xe8/0x150 [ 464.401077][ T9910] should_fail_ex+0x46b/0x600 [ 464.401099][ T9910] should_failslab+0xa8/0x100 [ 464.401115][ T9910] __kmalloc_noprof+0xdf/0x7b0 [ 464.401133][ T9910] ? percpu_ref_get_many+0x21/0x1e0 [ 464.401146][ T9910] ? io_cache_alloc_new+0x40/0x100 [ 464.401163][ T9910] io_cache_alloc_new+0x40/0x100 [ 464.401177][ T9910] __io_prep_rw+0x2bd/0xed0 [ 464.401197][ T9910] ? __pfx___io_prep_rw+0x10/0x10 [ 464.401212][ T9910] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 464.401234][ T9910] io_prep_write+0x36/0x110 [ 464.401248][ T9910] ? blk_start_plug_nr_ios+0x7e/0x1c0 [ 464.401265][ T9910] io_submit_sqes+0xb8d/0x2240 [ 464.401298][ T9910] __se_sys_io_uring_enter+0x34a/0x1c40 [ 464.401317][ T9910] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 464.401339][ T9910] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 464.401353][ T9910] ? fput+0xa0/0xd0 [ 464.401370][ T9910] ? ksys_write+0x248/0x270 [ 464.401385][ T9910] ? __pfx_ksys_write+0x10/0x10 [ 464.401401][ T9910] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 464.401416][ T9910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.401428][ T9910] do_syscall_64+0x15f/0xf80 [ 464.401442][ T9910] ? trace_irq_disable+0x3b/0x140 [ 464.401455][ T9910] ? clear_bhb_loop+0x40/0x90 [ 464.401470][ T9910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.401483][ T9910] RIP: 0033:0x7f429c97cdd9 [ 464.401495][ T9910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.401506][ T9910] RSP: 002b:00007f429abce028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 464.401520][ T9910] RAX: ffffffffffffffda RBX: 00007f429cbf5fa0 RCX: 00007f429c97cdd9 [ 464.401529][ T9910] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 464.401537][ T9910] RBP: 00007f429abce090 R08: 0000000000000000 R09: 0000000000000000 [ 464.401544][ T9910] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 464.401552][ T9910] R13: 00007f429cbf6038 R14: 00007f429cbf5fa0 R15: 00007ffd475c7178 [ 464.401571][ T9910] [ 464.992644][ T6473] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 465.015020][ T37] kauditd_printk_skb: 111 callbacks suppressed [ 465.015039][ T37] audit: type=1326 audit(1777924710.034:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 465.016256][ T37] audit: type=1326 audit(1777924710.034:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 465.016309][ T37] audit: type=1326 audit(1777924710.034:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 465.016648][ T37] audit: type=1326 audit(1777924710.034:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 465.018057][ T37] audit: type=1326 audit(1777924710.034:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 465.018111][ T37] audit: type=1326 audit(1777924710.034:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 465.021277][ T37] audit: type=1326 audit(1777924710.034:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 465.021331][ T37] audit: type=1326 audit(1777924710.034:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 465.021378][ T37] audit: type=1326 audit(1777924710.034:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 465.024128][ T9923] FAULT_INJECTION: forcing a failure. [ 465.024128][ T9923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.024157][ T9923] CPU: 1 UID: 0 PID: 9923 Comm: syz.2.1276 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 465.024178][ T9923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 465.024189][ T9923] Call Trace: [ 465.024196][ T9923] [ 465.024203][ T9923] dump_stack_lvl+0xe8/0x150 [ 465.024232][ T9923] should_fail_ex+0x46b/0x600 [ 465.024266][ T9923] _copy_from_user+0x2d/0xb0 [ 465.024288][ T9923] __se_sys_rt_sigtimedwait+0x10e/0x2f0 [ 465.024315][ T9923] ? __pfx___se_sys_rt_sigtimedwait+0x10/0x10 [ 465.024338][ T9923] ? fput+0xa0/0xd0 [ 465.024365][ T9923] ? ksys_write+0x248/0x270 [ 465.024388][ T9923] ? __pfx_ksys_write+0x10/0x10 [ 465.024417][ T9923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.024438][ T9923] do_syscall_64+0x15f/0xf80 [ 465.024457][ T9923] ? trace_irq_disable+0x3b/0x140 [ 465.024479][ T9923] ? clear_bhb_loop+0x40/0x90 [ 465.024502][ T9923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.024520][ T9923] RIP: 0033:0x7fb51756cdd9 [ 465.024538][ T9923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.024553][ T9923] RSP: 002b:00007fb5157be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000080 [ 465.024574][ T9923] RAX: ffffffffffffffda RBX: 00007fb5177e5fa0 RCX: 