last executing test programs: 19m29.85275892s ago: executing program 1 (id=81): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) io_uring_enter(r0, 0x5253, 0x3fac, 0x30, &(0x7f0000000040)={[0x5]}, 0x8) r6 = timerfd_create(0x8, 0x0) timerfd_settime(r6, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r6, 0x2, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r7}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x33, 0x0, @fd, 0x3, 0x0, 0x0, 0x10, 0x1, {0x1, 0x0, 0x0, '\x00', 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r9 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) writev(r10, &(0x7f0000000080)=[{&(0x7f0000000000)="4673c875ca4d9c60679ed38f62fc1ef5e0d7c20bf64791a98a614276cb95185400000000d8643062", 0x28}, {&(0x7f00000003c0)="e146ba06000001000000008ab8560c3b60f606a1aef2c5483d4636ce35f90000000000193e585095d9f434e91fbafe4d6c226299667334c669a7e90bb56da5355e557632f240bf3f02b4f8c145effa6e92b91dba099a7dc098c952221a0ff21c3f2349d70ab757a0c0db763be3d330d1817aa33775cc0a2d79e5d230378ba7bd83e74b82b9d25e481691f88f01c43a4c3ee09dec04a91fd50897316dd476d32e064bff4a29608cf361512cf3ed0000000000000000000000000000005bd4ef249d238dafb0f59cd8bedc9090f8d11383c5461a189fd6214308f37a211d606104abf24f", 0xe3}], 0x2) write$UHID_INPUT(r10, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001800)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0xc, "fee8a2ab78fc5e3ee60080b8785d96000100", "131dfac11d875397bdb22d007ee886b309c80300000000000000000000000000000000000000000000000000000000000000000000ffffffff00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) io_uring_enter(r10, 0x46fe, 0x352f, 0x39, &(0x7f00000000c0)={[0x8]}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r11 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r12 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r12, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r13 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) preadv(r13, &(0x7f00000028c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1, 0x7, 0x4) ioprio_set$uid(0x3, 0x0, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 19m29.463050929s ago: executing program 1 (id=83): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x5, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x009'], 0x28}, 0x922bac8556bdadde) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000a00040e00000800090000a8000008000700a8000000080008"], 0x4c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) readv(r4, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/101, 0x65}, {0x0}], 0x2) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) readv(r5, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0x20000}, {0x0, 0xffb6}], 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) 19m27.938862537s ago: executing program 1 (id=86): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0xfc1, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$proc_mixer(0xffffffffffffffff, 0x0, 0x33) close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) close(0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84000000030703020000000000000000030000044c0007800800024000007fff08"], 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c0000"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002f00090025bd7000000000000400000008000c000200000008001f00", @ANYRES32=r0, @ANYBLOB="8c62911753cd6505ad21b13af93d38c5dc3e3d11d51e03590997556dbfb8f064b370a0c6"], 0x24}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 19m27.40206352s ago: executing program 1 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 19m26.96517441s ago: executing program 1 (id=92): r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="22c298da", 0x4, 0x240250d4, &(0x7f0000000300)={0x11, 0x8100, r2, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) 19m19.086365365s ago: executing program 1 (id=105): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x100, 0x6000, 0x4, 0x6, 0x3, 0x4c, 0x0, 0x0, 0x10}}, 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0x1, 0x23, 0x0, 0x1, 0x3}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x40}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) write(r3, &(0x7f0000000180)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3b46e8f0e809292ee0739b4f20800b179aa901b5d35", 0x31) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x2100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8bf30da716cd4f9d}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000003b40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003b80)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf250a000000380001800800030003000000140002006d6163766c616e31000000000000000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="14000200766c616e310000000000000000000000080001", @ANYRES32=0x0, @ANYBLOB="0800030001000000080001", @ANYRES32=0x0, @ANYBLOB="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"], 0x1958}, 0x1, 0x0, 0x0, 0x40}, 0x4004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f00"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x2, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0xd1}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x7, @pix={0xb78d0f0, 0x7, 0x47425247, 0x5, 0x6, 0x0, 0x5, 0x4, 0x0, 0x4, 0x2, 0x7}}) 19m18.116113214s ago: executing program 32 (id=105): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x100, 0x6000, 0x4, 0x6, 0x3, 0x4c, 0x0, 0x0, 0x10}}, 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0x1, 0x23, 0x0, 0x1, 0x3}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x40}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) write(r3, &(0x7f0000000180)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3b46e8f0e809292ee0739b4f20800b179aa901b5d35", 0x31) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x2100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8bf30da716cd4f9d}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000003b40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003b80)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf250a000000380001800800030003000000140002006d6163766c616e31000000000000000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="080003000100000080020280080002000500000033000400b5b6a33766ec2604a4b141cd5511ad82ca2e66fbf974072e1faac03eaac41f987b9a074ae3bf9dce348874b5cace7600740005005e03fb1064e1824d218cee1a4e887c3b0572410a20180ca7866ae4a0c57008140ac1ea04ea6676801b1c829835187aedf0292915663d586231419b8d0cec53db6f5c4470ad55859776dc0fe5ce581fcec961f593833cc880fb0ffae3f01f03f81cfacbe38e013101f98ab94aee9687a60800020006000000040001000400010034000400b6e32ec974295d9ac57e7dc8ef0fc3212cd898c4366f678f2b0e036d6dd991d6e997d1f87544be749fade0780e68e22c8401ef7f1000018004000300080001000d0000005800018008000100000000000e00020073797a6b616c6c6572000000040003000800020040255e00110002003830322e31352e34204d4143000000000e00020073797a6b616c6c65720000000a000200776c616e31000000400001800800010008000000040003000800020047504c000600020028000000070002003a2c00000800010000000000050002000000000008000100010000003400018c070002002e77000004003830322e31352e34204d414300