last executing test programs: 10.382557731s ago: executing program 4 (id=730): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d98", 0xd9}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabda", 0x47}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe", 0x21}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x12710, 0x1, 0x8000000, 0x1000, &(0x7f0000007000/0x1000)=nil}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.737243804s ago: executing program 4 (id=746): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200007, 0x60}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x80}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xc, 0x3}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x200000a0}, 0x20000000) r2 = syz_ublk_setup_io_uring(0x6736, &(0x7f00000002c0)={0x0, 0x60d5, 0x10000, 0x3, 0x2d9}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x1c, "8cf1a55bc50b3edad54430d9de8004095d1004586e6c53c38ef49604"}, &(0x7f0000000180)=0x24) clock_gettime(0x0, &(0x7f00000005c0)) close_range(r3, 0xffffffffffffffff, 0x0) fsetxattr$smack_xattr_label(r2, &(0x7f0000000400)='security.SMACK64MMAP\x00', &(0x7f0000000440)={'fsuuid'}, 0x7, 0x3) 6.827703264s ago: executing program 4 (id=761): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000000000)={0xa, 0x4e24, 0xc, @mcast2, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="280000000000000029000000390000002f020201"], 0x28}, 0x44040) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f6044ae) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf250100"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f00000022c0)=""/144, 0x90}, {&(0x7f0000002380)=""/30, 0x1e}, {&(0x7f00000023c0)=""/223, 0xdf}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x4}, 0xe79}], 0x4, 0x60010112, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x0, 0x40000000007, 0x6811221d, 0x8, 0x8000000000000003, 0x200000200000003, 0xd}, {0x4000a, 0xfffffffffffffffd, 0x6, 0x7}, 0x401, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x0, 0x6c}, 0xa, @in6=@remote, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x7}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000500)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, 'system.posix_acl_default\x00'}}]}}) 6.444628016s ago: executing program 4 (id=764): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f0000000040)={'pim6reg0\x00', @ifru_ivalue=0x5}) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000e5787148f84b11dfc652f55be299339711d9ca721391a023ae5d9f38fc4acbdb126a4f36178098f69d09de9d85c682792c62c0b81b4b3cf74eab521cf9a151278eff6d9268151e7b5cd4dad17341a62de10872cff8dd279f246c0f61b8cf2b255255a1df06e629f3c90ea789e68763bdd2185e954bf26c01a6480cd38afe93dd7ec982ba6473309391e3e5c9b8f21cbd2307c29082693f92756522ddd0add4c164d0f23e0d556c6ac9783e17c89d0a8cb4f934ca61a543042c8d14"]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xa0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x4044) 5.164774914s ago: executing program 4 (id=770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x82, 0x0) write$vga_arbiter(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) sendfile(r3, r2, 0x0, 0xc00) close(r3) 4.257962568s ago: executing program 3 (id=779): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='yeah', 0x4) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000500000001c001a80080002802d07420008000200", @ANYBLOB="318742fe"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x1, [0x2], [0x2000, 0xfffffffc], [], [0x1, 0x2000000000]}) sendmmsg$inet(r0, &(0x7f0000005680)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000200)="a414c8ec7457e9938c4fd95429448e8f", 0x10}, {&(0x7f0000001cc0)="9f623e32234f18ceb94206bceaf86ee1ebf9ae53388648783efd9ca9711d78c4b83d7b665fb8dc97d44991127dc191bfa8e3e78e2387c5ef82ea05d93acbdc9c8722b5ef950384d7a8d73ddaf30f216143b917767a45a451c39aac4b97b21a5255c9275d31d5c024c4e8b3ebcc9229718d9a9ec9d62e945266284eff4c5b9ae9e6adc6b8b6", 0x85}, {&(0x7f0000000400)="df12d59ad2b4", 0x6}, {&(0x7f0000000500)="59237ec64d44b6890a6ba29d8093e91845cb09bdfa73adee4a87d89eaeb5f7a78853f2542f13022f1c0042f96ba9132e419ba4d2441b610b23ea239869f152415382c42732bd0aefb64bd6f3fbd2917064488012f6a89f161b1681f62ea06042ead39376420af56336253555d3ee5add72930be2925290f98c02dd60f5179824d8d8bc72d85f6cd9766d2f943fe236ef642c1e66a3e3ed7992c4aae3c636", 0x9e}, {&(0x7f00000005c0)="405bcfe9238f17a7ee14118930d4518375dc3325abea13d51e3524b9069496c748709193c50bc64c61e499d2918aab64e9228585933e8eaeb91d63514c477319c6a066ca48dc9744bc0f36c6d67178f442ef989f0cfd04a28bc3e1639cf6b212fe0e2d5eb3c2e0297fc505ca3e3c5993a468996aaa0d6698c617bbe8035fab5f366ce9281c1e4956e46caa98b62265e807f245b0156e7f215972874787a8db3d9a3acdd1ec78a1eda9c994f29e30a4b34636172d330cb07d9bbc327c99a18a5eb8ddc63a6f39", 0xc6}, {&(0x7f00000006c0)="5aaf7a9e6d00a10ccbb949", 0xb}, {&(0x7f0000000700)="45e1b06018f69df7751c02b9451a3c045a0034fffbda0d4097b3db86f7a39f36fff821f81e1eed635001ef7a5b707cb16b3d8982", 0x34}, {&(0x7f0000000740)="f73ca4987a04c4deefc292ffb826511c49a86d086982feff135764ae83fc3fa5f7d4fa6cc0a9627e4ecc084bdd07b47d8359b722a8cefdd23b2b572b3adb160484ef80255842611d2528573ad1c7867f555f8366765d8f8fe80a7cc68fbd00241968019412b1365b991e0472d5272c81f6700a1fad3dbc6da812e35ecad53b5929d3bd6741a94de107fd42b1fed30a44bd03b1de20da027b97cd20a5cd22316e55a1f651b187d8cc8a77877c7e37503d89c8310c845ce3bc161c1f393dc565b1e7556776d73ae85d834863aa09647146f5549361facd4b64f93487db1c092c24df921aef47d5a7", 0xe7}], 0x8, &(0x7f00000008c0)=[@ip_retopts={{0x68, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x60, [@private=0xa010100, @multicast2, @remote, @rand_addr=0x64010100]}, @generic={0xc, 0xd, "35c4a39a94637ecf916c45"}, @timestamp_prespec={0x44, 0x14, 0x4d, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@multicast1, 0x5}]}, @lsrr={0x83, 0x7, 0x1b, [@private=0xa010102]}, @timestamp={0x44, 0x8, 0x38, 0x0, 0x9, [0xffffff5c]}, @rr={0x7, 0xb, 0xf3, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x68}}, {{&(0x7f0000000940)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000003280)=[{&(0x7f0000000980)="7d2dd7061e229002096a18e48054b024b0644ab9f60a3d8d46bc74a9d12d31ca772e694955dd34da21402511111dc2519ff45931b468b40d42bf86d72efd46d911103bcb8552a60f22", 0x49}, {&(0x7f0000000240)="6279cde7c0334e48", 0x8}, {&(0x7f0000000a40)="128b3c21f2cfa6fa73074150b310f13e0767b66d39ed0a89984d555cbc12a4229caf56909ddcde9589640f612e6cf6c55800c94478a5acdf6d95b6f817528c4a35c07ea8d5fb32ab1864e8c04b3bedddf4bba9ada1f3e29ff37935096de3a2895877ea57276e6f5dc454d35ac13a5714f58f161de57f6fd3a53989215afbc9b5c29dbf3b4a6be6ce983b8a560bc9b046e0a5f9e435319e013a5fa214b775728d6a23c61ba19df315cb6694a7ac0c7cffdd40fe539be2bc65", 0xb8}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="9445dde687685fcec4d49b675f4f4644fca17d64d8f224fb39fcb9092faa6173569213f9daedb1bfde40945dba5dc8004bb50a8f568483c2596b2f3089a817b800d2ea90764d9ae213f23c80a0b6e0b1774ce31906a6204cd37cdfeb37147af853c49e8f5376f526dd496d17982d4b8387e93a7ac8307507b8abf445807307c14eb440b866ff527227b9b74cd2e9664bb96a22a0635af006eee0d4da6e349b19a77accf24482362284335286bee39f2e6608c6db126f6471b58a4cdaf6c3f5d4834e7f15fc749ef6100542cc86a1ab98c6d75127d10e072e51d5a8e392e65d97930f55d98b0635cc68515a923701c732", 0xf0}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000003080)="1ffc109a82cc7d0707ae5ce93e849d863ec4f15c4c1cd67d5e7565e7836b", 0x1e}, {&(0x7f00000030c0)="28ef88aaa96faa221edd389b672d0215296f9395d2666b819258bdc1ab9395340c601cd5657a08fa120dc401b157d6ca947df88f16dec9", 0x37}, {&(0x7f0000003100)="10aabc2e5d305574af6c0019165bef7ceaad2f33fda3c876761a00bed358fc529adf33ca5cfbdf7a871128b228d1ec7856bd79cec693bcc60293eaab1e02607f2d37c4d955e8f66ec7795c08bee6d6cdbd89d2ad9dccfc124a5f04925963327d17e569c91b4143a7fa39773e2acfe32c8142a6498cf370abd6a7132e94ceacd7b8d0ab81c429f6eceffc45aab9894fe1a606d7fad4dcfcf267ded080177e072fe4ea2bef9fe5144f32a500b8a65b59300d1453ad134d08adfd5c84f9a613e086f390d7281d9abe74a8b9506c76cbd92f1fae048db55e03c3a0fead36fe3ff9a4eb66d8e2dfa276be6ae90f5a25544a1be9", 0xf1}, {&(0x7f0000003200)="c65cf5c31e18a0de17a5d10e999c5a5831d8ec8239c0a1e8179db0e5a60bbef5d328ad1a181f7467a4cca23d9862046000013ddfb659f08dc8972785f2e0eaff111655abc87a1ddbf3d9df46267be966cf206ea532ea246a11e4ce14d7131741ab4d2202d31e9556c2e94eaa7e7999b1d4122765ce", 0x75}], 0xa, &(0x7f0000003400)=ANY=[@ANYBLOB="14000000000000000000000001000000ffff0000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="e0000002ac1414aa00000000140000000000000000000000010000004e00000000000000240000000000000000000000070000008614ffffffff020604415e6d0108e78e2f0a95c3000000001400000000000000000000000200000002000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f0000010a0101020000000011000000000000000000000001000000fe000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="e0000400ffffffff00000000"], 0xe8}}, {{&(0x7f0000003500)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000003600)=[{&(0x7f0000003540)="e86fee88868b6d6da11bdc5e4c8db19f7ae70f816f678914af71a7d111819118641838a298513afdee5a6971b617c9a593f9992889fc4086a1fc6f8e2d09a3c24ba147887f8fc615179cfa3ba6e77e97638ab3aced74e6f5936661148536346a2d317fc09b04d9850c9b97161caaa2d5a0bc74f50d3c2ad98641b8ba5098acb080f2a6b14ff9ad0eedd7c5d5efeb3ab054da202191532959141ec59df1194a8c6d0ecef3e80c2ad63b2758632e3dbc56ef1d92", 0xb3}], 0x1, &(0x7f0000003640)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003680)="7474358a9b57da4d2246ae5e7c9eb25cae021a48063fad4e229857c1d6401ed65485a88c7bc432f46cd48fab7b35730b692839ecefab4dc3fd9b5290841a7180cb249a27833fb3b1b4f1ad8f878d86df11dd8eada04b43bed29edc9af453c4c2e9a0a32e30119b477eb4af598c273f36c0384b73150175d4fbee661f92f638f1dd9d9cb8589def1fb44ed2246e96de13786b7542a230d98c99e97ae07a6f70a5af692750b5056b7e3f1aaf226acb2766e302bd79b3cd2319180cbbdc4a6cccb6e303c3cfcb18b260680dcc68a52f", 0xce}, {&(0x7f0000003780)="7b3eb69caa95f44ce1c4fac8325de0a9ca061200ed48e680ea6f4f3c8ec285ebfec1617e12e7b96fc4676a329e5cd1aab6a307f50d294f2a9ef716239c1c6ee064a98135563aaf7db8031270a6ecab70793798c224e1b8ca3ddf87047960cedeaf1557113fb4edb296ad23437e1289039b662b4330e02c1b89d70ab5d8c03aa045c4fcab7ac8300e55cadb9a29530ad510b791f07b7648eec5dfd5ba5f9b100dd7bbc8b2991229833208f281138884cd72b213d9c803ca11", 0xb8}, {&(0x7f0000003840)="2743e5c07f80846de49e0a793d3488bee2e5b536af510a472c4a14b97557c33e7f803a45cef4b4135c5266f8188065d407444011fc6c6bd4b4d26d65179332163ae7bf60d8b640b19baf468079bd4f1347408dd573041fecea1310e00fc6fbb35eb46e01ff4888a6061feb638a3ca8f323a7d202702082e7d00237ff829a385546", 0x81}], 0x3, &(0x7f0000003940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000003980)="a0822a2fdd973b19d15f39a9c9074c266bbd3aa49b9056d36e4b605d5aeef42b069f803b9fc1575140a734aed6cf5f5486c8ea76bdb4467a4d85020df059bdd09ec998e14687b515d936ef95b664368de58e7efd12de8428f51ff2ac065ea2be278c006664c91a9c99c3b1e41aa808ac9850bf6bebc40f4c69c4c7143dffab937009e65751f1b891434223e57222e424f89ae4acc8d9f1fc477b014a47df80d62aa768537eb3c40c73d99dfe746e984e8acffbcf4ce1beaa26540541e947c11dc39faac98aa67523cf5a1d", 0xcb}, {&(0x7f0000003a80)="3dac719e2b7d3a5e12be4a0db5052d9a35b4f31c500c3e7683c213a6f88413b7745b091984edc0a720e468e1a36d3e4b5e10bbd86609d2957600924cfada448e1dd6138702159f2dd4c9dc574a376b2b855e0d242dfe0b06c3f53040f6170062e4015456c91e33b5e4f46eae8799575805b58e3645a37acf25ed66f8f57c45881ce2b25694d5c1cd8b2f76a7159eab0e757641d24014ab36", 0x98}, {&(0x7f0000003b40)="7f228e1232a2d29f54a8893e6e7ff35cd464f6a817538275c85e1436c75e38a0749ad8cbceef260ab9f8ab3626ac182c5350fba13bd57d37211d", 0x3a}, {&(0x7f0000003b80)="5b0585cb4873fc5bb949d9f4b8a0ea00da07f233591e82e1523759040d2f570bc3a3605d03574b31740c317c14018dc825f65d1428111f3bf590126ab6abe30e6657ff5b092170024e07225834e43e55b16b82737eafc4c45224a18993423cd3ee61713e55a88d2b3671219be72c0486f42a6e944b4363eb953dc276123ebd92507b9bdfc76bb952fb87960ca6c837614cb20ab190dec043b89c1e344a089ae79f52df60ae1c5bbe7fe8cfb644e0514704913e763671992d53bc64", 0xbb}, {&(0x7f0000003c40)="6dfce75d8faf51dea5f734e0347c77dca5010a904d9bdc7d7c075da8711f90474b96c0bf9a91823bc6076bd94a603f1cc97d41abbea3818a31889f8defa29a3e33ec3c854e1ce9065fd8c8ba0bb51f30f639e3512478774ed29f1ae0d6da5b1c69049c74cba31873c68b8dea871870f9f4", 0x71}, {&(0x7f0000003cc0)="6828714056f6c4e51518d465f3455a693881f99b34045fee2af7177e85d50badd200a55101f1d879ae8aacb297", 0x2d}, {&(0x7f0000003d00)="451f72f21d5d13ddf39d58df23fb7e15b5777f3eef4e48f910cc6572d37aaac3848b0073", 0x24}, {&(0x7f0000001c00)="07dbedf44c9dd0519a8851e4f505ee07efa4e619e53ebb245f590336a396349ec1b6a3220aafbacb083483cdec68b9ce3bc135bf1776c74797dd38517b00b604674467f3269e41c6c3b5dae6bc0a2a564105627b82e268f63ad143b2dddf60092d58d18d2d131d1db2ff3b3ec3fc2f8a2e6e222ada94cbbdfa109003b9ebee6aa7a4b31fc6134d6a52e484785c0cbf1bb22c63bb9514d54e0a8d4ccaca66183b", 0xa0}, {&(0x7f0000003e00)="068a807471ba357e64998be8f7f9483099c08b190d03b3e62da6c0539ff8a103003c0f461dcf9e0ec40a8c9f5d87bd897c9ad60981960f480fcc3ae0db91791a73a2adba3bb26e", 0x47}], 0x9}}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003f40)="589e3df5d470946ce100cdafeae79fde72b8cecb6f645b797624cdf33bf97007d7ad9d20aed130aa719199d85b032850f6927255f754f62947d8cb573af026a6d3d7b2fa67e859404b49e55fde9e1b3d46892b5a", 0x54}, {&(0x7f0000003fc0)="efd7a962c49d6af1b62c297cb56696f3c6de56a6b1b8efbc61a27c45a00e05b2ec4eac2ab3e42f1b01ec", 0x2a}, {&(0x7f0000004000)="2098fd27e64944d8ab9b826a8e1d3e869813b38cb054715501f07fa91edb25b9f4670acf2f6bf5e558f31cab627e42608d49b58386042870cb70a989b9adc48391de1de3dac5c5af2f4ca8928acb6b5fc8f6f35863f202f62301ff5e9b228e32c5aed40d71384cf7f6c925aba4a78fdc729ec4", 0x73}, {&(0x7f0000004080)="7905061d32000af1694541c79b118dc984959a50e7d7f771120380625b1c8551f9c11642140706e4f924c234497092", 0x2f}, {&(0x7f00000040c0)="389563a989d048d2240ebf5ba289101eae66b1fa509ce37446d0cda4b3f38a625b9c156bc545cad0587bc64cdda428095a5cb4d1b5c6c81aa960983bbb3d1b353e472d76412d9d5855ff9dceb4d3a24381098945b387724b8e15f456d36791696e088e74042205b8a8be5ab3cb0953f49376a3b6ed5c0aa63f674e74c1706be71c49885de27056256ff8ce4e36229194271eb7d285493a4c8be38abbe502870bd9c2ab7acd6b8aa4e39b901c1f1888c1deba7b16b4b5a5ff2a86f103e967abeee4", 0xc1}, {&(0x7f00000041c0)="11bbe9a17f3000b991ea9559b6127b510e5f3da4b1c1a952da17f9e01d423b0247107beab9b381d08ff162107d92492f0791329d1d8e650e02b2f7b914b63bb50b0720086adf03e77f56551760961c2132066b1fdba6a5cfa3b1554aff89f82a15c33e902e82833c0cdf8a3ed566f06e09033a9e40ece7a74dab5313f1f93b268a8392387f04da0f5f8930562faf4f0423df4d4b2a86a90f604dabfd47aa5a80d726dc", 0xa3}, {&(0x7f0000004280)="3f3c2e9ebfcc5995ae614cb61d6ca101fea5fcb1683192afb4ea4018b722456a57261e243409510dffb4865e25bdbc62bfada4dcd34a84e3805a4fcbe949513ed0d8670fb56c3af4c398dcefdeaa3ce1c3776663f1335c61240a34f23b3e13de12a2585abcaddf6437c77f3774dd0889ff302487d0ed4dd3beded051c0caed6744305702", 0x84}, {&(0x7f0000004340)="c6cbf4b00c940dc8d6975b9555a0925c2624d4fb73f1fa9411e6c80004a91bbb1314d7d89939e6b63fec7520cc4d4ce08542c1c9c1e2debea034f1fe1db75c673189021b7e098058ca9310059074248e", 0x50}], 0x8, &(0x7f0000004440)=[@ip_ttl={{0x14, 0x0, 0x2, 0x635}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xac}}], 0x30}}, {{&(0x7f0000004480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000004900)=[{&(0x7f00000044c0)="4c99716b5a64f9a4aa1cba9a233a6e29f330b9011b686e0074a7168675e7674ddc4925bac28e478069b008336182dda51363395973517f8441e124b67bbc5a317380472055540d2933e1c117785f4695a440f9782374c968c7bae1a8866996958e80b95885aa001812663e997ba56253d412c341d8f667c11938d65de3d5d7d83653b61cf70c04a543270a9d4cae77222932de0e6187fc4199603ab178a858f3b6741e167f4cd73dd88aa1721c818515d030acf38da964b72692c13ab816b7f87d60b525045f5cd751200666949f67f30e09f8fdd49ea334d1139768c333d99b2301", 0xe2}, {&(0x7f00000045c0)="b7d8ec457a11b9244965aa0b20f100822191bb0c492c8b133370aff4c2af01ac0009b38adf418b8d18ffb986feeebb6ae35d24b96e5a4bc8a5beaa35d2baf7d68159dc0a77e1b5c762cf0f9a879d38abbbca6e0aec4340b2665cec059d94908822a083a8202f70e102666a92c02c4567ffae8e0059be2bb7fd9e83c34300c5d2b9232ab47ed84e4987673c913fe8ebea345eeb582b1e60dfe5fd8871f847cc93e6f51c48775e93194694857d122701a0db8c5ff50f1153ef8a7e508a39e84a48554b941e893ee5ed596bcf591a665273e071e171cbc6df86fa94276d2aec59d2f2e02c375d079e434216e81c0430a272d81d", 0xf2}, {&(0x7f00000046c0)="e0d053fbe4974a1191bd4e9b6a97e4dda7a4309aca353078a2fafc18dbace7b86b0c4d352f2eab10c90cbc96366993a58212425220e6cfc010fce13242ca7c4cc21f492e4df0b8a3b54b239b6d603f3877daa39339ceafc646df8693bf41bc267e9cb6636b3d08e1f5088fb1bc0c798e9597ad7bdbc947efe8fd7c1b7a7a5914d1a1cacbe4b303032c86aa61a458aabbf3e166262791b37d441b2d41b997d2cb054e", 0xa2}, {&(0x7f0000004780)="4485b7faab7a32b5c89c615f7fe2bc8a10ebab52bb1d126a36fe6d2ed95073780805c4327d55ae05c041b62789b3361f229183b20bbf12be124fff31c54e84eefa4f1372ebfc74f88348af654185e84e693a316bc54f39b4f9640dbbea741b1b4c3bd32028af777e6162b23f2c7ecb1e0dca291ff2444add03f71e8e1f4d898d80aa4f8f2147d455b437882b878dd24bff5f580357b5204e5dfb55e03b29fa4a9d4685e6155b3d0a93ea83b257bfb1215bfab0a08ae9c7d03e73d6a03b0e7d2e5dd0186638965e7f04bccddfa2e51c0e765df9e277", 0xd5}, {&(0x7f0000004880)="c856a51aa8cb1e2ad08cf6f194fd85cf055a9aa05fbac9856ab1f2bf976a07855ec70507bc8724d05d646d751b9d871ec40fb480ccb006c070cc23f0a56644a0c0b5dfa211e53fa98fad803bdbddbe9513562ddd0fdbb7dd0ac8320a9a7d043c051affe1de8751b9e3659148", 0x6c}], 0x5, &(0x7f0000004a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010100}}}], 0x78}}, {{&(0x7f0000004ac0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000004d40)=[{&(0x7f0000004b00)="d92dd8154aba8626069e0d618a006ed8b85cfaeb04fa919df3d2c6404f4b511cb9ea8d08ba3d0d", 0x27}, {&(0x7f0000004b40)="33d767c4963fe0aa50c0f38023aa4cfbae5dc9daeb8d5136301b43c951c12b7f562351194e4a76508dc109f07f967db7f65839ef2728cfa7dac06ae10df5b8b4fb215de6c10ee04704aee36d60aaac76c57e7a0f3d9676842c23fb463834e3798fd523fbb30de6f201b1935c6bb43d1b11177b546a9f9cf148aa11a65c91df2a6f09fc172998fdb964d620ad2cf9be337a05a22efbbffc530168b3a9f90dfc9d76fb3bfe76e63fee9ad18a34ea9611020ffd8fb19276ed683f998c1d3ac3a0d7d06bdada6475f7d2d271b113948d7db239035756d3aa3ac85a62595dae64945a38a6", 0xe2}, {&(0x7f0000004c40)="e8af66ff2415aa128a7dbbbe5cbe86554e14e15745894b7f77b24f10d0d339cf0473799cae64b4eeaef126a90315db9b367aee287e1dc4988ae3e3592e6185a7cb2f37523e92a0c3343955a0c3eca7be68f2416eb79195e7702a7b3cc65d9389c8888a705f2a1bd3cc8c22bb807f24ecc8cb676cd50b47dad5c54afde34389c3be63278aed93c76928da4abe2f95d8da551fcc32ab4141dca7901adaa72ad28247ae78a826b4dad8662b5c2fab0f17160a76840b1eba853f747d8316b7783456493b4a09c2e8ede1f96a1cf9d54cea65862a66710a91ecb6e895be4766fa0073324b1f71e032eb800f84a513a6de4b4d", 0xf0}], 0x3}}, {{&(0x7f0000004d80)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000005200)=[{&(0x7f0000004dc0)="f46e4f679612ee6ea73f599a3188fadd40f6c460c6510be17a894972932139ac2cc2a8d09fc888820904230bc61ce51ad13f5c9c177a08b731f617084fc7dcddf336abee345564951f", 0x49}, {&(0x7f0000004e40)="084c9df819c7c9d247b62bc45a8077c5ed2d73b22332db43f1bb8c12afb043b315922a9d388210afbffa23451664cc731b285f552ff227d174a7c6be2e1614f59343cdb6e58995a7316d0f48e32350a5ac8d3b9bc0d75a5f8772139652fb51ee89381307c2cf911b277e8c92d025f7527b33ef8b1a30ecea430291c6b6cacdcd676d05082022c572f9f11cd0fff84b792c170567fda1f303a6d5c3ba649f102493c983868e7c5f3af3ae10bd07e44b240885f09c46f2853c70cae547fba4882a271b345c43016aeddd924eece48d7e473403122ec7d608c770c4e1bc73f177b2b22dad57e7ef637fa00aa362e77efcf5de38cef9ae5ebd0f", 0xf8}, {&(0x7f0000004f40)="5e8adb31df62b2203a8c57cb0526db7ca685075be7f82c62470ba3448491a375b119a995581c32b7be329ae42a53c28fc5e1b323bc4fc4f6df8ce6743759c20fffe14cdebb9c994523eeb9d60a2aa2094b65f9464b47d2d56e791ac2ea48f45ab7074c169214641fd1833102d69c4dd0a6201a83dc5fe8632eda8f5bb4d7a7feb17e99f15fbf513f3766f0f636e827451a8a742ef4585501cc7248fd0f312887f5aa551717acd7594644a5310ddd4dff953cac4e88ccba7e5d5ff5a8bc699ebe27d4125bd030273f76dcbb6f085328431a", 0xd1}, {&(0x7f0000005040)="d234ea04223e3c6c86e6b3df38526bb8e4b93f94ffe5af6bc60ed6bfe130a63c9624925f99d7f674089346e9efb05222abc6cd53c7c0b7548252ee1bb6eb6202e46016fb15a8dcbe6118144a23e5dea28d6ff20aa23dd0030bd69d84ef3b631c287a55dfe381da6a84f3dc4598ca04bfead935dec81ee9838bb1627941f5f8552e827877395a99a80b608f3828f8e6f14f98e5cbee3542ec0aa173b8b5377e1104bf871642045e74f392285f7f5663cd986e89869bb1eb3e1aaefbed14154b0c0c871ea66e298dc16addaee573319e6ac237250be65507f02e7d40716a19fb", 