00007fb51756cdd9 [ 465.024587][ T9923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 465.024599][ T9923] RBP: 00007fb5157be090 R08: 0000000000000000 R09: 0000000000000000 [ 465.024610][ T9923] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 465.024622][ T9923] R13: 00007fb5177e6038 R14: 00007fb5177e5fa0 R15: 00007ffd684363b8 [ 465.024653][ T9923] [ 465.092586][ T37] audit: type=1326 audit(1777924710.034:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.1.1275" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0aecdd9 code=0x7ffc0000 [ 465.156062][ T6473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.156096][ T6473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.156133][ T6473] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 465.156154][ T6473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.185828][ T6473] usb 4-1: config 0 descriptor?? [ 465.930361][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.931070][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.347015][ T6473] hid_parser_main: 222 callbacks suppressed [ 466.347043][ T6473] hid-picolcd 0003:04D8:C002.002D: unknown main item tag 0x0 [ 466.347073][ T6473] hid-picolcd 0003:04D8:C002.002D: unknown main item tag 0x0 [ 466.347097][ T6473] hid-picolcd 0003:04D8:C002.002D: unknown main item tag 0x0 [ 466.347121][ T6473] hid-picolcd 0003:04D8:C002.002D: unknown main item tag 0x0 [ 466.347147][ T6473] hid-picolcd 0003:04D8:C002.002D: unknown main item tag 0x0 [ 466.347172][ T6473] hid-picolcd 0003:04D8:C002.002D: unknown main item tag 0x0 [ 466.347196][ T6473] hid-picolcd 0003:04D8:C002.002D: unknown main item tag 0x0 [ 466.347222][ T6473] hid-picolcd 0003:04D8:C002.002D: unknown main item tag 0x0 [ 466.347247][ T6473] hid-picolcd 0003:04D8:C002.002D: unknown main item tag 0x0 [ 466.347273][ T6473] hid-picolcd 0003:04D8:C002.002D: unknown main item tag 0x0 [ 466.582813][ T6473] hid-picolcd 0003:04D8:C002.002D: No report with id 0x11 found [ 466.842000][ T6473] usb 4-1: USB disconnect, device number 48 [ 467.440817][ T9950] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1283'. [ 467.877255][ T9966] FAULT_INJECTION: forcing a failure. [ 467.877255][ T9966] name failslab, interval 1, probability 0, space 0, times 0 [ 467.877288][ T9966] CPU: 0 UID: 0 PID: 9966 Comm: syz.0.1286 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 467.877310][ T9966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 467.877321][ T9966] Call Trace: [ 467.877329][ T9966] [ 467.877337][ T9966] dump_stack_lvl+0xe8/0x150 [ 467.877365][ T9966] should_fail_ex+0x46b/0x600 [ 467.877400][ T9966] should_failslab+0xa8/0x100 [ 467.877424][ T9966] __kmalloc_noprof+0xdf/0x7b0 [ 467.877445][ T9966] ? tomoyo_encode+0x28b/0x550 [ 467.877478][ T9966] tomoyo_encode+0x28b/0x550 [ 467.877511][ T9966] tomoyo_realpath_from_path+0x58d/0x5d0 [ 467.877549][ T9966] ? tomoyo_path_number_perm+0x219/0x630 [ 467.877574][ T9966] tomoyo_path_number_perm+0x246/0x630 [ 467.877600][ T9966] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 467.877623][ T9966] ? __lock_acquire+0x6b5/0x2cf0 [ 467.877651][ T9966] ? do_raw_spin_lock+0x12b/0x2f0 [ 467.877705][ T9966] ? __fget_files+0x2a/0x420 [ 467.877725][ T9966] ? __fget_files+0x2a/0x420 [ 467.877740][ T9966] ? __fget_files+0x3a6/0x420 [ 467.877756][ T9966] ? __fget_files+0x2a/0x420 [ 467.877777][ T9966] security_file_ioctl+0xc3/0x2a0 [ 467.877805][ T9966] __se_sys_ioctl+0x47/0x170 [ 467.877827][ T9966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.877849][ T9966] do_syscall_64+0x15f/0xf80 [ 467.877872][ T9966] ? clear_bhb_loop+0x40/0x90 [ 467.877895][ T9966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.877913][ T9966] RIP: 0033:0x7f429c97cdd9 [ 467.877931][ T9966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.877947][ T9966] RSP: 002b:00007f429abad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.877967][ T9966] RAX: ffffffffffffffda RBX: 00007f429cbf6090 RCX: 00007f429c97cdd9 [ 467.877990][ T9966] RDX: 0000200000000200 RSI: 00000000c0845657 RDI: 0000000000000004 [ 467.878002][ T9966] RBP: 00007f429abad090 R08: 0000000000000000 R09: 0000000000000000 [ 467.878014][ T9966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.878025][ T9966] R13: 00007f429cbf6128 R14: 00007f429cbf6090 R15: 00007ffd475c7178 [ 467.878057][ T9966] [ 467.878077][ T9966] ERROR: Out of memory at tomoyo_realpath_from_path. [ 469.659044][ T9979] tmpfs: Bad value for 'mpol' [ 