000000040003000500020000000000040003001800018008000100040000000800010005000000040003005400018015000200295c4ba323283a242c2828e93a40232900000000070002005a230000080001000300000008000100e11ef4370800020047504c0005000200000000000e00020073797a6b616c6c657200000038000180080001000e000000060002003a0000000c0002006e6c3830323131000500020000000000040003000400030008000100060000000400010060000180140002006d616376746170300000000000000000140002006873723000000000000000000000000008000300020000001400020076657468305f746f5f6261746101760008000300000000000800030006000000080003000100000091000300b688fdae6dabe10e0f274e2e3545851b316ae7e7a3316a885f47cb435835998d94fbc3960e929f3cb46bba8a6fa5685ae3057b79df2de9a9d2aad3cb7928b78e0e114171041306d29007212ab238885487d1b46e8969d89c0ec165c4986bd681a10fdbf19953691acbc19fef192c5628cf93d8d92b904120eda1c8841b48d4768ec0aa77dff5b024d57cba0b620000006400030035e65be9dae2ce5b025cdb6ca18b260fdd52f9b1f568499d9e7ece293d73c9dbed09c6ac0e18559dd817ff66264e1c1ba6a2d5c824bddd4f9f33afc56f460dd481de6a8f8f447b960c3ec538b00b67770fdfcd8d64d38d381ce9f944fbebdf1b14000180080003000000000008000300030000004c000180140002007465616d30000000000000000000000008000100163ec01ce17da653c5454edceeeadcbb8bd85fe1f1aceca6cb9812f01418e0b2086a292ac31459dae82a651231610c639b503c021f25272d86b718575a11312b7dc1f1a7cbdd8def93471ce75a83753261fe8aed9b3f134136b16b658f165dc99401da1bcc32af2831edfb1e2ed4d1dbfdc41e72a72ce1ffed72f2e3f260ac7a7fdbe7cb64a3725f73f402ef2219e0bf37a7da6b55d3e20b210a32891996a71b7496e3bb69208ac05ac59a66024250390a261ecd4354cdf2b678e1b85ea977cde2f013ad69d6fd39fff171ffe5efe19c55dac2cf53b3f34b0d049a05c8a4505777c5e171573ceb538bdadb816c7267825ce0373afd04a5cf6909264e01ea13e4bce273d6e4a67d5d6e226958ef728deeddc8f1a0994a886b08f4", @ANYBLOB="14000200766c616e310000000000000000000000080001", @ANYRES32=0x0, @ANYBLOB="0800030001000000080001", @ANYRES32=0x0, @ANYBLOB="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"], 0x1958}, 0x1, 0x0, 0x0, 0x40}, 0x4004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f00"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x2, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0xd1}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x7, @pix={0xb78d0f0, 0x7, 0x47425247, 0x5, 0x6, 0x0, 0x5, 0x4, 0x0, 0x4, 0x2, 0x7}}) 6m24.252119394s ago: executing program 4 (id=2513): syz_usb_connect(0x2, 0x2d, &(0x7f0000000f80)={{0x12, 0x1, 0x110, 0x32, 0x75, 0x2, 0x20, 0x4da, 0x250d, 0x1d43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0x9, 0x40, 0x9, "", [{{0x9, 0x4, 0x3, 0x8, 0x0, 0xda, 0x6e, 0x3a}}, {{0x9, 0x4, 0x32, 0x6, 0x0, 0xff, 0x2, 0xa9}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xffff) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) syz_usb_connect(0x1, 0x77f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x50, 0x9, 0xbb, 0xff, 0x1e2d, 0x83, 0x8a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76d, 0x4, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x5e, 0x7, 0x3, 0xff, 0x33, 0x8f, 0x40, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x7, 0x5, 0xd}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe, 0x8, 0x2, 0x7, 0x5}]}, @generic={0x6b, 0xf, "41f94d6cfb3d2077f53cb4afc0c7cb380209bd8ae56bdb3cd47f74d804209ab8ae0fd50941f190c3477435168c9eb934cbd9a5f0dc63fdc04bf255d97a520e473534608f2fafac95e667b062c0eda66b99ea4bdbf7e42e8d915cce04face03294d80d7be9f74543cdf"}], [{{0x9, 0x5, 0xb, 0x0, 0x20, 0x2, 0x3, 0x4}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x7, 0x0, 0xad, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x7, 0x3, 0x4}}]}}, {{0x9, 0x4, 0xcd, 0x81, 0x1, 0x53, 0x7a, 0xc2, 0x8, [@generic={0x41, 0x22, "d3e85560feea04c92b9544ffc0d454487738e3b5fd60157abb14961d275fd3d8b55175785c1deea8fa242e73b5c93172a71379c038d4c3e535f98e1598fc2b"}, @cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x92d, 0xfffb, 0x7, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @obex={0x5, 0x24, 0x15, 0x6}, @acm={0x4, 0x24, 0x2, 0x6}, @dmm={0x7, 0x24, 0x14, 0x40, 0x48}, @mdlm={0x15, 0x24, 0x12, 0x6}, @acm={0x4, 0x24, 0x2, 0x1}]}], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x3, 0xb8, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0xed}]}}]}}, {{0x9, 0x4, 0x49, 0x2, 0x7, 0x9f, 0xb1, 0xb4, 0x93, [], [{{0x9, 0x5, 0x7, 0x0, 0x48, 0x2, 0x7c, 0x0, [@generic={0x87, 0x4, "f91043a871623b0a6ff30b50fd216323468a3ae7f6dedafb9cfd0b207025b60acdad7dfbf7a526a17521e65be3b4b5ea6487aeb70bdec5df8b740d7d3feba4ae8fdb54942891a797894a9206ff996e58147dd367059b7aa80f2702675e71370715b00cf06929e0ed94b56637ba0508118f977e457928f5f8ee8e57dca50d55b0712852d8d9"}, @generic={0x29, 0xf, "2366cd8234f2a1fd7aa52c2c3f7b8736ca612da5ff235ef76e4fa10e2828a4e634f05e5ef716ea"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x418, 0x0, 0x2, 0xa9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4}, @generic={0x24, 0xb, "3c07639bbb9c524fa259821dff1afb0f5febae99a488318f086cf4ff32d661504822"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x5, 0x2, 0x40, [@generic={0x34, 0xc, "b2f0f507bf8d04efd93e99f2bc3ddc880a675b4810a63cc97a347d80578f3e2c4e613b3727887d8e0c2ade1123051c076b30"}, @generic={0xc6, 0xd, "095f5def86032654083f3d1cb899accbd06976d6601782de4d4a82b75f09babcce2df887fc1b9c1da7eedf486647a1c174a96e97c104e8e041fc856864ae358b30d99b55d60edfb317f41b2b1dd82b00bd0a40f29a0717e77cef5bc931697efb8fc1da06103613db6c0434ec1bcc44d6ea726cd1d57d1b7a98bf0578c2f70341a195e169e46c331848ebc031691c784285482b76122b660f677d96b1d90d8b32c08cdb9e30056ed27fa6cf0ddcebea9d282202c547bf87d2ec78539f697bc2a9e80f36cd"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0xff, 0x8, 0xf, [@generic={0x51, 0x3, "6b563177b17012577bf38d4a4dbf86f141f436fa8903cf05b3992603634ee51e1811a43806da31cf3ee96494806540adeeccf70c2ed55c7701ff21f31e8277bba396353370bf5849d607afff82fb8f"}, @generic={0xb0, 0x1, "5497034d283ca2e64a0d1400e2f3afb326d189e32dea85c06ca48c546fb004baaca82cb04715140be2bcddfe240a7c7635ee06458bbd49a6ce32d9ec3e2a3c4539137bf9fd2101ae891d646fd9e1a5b5334c16ad48b85c2e26f3930223c3eab754eed2a0aa4acad98c7fa6a7910ead7e41565755e7ff22c46a5e884e995f354de017102eeef6182918b94768e8ed6044b5fcf0c1cdb50a6a489c1dea8ab19fc14658339af0ee31536a22466637ec"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x7b, 0x4, 0xd7}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x7, 0x2, 0x7}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0xa, 0xcf, 0xe, [@generic={0xe5, 0x9, "049d161c0e5ab30ab858a5d093669764cf35fd0e1115588d0a82f3c4fd895c26003b816e318309443325625e8d9a1ce7b8e0d9aa6ebceb22e2a96538851698218d009ee5b4d1d580e2de63fd33f18112a564127f518922248cfbcf504a51116b2d2480f4f74689dab792c6ba3456b10f268c9d6f5947668d69c36c27f8577a54937049a7bab2ec8d49688ed72e907c3f6b2a8ef5261fe15df5e6fdf62a79063962cc37e7ecbc6a5e000055afe91cfb54f26aadad58ce0d6e8f029a5638e6e379c8c58b46861d163f0c545e5b85aed4e36bb642478c5f1bd84e033156d9e2e9a91d46d4"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xc, 0x4}]}}]}}, {{0x9, 0x4, 0xf2, 0xc, 0x8, 0x2c, 0x60, 0xee, 0x6, [], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0xc, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x40}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x80, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x1, 