last executing test programs: 2m39.89230651s ago: executing program 0 (id=344): ioctl$COMEDI_UNLOCK(0xffffffffffffffff, 0x6406) r0 = syz_open_dev$video4linux(&(0x7f0000000200), 0x4, 0x42100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) io_uring_enter(r4, 0x2219, 0x34d3, 0x16, 0x0, 0x0) 2m38.633172754s ago: executing program 0 (id=346): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0100670800077e223b488f5438eafa7cc404f3dcec0006000000000000000000c88267d2901328820d78564509d29a2a8d253643e2dbb2370599427725b944bc5957f627f22251571b01ba7bc33276c6c410b237b152bcb4ae933528144360936873f146c96234070e6b9ad132458fb0c04b21736186c96b4f6be2339bd5152edd149465768a06fac06a838ada6dcf04895276c40e6d547cc7c4ec47b01ce780c86a99312d507bb979926f5f70ae6a17bc491dbe632482ff9ae26fef1c8e5f3c6d2479cf04ef12283801725b243c61ba024918adb2c8d44596e949bcb9183c000000000000"], 0x40}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 2m38.209892257s ago: executing program 0 (id=349): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)='Z!', 0x2}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000801) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x90) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0403000000dc770000ab39"], 0xf) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$FE_READ_SIGNAL_STRENGTH(r0, 0x80026f47, &(0x7f0000000040)) 2m37.387509845s ago: executing program 0 (id=351): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) timer_create(0x4, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2082, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x10001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) unshare(0x2020600) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3ae, &(0x7f0000000940)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x378, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0xfffffffe, 0x300, [{0x3, 0x9, "a78ce54006598080a80300faffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27de3e347ccea6795ada70e97adac15084dbaf736b41e5af1802"}, {0x5, 0x1, "0000e10b0000000026086700"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x26, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e01000000be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000000), 0x4) 2m36.964493925s ago: executing program 0 (id=355): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x55, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x48, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xa, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB=' \b+'], 0x0, 0x0, 0x0, 0x0}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) mount$tmpfs(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x8400, &(0x7f00000005c0)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x31]}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x39]}}]}) unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) 2m33.548328628s ago: executing program 0 (id=366): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3c12c1, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000001c0)={0x7, 0x80000, 0xffffffffffffffff}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000240), &(0x7f0000000340)=0x4) setns(0xffffffffffffffff, 0x20000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x8, 0x2, 0x8, 0x7, 0x5, 0x3, 0x0, 0x2, 0x5, 0x35, 0x5, 0xf6}, 0xe) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0xfffffff6}]}, 0x18, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xf3, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f50005"], 0x78) 2m33.012573854s ago: executing program 32 (id=366): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3c12c1, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000001c0)={0x7, 0x80000, 0xffffffffffffffff}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000240), &(0x7f0000000340)=0x4) setns(0xffffffffffffffff, 0x20000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x8, 0x2, 0x8, 0x7, 0x5, 0x3, 0x0, 0x2, 0x5, 0x35, 0x5, 0xf6}, 0xe) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0xfffffff6}]}, 0x18, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xf3, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f50005"], 0x78) 12.221464855s ago: executing program 4 (id=787): futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) socket(0x10, 0x803, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, 0x0, 0x4008800) syz_usb_connect(0x0, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0xc9, 0x84, 0xcd, 0x20, 0x10c4, 0x817c, 0x5dd8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x5, 0x80, 0x4, "", [{{0x9, 0x4, 0x7, 0xfe, 0x2, 0x90, 0xf6, 0xbd, 0x42, [], [{{0x9, 0x5, 0x5, 0x13, 0x10, 0xa, 0x4, 0xe}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x4, 0x9, 0x4}}]}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000480)='nolazytime', &(0x7f0000000d40)='%', 0x1) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x24c) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r5, r3, r4) lchown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) unlink(&(0x7f0000000040)='./file0\x00') syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x2}, @hci_ev_le_ext_adv_report}}, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x4e, 0x40, 0x5, 0x7f, 0x7c, 0xff, 0x9, 0x40, 0x7f, 0x4, 0x9, 0x3, 0x9e, 0x8}, 0xe) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000180)={{r1}, 0x5, &(0x7f0000000080)=[0x5, 0x0, 0x8, 0x9c22, 0xfff], 0xd7ab, 0xc}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r7 = gettid() ioprio_set$pid(0x1, r7, 0x2004) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00008bc6000200", 0x8) syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[@ANYRES8=r8, @ANYRES64=r6, @ANYRES8=r6, @ANYRES8=r1, @ANYBLOB="2b51fcd7c2cdfdd5b9210e5b76e74021d5f5f94b4854d9c81f867d5f25babd957994bf816c76d1570b5f15227acb8d2b03f57f5d62a71e9dc8ccdc75e62f301cfba0289f76e41eaf96d5ccf9577582c8248882b037b05624c23fec51dbc7db8529b945703c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x243, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x6, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0xd9, 0x9}}]}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x4b, &(0x7f00000024c0)={0x5, 0xf, 0x4b, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x0, 0xff0f, 0x6, [0xc000, 0xffa0ff, 0xc0]}, @ssp_cap={0x10, 0x10, 0xa, 0xa, 0x1, 0x4, 0xff00, 0x400, [0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7f, 0x3, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e156fb8c17718d81ca5df3775c5bb22f"}]}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000000)) 10.415508494s ago: executing program 4 (id=801): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)}], 0x1}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 8.875817639s ago: executing program 2 (id=803): socket$inet6_tcp(0xa, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0xe0000, 0x0, {[0x5, 0x101, 0x3, 0xfffffffffffffffb, 0x10001, 0x7, 0x9, 0x8001]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = epoll_create1(0x80000) epoll_wait(r3, &(0x7f0000000100)=[{}], 0x1, 0xff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000008b61164cbe96f89463793a6405265ede5fa64fce65fb3c0f138294c3ec59539ff145949090d6a99777aae76b3e015acc973feb75765c6df9abd73fea32b6c22fa24566792e54de7d5945f260bd9930673fa73ceb869a888abb0e1c776b5e3372e93f59ca8b410b7360f92d85ebedc9f75698eaacf283e24363065265b6316b4619e6db00000000", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf25090000000500050007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008890}, 0xc004) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) 7.080805279s ago: executing program 1 (id=804): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0xfea000, 0x2000402) 7.048046102s ago: executing program 3 (id=805): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000004000/0x800000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, 0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000013000100000000000000000807000000", @ANYRES32=r2, @ANYBLOB="36100000000000001c001a801800048014000a80080002"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) modify_ldt$write(0x1, &(0x7f0000000280)={0x1001}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x30, 0x20001000, 0x2000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r7], 0x44}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x0, 0x8975, 0x20, @remote, @rand_addr=' \x01\x00', 0x40, 0x8, 0x21e7, 0x40}}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10400018}, 0xc, &(0x7f0000000800)={&(0x7f0000000200)=@newtfilter={0x5f8, 0x2c, 0x202, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xfff1}, {0xe, 0x7}, {0x5, 0xb}}, [@f_rsvp6={{0xa}, {0x5c8, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @mcast1}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0x9, 0x10000}, {0x5, 0x8, 0x4}, 0x16, 0x89, 0x5}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}, @TCA_RSVP_ACT={0x4b8, 0x6, [@m_mirred={0x138, 0x1e, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0x5, 0x43, 0x8}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x53c, 0x9, 0x10000000, 0xe1, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x9, 0x10000000, 0x80000001, 0xda5b}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8, 0x0, 0x5, 0x52f6}, 0x2, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x5, 0x7, 0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa47, 0x6, 0xffffffffffffffff, 0xff}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x1c00000, 0x1, 0x7, 0x80}, 0x3, r11}}]}, {0x2c, 0x6, "4cf66bb545e3d961a1fb33e88a167e6d1325ac55702c561eb69256b1440375d19df34c4bdc71a93c"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_csum={0x90, 0x1f, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x0, 0x9, 0x401}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x0, 0x6, 0x1}, 0x57}}]}, {0x2a, 0x6, "389db457be9685a514df5da509b3594923aa2cbe16197715dd6aa256763584cd5395fa52d306"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x70, 0x13, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x68e, 0x8, 0x0, 0x8001, 0x4}}]}, {0x2a, 0x6, "59a008f4547f6d1e22b61e53ed682a9eab21a4a888eff3d7c2b87b6845ca0e86971e0a0f0650"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x17c, 0xf, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x400}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0xf0, 0x6, "ffb6be6d456d1cef3c2bccaafcf0fd6681a726ba3d48b44f8fdc939a3558e457867d17dbcec258d23155b2fd48281e18ddd8c76677904d02c0bccef981f35179dffb9685bb5e93e154906658ac65e0aed07de0cd153686ca84f6a43777f5fd60716805eeace243fcc546cb9de0f89e8fa3f6eeba7dc06af88ae12a70c5bb5a2c0baac77296ec36963b5d62aed2254b7c15ced90858402a6de923a369b9c6c311dc3753466f95cb2fb5ddbbf085f691461da31363c3e271c61fcb9dd586f057aa6c9ef4292d46d492a3aa7ac643f779cfe79ff0266fa6d0a1406adc8a2d2b46eb344906d716d67aba25a29c8d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x100, 0x20, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_PARMS={0x18, 0x1, {0x1ff, 0x7ff, 0x1, 0x0, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_LABELS={0x14, 0x7, "02657832a01b547955c64164c0ecb28c"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS={0x14, 0x7, "6d8a5d98236ca403bbf2382a8657d1e6"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x7, 0x5, 0x5}}]}, {0x4f, 0x6, "87b7a3a19e9937f50b398cefc1c32f27f94cfeeb0c124be46427800cd41872649b2257d692c8e8282138e60b7862224b3555f2844de65d61b2f6d41af4aa94460cd7a06e9ffe9637a98b7e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_RSVP_SRC={0x14, 0x3, @remote}, @TCA_RSVP_ACT={0xb0, 0x6, [@m_mpls={0xac, 0x18, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x7553f}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3800, 0xfffffffffffffffd, 0x0, 0x95fd}, 0x2}}]}, {0x5b, 0x6, "4e7ad621866b43e617f773e51bab9be42972fc3de58aa36652676c701985f7bb4588e6b588599fc8a28bf73016f062474327f5ac73f5527705287dc9bdbe04b07d70ef1ed7adda2aad925c1b5aa2ed951bb660867f8953"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x400c000}, 0x40800) 6.840615409s ago: executing program 4 (id=806): close(0xffffffffffffffff) io_uring_setup(0xdac, &(0x7f0000000180)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.636777049s ago: executing program 3 (id=808): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x16) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000002c0), &(0x7f00000003c0), 0x2, 0x3) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x9, 0x80000000000006) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x80203, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x9, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x2, 0x5, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r7, 0xfffeffff) add_key(&(0x7f0000000180)='.dead\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000340)="e108d5c25d84502a26cd1188354bcf8e26b7d41ce0310ffee72db52dc3381d0edf12fdbac7f5b1c7668ac3bd9c4f174b0494ba25998ae69a6978767dfad413e63887b8dda3c56491422b", 0x4a, 0xfffffffffffffffa) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x9, @mcast2, 0x4}, r9}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e23, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc60, @remote, 0x9}, r9, 0x9dffffff}}, 0x48) 6.551299599s ago: executing program 4 (id=810): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) listns(&(0x7f0000000080)={0x20, 0x0, 0xa, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000002bc0)=@vmx={0x103, 0x0, 0x2080, {0x10000, 0xd000, {}, 0x1, 0x20000009a1}, {"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", "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"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) setsockopt$inet_buf(r0, 0x0, 0x25, 0x0, 0x0) 6.188551748s ago: executing program 5 (id=811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000001000)='9p\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x40) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="360f7883b81e66b9a303000066b80300000066ba000000000f300ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x36}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd16380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904"], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x1) syz_io_uring_setup(0x7544, 0x0, 0x0, 0x0, 0x0) 5.729700912s ago: executing program 3 (id=812): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3}) r4 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01864c1, &(0x7f0000000280)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01864c1, &(0x7f0000000180)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000280)={0x0}) r8 = openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r8, 0xc01864c1, &(0x7f0000000280)={r9}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000280)={r11}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000440)={&(0x7f0000000300)=[0x0, r9, r6, 0x0, r7, r9, r10, r11], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000d40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000d80)={0x0}) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(0xffffffffffffffff, 0xc0186443, &(0x7f0000001600)={0x0, 0x1, {0x30, 0xa, &(0x7f0000001400)=[{0x0, 0x0, 0x3, 0x5, 0x0, {0x10, 0x5, &(0x7f0000000300)=[{0x1, 0x0, 0xffffffff8d0d0da2}, {0x0, 0x0, 0x10}, {0x80000000, 0x0, 0x8}, {0x0, 0x0, 0x53}, {0xff, 0x0, 0x4}]}}, {0x1, 0x0, 0x10000, 0x8, 0x3, {0x10, 0x5, &(0x7f0000000400)=[{0x0, 0x0, 0x9}, {0xff, 0x0, 0x2}, {0x80000000, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffff7}, {0x1, 0x0, 0x33b}]}}, {0xf0000000, 0x0, 0x1, 0x4558, 0x4, {0x10, 0x9, &(0x7f0000000540)=[{0x80000000, 0x0, 0x375}, {0x0, 0x0, 0x5}, {0x1, 0x0, 0x4}, {0xff}, {0x0, 0x0, 0x6}, {0xff, 0x0, 0xcafe}, {0x0, 0x0, 0xf}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0x5}]}}, {0x4, 0x0, 0x673e, 0xffffffff, 0xfffffffffffffff0, {0x10, 0x2, &(0x7f0000000680)=[{0x80000000, 0x0, 0x7}, {0x1, 0x0, 0x4}]}}, {0xf0000000, 0x0, 0x1e6, 0x8, 0x80, {0x10, 0x4, &(0x7f0000000780)=[{0xff, 0x0, 0x8}, {0x0, 0x0, 0xe}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x4}]}}, {0x0, 0x0, 0x6, 0x7fffffffffffffff, 0x40, {0x10, 0x2, &(0x7f0000000840)=[{0x1, 0x0, 0x9}, {0x0, 0x0, 0x5}]}}, {0xf0000000, 0x0, 0x4d9, 0x8001, 0x6, {0x10, 0x8, &(0x7f0000000940)=[{0xff, 0x0, 0x1}, {0xff, 0x0, 0x100000000}, {0x1, 0x0, 0xfffffffffffffff8}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0x4}, {0x1, 0x0, 0x6}, {0xff, 0x0, 0x8000}, {0x80000000, 0x0, 0x12}]}}, {0x0, 0x0, 0x0, 0x8001, 0x9, {0x10, 0x4, &(0x7f0000000a40)=[{0xff, 0x0, 0xf}, {0x80000000, 0x0, 0x4}, {0x80000000, 0x0, 0xcf}, {0xff, 0x0, 0x9}]}}, {0x4, 0x0, 0x800, 0x3, 0x3ff, {0x10, 0x9, &(0x7f0000000c40)=[{0xff, 0x0, 0x2}, {0x80000001, 0x0, 0x1}, {0x0, 0x0, 0x40eb}, {0x1}, {0x1, 0x0, 0x4120}, {0x80000000, 0x0, 0x400}, {0xff, 0x0, 0x4}, {0x1}, {0x80000000, 0x0, 0x7}]}}, {0x2, 0x0, 0x9, 0x4, 0x3de, {0x10, 0x7, &(0x7f0000000dc0)=[{0xff, 0x0, 0x7}, {0x80000000, r5, 0xd5}, {0xff, r10, 0x2}, {0x80000000, 0x0, 0x10}, {0xff, r12, 0xbc2}, {0xff, r13, 0x9}, {0x1, 0x0, 0x200}]}}]}}) 5.704010847s ago: executing program 5 (id=813): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x401, 0x260600) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280100002f00012000000000fcdbdf250801f2800c00180008ac0f000010000014000100fc00000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="d90062802400328008004100b20000000800ca00ac1e000108003d00fcffffff0400c58004008a800800a18004000f80c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb07a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26000000100002800c0001"], 0x128}], 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000003c0)={0x55, 0xd4c3, 0xfffd, {0x9, 0x11}, {0x51, 0x2}, @cond=[{0x5ff, 0x5388, 0x7, 0x7fe, 0xc7, 0xbb}, {0x0, 0x5, 0x1, 0x45, 0x6, 0xfd}]}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000002100210125bd7003000000000a000000040000e607000000140011006272696467655f736c6176655f30"], 0x30}}, 0x40000) getpid() syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x141c42) 5.324179379s ago: executing program 5 (id=814): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x8000}, 0xe) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) (async, rerun: 64) unshare(0x22020600) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async, rerun: 32) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x108) (rerun: 32) fadvise64(r2, 0x3, 0x4, 0x4) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000280)=0x1100, 0x4) (async) r4 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x18) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f00000000c0)="b9", 0x1) (async) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, &(0x7f0000000080)) (async) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x2}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$SIOCGETSGCNT(r4, 0x89e1, 0x0) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 