0xdf}, {&(0x7f0000005140)="e7721a1e9f04b980f1e451908e9ad7c1e0c1402df011cf3af5318f4dcc65d6031fb25aa6c8a6b20be4eff9e56b12474039f3254503af65780383de309de5e4fcbfa792a1d8b3129bd191248141cad060a718ee15363068b7a304f0d3fc772b30b66999b945f4c44d3836165b748d2a0095733e1713c99cf366012eb06426d6908220d179469774d0b759f7e0b216ce5527acc6d3e4590a8e963f2c17c6fa9d23a72e8c26dc", 0xa5}], 0x5, &(0x7f0000005280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x5b, 0x0, 0x1, [0x4]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}], 0x30}}, {{&(0x7f00000052c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000005500)=[{&(0x7f0000005300)="21ee40337a1f1d5c65691382252298ddbeface61f306a8a6cd4295280098ec0de6fa4b6d78eab2940d94850018f23822d8f878b62f8d0f28c4b9f64b2075a0065097046c136af9c0240f9ccf88a5e87738a7af283f2b24284356184b9dfe8eda50fe796e13606b9c4106656e4212e08efff92e3448b591bb5506eb37d3e691609b67ced0cfc9978ade0578e4bef39a0775cbd9032ecca752702c4555284e47ed9052d45b3a47c11405b8b27b8399b04fd29f539a6849", 0xb6}, {&(0x7f00000053c0)="810681e40ca54b8f998a9d1d493a60b4c183bc48eced517786f07e3a71c06a766eee447a5e", 0x25}, {&(0x7f0000005400)="39ac671f0b38cedcb85bdf4f87b7e331ff1b9dd2e13cdc869d6ba696859e1b310660367bf45182165ac722476d7ca5fbbab845f265f8523a2d87fc05b1d4fa57fff0c6b62288211e069d2ed10bf87b460ef2315fc782975ffcc9c8ed2294acdb8d2ff7c7334d963f06bd54c01408c866d0ee683aacd98346c0c0880ea353e3654dbcfb354cb343ceb280a60c07db3dbfc43018d8d59791a8285c6d5e709021ff6a122a2f0d5a792e70248b3c8c678244edf75c6ba68b774b1e3269f58e2d90380519", 0xc2}], 0x3, &(0x7f0000005540)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@noop, @timestamp={0x44, 0xc, 0x32, 0x0, 0xd, [0xffff, 0x4]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0xe, [0x1]}, @timestamp_addr={0x44, 0x14, 0x32, 0x1, 0x6, [{@loopback, 0x6}, {@remote, 0x9}]}, @timestamp_addr={0x44, 0x34, 0xd7, 0x1, 0x1, [{@local, 0x3d6}, {@broadcast, 0x81}, {@multicast1, 0xa35f}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x6}, {@empty, 0x4}, {@private=0xa010101, 0xd4e}]}, @generic={0x44, 0x9, "42906cd0abd1ae"}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010100}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x228}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x5e, 0x0, 0x5, [0x3, 0x4a]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11}}], 0x138}}], 0xa, 0x4000000) sendto$inet(r0, &(0x7f0000000040)="1716305cc82b514875a73c705a353e5272f208da4a6d706bf88999fbf54b441ac8af0ebbab194a82ccc147f0a1df6b22aba5689ae5", 0x35, 0x14048015, 0x0, 0x0) 4.041053248s ago: executing program 3 (id=782): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b0"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf533f4677a598d44, 0x38011, r1, 0xffffa000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002000)=@generic={&(0x7f0000001000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x8}, 0x18) 3.617298319s ago: executing program 2 (id=789): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x8004) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$XFS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000040)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40000}, 0x1c) syz_genetlink_get_family_id$smc(&(0x7f0000000700), 0xffffffffffffffff) socket(0x15, 0x5, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x4) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) tkill(r3, 0x12) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e22, 0x3e471dfd, @mcast1, 0x2}}}, &(0x7f0000000680)=0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x10) 3.417299971s ago: executing program 0 (id=792): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x0, 0x6, 0x3) (fail_nth: 3) 2.971257706s ago: executing program 0 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000800)="00112233445566778899aabb0800", 0xe, 0x0, &(0x7f0000000900)={0x11, 0x15, r1, 0x1, 0x0, 0x6, @local}, 0x14) 2.878380125s ago: executing program 2 (id=796): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xf151fbeec6f74608}, 0x40000) 2.728279355s ago: executing program 2 (id=797): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0xa66}) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) io_uring_setup(0x66de, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, 0x0) (fail_nth: 1) 2.653995054s ago: executing program 4 (id=799): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000000c0)=@sg0, r0, &(0x7f0000002b80)) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r1, 0xffffffff, &(0x7f0000000400)="03000000010000000100"/20) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)=ANY=[], 0x48) r3 = socket$inet(0x2, 0x3, 0x2f) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xee0001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0xc048aec8, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0xffffffff}) sendto$inet(r3, 0x0, 0x0, 0x48041, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r2, 0x3) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40810) shutdown(0xffffffffffffffff, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[]) ioctl(r1, 0xc0145608, &(0x7f0000000b00)="00000000010000000100"/20) 2.487818927s ago: executing program 0 (id=802): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) 2.09928975s ago: executing program 0 (id=803): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_bridge\x00', &(0x7f0000000100)=@ethtool_test={0x1a, 0x3, 0x1, 0x4, [0x1, 0xfb3, 0x4, 0x8000]}}) 2.09407389s ago: executing program 3 (id=804): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000900)={r2, 0x1000, 0x1, 'S'}, 0x9) (fail_nth: 3) 1.992414413s ago: executing program 2 (id=806): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x8004) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$XFS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000040)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40000}, 0x1c) syz_genetlink_get_family_id$smc(&(0x7f0000000700), 0xffffffffffffffff) socket(0x15, 0x5, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x4) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) tkill(r3, 0x12) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e22, 0x3e471dfd, @mcast1, 0x2}}}, &(0x7f0000000680)=0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x10) 1.651893432s ago: executing program 3 (id=807): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xf151fbeec6f74608}, 0x40000) 1.515944239s ago: executing program 1 (id=808): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 1.369837818s ago: executing program 2 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x82, 0x0) write$vga_arbiter(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) sendfile(r3, r2, 0x0, 0xc00) close(r3) 1.369487968s ago: executing program 3 (id=810): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r0, 0xffffffff, &(0x7f0000000400)="03000000010000000100"/20) 1.160416073s ago: executing program 1 (id=811): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0xb3, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e2401014736190a1c39405fab001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e0200000705810500040100e88a1bdf1ec84ca0", @ANYRES32, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32], &(0x7f0000000600)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.149494756s ago: executing program 0 (id=812): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x803, 0x0) r1 = eventfd2(0x50, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1) pipe2$9p(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r3], 0x15) connect$can_bcm(r0, 0x0, 0x0) 1.027268929s ago: executing program 1 (id=813): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x9, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400402, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000502, r4, &(0x7f00000001c0)) fcntl$lock(r3, 0x7, &(0x7f0000000200)={0x2, 0x4, 0x40, 0x4, 0xffffffffffffffff}) r5 = accept$unix(r0, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) close_range(r5, r2, 0x0) r6 = dup(r1) mkdirat(r0, &(0x7f0000000300)='./file0/file0\x00', 0x190) ftruncate(r1, 0x9) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r7, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffff1, 0x27}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, &(0x7f00000004c0)="199136fd5c6193bd3094cfe0a6f4720f4841a03cfad7e8d5c83dde87c98c686f1e5e4dcb5aed53e2891ef12c770940ae6e2bef58a7433520aadc21e5ea315404d11d48d4edd59cae42470b8751da6b3f861e6ec7cdfee3f0a34db3bdfa63f76e1887cdd627083f9a17a373523f1c049f339e0034b8dd38de642063315b2932e349aa8c25deecb9ace0fb33573c0842753637afcf9470d182b47b25152cdc0d1fb96dcd1ec813dc202a97e76c34d54747268397054d40da") r9 = accept4$x25(r0, &(0x7f0000000580), &(0x7f00000005c0)=0x12, 0x80800) ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, 0xffffffffffffffff) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000600)=@gcm_128={{0x304}, "71758d98dbdc5ab0", "adf0c8cf2ad7277359deeff70eba75ca", "d1232d15", "50f4e517a80cb751"}, 0x28) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000640)=0x6, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000680)={@local, 0xd, 0x0, 0x3, 0x2, 0xd, 0x120}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r10, 0x891b, &(0x7f00000006c0)={'vcan0\x00', {0x2, 0x0, @empty}}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000700)="4d8e122463e2099966240845ebaf2156", 0x10) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000740)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) waitid(0x1, r11, &(0x7f00000007c0), 0x8, 0x0) waitid(0x0, r11, 0xfffffffffffffffc, 0x8, &(0x7f0000000840)) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000900)={0x0, @data}) 922.40893ms ago: executing program 0 (id=814): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b0"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf533f4677a598d44, 0x38011, r1, 0xffffa000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002000)=@generic={&(0x7f0000001000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x8}, 0x18) 744.225027ms ago: executing program 1 (id=815): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) r3 = syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) fgetxattr(r3, &(0x7f00000001c0)=@known='system.posix_acl_default\x00', &(0x7f00000006c0)=""/135, 0x87) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000140)=0x7, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x100, 0x0, 0x25df5bff, {0x0, 0x0, 0x0, r2, 0x50010, 0x50042}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @empty}, @IFLA_GENEVE_TOS={0x5, 0x4, 0xe0}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0xf, 0x4) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x8, 0x8, 0x68}, 0x10) 557.983085ms ago: executing program 1 (id=816): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d697400"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000600)={0x58, r3, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xe53}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x58}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) socket$inet(0x2, 0x5, 0x7) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xfffffffa}}, 0x10) syz_usb_connect(0x3, 0x46, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0xf7, 0x58, 0x95, 0x40, 0xb95, 0x7e2b, 0x60a1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x7, 0x30, 0x7, "", [{{0x9, 0x4, 0x7b, 0x5, 0x3, 0xe7, 0xbc, 0xd5, 0x6, [], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0x8, 0x22, 0x8}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x2, 0x97, 0xb4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0xfeff}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x5, 0x5, 0x1f}}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200081, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) r6 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x1) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffb, 0x6, 0x5, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="23c5f407037f", 0x0, 0xfffffff9, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) 441.201025ms ago: executing program 1 (id=817): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) (async) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000280)=""/229, 0xe5, 0x40002080, &(0x7f0000000380)=@hci={0x1f, 0x3, 0x2}, 0x80) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03170000018400002c0012800e000100616e000000180002800800050000000000040012000500160001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$MRT6_PIM(r3, 0x29, 0xcf, 0x0, 0x0) (async) setsockopt$MRT6_PIM(r3, 0x29, 0xcf, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001840), 0x3b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='md0', 0x3) 68.815414ms ago: executing program 3 (id=818): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) (fail_nth: 3) 0s ago: executing program 2 (id=819): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x8004) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40000}, 0x1c) syz_genetlink_get_family_id$smc(&(0x7f0000000700), 0xffffffffffffffff) socket(0x15, 0x5, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x4) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) tkill(r2, 0x12) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e22, 0x3e471dfd, @mcast1, 0x2}}}, &(0x7f0000000680)=0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x10) kernel console output (not intermixed with test programs): evice strings: Mfr=1, Product=4, SerialNumber=0 [ 177.751239][ T31] usb 5-1: Product: syz [ 177.751254][ T31] usb 5-1: Manufacturer: syz [ 177.790086][ T31] cdc_wdm 5-1:1.0: skipping garbage [ 177.790107][ T31] cdc_wdm 5-1:1.0: skipping garbage [ 177.798846][ T5708] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 177.798879][ T5708] em28xx 4-1:0.0: No AC97 audio processor [ 177.909935][ T5708] usb 4-1: USB disconnect, device number 6 [ 177.924631][ T5708] em28xx 4-1:0.0: Disconnecting em28xx [ 177.975680][ T31] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 177.975720][ T31] cdc_wdm 5-1:1.0: Unknown control protocol [ 178.050096][ T5708] em28xx 4-1:0.0: Freeing device [ 178.585070][ T6744] FAULT_INJECTION: forcing a failure. [ 178.585070][ T6744] name failslab, interval 1, probability 0, space 0, times 0 [ 178.585100][ T6744] CPU: 1 UID: 0 PID: 6744 Comm: syz.1.321 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.585119][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.585130][ T6744] Call Trace: [ 178.585136][ T6744] [ 178.585143][ T6744] dump_stack_lvl+0xe8/0x150 [ 178.585176][ T6744] should_fail_ex+0x467/0x600 [ 178.585209][ T6744] should_failslab+0xa8/0x100 [ 178.585232][ T6744] __kmalloc_noprof+0xfe/0x780 [ 178.585252][ T6744] ? tomoyo_encode+0x2ad/0x570 [ 178.585274][ T6744] ? tomoyo_encode+0x2ad/0x570 [ 178.585322][ T6744] tomoyo_encode+0x2ad/0x570 [ 178.585350][ T6744] tomoyo_realpath_from_path+0x5fa/0x640 [ 178.585383][ T6744] ? tomoyo_path_number_perm+0x219/0x5f0 [ 178.585405][ T6744] tomoyo_path_number_perm+0x246/0x5f0 [ 178.585427][ T6744] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 178.585446][ T6744] ? __lock_acquire+0x683/0x2ce0 [ 178.585477][ T6744] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 178.585500][ T6744] ? hook_file_ioctl+0x1f3/0x600 [ 178.585515][ T6744] ? lockdep_hardirqs_on+0x7a/0x110 [ 178.585553][ T6744] ? __fget_files+0x2a/0x420 [ 178.585574][ T6744] ? __fget_files+0x2a/0x420 [ 178.585592][ T6744] ? __fget_files+0x3a8/0x420 [ 178.585609][ T6744] ? __fget_files+0x2a/0x420 [ 178.585630][ T6744] security_file_ioctl+0xc3/0x2a0 [ 178.585653][ T6744] __se_sys_ioctl+0x47/0x170 [ 178.585677][ T6744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.585696][ T6744] do_syscall_64+0x174/0x580 [ 178.585719][ T6744] ? trace_irq_disable+0x3b/0x140 [ 178.585736][ T6744] ? clear_bhb_loop+0x40/0x90 [ 178.585757][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.585775][ T6744] RIP: 0033:0x7f970abde0d9 [ 178.585791][ T6744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.585808][ T6744] RSP: 002b:00007f9708e15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.585827][ T6744] RAX: ffffffffffffffda RBX: 00007f970ae66090 RCX: 00007f970abde0d9 [ 178.585840][ T6744] RDX: 0000200000000000 RSI: 000000008010aa01 RDI: 0000000000000003 [ 178.585850][ T6744] RBP: 00007f9708e15090 R08: 0000000000000000 R09: 0000000000000000 [ 178.585861][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.585871][ T6744] R13: 00007f970ae66128 R14: 00007f970ae66090 R15: 00007ffd55ea0218 [ 178.585898][ T6744] [ 178.585929][ T6744] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.645503][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 178.884409][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 179.027127][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 179.028199][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 179.028236][ T9] usb 4-1: can't read configurations, error -71 [ 179.392220][ T6762] trusted_key: syz.2.328 sent an empty control message without MSG_MORE. [ 180.026588][ T6785] 9p: Bad value for 'wfdno' [ 180.581904][ T5708] usb 5-1: USB disconnect, device number 10 [ 180.725591][ T6801] netlink: 72 bytes leftover after parsing attributes in process `syz.3.343'. [ 181.600374][ T6813] FAULT_INJECTION: forcing a failure. [ 181.600374][ T6813] name failslab, interval 1, probability 0, space 0, times 0 [ 181.600405][ T6813] CPU: 1 UID: 0 PID: 6813 Comm: syz.3.349 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 181.600424][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.600435][ T6813] Call Trace: [ 181.600441][ T6813] [ 181.600448][ T6813] dump_stack_lvl+0xe8/0x150 [ 181.600483][ T6813] should_fail_ex+0x467/0x600 [ 181.600518][ T6813] should_failslab+0xa8/0x100 [ 181.600543][ T6813] kmem_cache_alloc_node_noprof+0xae/0x670 [ 181.600566][ T6813] ? __alloc_skb+0x1d7/0x7a0 [ 181.600585][ T6813] ? __alloc_skb+0x1d7/0x7a0 [ 181.600609][ T6813] __alloc_skb+0x1d7/0x7a0 [ 181.600632][ T6813] netlink_sendmsg+0x5d4/0xb40 [ 181.600668][ T6813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.600693][ T6813] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 181.600722][ T6813] ? __kernel_text_address+0xd/0x30 [ 181.600744][ T6813] ? unwind_get_return_address+0x4d/0x90 [ 181.600767][ T6813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.600790][ T6813] sock_sendmsg_nosec+0x13a/0x180 [ 181.600811][ T6813] ____sys_sendmsg+0x565/0x870 [ 181.600837][ T6813] ? __might_fault+0xaf/0x130 [ 181.600870][ T6813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.600903][ T6813] ? import_iovec+0x73/0xa0 [ 181.600929][ T6813] ___sys_sendmsg+0x2a5/0x360 [ 181.600952][ T6813] ? __lock_acquire+0x683/0x2ce0 [ 181.600975][ T6813] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.601027][ T6813] ? __fget_files+0x2a/0x420 [ 181.601049][ T6813] ? __fget_files+0x3a8/0x420 [ 181.601074][ T6813] __x64_sys_sendmsg+0x1b7/0x290 [ 181.601100][ T6813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.601137][ T6813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.601166][ T6813] do_syscall_64+0x174/0x580 [ 181.601191][ T6813] ? trace_irq_disable+0x3b/0x140 [ 181.601210][ T6813] ? clear_bhb_loop+0x40/0x90 [ 181.601232][ T6813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.601251][ T6813] RIP: 0033:0x7f6805f6e0d9 [ 181.601270][ T6813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.601285][ T6813] RSP: 002b:00007f68041c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.601305][ T6813] RAX: ffffffffffffffda RBX: 00007f68061f5fa0 RCX: 00007f6805f6e0d9 [ 181.601317][ T6813] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 181.601327][ T6813] RBP: 00007f68041c6090 R08: 0000000000000000 R09: 0000000000000000 [ 181.601337][ T6813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.601347][ T6813] R13: 00007f68061f6038 R14: 00007f68061f5fa0 R15: 00007ffe4dbe1a98 [ 181.601372][ T6813] [ 181.713019][ T5807] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 182.008348][ T6820] FAULT_INJECTION: forcing a failure. [ 182.008348][ T6820] name failslab, interval 1, probability 0, space 0, times 0 [ 182.008385][ T6820] CPU: 0 UID: 0 PID: 6820 Comm: syz.4.354 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 182.008410][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.008426][ T6820] Call Trace: [ 182.008435][ T6820] [ 182.008443][ T6820] dump_stack_lvl+0xe8/0x150 [ 182.008483][ T6820] should_fail_ex+0x467/0x600 [ 182.008526][ T6820] should_failslab+0xa8/0x100 [ 182.008556][ T6820] __kmalloc_noprof+0xfe/0x780 [ 182.008579][ T6820] ? rcu_is_watching+0x15/0xb0 [ 182.008608][ T6820] ? tomoyo_realpath_from_path+0xef/0x640 [ 182.008639][ T6820] ? tomoyo_realpath_from_path+0xef/0x640 [ 182.008680][ T6820] tomoyo_realpath_from_path+0xef/0x640 [ 182.008723][ T6820] ? tomoyo_path_number_perm+0x219/0x5f0 [ 182.008750][ T6820] tomoyo_path_number_perm+0x246/0x5f0 [ 182.008780][ T6820] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 182.008806][ T6820] ? __lock_acquire+0x683/0x2ce0 [ 182.008846][ T6820] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 182.008876][ T6820] ? hook_file_ioctl+0x1f3/0x600 [ 182.008897][ T6820] ? lockdep_hardirqs_on+0x7a/0x110 [ 182.008947][ T6820] ? __fget_files+0x2a/0x420 [ 182.008974][ T6820] ? __fget_files+0x2a/0x420 [ 182.008997][ T6820] ? __fget_files+0x3a8/0x420 [ 182.009020][ T6820] ? __fget_files+0x2a/0x420 [ 182.009049][ T6820] security_file_ioctl+0xc3/0x2a0 [ 182.009080][ T6820] __se_sys_ioctl+0x47/0x170 [ 182.009112][ T6820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.009137][ T6820] do_syscall_64+0x174/0x580 [ 182.009176][ T6820] ? trace_irq_disable+0x3b/0x140 [ 182.009199][ T6820] ? clear_bhb_loop+0x40/0x90 [ 182.009233][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.009256][ T6820] RIP: 0033:0x7faedccde0d9 [ 182.009277][ T6820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.009295][ T6820] RSP: 002b:00007faedaf36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.009319][ T6820] RAX: ffffffffffffffda RBX: 00007faedcf65fa0 RCX: 00007faedccde0d9 [ 182.009340][ T6820] RDX: 0000000000000000 RSI: 000000005000940c RDI: 0000000000000004 [ 182.009355][ T6820] RBP: 00007faedaf36090 R08: 0000000000000000 R09: 0000000000000000 [ 182.009369][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.009382][ T6820] R13: 00007faedcf66038 R14: 00007faedcf65fa0 R15: 00007ffcbb10e938 [ 182.009417][ T6820] [ 182.009650][ T6820] ERROR: Out of memory at tomoyo_realpath_from_path. [ 182.262410][ T5807] usb 3-1: unable to get BOS descriptor or descriptor too short [ 182.268144][ T5807] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 182.268187][ T5807] usb 3-1: can't read configurations, error -71 [ 182.332951][ T6814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.515211][ T6817] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 182.827597][ T6835] FAULT_INJECTION: forcing a failure. [ 182.827597][ T6835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.827634][ T6835] CPU: 1 UID: 0 PID: 6835 Comm: syz.1.360 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 182.827661][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.827674][ T6835] Call Trace: [ 182.827682][ T6835] [ 182.827691][ T6835] dump_stack_lvl+0xe8/0x150 [ 182.827733][ T6835] should_fail_ex+0x467/0x600 [ 182.827777][ T6835] _copy_from_user+0x2d/0xb0 [ 182.827807][ T6835] memdup_user_nul+0x66/0x110 [ 182.827842][ T6835] proc_simple_write+0xcf/0x140 [ 182.827884][ T6835] ? __pfx_proc_simple_write+0x10/0x10 [ 182.827916][ T6835] proc_reg_write+0x1f6/0x2f0 [ 182.827952][ T6835] ? __pfx_proc_reg_write+0x10/0x10 [ 182.827980][ T6835] vfs_write+0x29f/0xbb0 [ 182.828019][ T6835] ? __pfx_vfs_write+0x10/0x10 [ 182.828052][ T6835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 182.828093][ T6835] ? lockdep_hardirqs_on+0x7a/0x110 [ 182.828125][ T6835] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 182.828156][ T6835] ? mutex_lock_nested+0x152/0x1d0 [ 182.828185][ T6835] ? fdget_pos+0x252/0x320 [ 182.828220][ T6835] ksys_write+0x156/0x270 [ 182.828254][ T6835] ? __pfx_ksys_write+0x10/0x10 [ 182.828282][ T6835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.828316][ T6835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.828342][ T6835] do_syscall_64+0x174/0x580 [ 182.828373][ T6835] ? trace_irq_disable+0x3b/0x140 [ 182.828396][ T6835] ? clear_bhb_loop+0x40/0x90 [ 182.828425][ T6835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.828448][ T6835] RIP: 0033:0x7f970abde0d9 [ 182.828470][ T6835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.828489][ T6835] RSP: 002b:00007f9708e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.828513][ T6835] RAX: ffffffffffffffda RBX: 00007f970ae65fa0 RCX: 00007f970abde0d9 [ 182.828530][ T6835] RDX: 0000000000000003 RSI: 0000200000000070 RDI: 0000000000000003 [ 182.828544][ T6835] RBP: 00007f9708e36090 R08: 0000000000000000 R09: 0000000000000000 [ 182.828559][ T6835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.828572][ T6835] R13: 00007f970ae66038 R14: 00007f970ae65fa0 R15: 00007ffd55ea0218 [ 182.828608][ T6835] [ 183.141124][ T5885] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 183.312603][ T6837] netlink: 72 bytes leftover after parsing attributes in process `syz.4.359'. [ 183.315595][ T5885] usb 4-1: not running at top speed; connect to a high speed hub [ 183.325714][ T5885] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 183.325770][ T5885] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 183.325802][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.432587][ T5885] gspca_main: spca501-2.14.0 probing 0000:0000 [ 183.852766][ T5885] gspca_spca501: reg write: error -71 [ 183.852786][ T5885] spca501 4-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 183.852882][ T5885] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 183.900655][ T5885] uvcvideo 4-1:1.0: Found UVC 1.00 device (0000:0000) [ 183.966902][ T5885] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 183.968684][ T5885] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 183.968751][ T5885] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 183.969428][ T5885] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 184.059599][ T5885] usb 4-1: USB disconnect, device number 9 [ 184.280826][ T6850] 9p: Bad value for 'rfdno' [ 185.172864][ T6878] netlink: 72 bytes leftover after parsing attributes in process `syz.2.373'. [ 187.114849][ T6917] netlink: 72 bytes leftover after parsing attributes in process `syz.3.387'. [ 187.816964][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 187.966738][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 188.226619][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 189.151145][ T5606] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 189.306468][ T5606] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.306527][ T5606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 189.306559][ T5606] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.306605][ T5606] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 189.306638][ T5606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.375190][ T5708] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 189.456977][ T6965] FAULT_INJECTION: forcing a failure. [ 189.456977][ T6965] name failslab, interval 1, probability 0, space 0, times 0 [ 189.457008][ T6965] CPU: 0 UID: 0 PID: 6965 Comm: syz.0.410 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 189.457029][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.457039][ T6965] Call Trace: [ 189.457045][ T6965] [ 189.457053][ T6965] dump_stack_lvl+0xe8/0x150 [ 189.457090][ T6965] should_fail_ex+0x467/0x600 [ 189.457132][ T6965] should_failslab+0xa8/0x100 [ 189.457158][ T6965] kmem_cache_alloc_node_noprof+0xae/0x670 [ 189.457180][ T6965] ? __alloc_skb+0x1d7/0x7a0 [ 189.457200][ T6965] ? __alloc_skb+0x1d7/0x7a0 [ 189.457225][ T6965] __alloc_skb+0x1d7/0x7a0 [ 189.457249][ T6965] netlink_sendmsg+0x5d4/0xb40 [ 189.457281][ T6965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.457311][ T6965] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 189.457340][ T6965] ? __kernel_text_address+0xd/0x30 [ 189.457358][ T6965] ? unwind_get_return_address+0x4d/0x90 [ 189.457380][ T6965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.457402][ T6965] sock_sendmsg_nosec+0x13a/0x180 [ 189.457422][ T6965] ____sys_sendmsg+0x565/0x870 [ 189.457447][ T6965] ? __might_fault+0xaf/0x130 [ 189.457480][ T6965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.457512][ T6965] ? import_iovec+0x73/0xa0 [ 189.457537][ T6965] ___sys_sendmsg+0x2a5/0x360 [ 189.457562][ T6965] ? __lock_acquire+0x683/0x2ce0 [ 189.457587][ T6965] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.457642][ T6965] ? __fget_files+0x2a/0x420 [ 189.457660][ T6965] ? __fget_files+0x3a8/0x420 [ 189.457687][ T6965] __x64_sys_sendmsg+0x1b7/0x290 [ 189.457713][ T6965] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.457751][ T6965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.457771][ T6965] do_syscall_64+0x174/0x580 [ 189.457795][ T6965] ? trace_irq_disable+0x3b/0x140 [ 189.457814][ T6965] ? clear_bhb_loop+0x40/0x90 [ 189.457837][ T6965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.457856][ T6965] RIP: 0033:0x7f9ff46ae0d9 [ 189.457873][ T6965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.457887][ T6965] RSP: 002b:00007f9ff2906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.457905][ T6965] RAX: ffffffffffffffda RBX: 00007f9ff4935fa0 RCX: 00007f9ff46ae0d9 [ 189.457918][ T6965] RDX: 0000000020000000 RSI: 0000200000002400 RDI: 0000000000000004 [ 189.457929][ T6965] RBP: 00007f9ff2906090 R08: 0000000000000000 R09: 0000000000000000 [ 189.457939][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.457949][ T6965] R13: 00007f9ff4936038 R14: 00007f9ff4935fa0 R15: 00007ffc73dae018 [ 189.457976][ T6965] [ 189.636529][ T5708] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.636691][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 189.636766][ T5708] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.636877][ T5708] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 189.636942][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.790256][ T5606] usb 4-1: config 0 descriptor?? [ 189.877122][ T5708] usb 5-1: config 0 descriptor?? [ 190.071142][ T5331] usb 4-1: USB disconnect, device number 10 [ 190.123463][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 190.167010][ T5708] usb 5-1: USB disconnect, device number 11 [ 190.795154][ T6988] netlink: 592 bytes leftover after parsing attributes in process `syz.2.422'. [ 191.274020][ T5606] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 191.401852][ T5606] usb 3-1: device descriptor read/64, error -71 [ 191.431087][ T5331] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 191.563166][ T5708] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 191.586728][ T5331] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 191.586763][ T5331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 191.586787][ T5331] usb 5-1: Product: syz [ 191.586804][ T5331] usb 5-1: Manufacturer: syz [ 191.655812][ T5331] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input8 [ 191.663528][ T5606] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 191.713082][ T5708] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 191.713113][ T5708] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.713141][ T5708] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 191.713177][ T5708] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.720534][ T5708] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.720566][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.720590][ T5708] usb 4-1: Product: syz [ 191.720605][ T5708] usb 4-1: Manufacturer: syz [ 191.861591][ T5606] usb 3-1: device descriptor read/64, error -71 [ 191.862416][ T5708] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 191.971868][ T5606] usb usb3-port1: attempt power cycle [ 192.114366][ T7005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.116997][ T7005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.234154][ T5807] usb 4-1: USB disconnect, device number 11 [ 192.401186][ T5606] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 192.422986][ T5606] usb 3-1: device descriptor read/8, error -71 [ 192.533332][ T7029] FAULT_INJECTION: forcing a failure. [ 192.533332][ T7029] name failslab, interval 1, probability 0, space 0, times 0 [ 192.533365][ T7029] CPU: 0 UID: 0 PID: 7029 Comm: syz.0.440 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.533387][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.533398][ T7029] Call Trace: [ 192.533405][ T7029] [ 192.533422][ T7029] dump_stack_lvl+0xe8/0x150 [ 192.533460][ T7029] should_fail_ex+0x467/0x600 [ 192.533493][ T7029] should_failslab+0xa8/0x100 [ 192.533517][ T7029] kmem_cache_alloc_node_noprof+0xae/0x670 [ 192.533538][ T7029] ? __alloc_skb+0x1d7/0x7a0 [ 192.533558][ T7029] ? __alloc_skb+0x1d7/0x7a0 [ 192.533582][ T7029] __alloc_skb+0x1d7/0x7a0 [ 192.533607][ T7029] netlink_sendmsg+0x5d4/0xb40 [ 192.533641][ T7029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.533670][ T7029] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 192.533701][ T7029] ? __kernel_text_address+0xd/0x30 [ 192.533719][ T7029] ? unwind_get_return_address+0x4d/0x90 [ 192.533741][ T7029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.533765][ T7029] sock_sendmsg_nosec+0x13a/0x180 [ 192.533785][ T7029] ____sys_sendmsg+0x565/0x870 [ 192.533809][ T7029] ? __might_fault+0xaf/0x130 [ 192.533845][ T7029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.533890][ T7029] ? import_iovec+0x73/0xa0 [ 192.533915][ T7029] ___sys_sendmsg+0x2a5/0x360 [ 192.533945][ T7029] ? __lock_acquire+0x683/0x2ce0 [ 192.533969][ T7029] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.534024][ T7029] ? __fget_files+0x2a/0x420 [ 192.534043][ T7029] ? __fget_files+0x3a8/0x420 [ 192.534070][ T7029] __x64_sys_sendmsg+0x1b7/0x290 [ 192.534097][ T7029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.534135][ T7029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.534159][ T7029] do_syscall_64+0x174/0x580 [ 192.534185][ T7029] ? trace_irq_disable+0x3b/0x140 [ 192.534202][ T7029] ? clear_bhb_loop+0x40/0x90 [ 192.534224][ T7029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.534241][ T7029] RIP: 0033:0x7f9ff46ae0d9 [ 192.534258][ T7029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.534273][ T7029] RSP: 002b:00007f9ff2906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.534293][ T7029] RAX: ffffffffffffffda RBX: 00007f9ff4935fa0 RCX: 00007f9ff46ae0d9 [ 192.534307][ T7029] RDX: 0000000020000000 RSI: 0000200000002400 RDI: 0000000000000004 [ 192.534319][ T7029] RBP: 00007f9ff2906090 R08: 0000000000000000 R09: 0000000000000000 [ 192.534330][ T7029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.534340][ T7029] R13: 00007f9ff4936038 R14: 00007f9ff4935fa0 R15: 00007ffc73dae018 [ 192.534368][ T7029] [ 192.905985][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 192.941296][ T5606] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 192.965218][ T5606] usb 3-1: device descriptor read/8, error -71 [ 193.071684][ T5606] usb usb3-port1: unable to enumerate USB device [ 193.088869][ T5331] usb 5-1: USB disconnect, device number 12 [ 193.337260][ T5807] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 193.367517][ T7040] FAULT_INJECTION: forcing a failure. [ 193.367517][ T7040] name failslab, interval 1, probability 0, space 0, times 0 [ 193.367555][ T7040] CPU: 1 UID: 0 PID: 7040 Comm: syz.1.444 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 193.367581][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.367596][ T7040] Call Trace: [ 193.367604][ T7040] [ 193.367613][ T7040] dump_stack_lvl+0xe8/0x150 [ 193.367655][ T7040] should_fail_ex+0x467/0x600 [ 193.367697][ T7040] should_failslab+0xa8/0x100 [ 193.367728][ T7040] __kmalloc_noprof+0xfe/0x780 [ 193.367752][ T7040] ? rcu_is_watching+0x15/0xb0 [ 193.367781][ T7040] ? tomoyo_realpath_from_path+0xef/0x640 [ 193.367814][ T7040] ? tomoyo_realpath_from_path+0xef/0x640 [ 193.367851][ T7040] tomoyo_realpath_from_path+0xef/0x640 [ 193.367892][ T7040] ? tomoyo_path_number_perm+0x219/0x5f0 [ 193.367919][ T7040] tomoyo_path_number_perm+0x246/0x5f0 [ 193.367950][ T7040] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 193.367977][ T7040] ? __lock_acquire+0x683/0x2ce0 [ 193.368017][ T7040] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 193.368049][ T7040] ? hook_file_ioctl+0x1f3/0x600 [ 193.368070][ T7040] ? lockdep_hardirqs_on+0x7a/0x110 [ 193.368121][ T7040] ? __fget_files+0x2a/0x420 [ 193.368150][ T7040] ? __fget_files+0x2a/0x420 [ 193.368174][ T7040] ? __fget_files+0x3a8/0x420 [ 193.368199][ T7040] ? __fget_files+0x2a/0x420 [ 193.368228][ T7040] security_file_ioctl+0xc3/0x2a0 [ 193.368259][ T7040] __se_sys_ioctl+0x47/0x170 [ 193.368292][ T7040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.368318][ T7040] do_syscall_64+0x174/0x580 [ 193.368357][ T7040] ? trace_irq_disable+0x3b/0x140 [ 193.368382][ T7040] ? clear_bhb_loop+0x40/0x90 [ 193.368411][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.368436][ T7040] RIP: 0033:0x7f970abde0d9 [ 193.368457][ T7040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.368478][ T7040] RSP: 002b:00007f9708e15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.368502][ T7040] RAX: ffffffffffffffda RBX: 00007f970ae66090 RCX: 00007f970abde0d9 [ 193.368519][ T7040] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 193.368533][ T7040] RBP: 00007f9708e15090 R08: 0000000000000000 R09: 0000000000000000 [ 193.368548][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.368563][ T7040] R13: 00007f970ae66128 R14: 00007f970ae66090 R15: 00007ffd55ea0218 [ 193.368598][ T7040] [ 193.368608][ T7040] ERROR: Out of memory at tomoyo_realpath_from_path. [ 193.652568][ T5807] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.652630][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 193.652657][ T5807] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.652697][ T5807] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 193.652720][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.714536][ T5807] usb 1-1: config 0 descriptor?? [ 193.935625][ T9] usb 1-1: USB disconnect, device number 12 [ 194.425104][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.425179][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.441137][ T5708] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 194.622508][ T5708] usb 3-1: Using ep0 maxpacket: 32 [ 194.625596][ T5708] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.629889][ T5708] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 194.679898][ T5708] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 194.679936][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.679959][ T5708] usb 3-1: Product: syz [ 194.679976][ T5708] usb 3-1: Manufacturer: syz [ 194.679993][ T5708] usb 3-1: SerialNumber: syz [ 194.894359][ T7064] nft_compat: unsupported protocol 28 [ 194.961123][ T5807] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 195.216944][ T5807] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 195.232957][ T5807] usb 1-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 195.233213][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.233238][ T5807] usb 1-1: Product: syz [ 195.233255][ T5807] usb 1-1: Manufacturer: 췗镪ӝᱟ帬ꨱ鍾܇涓岑誥䑎ṃ齎d獚﫡ᵳ阛䏰죋⹙㋗纹꯲搜豨먾믖ꊺ媎᣽㶩弈돸師尓啞褫ᤗꓽ [ 195.233284][ T5807] usb 1-1: SerialNumber: syz [ 195.334642][ T5708] usb 3-1: Cannot retrieve CPort count: -110 [ 195.334682][ T5708] usb 3-1: Cannot retrieve CPort count: -110 [ 195.334710][ T5708] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 196.348364][ T7087] FAULT_INJECTION: forcing a failure. [ 196.348364][ T7087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.348393][ T7087] CPU: 1 