0xad, 0x9, [@generic={0x8b, 0x9, "1254d519a302d35e5f8df24bb3693a59d244b87ecfb683bb35ace9af4b1618f59200552111dfc1413ccc2915521423e9be7c2afd4d838bd6bf5d14a9cbd9e12e90c38d62a0e8ee03af24f56eb2c704b5c1357dd9fd136c5d964b0436257d7715cd16bdd0ccfaf7437d20e98d586e79f3f6cc745abd071b4dddcaf48597c14b5b0f1e0f2675991b7a2d"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x68}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x7, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2d, 0x8}, @generic={0x42, 0x27, "555913a2acc19a0362294da96876d202d6b9c552fea6bc9da00fb0a6682bf6522b2b4492fa0db6f24d71904a82709bb1ebee51f2f3d1b81db56a5590b58ec812"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0xc, 0xa1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3e, 0x6}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x8001}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x4, 0x5, 0x3, [@generic={0xb3, 0x11, "bebf60098beb5dd21015ee60baa47ca845de2783a023af008eadfe51bda479b3e0db709fb961f7921019043d14b6051238959f2f8b748b61f629283212849a480f091c158985a0cde730df94253dff1e73176c01cfaf23c79676e694a2898446bb537d54960f4055a3cbe0936f2d5013e15286ef15cde6fc35264dd4f51a695ffe4c6aa3103222748d72138dc05392fcdbabf9d26ce20cb7b4706be12098361b7b46db2dabdf9fc93189e1441afb218bb5"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x7f, 0x0, 0x1}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x250, 0x7, 0x5, 0x3, 0x8, 0x8}, 0x148, &(0x7f0000000840)={0x5, 0xf, 0x148, 0x3, [@ptm_cap={0x3}, @generic={0xd1, 0x10, 0xb, "26fba861b9ef0ed49397983fd710638e6780895dc2a0bc6673a7ba1f9c5d63e44ce4d369e6d3f63fbd75af5cfbba8b742e8673429be5ea34c237e37b3c5c8508f427db0d705e8e1b996babda8d63b92434f93a2c1166268672a1b24c0efbf0b859fce529cde768e4aea16225f86b67bf3e74d40b432233801973abbe40efdc4d4973561bdcf454da14fec5c2a4f890de9c35e4839ed94baea28c3b285fd023e4cf9b775765b164503d94ed4d7c18f342948a27bcf6cda9cc785d32402375a53c44e9ee8b6b046f16a83ddb73fba5"}, @generic={0x6f, 0x10, 0x3, "75b9474d36456defc92dea85fa4b8fcd1c1eae52e0d9657113ce7da7764f4faa8c1f9d27a5630930cd34195559b767d03110e60a0e297dfdd66c132a39bd17be02476932c723b4637259b890b29be25ce8cb708fbd44a43d2b4b142b78f9a6e5f269572a777f0c1f8121ea15"}]}, 0xa, [{0x39, &(0x7f00000009c0)=@string={0x39, 0x3, "883f8b798b7db128d4d5bb4b3ac072706d1f5ac1a87460ee4a81cd2f467ac625d2dc44c37f30707e2a6d8aa67c60e34490a874ce080423"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x447}}, {0x73, &(0x7f0000000a40)=@string={0x73, 0x3, "a0579ee0b90dd62bb87017fd800994a21a993147bced67dd57fab6317933433930e289629b57b7af1e5549a4ba4c7fd15b0d51dafd4232fd6ed5f44d3dcdfaf52350bcd6aa7121dab7aa00a72f53dc5a9f9d9a9cb43834ff9de5ad0f7a14d1cbdfe81e2d29f7e0443fa41ed387c9ad3aad"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x427}}, {0xbc, &(0x7f0000000b80)=@string={0xbc, 0x3, "16f6d01a67f4183614c95d0c5c7e5c3dcc34109281cf393376c7c26517bb2244a9dbc7424bdba2be0ad18562a5e361a9d5a6de80a5f18b1911f84cb28ad829e5d87294fb2ac615f85a91bde776d7247c36743b49950607055e31d10b03c86ed3df90cf03e139cc8dfbe120e214bc62fed67079739fa1ba3f047089937851a2a4ebf1d98fafffe7aa71dcb323e8ae35b23828cfa61919753f7ca8fdea6bf1e6a2096960ddb8ebd4f6863fde7a1bf4549dd8ec3cb28868eee1f753"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x280a}}]}) 6m22.533768246s ago: executing program 4 (id=2520): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a3000000000090002007379"], 0xa4}}, 0x4) listen(0xffffffffffffffff, 0x5) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r9, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r9, r10, 0x0, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x1000, 0x1, 0x321, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) socket$kcm(0xa, 0x5, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) 6m18.172047411s ago: executing program 4 (id=2528): fremovexattr(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x77}, @l2cap_cid_signaling={{0x73}, [@l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x7, 0x1000}}, @l2cap_info_req={{0xa, 0xf, 0x2}, {0x1ff}}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x7, 0x23, 0x3}}, @l2cap_conf_rsp={{0x5, 0x3, 0x1c}, {0x5, 0x4, 0x4, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0x8, 0x5f1, 0x80, 0xfffffffb}}]}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0x0, 0xf, 0x0, 0x5}}, @l2cap_conf_req={{0x4, 0x91, 0x10}, {0x5, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x7, 0xe}}, @l2cap_disconn_rsp={{0x7, 0xf9, 0x4}, {0x1ff, 0xc00}}, @l2cap_info_req={{0xa, 0x8, 0x2}, {0x1000}}]}}, 0x7c) waitid(0x2, 0x0, &(0x7f00000000c0), 0x20000000, &(0x7f0000000140)) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x2, 0xc9, 0x2}}}, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000780)={@dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010102}) syz_emit_vhci(&(0x7f00000009c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x9, 0x4}, {0x6, 0x8}}}}, 0x11) mmap$IORING_OFF_SQES(0x0, 0x5, 0x8, 0x10010, 0xffffffffffffffff, 0x10000000) recvmmsg(0xffffffffffffffff, &(0x7f0000006640)=[{{&(0x7f0000000bc0)=@pppoe, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c40)=""/148, 0x94}], 0x1, &(0x7f0000000d40)=""/245, 0xf5}, 0xfff}, {{&(0x7f0000000e40)=@ll, 0x80, &(0x7f0000001040)=[{&(0x7f0000000ec0)=""/72, 0x48}, {&(0x7f0000000f40)=""/93, 0x5d}, {&(0x7f0000000fc0)=""/71, 0x47}], 0x3, &(0x7f0000001080)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/27, 0x1b}, {&(0x7f0000003140)=""/99, 0x63}, {&(0x7f00000031c0)=""/31, 0x1f}], 0x4}, 0x1}, {{&(0x7f0000003240)=@alg, 0x80, &(0x7f0000003300)=[{&(0x7f00000032c0)=""/16, 0x10}], 0x1}, 0x7f}, {{&(0x7f0000003340)=@tipc=@id, 0x80, &(0x7f0000003700)=[{&(0x7f00000033c0)=""/9, 0x9}, {&(0x7f0000003400)=""/18, 0x12}, {&(0x7f0000003440)=""/171, 0xab}, {&(0x7f0000003500)=""/230, 0xe6}, {&(0x7f0000003600)=""/218, 0xda}], 0x5}, 0x1}, {{&(0x7f0000003780)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000003900)=[{&(0x7f0000003800)=""/218, 0xda}], 0x1}, 0x3}, {{&(0x7f0000003940)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000003ac0)=[{&(0x7f00000039c0)=""/96, 0x60}, {&(0x7f0000003a40)=""/103, 0x67}], 0x2, &(0x7f0000003b00)=""/129, 0x81}, 0x10}, {{0x0, 0x0, &(0x7f0000005e80)=[{&(0x7f0000003bc0)=""/131, 0x83}, {&(0x7f0000003c80)=""/8, 0x8}, {&(0x7f0000003cc0)=""/119, 0x77}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/72, 0x48}, {&(0x7f0000004dc0)=""/55, 0x37}, {&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000005e00)=""/125, 0x7d}], 0x8, &(0x7f0000005f00)=""/49, 0x31}, 0x1}, {{&(0x7f0000005f40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000006500)=[{&(0x7f0000005fc0)=""/173, 0xad}, {&(0x7f0000006080)=""/175, 0xaf}, {&(0x7f0000006140)=""/220, 0xdc}, {&(0x7f0000006240)=""/222, 0xde}, {&(0x7f0000006340)=""/90, 0x5a}, {&(0x7f00000063c0)=""/19, 0x13}, {&(0x7f0000006400)=""/192, 0xc0}, {&(0x7f00000064c0)=""/5, 0x5}], 0x8, &(0x7f0000006580)=""/165, 0xa5}, 0x10001}], 0x9, 0x2000, 0x0) 6m17.882845998s ago: executing program 4 (id=2530): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@hyper, 