5.322908196s ago: executing program 3 (id=815): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000003a61cccb607e66044c39fb66f0709da7772b9a95fda5c93afd6782658f7e75d45e31538c9c756d532899ca5c3de2758c70e32ee8670cca3e"], 0x48) close(0x3) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, 0x0, 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x8}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x1ff}, 0x8) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDDISABIO(r0, 0x4b37) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000063f9ff740000800085000000bc9589029d8898cf17cd0091000000000000f1f638a6b616201bdfb1b6e3a7a98639ce46148374635bdaddba4d9ef55f531caddadc0148abfdc432a1790a87068d0817cef9d3f4ea9f9fd6ff7e44c733a22af3838c260ba28c20272bcfbeecbfca14219583745e9e60df67e646c4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) memfd_secret(0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x60008c92) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0xd, &(0x7f0000000000), 0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r3) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 5.17094571s ago: executing program 4 (id=816): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.769208414s ago: executing program 2 (id=817): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81101) writev(r0, &(0x7f0000000ac0)=[{&(0x7f0000000680)="b78fe8a813145dd3cc11e85bf83bb86e1dd798e578de85fe34c0ef208c1dffdf81c3143721d2c987d841f8ccd65bab488a4f006ee6cc7085b7e60aacf4ec1f027fbc7a8c9691f1d76b241ae6999da4532c8cc63bb4a5ccdaeffbb0c5", 0x5c}, {&(0x7f0000000700)="21925cd0a515a777601a06d9e33d89887cc50746c8e0b2f5aa3efd8a9c3be49b1b7c2934d6857256884e17721c09d1cb8e95614b05bb9583f125325426a96811717c4baf940d501286586fdf606b8f2c7820b027c94584e8e26edce91fc8e8e44fe1c2645454cdb5edc5fbd5d4b043798dec7ec41826a7fded3ec3b37fa8f48fffddbed20d84c61db7168c2b2cbe69af961af449e9fd26e871", 0x99}, {&(0x7f0000000b40)="22ce1d58722c00dc33f736863027b3e7f2fd45ba1cfd4ebc43f6811b1b0d81df63d01b9e4da0f07f398eb23b0fcb7654c60ca7c7f03cdd26807b72bbb7efb78e52ece84093ab62353369c81aca5b301a38bb44ea4cea32a771f383a3e780fbf15d191cb0fdd622fed59f47d628c34e4007c1f3284061a150f067226dfe1717e2106c3012ee933c921ba0787d9db382b8cc76be1f4edc8fd4c3fcf642205c84f5ca8f9ade2541c850dfad2c", 0xab}, {&(0x7f0000000840)="d032e65a62c6a34953e85d95ca13a0e07a6559e1b140e9e6c281", 0x1a}, {&(0x7f0000000d00)="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", 0xfd}, {&(0x7f0000000980)="5feca1fdd5f526ca2fc922796d3e840dfacf1d79b364658d61b93a74eaa2fb7e3f62eae0159504b684e1bac0ad112b12cdde2e4f8999d07cb84b4d0f2ddf5994989d5b92067ccf8370c91c245e5eef6641d6940f516906eb659533f21da4fa34c3204beb386f466bf3614a7765ec983b3a54cb448455d46fb22e65f01f45ae71be6a98fd8be68e95b3fbe3c8b30f4504eff48c2f92bd746eaceebdc0bfce0c21f3e82a70b346804544f0cce057cd013ef77329749a7c4768dcc034c120c5", 0xbe}], 0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000280)=0x8) 3.228775332s ago: executing program 2 (id=818): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000004000/0x800000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, 0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000013000100000000000000000807000000", @ANYRES32=r2, @ANYBLOB="36100000000000001c001a801800048014000a80080002"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) modify_ldt$write(0x1, &(0x7f0000000280)={0x1001}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x30, 0x20001000, 0x2000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r7], 0x44}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x0, 0x8975, 0x20, @remote, @rand_addr=' \x01\x00', 0x40, 0x8, 0x21e7, 0x40}}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10400018}, 0xc, &(0x7f0000000800)={&(0x7f0000000200)=@newtfilter={0x5f8, 0x2c, 0x202, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xfff1}, {0xe, 0x7}, {0x5, 0xb}}, [@f_rsvp6={{0xa}, {0x5c8, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @mcast1}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0x9, 0x10000}, {0x5, 0x8, 0x4}, 0x16, 0x89, 0x5}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}, @TCA_RSVP_ACT={0x4b8, 0x6, [@m_mirred={0x138, 0x1e, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0x5, 0x43, 0x8}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x53c, 0x9, 0x10000000, 0xe1, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x9, 0x10000000, 0x80000001, 0xda5b}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8, 0x0, 0x5, 0x52f6}, 0x2, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x5, 0x7, 0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa47, 0x6, 0xffffffffffffffff, 0xff}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x1c00000, 0x1, 0x7, 0x80}, 0x3, r11}}]}, {0x2c, 0x6, "4cf66bb545e3d961a1fb33e88a167e6d1325ac55702c561eb69256b1440375d19df34c4bdc71a93c"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_csum={0x90, 0x1f, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x0, 0x9, 0x401}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x0, 0x6, 0x1}, 0x57}}]}, {0x2a, 0x6, "389db457be9685a514df5da509b3594923aa2cbe16197715dd6aa256763584cd5395fa52d306"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x70, 0x13, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x68e, 0x8, 0x0, 0x8001, 0x4}}]}, {0x2a, 0x6, "59a008f4547f6d1e22b61e53ed682a9eab21a4a888eff3d7c2b87b6845ca0e86971e0a0f0650"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x17c, 0xf, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x400}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0xf0, 0x6, "ffb6be6d456d1cef3c2bccaafcf0fd6681a726ba3d48b44f8fdc939a3558e457867d17dbcec258d23155b2fd48281e18ddd8c76677904d02c0bccef981f35179dffb9685bb5e93e154906658ac65e0aed07de0cd153686ca84f6a43777f5fd60716805eeace243fcc546cb9de0f89e8fa3f6eeba7dc06af88ae12a70c5bb5a2c0baac77296ec36963b5d62aed2254b7c15ced90858402a6de923a369b9c6c311dc3753466f95cb2fb5ddbbf085f691461da31363c3e271c61fcb9dd586f057aa6c9ef4292d46d492a3aa7ac643f779cfe79ff0266fa6d0a1406adc8a2d2b46eb344906d716d67aba25a29c8d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x100, 0x20, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_PARMS={0x18, 0x1, {0x1ff, 0x7ff, 0x1, 0x0, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_LABELS={0x14, 0x7, "02657832a01b547955c64164c0ecb28c"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS={0x14, 0x7, "6d8a5d98236ca403bbf2382a8657d1e6"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x7, 0x5, 0x5}}]}, {0x4f, 0x6, "87b7a3a19e9937f50b398cefc1c32f27f94cfeeb0c124be46427800cd41872649b2257d692c8e8282138e60b7862224b3555f2844de65d61b2f6d41af4aa94460cd7a06e9ffe9637a98b7e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_RSVP_SRC={0x14, 0x3, @remote}, @TCA_RSVP_ACT={0xb0, 0x6, [@m_mpls={0xac, 0x18, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x7553f}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3800, 0xfffffffffffffffd, 0x0, 0x95fd}, 0x2}}]}, {0x5b, 0x6, "4e7ad621866b43e617f773e51bab9be42972fc3de58aa36652676c701985f7bb4588e6b588599fc8a28bf73016f062474327f5ac73f5527705287dc9bdbe04b07d70ef1ed7adda2aad925c1b5aa2ed951bb660867f8953"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x400c000}, 0x40800) 2.953852559s ago: executing program 1 (id=819): r0 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000150000006111980000000000c4"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r6, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x4002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000015000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') preadv(r9, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) 2.876326954s ago: executing program 5 (id=820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000001c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) pivot_root(&(0x7f0000000280)='./file1\x00', 0x0) (fail_nth: 1) 2.872061681s ago: executing program 3 (id=821): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000240)="6cfaa66f11", 0x5) fcntl$setpipe(r2, 0x407, 0xfff) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6, @local}, 0x10) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16, @ANYBLOB="0100001400000000", @ANYRES32, @ANYBLOB="0c009985f2330fd547793c000800a0"], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r5 = accept4(r3, 0x0, 0x0, 0x800) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000000640)={0x8, {{0x2, 0x4e24, @broadcast}}}, 0x88) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r7, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xf592, 0x1d}}}}, [@NL80211_ATTR_SSID={0xb, 0x34, @random="3ca42376ba6974"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x0, 0x2, 0x0, {0x6, 0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3}, 0x6, 0x1, 0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4) 2.740793151s ago: executing program 2 (id=822): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x16) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000002c0), &(0x7f00000003c0), 0x2, 0x3) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x9, 0x80000000000006) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x80203, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x9, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x2, 0x5, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r7, 0xfffeffff) add_key(&(0x7f0000000180)='.dead\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000340)="e108d5c25d84502a26cd1188354bcf8e26b7d41ce0310ffee72db52dc3381d0edf12fdbac7f5b1c7668ac3bd9c4f174b0494ba25998ae69a6978767dfad413e63887b8dda3c56491422b", 0x4a, 0xfffffffffffffffa) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x9, @mcast2, 0x4}, r9}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e23, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc60, @remote, 0x9}, r9, 0x9dffffff}}, 0x48) 2.561537681s ago: executing program 5 (id=823): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.561001651s ago: executing program 4 (id=824): r0 = epoll_create1(0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x24001850}, 0x0) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1d, 0x20}, 0x20) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40dc2) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc000000010902"], 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x44481, 0x0) ioctl$SNAPSHOT_S2RAM(r7, 0x330b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 1.643548447s ago: executing program 3 (id=825): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x0) syz_usb_connect$uac1(0x2, 0xcf, &(0x7f00000006c0)=ANY=[@ANYBLOB="00010000000000ff6b1d01014000010203010902bd00030103b00109a601a68a9f61eee01bfa9e9c04000000010100000a240101000a0002010209040100000102ff00000001010101020000072401fa060500092402010602050208072401070004000a240202f3ff91058ef00924020103030c05010905010900020201090725010c0706000904020000010200000904020101010200786d01ec71d0556a9d2b00092402016f01404bb1112402020a00dc00010f574d8ffa99deee0b2402010304020936a8e60e240201040303082b3de1e38c8109058209ff0303909007250104090100"], &(0x7f0000000580)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x0, 0x80, 0x1f, 0x149, 0xa5}, 0x12, &(0x7f0000000300)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xa, 0x2, 0x7}]}, 0x1, [{0xbd, &(0x7f00000004c0)=@string={0xbd, 0x3, "b3b484159fb971f408d24697fc3d01f94bcde630089ea2ad0065277a497cad1e440f9e518457bd9770f20caa64f276512b10ddd132305ea3bd91f7fc98ce001d2425ff5cc938a0213bbc350d8a7cc7e3fcefe5c2d3c3a7fbf08c3a707cc58be1dbf928eb0df6f71b4f2cd7aee900c461d74e6190ab24e52a65dd8bd246d61ea9ccb577c2a27804e999da5234defa06fad331a2752b07b2de4bc0c36b0b1773da63deba78465a11c679cc116cb27452313ea3c70be5ea0d7f57fe65"}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4030000200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x4c}, 0x2, 0x34005, 0x0, 0x24084000}, 0x24000000) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000480)={0x20, 0xc, 0x3, "8d25a9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r5, 0x4) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x20, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x2c800) r7 = socket(0x3, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000380)=[{0xe, 0x1, 0x9, 0x4}]}, 0xfffffe19) 1.636377969s ago: executing program 1 (id=826): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = fcntl$dupfd(r1, 0x0, r0) r4 = syz_io_uring_complete(0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ptype\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000100)=""/48, 0x30}, {&(0x7f0000000200)=""/218, 0xda}], 0x2, 0x9, 0x2) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) lseek(r6, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x12, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x40, 0x29, &(0x7f0000000180)=""/41, 0x0, 0x24, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0x0, 0x5, 0x8}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000240)=[r0, r0, r0, r4, r5, r6], &(0x7f0000000280)=[{0x3, 0x4, 0x2, 0x7}, {0x4, 0x2, 0x1, 0x9}, {0x0, 0x2, 0x4}, {0x5, 0x2, 0x0, 0xa}, {0x4, 0x4, 0x2, 0x2}, {0x0, 0x4, 0x4}, {0x1, 0x4, 0xa, 0x3}, {0x1, 0x4, 0x9, 0x8}, {0x1, 0x4, 0x7, 0x9}, {0x4, 0x1, 0x2, 0x4}], 0x10, 0xf}, 0x94) 1.28052073s ago: executing program 1 (id=827): socket$inet6_tcp(0xa, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r0, 0x4048ae9b, &(0x7f00000001c0)={0xe0000, 0x0, {[0x5, 0x101, 0x3, 0xfffffffffffffffb, 0x10001, 0x7, 0x9, 0x8001]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = epoll_create1(0x80000) epoll_wait(r3, &(0x7f0000000100)=[{}], 0x1, 0xff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000008b61164cbe96f89463793a6405265ede5fa64fce65fb3c0f138294c3ec59539ff145949090d6a99777aae76b3e015acc973feb75765c6df9abd73fea32b6c22fa24566792e54de7d5945f260bd9930673fa73ceb869a888abb0e1c776b5e3372e93f59ca8b410b7360f92d85ebedc9f75698eaacf283e24363065265b6316b4619e6db00000000", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf25090000000500050007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008890}, 0xc004) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) 1.279624202s ago: executing program 2 (id=828): syz_emit_ethernet(0xb6, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x24, 0x0, {0x21, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x32, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xe, "0600ea43a2d5eaafaa149b84"}, {0x1, 0xb, "f7d11634eea26b75af"}]}]}}, "d8aee86fb635d6e7"}}}}}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x60080, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0, 0x10000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@float={0xb, 0x0, 0x0, 0x10, 0x4}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x25, 0x0, 0x6c, 0x4}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x51, 0x0, 0x6d, 0x4}, @typedef={0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x6a}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@float={0xb, 0x0, 0x0, 0x10, 0x4}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x25, 0x0, 0x6c, 0x4}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x51, 0x0, 0x6d, 0x4}, @typedef={0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x6a}, 0x28) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x1d00d000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet(0xa, 0x801, 0x84) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000280)={0x5, 0x0, [{0x100, 0x0, 0x7ff}, {0xffffffff, 0x0, 0xe}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x6}, {0x5, 0x0, 0x1ff}, {0x588d, 0x0, 0x1}, {0x10001, 0x0, 0x7}, {0x7fff, 0x0, 0xcf2}, {0x32d8d085, 0x0, 0x1c00}, {0x6, 0x0, 0x2}, {0x8801, 0x0, 0x10001}, {0xfd, 0x0, 0x80}, {0x38e5, 0x0, 0x9}, {0xfffffffa, 0x0, 0x6}, {0x0, 0x0, 0x7aa}, {0x0, 0x0, 0x86}]}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x40) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0xc44, @empty, 0x6ee}}, [0x5, 0x3, 0x4, 0xff, 0xfffffffffffffffa, 0x6, 0xfff00000000, 0x4, 0x6, 0x200, 0x9, 0xf, 0xfd, 0x1ff, 0x8000000000000001]}, &(0x7f0000000440)=0x100) 0s ago: executing program 33 (id=831): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[], 0x27) kernel console output (not intermixed with test programs): an1: encryption failed: -22 [ 256.917707][ T5625] Bluetooth: hci1: command tx timeout [ 257.576408][ T7154] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.578472][ T7154] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.578715][ T7154] bridge_slave_0: entered allmulticast mode [ 257.610413][ T7154] bridge_slave_0: entered promiscuous mode [ 257.647598][ T7154] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.647809][ T7154] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.647999][ T7154] bridge_slave_1: entered allmulticast mode [ 257.650498][ T7154] bridge_slave_1: entered promiscuous mode [ 257.723444][ T7154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.739462][ T7154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.787410][ T7154] team0: Port device team_slave_0 added [ 257.790787][ T7154] team0: Port device team_slave_1 added [ 257.918908][ T7154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.918924][ T7154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.918947][ T7154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.921151][ T7154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.921165][ T7154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.921188][ T7154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.007318][ T5625] Bluetooth: hci1: command tx timeout [ 260.373280][ T7154] hsr_slave_0: entered promiscuous mode [ 260.405399][ T7154] hsr_slave_1: entered promiscuous mode [ 260.426429][ T7154] debugfs: 'hsr0' already exists in 'hsr' [ 260.426457][ T7154] Cannot create hsr debugfs directory [ 260.762957][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 261.376080][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 261.816262][ T5730] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 261.835730][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 261.841017][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.841039][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 261.841069][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 261.841086][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.854078][ T9] usb 3-1: config 0 descriptor?? [ 262.343173][ T5730] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 262.343883][ T5730] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 262.343924][ T5730] usb 5-1: config 171 has no interface number 0 [ 262.346313][ T5730] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 255 [ 262.346405][ T5730] usb 5-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 262.722943][ T5730] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 262.722970][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.722989][ T5730] usb 5-1: Product: syz [ 262.723001][ T5730] usb 5-1: Manufacturer: syz [ 262.723014][ T5730] usb 5-1: SerialNumber: syz [ 262.777416][ T7249] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 262.791573][ T5862] usb 3-1: USB disconnect, device number 10 [ 262.995932][ T5730] ath6kl: Failed to submit usb control message: -71 [ 262.995983][ T5730] ath6kl: unable to send the bmi data to the device: -71 [ 262.996009][ T5730] ath6kl: Unable to send get target info: -71 [ 263.000071][ T5730] ath6kl: Failed to init ath6kl core: -71 [ 263.103869][ T5730] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 263.120128][ T5730] usb 5-1: USB disconnect, device number 8 [ 263.555478][ T7154] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.723673][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 263.728546][ T7154] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.746617][ T7265] binder: 7264:7265 ioctl 40305829 0 returned -22 [ 263.812043][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.813381][ T7154] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.909052][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 263.925310][ T7154] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 264.024366][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.454579][ T7154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.508127][ T7154] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.567313][ T1289] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.567638][ T1289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.595049][ T1293] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.595256][ T1293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.372391][ T7295] fuse: Bad value for 'group_id' [ 266.372411][ T7295] fuse: Bad value for 'group_id' [ 267.489123][ T7154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.049742][ T5862] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 268.205170][ T7320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.242294][ T5862] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 268.242310][ T5862] usb 4-1: config 8 has no interface number 0 [ 268.242334][ T5862] usb 4-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 268.242346][ T5862] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 268.242360][ T5862] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 268.242370][ T5862] usb 4-1: config 8 interface 177 has no altsetting 0 [ 268.242388][ T5862] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 268.242399][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.248370][ T7310] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 268.500222][ T5862] usb 4-1: string descriptor 0 read error: -71 [ 268.501964][ T5862] ir_toy 4-1:8.177: required endpoints not found [ 268.518421][ T5862] usb 4-1: USB disconnect, device number 8 [ 268.871586][ T7154] veth0_vlan: entered promiscuous mode [ 268.883384][ T7154] veth1_vlan: entered promiscuous mode [ 268.928678][ T7154] veth0_macvtap: entered promiscuous mode [ 268.934620][ T7154] veth1_macvtap: entered promiscuous mode [ 268.962920][ T7154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.009087][ T7154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.039526][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.097998][ T7335] sg_write: process 294 (syz.2.409) changed security contexts after opening file descriptor, this is not allowed. [ 269.136723][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.149464][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.157421][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.888416][ T1284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.888436][ T1284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.018749][ T1284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.018769][ T1284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.805679][ T5760] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 270.993727][ T5760] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 270.993755][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.993773][ T5760] usb 4-1: Product: syz [ 270.993785][ T5760] usb 4-1: Manufacturer: syz [ 270.993797][ T5760] usb 4-1: SerialNumber: syz [ 271.353580][ T5753] IPVS: starting estimator thread 0... [ 271.375340][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.5.367'. [ 271.375364][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.5.367'. [ 271.445802][ T7354] IPVS: using max 10 ests per chain, 24000 per kthread [ 271.480301][ T5760] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 271.480336][ T5760] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 271.487155][ T5760] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 271.487207][ T5760] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 271.488009][ T5760] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 271.542142][ T7342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.544285][ T7342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.554727][ T5760] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 271.911402][ T5760] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 272.096790][ T5760] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 272.503976][ T7369] FAULT_INJECTION: forcing a failure. [ 272.503976][ T7369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.504031][ T7369] CPU: 1 UID: 0 PID: 7369 Comm: syz.4.419 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 272.504052][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 272.504063][ T7369] Call Trace: [ 272.504071][ T7369] [ 272.504079][ T7369] dump_stack_lvl+0xe8/0x150 [ 272.504106][ T7369] should_fail_ex+0x46b/0x600 [ 272.504135][ T7369] _copy_from_user+0x2d/0xb0 [ 272.504155][ T7369] do_sock_getsockopt+0x200/0x7e0 [ 272.504185][ T7369] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 272.504224][ T7369] ? __fget_files+0x3a6/0x420 [ 272.504241][ T7369] ? __fget_files+0x2a/0x420 [ 272.504264][ T7369] __x64_sys_getsockopt+0x1aa/0x250 [ 272.504295][ T7369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.504315][ T7369] do_syscall_64+0x174/0x580 [ 272.504341][ T7369] ? clear_bhb_loop+0x40/0x90 [ 272.504363][ T7369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.504381][ T7369] RIP: 0033:0x7fbea801ce59 [ 272.504398][ T7369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.504413][ T7369] RSP: 002b:00007fbea622c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 272.504433][ T7369] RAX: ffffffffffffffda RBX: 00007fbea8296180 RCX: 00007fbea801ce59 [ 272.504446][ T7369] RDX: 0000000000000486 RSI: 0000000000000000 RDI: 0000000000000004 [ 272.504456][ T7369] RBP: 00007fbea622c090 R08: 0000200000004f40 R09: 0000000000000000 [ 272.504469][ T7369] R10: 0000200000004f00 R11: 0000000000000246 R12: 0000000000000001 [ 272.504480][ T7369] R13: 00007fbea8296218 R14: 00007fbea8296180 R15: 00007ffec3e08aa8 [ 272.504509][ T7369] [ 273.139044][ T7370] FAULT_INJECTION: forcing a failure. [ 273.139044][ T7370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.139275][ T7370] CPU: 1 UID: 0 PID: 7370 Comm: syz.1.420 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 273.139298][ T7370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 273.139308][ T7370] Call Trace: [ 273.139316][ T7370] [ 273.139324][ T7370] dump_stack_lvl+0xe8/0x150 [ 273.139367][ T7370] should_fail_ex+0x46b/0x600 [ 273.139398][ T7370] _copy_to_user+0x31/0xb0 [ 273.139418][ T7370] simple_read_from_buffer+0xe1/0x170 [ 273.139450][ T7370] proc_fail_nth_read+0x1be/0x230 [ 273.139472][ T7370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.139493][ T7370] ? rw_verify_area+0x2ac/0x4e0 [ 273.139513][ T7370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.139532][ T7370] vfs_read+0x212/0xa80 [ 273.139559][ T7370] ? __pfx_vfs_read+0x10/0x10 [ 273.139582][ T7370] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 273.139608][ T7370] ? lockdep_hardirqs_on+0x7a/0x110 [ 273.139632][ T7370] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 273.139656][ T7370] ? mutex_lock_nested+0x152/0x1d0 [ 273.139675][ T7370] ? fdget_pos+0x252/0x320 [ 273.139700][ T7370] ksys_read+0x156/0x270 [ 273.139722][ T7370] ? __pfx_ksys_read+0x10/0x10 [ 273.139750][ T7370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.139770][ T7370] do_syscall_64+0x174/0x580 [ 273.139796][ T7370] ? clear_bhb_loop+0x40/0x90 [ 273.139818][ T7370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.139836][ T7370] RIP: 0033:0x7fd7a5acd68e [ 273.139852][ T7370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.139866][ T7370] RSP: 002b:00007fd7a3d3cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.139886][ T7370] RAX: ffffffffffffffda RBX: 00007fd7a3d3d6c0 RCX: 00007fd7a5acd68e [ 273.139900][ T7370] RDX: 000000000000000f RSI: 00007fd7a3d3d0a0 RDI: 0000000000000009 [ 273.139910][ T7370] RBP: 00007fd7a3d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 273.139921][ T7370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.139932][ T7370] R13: 00007fd7a5d86128 R14: 00007fd7a5d86090 R15: 00007fff11dac1b8 [ 273.139962][ T7370] [ 273.370919][ T5772] usb 4-1: USB disconnect, device number 9 [ 274.256075][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.427'. [ 274.256099][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.427'. [ 274.256112][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.427'. [ 277.655717][ T36] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 277.838087][ T36] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 277.838116][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.838134][ T36] usb 4-1: Product: syz [ 277.838146][ T36] usb 4-1: Manufacturer: syz [ 277.838159][ T36] usb 4-1: SerialNumber: syz [ 278.325069][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 278.325131][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 278.405673][ T5730] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 278.547839][ T7403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.548461][ T7403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.561912][ T5730] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.561942][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 278.561967][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 278.561992][ T5730] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.562029][ T5730] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.562049][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.597659][ T5730] usb 6-1: config 0 descriptor?? [ 278.599473][ T7414] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 278.955750][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 278.955804][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 279.028229][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 280.576820][ T36] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 280.615429][ T5730] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 280.615466][ T5730] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 280.615490][ T5730] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 280.615512][ T5730] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 280.651482][ T5730] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 280.651528][ T5730] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 280.651556][ T5730] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 280.651585][ T5730] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 280.651615][ T5730] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 280.651644][ T5730] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 280.655320][ T36] usb 4-1: USB disconnect, device number 10 [ 280.902241][ T5730] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 281.136572][ T31] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 281.141477][ T5730] usb 6-1: USB disconnect, device number 2 [ 282.268860][ T7436] FAULT_INJECTION: forcing a failure. [ 282.268860][ T7436] name failslab, interval 1, probability 0, space 0, times 0 [ 282.268891][ T7436] CPU: 0 UID: 0 PID: 7436 Comm: syz.4.441 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 282.268912][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 282.268922][ T7436] Call Trace: [ 282.268929][ T7436] [ 282.268937][ T7436] dump_stack_lvl+0xe8/0x150 [ 282.268967][ T7436] should_fail_ex+0x46b/0x600 [ 282.268996][ T7436] should_failslab+0xa8/0x100 [ 282.269019][ T7436] __kmalloc_noprof+0xdf/0x7b0 [ 282.269036][ T7436] ? kfree+0x4d/0x6c0 [ 282.269052][ T7436] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 282.269077][ T7436] tomoyo_realpath_from_path+0xe3/0x5d0 [ 282.269098][ T7436] ? tomoyo_domain+0xd7/0x130 [ 282.269122][ T7436] ? tomoyo_path_number_perm+0x219/0x630 [ 282.269147][ T7436] tomoyo_path_number_perm+0x246/0x630 [ 282.269174][ T7436] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 282.269196][ T7436] ? __lock_acquire+0x6b5/0x2cf0 [ 282.269220][ T7436] ? do_raw_spin_lock+0x12b/0x2f0 [ 282.269266][ T7436] ? __fget_files+0x2a/0x420 [ 282.269285][ T7436] ? __fget_files+0x2a/0x420 [ 282.269300][ T7436] ? __fget_files+0x3a6/0x420 [ 282.269314][ T7436] ? __fget_files+0x2a/0x420 [ 282.269334][ T7436] security_file_ioctl+0xc3/0x2a0 [ 282.269362][ T7436] __se_sys_ioctl+0x47/0x170 [ 282.269390][ T7436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.269409][ T7436] do_syscall_64+0x174/0x580 [ 282.269430][ T7436] ? trace_irq_disable+0x3b/0x140 [ 282.269449][ T7436] ? clear_bhb_loop+0x40/0x90 [ 282.269469][ T7436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.269487][ T7436] RIP: 0033:0x7fbea801ce59 [ 282.269504][ T7436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.269519][ T7436] RSP: 002b:00007fbea626e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.269538][ T7436] RAX: ffffffffffffffda RBX: 00007fbea8295fa0 RCX: 00007fbea801ce59 [ 282.269551][ T7436] RDX: 0000000000000000 RSI: 000000004040ae9e RDI: 0000000000000005 [ 282.269562][ T7436] RBP: 00007fbea626e090 R08: 0000000000000000 R09: 0000000000000000 [ 282.269573][ T7436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.269584][ T7436] R13: 00007fbea8296038 R14: 00007fbea8295fa0 R15: 00007ffec3e08aa8 [ 282.269613][ T7436] [ 282.273432][ T7436] ERROR: Out of memory at tomoyo_realpath_from_path. [ 282.331748][ T7435] fido_id[7435]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 282.373669][ T7437] fido_id[7437]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 285.060728][ T36] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 285.371055][ T7470] FAULT_INJECTION: forcing a failure. [ 285.371055][ T7470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.371087][ T7470] CPU: 1 UID: 0 PID: 7470 Comm: syz.5.451 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 285.371107][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 285.371117][ T7470] Call Trace: [ 285.371124][ T7470] [ 285.371130][ T7470] dump_stack_lvl+0xe8/0x150 [ 285.371153][ T7470] should_fail_ex+0x46b/0x600 [ 285.371179][ T7470] _copy_from_user+0x2d/0xb0 [ 285.371196][ T7470] ___sys_sendmsg+0x1c6/0x360 [ 285.371220][ T7470] ? __lock_acquire+0x6b5/0x2cf0 [ 285.371245][ T7470] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.371272][ T7470] ? kstrtouint+0x6e/0xe0 [ 285.371317][ T7470] ? __fget_files+0x2a/0x420 [ 285.371334][ T7470] ? __fget_files+0x3a6/0x420 [ 285.371361][ T7470] __sys_sendmmsg+0x282/0x4e0 [ 285.371391][ T7470] ? __pfx___sys_sendmmsg+0x10/0x10 [ 285.371424][ T7470] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 285.371459][ T7470] ? ksys_write+0x248/0x270 [ 285.371482][ T7470] ? __pfx_ksys_write+0x10/0x10 [ 285.371508][ T7470] __x64_sys_sendmmsg+0xa0/0xc0 [ 285.371533][ T7470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.371552][ T7470] do_syscall_64+0x174/0x580 [ 285.371577][ T7470] ? clear_bhb_loop+0x40/0x90 [ 285.371599][ T7470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.371617][ T7470] RIP: 0033:0x7f30d987ce59 [ 285.371633][ T7470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.371648][ T7470] RSP: 002b:00007f30d7a8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 285.371668][ T7470] RAX: ffffffffffffffda RBX: 00007f30d9af6180 RCX: 00007f30d987ce59 [ 285.371681][ T7470] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000006 [ 285.371701][ T7470] RBP: 00007f30d7a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 285.371712][ T7470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.371722][ T7470] R13: 00007f30d9af6218 R14: 00007f30d9af6180 R15: 00007fffac239cc8 [ 285.371752][ T7470] [ 286.040002][ T36] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 286.040030][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.040047][ T36] usb 4-1: Product: syz [ 286.040060][ T36] usb 4-1: Manufacturer: syz [ 286.040072][ T36] usb 4-1: SerialNumber: syz [ 286.549366][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 286.549429][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 286.745300][ T5623] hid_parser_main: 2 callbacks suppressed [ 286.745319][ T5623] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 286.751990][ T7466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.756358][ T7466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.804406][ T5623] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 286.906016][ T5772] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 286.912708][ T7482] fido_id[7482]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 287.057375][ T5772] usb 2-1: Using ep0 maxpacket: 16 [ 287.062991][ T5772] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 287.063019][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.063037][ T5772] usb 2-1: Product: syz [ 287.063049][ T5772] usb 2-1: Manufacturer: syz [ 287.063062][ T5772] usb 2-1: SerialNumber: syz [ 287.096351][ T5772] usb 2-1: config 0 descriptor?? [ 287.147280][ T5772] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 287.166737][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 287.166792][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 287.167711][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 287.306535][ T36] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 287.353340][ T36] usb 4-1: USB disconnect, device number 11 [ 287.798836][ T5628] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 287.955693][ T5628] usb 6-1: Using ep0 maxpacket: 8 [ 287.958444][ T5628] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 287.958494][ T5628] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 287.958517][ T5628] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 287.958539][ T5628] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 287.958561][ T5628] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 287.958580][ T5628] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.958618][ T5628] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 287.958638][ T5628] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.738828][ T5628] usb 6-1: usb_control_msg returned -32 [ 288.739212][ T5628] usbtmc 6-1:16.0: can't read capabilities [ 288.809078][ T5772] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 289.384019][ T5753] usb 2-1: USB disconnect, device number 12 [ 289.525692][ T5772] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 289.679156][ T5772] usb 4-1: Using ep0 maxpacket: 16 [ 289.683570][ T5772] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.683596][ T5772] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.710534][ T5772] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.710563][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.710581][ T5772] usb 4-1: Product: syz [ 289.710594][ T5772] usb 4-1: Manufacturer: syz [ 289.710606][ T5772] usb 4-1: SerialNumber: syz [ 289.754745][ T5772] usb 4-1: 0:2 : does not exist [ 289.960370][ T5772] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 290.076555][ T5772] usb 4-1: USB disconnect, device number 12 [ 291.167229][ T6631] udevd[6631]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.207920][ T9] usb 6-1: USB disconnect, device number 3 [ 291.236072][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 291.841956][ T7520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.468'. [ 291.870972][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 292.918365][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.471'. [ 292.918389][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.471'. [ 293.016246][ T5753] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 293.041954][ T5753] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 293.139845][ T7528] fido_id[7528]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 293.211795][ T37] audit: type=1326 audit(1780971679.178:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.1.473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a5b0ce59 code=0x7ffc0000 [ 293.263188][ T37] audit: type=1326 audit(1780971679.178:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.1.473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a5b0ce59 code=0x7ffc0000 [ 293.263235][ T37] audit: type=1326 audit(1780971679.188:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.1.473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a5b0ce59 code=0x7ffc0000 [ 293.263272][ T37] audit: type=1326 audit(1780971679.208:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.1.473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fd7a5b0ce59 code=0x7ffc0000 [ 293.263310][ T37] audit: type=1326 audit(1780971679.208:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.1.473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a5b0ce59 code=0x7ffc0000 [ 293.263345][ T37] audit: type=1326 audit(1780971679.208:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.1.473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a5b0ce59 code=0x7ffc0000 [ 293.263382][ T37] audit: type=1326 audit(1780971679.228:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.1.473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a5b0ce59 code=0x7ffc0000 [ 293.263417][ T37] audit: type=1326 audit(1780971679.228:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.1.473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a5b0ce59 code=0x7ffc0000 [ 293.263456][ T37] audit: type=1326 audit(1780971679.228:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.1.473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a5b0ce59 code=0x7ffc0000 [ 293.263498][ T37] audit: type=1326 audit(1780971679.228:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.1.473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7a5b0ce59 code=0x7ffc0000 [ 293.276959][ T7530] netlink: 232 bytes leftover after parsing attributes in process `syz.1.473'. [ 293.276985][ T7530] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.277624][ T7530] IPv6: Can't replace route, no match found [ 293.315818][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 294.376054][ T7540] netlink: 32 bytes leftover after parsing attributes in process `syz.4.475'. [ 296.274546][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.479'. [ 296.274564][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.479'. [ 296.274717][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.479'. [ 296.274727][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.479'. [ 296.648080][ T5772] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 296.835774][ T5772] usb 3-1: Using ep0 maxpacket: 16 [ 297.192342][ T5772] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.192380][ T5772] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.594856][ T5772] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.594884][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.594908][ T5772] usb 3-1: Product: syz [ 297.594920][ T5772] usb 3-1: Manufacturer: syz [ 297.594932][ T5772] usb 3-1: SerialNumber: syz [ 297.648295][ T5772] usb 3-1: 0:2 : does not exist [ 297.958199][ T5772] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 299.210309][ T5772] usb 3-1: USB disconnect, device number 11 [ 299.435312][ T7579] FAULT_INJECTION: forcing a failure. [ 299.435312][ T7579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.435345][ T7579] CPU: 1 UID: 0 PID: 7579 Comm: syz.2.487 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 299.435365][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.435376][ T7579] Call Trace: [ 299.435383][ T7579] [ 299.435391][ T7579] dump_stack_lvl+0xe8/0x150 [ 299.435417][ T7579] should_fail_ex+0x46b/0x600 [ 299.435446][ T7579] _copy_from_user+0x2d/0xb0 [ 299.435465][ T7579] ___sys_sendmsg+0x1c6/0x360 [ 299.435489][ T7579] ? __lock_acquire+0x6b5/0x2cf0 [ 299.435516][ T7579] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.435567][ T7579] ? __fget_files+0x2a/0x420 [ 299.435582][ T7579] ? __fget_files+0x3a6/0x420 [ 299.435604][ T7579] __x64_sys_sendmsg+0x1c3/0x2a0 [ 299.435629][ T7579] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.435659][ T7579] ? __pfx_ksys_write+0x10/0x10 [ 299.435685][ T7579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.435701][ T7579] do_syscall_64+0x174/0x580 [ 299.435722][ T7579] ? trace_irq_disable+0x3b/0x140 [ 299.435741][ T7579] ? clear_bhb_loop+0x40/0x90 [ 299.435760][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.435777][ T7579] RIP: 0033:0x7fe1d7f9ce59 [ 299.435792][ T7579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.435805][ T7579] RSP: 002b:00007fe1d61ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.435822][ T7579] RAX: ffffffffffffffda RBX: 00007fe1d8215fa0 RCX: 00007fe1d7f9ce59 [ 299.435834][ T7579] RDX: 0000000004000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 299.435844][ T7579] RBP: 00007fe1d61ee090 R08: 0000000000000000 R09: 0000000000000000 [ 299.435853][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.435862][ T7579] R13: 00007fe1d8216038 R14: 00007fe1d8215fa0 R15: 00007ffce7088c28 [ 299.435889][ T7579] [ 299.590260][ T6631] udevd[6631]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.853426][ T7584] __nla_validate_parse: 62 callbacks suppressed [ 299.853445][ T7584] netlink: 32 bytes leftover after parsing attributes in process `syz.4.489'. [ 299.956877][ T7589] FAULT_INJECTION: forcing a failure. [ 299.956877][ T7589] name failslab, interval 1, probability 0, space 0, times 0 [ 299.956910][ T7589] CPU: 0 UID: 0 PID: 7589 Comm: syz.5.482 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 299.956930][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.956941][ T7589] Call Trace: [ 299.956948][ T7589] [ 299.956956][ T7589] dump_stack_lvl+0xe8/0x150 [ 299.956982][ T7589] should_fail_ex+0x46b/0x600 [ 299.957012][ T7589] should_failslab+0xa8/0x100 [ 299.957035][ T7589] __kmalloc_noprof+0xdf/0x7b0 [ 299.957054][ T7589] ? kfree+0x4d/0x6c0 [ 299.957070][ T7589] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 299.957096][ T7589] tomoyo_realpath_from_path+0xe3/0x5d0 [ 299.957118][ T7589] ? tomoyo_domain+0xd7/0x130 [ 299.957144][ T7589] ? tomoyo_path_number_perm+0x219/0x630 [ 299.957169][ T7589] tomoyo_path_number_perm+0x246/0x630 [ 299.957195][ T7589] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 299.957219][ T7589] ? __lock_acquire+0x6b5/0x2cf0 [ 299.957246][ T7589] ? do_raw_spin_lock+0x12b/0x2f0 [ 299.957297][ T7589] ? __fget_files+0x2a/0x420 [ 299.957318][ T7589] ? __fget_files+0x2a/0x420 [ 299.957333][ T7589] ? __fget_files+0x3a6/0x420 [ 299.957349][ T7589] ? __fget_files+0x2a/0x420 [ 299.957370][ T7589] security_file_ioctl+0xc3/0x2a0 [ 299.957398][ T7589] __se_sys_ioctl+0x47/0x170 [ 299.957420][ T7589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.957439][ T7589] do_syscall_64+0x174/0x580 [ 299.957464][ T7589] ? trace_irq_disable+0x3b/0x140 [ 299.957484][ T7589] ? clear_bhb_loop+0x40/0x90 [ 299.957506][ T7589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.957524][ T7589] RIP: 0033:0x7f30d987ce59 [ 299.957541][ T7589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.957556][ T7589] RSP: 002b:00007f30d7ace028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.957575][ T7589] RAX: ffffffffffffffda RBX: 00007f30d9af5fa0 RCX: 00007f30d987ce59 [ 299.957588][ T7589] RDX: 00002000000004c0 RSI: 0000000040a85321 RDI: 0000000000000003 [ 299.957599][ T7589] RBP: 00007f30d7ace090 R08: 0000000000000000 R09: 0000000000000000 [ 299.957611][ T7589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.957621][ T7589] R13: 00007f30d9af6038 R14: 00007f30d9af5fa0 R15: 00007fffac239cc8 [ 299.957651][ T7589] [ 299.957751][ T7589] ERROR: Out of memory at tomoyo_realpath_from_path. [ 301.632169][ T5892] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 301.846482][ T5892] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 301.846517][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.846536][ T5892] usb 6-1: Product: syz [ 301.846548][ T5892] usb 6-1: Manufacturer: syz [ 301.846561][ T5892] usb 6-1: SerialNumber: syz [ 302.448405][ T5892] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 302.448464][ T5892] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 303.056847][ T5892] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 303.056900][ T5892] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 303.057747][ T5892] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 303.146545][ T5892] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 303.177142][ T5892] usb 6-1: USB disconnect, device number 4 [ 304.950366][ T7635] bad cache= option: none$n TN-mB>vqf"T-;7ALXCZRYSȺ`+?뇦¿n䕵Xb [ 304.950366][ T7635] [ 304.950614][ T7635] CIFS: VFS: bad cache= option: none$n TN-mB>vqf"T-;7ALXCZRYSȺ`+?뇦¿n䕵Xb [ 306.053053][ T7637] lo speed is unknown, defaulting to 1000 [ 306.053124][ T7637] lo speed is unknown, defaulting to 1000 [ 306.053741][ T7637] lo speed is unknown, defaulting to 1000 [ 306.054493][ T7637] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 306.054511][ T7637] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 306.054530][ T7637] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 306.512146][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 306.512546][ T7644] 8021q: VLANs not supported on gre0 [ 306.512844][ T7645] netlink: 14 bytes leftover after parsing attributes in process `syz.2.504'. [ 306.694089][ T7637] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 306.741932][ T7638] smbdirect: ib_dev[syz1] removed [ 306.775506][ T7645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.052420][ T7645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.120788][ T7656] FAULT_INJECTION: forcing a failure. [ 307.120788][ T7656] name failslab, interval 1, probability 0, space 0, times 0 [ 307.120819][ T7656] CPU: 0 UID: 0 PID: 7656 Comm: syz.4.507 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 307.120840][ T7656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 307.120851][ T7656] Call Trace: [ 307.120858][ T7656] [ 307.120866][ T7656] dump_stack_lvl+0xe8/0x150 [ 307.120892][ T7656] should_fail_ex+0x46b/0x600 [ 307.120921][ T7656] should_failslab+0xa8/0x100 [ 307.120944][ T7656] kmem_cache_alloc_noprof+0x87/0x680 [ 307.120974][ T7656] ? lockdep_hardirqs_on+0x7a/0x110 [ 307.120997][ T7656] ? do_getname+0x2e/0x250 [ 307.121024][ T7656] do_getname+0x2e/0x250 [ 307.121045][ T7656] ? getname_flags+0x11/0x20 [ 307.121069][ T7656] do_sys_openat2+0xca/0x200 [ 307.121096][ T7656] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.121121][ T7656] ? ksys_write+0x248/0x270 [ 307.121143][ T7656] ? __pfx_ksys_write+0x10/0x10 [ 307.121166][ T7656] __x64_sys_openat+0x138/0x170 [ 307.121186][ T7656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.121205][ T7656] do_syscall_64+0x174/0x580 [ 307.121228][ T7656] ? trace_irq_disable+0x3b/0x140 [ 307.121248][ T7656] ? clear_bhb_loop+0x40/0x90 [ 307.121272][ T7656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.121289][ T7656] RIP: 0033:0x7fbea801ce59 [ 307.121307][ T7656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.121321][ T7656] RSP: 002b:00007fbea622c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 307.121341][ T7656] RAX: ffffffffffffffda RBX: 00007fbea8296180 RCX: 00007fbea801ce59 [ 307.121354][ T7656] RDX: 0000000000084383 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 307.121366][ T7656] RBP: 00007fbea622c090 R08: 0000000000000000 R09: 0000000000000000 [ 307.121378][ T7656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.121388][ T7656] R13: 00007fbea8296218 R14: 00007fbea8296180 R15: 00007ffec3e08aa8 [ 307.121417][ T7656] [ 308.281185][ T7645] bond0 (unregistering): Released all slaves [ 308.732990][ T7637] lo speed is unknown, defaulting to 1000 [ 308.769370][ T7637] lo speed is unknown, defaulting to 1000 [ 308.813406][ T7637] lo speed is unknown, defaulting to 1000 [ 308.840994][ T7637] lo speed is unknown, defaulting to 1000 [ 309.086584][ T7637] lo speed is unknown, defaulting to 1000 [ 309.153598][ T7637] lo speed is unknown, defaulting to 1000 [ 310.132086][ T7694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.517'. [ 310.327826][ T5772] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 310.660933][ T5772] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 310.661040][ T5772] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 310.661067][ T5772] usb 3-1: config 0 has no interface number 0 [ 310.664301][ T5772] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 310.664327][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.664345][ T5772] usb 3-1: Product: syz [ 310.664357][ T5772] usb 3-1: Manufacturer: syz [ 310.664370][ T5772] usb 3-1: SerialNumber: syz [ 310.675603][ T5772] usb 3-1: config 0 descriptor?? [ 312.255442][ T5772] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 312.255476][ T5772] uvcvideo 3-1:0.64: No valid video chain found. [ 312.260483][ T5772] usb 3-1: USB disconnect, device number 12 [ 316.058491][ T7740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.530'. [ 317.157865][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.462968][ T5760] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 319.115686][ T5760] usb 6-1: device descriptor read/64, error -71 [ 319.386153][ T5760] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 320.396444][ T5760] usb 6-1: device descriptor read/64, error -71 [ 320.422939][ T7774] netlink: 65536 bytes leftover after parsing attributes in process `syz.1.540'. [ 320.506126][ T5760] usb usb6-port1: attempt power cycle [ 321.875792][ T5760] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 322.095769][ T5760] usb 6-1: device not accepting address 7, error -71 [ 322.122958][ T7782] netlink: 24 bytes leftover after parsing attributes in process `syz.5.543'. [ 322.625701][ T36] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 322.687275][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 322.865732][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 322.869552][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.869605][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 322.869626][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.924909][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 323.629702][ T36] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.629744][ T36] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.635341][ T36] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.635368][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.635387][ T36] usb 3-1: Product: syz [ 323.635399][ T36] usb 3-1: Manufacturer: syz [ 323.635412][ T36] usb 3-1: SerialNumber: syz [ 323.758943][ T9] usb 2-1: config 0 descriptor?? [ 323.768718][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 323.862685][ T36] usb 3-1: 0:2 : does not exist [ 323.862762][ T36] usb 3-1: unit 6 not found! [ 323.955511][ T7799] FAULT_INJECTION: forcing a failure. [ 323.955511][ T7799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.957891][ T7799] CPU: 0 UID: 0 PID: 7799 Comm: syz.4.550 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 323.957906][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 323.957913][ T7799] Call Trace: [ 323.957917][ T7799] [ 323.957922][ T7799] dump_stack_lvl+0xe8/0x150 [ 323.957938][ T7799] should_fail_ex+0x46b/0x600 [ 323.957955][ T7799] _copy_from_user+0x2d/0xb0 [ 323.957969][ T7799] ___sys_sendmsg+0x1c6/0x360 [ 323.957983][ T7799] ? __lock_acquire+0x6b5/0x2cf0 [ 323.957999][ T7799] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.958029][ T7799] ? __fget_files+0x2a/0x420 [ 323.958038][ T7799] ? __fget_files+0x3a6/0x420 [ 323.958052][ T7799] __x64_sys_sendmsg+0x1c3/0x2a0 [ 323.958067][ T7799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.958085][ T7799] ? __pfx_ksys_write+0x10/0x10 [ 323.958101][ T7799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.958111][ T7799] do_syscall_64+0x174/0x580 [ 323.958126][ T7799] ? clear_bhb_loop+0x40/0x90 [ 323.958138][ T7799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.958147][ T7799] RIP: 0033:0x7fbea801ce59 [ 323.958158][ T7799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.958166][ T7799] RSP: 002b:00007fbea626e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.958177][ T7799] RAX: ffffffffffffffda RBX: 00007fbea8295fa0 RCX: 00007fbea801ce59 [ 323.958185][ T7799] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 323.958191][ T7799] RBP: 00007fbea626e090 R08: 0000000000000000 R09: 0000000000000000 [ 323.958197][ T7799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.958203][ T7799] R13: 00007fbea8296038 R14: 00007fbea8295fa0 R15: 00007ffec3e08aa8 [ 323.958218][ T7799] [ 324.064407][ T5772] usb 3-1: USB disconnect, device number 13 [ 324.381541][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.408115][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.449379][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.452027][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.485895][ T9] gspca_vc032x: reg_w err -110 [ 324.485984][ T9] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 325.609145][ T5892] usb 2-1: USB disconnect, device number 13 [ 325.673000][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 325.828857][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 325.828883][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 325.828948][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.831662][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.831689][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.831706][ T9] usb 5-1: Product: syz [ 325.831719][ T9] usb 5-1: Manufacturer: syz [ 325.831732][ T9] usb 5-1: SerialNumber: syz [ 326.126800][ T9] cdc_mbim 5-1:1.0: skipping garbage [ 326.126824][ T9] usb 5-1: selecting invalid altsetting 1 [ 326.766307][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 326.853006][ T9] cdc_mbim 5-1:1.0: SET_CRC_MODE failed [ 326.868480][ T9] usb 5-1: selecting invalid altsetting 1 [ 326.868521][ T9] cdc_mbim 5-1:1.0: bind() failure [ 327.608867][ T9] usb 5-1: USB disconnect, device number 9 [ 330.004284][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'. [ 332.895563][ T7898] FAULT_INJECTION: forcing a failure. [ 332.895563][ T7898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.895620][ T7898] CPU: 0 UID: 0 PID: 7898 Comm: syz.2.585 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 332.895641][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 332.895653][ T7898] Call Trace: [ 332.895660][ T7898] [ 332.895668][ T7898] dump_stack_lvl+0xe8/0x150 [ 332.895695][ T7898] should_fail_ex+0x46b/0x600 [ 332.895724][ T7898] _copy_from_user+0x2d/0xb0 [ 332.895744][ T7898] __se_sys_sendfile64+0xac/0x1a0 [ 332.895771][ T7898] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 332.895793][ T7898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.895819][ T7898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.895838][ T7898] do_syscall_64+0x174/0x580 [ 332.895864][ T7898] ? clear_bhb_loop+0x40/0x90 [ 332.895886][ T7898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.895903][ T7898] RIP: 0033:0x7fe1d7f9ce59 [ 332.895920][ T7898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.895936][ T7898] RSP: 002b:00007fe1d61ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 332.895956][ T7898] RAX: ffffffffffffffda RBX: 00007fe1d8216180 RCX: 00007fe1d7f9ce59 [ 332.895969][ T7898] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000000000000007 [ 332.895981][ T7898] RBP: 00007fe1d61ac090 R08: 0000000000000000 R09: 0000000000000000 [ 332.895992][ T7898] R10: 00000000006fecb1 R11: 0000000000000246 R12: 0000000000000001 [ 332.896003][ T7898] R13: 00007fe1d8216218 R14: 00007fe1d8216180 R15: 00007ffce7088c28 [ 332.896032][ T7898] [ 333.487778][ T7896] FAULT_INJECTION: forcing a failure. [ 333.487778][ T7896] name failslab, interval 1, probability 0, space 0, times 0 [ 333.487800][ T7896] CPU: 0 UID: 0 PID: 7896 Comm: syz.5.583 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 333.487812][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 333.487818][ T7896] Call Trace: [ 333.487822][ T7896] [ 333.487827][ T7896] dump_stack_lvl+0xe8/0x150 [ 333.487843][ T7896] should_fail_ex+0x46b/0x600 [ 333.487861][ T7896] should_failslab+0xa8/0x100 [ 333.487874][ T7896] __kmalloc_noprof+0xdf/0x7b0 [ 333.487885][ T7896] ? kfree+0x4d/0x6c0 [ 333.487894][ T7896] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 333.487908][ T7896] tomoyo_realpath_from_path+0xe3/0x5d0 [ 333.487920][ T7896] ? tomoyo_domain+0xd7/0x130 [ 333.487934][ T7896] ? tomoyo_path_number_perm+0x219/0x630 [ 333.487948][ T7896] tomoyo_path_number_perm+0x246/0x630 [ 333.487963][ T7896] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 333.487977][ T7896] ? __lock_acquire+0x6b5/0x2cf0 [ 333.487991][ T7896] ? do_raw_spin_lock+0x12b/0x2f0 [ 333.488017][ T7896] ? __fget_files+0x2a/0x420 [ 333.488028][ T7896] ? __fget_files+0x2a/0x420 [ 333.488036][ T7896] ? __fget_files+0x3a6/0x420 [ 333.488045][ T7896] ? __fget_files+0x2a/0x420 [ 333.488055][ T7896] security_file_ioctl+0xc3/0x2a0 [ 333.488072][ T7896] __se_sys_ioctl+0x47/0x170 [ 333.488084][ T7896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.488095][ T7896] do_syscall_64+0x174/0x580 [ 333.488110][ T7896] ? trace_irq_disable+0x3b/0x140 [ 333.488121][ T7896] ? clear_bhb_loop+0x40/0x90 [ 333.488133][ T7896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.488147][ T7896] RIP: 0033:0x7f30d987ce59 [ 333.488163][ T7896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.488178][ T7896] RSP: 002b:00007f30d7aad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.488196][ T7896] RAX: ffffffffffffffda RBX: 00007f30d9af6090 RCX: 00007f30d987ce59 [ 333.488209][ T7896] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000007 [ 333.488221][ T7896] RBP: 00007f30d7aad090 R08: 0000000000000000 R09: 0000000000000000 [ 333.488231][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.488242][ T7896] R13: 00007f30d9af6128 R14: 00007f30d9af6090 R15: 00007fffac239cc8 [ 333.488269][ T7896] [ 333.492508][ T7896] ERROR: Out of memory at tomoyo_realpath_from_path. [ 333.591522][ T7897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.584'. [ 338.273952][ T7944] netlink: 65536 bytes leftover after parsing attributes in process `syz.1.597'. [ 339.096955][ T7949] could not allocate digest TFM handle cmac(sm4) [ 341.339945][ T7975] FAULT_INJECTION: forcing a failure. [ 341.339945][ T7975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.339980][ T7975] CPU: 1 UID: 0 PID: 7975 Comm: syz.2.608 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 341.339993][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 341.340000][ T7975] Call Trace: [ 341.340004][ T7975] [ 341.340009][ T7975] dump_stack_lvl+0xe8/0x150 [ 341.340032][ T7975] should_fail_ex+0x46b/0x600 [ 341.340050][ T7975] _copy_from_user+0x2d/0xb0 [ 341.340060][ T7975] ___sys_sendmsg+0x1c6/0x360 [ 341.340075][ T7975] ? __lock_acquire+0x6b5/0x2cf0 [ 341.340090][ T7975] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.340120][ T7975] ? __fget_files+0x2a/0x420 [ 341.340129][ T7975] ? __fget_files+0x3a6/0x420 [ 341.340143][ T7975] __x64_sys_sendmsg+0x1c3/0x2a0 [ 341.340158][ T7975] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.340188][ T7975] ? __pfx_ksys_write+0x10/0x10 [ 341.340213][ T7975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.340224][ T7975] do_syscall_64+0x174/0x580 [ 341.340239][ T7975] ? trace_irq_disable+0x3b/0x140 [ 341.340251][ T7975] ? clear_bhb_loop+0x40/0x90 [ 341.340263][ T7975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.340273][ T7975] RIP: 0033:0x7fe1d7f9ce59 [ 341.340283][ T7975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.340291][ T7975] RSP: 002b:00007fe1d61cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.340303][ T7975] RAX: ffffffffffffffda RBX: 00007fe1d8216090 RCX: 00007fe1d7f9ce59 [ 341.340310][ T7975] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 341.340316][ T7975] RBP: 00007fe1d61cd090 R08: 0000000000000000 R09: 0000000000000000 [ 341.340322][ T7975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.340327][ T7975] R13: 00007fe1d8216128 R14: 00007fe1d8216090 R15: 00007ffce7088c28 [ 341.340342][ T7975] [ 343.668089][ T7990] cgroup: Unknown subsys name 'cpuset' [ 343.735686][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 343.765468][ T7990] erspan1: entered promiscuous mode [ 343.765497][ T7990] erspan1: entered allmulticast mode [ 343.895683][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 343.897716][ T31] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 343.897766][ T31] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 343.897790][ T31] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 343.897815][ T31] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 343.900205][ T31] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 343.900230][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.900247][ T31] usb 5-1: Product: syz [ 343.900260][ T31] usb 5-1: Manufacturer: syz [ 343.900272][ T31] usb 5-1: SerialNumber: syz [ 344.028256][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 344.098257][ T31] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input7 [ 344.231954][ T7998] FAULT_INJECTION: forcing a failure. [ 344.231954][ T7998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.231984][ T7998] CPU: 0 UID: 0 PID: 7998 Comm: syz.2.619 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 344.232003][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.232013][ T7998] Call Trace: [ 344.232021][ T7998] [ 344.232028][ T7998] dump_stack_lvl+0xe8/0x150 [ 344.232053][ T7998] should_fail_ex+0x46b/0x600 [ 344.232080][ T7998] strncpy_from_user+0x36/0x2b0 [ 344.232104][ T7998] path_setxattrat+0x191/0x440 [ 344.232133][ T7998] ? __pfx_path_setxattrat+0x10/0x10 [ 344.232181][ T7998] ? rcu_is_watching+0x15/0xb0 [ 344.232209][ T7998] __x64_sys_setxattr+0xbc/0xe0 [ 344.232227][ T7998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.232243][ T7998] do_syscall_64+0x174/0x580 [ 344.232266][ T7998] ? trace_irq_disable+0x3b/0x140 [ 344.232285][ T7998] ? clear_bhb_loop+0x40/0x90 [ 344.232304][ T7998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.232320][ T7998] RIP: 0033:0x7fe1d7f9ce59 [ 344.232333][ T7998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.232342][ T7998] RSP: 002b:00007fe1d61ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 344.232354][ T7998] RAX: ffffffffffffffda RBX: 00007fe1d8215fa0 RCX: 00007fe1d7f9ce59 [ 344.232361][ T7998] RDX: 0000000000000000 RSI: 0000200000002b80 RDI: 0000200000000140 [ 344.232367][ T7998] RBP: 00007fe1d61ee090 R08: 0000000000000003 R09: 0000000000000000 [ 344.232373][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.232379][ T7998] R13: 00007fe1d8216038 R14: 00007fe1d8215fa0 R15: 00007ffce7088c28 [ 344.232393][ T7998] [ 344.345641][ T31] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 344.345660][ T31] (id 0x00) [ 344.450997][ T31] rc_core: IR keymap rc-imon-pad not found [ 344.451017][ T31] Registered IR keymap rc-empty [ 344.451099][ T31] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 344.451109][ T31] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 344.495687][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 344.522378][ T31] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 344.546796][ T31] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input8 [ 344.615958][ T31] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:10> initialized [ 344.655678][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 344.668204][ T9] usb 4-1: config 0 has no interfaces? [ 344.668250][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 344.668272][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.698679][ T9] usb 4-1: config 0 descriptor?? [ 345.104407][ T9] usb 4-1: USB disconnect, device number 13 [ 345.386450][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 345.386467][ T37] audit: type=1326 audit(1780971731.358:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8018 comm="syz.2.624" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 345.387666][ T37] audit: type=1326 audit(1780971731.358:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8018 comm="syz.2.624" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 345.390221][ T37] audit: type=1326 audit(1780971731.358:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8018 comm="syz.2.624" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 345.390667][ T37] audit: type=1326 audit(1780971731.358:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8018 comm="syz.2.624" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 345.391685][ T37] audit: type=1326 audit(1780971731.358:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8018 comm="syz.2.624" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 345.392590][ T37] audit: type=1326 audit(1780971731.358:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8018 comm="syz.2.624" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 345.398759][ T37] audit: type=1326 audit(1780971731.368:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8018 comm="syz.2.624" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 345.401458][ T37] audit: type=1326 audit(1780971731.368:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8018 comm="syz.2.624" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 345.402906][ T37] audit: type=1326 audit(1780971731.368:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8018 comm="syz.2.624" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 345.403809][ T37] audit: type=1326 audit(1780971731.368:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8018 comm="syz.2.624" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 345.635940][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 345.785703][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 345.802105][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 345.820083][ T31] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 345.820112][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.820130][ T31] usb 2-1: Product: syz [ 345.820143][ T31] usb 2-1: Manufacturer: syz [ 345.820155][ T31] usb 2-1: SerialNumber: syz [ 346.099508][ T31] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 346.099942][ T31] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 346.470636][ T8013] imon:send_packet: task interrupted [ 346.470769][ T8013] imon:send_packet: packet tx failed (-512) [ 346.470903][ T8013] imon:vfd_write: send packet #1 failed [ 346.511297][ T31] usb 2-1: USB disconnect, device number 14 [ 346.552560][ T5623] usb 5-1: USB disconnect, device number 10 [ 348.728514][ T8049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.633'. [ 348.774329][ T8054] NILFS (nullb0): couldn't find nilfs on the device [ 349.171433][ T5753] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 349.171778][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 349.329979][ T8063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.638'. [ 349.496502][ T8067] FAULT_INJECTION: forcing a failure. [ 349.496502][ T8067] name failslab, interval 1, probability 0, space 0, times 0 [ 349.496535][ T8067] CPU: 0 UID: 0 PID: 8067 Comm: syz.3.640 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 349.496556][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 349.496567][ T8067] Call Trace: [ 349.496574][ T8067] [ 349.496582][ T8067] dump_stack_lvl+0xe8/0x150 [ 349.496608][ T8067] should_fail_ex+0x46b/0x600 [ 349.496638][ T8067] should_failslab+0xa8/0x100 [ 349.496662][ T8067] __kmalloc_cache_noprof+0x84/0x690 [ 349.496684][ T8067] ? snd_pcm_oss_change_params_locked+0x175/0x3e00 [ 349.496713][ T8067] snd_pcm_oss_change_params_locked+0x175/0x3e00 [ 349.496735][ T8067] ? __lock_acquire+0x6b5/0x2cf0 [ 349.496763][ T8067] ? kernel_text_address+0xa5/0xe0 [ 349.496788][ T8067] ? __kernel_text_address+0xd/0x30 [ 349.496811][ T8067] ? unwind_get_return_address+0x4d/0x90 [ 349.496845][ T8067] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.496865][ T8067] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 349.496901][ T8067] ? lockdep_hardirqs_on+0x7a/0x110 [ 349.496926][ T8067] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 349.496953][ T8067] ? snd_pcm_oss_write+0x20d/0xbe0 [ 349.496977][ T8067] snd_pcm_oss_write+0x282/0xbe0 [ 349.497016][ T8067] vfs_writev+0x4c6/0x9a0 [ 349.497042][ T8067] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 349.497067][ T8067] ? __pfx_vfs_writev+0x10/0x10 [ 349.497102][ T8067] ? __fget_files+0x2a/0x420 [ 349.497121][ T8067] ? __fget_files+0x3a6/0x420 [ 349.497135][ T8067] ? __fget_files+0x2a/0x420 [ 349.497159][ T8067] do_writev+0x15a/0x2e0 [ 349.497183][ T8067] ? __pfx_do_writev+0x10/0x10 [ 349.497213][ T8067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.497235][ T8067] do_syscall_64+0x174/0x580 [ 349.497256][ T8067] ? trace_irq_disable+0x3b/0x140 [ 349.497282][ T8067] ? clear_bhb_loop+0x40/0x90 [ 349.497300][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.497314][ T8067] RIP: 0033:0x7fe7f6b3ce59 [ 349.497330][ T8067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.497344][ T8067] RSP: 002b:00007fe7f4d8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 349.497362][ T8067] RAX: ffffffffffffffda RBX: 00007fe7f6db5fa0 RCX: 00007fe7f6b3ce59 [ 349.497373][ T8067] RDX: 0000000000000001 RSI: 0000200000003400 RDI: 0000000000000003 [ 349.497384][ T8067] RBP: 00007fe7f4d8e090 R08: 0000000000000000 R09: 0000000000000000 [ 349.497393][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.497403][ T8067] R13: 00007fe7f6db6038 R14: 00007fe7f6db5fa0 R15: 00007ffcdaa11dd8 [ 349.497431][ T8067] [ 351.406220][ T8095] lo speed is unknown, defaulting to 1000 [ 351.644892][ T8107] FAULT_INJECTION: forcing a failure. [ 351.644892][ T8107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.644940][ T8107] CPU: 0 UID: 0 PID: 8107 Comm: syz.3.654 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 351.644961][ T8107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 351.644971][ T8107] Call Trace: [ 351.644978][ T8107] [ 351.644985][ T8107] dump_stack_lvl+0xe8/0x150 [ 351.645011][ T8107] should_fail_ex+0x46b/0x600 [ 351.645041][ T8107] _copy_from_user+0x2d/0xb0 [ 351.645058][ T8107] __sys_sendto+0x2bc/0x710 [ 351.645086][ T8107] ? __pfx___sys_sendto+0x10/0x10 [ 351.645131][ T8107] ? ksys_write+0x248/0x270 [ 351.645152][ T8107] ? __pfx_ksys_write+0x10/0x10 [ 351.645176][ T8107] __x64_sys_sendto+0xde/0x100 [ 351.645198][ T8107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.645217][ T8107] do_syscall_64+0x174/0x580 [ 351.645241][ T8107] ? trace_irq_disable+0x3b/0x140 [ 351.645262][ T8107] ? clear_bhb_loop+0x40/0x90 [ 351.645283][ T8107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.645300][ T8107] RIP: 0033:0x7fe7f6b3ce59 [ 351.645317][ T8107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.645332][ T8107] RSP: 002b:00007fe7f4d8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 351.645351][ T8107] RAX: ffffffffffffffda RBX: 00007fe7f6db5fa0 RCX: 00007fe7f6b3ce59 [ 351.645364][ T8107] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 351.645375][ T8107] RBP: 00007fe7f4d8e090 R08: 