UID: 0 PID: 7087 Comm: syz.1.460 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 196.348413][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.348422][ T7087] Call Trace: [ 196.348428][ T7087] [ 196.348435][ T7087] dump_stack_lvl+0xe8/0x150 [ 196.348468][ T7087] should_fail_ex+0x467/0x600 [ 196.348498][ T7087] _copy_from_user+0x2d/0xb0 [ 196.348520][ T7087] ____sys_sendmsg+0x31b/0x870 [ 196.348543][ T7087] ? __might_fault+0xaf/0x130 [ 196.348583][ T7087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.348612][ T7087] ? import_iovec+0x73/0xa0 [ 196.348635][ T7087] ___sys_sendmsg+0x2a5/0x360 [ 196.348657][ T7087] ? __lock_acquire+0x683/0x2ce0 [ 196.348680][ T7087] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.348730][ T7087] ? kasan_check_range+0x97/0x2c0 [ 196.348757][ T7087] __sys_sendmmsg+0x279/0x4d0 [ 196.348784][ T7087] ? __pfx___sys_sendmmsg+0x10/0x10 [ 196.348813][ T7087] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 196.348846][ T7087] ? ksys_write+0x248/0x270 [ 196.348869][ T7087] ? __pfx_ksys_write+0x10/0x10 [ 196.348896][ T7087] __x64_sys_sendmmsg+0xa0/0xc0 [ 196.348918][ T7087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.348935][ T7087] do_syscall_64+0x174/0x580 [ 196.348961][ T7087] ? trace_irq_disable+0x3b/0x140 [ 196.348978][ T7087] ? clear_bhb_loop+0x40/0x90 [ 196.348998][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.349013][ T7087] RIP: 0033:0x7f970abde0d9 [ 196.349029][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.349043][ T7087] RSP: 002b:00007f9708e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 196.349060][ T7087] RAX: ffffffffffffffda RBX: 00007f970ae65fa0 RCX: 00007f970abde0d9 [ 196.349072][ T7087] RDX: 0000000000000001 RSI: 0000200000000f40 RDI: 0000000000000003 [ 196.349082][ T7087] RBP: 00007f9708e36090 R08: 0000000000000000 R09: 0000000000000000 [ 196.349092][ T7087] R10: 00000000040440d1 R11: 0000000000000246 R12: 0000000000000001 [ 196.349103][ T7087] R13: 00007f970ae66038 R14: 00007f970ae65fa0 R15: 00007ffd55ea0218 [ 196.349128][ T7087] [ 196.809023][ T5606] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 196.964095][ T5807] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 197.020088][ T5606] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.020149][ T5606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 197.020180][ T5606] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.020237][ T5606] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 197.020263][ T5606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.109174][ T5606] usb 4-1: config 0 descriptor?? [ 197.176147][ T5807] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 197.363167][ T5606] usb 4-1: USB disconnect, device number 12 [ 198.181975][ T7111] FAULT_INJECTION: forcing a failure. [ 198.181975][ T7111] name failslab, interval 1, probability 0, space 0, times 0 [ 198.182034][ T7111] CPU: 1 UID: 0 PID: 7111 Comm: syz.2.466 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.182062][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.182076][ T7111] Call Trace: [ 198.182085][ T7111] [ 198.182094][ T7111] dump_stack_lvl+0xe8/0x150 [ 198.182136][ T7111] should_fail_ex+0x467/0x600 [ 198.182179][ T7111] should_failslab+0xa8/0x100 [ 198.182209][ T7111] kmem_cache_alloc_node_noprof+0xae/0x670 [ 198.182236][ T7111] ? __alloc_skb+0x1d7/0x7a0 [ 198.182262][ T7111] ? __alloc_skb+0x1d7/0x7a0 [ 198.182295][ T7111] __alloc_skb+0x1d7/0x7a0 [ 198.182328][ T7111] netlink_sendmsg+0x5d4/0xb40 [ 198.182370][ T7111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.182404][ T7111] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 198.182440][ T7111] ? __kernel_text_address+0xd/0x30 [ 198.182463][ T7111] ? unwind_get_return_address+0x4d/0x90 [ 198.182492][ T7111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.182523][ T7111] sock_sendmsg_nosec+0x13a/0x180 [ 198.182551][ T7111] ____sys_sendmsg+0x565/0x870 [ 198.182581][ T7111] ? __might_fault+0xaf/0x130 [ 198.182613][ T7111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.182655][ T7111] ? import_iovec+0x73/0xa0 [ 198.182688][ T7111] ___sys_sendmsg+0x2a5/0x360 [ 198.182719][ T7111] ? __lock_acquire+0x683/0x2ce0 [ 198.182755][ T7111] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.182827][ T7111] ? __fget_files+0x2a/0x420 [ 198.182852][ T7111] ? __fget_files+0x3a8/0x420 [ 198.182889][ T7111] __x64_sys_sendmsg+0x1b7/0x290 [ 198.182925][ T7111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.182977][ T7111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.183004][ T7111] do_syscall_64+0x174/0x580 [ 198.183044][ T7111] ? trace_irq_disable+0x3b/0x140 [ 198.183068][ T7111] ? clear_bhb_loop+0x40/0x90 [ 198.183098][ T7111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.183122][ T7111] RIP: 0033:0x7faad4bde0d9 [ 198.183144][ T7111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.183163][ T7111] RSP: 002b:00007faad2e36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.183188][ T7111] RAX: ffffffffffffffda RBX: 00007faad4e65fa0 RCX: 00007faad4bde0d9 [ 198.183206][ T7111] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 198.183221][ T7111] RBP: 00007faad2e36090 R08: 0000000000000000 R09: 0000000000000000 [ 198.183235][ T7111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.183250][ T7111] R13: 00007faad4e66038 R14: 00007faad4e65fa0 R15: 00007ffc5d0b8558 [ 198.183286][ T7111] [ 199.120734][ T5807] usb 1-1: USB disconnect, device number 13 [ 199.606836][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.717287][ T7124] smpboot: CPU 1 is now offline [ 199.831671][ T5807] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 199.985102][ T5807] usb 1-1: not running at top speed; connect to a high speed hub [ 200.010718][ T5807] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 200.010759][ T5807] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 200.010776][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.102236][ T5807] gspca_main: spca501-2.14.0 probing 0000:0000 [ 200.496730][ T5807] gspca_spca501: reg write: error -71 [ 200.496745][ T5807] spca501 1-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 200.496810][ T5807] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 200.497695][ T5807] uvcvideo 1-1:1.0: Found UVC 1.00 device (0000:0000) [ 200.591498][ T5807] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 200.592470][ T5807] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 200.592513][ T5807] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 200.592946][ T5807] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -71 [ 200.817856][ T5807] usb 1-1: USB disconnect, device number 14 [ 200.948057][ T7151] netlink: 'syz.3.482': attribute type 2 has an invalid length. [ 200.968843][ T7131] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 201.361137][ T5885] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 201.523636][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.523697][ T5885] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 201.523723][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.570533][ T5885] usb 2-1: config 0 descriptor?? [ 202.142282][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 202.174763][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 202.232295][ T5885] usb 2-1: USB disconnect, device number 7 [ 202.292703][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 202.294302][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 202.294356][ T9] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 202.294383][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.529501][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 203.025856][ T7186] FAULT_INJECTION: forcing a failure. [ 203.025856][ T7186] name failslab, interval 1, probability 0, space 0, times 0 [ 203.025895][ T7186] CPU: 1 UID: 0 PID: 7186 Comm: syz.0.495 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 203.025923][ T7186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.025937][ T7186] Call Trace: [ 203.025945][ T7186] [ 203.025955][ T7186] dump_stack_lvl+0xe8/0x150 [ 203.025999][ T7186] should_fail_ex+0x467/0x600 [ 203.026042][ T7186] should_failslab+0xa8/0x100 [ 203.026076][ T7186] kmem_cache_alloc_node_noprof+0xae/0x670 [ 203.026098][ T7186] ? __alloc_skb+0x1d7/0x7a0 [ 203.026118][ T7186] ? __alloc_skb+0x1d7/0x7a0 [ 203.026143][ T7186] __alloc_skb+0x1d7/0x7a0 [ 203.026167][ T7186] netlink_sendmsg+0x5d4/0xb40 [ 203.026199][ T7186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.026224][ T7186] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 203.026279][ T7186] ? __kernel_text_address+0xd/0x30 [ 203.026298][ T7186] ? unwind_get_return_address+0x4d/0x90 [ 203.026320][ T7186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.026343][ T7186] sock_sendmsg_nosec+0x13a/0x180 [ 203.026364][ T7186] ____sys_sendmsg+0x565/0x870 [ 203.026387][ T7186] ? __might_fault+0xaf/0x130 [ 203.026412][ T7186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.026444][ T7186] ? import_iovec+0x73/0xa0 [ 203.026469][ T7186] ___sys_sendmsg+0x2a5/0x360 [ 203.026493][ T7186] ? __lock_acquire+0x683/0x2ce0 [ 203.026516][ T7186] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.026569][ T7186] ? __fget_files+0x2a/0x420 [ 203.026587][ T7186] ? __fget_files+0x3a8/0x420 [ 203.026617][ T7186] __x64_sys_sendmsg+0x1b7/0x290 [ 203.026646][ T7186] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.026689][ T7186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.026709][ T7186] do_syscall_64+0x174/0x580 [ 203.026740][ T7186] ? clear_bhb_loop+0x40/0x90 [ 203.026762][ T7186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.026779][ T7186] RIP: 0033:0x7f9ff46ae0d9 [ 203.026796][ T7186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.026811][ T7186] RSP: 002b:00007f9ff2906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.026830][ T7186] RAX: ffffffffffffffda RBX: 00007f9ff4935fa0 RCX: 00007f9ff46ae0d9 [ 203.026843][ T7186] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 203.026855][ T7186] RBP: 00007f9ff2906090 R08: 0000000000000000 R09: 0000000000000000 [ 203.026866][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.026876][ T7186] R13: 00007f9ff4936038 R14: 00007f9ff4935fa0 R15: 00007ffc73dae018 [ 203.026903][ T7186] [ 203.034432][ T9] gspca_spca501: reg write: error -110 [ 203.034451][ T9] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 203.034529][ T9] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 203.354723][ T9] uvcvideo 4-1:1.0: Found UVC 1.00 device (0000:0000) [ 203.354800][ T9] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 203.461234][ T5807] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 203.597128][ T9] usb 4-1: USB disconnect, device number 13 [ 203.628594][ T5807] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.628626][ T5807] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 203.628647][ T5807] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.628701][ T5807] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 203.628729][ T5807] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 203.685845][ T5807] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.685881][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.685897][ T5807] usb 5-1: Product: syz [ 203.685908][ T5807] usb 5-1: Manufacturer: syz [ 203.774650][ T5807] cdc_wdm 5-1:1.0: skipping garbage [ 203.774667][ T5807] cdc_wdm 5-1:1.0: skipping garbage [ 203.811149][ T5853] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 203.961055][ T5853] usb 1-1: Using ep0 maxpacket: 16 [ 203.968504][ T5853] usb 1-1: config 0 has no interfaces? [ 203.990494][ T5853] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 203.990528][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.990551][ T5853] usb 1-1: Product: syz [ 203.990566][ T5853] usb 1-1: Manufacturer: syz [ 203.990583][ T5853] usb 1-1: SerialNumber: syz [ 204.179532][ T5807] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 204.179556][ T5807] cdc_wdm 5-1:1.0: Unknown control protocol [ 204.181953][ T5853] usb 1-1: config 0 descriptor?? [ 204.386931][ T7190] FAULT_INJECTION: forcing a failure. [ 204.386931][ T7190] name failslab, interval 1, probability 0, space 0, times 0 [ 204.386960][ T7190] CPU: 1 UID: 0 PID: 7190 Comm: syz.0.497 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.386979][ T7190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.386989][ T7190] Call Trace: [ 204.386995][ T7190] [ 204.387002][ T7190] dump_stack_lvl+0xe8/0x150 [ 204.387033][ T7190] should_fail_ex+0x467/0x600 [ 204.387063][ T7190] should_failslab+0xa8/0x100 [ 204.387085][ T7190] kmem_cache_alloc_node_noprof+0xae/0x670 [ 204.387104][ T7190] ? __alloc_skb+0x1d7/0x7a0 [ 204.387123][ T7190] ? __alloc_skb+0x1d7/0x7a0 [ 204.387147][ T7190] __alloc_skb+0x1d7/0x7a0 [ 204.387169][ T7190] netlink_sendmsg+0x5d4/0xb40 [ 204.387206][ T7190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.387230][ T7190] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 204.387261][ T7190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.387283][ T7190] sock_sendmsg_nosec+0x13a/0x180 [ 204.387302][ T7190] ____sys_sendmsg+0x565/0x870 [ 204.387324][ T7190] ? __might_fault+0xaf/0x130 [ 204.387346][ T7190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.387376][ T7190] ? import_iovec+0x73/0xa0 [ 204.387399][ T7190] ___sys_sendmsg+0x2a5/0x360 [ 204.387420][ T7190] ? __lock_acquire+0x683/0x2ce0 [ 204.387441][ T7190] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.387467][ T7190] ? kstrtouint+0x6e/0xe0 [ 204.387512][ T7190] ? __fget_files+0x2a/0x420 [ 204.387529][ T7190] ? __fget_files+0x3a8/0x420 [ 204.387554][ T7190] __sys_sendmmsg+0x279/0x4d0 [ 204.387580][ T7190] ? __pfx___sys_sendmmsg+0x10/0x10 [ 204.387632][ T7190] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 204.387673][ T7190] ? ksys_write+0x248/0x270 [ 204.387710][ T7190] ? __pfx_ksys_write+0x10/0x10 [ 204.387746][ T7190] __x64_sys_sendmmsg+0xa0/0xc0 [ 204.387778][ T7190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.387795][ T7190] do_syscall_64+0x174/0x580 [ 204.387818][ T7190] ? trace_irq_disable+0x3b/0x140 [ 204.387834][ T7190] ? clear_bhb_loop+0x40/0x90 [ 204.387854][ T7190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.387889][ T7190] RIP: 0033:0x7f9ff46ae0d9 [ 204.387911][ T7190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.387932][ T7190] RSP: 002b:00007f9ff2906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 204.387956][ T7190] RAX: ffffffffffffffda RBX: 00007f9ff4935fa0 RCX: 00007f9ff46ae0d9 [ 204.387973][ T7190] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000008 [ 204.387993][ T7190] RBP: 00007f9ff2906090 R08: 0000000000000000 R09: 0000000000000000 [ 204.388040][ T7190] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 204.388054][ T7190] R13: 00007f9ff4936038 R14: 00007f9ff4935fa0 R15: 00007ffc73dae018 [ 204.388086][ T7190] [ 204.687145][ T5807] usb 1-1: USB disconnect, device number 15 [ 205.072701][ T5853] usb 5-1: USB disconnect, device number 13 [ 205.807810][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'. [ 206.261114][ T7247] netlink: 56 bytes leftover after parsing attributes in process `syz.4.518'. [ 206.268433][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 206.296821][ T7214] syz.3.504 (7214) used greatest stack depth: 18936 bytes left [ 206.332808][ T7247] netlink: 56 bytes leftover after parsing attributes in process `syz.4.518'. [ 206.551133][ T5885] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 206.702662][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 206.710617][ T5885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.710678][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.710711][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 206.710737][ T5885] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 206.745067][ T5885] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.745102][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 206.745126][ T5885] usb 2-1: SerialNumber: syz [ 206.786376][ T5853] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 206.823534][ T5885] hub 2-1:1.0: bad descriptor, ignoring hub [ 206.823577][ T5885] hub 2-1:1.0: probe with driver hub failed with error -5 [ 206.826704][ T5885] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 206.961523][ T5853] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 206.961557][ T5853] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.961580][ T5853] usb 4-1: config 0 has no interface number 0 [ 206.961629][ T5853] usb 4-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 207.009694][ T5853] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 207.009724][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.009745][ T5853] usb 4-1: Product: syz [ 207.009759][ T5853] usb 4-1: Manufacturer: syz [ 207.009773][ T5853] usb 4-1: SerialNumber: syz [ 207.060902][ T5853] usb 4-1: config 0 descriptor?? [ 207.072455][ T5853] asix 4-1:0.251: probe with driver asix failed with error -22 [ 207.115840][ T5807] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 207.244497][ T7241] FAULT_INJECTION: forcing a failure. [ 207.244497][ T7241] name failslab, interval 1, probability 0, space 0, times 0 [ 207.244537][ T7241] CPU: 0 UID: 0 PID: 7241 Comm: syz.1.517 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 207.244563][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.244578][ T7241] Call Trace: [ 207.244587][ T7241] [ 207.244596][ T7241] dump_stack_lvl+0xe8/0x150 [ 207.244639][ T7241] should_fail_ex+0x467/0x600 [ 207.244683][ T7241] should_failslab+0xa8/0x100 [ 207.244714][ T7241] __kmalloc_noprof+0xfe/0x780 [ 207.244740][ T7241] ? tomoyo_encode+0x2ad/0x570 [ 207.244770][ T7241] ? tomoyo_encode+0x2ad/0x570 [ 207.244809][ T7241] tomoyo_encode+0x2ad/0x570 [ 207.244848][ T7241] tomoyo_realpath_from_path+0x5fa/0x640 [ 207.244892][ T7241] ? tomoyo_path_number_perm+0x219/0x5f0 [ 207.244919][ T7241] tomoyo_path_number_perm+0x246/0x5f0 [ 207.244950][ T7241] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 207.244976][ T7241] ? __lock_acquire+0x683/0x2ce0 [ 207.245026][ T7241] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 207.245058][ T7241] ? hook_file_ioctl+0x1f3/0x600 [ 207.245079][ T7241] ? lockdep_hardirqs_on+0x7a/0x110 [ 207.245131][ T7241] ? __fget_files+0x2a/0x420 [ 207.245160][ T7241] ? __fget_files+0x2a/0x420 [ 207.245184][ T7241] ? __fget_files+0x3a8/0x420 [ 207.245211][ T7241] ? __fget_files+0x2a/0x420 [ 207.245241][ T7241] security_file_ioctl+0xc3/0x2a0 [ 207.245272][ T7241] __se_sys_ioctl+0x47/0x170 [ 207.245304][ T7241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.245331][ T7241] do_syscall_64+0x174/0x580 [ 207.245363][ T7241] ? trace_irq_disable+0x3b/0x140 [ 207.245386][ T7241] ? clear_bhb_loop+0x40/0x90 [ 207.245415][ T7241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.245440][ T7241] RIP: 0033:0x7f970abde0d9 [ 207.245461][ T7241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.245481][ T7241] RSP: 002b:00007f9708e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.245505][ T7241] RAX: ffffffffffffffda RBX: 00007f970ae65fa0 RCX: 00007f970abde0d9 [ 207.245522][ T7241] RDX: 0000000000000000 RSI: 000000004004550f RDI: 0000000000000005 [ 207.245536][ T7241] RBP: 00007f9708e36090 R08: 0000000000000000 R09: 0000000000000000 [ 207.245550][ T7241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.245563][ T7241] R13: 00007f970ae66038 R14: 00007f970ae65fa0 R15: 00007ffd55ea0218 [ 207.245599][ T7241] [ 207.246202][ T7241] ERROR: Out of memory at tomoyo_realpath_from_path. [ 207.246230][ T7241] raw-gadget.1 gadget.1: fail, usb_ep_set_wedge returned -11 [ 207.352635][ T5853] usb 2-1: USB disconnect, device number 8 [ 207.358066][ T5807] usb 5-1: Using ep0 maxpacket: 32 [ 207.441753][ T5807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 207.451193][ T5885] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 