0x2}) 6m17.825194153s ago: executing program 4 (id=2532): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)}, 0x4000000) 6m17.670647872s ago: executing program 4 (id=2533): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) r3 = socket(0x10, 0x2, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r4, r4) (async) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@sg0, r4, &(0x7f0000000040)) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0xd8, "d2a1313bd8618bf4f4b042bca142a378813abc1d4edd1bcc535164de7d984a2e91d57c938fe7f40fe303a3c9251110354eb328e5f6d0bcd9a9d4c896522d60b70b381c1b1af69a8a8c1b56261d989efc55185099586ccaf986d60c1e468777dc62ca8858daf6939c90955fa523ad382ac4890634a91f9bb37883ef117b0659e4380f2dfc306c21a52ee83b3fa04617bebe02261700912b64b95c1ba6246c63baf12c8b65c7f9d403d55d7ef2b0847a837de87dabb586c401bcb13bb84cae6e8a414f25da4f716e6cb10fe71099bd673ad107b61e8fd0a1da"}, &(0x7f0000000400)=0xe0) (async) r6 = getpid() syz_pidfd_open(r6, 0x0) (async) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x2000ca6, 0x0) (async) r7 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) (async) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000440)={0x95bc, 0x8200, 0xff, 0x3, r5}, &(0x7f0000000480)=0x10) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 6m3.298197999s ago: executing program 33 (id=2533): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) r3 = socket(0x10, 0x2, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r4, r4) (async) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@sg0, r4, &(0x7f0000000040)) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0xd8, "d2a1313bd8618bf4f4b042bca142a378813abc1d4edd1bcc535164de7d984a2e91d57c938fe7f40fe303a3c9251110354eb328e5f6d0bcd9a9d4c896522d60b70b381c1b1af69a8a8c1b56261d989efc55185099586ccaf986d60c1e468777dc62ca8858daf6939c90955fa523ad382ac4890634a91f9bb37883ef117b0659e4380f2dfc306c21a52ee83b3fa04617bebe02261700912b64b95c1ba6246c63baf12c8b65c7f9d403d55d7ef2b0847a837de87dabb586c401bcb13bb84cae6e8a414f25da4f716e6cb10fe71099bd673ad107b61e8fd0a1da"}, &(0x7f0000000400)=0xe0) (async) r6 = getpid() syz_pidfd_open(r6, 0x0) (async) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x2000ca6, 0x0) (async) r7 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) (async) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000440)={0x95bc, 0x8200, 0xff, 0x3, r5}, &(0x7f0000000480)=0x10) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 19.113571295s ago: executing program 0 (id=3759): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000"], 0xb8}}, 0x2c000010) 17.392132648s ago: executing program 0 (id=3761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x104) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) fadvise64(r1, 0x1, 0x6df2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002780), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000027c0)={0x14, r3, 0xf1f, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4080) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r6 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 14.413245388s ago: executing program 5 (id=3771): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000"], 0xb8}}, 0x2c000010) 12.437994319s ago: executing program 2 (id=3775): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x6, 0x2, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0x4}, {0xffe0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xae, 0xff}}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x468, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xf}, {0xfff3}, {0x0, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x43c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xf, 0x7, 0x0, 0xc7, 0x3, 0x1, 0x3, 0x3}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xcc}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bond\x00'}, @TCA_U32_SEL={0x3d4, 0x5, {0xc, 0x0, 0x0, 0xfe01, 0xf289, 0xb, 0x6, 0x0, [{0x9, 0x6, 0x6f99c296, 0x8000}, {0xfff00000, 0xb, 0x9, 0xffffffc0}, {0x3, 0x9, 0x2, 0x411}, {0x5, 0x6, 0x0, 0x3}, {0x18, 0x40000, 0x7b3603ea, 0x1}, {0x0, 0x10000, 0x8, 0x2}, {0x7fffffff, 0x7f, 0x4, 0x7fff}, {0x8, 0xfc, 0x3, 0x5}, {0x10, 0x5, 0x0, 0x2}, {0x10000, 0x6, 0x5, 0x62}, {0x4, 0x7fff, 0x6, 0x81}, {0x4210, 0x4}, {0x4, 0x651c090a, 0x6, 0x1}, {0x7, 0x2, 0x1f5, 0x6}, {0x1, 0x10001, 0x101, 0x9}, {0x1, 0x0, 0x9, 0x4}, {0xd, 0x405, 0x30001, 0x1}, {0x1, 0x7, 0x8001, 0x4}, {0x45ed, 0x101, 0x9c, 0x101}, {0x9, 0x3, 0x4cd7123c, 0x9}, {0x8f, 0xd, 0x4, 0x80000001}, {0x1, 0xc, 0x7fffffff, 0xe}, {0xff, 0x10000, 0x6, 0xffff}, {0xffff, 0x7, 0x7, 0x4}, {0x3, 0x5, 0x5, 0x7}, {0x48d, 0x4, 0x8, 0x2be}, {0x9, 0x10001, 0x5, 0x9}, {0x1, 0x3, 0x100, 0x1}, {0xffffffff, 0x0, 0x9, 0x1}, {0x6, 0x1d, 0xbdaa, 0x101}, {0xffffffff, 0xffb, 0x401, 0x7}, {0x8, 0x80000001, 0x8000}, {0x1, 0xfff, 0x31, 0xff}, {0x8, 0x4, 0x5}, {0x4, 0x0, 0x10000000, 0xfffffff7}, {0x4, 0x9, 0x6, 0x9}, {0x4882e4c5, 0x200, 0x8, 0x7fffffff}, {0x3, 0x1, 0x0, 0xffffffff}, {0x0, 0x7, 0x7f, 0xe}, {0xe, 0xfffffffa, 0x0, 0x3}, {0x0, 0x1, 0x5, 0x4}, {0x4, 0xfffffff9, 0x9, 0x100}, {0x3, 0x2, 0x1}, {0x1, 0x6, 0x0, 0xf}, {0x1, 0x1, 0x4, 0x4}, {0x5, 0x9, 0x7ff, 0x5}, {0x5, 0x6, 0xd, 0xbd4}, {0x8, 0x0, 0x42b, 0xfc}, {0x2, 0x0, 0x7ff, 0x8}, {0x3, 0x3e87, 0x3, 0x2}, {0x0, 0x0, 0x1, 0x8}, {0xffffff7f, 0x6, 0x6, 0x3}, {0x7ff, 0x7f, 0xf}, {0x0, 0x7fffffff, 0xfff, 0x2}, {0x2, 0x7a3, 0x0, 0x9}, {0x6, 0xfff, 0x80000000, 0x2c8}, {0x3, 0x10001, 0xd19a, 0xe}, {0x6, 0x7, 0x1da4}, {0x9, 0x49, 0x8, 0xfffffffd}, {0x931, 0x0, 0x8000000a}]}}, @TCA_U32_HASH={0x8, 0x2, 0x5}, @TCA_U32_MARK={0x10, 0xa, {0x102, 0x6}}, @TCA_U32_INDEV={0x14, 0x8, 'caif0\x00'}, @TCA_U32_LINK={0x8, 0x3, 0x10001}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) syz_io_uring_setup(0x8fa, &(0x7f0000000480)={0x0, 0xbc74, 0x80, 0x1, 0xc1, 0x0, r2}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r5, 0x1269, &(0x7f00000000c0)={0x1}) r6 = socket$inet(0x2, 0x3, 0x0) close_range(0xffffffffffffffff, r6, 0x2) 12.208130173s ago: executing program 3 (id=3776): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = io_uring_setup(0x2a69, &(0x7f0000002240)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0xa, 0xb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 11.984795652s ago: executing program 6 (id=3777): socket$netlink(0x10, 0x3, 0x8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 10.559933118s ago: executing program 5 (id=3778): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x1, 0x0, &(0x7f00000004c0)="f4"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f00000000c0)=[@dead_binder_done], 0x0, 0x0, 0x0}) 9.608901547s ago: executing program 2 (id=3779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsopen(&(0x7f0000000100)='ceph\x00', 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6(0x10, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000002b40)='/$!