0000200000000140 R09: 000000000000001c [ 351.645386][ T8107] R10: 000000002c0000f4 R11: 0000000000000246 R12: 0000000000000001 [ 351.645397][ T8107] R13: 00007fe7f6db6038 R14: 00007fe7f6db5fa0 R15: 00007ffcdaa11dd8 [ 351.645425][ T8107] [ 353.557941][ T5760] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 353.608672][ T8130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.662'. [ 353.657267][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 353.717113][ T5760] usb 4-1: Using ep0 maxpacket: 16 [ 353.742213][ T5760] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.742270][ T5760] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.981877][ T5760] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.981906][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.981924][ T5760] usb 4-1: Product: syz [ 354.009872][ T5760] usb 4-1: Manufacturer: syz [ 354.009891][ T5760] usb 4-1: SerialNumber: syz [ 354.418246][ T5760] usb 4-1: 0:2 : does not exist [ 354.620603][ T9] usb 4-1: USB disconnect, device number 15 [ 356.248647][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 356.307870][ T8159] FAULT_INJECTION: forcing a failure. [ 356.307870][ T8159] name failslab, interval 1, probability 0, space 0, times 0 [ 356.307893][ T8159] CPU: 0 UID: 0 PID: 8159 Comm: syz.5.672 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 356.307904][ T8159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 356.307911][ T8159] Call Trace: [ 356.307915][ T8159] [ 356.307919][ T8159] dump_stack_lvl+0xe8/0x150 [ 356.307935][ T8159] should_fail_ex+0x46b/0x600 [ 356.307952][ T8159] should_failslab+0xa8/0x100 [ 356.307966][ T8159] __kmalloc_noprof+0xdf/0x7b0 [ 356.307977][ T8159] ? kfree+0x4d/0x6c0 [ 356.307985][ T8159] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 356.308000][ T8159] tomoyo_realpath_from_path+0xe3/0x5d0 [ 356.308012][ T8159] ? tomoyo_domain+0xd7/0x130 [ 356.308025][ T8159] ? tomoyo_path_number_perm+0x219/0x630 [ 356.308043][ T8159] tomoyo_path_number_perm+0x246/0x630 [ 356.308058][ T8159] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 356.308071][ T8159] ? __lock_acquire+0x6b5/0x2cf0 [ 356.308086][ T8159] ? do_raw_spin_lock+0x12b/0x2f0 [ 356.308112][ T8159] ? __fget_files+0x2a/0x420 [ 356.308124][ T8159] ? __fget_files+0x2a/0x420 [ 356.308132][ T8159] ? __fget_files+0x3a6/0x420 [ 356.308140][ T8159] ? __fget_files+0x2a/0x420 [ 356.308151][ T8159] security_file_ioctl+0xc3/0x2a0 [ 356.308168][ T8159] __se_sys_ioctl+0x47/0x170 [ 356.308180][ T8159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.308190][ T8159] do_syscall_64+0x174/0x580 [ 356.308204][ T8159] ? trace_irq_disable+0x3b/0x140 [ 356.308215][ T8159] ? clear_bhb_loop+0x40/0x90 [ 356.308227][ T8159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.308237][ T8159] RIP: 0033:0x7f30d987ce59 [ 356.308247][ T8159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.308255][ T8159] RSP: 002b:00007f30d7ace028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.308267][ T8159] RAX: ffffffffffffffda RBX: 00007f30d9af5fa0 RCX: 00007f30d987ce59 [ 356.308274][ T8159] RDX: 0000200000000180 RSI: 0000000000005412 RDI: 0000000000000003 [ 356.308280][ T8159] RBP: 00007f30d7ace090 R08: 0000000000000000 R09: 0000000000000000 [ 356.308286][ T8159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.308292][ T8159] R13: 00007f30d9af6038 R14: 00007f30d9af5fa0 R15: 00007fffac239cc8 [ 356.308308][ T8159] [ 356.308312][ T8159] ERROR: Out of memory at tomoyo_realpath_from_path. [ 356.426860][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 356.430524][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 356.433824][ T9] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 356.433851][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.433868][ T9] usb 3-1: Product: syz [ 356.433881][ T9] usb 3-1: Manufacturer: syz [ 356.433893][ T9] usb 3-1: SerialNumber: syz [ 356.707617][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 356.707944][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 356.776992][ T9] usb 3-1: USB disconnect, device number 14 [ 357.278878][ T8183] FAULT_INJECTION: forcing a failure. [ 357.278878][ T8183] name failslab, interval 1, probability 0, space 0, times 0 [ 357.278899][ T8183] CPU: 1 UID: 0 PID: 8183 Comm: syz.4.680 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 357.278911][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 357.278918][ T8183] Call Trace: [ 357.278922][ T8183] [ 357.278926][ T8183] dump_stack_lvl+0xe8/0x150 [ 357.278943][ T8183] should_fail_ex+0x46b/0x600 [ 357.278961][ T8183] should_failslab+0xa8/0x100 [ 357.278974][ T8183] __kmalloc_noprof+0xdf/0x7b0 [ 357.278985][ T8183] ? kfree+0x4d/0x6c0 [ 357.278994][ T8183] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 357.279009][ T8183] tomoyo_realpath_from_path+0xe3/0x5d0 [ 357.279021][ T8183] ? tomoyo_domain+0xd7/0x130 [ 357.279034][ T8183] ? tomoyo_path_number_perm+0x219/0x630 [ 357.279049][ T8183] tomoyo_path_number_perm+0x246/0x630 [ 357.279064][ T8183] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 357.279077][ T8183] ? __lock_acquire+0x6b5/0x2cf0 [ 357.279092][ T8183] ? do_raw_spin_lock+0x12b/0x2f0 [ 357.279119][ T8183] ? __fget_files+0x2a/0x420 [ 357.279130][ T8183] ? __fget_files+0x2a/0x420 [ 357.279138][ T8183] ? __fget_files+0x3a6/0x420 [ 357.279146][ T8183] ? __fget_files+0x2a/0x420 [ 357.279157][ T8183] security_file_ioctl+0xc3/0x2a0 [ 357.279173][ T8183] __se_sys_ioctl+0x47/0x170 [ 357.279185][ T8183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.279196][ T8183] do_syscall_64+0x174/0x580 [ 357.279210][ T8183] ? trace_irq_disable+0x3b/0x140 [ 357.279221][ T8183] ? clear_bhb_loop+0x40/0x90 [ 357.279233][ T8183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.279243][ T8183] RIP: 0033:0x7fbea801ce59 [ 357.279253][ T8183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.279261][ T8183] RSP: 002b:00007fbea626e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.279272][ T8183] RAX: ffffffffffffffda RBX: 00007fbea8295fa0 RCX: 00007fbea801ce59 [ 357.279279][ T8183] RDX: 0000200000000100 RSI: 000000000000890c RDI: 0000000000000004 [ 357.279285][ T8183] RBP: 00007fbea626e090 R08: 0000000000000000 R09: 0000000000000000 [ 357.279292][ T8183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.279297][ T8183] R13: 00007fbea8296038 R14: 00007fbea8295fa0 R15: 00007ffec3e08aa8 [ 357.279313][ T8183] [ 357.279316][ T8183] ERROR: Out of memory at tomoyo_realpath_from_path. [ 357.969256][ T8194] FAULT_INJECTION: forcing a failure. [ 357.969256][ T8194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.969281][ T8194] CPU: 1 UID: 0 PID: 8194 Comm: syz.5.685 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 357.969292][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 357.969329][ T8194] Call Trace: [ 357.969333][ T8194] [ 357.969338][ T8194] dump_stack_lvl+0xe8/0x150 [ 357.969354][ T8194] should_fail_ex+0x46b/0x600 [ 357.969371][ T8194] _copy_from_user+0x2d/0xb0 [ 357.969382][ T8194] ___sys_sendmsg+0x1c6/0x360 [ 357.969397][ T8194] ? __lock_acquire+0x6b5/0x2cf0 [ 357.969412][ T8194] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.969442][ T8194] ? __fget_files+0x2a/0x420 [ 357.969452][ T8194] ? __fget_files+0x3a6/0x420 [ 357.969465][ T8194] __x64_sys_sendmsg+0x1c3/0x2a0 [ 357.969480][ T8194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.969499][ T8194] ? __pfx_ksys_write+0x10/0x10 [ 357.969514][ T8194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.969524][ T8194] do_syscall_64+0x174/0x580 [ 357.969539][ T8194] ? trace_irq_disable+0x3b/0x140 [ 357.969550][ T8194] ? clear_bhb_loop+0x40/0x90 [ 357.969562][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.969574][ T8194] RIP: 0033:0x7f30d987ce59 [ 357.969584][ T8194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.969592][ T8194] RSP: 002b:00007f30d7ace028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.969604][ T8194] RAX: ffffffffffffffda RBX: 00007f30d9af5fa0 RCX: 00007f30d987ce59 [ 357.969611][ T8194] RDX: 0000000000064000 RSI: 0000200000000a00 RDI: 0000000000000007 [ 357.969617][ T8194] RBP: 00007f30d7ace090 R08: 0000000000000000 R09: 0000000000000000 [ 357.969623][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.969628][ T8194] R13: 00007f30d9af6038 R14: 00007f30d9af5fa0 R15: 00007fffac239cc8 [ 357.969643][ T8194] [ 358.676425][ T8214] FAULT_INJECTION: forcing a failure. [ 358.676425][ T8214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.676456][ T8214] CPU: 1 UID: 0 PID: 8214 Comm: syz.2.691 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 358.676475][ T8214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.676486][ T8214] Call Trace: [ 358.676493][ T8214] [ 358.676501][ T8214] dump_stack_lvl+0xe8/0x150 [ 358.676526][ T8214] should_fail_ex+0x46b/0x600 [ 358.676552][ T8214] _copy_from_user+0x2d/0xb0 [ 358.676569][ T8214] __sys_sendto+0x2bc/0x710 [ 358.676596][ T8214] ? __pfx___sys_sendto+0x10/0x10 [ 358.676647][ T8214] ? __pfx_ksys_write+0x10/0x10 [ 358.676670][ T8214] __x64_sys_sendto+0xde/0x100 [ 358.676692][ T8214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.676711][ T8214] do_syscall_64+0x174/0x580 [ 358.676734][ T8214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.676750][ T8214] ? clear_bhb_loop+0x40/0x90 [ 358.676762][ T8214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.676772][ T8214] RIP: 0033:0x7fe1d7f9ce59 [ 358.676782][ T8214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.676790][ T8214] RSP: 002b:00007fe1d61ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 358.676802][ T8214] RAX: ffffffffffffffda RBX: 00007fe1d8215fa0 RCX: 00007fe1d7f9ce59 [ 358.676809][ T8214] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 358.676815][ T8214] RBP: 00007fe1d61ee090 R08: 000020000005ffe4 R09: 000000000000001c [ 358.676821][ T8214] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 358.676827][ T8214] R13: 00007fe1d8216038 R14: 00007fe1d8215fa0 R15: 00007ffce7088c28 [ 358.676842][ T8214] [ 359.215714][ T5628] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 359.365850][ T5628] usb 5-1: Using ep0 maxpacket: 8 [ 359.366018][ T5623] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 359.390800][ T5628] usb 5-1: unable to get BOS descriptor or descriptor too short [ 359.394038][ T5628] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 359.394064][ T5628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.394081][ T5628] usb 5-1: Product: syz [ 359.394089][ T5628] usb 5-1: Manufacturer: syz [ 359.394096][ T5628] usb 5-1: SerialNumber: syz [ 359.525645][ T5623] usb 3-1: Using ep0 maxpacket: 16 [ 359.532907][ T5623] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.532933][ T5623] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.577076][ T5623] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.577094][ T5623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.577104][ T5623] usb 3-1: Product: syz [ 359.577110][ T5623] usb 3-1: Manufacturer: syz [ 359.577117][ T5623] usb 3-1: SerialNumber: syz [ 359.795903][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 359.848566][ T5628] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 359.852203][ T5628] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 359.886352][ T5623] usb 3-1: 0:2 : does not exist [ 360.530910][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 360.530941][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 360.537766][ T9] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 360.537795][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.537814][ T9] usb 2-1: Product: syz [ 360.537827][ T9] usb 2-1: Manufacturer: syz [ 360.537839][ T9] usb 2-1: SerialNumber: syz [ 360.615073][ T9] usb 2-1: config 0 descriptor?? [ 360.659614][ T8229] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 360.659787][ T8229] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 360.829716][ T5628] usb 5-1: USB disconnect, device number 11 [ 360.855413][ T5623] usb 3-1: USB disconnect, device number 15 [ 360.861982][ T8229] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 360.862199][ T8229] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 361.179011][ T6633] udevd[6633]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.273220][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 361.504336][ T6631] udevd[6631]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 361.534433][ T9] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 361.603559][ T9] usb 2-1: USB disconnect, device number 15 [ 362.949789][ T5730] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 364.358119][ T5623] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 364.526824][ T5730] usb 4-1: Using ep0 maxpacket: 32 [ 364.533342][ T5730] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 364.533369][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.533385][ T5730] usb 4-1: Product: syz [ 364.533398][ T5730] usb 4-1: Manufacturer: syz [ 364.533410][ T5730] usb 4-1: SerialNumber: syz [ 364.535654][ T5623] usb 2-1: Using ep0 maxpacket: 32 [ 364.571407][ T5623] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 364.571436][ T5623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.571454][ T5623] usb 2-1: Product: syz [ 364.571467][ T5623] usb 2-1: Manufacturer: syz [ 364.571478][ T5623] usb 2-1: SerialNumber: syz [ 364.634043][ T5730] usb 4-1: config 0 descriptor?? [ 364.641004][ T5623] usb 2-1: config 0 descriptor?? [ 364.915067][ T5730] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 016 [ 364.945006][ T5623] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 016 [ 365.061758][ T5623] usb 2-1: USB disconnect, device number 16 [ 365.286731][ T5730] usb 4-1: USB disconnect, device number 16 [ 365.945751][ T5730] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 366.100981][ T5730] usb 3-1: config 1 has an invalid interface number: 138 but max is 0 [ 366.101007][ T5730] usb 3-1: config 1 has no interface number 0 [ 366.101047][ T5730] usb 3-1: config 1 interface 138 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 366.101071][ T5730] usb 3-1: config 1 interface 138 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 366.101100][ T5730] usb 3-1: config 1 interface 138 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 366.101118][ T5730] usb 3-1: config 1 interface 138 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 366.101137][ T5730] usb 3-1: config 1 interface 138 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 366.101156][ T5730] usb 3-1: config 1 interface 138 has no altsetting 0 [ 366.185904][ T5730] usb 3-1: New USB device found, idVendor=2c7c, idProduct=6008, bcdDevice=bc.de [ 366.185933][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.185949][ T5730] usb 3-1: Product: Э [ 366.185962][ T5730] usb 3-1: Manufacturer: 㟷贆侘⪈♳ [ 366.185973][ T5730] usb 3-1: SerialNumber: 둫煬챕ꮠਜ਼욙౅陼횑쪥懔⭵롶듟닄枛눡䤕ᬎⴽ캏趝ᒌ܎儓চ땉⣲ꈵ禧琵떤ѿ팢閥㗱䍒띱˭杈䪺爭ᶳ᥼ޒ犀蝕稂ꂄ颷㬊쉣⎧︈䴯☯㍀졮⡫ꗅ㥾爗窑궖化ᛠﮫ۳Ớꃟ [ 367.074532][ T5730] option 3-1:1.138: GSM modem (1-port) converter detected [ 367.158603][ T5730] usb 3-1: USB disconnect, device number 16 [ 367.163688][ T5730] option 3-1:1.138: device disconnected [ 367.466071][ T8315] netlink: 72 bytes leftover after parsing attributes in process `syz.4.725'. [ 368.434840][ T8325] FAULT_INJECTION: forcing a failure. [ 368.434840][ T8325] name failslab, interval 1, probability 0, space 0, times 0 [ 368.434870][ T8325] CPU: 1 UID: 0 PID: 8325 Comm: syz.4.731 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 368.434890][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.434906][ T8325] Call Trace: [ 368.434913][ T8325] [ 368.434920][ T8325] dump_stack_lvl+0xe8/0x150 [ 368.434945][ T8325] should_fail_ex+0x46b/0x600 [ 368.434975][ T8325] should_failslab+0xa8/0x100 [ 368.434998][ T8325] __kmalloc_noprof+0xdf/0x7b0 [ 368.435016][ T8325] ? kfree+0x4d/0x6c0 [ 368.435033][ T8325] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 368.435059][ T8325] tomoyo_realpath_from_path+0xe3/0x5d0 [ 368.435081][ T8325] ? tomoyo_domain+0xd7/0x130 [ 368.435104][ T8325] ? tomoyo_path_number_perm+0x219/0x630 [ 368.435127][ T8325] tomoyo_path_number_perm+0x246/0x630 [ 368.435150][ T8325] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 368.435170][ T8325] ? __lock_acquire+0x6b5/0x2cf0 [ 368.435188][ T8325] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.435216][ T8325] ? __fget_files+0x2a/0x420 [ 368.435233][ T8325] ? __fget_files+0x2a/0x420 [ 368.435247][ T8325] ? __fget_files+0x3a6/0x420 [ 368.435262][ T8325] ? __fget_files+0x2a/0x420 [ 368.435278][ T8325] security_file_ioctl+0xc3/0x2a0 [ 368.435295][ T8325] __se_sys_ioctl+0x47/0x170 [ 368.435307][ T8325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.435318][ T8325] do_syscall_64+0x174/0x580 [ 368.435333][ T8325] ? clear_bhb_loop+0x40/0x90 [ 368.435346][ T8325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.435356][ T8325] RIP: 0033:0x7fbea801ce59 [ 368.435366][ T8325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.435374][ T8325] RSP: 002b:00007fbea626e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.435386][ T8325] RAX: ffffffffffffffda RBX: 00007fbea8295fa0 RCX: 00007fbea801ce59 [ 368.435393][ T8325] RDX: 0000000000000000 RSI: 0000000040045201 RDI: 0000000000000003 [ 368.435399][ T8325] RBP: 00007fbea626e090 R08: 0000000000000000 R09: 0000000000000000 [ 368.435405][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.435411][ T8325] R13: 00007fbea8296038 R14: 00007fbea8295fa0 R15: 00007ffec3e08aa8 [ 368.435426][ T8325] [ 368.435431][ T8325] ERROR: Out of memory at tomoyo_realpath_from_path. [ 368.505641][ T5623] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 368.655628][ T5623] usb 3-1: Using ep0 maxpacket: 16 [ 368.657485][ T5623] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.657508][ T5623] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.668145][ T5623] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 368.668171][ T5623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.668189][ T5623] usb 3-1: Product: syz [ 368.668201][ T5623] usb 3-1: Manufacturer: syz [ 368.668213][ T5623] usb 3-1: SerialNumber: syz [ 368.740288][ T5623] usb 3-1: 0:2 : does not exist [ 368.749217][ T5772] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 368.931638][ T5772] usb 4-1: config 43 interface 0 has no altsetting 0 [ 368.951981][ T5623] usb 3-1: USB disconnect, device number 17 [ 368.955155][ T5772] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=db.82 [ 368.955189][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.955205][ T5772] usb 4-1: Product: syz [ 368.955216][ T5772] usb 4-1: Manufacturer: syz [ 368.955228][ T5772] usb 4-1: SerialNumber: syz [ 369.314556][ T5772] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state [ 369.314817][ T5772] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 369.314891][ T5772] dvb_usb_anysee 4-1:43.0: probe with driver dvb_usb_anysee failed with error -22 [ 369.348527][ T5772] usb 4-1: USB disconnect, device number 17 [ 371.895689][ T5760] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 372.046700][ T5760] usb 3-1: Using ep0 maxpacket: 16 [ 372.051005][ T5760] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 372.051022][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.051032][ T5760] usb 3-1: Product: syz [ 372.051039][ T5760] usb 3-1: Manufacturer: syz [ 372.051046][ T5760] usb 3-1: SerialNumber: syz [ 372.070517][ T5760] usb 3-1: config 0 descriptor?? [ 372.131341][ T5760] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 372.182488][ T8358] FAULT_INJECTION: forcing a failure. [ 372.182488][ T8358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.182519][ T8358] CPU: 1 UID: 0 PID: 8358 Comm: syz.3.743 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 372.182534][ T8358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 372.182540][ T8358] Call Trace: [ 372.182555][ T8358] [ 372.182559][ T8358] dump_stack_lvl+0xe8/0x150 [ 372.182577][ T8358] should_fail_ex+0x46b/0x600 [ 372.182594][ T8358] _copy_from_iter+0x3b0/0x1670 [ 372.182614][ T8358] ? __pfx__copy_from_iter+0x10/0x10 [ 372.182628][ T8358] ? __lock_acquire+0x6b5/0x2cf0 [ 372.182647][ T8358] tun_get_user+0x264/0x4400 [ 372.182667][ T8358] ? unwind_next_frame+0xa6/0x2550 [ 372.182680][ T8358] ? is_bpf_text_address+0x26/0x2b0 [ 372.182696][ T8358] ? __pfx_tun_get_user+0x10/0x10 [ 372.182710][ T8358] ? __lock_acquire+0x6b5/0x2cf0 [ 372.182725][ T8358] ? __lock_acquire+0x6b5/0x2cf0 [ 372.182739][ T8358] ? ref_tracker_alloc+0x332/0x4a0 [ 372.182755][ T8358] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 372.182776][ T8358] ? tun_get+0x1c/0x2f0 [ 372.182798][ T8358] ? tun_get+0x1c/0x2f0 [ 372.182814][ T8358] ? tun_get+0x1c/0x2f0 [ 372.182827][ T8358] ? tun_get+0x1c/0x2f0 [ 372.182842][ T8358] tun_chr_write_iter+0x119/0x200 [ 372.182858][ T8358] do_iter_readv_writev+0x62b/0x8d0 [ 372.182872][ T8358] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 372.182888][ T8358] ? rw_verify_area+0x25b/0x4e0 [ 372.182901][ T8358] vfs_writev+0x345/0x9a0 [ 372.182918][ T8358] ? __pfx_vfs_writev+0x10/0x10 [ 372.182938][ T8358] ? __fget_files+0x2a/0x420 [ 372.182949][ T8358] ? __fget_files+0x3a6/0x420 [ 372.182957][ T8358] ? __fget_files+0x2a/0x420 [ 372.182970][ T8358] do_writev+0x15a/0x2e0 [ 372.182982][ T8358] ? preempt_schedule_thunk+0x16/0x30 [ 372.182996][ T8358] ? __pfx_do_writev+0x10/0x10 [ 372.183014][ T8358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.183024][ T8358] do_syscall_64+0x174/0x580 [ 372.183039][ T8358] ? clear_bhb_loop+0x40/0x90 [ 372.183053][ T8358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.183063][ T8358] RIP: 0033:0x7fe7f6b3ce59 [ 372.183073][ T8358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.183081][ T8358] RSP: 002b:00007fe7f4d4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 372.183092][ T8358] RAX: ffffffffffffffda RBX: 00007fe7f6db6180 RCX: 00007fe7f6b3ce59 [ 372.183099][ T8358] RDX: 0000000000000003 RSI: 00002000000004c0 RDI: 0000000000000003 [ 372.183105][ T8358] RBP: 00007fe7f4d4c090 R08: 0000000000000000 R09: 0000000000000000 [ 372.183111][ T8358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.183116][ T8358] R13: 00007fe7f6db6218 R14: 00007fe7f6db6180 R15: 00007ffcdaa11dd8 [ 372.183131][ T8358] [ 373.309440][ T5760] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 373.323278][ T5760] usb 3-1: USB disconnect, device number 18 [ 373.705677][ T31] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 373.855717][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 373.859120][ T31] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 373.859136][ T31] usb 4-1: config 0 has no interface number 0 [ 373.859162][ T31] usb 4-1: config 0 interface 12 has no altsetting 0 [ 373.863806][ T31] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 373.863823][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.863833][ T31] usb 4-1: Product: syz [ 373.863839][ T31] usb 4-1: Manufacturer: syz [ 373.863846][ T31] usb 4-1: SerialNumber: syz [ 373.886667][ T31] usb 4-1: config 0 descriptor?? [ 374.405718][ T5753] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 374.535949][ T5753] usb 5-1: device descriptor read/64, error -71 [ 374.555938][ T5730] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 374.634390][ T8372] loop3: detected capacity change from 0 to 7 [ 374.735824][ T5730] usb 6-1: Using ep0 maxpacket: 32 [ 374.745890][ T5730] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 374.749623][ T5730] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 374.750502][ T5730] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 374.750524][ T5730] usb 6-1: config 1 has no interface number 0 [ 374.750573][ T5730] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 374.750597][ T5730] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 374.750637][ T5730] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 374.750657][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.795159][ T5753] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 374.797392][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.752'. [ 375.025819][ T5753] usb 5-1: device descriptor read/64, error -71 [ 375.058909][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 375.137425][ T5753] usb usb5-port1: attempt power cycle [ 375.558768][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 375.974493][ T5730] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 376.088907][ T5753] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 376.125621][ T8372] Dev loop3: unable to read RDB block 7 [ 376.125655][ T8372] loop3: AHDI p3 p4 [ 376.125684][ T8372] loop3: partition table partially beyond EOD, truncated [ 376.127638][ T5753] usb 5-1: device descriptor read/8, error -71 [ 376.338759][ T8395] FAULT_INJECTION: forcing a failure. [ 376.338759][ T8395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.338814][ T8395] CPU: 1 UID: 0 PID: 8395 Comm: syz.1.753 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.338836][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 376.338847][ T8395] Call Trace: [ 376.338855][ T8395] [ 376.338863][ T8395] dump_stack_lvl+0xe8/0x150 [ 376.338890][ T8395] should_fail_ex+0x46b/0x600 [ 376.338920][ T8395] _copy_from_user+0x2d/0xb0 [ 376.338946][ T8395] do_tcp_setsockopt+0x4f3/0x2060 [ 376.338975][ T8395] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 376.339006][ T8395] ? __fget_files+0x2a/0x420 [ 376.339027][ T8395] ? sock_common_setsockopt+0x36/0xc0 [ 376.339048][ T8395] ? tcp_setsockopt+0x3d/0xe0 [ 376.339067][ T8395] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 376.339091][ T8395] do_sock_setsockopt+0x17c/0x1b0 [ 376.339120][ T8395] __x64_sys_setsockopt+0x143/0x1b0 [ 376.339147][ T8395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.339167][ T8395] do_syscall_64+0x174/0x580 [ 376.339194][ T8395] ? clear_bhb_loop+0x40/0x90 [ 376.339216][ T8395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.339234][ T8395] RIP: 0033:0x7fd7a5b0ce59 [ 376.339252][ T8395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.339267][ T8395] RSP: 002b:00007fd7a3d1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 376.339287][ T8395] RAX: ffffffffffffffda RBX: 00007fd7a5d86180 RCX: 00007fd7a5b0ce59 [ 376.339301][ T8395] RDX: 2000000000000022 RSI: 0000000000000006 RDI: 0000000000000004 [ 376.339312][ T8395] RBP: 00007fd7a3d1c090 R08: 0000000000000004 R09: 0000000000000000 [ 376.339324][ T8395] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 376.339335][ T8395] R13: 00007fd7a5d86218 R14: 00007fd7a5d86180 R15: 00007fff11dac1b8 [ 376.339365][ T8395] [ 376.592651][ T8372] loop3: p3 start 1702000233 is beyond EOD, truncated [ 376.685678][ T5753] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 376.967781][ T5730] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 376.996790][ T5753] usb 5-1: device descriptor read/8, error -71 [ 377.106906][ T5753] usb usb5-port1: unable to enumerate USB device [ 377.441001][ T31] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 377.441053][ T31] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 377.441069][ T31] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 377.441153][ T31] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 377.486609][ T31] usb 4-1: USB disconnect, device number 18 [ 377.650431][ T5730] usb 6-1: USB disconnect, device number 9 [ 377.652177][ T5730] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 378.893762][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.289922][ T8418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.555648][ T5730] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 381.708224][ T5730] usb 4-1: Using ep0 maxpacket: 16 [ 381.713774][ T5730] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 381.713802][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.713820][ T5730] usb 4-1: Product: syz [ 381.713833][ T5730] usb 4-1: Manufacturer: syz [ 381.713845][ T5730] usb 4-1: SerialNumber: syz [ 381.777314][ T5730] usb 4-1: config 0 descriptor?? [ 381.796567][ T5730] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 382.396842][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'. [ 383.260226][ T5730] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 383.384504][ T8441] FAULT_INJECTION: forcing a failure. [ 383.384504][ T8441] name failslab, interval 1, probability 0, space 0, times 0 [ 383.384568][ T8441] CPU: 0 UID: 0 PID: 8441 Comm: syz.5.767 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 383.384589][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 383.384600][ T8441] Call Trace: [ 383.384607][ T8441] [ 383.384615][ T8441] dump_stack_lvl+0xe8/0x150 [ 383.384642][ T8441] should_fail_ex+0x46b/0x600 [ 383.384671][ T8441] should_failslab+0xa8/0x100 [ 383.384694][ T8441] __kmalloc_noprof+0xdf/0x7b0 [ 383.384714][ T8441] ? kfree+0x4d/0x6c0 [ 383.384730][ T8441] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 383.384757][ T8441] tomoyo_realpath_from_path+0xe3/0x5d0 [ 383.384779][ T8441] ? tomoyo_domain+0xd7/0x130 [ 383.384804][ T8441] ? tomoyo_path_number_perm+0x219/0x630 [ 383.384830][ T8441] tomoyo_path_number_perm+0x246/0x630 [ 383.384857][ T8441] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 383.384890][ T8441] ? preempt_schedule_thunk+0x16/0x30 [ 383.384958][ T8441] security_file_ioctl+0xc3/0x2a0 [ 383.384987][ T8441] __se_sys_ioctl+0x47/0x170 [ 383.385008][ T8441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.385028][ T8441] do_syscall_64+0x174/0x580 [ 383.385054][ T8441] ? clear_bhb_loop+0x40/0x90 [ 383.385075][ T8441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.385093][ T8441] RIP: 0033:0x7f30d987ce59 [ 383.385110][ T8441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.385125][ T8441] RSP: 002b:00007f30d7a8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.385145][ T8441] RAX: ffffffffffffffda RBX: 00007f30d9af6180 RCX: 00007f30d987ce59 [ 383.385158][ T8441] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000007 [ 383.385170][ T8441] RBP: 00007f30d7a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 383.385181][ T8441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.385191][ T8441] R13: 00007f30d9af6218 R14: 00007f30d9af6180 R15: 00007fffac239cc8 [ 383.385222][ T8441] [ 383.385252][ T8441] ERROR: Out of memory at tomoyo_realpath_from_path. [ 384.080466][ T5730] usb 4-1: USB disconnect, device number 19 [ 384.466061][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'. [ 385.825742][ T5753] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 385.925701][ T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 385.984196][ T5753] usb 6-1: config 0 has an invalid interface number: 33 but max is 0 [ 385.984224][ T5753] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.984241][ T5753] usb 6-1: config 0 has no interface number 0 [ 385.984293][ T5753] usb 6-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 385.984315][ T5753] usb 6-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.017799][ T5753] usb 6-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 386.017829][ T5753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.017846][ T5753] usb 6-1: Product: syz [ 386.017859][ T5753] usb 6-1: Manufacturer: syz [ 386.017871][ T5753] usb 6-1: SerialNumber: syz [ 386.069202][ T5753] usb 6-1: config 0 descriptor?? [ 386.070158][ T8449] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 386.081231][ T5753] hdpvr 6-1:0.33: Could not find bulk-in endpoint [ 386.081319][ T5753] hdpvr 6-1:0.33: probe with driver hdpvr failed with error -12 [ 387.266927][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 387.285988][ T31] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 387.286005][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.286015][ T31] usb 5-1: Product: syz [ 387.286021][ T31] usb 5-1: Manufacturer: syz [ 387.286028][ T31] usb 5-1: SerialNumber: syz [ 387.324386][ T8461] FAULT_INJECTION: forcing a failure. [ 387.324386][ T8461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.324416][ T8461] CPU: 0 UID: 0 PID: 8461 Comm: syz.5.771 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 387.324436][ T8461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 387.324447][ T8461] Call Trace: [ 387.324453][ T8461] [ 387.324461][ T8461] dump_stack_lvl+0xe8/0x150 [ 387.324486][ T8461] should_fail_ex+0x46b/0x600 [ 387.324515][ T8461] _copy_to_user+0x31/0xb0 [ 387.324534][ T8461] simple_read_from_buffer+0xe1/0x170 [ 387.324564][ T8461] proc_fail_nth_read+0x1be/0x230 [ 387.324585][ T8461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.324605][ T8461] ? rw_verify_area+0x2ac/0x4e0 [ 387.324624][ T8461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.324643][ T8461] vfs_read+0x212/0xa80 [ 387.324670][ T8461] ? __pfx_vfs_read+0x10/0x10 [ 387.324692][ T8461] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 387.324717][ T8461] ? lockdep_hardirqs_on+0x7a/0x110 [ 387.324741][ T8461] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 387.324764][ T8461] ? mutex_lock_nested+0x152/0x1d0 [ 387.324782][ T8461] ? fdget_pos+0x252/0x320 [ 387.324806][ T8461] ksys_read+0x156/0x270 [ 387.324828][ T8461] ? __pfx_ksys_read+0x10/0x10 [ 387.324861][ T8461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.324880][ T8461] do_syscall_64+0x174/0x580 [ 387.324903][ T8461] ? trace_irq_disable+0x3b/0x140 [ 387.324922][ T8461] ? clear_bhb_loop+0x40/0x90 [ 387.324943][ T8461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.324960][ T8461] RIP: 0033:0x7f30d983d68e [ 387.324976][ T8461] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 387.324990][ T8461] RSP: 002b:00007f30d7aacfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 387.325009][ T8461] RAX: ffffffffffffffda RBX: 00007f30d7aad6c0 RCX: 00007f30d983d68e [ 387.325021][ T8461] RDX: 000000000000000f RSI: 00007f30d7aad0a0 RDI: 0000000000000006 [ 387.325032][ T8461] RBP: 00007f30d7aad090 R08: 0000000000000000 R09: 0000000000000000 [ 387.325042][ T8461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.325053][ T8461] R13: 00007f30d9af6128 R14: 00007f30d9af6090 R15: 00007fffac239cc8 [ 387.325081][ T8461] [ 387.611680][ T31] usb 5-1: config 0 descriptor?? [ 387.646738][ T31] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 388.060806][ T5753] usb 6-1: USB disconnect, device number 10 [ 389.041916][ T31] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 389.437491][ T9] usb 5-1: USB disconnect, device number 16 [ 390.055679][ T36] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 390.218736][ T37] kauditd_printk_skb: 35 callbacks suppressed [ 390.218761][ T37] audit: type=1326 audit(1780971776.188:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8487 comm="syz.2.775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 390.218924][ T37] audit: type=1326 audit(1780971776.188:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8487 comm="syz.2.775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 390.219509][ T37] audit: type=1326 audit(1780971776.188:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8487 comm="syz.2.775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 390.219632][ T37] audit: type=1326 audit(1780971776.188:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8487 comm="syz.2.775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 390.220083][ T37] audit: type=1326 audit(1780971776.188:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8487 comm="syz.2.775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 390.220213][ T37] audit: type=1326 audit(1780971776.188:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8487 comm="syz.2.775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 390.221781][ T37] audit: type=1326 audit(1780971776.188:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8487 comm="syz.2.775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 390.222133][ T37] audit: type=1326 audit(1780971776.188:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8487 comm="syz.2.775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 390.222264][ T37] audit: type=1326 audit(1780971776.188:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8487 comm="syz.2.775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 390.222493][ T37] audit: type=1326 audit(1780971776.188:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8487 comm="syz.2.775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d7f9ce59 code=0x7ffc0000 [ 390.278055][ T36] usb 4-1: config 0 has an invalid interface number: 33 but max is 0 [ 390.278080][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.278096][ T36] usb 4-1: config 0 has no interface number 0 [ 390.278138][ T36] usb 4-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 390.278159][ T36] usb 4-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 390.376375][ T8488] syz.2.775 (8488): attempted to duplicate a private mapping with mremap. This is not supported. [ 390.395883][ T36] usb 4-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 390.395911][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.395929][ T36] usb 4-1: Product: syz [ 390.395941][ T36] usb 4-1: Manufacturer: syz [ 390.395954][ T36] usb 4-1: SerialNumber: syz [ 390.597223][ T36] usb 4-1: config 0 descriptor?? [ 390.598266][ T8481] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 390.604020][ T36] hdpvr 4-1:0.33: Could not find bulk-in endpoint [ 