207.476551][ T5807] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 207.506183][ T5807] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 207.506218][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.506242][ T5807] usb 5-1: Product: syz [ 207.506258][ T5807] usb 5-1: Manufacturer: syz [ 207.506275][ T5807] usb 5-1: SerialNumber: syz [ 207.672159][ T5885] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 207.672199][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 207.672225][ T5885] usb 1-1: Product: syz [ 207.672243][ T5885] usb 1-1: Manufacturer: syz [ 207.721260][ T10] usb 4-1: USB disconnect, device number 14 [ 207.918803][ T5885] input: Samsung SUR40 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input9 [ 208.301062][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 208.321450][ T5807] usb 5-1: Cannot retrieve CPort count: -110 [ 208.321500][ T5807] usb 5-1: Cannot retrieve CPort count: -110 [ 208.321612][ T5807] es2_ap_driver 5-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 208.459988][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 208.460025][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 208.460049][ T10] usb 4-1: Product: syz [ 208.460067][ T10] usb 4-1: Manufacturer: syz [ 208.664943][ T10] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input10 [ 208.881109][ T7282] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 208.939804][ T7285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.962567][ T7285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.395891][ T5885] input: failed to attach handler mousedev to device input9, error: -71 [ 209.854910][ T5885] usb 1-1: USB disconnect, device number 16 [ 210.004844][ T10] input: failed to attach handler mousedev to device input10, error: -71 [ 210.260214][ T10] usb 4-1: USB disconnect, device number 15 [ 210.769100][ T5885] usb 3-1: USB disconnect, device number 17 [ 210.868947][ T7317] FAULT_INJECTION: forcing a failure. [ 210.868947][ T7317] name failslab, interval 1, probability 0, space 0, times 0 [ 210.868988][ T7317] CPU: 1 UID: 0 PID: 7317 Comm: syz.3.544 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 210.869016][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.869030][ T7317] Call Trace: [ 210.869038][ T7317] [ 210.869048][ T7317] dump_stack_lvl+0xe8/0x150 [ 210.869088][ T7317] should_fail_ex+0x467/0x600 [ 210.869130][ T7317] should_failslab+0xa8/0x100 [ 210.869161][ T7317] kmem_cache_alloc_node_noprof+0xae/0x670 [ 210.869186][ T7317] ? __alloc_skb+0x1d7/0x7a0 [ 210.869216][ T7317] ? __alloc_skb+0x1d7/0x7a0 [ 210.869250][ T7317] __alloc_skb+0x1d7/0x7a0 [ 210.869282][ T7317] netlink_dump+0x1e7/0xee0 [ 210.869327][ T7317] ? __pfx_netlink_dump+0x10/0x10 [ 210.869371][ T7317] ? netlink_recvmsg+0x5bf/0xa50 [ 210.869403][ T7317] ? kmem_cache_free+0x187/0x6c0 [ 210.869430][ T7317] ? netlink_recvmsg+0x5bf/0xa50 [ 210.869467][ T7317] netlink_recvmsg+0x683/0xa50 [ 210.869511][ T7317] ? __pfx_netlink_recvmsg+0x10/0x10 [ 210.869550][ T7317] ? __lock_acquire+0x683/0x2ce0 [ 210.869579][ T7317] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 210.869613][ T7317] ? security_socket_recvmsg+0x7e/0x2c0 [ 210.869638][ T7317] ? __pfx_netlink_recvmsg+0x10/0x10 [ 210.869671][ T7317] sock_recvmsg+0x196/0x1e0 [ 210.869700][ T7317] ____sys_recvmsg+0x1f2/0x4b0 [ 210.869750][ T7317] ? __pfx_____sys_recvmsg+0x10/0x10 [ 210.869801][ T7317] ? import_iovec+0x73/0xa0 [ 210.869834][ T7317] ___sys_recvmsg+0x213/0x5a0 [ 210.869874][ T7317] ? __pfx____sys_recvmsg+0x10/0x10 [ 210.869912][ T7317] ? __fget_files+0x2a/0x420 [ 210.869958][ T7317] ? __fget_files+0x3a8/0x420 [ 210.869995][ T7317] do_recvmmsg+0x320/0x7f0 [ 210.870037][ T7317] ? __pfx_do_recvmmsg+0x10/0x10 [ 210.870071][ T7317] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 210.870116][ T7317] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 210.870158][ T7317] __x64_sys_recvmmsg+0x198/0x250 [ 210.870196][ T7317] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 210.870240][ T7317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.870267][ T7317] do_syscall_64+0x174/0x580 [ 210.870298][ T7317] ? trace_irq_disable+0x3b/0x140 [ 210.870322][ T7317] ? clear_bhb_loop+0x40/0x90 [ 210.870351][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.870375][ T7317] RIP: 0033:0x7f6805f6e0d9 [ 210.870397][ T7317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.870417][ T7317] RSP: 002b:00007f68041c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 210.870442][ T7317] RAX: ffffffffffffffda RBX: 00007f68061f5fa0 RCX: 00007f6805f6e0d9 [ 210.870459][ T7317] RDX: 0000000000000004 RSI: 0000200000005000 RDI: 0000000000000003 [ 210.870474][ T7317] RBP: 00007f68041c6090 R08: 0000000000000000 R09: 0000000000000000 [ 210.870488][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.870502][ T7317] R13: 00007f68061f6038 R14: 00007f68061f5fa0 R15: 00007ffe4dbe1a98 [ 210.870538][ T7317] [ 211.411317][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 211.585004][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.585169][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 211.585222][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.585272][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 211.585300][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.632818][ T10] usb 1-1: config 0 descriptor?? [ 211.966443][ T5807] usb 1-1: USB disconnect, device number 17 [ 212.451097][ T5331] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 212.602736][ T5331] usb 3-1: not running at top speed; connect to a high speed hub [ 212.604282][ T5331] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 212.604398][ T5331] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 212.604425][ T5331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.667330][ T5331] gspca_main: spca501-2.14.0 probing 0000:0000 [ 212.873304][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 213.076764][ T5331] gspca_spca501: reg write: error -71 [ 213.076782][ T5331] spca501 3-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 213.076881][ T5331] spca501 3-1:1.0: probe with driver spca501 failed with error -22 [ 213.078226][ T5331] uvcvideo 3-1:1.0: Found UVC 1.00 device (0000:0000) [ 213.126368][ T5331] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 213.126874][ T5331] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 213.126928][ T5331] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 213.129962][ T5331] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -71 [ 213.261823][ T5331] usb 3-1: USB disconnect, device number 18 [ 213.633624][ T7359] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 214.072802][ T5885] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 214.199647][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'. [ 214.215779][ T7373] FAULT_INJECTION: forcing a failure. [ 214.215779][ T7373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.215822][ T7373] CPU: 0 UID: 0 PID: 7373 Comm: syz.2.566 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 214.215852][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.215872][ T7373] Call Trace: [ 214.215882][ T7373] [ 214.215892][ T7373] dump_stack_lvl+0xe8/0x150 [ 214.215944][ T7373] should_fail_ex+0x467/0x600 [ 214.215998][ T7373] _copy_to_iter+0x404/0x1810 [ 214.216025][ T7373] ? lockdep_hardirqs_on+0x7a/0x110 [ 214.216060][ T7373] ? __pfx__copy_to_iter+0x10/0x10 [ 214.216078][ T7373] ? reacquire_held_locks+0x104/0x190 [ 214.216111][ T7373] ? rt_spin_unlock+0x157/0x200 [ 214.216136][ T7373] __skb_datagram_iter+0xf8/0x980 [ 214.216166][ T7373] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 214.216202][ T7373] skb_copy_datagram_iter+0xb5/0x240 [ 214.216234][ T7373] netlink_recvmsg+0x2b9/0xa50 [ 214.216271][ T7373] ? __pfx_netlink_recvmsg+0x10/0x10 [ 214.216303][ T7373] ? __lock_acquire+0x683/0x2ce0 [ 214.216327][ T7373] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 214.216354][ T7373] ? security_socket_recvmsg+0x7e/0x2c0 [ 214.216375][ T7373] ? __pfx_netlink_recvmsg+0x10/0x10 [ 214.216402][ T7373] sock_recvmsg+0x196/0x1e0 [ 214.216425][ T7373] ____sys_recvmsg+0x1f2/0x4b0 [ 214.216461][ T7373] ? __pfx_____sys_recvmsg+0x10/0x10 [ 214.216506][ T7373] ? import_iovec+0x73/0xa0 [ 214.216533][ T7373] ___sys_recvmsg+0x213/0x5a0 [ 214.216566][ T7373] ? __pfx____sys_recvmsg+0x10/0x10 [ 214.216598][ T7373] ? __fget_files+0x2a/0x420 [ 214.216635][ T7373] ? __fget_files+0x3a8/0x420 [ 214.216665][ T7373] do_recvmmsg+0x320/0x7f0 [ 214.216700][ T7373] ? __pfx_do_recvmmsg+0x10/0x10 [ 214.216727][ T7373] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 214.216764][ T7373] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 214.216798][ T7373] __x64_sys_recvmmsg+0x198/0x250 [ 214.216829][ T7373] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 214.216866][ T7373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.216889][ T7373] do_syscall_64+0x174/0x580 [ 214.216916][ T7373] ? trace_irq_disable+0x3b/0x140 [ 214.216937][ T7373] ? clear_bhb_loop+0x40/0x90 [ 214.216962][ T7373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.216992][ T7373] RIP: 0033:0x7faad4bde0d9 [ 214.217011][ T7373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.217028][ T7373] RSP: 002b:00007faad2e36028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 214.217050][ T7373] RAX: ffffffffffffffda RBX: 00007faad4e65fa0 RCX: 00007faad4bde0d9 [ 214.217064][ T7373] RDX: 0000000000000001 RSI: 0000200000004480 RDI: 0000000000000003 [ 214.217077][ T7373] RBP: 00007faad2e36090 R08: 0000000000000000 R09: 0000000000000000 [ 214.217089][ T7373] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 214.217101][ T7373] R13: 00007faad4e66038 R14: 00007faad4e65fa0 R15: 00007ffc5d0b8558 [ 214.217130][ T7373] [ 214.235525][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 214.311318][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.311767][ T5885] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 214.311849][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.620287][ T5885] usb 2-1: config 0 descriptor?? [ 214.712096][ T5885] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 214.715050][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'. [ 215.117968][ T7375] netlink: 'syz.3.567': attribute type 4 has an invalid length. [ 215.443311][ T7395] syz.2.572 uses obsolete (PF_INET,SOCK_PACKET) [ 215.466159][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 215.466185][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 215.466200][ T7393] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 215.556679][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.557376][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.700338][ T36] audit: type=1326 audit(1785953933.164:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7390 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedccde0d9 code=0x7ffc0000 [ 215.712150][ T36] audit: type=1326 audit(1785953933.174:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7390 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedccde0d9 code=0x7ffc0000 [ 215.759646][ T36] audit: type=1326 audit(1785953933.224:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7390 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedccde0d9 code=0x7ffc0000 [ 215.806805][ T5885] gspca_vc032x: reg_w err -71 [ 215.806908][ T5885] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 215.829823][ T5885] usb 2-1: USB disconnect, device number 9 [ 215.884256][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 215.955804][ T36] audit: type=1326 audit(1785953933.264:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7390 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedccde0d9 code=0x7ffc0000 [ 216.195424][ T36] audit: type=1326 audit(1785953933.284:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7390 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faedccddd6b code=0x7ffc0000 [ 216.195494][ T36] audit: type=1326 audit(1785953933.274:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7390 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedccde0d9 code=0x7ffc0000 [ 216.195727][ T36] audit: type=1326 audit(1785953933.374:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7390 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedccde0d9 code=0x7ffc0000 [ 216.415109][ T36] audit: type=1326 audit(1785953933.584:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7390 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7faedccde0d9 code=0x7ffc0000 [ 216.415316][ T36] audit: type=1326 audit(1785953933.654:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7390 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedccde0d9 code=0x7ffc0000 [ 216.506745][ T5606] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 216.521649][ T36] audit: type=1326 audit(1785953933.904:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7390 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedccde0d9 code=0x7ffc0000 [ 216.755006][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 216.755082][ T10] usb 3-1: config 220 has 0 interfaces, different from the descriptor's value: 3 [ 217.170663][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 217.170706][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.170794][ T10] usb 3-1: Product: syz [ 217.170875][ T10] usb 3-1: Manufacturer: syz [ 217.171516][ T10] usb 3-1: SerialNumber: syz [ 217.470956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 217.500961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 217.530953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 217.630966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 217.690959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 217.790957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 217.944145][ T5606] usb 4-1: not running at top speed; connect to a high speed hub [ 217.980836][ T5606] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 217.980895][ T5606] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 217.983556][ T5606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.149730][ T5606] gspca_main: spca501-2.14.0 probing 0000:0000 [ 218.514560][ T5606] gspca_spca501: reg write: error -71 [ 218.514580][ T5606] spca501 4-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 218.514680][ T5606] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 218.581541][ T7408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.582200][ T7408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.687554][ T5606] uvcvideo 4-1:1.0: Found UVC 1.00 device (0000:0000) [ 218.713589][ T5606] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 218.721320][ T5606] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 218.721628][ T5606] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 218.790119][ T5606] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 218.912559][ T5606] usb 4-1: USB disconnect, device number 16 [ 219.046268][ T7395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.057025][ T7395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.768543][ T7416] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 220.310423][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 220.691443][ T10] usb 3-1: USB disconnect, device number 19 [ 221.202680][ T10] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 221.363676][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.363708][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 221.363735][ T10] usb 3-1: config 0 has no interface number 0 [ 221.363802][ T10] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 221.363827][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.432617][ T10] usb 3-1: config 0 descriptor?? [ 221.492403][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.513140][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.538311][ T4913] Bluetooth: hci2: command 0x0406 tx timeout [ 221.592146][ T7447] FAULT_INJECTION: forcing a failure. [ 221.592146][ T7447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.592185][ T7447] CPU: 0 UID: 0 PID: 7447 Comm: syz.1.591 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.592211][ T7447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.592226][ T7447] Call Trace: [ 221.592240][ T7447] [ 221.592250][ T7447] dump_stack_lvl+0xe8/0x150 [ 221.592292][ T7447] should_fail_ex+0x467/0x600 [ 221.592335][ T7447] _copy_from_iter+0x1d3/0x1660 [ 221.592361][ T7447] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 221.592404][ T7447] ? __pfx_policy_nodemask+0x10/0x10 [ 221.592433][ T7447] ? unwind_next_frame+0x8f/0x2550 [ 221.592460][ T7447] ? __pfx__copy_from_iter+0x10/0x10 [ 221.592493][ T7447] ? alloc_pages_mpol+0x115/0x280 [ 221.592531][ T7447] copy_page_from_iter+0x219/0x2d0 [ 221.592563][ T7447] tun_get_user+0x1b68/0x4380 [ 221.592586][ T7447] ? is_bpf_text_address+0x292/0x2b0 [ 221.592616][ T7447] ? tun_get_user+0x6e7/0x4380 [ 221.592659][ T7447] ? __pfx_tun_get_user+0x10/0x10 [ 221.592684][ T7447] ? __lock_acquire+0x683/0x2ce0 [ 221.592721][ T7447] ? ref_tracker_alloc+0x353/0x4c0 [ 221.592737][ T7447] ? get_pid_task+0x20/0x1f0 [ 221.592765][ T7447] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 221.592784][ T7447] ? tun_get+0x1c/0x2f0 [ 221.592800][ T7447] ? tun_get+0x1c/0x2f0 [ 221.592821][ T7447] ? tun_get+0x1c/0x2f0 [ 221.592837][ T7447] ? tun_get+0x1c/0x2f0 [ 221.592857][ T7447] tun_chr_write_iter+0x119/0x200 [ 221.592877][ T7447] vfs_write+0x61e/0xbb0 [ 221.592911][ T7447] ? __pfx_vfs_write+0x10/0x10 [ 221.592943][ T7447] ? __fget_files+0x2a/0x420 [ 221.592973][ T7447] ksys_write+0x156/0x270 [ 221.593001][ T7447] ? __pfx_ksys_write+0x10/0x10 [ 221.593031][ T7447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.593051][ T7447] do_syscall_64+0x174/0x580 [ 221.593086][ T7447] ? trace_irq_disable+0x3b/0x140 [ 221.593104][ T7447] ? clear_bhb_loop+0x40/0x90 [ 221.593126][ T7447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.593144][ T7447] RIP: 0033:0x7f970ab9e90e [ 221.593161][ T7447] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 221.593177][ T7447] RSP: 002b:00007f9708e35fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.593197][ T7447] RAX: ffffffffffffffda RBX: 00007f9708e366c0 RCX: 00007f970ab9e90e [ 221.593210][ T7447] RDX: 000000000000002a RSI: 0000200000000100 RDI: 00000000000000c8 [ 221.593221][ T7447] RBP: 00007f9708e36090 R08: 0000000000000000 R09: 0000000000000000 [ 221.593233][ T7447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.593244][ T7447] R13: 00007f970ae66038 R14: 00007f970ae65fa0 R15: 00007ffd55ea0218 [ 221.593274][ T7447] [ 221.611169][ T4913] Bluetooth: hci3: command 0x0406 tx timeout [ 221.611342][ T4913] Bluetooth: hci0: command 0x0406 tx timeout [ 221.951673][ T5736] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 222.016227][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.016862][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.075311][ T10] usb 3-1: USB disconnect, device number 20 [ 222.093994][ T5608] Bluetooth: hci1: command 0x0406 tx timeout [ 222.094161][ T5608] Bluetooth: hci4: command 0x0406 tx timeout [ 222.177718][ T5736] usb 4-1: not running at top speed; connect to a high speed hub [ 222.182579][ T5736] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 222.182763][ T5736] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 222.182837][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.498798][ T5736] gspca_main: spca501-2.14.0 probing 0000:0000 [ 222.662883][ T5736] gspca_spca501: reg write: error -71 [ 222.662904][ T5736] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 222.663000][ T5736] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 222.664309][ T5736] uvcvideo 4-1:1.0: Found UVC 1.00 device (0000:0000) [ 222.669921][ T5736] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 222.670429][ T5736] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 222.670486][ T5736] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 222.690775][ T5736] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 222.801102][ T5736] usb 4-1: USB disconnect, device number 17 [ 223.016538][ T5606] usb 5-1: USB disconnect, device number 14 [ 223.488365][ T7487] FAULT_INJECTION: forcing a failure. [ 223.488365][ T7487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.488421][ T7487] CPU: 1 UID: 0 PID: 7487 Comm: syz.4.601 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 223.488447][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.488458][ T7487] Call Trace: [ 223.488465][ T7487] [ 223.488473][ T7487] dump_stack_lvl+0xe8/0x150 [ 223.488506][ T7487] should_fail_ex+0x467/0x600 [ 223.488541][ T7487] _copy_from_user+0x2d/0xb0 [ 223.488568][ T7487] kstrtouint_from_user+0xd6/0x180 [ 223.488588][ T7487] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 223.488603][ T7487] ? __lock_acquire+0x683/0x2ce0 [ 223.488636][ T7487] proc_fail_nth_write+0x8e/0x210 [ 223.488657][ T7487] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 223.488684][ T7487] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 223.488705][ T7487] vfs_write+0x29f/0xbb0 [ 223.488736][ T7487] ? __pfx_vfs_write+0x10/0x10 [ 223.488762][ T7487] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 223.488791][ T7487] ? lockdep_hardirqs_on+0x7a/0x110 [ 223.488817][ T7487] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 223.488845][ T7487] ? mutex_lock_nested+0x152/0x1d0 [ 223.488862][ T7487] ? fdget_pos+0x252/0x320 [ 223.488888][ T7487] ksys_write+0x156/0x270 [ 223.488913][ T7487] ? __pfx_ksys_write+0x10/0x10 [ 223.488943][ T7487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.488962][ T7487] do_syscall_64+0x174/0x580 [ 223.488986][ T7487] ? trace_irq_disable+0x3b/0x140 [ 223.489005][ T7487] ? clear_bhb_loop+0x40/0x90 [ 223.489028][ T7487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.489047][ T7487] RIP: 0033:0x7faedcc9e90e [ 223.489066][ T7487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 223.489084][ T7487] RSP: 002b:00007faedaf14fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.489105][ T7487] RAX: ffffffffffffffda RBX: 00007faedaf156c0 RCX: 00007faedcc9e90e [ 223.489118][ T7487] RDX: 0000000000000001 RSI: 00007faedaf150a0 RDI: 0000000000000003 [ 223.489129][ T7487] RBP: 00007faedaf15090 R08: 0000000000000000 R09: 0000000000000000 [ 223.489140][ T7487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.489151][ T7487] R13: 00007faedcf66128 R14: 00007faedcf66090 R15: 00007ffcbb10e938 [ 223.489178][ T7487] [ 224.088325][ T7477] syz.2.597 (7477): drop_caches: 2 [ 224.511099][ T5606] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 224.601131][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 224.696616][ T5606] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 224.696651][ T5606] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 224.696675][ T5606] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.696697][ T5606] usb 5-1: config 0 has no interface number 0 [ 224.696754][ T5606] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 224.696781][ T5606] usb 5-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 224.696810][ T5606] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 224.696858][ T5606] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 224.696885][ T5606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.725182][ T5606] usb 5-1: config 0 descriptor?? [ 224.951165][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.955573][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.039058][ T5606] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 225.067169][ T5606] usb 5-1: USB disconnect, device number 15 [ 225.199273][ T2290] usb 5-1: Failed to submit usb control message: -19 [ 225.199315][ T2290] usb 5-1: unable to send the bmi data to the device: -19 [ 225.199336][ T2290] usb 5-1: unable to get target info from device [ 225.199366][ T2290] usb 5-1: could not get target info (-19) [ 225.199396][ T2290] usb 5-1: could not probe fw (-19) [ 226.314759][ T7521] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 227.071421][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 227.386792][ T7541] program syz.4.624 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.402372][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 183, using maximum allowed: 30 [ 227.402486][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 183 [ 227.402548][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 227.402604][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.811975][ T10] usb 3-1: config 0 descriptor?? [ 228.146539][ T10] cp210x 3-1:0.0: cp210x converter detected [ 228.704085][ T10] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 229.412562][ T5885] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 229.913289][ T5885] usb 5-1: config 0 interface 0 altsetting 88 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 229.913373][ T5885] usb 5-1: config 0 interface 0 altsetting 88 endpoint 0x2 has invalid maxpacket 1951, setting to 8 [ 229.913524][ T5885] usb 5-1: config 0 interface 0 altsetting 88 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 229.913658][ T5885] usb 5-1: config 0 interface 0 has no altsetting 0 [ 229.913802][ T5885] usb 5-1: New USB device found, idVendor=24b8, idProduct=0020, bcdDevice= 0.00 [ 229.913874][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.224008][ T5885] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 230.224030][ T5885] usb 5-1: no configuration chosen from 1 choice [ 230.270323][ T7545] FAULT_INJECTION: forcing a failure. [ 230.270323][ T7545] name failslab, interval 1, probability 0, space 0, times 0 [ 230.270361][ T7545] CPU: 0 UID: 0 PID: 7545 Comm: syz.0.627 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 230.270388][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.270402][ T7545] Call Trace: [ 230.270410][ T7545] [ 230.270420][ T7545] dump_stack_lvl+0xe8/0x150 [ 230.270460][ T7545] should_fail_ex+0x467/0x600 [ 230.270507][ T7545] should_failslab+0xa8/0x100 [ 230.270538][ T7545] kmem_cache_alloc_node_noprof+0xae/0x670 [ 230.270565][ T7545] ? __alloc_skb+0x1d7/0x7a0 [ 230.270591][ T7545] ? __alloc_skb+0x1d7/0x7a0 [ 230.270625][ T7545] __alloc_skb+0x1d7/0x7a0 [ 230.270657][ T7545] netlink_sendmsg+0x5d4/0xb40 [ 230.270701][ T7545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.270735][ T7545] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 230.270773][ T7545] ? __kernel_text_address+0xd/0x30 [ 230.270797][ T7545] ? unwind_get_return_address+0x4d/0x90 [ 230.270828][ T7545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.270868][ T7545] sock_sendmsg_nosec+0x13a/0x180 [ 230.270896][ T7545] ____sys_sendmsg+0x565/0x870 [ 230.270925][ T7545] ? __might_fault+0xaf/0x130 [ 230.270957][ T7545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.270998][ T7545] ? import_iovec+0x73/0xa0 [ 230.271030][ T7545] ___sys_sendmsg+0x2a5/0x360 [ 230.271061][ T7545] ? __lock_acquire+0x683/0x2ce0 [ 230.271093][ T7545] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.271163][ T7545] ? __fget_files+0x2a/0x420 [ 230.271187][ T7545] ? __fget_files+0x3a8/0x420 [ 230.271224][ T7545] __x64_sys_sendmsg+0x1b7/0x290 [ 230.271259][ T7545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.271311][ T7545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.271337][ T7545] do_syscall_64+0x174/0x580 [ 230.271368][ T7545] ? trace_irq_disable+0x3b/0x140 [ 230.271393][ T7545] ? clear_bhb_loop+0x40/0x90 [ 230.271421][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.271445][ T7545] RIP: 0033:0x7f9ff46ae0d9 [ 230.271467][ T7545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.271487][ T7545] RSP: 002b:00007f9ff2906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.271511][ T7545] RAX: ffffffffffffffda RBX: 00007f9ff4935fa0 RCX: 00007f9ff46ae0d9 [ 230.271529][ T7545] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 230.271543][ T7545] RBP: 00007f9ff2906090 R08: 0000000000000000 R09: 0000000000000000 [ 230.271558][ T7545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.271571][ T7545] R13: 00007f9ff4936038 R14: 00007f9ff4935fa0 R15: 00007ffc73dae018 [ 230.271607][ T7545] [ 230.580247][ T5606] usb 5-1: USB disconnect, device number 16 [ 230.611393][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 230.650656][ T10] usb 3-1: USB disconnect, device number 21 [ 230.804820][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 231.032839][ T10] cp210x 3-1:0.0: device disconnected [ 231.952080][ T5331] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 232.101071][ T5331] usb 4-1: Using ep0 maxpacket: 32 [ 232.105697][ T5331] usb 4-1: unable to get BOS descriptor or descriptor too short [ 232.126267][ T5331] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 232.146642][ T5331] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 232.146676][ T5331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.146700][ T5331] usb 4-1: Product: syz [ 232.146727][ T5331] usb 4-1: Manufacturer: syz [ 232.146744][ T5331] usb 4-1: SerialNumber: syz [ 232.161337][ T5606] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 232.334403][ T5606] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.334452][ T5606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 232.334479][ T5606] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.334519][ T5606] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 232.334542][ T5606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.358646][ T5606] usb 5-1: config 0 descriptor?? [ 232.731781][ T5331] usb 4-1: Cannot retrieve CPort count: -110 [ 232.731831][ T5331] usb 4-1: Cannot retrieve CPort count: -110 [ 232.731871][ T5331] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 232.900791][ T5606] usb 5-1: USB disconnect, device number 17 [ 233.390446][ T7602] netlink: 'syz.0.647': attribute type 4 has an invalid length. [ 233.533356][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 234.151056][ T7621] FAULT_INJECTION: forcing a failure. [ 234.151056][ T7621] name failslab, interval 1, probability 0, space 0, times 0 [ 234.151095][ T7621] CPU: 0 UID: 0 PID: 7621 Comm: syz.4.656 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 234.151122][ T7621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.151136][ T7621] Call Trace: [ 234.151144][ T7621] [ 234.151153][ T7621] dump_stack_lvl+0xe8/0x150 [ 234.151195][ T7621] should_fail_ex+0x467/0x600 [ 234.151238][ T7621] should_failslab+0xa8/0x100 [ 234.151270][ T7621] kmem_cache_alloc_noprof+0xa4/0x650 [ 234.151295][ T7621] ? skb_clone+0x212/0x3a0 [ 234.151326][ T7621] ? skb_clone+0x212/0x3a0 [ 234.151364][ T7621] skb_clone+0x212/0x3a0 [ 234.151400][ T7621] __netlink_deliver_tap+0x413/0x860 [ 234.151445][ T7621] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.151479][ T7621] netlink_deliver_tap+0x19c/0x1b0 [ 234.151512][ T7621] netlink_unicast+0x7b8/0x990 [ 234.151552][ T7621] netlink_sendmsg+0x813/0xb40 [ 234.151594][ T7621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.151629][ T7621] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 234.151674][ T7621] ? __kernel_text_address+0xd/0x30 [ 234.151699][ T7621] ? unwind_get_return_address+0x4d/0x90 [ 234.151729][ T7621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.151760][ T7621] sock_sendmsg_nosec+0x13a/0x180 [ 234.151786][ T7621] ____sys_sendmsg+0x565/0x870 [ 234.151818][ T7621] ? __might_fault+0xaf/0x130 [ 234.151850][ T7621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.151893][ T7621] ? import_iovec+0x73/0xa0 [ 234.151926][ T7621] ___sys_sendmsg+0x2a5/0x360 [ 234.151957][ T7621] ? __lock_acquire+0x683/0x2ce0 [ 234.151988][ T7621] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.152057][ T7621] ? __fget_files+0x2a/0x420 [ 234.152082][ T7621] ? __fget_files+0x3a8/0x420 [ 234.152123][ T7621] __x64_sys_sendmsg+0x1b7/0x290 [ 234.152160][ T7621] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.152211][ T7621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.152238][ T7621] do_syscall_64+0x174/0x580 [ 234.152270][ T7621] ? trace_irq_disable+0x3b/0x140 [ 234.152294][ T7621] ? clear_bhb_loop+0x40/0x90 [ 234.152324][ T7621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.152347][ T7621] RIP: 0033:0x7faedccde0d9 [ 234.152369][ T7621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.152389][ T7621] RSP: 002b:00007faedaf36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.152414][ T7621] RAX: ffffffffffffffda RBX: 00007faedcf65fa0 RCX: 00007faedccde0d9 [ 234.152431][ T7621] RDX: 0000000020040000 RSI: 0000200000000180 RDI: 0000000000000003 [ 234.152445][ T7621] RBP: 00007faedaf36090 R08: 0000000000000000 R09: 0000000000000000 [ 234.152459][ T7621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.152473][ T7621] R13: 00007faedcf66038 R14: 00007faedcf65fa0 R15: 00007ffcbb10e938 [ 234.152509][ T7621] [ 235.321122][ T5331] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 235.361106][ T5606] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 235.445601][ T7651] FAULT_INJECTION: forcing a failure. [ 235.445601][ T7651] name failslab, interval 1, probability 0, space 0, times 0 [ 235.445640][ T7651] CPU: 0 UID: 0 PID: 7651 Comm: syz.2.669 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 235.445678][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.445693][ T7651] Call Trace: [ 235.445702][ T7651] [ 235.445712][ T7651] dump_stack_lvl+0xe8/0x150 [ 235.445753][ T7651] should_fail_ex+0x467/0x600 [ 235.445795][ T7651] should_failslab+0xa8/0x100 [ 235.445826][ T7651] __kmalloc_noprof+0xfe/0x780 [ 235.445852][ T7651] ? sock_kmalloc+0xd6/0x160 [ 235.445883][ T7651] ? sock_kmalloc+0xd6/0x160 [ 235.445916][ T7651] ? __local_bh_enable+0x1e1/0x2f0 [ 235.445967][ T7651] sock_kmalloc+0xd6/0x160 [ 235.446004][ T7651] alg_setkey+0x55/0x190 [ 235.446035][ T7651] ? alg_setsockopt+0x3c5/0x4a0 [ 235.446065][ T7651] alg_setsockopt+0x3da/0x4a0 [ 235.446109][ T7651] ? __pfx_alg_setsockopt+0x10/0x10 [ 235.446140][ T7651] do_sock_setsockopt+0x17c/0x1b0 [ 235.446211][ T7651] __x64_sys_setsockopt+0x143/0x1b0 [ 235.446245][ T7651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.446270][ T7651] do_syscall_64+0x174/0x580 [ 235.446308][ T7651] ? trace_irq_disable+0x3b/0x140 [ 235.446331][ T7651] ? clear_bhb_loop+0x40/0x90 [ 235.446359][ T7651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.446383][ T7651] RIP: 0033:0x7faad4bde0d9 [ 235.446404][ T7651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.446423][ T7651] RSP: 002b:00007faad2e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 235.446447][ T7651] RAX: ffffffffffffffda RBX: 00007faad4e65fa0 RCX: 00007faad4bde0d9 [ 235.446464][ T7651] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 235.446477][ T7651] RBP: 00007faad2e36090 R08: 0000000000000029 R09: 0000000000000000 [ 235.446492][ T7651] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.446507][ T7651] R13: 00007faad4e66038 R14: 00007faad4e65fa0 R15: 00007ffc5d0b8558 [ 235.446542][ T7651] [ 235.540263][ T5331] usb 5-1: Using ep0 maxpacket: 32 [ 235.542824][ T5606] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.542864][ T5606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 235.542885][ T5606] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.542916][ T5606] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 235.542934][ T5606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.664707][ T5331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.703016][ T5331] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 235.764716][ T5331] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 235.764750][ T5331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.764772][ T5331] usb 5-1: Product: syz [ 235.764788][ T5331] usb 5-1: Manufacturer: syz [ 235.764804][ T5331] usb 5-1: SerialNumber: syz [ 235.903028][ T5606] usb 1-1: config 0 descriptor?? [ 236.170095][ T5606] usb 1-1: USB disconnect, device number 18 [ 236.351509][ T5331] usb 5-1: Cannot retrieve CPort count: -110 [ 236.351560][ T5331] usb 5-1: Cannot retrieve CPort count: -110 [ 236.351600][ T5331] es2_ap_driver 5-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 236.596765][ T7674] process 'syz.2.678' launched './file2' with NULL argv: empty string added [ 237.579449][ T7692] FAULT_INJECTION: forcing a failure. [ 237.579449][ T7692] name failslab, interval 1, probability 0, space 0, times 0 [ 237.579488][ T7692] CPU: 0 UID: 0 PID: 7692 Comm: syz.4.684 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 237.579521][ T7692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.579536][ T7692] Call Trace: [ 237.579545][ T7692] [ 237.579555][ T7692] dump_stack_lvl+0xe8/0x150 [ 237.579597][ T7692] should_fail_ex+0x467/0x600 [ 237.579648][ T7692] should_failslab+0xa8/0x100 [ 237.579677][ T7692] kmem_cache_alloc_noprof+0xa4/0x650 [ 237.579707][ T7692] ? do_getname+0x2e/0x250 [ 237.579727][ T7692] ? do_getname+0x2e/0x250 [ 237.579748][ T7692] ? rt_mutex_slowunlock+0x219/0x460 [ 237.579780][ T7692] do_getname+0x2e/0x250 [ 237.579799][ T7692] ? getname_flags+0x11/0x20 [ 237.579823][ T7692] do_sys_openat2+0xcc/0x200 [ 237.579851][ T7692] ? __pfx_do_sys_openat2+0x10/0x10 [ 237.579877][ T7692] ? ksys_write+0x248/0x270 [ 237.579909][ T7692] ? __pfx_ksys_write+0x10/0x10 [ 237.579943][ T7692] __x64_sys_openat+0x138/0x170 [ 237.579971][ T7692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.579995][ T7692] do_syscall_64+0x174/0x580 [ 237.580026][ T7692] ? trace_irq_disable+0x3b/0x140 [ 237.580050][ T7692] ? clear_bhb_loop+0x40/0x90 [ 237.580078][ T7692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.580101][ T7692] RIP: 0033:0x7faedccde0d9 [ 237.580121][ T7692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.580139][ T7692] RSP: 002b:00007faedaf36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 237.580165][ T7692] RAX: ffffffffffffffda RBX: 00007faedcf65fa0 RCX: 00007faedccde0d9 [ 237.580181][ T7692] RDX: 0000000000005400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 237.580197][ T7692] RBP: 00007faedaf36090 R08: 0000000000000000 R09: 0000000000000000 [ 237.580212][ T7692] R10: 0000000000003f00 R11: 0000000000000246 R12: 0000000000000001 [ 237.580226][ T7692] R13: 00007faedcf66038 R14: 00007faedcf65fa0 R15: 00007ffcbb10e938 [ 237.580261][ T7692] [ 237.611508][ T5722] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 237.941457][ T5722] usb 1-1: device descriptor read/64, error -71 [ 238.181052][ T5722] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 238.311107][ T5722] usb 1-1: device descriptor read/64, error -71 [ 238.422140][ T5722] usb usb1-port1: attempt power cycle [ 238.436680][ T7711] FAULT_INJECTION: forcing a failure. [ 238.436680][ T7711] name failslab, interval 1, probability 0, space 0, times 0 [ 238.436838][ T7711] CPU: 0 UID: 0 PID: 7711 Comm: syz.1.692 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 238.436866][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.436880][ T7711] Call Trace: [ 238.436889][ T7711] [ 238.436898][ T7711] dump_stack_lvl+0xe8/0x150 [ 238.436940][ T7711] should_fail_ex+0x467/0x600 [ 238.436984][ T7711] should_failslab+0xa8/0x100 [ 238.437015][ T7711] __kmalloc_noprof+0xfe/0x780 [ 238.437038][ T7711] ? rcu_is_watching+0x15/0xb0 [ 238.437069][ T7711] ? tomoyo_realpath_from_path+0xef/0x640 [ 238.437102][ T7711] ? tomoyo_realpath_from_path+0xef/0x640 [ 238.437143][ T7711] tomoyo_realpath_from_path+0xef/0x640 [ 238.437186][ T7711] ? tomoyo_path2_perm+0x299/0x760 [ 238.437215][ T7711] tomoyo_path2_perm+0x2c5/0x760 [ 238.437249][ T7711] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 238.437277][ T7711] ? __asan_memset+0x22/0x50 [ 238.437320][ T7711] ? current_check_refer_path+0x402/0x11f0 [ 238.437397][ T7711] tomoyo_path_rename+0x14e/0x1b0 [ 238.437438][ T7711] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 238.437487][ T7711] security_path_rename+0x248/0x460 [ 238.437529][ T7711] filename_renameat2+0x4ba/0x9b0 [ 238.437552][ T7711] ? __might_fault+0xaf/0x130 [ 238.437590][ T7711] ? __pfx_filename_renameat2+0x10/0x10 [ 238.437629][ T7711] ? do_getname+0x151/0x250 [ 238.437654][ T7711] __se_sys_renameat2+0x5a/0x2c0 [ 238.437677][ T7711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.437703][ T7711] do_syscall_64+0x174/0x580 [ 238.437736][ T7711] ? clear_bhb_loop+0x40/0x90 [ 238.437766][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.437790][ T7711] RIP: 0033:0x7f970abde0d9 [ 238.437821][ T7711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.437841][ T7711] RSP: 002b:00007f9708e36028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 238.437866][ T7711] RAX: ffffffffffffffda RBX: 00007f970ae65fa0 RCX: 00007f970abde0d9 [ 238.437883][ T7711] RDX: ffffffffffffff9c RSI: 0000200000000b80 RDI: ffffffffffffff9c [ 238.437900][ T7711] RBP: 00007f9708e36090 R08: 0000000000000000 R09: 0000000000000000 [ 238.437914][ T7711] R10: 0000200000000bc0 R11: 0000000000000246 R12: 0000000000000001 [ 238.437929][ T7711] R13: 00007f970ae66038 R14: 00007f970ae65fa0 R15: 00007ffd55ea0218 [ 238.437966][ T7711] [ 238.438195][ T7711] ERROR: Out of memory at tomoyo_realpath_from_path. [ 238.505099][ T7709] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 238.854413][ T5722] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 238.871905][ T5722] usb 1-1: device descriptor read/8, error -71 [ 239.113965][ T5722] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 239.139170][ T5722] usb 1-1: device descriptor read/8, error -71 [ 239.241436][ T5722] usb usb1-port1: unable to enumerate USB device [ 239.514394][ T7728] netlink: 88 bytes leftover after parsing attributes in process `syz.4.696'. [ 239.554399][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.557923][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.684886][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.685581][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.156345][ T5736] usb 4-1: USB disconnect, device number 18 [ 240.356867][ T7752] FAULT_INJECTION: forcing a failure. [ 240.356867][ T7752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.356905][ T7752] CPU: 0 UID: 0 PID: 7752 Comm: syz.1.708 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 240.356931][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.356946][ T7752] Call Trace: [ 240.356955][ T7752] [ 240.356965][ T7752] dump_stack_lvl+0xe8/0x150 [ 240.357005][ T7752] should_fail_ex+0x467/0x600 [ 240.357048][ T7752] _copy_to_user+0x31/0xb0 [ 240.357080][ T7752] simple_read_from_buffer+0xe1/0x170 [ 240.357113][ T7752] proc_fail_nth_read+0x1be/0x230 [ 240.357144][ T7752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.357174][ T7752] ? rw_verify_area+0x250/0x4d0 [ 240.357206][ T7752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.357232][ T7752] vfs_read+0x219/0xa90 [ 240.357271][ T7752] ? __pfx_vfs_read+0x10/0x10 [ 240.357303][ T7752] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 240.357337][ T7752] ? lockdep_hardirqs_on+0x7a/0x110 [ 240.357369][ T7752] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 240.357400][ T7752] ? mutex_lock_nested+0x152/0x1d0 [ 240.357422][ T7752] ? fdget_pos+0x252/0x320 [ 240.357459][ T7752] ksys_read+0x156/0x270 [ 240.357492][ T7752] ? __pfx_ksys_read+0x10/0x10 [ 240.357532][ T7752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.357557][ T7752] do_syscall_64+0x174/0x580 [ 240.357588][ T7752] ? trace_irq_disable+0x3b/0x140 [ 240.357611][ T7752] ? clear_bhb_loop+0x40/0x90 [ 240.357640][ T7752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.357672][ T7752] RIP: 0033:0x7f970ab9e90e [ 240.357694][ T7752] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 240.357714][ T7752] RSP: 002b:00007f9708e35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.357737][ T7752] RAX: ffffffffffffffda RBX: 00007f9708e366c0 RCX: 00007f970ab9e90e [ 240.357754][ T7752] RDX: 000000000000000f RSI: 00007f9708e360a0 RDI: 0000000000000004 [ 240.357769][ T7752] RBP: 00007f9708e36090 R08: 0000000000000000 R09: 0000000000000000 [ 240.357784][ T7752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.357798][ T7752] R13: 00007f970ae66038 R14: 00007f970ae65fa0 R15: 00007ffd55ea0218 [ 240.357833][ T7752] [ 240.749396][ T7758] FAULT_INJECTION: forcing a failure. [ 240.749396][ T7758] name failslab, interval 1, probability 0, space 0, times 0 [ 240.749434][ T7758] CPU: 1 UID: 0 PID: 7758 Comm: syz.1.711 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 240.749460][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.749474][ T7758] Call Trace: [ 240.749482][ T7758] [ 240.749492][ T7758] dump_stack_lvl+0xe8/0x150 [ 240.749532][ T7758] should_fail_ex+0x467/0x600 [ 240.749574][ T7758] should_failslab+0xa8/0x100 [ 240.749603][ T7758] kmem_cache_alloc_noprof+0xa4/0x650 [ 240.749628][ T7758] ? __pmd_alloc+0xa4/0x5e0 [ 240.749650][ T7758] ? __pmd_alloc+0xa4/0x5e0 [ 240.749680][ T7758] __pmd_alloc+0xa4/0x5e0 [ 240.749710][ T7758] handle_mm_fault+0xeb1/0x13f0 [ 240.749742][ T7758] ? handle_mm_fault+0xe8/0x13f0 [ 240.749768][ T7758] ? __pfx_handle_mm_fault+0x10/0x10 [ 240.749812][ T7758] ? lock_mm_and_find_vma+0xa7/0x340 [ 240.749844][ T7758] do_user_addr_fault+0x744/0x1340 [ 240.749884][ T7758] exc_page_fault+0x6a/0xc0 [ 240.749917][ T7758] asm_exc_page_fault+0x26/0x30 [ 240.749939][ T7758] RIP: 0010:__put_user_8+0xd/0x30 [ 240.749970][ T7758] Code: 89 01 31 c9 0f 01 ca e9 91 5a 04 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 240.749990][ T7758] RSP: 0018:ffffc900040b7ec8 EFLAGS: 00050202 [ 240.750010][ T7758] RAX: 000000006a737ea6 RBX: 0000000000000000 RCX: 0000200000000080 [ 240.750027][ T7758] RDX: 0000000000000000 RSI: ffffffff8daf6cd8 RDI: ffffffff8bca7880 [ 240.750044][ T7758] RBP: ffffc900040b7f38 R08: ffffffff8217a32f R09: 0000000000000000 [ 240.750059][ T7758] R10: 0000000000000000 R11: ffff888032d6acb0 R12: 00000000000000c9 [ 240.750075][ T7758] R13: ffffffff81000130 R14: 000000006a737ea6 R15: ffff888038998000 [ 240.750094][ T7758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.750122][ T7758] ? __might_fault+0xaf/0x130 [ 240.750155][ T7758] __x64_sys_time+0x6a/0xb0 [ 240.750178][ T7758] do_syscall_64+0x174/0x580 [ 240.750208][ T7758] ? trace_irq_disable+0x3b/0x140 [ 240.750235][ T7758] ? clear_bhb_loop+0x40/0x90 [ 240.750264][ T7758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.750295][ T7758] RIP: 0033:0x7f970abde0d9 [ 240.750315][ T7758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.750334][ T7758] RSP: 002b:00007f9708e36028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c9 [ 240.750356][ T7758] RAX: ffffffffffffffda RBX: 00007f970ae65fa0 RCX: 00007f970abde0d9 [ 240.750373][ T7758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 240.750387][ T7758] RBP: 00007f9708e36090 R08: 0000000000000000 R09: 0000000000000000 [ 240.750402][ T7758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.750415][ T7758] R13: 00007f970ae66038 R14: 00007f970ae65fa0 R15: 00007ffd55ea0218 [ 240.750451][ T7758] [ 240.784883][ T7728] Process accounting resumed [ 240.876884][ T5606] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 241.115185][ T5606] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 183, using maximum allowed: 30 [ 241.115236][ T5606] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 183 [ 241.115301][ T5606] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 241.115327][ T5606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.124269][ T5606] usb 1-1: config 0 descriptor?? [ 241.223640][ T5606] cp210x 1-1:0.0: cp210x converter detected [ 241.554359][ T5606] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 241.935795][ T5606] usb 1-1: cp210x converter now attached to ttyUSB0 [ 241.978551][ T5722] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 242.032161][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 242.084408][ T5606] usb 1-1: USB disconnect, device number 23 [ 242.143223][ T5722] usb 3-1: not running at top speed; connect to a high speed hub [ 242.145808][ T5722] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 242.145861][ T5722] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 242.145887][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.192226][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 242.192250][ T10] usb 4-1: config 220 has 0 interfaces, different from the descriptor's value: 3 [ 242.197626][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 242.197659][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.197680][ T10] usb 4-1: Product: syz [ 242.197695][ T10] usb 4-1: Manufacturer: syz [ 242.197711][ T10] usb 4-1: SerialNumber: syz [ 242.365596][ T5606] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 242.412399][ T5722] gspca_main: spca501-2.14.0 probing 0000:0000 [ 242.560843][ T5722] gspca_spca501: reg write: error -71 [ 242.560861][ T5722] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 242.574082][ T5722] spca501 3-1:1.0: probe with driver spca501 failed with error -22 [ 242.629524][ T5722] uvcvideo 3-1:1.0: Found UVC 1.00 device (0000:0000) [ 242.640783][ T5722] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 242.652451][ T5722] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 242.652529][ T5722] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 242.655494][ T5722] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -71 [ 242.698677][ T5722] usb 3-1: USB disconnect, device number 22 [ 242.708416][ T7788] FAULT_INJECTION: forcing a failure. [ 242.708416][ T7788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.708450][ T7788] CPU: 1 UID: 0 PID: 7788 Comm: syz.1.725 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 242.708470][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.708481][ T7788] Call Trace: [ 242.708488][ T7788] [ 242.708495][ T7788] dump_stack_lvl+0xe8/0x150 [ 242.708532][ T7788] should_fail_ex+0x467/0x600 [ 242.708570][ T7788] _copy_to_user+0x31/0xb0 [ 242.708595][ T7788] simple_read_from_buffer+0xe1/0x170 [ 242.708619][ T7788] proc_fail_nth_read+0x1be/0x230 [ 242.708651][ T7788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.708674][ T7788] ? rw_verify_area+0x250/0x4d0 [ 242.708698][ T7788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.708718][ T7788] vfs_read+0x219/0xa90 [ 242.708746][ T7788] ? __pfx_vfs_read+0x10/0x10 [ 242.708771][ T7788] ? do_sys_openat2+0x14e/0x200 [ 242.708788][ T7788] ? kmem_cache_free+0x187/0x6c0 [ 242.708808][ T7788] ? do_sys_openat2+0x14e/0x200 [ 242.708836][ T7788] ksys_read+0x156/0x270 [ 242.708860][ T7788] ? __pfx_ksys_read+0x10/0x10 [ 242.708888][ T7788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.708908][ T7788] do_syscall_64+0x174/0x580 [ 242.708934][ T7788] ? trace_irq_disable+0x3b/0x140 [ 242.708958][ T7788] ? clear_bhb_loop+0x40/0x90 [ 242.708981][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.709005][ T7788] RIP: 0033:0x7f970ab9e90e [ 242.709022][ T7788] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 242.709038][ T7788] RSP: 002b:00007f9708e35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.709060][ T7788] RAX: ffffffffffffffda RBX: 00007f9708e366c0 RCX: 00007f970ab9e90e [ 242.709074][ T7788] RDX: 000000000000000f RSI: 00007f9708e360a0 RDI: 0000000000000004 [ 242.709086][ T7788] RBP: 00007f9708e36090 R08: 0000000000000000 R09: 0000000000000000 [ 242.709096][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.709107][ T7788] R13: 00007f970ae66038 R14: 00007f970ae65fa0 R15: 00007ffd55ea0218 [ 242.709132][ T7788] [ 242.929398][ T5606] cp210x 1-1:0.0: device disconnected [ 243.523298][ T7772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.524435][ T7772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.193111][ T10] usb 4-1: USB disconnect, device number 19 [ 244.541507][ T5722] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 244.724889][ T5722] usb 3-1: not running at top speed; connect to a high speed hub [ 244.727831][ T5722] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 244.727885][ T5722] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 244.727911][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.808760][ T5722] gspca_main: spca501-2.14.0 probing 0000:0000 [ 245.010417][ T5722] gspca_spca501: reg write: error -71 [ 245.010450][ T5722] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 245.010547][ T5722] spca501 3-1:1.0: probe with driver spca501 failed with error -22 [ 245.039302][ T5722] uvcvideo 3-1:1.0: Found UVC 1.00 device (0000:0000) [ 245.080348][ T5722] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 245.084640][ T5722] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 245.084700][ T5722] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 245.085405][ T5722] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -71 [ 245.143438][ T5722] usb 3-1: USB disconnect, device number 23 [ 245.262369][ T7838] Bluetooth: MGMT ver 1.23 [ 245.781283][ T7846] kAFS: Can only specify source 'none' with -o dyn [ 245.783625][ T5612] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 245.819446][ T7851] netlink: 84 bytes leftover after parsing attributes in process `syz.2.750'. [ 246.575694][ T7867] FAULT_INJECTION: forcing a failure. [ 246.575694][ T7867] name failslab, interval 1, probability 0, space 0, times 0 [ 246.575741][ T7867] CPU: 0 UID: 0 PID: 7867 Comm: syz.2.756 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 246.575769][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.575783][ T7867] Call Trace: [ 246.575793][ T7867] [ 246.575802][ T7867] dump_stack_lvl+0xe8/0x150 [ 246.575903][ T7867] should_fail_ex+0x467/0x600 [ 246.575978][ T7867] should_failslab+0xa8/0x100 [ 246.576009][ T7867] kmem_cache_alloc_noprof+0xa4/0x650 [ 246.576034][ T7867] ? alloc_empty_file+0x5b/0x1d0 [ 246.576056][ T7867] ? alloc_empty_file+0x5b/0x1d0 [ 246.576087][ T7867] alloc_empty_file+0x5b/0x1d0 [ 246.576112][ T7867] path_openat+0x8f/0x3850 [ 246.576150][ T7867] ? kasan_save_track+0x3e/0x80 [ 246.576174][ T7867] ? __kasan_slab_alloc+0x6c/0x80 [ 246.576198][ T7867] ? kmem_cache_alloc_noprof+0x355/0x650 [ 246.576220][ T7867] ? do_getname+0x2e/0x250 [ 246.576239][ T7867] ? do_sys_openat2+0xcc/0x200 [ 246.576261][ T7867] ? __x64_sys_openat+0x138/0x170 [ 246.576284][ T7867] ? do_syscall_64+0x174/0x580 [ 246.576333][ T7867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.576378][ T7867] do_file_open+0x23e/0x4a0 [ 246.576408][ T7867] ? lockdep_hardirqs_on+0x7a/0x110 [ 246.576444][ T7867] ? __pfx_do_file_open+0x10/0x10 [ 246.576503][ T7867] ? alloc_fd+0x654/0x6d0 [ 246.576539][ T7867] do_sys_openat2+0x115/0x200 [ 246.576566][ T7867] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.576592][ T7867] ? ksys_write+0x248/0x270 [ 246.576626][ T7867] ? __pfx_ksys_write+0x10/0x10 [ 246.576659][ T7867] __x64_sys_openat+0x138/0x170 [ 246.576688][ T7867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.576712][ T7867] do_syscall_64+0x174/0x580 [ 246.576742][ T7867] ? trace_irq_disable+0x3b/0x140 [ 246.576765][ T7867] ? clear_bhb_loop+0x40/0x90 [ 246.576793][ T7867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.576816][ T7867] RIP: 0033:0x7faad4bde0d9 [ 246.576839][ T7867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.576859][ T7867] RSP: 002b:00007faad2e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 246.576883][ T7867] RAX: ffffffffffffffda RBX: 00007faad4e65fa0 RCX: 00007faad4bde0d9 [ 246.576900][ T7867] RDX: 0000000000004400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 246.576916][ T7867] RBP: 00007faad2e36090 R08: 0000000000000000 R09: 0000000000000000 [ 246.576929][ T7867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.576942][ T7867] R13: 00007faad4e66038 R14: 00007faad4e65fa0 R15: 00007ffc5d0b8558 [ 246.576976][ T7867] [ 247.270476][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 247.283984][ T7877] fuse: Bad value for 'fd' [ 247.291380][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 247.313990][ T10] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 247.467175][ T10] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 247.467207][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.467231][ T10] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 247.467255][ T10] usb 3-1: config 0 has no interface number 0 [ 247.467296][ T10] usb 3-1: config 0 has no interface number 1 [ 247.467360][ T10] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 247.467387][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.562858][ T10] usb 3-1: config 0 descriptor?? [ 247.581329][ T10] usb 3-1: unknown number of interfaces: 2 [ 247.937015][ T7890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.958167][ T7890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.066538][ T5722] usb 3-1: USB disconnect, device number 24 [ 249.103333][ T7898] overlayfs: missing 'lowerdir' [ 249.628235][ T5723] usb 5-1: USB disconnect, device number 18 [ 250.121091][ T5723] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 250.275496][ T5723] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 250.275529][ T5723] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.275551][ T5723] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 250.275576][ T5723] usb 4-1: config 0 has no interface number 0 [ 250.275594][ T5723] usb 4-1: config 0 has no interface number 1 [ 250.275656][ T5723] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 250.275689][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.344034][ T5723] usb 4-1: config 0 descriptor?? [ 250.375699][ T5723] usb 4-1: unknown number of interfaces: 2 [ 250.536145][ T7948] netlink: 'syz.2.789': attribute type 4 has an invalid length. [ 250.547980][ T7954] FAULT_INJECTION: forcing a failure. [ 250.547980][ T7954] name failslab, interval 1, probability 0, space 0, times 0 [ 250.548020][ T7954] CPU: 1 UID: 0 PID: 7954 Comm: syz.0.792 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 250.548047][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.548058][ T7954] Call Trace: [ 250.548065][ T7954] [ 250.548073][ T7954] dump_stack_lvl+0xe8/0x150 [ 250.548107][ T7954] should_fail_ex+0x467/0x600 [ 250.548141][ T7954] should_failslab+0xa8/0x100 [ 250.548164][ T7954] __kmalloc_cache_noprof+0xa0/0x6b0 [ 250.548187][ T7954] ? __request_module+0x2d0/0x630 [ 250.548211][ T7954] ? __request_module+0x2d0/0x630 [ 250.548237][ T7954] __request_module+0x2d0/0x630 [ 250.548259][ T7954] ? kmem_cache_alloc_noprof+0x3bd/0x650 [ 250.548279][ T7954] ? __pfx___request_module+0x10/0x10 [ 250.548303][ T7954] ? evm_inode_alloc_security+0x40/0xb0 [ 250.548329][ T7954] ? security_inode_alloc+0xd5/0x310 [ 250.548370][ T7954] __sock_create+0x322/0x9d0 [ 250.548398][ T7954] __sys_socket+0xd6/0x1b0 [ 250.548417][ T7954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.548438][ T7954] __x64_sys_socket+0x7a/0x90 [ 250.548459][ T7954] do_syscall_64+0x174/0x580 [ 250.548487][ T7954] ? trace_irq_disable+0x3b/0x140 [ 250.548510][ T7954] ? clear_bhb_loop+0x40/0x90 [ 250.548532][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.548550][ T7954] RIP: 0033:0x7f9ff46ae0d9 [ 250.548567][ T7954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.548582][ T7954] RSP: 002b:00007f9ff2906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 250.548602][ T7954] RAX: ffffffffffffffda RBX: 00007f9ff4935fa0 RCX: 00007f9ff46ae0d9 [ 250.548615][ T7954] RDX: 0000000000000003 RSI: 0000000000000006 RDI: 0000000000000000 [ 250.548625][ T7954] RBP: 00007f9ff2906090 R08: 0000000000000000 R09: 0000000000000000 [ 250.548635][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.548646][ T7954] R13: 00007f9ff4936038 R14: 00007f9ff4935fa0 R15: 00007ffc73dae018 [ 250.548673][ T7954] [ 250.864669][ T7957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.865347][ T7957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.083076][ T5331] usb 4-1: USB disconnect, device number 20 [ 251.286615][ T7973] FAULT_INJECTION: forcing a failure. [ 251.286615][ T7973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.286646][ T7973] CPU: 0 UID: 0 PID: 7973 Comm: syz.2.797 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 251.286666][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.286677][ T7973] Call Trace: [ 251.286684][ T7973] [ 251.286691][ T7973] dump_stack_lvl+0xe8/0x150 [ 251.286724][ T7973] should_fail_ex+0x467/0x600 [ 251.286757][ T7973] _copy_to_user+0x31/0xb0 [ 251.286782][ T7973] simple_read_from_buffer+0xe1/0x170 [ 251.286807][ T7973] proc_fail_nth_read+0x1be/0x230 [ 251.286831][ T7973] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.286854][ T7973] ? rw_verify_area+0x250/0x4d0 [ 251.286879][ T7973] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.286900][ T7973] vfs_read+0x219/0xa90 [ 251.286932][ T7973] ? __pfx_vfs_read+0x10/0x10 [ 251.286958][ T7973] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 251.286983][ T7973] ? lockdep_hardirqs_on+0x7a/0x110 [ 251.287006][ T7973] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 251.287031][ T7973] ? mutex_lock_nested+0x152/0x1d0 [ 251.287048][ T7973] ? fdget_pos+0x252/0x320 [ 251.287074][ T7973] ksys_read+0x156/0x270 [ 251.287102][ T7973] ? __pfx_ksys_read+0x10/0x10 [ 251.287132][ T7973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.287151][ T7973] do_syscall_64+0x174/0x580 [ 251.287176][ T7973] ? trace_irq_disable+0x3b/0x140 [ 251.287194][ T7973] ? clear_bhb_loop+0x40/0x90 [ 251.287216][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.287238][ T7973] RIP: 0033:0x7faad4b9e90e [ 251.287255][ T7973] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.287271][ T7973] RSP: 002b:00007faad2e14fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.287292][ T7973] RAX: ffffffffffffffda RBX: 00007faad2e156c0 RCX: 00007faad4b9e90e [ 251.287307][ T7973] RDX: 000000000000000f RSI: 00007faad2e150a0 RDI: 0000000000000006 [ 251.287320][ T7973] RBP: 00007faad2e15090 R08: 0000000000000000 R09: 0000000000000000 [ 251.287330][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.287340][ T7973] R13: 00007faad4e66128 R14: 00007faad4e66090 R15: 00007ffc5d0b8558 [ 251.287368][ T7973] [ 251.836545][ T7984] FAULT_INJECTION: forcing a failure. [ 251.836545][ T7984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.836583][ T7984] CPU: 0 UID: 0 PID: 7984 Comm: syz.3.804 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 251.836609][ T7984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.836624][ T7984] Call Trace: [ 251.836632][ T7984] [ 251.836641][ T7984] dump_stack_lvl+0xe8/0x150 [ 251.836683][ T7984] should_fail_ex+0x467/0x600 [ 251.836726][ T7984] _copy_to_user+0x31/0xb0 [ 251.836757][ T7984] simple_read_from_buffer+0xe1/0x170 [ 251.836788][ T7984] proc_fail_nth_read+0x1be/0x230 [ 251.836818][ T7984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.836848][ T7984] ? rw_verify_area+0x250/0x4d0 [ 251.836880][ T7984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.836907][ T7984] vfs_read+0x219/0xa90 [ 251.836945][ T7984] ? __pfx_vfs_read+0x10/0x10 [ 251.836977][ T7984] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 251.837014][ T7984] ? lockdep_hardirqs_on+0x7a/0x110 [ 251.837046][ T7984] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 251.837086][ T7984] ? mutex_lock_nested+0x152/0x1d0 [ 251.837109][ T7984] ? fdget_pos+0x252/0x320 [ 251.837141][ T7984] ksys_read+0x156/0x270 [ 251.837174][ T7984] ? __pfx_ksys_read+0x10/0x10 [ 251.837212][ T7984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.837237][ T7984] do_syscall_64+0x174/0x580 [ 251.837268][ T7984] ? trace_irq_disable+0x3b/0x140 [ 251.837292][ T7984] ? clear_bhb_loop+0x40/0x90 [ 251.837321][ T7984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.837345][ T7984] RIP: 0033:0x7f6805f2e90e [ 251.837366][ T7984] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.837384][ T7984] RSP: 002b:00007f68041c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.837407][ T7984] RAX: ffffffffffffffda RBX: 00007f68041c66c0 RCX: 00007f6805f2e90e [ 251.837424][ T7984] RDX: 000000000000000f RSI: 00007f68041c60a0 RDI: 0000000000000005 [ 251.837437][ T7984] RBP: 00007f68041c6090 R08: 0000000000000000 R09: 0000000000000000 [ 251.837451][ T7984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.837464][ T7984] R13: 00007f68061f6038 R14: 00007f68061f5fa0 R15: 00007ffe4dbe1a98 [ 251.837496][ T7984] [ 251.949765][ T5807] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 252.115946][ T5807] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 252.115982][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 252.116005][ T5807] usb 5-1: Product: syz [ 252.116022][ T5807] usb 5-1: Manufacturer: syz [ 252.292339][ T5807] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input15 [ 252.764686][ T8004] 9p: Bad value for 'wfdno' [ 252.791130][ T48] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 252.948637][ T48] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 252.948673][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 252.948697][ T48] usb 4-1: Product: syz [ 252.948713][ T48] usb 4-1: Manufacturer: syz [ 253.046243][ T48] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input16 [ 253.311682][ T5736] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 253.477291][ T5736] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 253.477332][ T5736] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.477354][ T5736] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 253.477378][ T5736] usb 1-1: config 0 has no interface number 0 [ 253.477397][ T5736] usb 1-1: config 0 has no interface number 1 [ 253.477459][ T5736] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 253.477486][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.500530][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.817'. [ 253.532602][ T5736] usb 1-1: config 0 descriptor?? [ 253.624752][ T8016] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 253.626480][ T5736] usb 1-1: unknown number of interfaces: 2 [ 253.779229][ T8008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.828239][ T8008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.830080][ T48] videodev: could not get a free minor [ 253.830110][ T48] sur40 4-1:1.0: Unable to register video subdevice. [ 253.830212][ T48] sur40 4-1:1.0: probe with driver sur40 failed with error -23 [ 253.864517][ T4950] ================================================================== [ 253.864529][ T4950] BUG: KASAN: slab-use-after-free in sur40_open+0xa1/0x470 [ 253.864556][ T4950] Read of size 8 at addr ffff88806357c000 by task acpid/4950 [ 253.864569][ T4950] [ 253.864578][ T4950] CPU: 1 UID: 0 PID: 4950 Comm: acpid Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 253.864578][ T4950] CPU: 1 UID: 0 PID: 4950 Comm: acpid Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 253.864596][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.864606][ T4950] Call Trace: [ 253.864612][ T4950] [ 253.864619][ T4950] dump_stack_lvl+0xe8/0x150 [ 253.864645][ T4950] print_address_description+0x55/0x1e0 [ 253.864671][ T4950] ? sur40_open+0xa1/0x470 [ 253.864690][ T4950] print_report+0x58/0x70 [ 253.864726][ T4950] kasan_report+0x117/0x150 [ 253.864748][ T4950] ? sur40_open+0xa1/0x470 [ 253.864809][ T4950] sur40_open+0xa1/0x470 [ 253.864839][ T4950] input_open_device+0x1f9/0x3b0 [ 253.864862][ T4950] mousedev_open_device+0xcc/0x150 [ 253.864900][ T4950] mousedev_open+0x2ec/0x490 [ 253.864925][ T4950] chrdev_open+0x4dc/0x600 [ 253.864950][ T4950] ? __pfx_chrdev_open+0x10/0x10 [ 253.864974][ T4950] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 253.864998][ T4950] ? __pfx_chrdev_open+0x10/0x10 [ 253.865022][ T4950] do_dentry_open+0x849/0x1420 [ 253.865041][ T4950] vfs_open+0x3b/0x350 [ 253.865055][ T4950] ? path_openat+0x2e49/0x3850 [ 253.865077][ T4950] path_openat+0x2e60/0x3850 [ 253.865100][ T4950] ? kmem_cache_alloc_noprof+0x355/0x650 [ 253.865116][ T4950] ? __x64_sys_openat+0x138/0x170 [ 253.865132][ T4950] ? do_syscall_64+0x174/0x580 [ 253.865155][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.865179][ T4950] do_file_open+0x23e/0x4a0 [ 253.865199][ T4950] ? lockdep_hardirqs_on+0x7a/0x110 [ 253.865222][ T4950] ? __pfx_do_file_open+0x10/0x10 [ 253.865252][ T4950] ? alloc_fd+0x654/0x6d0 [ 253.865271][ T4950] do_sys_openat2+0x115/0x200 [ 253.865294][ T4950] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.865310][ T4950] ? ksys_read+0x202/0x270 [ 253.865331][ T4950] ? __pfx_ksys_read+0x10/0x10 [ 253.865352][ T4950] __x64_sys_openat+0x138/0x170 [ 253.865370][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.865386][ T4950] do_syscall_64+0x174/0x580 [ 253.865408][ T4950] ? trace_irq_disable+0x3b/0x140 [ 253.865424][ T4950] ? clear_bhb_loop+0x40/0x90 [ 253.865442][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.865458][ T4950] RIP: 0033:0x7f74d50cc407 [ 253.865473][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 253.865487][ T4950] RSP: 002b:00007ffd89ada300 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 253.865504][ T4950] RAX: ffffffffffffffda RBX: 00007f74d5042780 RCX: 00007f74d50cc407 [ 253.865516][ T4950] RDX: 0000000000080800 RSI: 00007ffd89ada510 RDI: ffffffffffffff9c [ 253.865527][ T4950] RBP: 00007ffd89ada510 R08: 0000000000000000 R09: 0000000000000000 [ 253.865537][ T4950] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000080 [ 253.865547][ T4950] R13: 00007ffd89ada610 R14: 0000559b64bb97fe R15: 00007ffd89ada610 [ 253.865566][ T4950] [ 253.865571][ T4950] [ 253.865575][ T4950] Allocated by task 48: [ 253.865582][ T4950] kasan_save_track+0x3e/0x80 [ 253.865598][ T4950] __kasan_kmalloc+0x93/0xb0 [ 253.865613][ T4950] __kmalloc_cache_noprof+0x3d2/0x6b0 [ 253.865629][ T4950] sur40_probe+0x16d/0xfb0 [ 253.865648][ T4950] usb_probe_interface+0x653/0xc60 [ 253.865667][ T4950] really_probe+0x254/0xae0 [ 253.865690][ T4950] __driver_probe_device+0x1e8/0x360 [ 253.865712][ T4950] driver_probe_device+0x4f/0x240 [ 253.865734][ T4950] __device_attach_driver+0x270/0x410 [ 253.865757][ T4950] bus_for_each_drv+0x25b/0x2f0 [ 253.865773][ T4950] __device_attach+0x2c7/0x450 [ 253.865795][ T4950] device_initial_probe+0xa1/0xd0 [ 253.865816][ T4950] bus_probe_device+0x12d/0x220 [ 253.865832][ T4950] device_add+0x7d7/0xb80 [ 253.865850][ T4950] usb_set_configuration+0x1ad8/0x2180 [ 253.865868][ T4950] usb_generic_driver_probe+0x8d/0x150 [ 253.865885][ T4950] usb_probe_device+0x1c3/0x3b0 [ 253.865903][ T4950] really_probe+0x254/0xae0 [ 253.865924][ T4950] __driver_probe_device+0x1e8/0x360 [ 253.865946][ T4950] driver_probe_device+0x4f/0x240 [ 253.865968][ T4950] __device_attach_driver+0x270/0x410 [ 253.865991][ T4950] bus_for_each_drv+0x25b/0x2f0 [ 253.866006][ T4950] __device_attach+0x2c7/0x450 [ 253.866027][ T4950] device_initial_probe+0xa1/0xd0 [ 253.866048][ T4950] bus_probe_device+0x12d/0x220 [ 253.866064][ T4950] device_add+0x7d7/0xb80 [ 253.866081][ T4950] usb_new_device+0x98d/0x1610 [ 253.866094][ T4950] hub_event+0x28cf/0x4cf0 [ 253.866109][ T4950] process_scheduled_works+0xa8e/0x14e0 [ 253.866128][ T4950] worker_thread+0xa47/0xfb0 [ 253.866146][ T4950] kthread+0x388/0x470 [ 253.866168][ T4950] ret_from_fork+0x514/0xb70 [ 253.866191][ T4950] ret_from_fork_asm+0x1a/0x30 [ 253.866205][ T4950] [ 253.866208][ T4950] Freed by task 48: [ 253.866215][ T4950] kasan_save_track+0x3e/0x80 [ 253.866229][ T4950] kasan_save_free_info+0x40/0x50 [ 253.866249][ T4950] __kasan_slab_free+0x5c/0x80 [ 253.866265][ T4950] kfree+0x1c5/0x6c0 [ 253.866281][ T4950] sur40_probe+0x923/0xfb0 [ 253.866301][ T4950] usb_probe_interface+0x653/0xc60 [ 253.866319][ T4950] really_probe+0x254/0xae0 [ 253.866341][ T4950] __driver_probe_device+0x1e8/0x360 [ 253.866361][ T4950] driver_probe_device+0x4f/0x240 [ 253.866383][ T4950] __device_attach_driver+0x270/0x410 [ 253.866405][ T4950] bus_for_each_drv+0x25b/0x2f0 [ 253.866420][ T4950] __device_attach+0x2c7/0x450 [ 253.866440][ T4950] device_initial_probe+0xa1/0xd0 [ 253.866460][ T4950] bus_probe_device+0x12d/0x220 [ 253.866475][ T4950] device_add+0x7d7/0xb80 [ 253.866515][ T4950] usb_set_configuration+0x1ad8/0x2180 [ 253.866533][ T4950] usb_generic_driver_probe+0x8d/0x150 [ 253.866549][ T4950] usb_probe_device+0x1c3/0x3b0 [ 253.866567][ T4950] really_probe+0x254/0xae0 [ 253.866589][ T4950] __driver_probe_device+0x1e8/0x360 [ 253.866610][ T4950] driver_probe_device+0x4f/0x240 [ 253.866633][ T4950] __device_attach_driver+0x270/0x410 [ 253.866655][ T4950] bus_for_each_drv+0x25b/0x2f0 [ 253.866671][ T4950] __device_attach+0x2c7/0x450 [ 253.866691][ T4950] device_initial_probe+0xa1/0xd0 [ 253.866712][ T4950] bus_probe_device+0x12d/0x220 [ 253.866728][ T4950] device_add+0x7d7/0xb80 [ 253.866745][ T4950] usb_new_device+0x98d/0x1610 [ 253.866758][ T4950] hub_event+0x28cf/0x4cf0 [ 253.866773][ T4950] process_scheduled_works+0xa8e/0x14e0 [ 253.866794][ T4950] worker_thread+0xa47/0xfb0 [ 253.866812][ T4950] kthread+0x388/0x470 [ 253.866833][ T4950] ret_from_fork+0x514/0xb70 [ 253.866856][ T4950] ret_from_fork_asm+0x1a/0x30 [ 253.866869][ T4950] [ 253.866873][ T4950] The buggy address belongs to the object at ffff88806357c000 [ 253.866873][ T4950] which belongs to the cache kmalloc-4k of size 4096 [ 253.866886][ T4950] The buggy address is located 0 bytes inside of [ 253.866886][ T4950] freed 4096-byte region [ffff88806357c000, ffff88806357d000) [ 253.866902][ T4950] [ 253.866906][ T4950] The buggy address belongs to the physical page: [ 253.866922][ T4950] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x63578 [ 253.866937][ T4950] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 253.866950][ T4950] flags: 0x80000000000040(head|node=0|zone=1) [ 253.866967][ T4950] page_type: f5(slab) [ 253.866984][ T4950] raw: 0080000000000040 ffff88813ffb3140 dead000000000100 dead000000000122 [ 253.866999][ T4950] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 253.867014][ T4950] head: 0080000000000040 ffff88813ffb3140 dead000000000100 dead000000000122 [ 253.867028][ T4950] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 253.867042][ T4950] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 253.867056][ T4950] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 253.867064][ T4950] page dumped because: kasan: bad access detected [ 253.867075][ T4950] page_owner tracks the page as allocated [ 253.867080][ T4950] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1007, tgid 1007 (kworker/u8:9), ts 253014634827, free_ts 252555371138 [ 253.867109][ T4950] post_alloc_hook+0x1f9/0x250 [ 253.867123][ T4950] get_page_from_freelist+0x262a/0x26a0 [ 253.867141][ T4950] __alloc_frozen_pages_noprof+0x18d/0x380 [ 253.867159][ T4950] allocate_slab+0x79/0x5e0 [ 253.867179][ T4950] refill_objects+0x2d8/0x350 [ 253.867200][ T4950] __pcs_replace_empty_main+0x330/0x690 [ 253.867221][ T4950] __kmalloc_node_track_caller_noprof+0x62d/0x7c0 [ 253.867238][ T4950] __alloc_skb+0x2bd/0x7a0 [ 253.867255][ T4950] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 253.867283][ T4950] process_scheduled_works+0xa8e/0x14e0 [ 253.867300][ T4950] worker_thread+0xa47/0xfb0 [ 253.867318][ T4950] kthread+0x388/0x470 [ 253.867339][ T4950] ret_from_fork+0x514/0xb70 [ 253.867362][ T4950] ret_from_fork_asm+0x1a/0x30 [ 253.867375][ T4950] page last free pid 4965 tgid 4965 stack trace: [ 253.867384][ T4950] __free_frozen_pages+0x10e7/0x11c0 [ 253.867399][ T4950] __slab_free+0x252/0x2a0 [ 253.867414][ T4950] qlist_free_all+0x99/0x100 [ 253.867427][ T4950] kasan_quarantine_reduce+0x148/0x160 [ 253.867441][ T4950] __kasan_slab_alloc+0x22/0x80 [ 253.867456][ T4950] __kmalloc_noprof+0x3b6/0x780 [ 253.867470][ T4950] tomoyo_encode+0x2ad/0x570 [ 253.867490][ T4950] tomoyo_realpath_from_path+0x5fa/0x640 [ 253.867511][ T4950] tomoyo_check_open_permission+0x229/0x470 [ 253.867528][ T4950] security_file_open+0xa9/0x240 [ 253.867545][ T4950] do_dentry_open+0x4be/0x1420 [ 253.867558][ T4950] vfs_open+0x3b/0x350 [ 253.867570][ T4950] path_openat+0x2e60/0x3850 [ 253.867589][ T4950] do_file_open+0x23e/0x4a0 [ 253.867606][ T4950] do_sys_openat2+0x115/0x200 [ 253.867620][ T4950] __x64_sys_openat+0x138/0x170 [ 253.867635][ T4950] [ 253.867638][ T4950] Memory state around the buggy address: [ 253.867647][ T4950] ffff88806357bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 253.867657][ T4950] ffff88806357bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 253.867668][ T4950] >ffff88806357c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.867676][ T4950] ^ [ 253.867684][ T4950] ffff88806357c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.867694][ T4950] ffff88806357c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.867702][ T4950] ================================================================== [ 253.902367][ T4950] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 253.902440][ T4950] CPU: 1 UID: 0 PID: 4950 Comm: acpid Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 253.902514][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.902549][ T4950] Call Trace: [ 253.902571][ T4950] [ 253.902600][ T4950] vpanic+0x56c/0xa60 [ 253.902674][ T4950] ? __pfx_vpanic+0x10/0x10 [ 253.902737][ T4950] ? __pfx___schedule+0x10/0x10 [ 253.902825][ T4950] panic+0xc5/0xd0 [ 253.902872][ T4950] ? __pfx_panic+0x10/0x10 [ 253.902925][ T4950] ? preempt_schedule_thunk+0x16/0x40 [ 253.903012][ T4950] ? sur40_open+0xa1/0x470 [ 253.903106][ T4950] check_panic_on_warn+0x89/0xb0 [ 253.903209][ T4950] ? sur40_open+0xa1/0x470 [ 253.903282][ T4950] end_report+0x73/0x170 [ 253.903348][ T4950] ? sur40_open+0xa1/0x470 [ 253.903422][ T4950] kasan_report+0x128/0x150 [ 253.903486][ T4950] ? sur40_open+0xa1/0x470 [ 253.903573][ T4950] sur40_open+0xa1/0x470 [ 253.903650][ T4950] input_open_device+0x1f9/0x3b0 [ 253.903736][ T4950] mousedev_open_device+0xcc/0x150 [ 253.903823][ T4950] mousedev_open+0x2ec/0x490 [ 253.903903][ T4950] chrdev_open+0x4dc/0x600 [ 253.903996][ T4950] ? __pfx_chrdev_open+0x10/0x10 [ 253.904081][ T4950] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 253.904167][ T4950] ? __pfx_chrdev_open+0x10/0x10 [ 253.904250][ T4950] do_dentry_open+0x849/0x1420 [ 253.904333][ T4950] vfs_open+0x3b/0x350 [ 253.904385][ T4950] ? path_openat+0x2e49/0x3850 [ 253.904468][ T4950] path_openat+0x2e60/0x3850 [ 253.904618][ T4950] ? kmem_cache_alloc_noprof+0x355/0x650 [ 253.904675][ T4950] ? __x64_sys_openat+0x138/0x170 [ 253.904763][ T4950] ? do_syscall_64+0x174/0x580 [ 253.904834][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.904920][ T4950] do_file_open+0x23e/0x4a0 [ 253.904993][ T4950] ? lockdep_hardirqs_on+0x7a/0x110 [ 253.905070][ T4950] ? __pfx_do_file_open+0x10/0x10 [ 253.905184][ T4950] ? alloc_fd+0x654/0x6d0 [ 253.905258][ T4950] do_sys_openat2+0x115/0x200 [ 253.905332][ T4950] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.905394][ T4950] ? ksys_read+0x202/0x270 [ 253.905468][ T4950] ? __pfx_ksys_read+0x10/0x10 [ 253.905537][ T4950] __x64_sys_openat+0x138/0x170 [ 253.905602][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.905667][ T4950] do_syscall_64+0x174/0x580 [ 253.905741][ T4950] ? trace_irq_disable+0x3b/0x140 [ 253.905803][ T4950] ? clear_bhb_loop+0x40/0x90 [ 253.905890][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.905954][ T4950] RIP: 0033:0x7f74d50cc407 [ 253.906008][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 253.906053][ T4950] RSP: 002b:00007ffd89ada300 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 253.906115][ T4950] RAX: ffffffffffffffda RBX: 00007f74d5042780 RCX: 00007f74d50cc407 [ 253.906166][ T4950] RDX: 0000000000080800 RSI: 00007ffd89ada510 RDI: ffffffffffffff9c [ 253.906208][ T4950] RBP: 00007ffd89ada510 R08: 0000000000000000 R09: 0000000000000000 [ 253.906243][ T4950] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000080 [ 253.906276][ T4950] R13: 00007ffd89ada610 R14: 0000559b64bb97fe R15: 00007ffd89ada610 [ 253.906350][ T4950] [ 253.906959][ T4950] Kernel Offset: disabled