}\\\x00', 0x4) socket$l2tp(0x2, 0x2, 0x73) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="043e1d", @ANYRES16=r1], 0x22) 9.31410446s ago: executing program 5 (id=3780): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x7, 0x7fdf, 0x456e, 0x141, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0xfffffffd}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000090000010080000001000005d6"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xb, 0x7, 0x6, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r2 = fanotify_init(0x40, 0x40000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) preadv2(r3, 0x0, 0x0, 0x42, 0x837, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000080)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f00000000c0), &(0x7f0000000200)=""/166}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9}, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) 9.134010864s ago: executing program 0 (id=3781): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) stat(&(0x7f00000003c0)='./my_configfs/usb_gadget/g1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f0000000000)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00', &(0x7f0000000300), 0x80000, &(0x7f0000000640)={[{@favordynmods}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/seq\x00'}}, {@permit_directio}, {@audit}, {@uid_lt={'uid<', r1}}, {@uid_eq}, {@euid_gt={'euid>', r2}}, {@subj_role}, {@smackfsdef={'smackfsdef', 0x3d, 'configfs\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0xefc, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x0, 0x1}, 0x76e0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='dummy_udc.0', 0xb) 9.111383294s ago: executing program 6 (id=3782): syz_usb_connect(0x2, 0x2d, &(0x7f0000000f80)={{0x12, 0x1, 0x110, 0x32, 0x75, 0x2, 0x20, 0x4da, 0x250d, 0x1d43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0x9, 0x40, 0x9, "", [{{0x9, 0x4, 0x3, 0x8, 0x0, 0xda, 0x6e, 0x3a}}, {{0x9, 0x4, 0x32, 0x6, 0x0, 0xff, 0x2, 0xa9}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xffff) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) syz_usb_connect(0x1, 0x776, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x50, 0x9, 0xbb, 0xff, 0x1e2d, 0x83, 0x8a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x764, 0x4, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x5e, 0x7, 0x3, 0xff, 0x33, 0x8f, 0x40, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x7, 0x5, 0xd}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe, 0x8, 0x2, 0x7, 0x5}]}, @generic={0x6b, 0xf, "41f94d6cfb3d2077f53cb4afc0c7cb380209bd8ae56bdb3cd47f74d804209ab8ae0fd50941f190c3477435168c9eb934cbd9a5f0dc63fdc04bf255d97a520e473534608f2fafac95e667b062c0eda66b99ea4bdbf7e42e8d915cce04face03294d80d7be9f74543cdf"}], [{{0x9, 0x5, 0xb, 0x0, 0x20, 0x2, 0x3, 0x4}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x7, 0x0, 0xad, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x7, 0x3, 0x4}}]}}, {{0x9, 0x4, 0xcd, 0x81, 0x1, 0x53, 0x7a, 0xc2, 0x8, [@generic={0x41, 0x22, "d3e85560feea04c92b9544ffc0d454487738e3b5fd60157abb14961d275fd3d8b55175785c1deea8fa242e73b5c93172a71379c038d4c3e535f98e1598fc2b"}, @cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x92d, 0xfffb, 0x7, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @obex={0x5, 0x24, 0x15, 0x6}, @acm={0x4, 0x24, 0x2, 0x6}, @dmm={0x7, 0x24, 0x14, 0x40, 0x48}, @mdlm={0x15, 0x24, 0x12, 0x6}, @acm={0x4, 0x24, 0x2, 0x1}]}], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x3, 0xb8, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0xed}]}}]}}, {{0x9, 0x4, 0x49, 0x2, 0x7, 0x9f, 0xb1, 0xb4, 0x93, [], [{{0x9, 0x5, 0x7, 0x0, 0x48, 0x2, 0x7c, 0x0, [@generic={0x87, 0x4, "f91043a871623b0a6ff30b50fd216323468a3ae7f6dedafb9cfd0b207025b60acdad7dfbf7a526a17521e65be3b4b5ea6487aeb70bdec5df8b740d7d3feba4ae8fdb54942891a797894a9206ff996e58147dd367059b7aa80f2702675e71370715b00cf06929e0ed94b56637ba0508118f977e457928f5f8ee8e57dca50d55b0712852d8d9"}, @generic={0x29, 0xf, "2366cd8234f2a1fd7aa52c2c3f7b8736ca612da5ff235ef76e4fa10e2828a4e634f05e5ef716ea"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x418, 0x0, 0x2, 0xa9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4}, @generic={0x24, 0xb, "3c07639bbb9c524fa259821dff1afb0f5febae99a488318f086cf4ff32d661504822"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x5, 0x2, 0x40, [@generic={0x34, 0xc, "b2f0f507bf8d04efd93e99f2bc3ddc880a675b4810a63cc97a347d80578f3e2c4e613b3727887d8e0c2ade1123051c076b30"}, @generic={0xc6, 0xd, "095f5def86032654083f3d1cb899accbd06976d6601782de4d4a82b75f09babcce2df887fc1b9c1da7eedf486647a1c174a96e97c104e8e041fc856864ae358b30d99b55d60edfb317f41b2b1dd82b00bd0a40f29a0717e77cef5bc931697efb8fc1da06103613db6c0434ec1bcc44d6ea726cd1d57d1b7a98bf0578c2f70341a195e169e46c331848ebc031691c784285482b76122b660f677d96b1d90d8b32c08cdb9e30056ed27fa6cf0ddcebea9d282202c547bf87d2ec78539f697bc2a9e80f36cd"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0xff, 0x8, 0xf, [@generic={0x51, 0x3, "6b563177b17012577bf38d4a4dbf86f141f436fa8903cf05b3992603634ee51e1811a43806da31cf3ee96494806540adeeccf70c2ed55c7701ff21f31e8277bba396353370bf5849d607afff82fb8f"}, @generic={0xb0, 0x1, "5497034d283ca2e64a0d1400e2f3afb326d189e32dea85c06ca48c546fb004baaca82cb04715140be2bcddfe240a7c7635ee06458bbd49a6ce32d9ec3e2a3c4539137bf9fd2101ae891d646fd9e1a5b5334c16ad48b85c2e26f3930223c3eab754eed2a0aa4acad98c7fa6a7910ead7e41565755e7ff22c46a5e884e995f354de017102eeef6182918b94768e8ed6044b5fcf0c1cdb50a6a489c1dea8ab19fc14658339af0ee31536a22466637ec"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x7b, 0x4, 0xd7}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x7, 0x2, 0x7}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0xa, 0xcf, 0xe, [@generic={0xc9, 0x9, "049d161c0e5ab30ab858a5d093669764cf35fd0e1115588d0a82f3c4fd895c26003b816e318309443325625e8d9a1ce7b8e0d9aa6ebceb22e2a96538851698218d009ee5b4d1d580e2de63fd33f18112a564127f518922248cfbcf504a51116b2d2480f4f74689dab792c6ba3456b10f268c9d6f5947668d69c36c27f8577a54937049a7bab2ec8d49688ed72e907c3f6b2a8ef5261fe15df5e6fdf62a79063962cc37e7ecbc6a5e000055afe91cfb54f26aadad58ce0d6e8f029a5638e6e379c8c58b46861d16"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xc, 0x4}]}}]}}, {{0x9, 0x4, 0xf2, 0xc, 0x8, 0x2c, 0x60, 0xee, 0x6, [], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0xc, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x40}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x80, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x1, 0xad, 0x9, [@generic={0x9e, 0x9, "1254d519a302d35e5f8df24bb3693a59d244b87ecfb683bb35ace9af4b1618f59200552111dfc1413ccc2915521423e9be7c2afd4d838bd6bf5d14a9cbd9e12e90c38d62a0e8ee03af24f56eb2c704b5c1357dd9fd136c5d964b0436257d7715cd16bdd0ccfaf7437d20e98d586e79f3f6cc745abd071b4dddcaf48597c14b5b0f1e0f2675991b7a2d6714de109dbd3ec4bdbab934a3d1133c28e7d2"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x68}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x7, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2d, 0x8}, @generic={0x42, 0x27, "555913a2acc19a0362294da96876d202d6b9c552fea6bc9da00fb0a6682bf6522b2b4492fa0db6f24d71904a82709bb1ebee51f2f3d1b81db56a5590b58ec812"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0xc, 0xa1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3e, 