390.604103][ T36] hdpvr 4-1:0.33: probe with driver hdpvr failed with error -12 [ 390.847777][ T8481] FAULT_INJECTION: forcing a failure. [ 390.847777][ T8481] name failslab, interval 1, probability 0, space 0, times 0 [ 390.847809][ T8481] CPU: 0 UID: 0 PID: 8481 Comm: syz.3.780 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 390.847830][ T8481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 390.847840][ T8481] Call Trace: [ 390.847847][ T8481] [ 390.847855][ T8481] dump_stack_lvl+0xe8/0x150 [ 390.847880][ T8481] should_fail_ex+0x46b/0x600 [ 390.847910][ T8481] should_failslab+0xa8/0x100 [ 390.847934][ T8481] __kmalloc_noprof+0xdf/0x7b0 [ 390.847952][ T8481] ? kfree+0x4d/0x6c0 [ 390.847969][ T8481] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 390.847995][ T8481] tomoyo_realpath_from_path+0xe3/0x5d0 [ 390.848016][ T8481] ? tomoyo_domain+0xd7/0x130 [ 390.848042][ T8481] ? tomoyo_path_number_perm+0x219/0x630 [ 390.848067][ T8481] tomoyo_path_number_perm+0x246/0x630 [ 390.848099][ T8481] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 390.848121][ T8481] ? __lock_acquire+0x6b5/0x2cf0 [ 390.848145][ T8481] ? do_raw_spin_lock+0x12b/0x2f0 [ 390.848192][ T8481] ? __fget_files+0x2a/0x420 [ 390.848212][ T8481] ? __fget_files+0x2a/0x420 [ 390.848227][ T8481] ? __fget_files+0x3a6/0x420 [ 390.848242][ T8481] ? __fget_files+0x2a/0x420 [ 390.848263][ T8481] security_file_ioctl+0xc3/0x2a0 [ 390.848290][ T8481] __se_sys_ioctl+0x47/0x170 [ 390.848309][ T8481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.848328][ T8481] do_syscall_64+0x174/0x580 [ 390.848350][ T8481] ? trace_irq_disable+0x3b/0x140 [ 390.848371][ T8481] ? clear_bhb_loop+0x40/0x90 [ 390.848392][ T8481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.848410][ T8481] RIP: 0033:0x7fe7f6b3ce59 [ 390.848426][ T8481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.848444][ T8481] RSP: 002b:00007fe7f4d8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.848463][ T8481] RAX: ffffffffffffffda RBX: 00007fe7f6db5fa0 RCX: 00007fe7f6b3ce59 [ 390.848476][ T8481] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 390.848487][ T8481] RBP: 00007fe7f4d8e090 R08: 0000000000000000 R09: 0000000000000000 [ 390.848498][ T8481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.848508][ T8481] R13: 00007fe7f6db6038 R14: 00007fe7f6db5fa0 R15: 00007ffcdaa11dd8 [ 390.848537][ T8481] [ 390.849047][ T8481] ERROR: Out of memory at tomoyo_realpath_from_path. [ 390.908158][ T8497] FAULT_INJECTION: forcing a failure. [ 390.908158][ T8497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.908189][ T8497] CPU: 0 UID: 0 PID: 8497 Comm: syz.1.785 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 390.908208][ T8497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 390.908219][ T8497] Call Trace: [ 390.908226][ T8497] [ 390.908232][ T8497] dump_stack_lvl+0xe8/0x150 [ 390.908258][ T8497] should_fail_ex+0x46b/0x600 [ 390.908285][ T8497] _copy_from_user+0x2d/0xb0 [ 390.908304][ T8497] ___sys_sendmsg+0x1c6/0x360 [ 390.908327][ T8497] ? __lock_acquire+0x6b5/0x2cf0 [ 390.908353][ T8497] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.908407][ T8497] ? __fget_files+0x2a/0x420 [ 390.908423][ T8497] ? __fget_files+0x3a6/0x420 [ 390.908448][ T8497] __x64_sys_sendmsg+0x1c3/0x2a0 [ 390.908474][ T8497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.908506][ T8497] ? __pfx_ksys_write+0x10/0x10 [ 390.908532][ T8497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.908550][ T8497] do_syscall_64+0x174/0x580 [ 390.908574][ T8497] ? trace_irq_disable+0x3b/0x140 [ 390.908593][ T8497] ? clear_bhb_loop+0x40/0x90 [ 390.908614][ T8497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.908629][ T8497] RIP: 0033:0x7fd7a5b0ce59 [ 390.908645][ T8497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.908659][ T8497] RSP: 002b:00007fd7a3d5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.908677][ T8497] RAX: ffffffffffffffda RBX: 00007fd7a5d85fa0 RCX: 00007fd7a5b0ce59 [ 390.908689][ T8497] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 390.908699][ T8497] RBP: 00007fd7a3d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 390.908709][ T8497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.908718][ T8497] R13: 00007fd7a5d86038 R14: 00007fd7a5d85fa0 R15: 00007fff11dac1b8 [ 390.908745][ T8497] [ 391.048220][ T5753] usb 4-1: USB disconnect, device number 20 [ 391.375662][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 391.525667][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 391.532431][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 391.540634][ T9] usb 5-1: config 7 has an invalid interface number: 7 but max is 0 [ 391.540659][ T9] usb 5-1: config 7 has no interface number 0 [ 391.540701][ T9] usb 5-1: config 7 interface 7 altsetting 254 has a duplicate endpoint with address 0x5, skipping [ 391.540722][ T9] usb 5-1: config 7 interface 7 has no altsetting 0 [ 391.552656][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=817c, bcdDevice=5d.d8 [ 391.552684][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.552701][ T9] usb 5-1: Product: syz [ 391.552713][ T9] usb 5-1: Manufacturer: syz [ 391.552725][ T9] usb 5-1: SerialNumber: syz [ 391.858654][ T8502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.859341][ T8502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.897675][ T8502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.899093][ T8502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.939300][ T9] cp210x 5-1:7.7: cp210x converter detected [ 391.945279][ T9] cp210x 5-1:7.7: failed to get vendor val 0x370b size 1: -71 [ 391.945336][ T9] cp210x 5-1:7.7: querying part number failed [ 392.019257][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 392.043367][ T9] usb 5-1: USB disconnect, device number 17 [ 392.108670][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 392.109563][ T9] cp210x 5-1:7.7: device disconnected [ 392.161613][ T8527] FAULT_INJECTION: forcing a failure. [ 392.161613][ T8527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.161636][ T8527] CPU: 0 UID: 0 PID: 8527 Comm: syz.2.796 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 392.161647][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 392.161654][ T8527] Call Trace: [ 392.161658][ T8527] [ 392.161663][ T8527] dump_stack_lvl+0xe8/0x150 [ 392.161679][ T8527] should_fail_ex+0x46b/0x600 [ 392.161697][ T8527] _copy_to_user+0x31/0xb0 [ 392.161708][ T8527] simple_read_from_buffer+0xe1/0x170 [ 392.161726][ T8527] proc_fail_nth_read+0x1be/0x230 [ 392.161738][ T8527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.161749][ T8527] ? rw_verify_area+0x2ac/0x4e0 [ 392.161761][ T8527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.161771][ T8527] vfs_read+0x212/0xa80 [ 392.161786][ T8527] ? __pfx_vfs_read+0x10/0x10 [ 392.161798][ T8527] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 392.161813][ T8527] ? lockdep_hardirqs_on+0x7a/0x110 [ 392.161827][ T8527] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 392.161841][ T8527] ? mutex_lock_nested+0x152/0x1d0 [ 392.161854][ T8527] ? fdget_pos+0x252/0x320 [ 392.161878][ T8527] ksys_read+0x156/0x270 [ 392.161897][ T8527] ? __pfx_ksys_read+0x10/0x10 [ 392.161923][ T8527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.161942][ T8527] do_syscall_64+0x174/0x580 [ 392.161963][ T8527] ? trace_irq_disable+0x3b/0x140 [ 392.161983][ T8527] ? clear_bhb_loop+0x40/0x90 [ 392.162005][ T8527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.162018][ T8527] RIP: 0033:0x7fe1d7f5d68e [ 392.162028][ T8527] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 392.162036][ T8527] RSP: 002b:00007fe1d61ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 392.162048][ T8527] RAX: ffffffffffffffda RBX: 00007fe1d61cd6c0 RCX: 00007fe1d7f5d68e [ 392.162054][ T8527] RDX: 000000000000000f RSI: 00007fe1d61cd0a0 RDI: 0000000000000007 [ 392.162060][ T8527] RBP: 00007fe1d61cd090 R08: 0000000000000000 R09: 0000000000000000 [ 392.162066][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.162072][ T8527] R13: 00007fe1d8216128 R14: 00007fe1d8216090 R15: 00007ffce7088c28 [ 392.162087][ T8527] [ 392.505051][ T8532] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.221734][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.805'. [ 397.968820][ T8584] bridge_slave_0: left allmulticast mode [ 397.968840][ T8584] bridge_slave_0: left promiscuous mode [ 397.969215][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.289645][ T8584] bridge_slave_1: left allmulticast mode [ 398.289667][ T8584] bridge_slave_1: left promiscuous mode [ 398.289921][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.405647][ T5753] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 398.663943][ T5753] usb 5-1: Using ep0 maxpacket: 16 [ 398.667915][ T5753] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.667940][ T5753] usb 5-1: config 0 has no interfaces? [ 398.667969][ T5753] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 398.667988][ T5753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.575108][ T5753] usb 5-1: config 0 descriptor?? [ 399.717452][ T8584] bond0: (slave bond_slave_0): Releasing backup interface [ 399.783832][ T5753] usb 5-1: USB disconnect, device number 18 [ 399.810737][ T8584] bond0: (slave bond_slave_1): Releasing backup interface [ 399.913811][ T8584] team0: Port device team_slave_0 removed [ 399.967360][ T8584] team0: Port device team_slave_1 removed [ 399.967978][ T8584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.968000][ T8584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.995414][ T8584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.995441][ T8584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.031035][ T8584] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 400.118750][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'. [ 400.323254][ T8604] FAULT_INJECTION: forcing a failure. [ 400.323254][ T8604] name failslab, interval 1, probability 0, space 0, times 0 [ 400.323286][ T8604] CPU: 0 UID: 0 PID: 8604 Comm: syz.5.820 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 400.323307][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 400.323317][ T8604] Call Trace: [ 400.323324][ T8604] [ 400.323332][ T8604] dump_stack_lvl+0xe8/0x150 [ 400.323357][ T8604] should_fail_ex+0x46b/0x600 [ 400.323384][ T8604] should_failslab+0xa8/0x100 [ 400.323407][ T8604] kmem_cache_alloc_noprof+0x87/0x680 [ 400.323427][ T8604] ? do_getname+0x2e/0x250 [ 400.323449][ T8604] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 400.323478][ T8604] do_getname+0x2e/0x250 [ 400.323498][ T8604] ? user_path_at+0x1e/0x160 [ 400.323519][ T8604] user_path_at+0x2a/0x160 [ 400.323540][ T8604] __x64_sys_pivot_root+0x106/0x1d0 [ 400.323562][ T8604] ? __pfx___x64_sys_pivot_root+0x10/0x10 [ 400.323581][ T8604] ? __pfx_ksys_write+0x10/0x10 [ 400.323608][ T8604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.323628][ T8604] do_syscall_64+0x174/0x580 [ 400.323651][ T8604] ? trace_irq_disable+0x3b/0x140 [ 400.323672][ T8604] ? clear_bhb_loop+0x40/0x90 [ 400.323693][ T8604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.323711][ T8604] RIP: 0033:0x7f30d987ce59 [ 400.323734][ T8604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.323749][ T8604] RSP: 002b:00007f30d7ace028 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 400.323767][ T8604] RAX: ffffffffffffffda RBX: 00007f30d9af5fa0 RCX: 00007f30d987ce59 [ 400.323779][ T8604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 400.323790][ T8604] RBP: 00007f30d7ace090 R08: 0000000000000000 R09: 0000000000000000 [ 400.323801][ T8604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.323811][ T8604] R13: 00007f30d9af6038 R14: 00007f30d9af5fa0 R15: 00007fffac239cc8 [ 400.323840][ T8604] [ 401.885697][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 402.015693][ T9] usb 4-1: device descriptor read/64, error -71 [ 402.090100][ T1285] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.255889][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 402.385685][ T9] usb 4-1: device descriptor read/64, error -71 [ 402.403950][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'. [ 402.403974][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'. [ 402.405919][ T5753] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 402.473269][ T1285] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.496029][ T9] usb usb4-port1: attempt power cycle [ 402.555666][ T5753] usb 3-1: Using ep0 maxpacket: 8 [ 402.558915][ T5753] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 402.558942][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.614032][ T5753] pvrusb2: Hardware description: Terratec Grabster AV400 [ 402.614053][ T5753] pvrusb2: ********** [ 402.614059][ T5753] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 402.614070][ T5753] pvrusb2: Important functionality might not be entirely working. [ 402.614078][ T5753] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 402.614089][ T5753] pvrusb2: ********** [ 402.813526][ T2399] pvrusb2: Invalid write control endpoint [ 402.845671][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 402.869232][ T9] usb 4-1: device descriptor read/8, error -71 [ 403.064310][ T5753] ================================================================== [ 403.064326][ T5753] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 403.064356][ T5753] Read of size 8 at addr ffffc900046f1008 by task kworker/0:5/5753 [ 403.064374][ T5753] [ 403.064384][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 403.064403][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 403.064414][ T5753] Workqueue: usb_hub_wq hub_event [ 403.064438][ T5753] Call Trace: [ 403.064445][ T5753] [ 403.064451][ T5753] dump_stack_lvl+0xe8/0x150 [ 403.064471][ T5753] print_address_description+0x55/0x1e0 [ 403.064491][ T5753] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 403.064512][ T5753] print_report+0x58/0x70 [ 403.064528][ T5753] kasan_report+0x117/0x150 [ 403.064548][ T5753] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 403.064573][ T5753] __list_del_entry_valid_or_report+0xb5/0x190 [ 403.064596][ T5753] kcov_remote_start+0x2af/0x710 [ 403.064616][ T5753] hub_event+0x150/0x4f60 [ 403.064643][ T5753] ? __lock_acquire+0x6b5/0x2cf0 [ 403.064663][ T5753] ? look_up_lock_class+0x57/0x110 [ 403.064690][ T5753] ? __lock_acquire+0x6b5/0x2cf0 [ 403.064712][ T5753] ? trace_hrtimer_start+0x82/0x200 [ 403.064733][ T5753] ? lock_acquire+0x106/0x350 [ 403.064754][ T5753] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 403.064773][ T5753] ? __pfx_hub_event+0x10/0x10 [ 403.064795][ T5753] ? process_scheduled_works+0xa70/0x1860 [ 403.064816][ T5753] ? process_scheduled_works+0xa70/0x1860 [ 403.064833][ T5753] ? process_scheduled_works+0xa70/0x1860 [ 403.064851][ T5753] process_scheduled_works+0xb5d/0x1860 [ 403.064889][ T5753] ? __pfx_process_scheduled_works+0x10/0x10 [ 403.064909][ T5753] ? assign_work+0x3d5/0x5e0 [ 403.064928][ T5753] worker_thread+0xa53/0xfc0 [ 403.064957][ T5753] kthread+0x388/0x470 [ 403.064977][ T5753] ? __pfx_worker_thread+0x10/0x10 [ 403.064993][ T5753] ? __pfx_kthread+0x10/0x10 [ 403.065014][ T5753] ret_from_fork+0x514/0xb70 [ 403.065034][ T5753] ? __pfx_ret_from_fork+0x10/0x10 [ 403.065051][ T5753] ? __switch_to+0xc79/0x1410 [ 403.065075][ T5753] ? __pfx_kthread+0x10/0x10 [ 403.065096][ T5753] ret_from_fork_asm+0x1a/0x30 [ 403.065122][ T5753] [ 403.065129][ T5753] [ 403.065133][ T5753] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc900046f1000 allocated at kcov_ioctl+0x58/0x640 [ 403.065164][ T5753] Memory state around the buggy address: [ 403.065174][ T5753] ffffc900046f0f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 403.065186][ T5753] ffffc900046f0f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 403.065197][ T5753] >ffffc900046f1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 403.065206][ T5753] ^ [ 403.065215][ T5753] ffffc900046f1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 403.065225][ T5753] ffffc900046f1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 403.065234][ T5753] ================================================================== [ 403.065375][ T5753] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 403.065388][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 403.065408][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 403.065419][ T5753] Workqueue: usb_hub_wq hub_event [ 403.065442][ T5753] Call Trace: [ 403.065448][ T5753] [ 403.065455][ T5753] vpanic+0x56c/0xa60 [ 403.065475][ T5753] ? rcu_is_watching+0x15/0xb0 [ 403.065500][ T5753] ? __pfx_vpanic+0x10/0x10 [ 403.065521][ T5753] panic+0xc5/0xd0 [ 403.065538][ T5753] ? __pfx_panic+0x10/0x10 [ 403.065556][ T5753] ? preempt_schedule_thunk+0x16/0x30 [ 403.065581][ T5753] ? preempt_schedule_thunk+0x16/0x30 [ 403.065604][ T5753] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 403.065624][ T5753] check_panic_on_warn+0x89/0xb0 [ 403.065647][ T5753] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 403.065668][ T5753] end_report+0x73/0x170 [ 403.065687][ T5753] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 403.065708][ T5753] kasan_report+0x128/0x150 [ 403.065727][ T5753] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 403.065752][ T5753] __list_del_entry_valid_or_report+0xb5/0x190 [ 403.065774][ T5753] kcov_remote_start+0x2af/0x710 [ 403.065792][ T5753] hub_event+0x150/0x4f60 [ 403.065816][ T5753] ? __lock_acquire+0x6b5/0x2cf0 [ 403.065835][ T5753] ? look_up_lock_class+0x57/0x110 [ 403.065862][ T5753] ? __lock_acquire+0x6b5/0x2cf0 [ 403.065891][ T5753] ? trace_hrtimer_start+0x82/0x200 [ 403.065911][ T5753] ? lock_acquire+0x106/0x350 [ 403.065932][ T5753] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 403.065952][ T5753] ? __pfx_hub_event+0x10/0x10 [ 403.065974][ T5753] ? process_scheduled_works+0xa70/0x1860 [ 403.065994][ T5753] ? process_scheduled_works+0xa70/0x1860 [ 403.066011][ T5753] ? process_scheduled_works+0xa70/0x1860 [ 403.066029][ T5753] process_scheduled_works+0xb5d/0x1860 [ 403.066059][ T5753] ? __pfx_process_scheduled_works+0x10/0x10 [ 403.066080][ T5753] ? assign_work+0x3d5/0x5e0 [ 403.066098][ T5753] worker_thread+0xa53/0xfc0 [ 403.066127][ T5753] kthread+0x388/0x470 [ 403.066147][ T5753] ? __pfx_worker_thread+0x10/0x10 [ 403.066164][ T5753] ? __pfx_kthread+0x10/0x10 [ 403.066184][ T5753] ret_from_fork+0x514/0xb70 [ 403.066204][ T5753] ? __pfx_ret_from_fork+0x10/0x10 [ 403.066221][ T5753] ? __switch_to+0xc79/0x1410 [ 403.066245][ T5753] ? __pfx_kthread+0x10/0x10 [ 403.066265][ T5753] ret_from_fork_asm+0x1a/0x30 [ 403.066292][ T5753] [ 403.066570][ T5753] Kernel Offset: disabled