472.629159][T10006] ================================================================== [ 472.629178][T10006] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 472.629219][T10006] Read of size 8 at addr ffffc90006361008 by task kworker/u9:1/10006 [ 472.629236][T10006] [ 472.629247][T10006] CPU: 0 UID: 0 PID: 10006 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 472.629270][T10006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 472.629284][T10006] Workqueue: hci0 hci_rx_work [ 472.629310][T10006] Call Trace: [ 472.629318][T10006] [ 472.629327][T10006] dump_stack_lvl+0xe8/0x150 [ 472.629353][T10006] print_address_description+0x55/0x1e0 [ 472.629376][T10006] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 472.629406][T10006] print_report+0x58/0x70 [ 472.629426][T10006] kasan_report+0x117/0x150 [ 472.629448][T10006] ? rt_spin_lock+0x20e/0x400 [ 472.629477][T10006] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 472.629510][T10006] __list_del_entry_valid_or_report+0xb5/0x190 [ 472.629540][T10006] kcov_remote_start+0x2af/0x710 [ 472.629560][T10006] hci_rx_work+0x10f/0x1040 [ 472.629581][T10006] ? process_scheduled_works+0xa70/0x1860 [ 472.629602][T10006] process_scheduled_works+0xb5d/0x1860 [ 472.629632][T10006] ? __pfx_process_scheduled_works+0x10/0x10 [ 472.629654][T10006] ? assign_work+0x3d5/0x5e0 [ 472.629675][T10006] worker_thread+0xa53/0xfc0 [ 472.629707][T10006] kthread+0x388/0x470 [ 472.629729][T10006] ? __pfx_worker_thread+0x10/0x10 [ 472.629748][T10006] ? __pfx_kthread+0x10/0x10 [ 472.629771][T10006] ret_from_fork+0x514/0xb70 [ 472.629793][T10006] ? __pfx_ret_from_fork+0x10/0x10 [ 472.629814][T10006] ? __switch_to+0xc79/0x1410 [ 472.629844][T10006] ? __pfx_kthread+0x10/0x10 [ 472.629878][T10006] ret_from_fork_asm+0x1a/0x30 [ 472.629909][T10006] [ 472.629916][T10006] [ 472.629921][T10006] The buggy address belongs to a vmalloc virtual mapping [ 472.629937][T10006] Memory state around the buggy address: [ 472.629947][T10006] ffffc90006360f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 472.629968][T10006] ffffc90006360f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 472.629982][T10006] >ffffc90006361000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 472.629991][T10006] ^ [ 472.630001][T10006] ffffc90006361080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 472.630014][T10006] ffffc90006361100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 472.630024][T10006] ================================================================== [ 472.630049][T10006] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 472.630065][T10006] CPU: 0 UID: 0 PID: 10006 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 472.630089][T10006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 472.630103][T10006] Workqueue: hci0 hci_rx_work [ 472.630124][T10006] Call Trace: [ 472.630132][T10006] [ 472.630140][T10006] vpanic+0x56c/0xa60 [ 472.630167][T10006] ? __pfx_vpanic+0x10/0x10 [ 472.630198][T10006] panic+0xc5/0xd0 [ 472.630221][T10006] ? __pfx_panic+0x10/0x10 [ 472.630247][T10006] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 472.630284][T10006] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 472.630314][T10006] check_panic_on_warn+0x89/0xb0 [ 472.630344][T10006] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 472.630374][T10006] end_report+0x73/0x170 [ 472.630395][T10006] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 472.630421][T10006] kasan_report+0x128/0x150 [ 472.630442][T10006] ? rt_spin_lock+0x20e/0x400 [ 472.630469][T10006] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 472.630501][T10006] __list_del_entry_valid_or_report+0xb5/0x190 [ 472.630531][T10006] kcov_remote_start+0x2af/0x710 [ 472.630554][T10006] hci_rx_work+0x10f/0x1040 [ 472.630586][T10006] ? process_scheduled_works+0xa70/0x1860 [ 472.630609][T10006] process_scheduled_works+0xb5d/0x1860 [ 472.630644][T10006] ? __pfx_process_scheduled_works+0x10/0x10 [ 472.630669][T10006] ? assign_work+0x3d5/0x5e0 [ 472.630692][T10006] worker_thread+0xa53/0xfc0 [ 472.630724][T10006] kthread+0x388/0x470 [ 472.630750][T10006] ? __pfx_worker_thread+0x10/0x10 [ 472.630771][T10006] ? __pfx_kthread+0x10/0x10 [ 472.630799][T10006] ret_from_fork+0x514/0xb70 [ 472.630823][T10006] ? __pfx_ret_from_fork+0x10/0x10 [ 472.630845][T10006] ? __switch_to+0xc79/0x1410 [ 472.630876][T10006] ? __pfx_kthread+0x10/0x10 [ 472.630903][T10006] ret_from_fork_asm+0x1a/0x30 [ 472.630936][T10006] [ 472.631528][T10006] Kernel Offset: disabled