0x6}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x8001}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x4, 0x5, 0x3, [@generic={0xb3, 0x11, "bebf60098beb5dd21015ee60baa47ca845de2783a023af008eadfe51bda479b3e0db709fb961f7921019043d14b6051238959f2f8b748b61f629283212849a480f091c158985a0cde730df94253dff1e73176c01cfaf23c79676e694a2898446bb537d54960f4055a3cbe0936f2d5013e15286ef15cde6fc35264dd4f51a695ffe4c6aa3103222748d72138dc05392fcdbabf9d26ce20cb7b4706be12098361b7b46db2dabdf9fc93189e1441afb218bb5"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x7f, 0x0, 0x1}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x250, 0x7, 0x5, 0x3, 0x8, 0x8}, 0x148, &(0x7f0000000840)={0x5, 0xf, 0x148, 0x3, [@ptm_cap={0x3}, @generic={0xd1, 0x10, 0xb, "26fba861b9ef0ed49397983fd710638e6780895dc2a0bc6673a7ba1f9c5d63e44ce4d369e6d3f63fbd75af5cfbba8b742e8673429be5ea34c237e37b3c5c8508f427db0d705e8e1b996babda8d63b92434f93a2c1166268672a1b24c0efbf0b859fce529cde768e4aea16225f86b67bf3e74d40b432233801973abbe40efdc4d4973561bdcf454da14fec5c2a4f890de9c35e4839ed94baea28c3b285fd023e4cf9b775765b164503d94ed4d7c18f342948a27bcf6cda9cc785d32402375a53c44e9ee8b6b046f16a83ddb73fba5"}, @generic={0x6f, 0x10, 0x3, "75b9474d36456defc92dea85fa4b8fcd1c1eae52e0d9657113ce7da7764f4faa8c1f9d27a5630930cd34195559b767d03110e60a0e297dfdd66c132a39bd17be02476932c723b4637259b890b29be25ce8cb708fbd44a43d2b4b142b78f9a6e5f269572a777f0c1f8121ea15"}]}, 0xa, [{0x39, &(0x7f00000009c0)=@string={0x39, 0x3, "883f8b798b7db128d4d5bb4b3ac072706d1f5ac1a87460ee4a81cd2f467ac625d2dc44c37f30707e2a6d8aa67c60e34490a874ce080423"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x447}}, {0x73, &(0x7f0000000a40)=@string={0x73, 0x3, "a0579ee0b90dd62bb87017fd800994a21a993147bced67dd57fab6317933433930e289629b57b7af1e5549a4ba4c7fd15b0d51dafd4232fd6ed5f44d3dcdfaf52350bcd6aa7121dab7aa00a72f53dc5a9f9d9a9cb43834ff9de5ad0f7a14d1cbdfe81e2d29f7e0443fa41ed387c9ad3aad"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x427}}, {0xbc, &(0x7f0000000b80)=@string={0xbc, 0x3, "16f6d01a67f4183614c95d0c5c7e5c3dcc34109281cf393376c7c26517bb2244a9dbc7424bdba2be0ad18562a5e361a9d5a6de80a5f18b1911f84cb28ad829e5d87294fb2ac615f85a91bde776d7247c36743b49950607055e31d10b03c86ed3df90cf03e139cc8dfbe120e214bc62fed67079739fa1ba3f047089937851a2a4ebf1d98fafffe7aa71dcb323e8ae35b23828cfa61919753f7ca8fdea6bf1e6a2096960ddb8ebd4f6863fde7a1bf4549dd8ec3cb28868eee1f753"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x280a}}]}) 8.654407996s ago: executing program 2 (id=3783): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) r2 = geteuid() stat(&(0x7f00000003c0)='./my_configfs/usb_gadget/g1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f0000000000)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00', &(0x7f0000000300), 0x80000, &(0x7f0000000640)={[{@favordynmods}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/seq\x00'}}, {@permit_directio}, {@audit}, {@uid_lt={'uid<', r1}}, {@uid_eq={'uid', 0x3d, r2}}, {@euid_gt={'euid>', r3}}, {@subj_role}, {@smackfsdef={'smackfsdef', 0x3d, 'configfs\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0xefc, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x0, 0x1}, 0x76e0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='dummy_udc.0', 0xb) 8.218334601s ago: executing program 5 (id=3784): syz_emit_ethernet(0x86, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x74, 0x65, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x16, 0x4, 0x0, 0x5, 0x0, 0x864, 0x0, 0x2, 0x11, 0x2, @multicast2, @local, {[@cipso={0x86, 0x6, 0x300}, @timestamp_addr={0x44, 0x3c, 0x78, 0x1, 0x0, [{@remote, 0xffff}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x40000}, {@rand_addr=0x64010102, 0xefc}, {@multicast2}, {@dev}, {@private=0xa010101, 0x1}]}]}}}}}}}, 0x0) 8.034046082s ago: executing program 0 (id=3785): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) 7.940939455s ago: executing program 2 (id=3786): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) unshare(0x24060400) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_usb_connect(0x2, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 7.644431993s ago: executing program 5 (id=3787): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x300, 0x0, 0x2, 0x0, 0x6, 0xf}, 0x20) (fail_nth: 2) 7.573615459s ago: executing program 0 (id=3788): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000"], 0xb8}}, 0x2c000010) 6.338394157s ago: executing program 0 (id=3789): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) io_uring_setup(0x2a69, &(0x7f0000002240)={0x0, 0x0, 0x2, 0x2}) shutdown(0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0xa, 0xb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 6.224710672s ago: executing program 6 (id=3790): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x1, 0x0, &(0x7f00000004c0)="f4"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f00000000c0)=[@dead_binder_done], 0x0, 0x0, 0x0}) 5.990905999s ago: executing program 3 (id=3791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x104) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) fadvise64(r1, 0x1, 0x6df2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002780), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000027c0)={0x14, r3, 0xf1f, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4080) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r6 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 5.894407028s ago: executing program 5 (id=3792): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000040)) 5.344753536s ago: executing program 3 (id=3794): socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005"], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.136226102s ago: executing program 3 (id=3795): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) stat(&(0x7f00000003c0)='./my_configfs/usb_gadget/g1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f0000000000)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00', &(0x7f0000000300), 0x80000, &(0x7f0000000640)={[{@favordynmods}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/seq\x00'}}, {@permit_directio}, {@audit}, {@uid_lt={'uid<', r1}}, {@uid_eq}, {@euid_gt={'euid>', r2}}, {@subj_role}, {@smackfsdef={'smackfsdef', 0x3d, 'configfs\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0xefc, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x0, 0x1}, 0x76e0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='dummy_udc.0', 0xb) 5.004477085s ago: executing program 6 (id=3796): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[], 0x0) (fail_nth: 2) 3.486274803s ago: executing program 2 (id=3797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0x5, 0x1}, {0x4d, 0x2}, @cond=[{0x9, 0x528c, 0xc, 0x800, 0xf535, 0xf4a}, {0x4000, 0x805, 0x1, 0x7, 0x0, 0xffff}]}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000001300)=""/115) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0xb) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) sendto$inet(r4, 0x0, 0x0, 0x404c0c6, 0x0, 0x0) 2.158456335s ago: executing program 2 (id=3798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0x5, 0x1}, {0x4d, 0x2}, @cond=[{0x9, 0x528c, 0xc, 0x800, 0xf535, 0xf4a}, {0x4000, 0x805, 0x1, 0x7, 0x0, 0xffff}]}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000001300)=""/115) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0xb) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) sendto$inet(r4, 0x0, 0x0, 0x404c0c6, 0x0, 0x0) 2.094900183s ago: executing program 3 (id=3799): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000"], 0xb8}}, 0x2c000010) 1.903409214s ago: executing program 6 (id=3800): write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x6, 0x7f, 0x5, 0x800, 0x4, 0x3, 0x44f, 0x8d16, 0xff}}, 0x43) read(0xffffffffffffffff, &(0x7f0000000080)=""/67, 0x43) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6be, 0x8}}, './file0\x00'}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x0, 0x9, 0xff, 0x5, 0x8, "826b62b0c94b8808f814a25ccb7876dffda272"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x33, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x4, 0x6, 0x0, 0x0, 0xffffffff}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x30b00000}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @jmp={0x5, 0x0, 0x1, 0x5, 0x0, 0x2}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @jmp={0x5, 0x0, 0x6, 0x7, 0xa, 0xffffffffffffffc0, 0x8}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @alu={0x4, 0x0, 0x0, 0x9, 0xd, 0xfffffffffffffff4, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x3, 0x5f, &(0x7f0000000440)=""/95, 0x41100, 0x40, '\x00', r2, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xe, 0x6, 0x10001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000580)=[r0, r0, r0, 0xffffffffffffffff, r0], &(0x7f00000005c0)=[{0x4, 0x4, 0x6, 0xc}], 0x10, 0x81}, 0x94) faccessat(r0, &(0x7f00000006c0)='./file0\x00', 0x194) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'veth0_vlan\x00', 0x0}) r5 = memfd_secret(0x80000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x3, 0x4, 0x0, 0x4044, r1, 0x0, '\x00', r4, r5, 0x5, 0x3, 0x1}, 0x50) ftruncate(r1, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f00000007c0)) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000800)={0x0, 0x76, 0x401, 0x9, 0x8, 0x0, 0x5}) ioctl$XFS_IOC_FSINUMBERS(r1, 0xc0205867, &(0x7f0000000980)={&(0x7f0000000840)=0x7, 0x3, &(0x7f0000000880)=[{}], &(0x7f0000000940)}) write$USERIO_CMD_REGISTER(r5, &(0x7f00000009c0), 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000a00)={0x101, 0x7d9f, 0xcf21, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000a40)={r7}) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a80), 0x101440, 0x0) bind$inet6(r8, &(0x7f0000000ac0)={0xa, 0x4e23, 0xb, @private2, 0xfffffffc}, 0x1c) ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f0000000b80)={0x5, 0x0, 0x3992, 0x0, 0x6, 0x5, 0x0, &(0x7f0000000b00)=[{0x1a, 0xfe, 0x3}, {0x18, 0x101, 0x7fffffff}, {0x9, 0x101, 0x84f}, {0xa, 0xfe, 0xfffffffa}, {0x13, 0x1ff, 0x2}]}) times(&(0x7f0000000bc0)) syz_open_dev$usbfs(&(0x7f0000000c00), 0x0, 0x24000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x17, 0x32, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xb6}, @map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @alu={0x4, 0x0, 0x2, 0x2, 0xa, 0x8, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', r2, @fallback, r0, 0x8, &(0x7f0000000e40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x2, 0x1, 0x1}, 0x10, 0xffffffffffffffff, r0, 0x2, 0x0, &(0x7f0000000ec0)=[{0x5, 0x4, 0xd, 0x4}, {0x5, 0x5, 0x4, 0x8}], 0x10, 0x4}, 0x94) dup3(r0, r9, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000001040)={0x9, &(0x7f0000000fc0)=[{0x4f4b, 0xc0, 0x5, 0x8000}, {0x0, 0x9, 0x8, 0x8000}, {0xfff5, 0x3, 0xf3, 0x10001}, {0x7, 0x7, 0xb, 0x10}, {0x2, 0x8, 0xa0, 0x9}, {0x2, 0x35, 0x8, 0x9}, {0x6, 0x5, 0x4, 0x4}, {0x4, 0x3, 0x4, 0x8}, {0xa, 0x0, 0x6, 0x80}]}, 0x10) syz_open_dev$audion(&(0x7f0000001080), 0x5, 0x40) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000001100)=0x26) 213.044461ms ago: executing program 3 (id=3801): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0xb3ff, 0x0, 0x0, "71a4b85f10d0554b"}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x6) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x7, 0x1, 0x0, 0x10000, 0x1b, "af00"}) syz_emit_ethernet(0x86, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x74, 0x65, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x16, 0x4, 0x0, 0x5, 0x0, 0x864, 0x0, 0x2, 0x11, 0x2, @multicast2, @local, {[@cipso={0x86, 0x6, 0x300}, @timestamp_addr={0x44, 0x3c, 0x78, 0x1, 0x0, [{@remote, 0xffff}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x40000}, {@rand_addr=0x64010102, 0xefc}, {@multicast2}, {@dev}, {@private=0xa010101, 0x1}]}]}}}}}}}, 0x0) 0s ago: executing program 6 (id=3802): syz_clone3(0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_flash={0x1e, 0x5, './file0\x00'}}) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) kernel console output (not intermixed with test programs): 00000246 ORIG_RAX: 0000000000000001 [ 1174.951208][T19070] RAX: ffffffffffffffda RBX: 00007f35f09e5fa0 RCX: 00007f35f075e0d9 [ 1174.951222][T19070] RDX: 0000000000000239 RSI: 0000200000000580 RDI: 0000000000000003 [ 1174.951235][T19070] RBP: 00007f35ee9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.951247][T19070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.951259][T19070] R13: 00007f35f09e6038 R14: 00007f35f09e5fa0 R15: 00007fff2b62c5b8 [ 1174.951289][T19070] [ 1175.219192][T14764] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1175.314135][ T37] audit: type=1800 audit(1786766997.758:4162): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1175.348796][T14764] usb 1-1: USB disconnect, device number 90 [ 1175.349774][ T37] audit: type=1800 audit(1786766997.800:4163): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=297261 res=0 errno=0 [ 1175.415155][ T37] audit: type=1800 audit(1786766997.863:4164): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1175.489018][ T37] audit: type=1800 audit(1786766997.947:4165): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=297262 res=0 errno=0 [ 1175.576086][T17533] udevd[17533]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1176.987487][T19098] : renamed from vlan0 (while UP) [ 1177.262680][T19104] FAULT_INJECTION: forcing a failure. [ 1177.262680][T19104] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.262715][T19104] CPU: 0 UID: 0 PID: 19104 Comm: syz.6.3465 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1177.262743][T19104] Tainted: [L]=SOFTLOCKUP [ 1177.262750][T19104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1177.262762][T19104] Call Trace: [ 1177.262770][T19104] [ 1177.262779][T19104] dump_stack_lvl+0xe8/0x150 [ 1177.262822][T19104] should_fail_ex+0x467/0x600 [ 1177.262857][T19104] should_failslab+0xa8/0x100 [ 1177.262882][T19104] __kvmalloc_node_noprof+0x17a/0x8a0 [ 1177.262907][T19104] ? io_rsrc_data_alloc+0x3b/0xb0 [ 1177.262926][T19104] ? io_rsrc_data_alloc+0x3b/0xb0 [ 1177.262954][T19104] io_rsrc_data_alloc+0x3b/0xb0 [ 1177.262975][T19104] io_alloc_file_tables+0x23/0xa0 [ 1177.263000][T19104] io_sqe_files_register+0x1ed/0x7d0 [ 1177.263018][T19104] ? __might_fault+0xaf/0x130 [ 1177.263040][T19104] ? __pfx_io_sqe_files_register+0x10/0x10 [ 1177.263070][T19104] io_register_rsrc+0x26e/0x280 [ 1177.263091][T19104] ? __pfx_io_register_rsrc+0x10/0x10 [ 1177.263112][T19104] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1177.263137][T19104] ? mutex_lock_nested+0x152/0x1d0 [ 1177.263165][T19104] ? __se_sys_io_uring_register+0x221/0x1a20 [ 1177.263191][T19104] __se_sys_io_uring_register+0x89a/0x1a20 [ 1177.263218][T19104] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1177.263241][T19104] ? ksys_write+0x248/0x270 [ 1177.263267][T19104] ? __pfx_ksys_write+0x10/0x10 [ 1177.263299][T19104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.263321][T19104] do_syscall_64+0x174/0x580 [ 1177.263344][T19104] ? trace_irq_disable+0x3b/0x140 [ 1177.263374][T19104] ? clear_bhb_loop+0x70/0xc0 [ 1177.263399][T19104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.263419][T19104] RIP: 0033:0x7f35f075e0d9 [ 1177.263437][T19104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.263454][T19104] RSP: 002b:00007f35ee9b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1177.263475][T19104] RAX: ffffffffffffffda RBX: 00007f35f09e5fa0 RCX: 00007f35f075e0d9 [ 1177.263490][T19104] RDX: 0000200000000140 RSI: 000000000000000d RDI: 0000000000000003 [ 1177.263503][T19104] RBP: 00007f35ee9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.263516][T19104] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 1177.263528][T19104] R13: 00007f35f09e6038 R14: 00007f35f09e5fa0 R15: 00007fff2b62c5b8 [ 1177.263566][T19104] [ 1177.559912][T19106] tipc: Enabling of bearer rejected, media not registered [ 1177.699948][T19100] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1177.714090][T19112] FAULT_INJECTION: forcing a failure. [ 1177.714090][T19112] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.714124][T19112] CPU: 1 UID: 0 PID: 19112 Comm: syz.6.3467 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1177.714150][T19112] Tainted: [L]=SOFTLOCKUP [ 1177.714156][T19112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1177.714168][T19112] Call Trace: [ 1177.714175][T19112] [ 1177.714182][T19112] dump_stack_lvl+0xe8/0x150 [ 1177.714214][T19112] should_fail_ex+0x467/0x600 [ 1177.714247][T19112] should_failslab+0xa8/0x100 [ 1177.714271][T19112] __kmalloc_noprof+0xfe/0x780 [ 1177.714291][T19112] ? tomoyo_encode+0x2ad/0x570 [ 1177.714312][T19112] ? tomoyo_encode+0x2ad/0x570 [ 1177.714341][T19112] tomoyo_encode+0x2ad/0x570 [ 1177.714369][T19112] tomoyo_realpath_from_path+0x5fa/0x640 [ 1177.714402][T19112] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1177.714431][T19112] tomoyo_path_number_perm+0x246/0x5f0 [ 1177.714464][T19112] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1177.714492][T19112] ? __lock_acquire+0x683/0x2ce0 [ 1177.714525][T19112] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1177.714548][T19112] ? hook_file_ioctl+0x1f3/0x600 [ 1177.714573][T19112] ? lockdep_hardirqs_on+0x7a/0x110 [ 1177.714613][T19112] ? __fget_files+0x2a/0x420 [ 1177.714635][T19112] ? __fget_files+0x2a/0x420 [ 1177.714652][T19112] ? __fget_files+0x3a8/0x420 [ 1177.714677][T19112] ? __fget_files+0x2a/0x420 [ 1177.714699][T19112] security_file_ioctl+0xc3/0x2a0 [ 1177.714721][T19112] __se_sys_ioctl+0x47/0x170 [ 1177.714745][T19112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.714767][T19112] do_syscall_64+0x174/0x580 [ 1177.714789][T19112] ? trace_irq_disable+0x3b/0x140 [ 1177.714818][T19112] ? clear_bhb_loop+0x70/0xc0 [ 1177.714840][T19112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.714860][T19112] RIP: 0033:0x7f35f075e0d9 [ 1177.714878][T19112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.714895][T19112] RSP: 002b:00007f35ee9b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1177.714915][T19112] RAX: ffffffffffffffda RBX: 00007f35f09e5fa0 RCX: 00007f35f075e0d9 [ 1177.714930][T19112] RDX: 0000000000000000 RSI: 00000000c0884113 RDI: 0000000000000005 [ 1177.714942][T19112] RBP: 00007f35ee9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.714954][T19112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.714966][T19112] R13: 00007f35f09e6038 R14: 00007f35f09e5fa0 R15: 00007fff2b62c5b8 [ 1177.714998][T19112] [ 1177.715016][T19112] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1177.844177][T19114] FAULT_INJECTION: forcing a failure. [ 1177.844177][T19114] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.844214][T19114] CPU: 1 UID: 0 PID: 19114 Comm: syz.5.3469 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1177.844241][T19114] Tainted: [L]=SOFTLOCKUP [ 1177.844248][T19114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1177.844261][T19114] Call Trace: [ 1177.844269][T19114] [ 1177.844277][T19114] dump_stack_lvl+0xe8/0x150 [ 1177.844309][T19114] should_fail_ex+0x467/0x600 [ 1177.844341][T19114] should_failslab+0xa8/0x100 [ 1177.844364][T19114] __kmalloc_cache_node_noprof+0xa9/0x6a0 [ 1177.844386][T19114] ? __get_vm_area_node+0x136/0x300 [ 1177.844412][T19114] ? __get_vm_area_node+0x136/0x300 [ 1177.844445][T19114] __get_vm_area_node+0x136/0x300 [ 1177.844476][T19114] __vmalloc_node_range_noprof+0x358/0x1730 [ 1177.844506][T19114] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1177.844531][T19114] ? is_bpf_text_address+0x26/0x2b0 [ 1177.844568][T19114] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1177.844596][T19114] ? is_bpf_text_address+0x26/0x2b0 [ 1177.844619][T19114] ? kernel_text_address+0xa5/0xe0 [ 1177.844652][T19114] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1177.844676][T19114] __vmalloc_noprof+0xd2/0x120 [ 1177.844705][T19114] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1177.844727][T19114] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1177.844745][T19114] ? bpf_prog_alloc+0x2a/0x1a0 [ 1177.844765][T19114] bpf_prog_alloc+0x3c/0x1a0 [ 1177.844787][T19114] bpf_prog_load+0x7f8/0x1c00 [ 1177.844817][T19114] ? __pfx_bpf_prog_load+0x10/0x10 [ 1177.844859][T19114] __sys_bpf+0xd0d/0xd90 [ 1177.844885][T19114] ? __pfx___sys_bpf+0x10/0x10 [ 1177.844906][T19114] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1177.844934][T19114] ? rt_mutex_slowunlock+0x219/0x460 [ 1177.844979][T19114] ? ksys_write+0x248/0x270 [ 1177.845007][T19114] ? __pfx_ksys_write+0x10/0x10 [ 1177.845034][T19114] __x64_sys_bpf+0xba/0xd0 [ 1177.845061][T19114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.845082][T19114] do_syscall_64+0x174/0x580 [ 1177.845104][T19114] ? trace_irq_disable+0x3b/0x140 [ 1177.845132][T19114] ? clear_bhb_loop+0x70/0xc0 [ 1177.845154][T19114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.845173][T19114] RIP: 0033:0x7fdf0653e0d9 [ 1177.845191][T19114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.845207][T19114] RSP: 002b:00007fdf04796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1177.845228][T19114] RAX: ffffffffffffffda RBX: 00007fdf067c5fa0 RCX: 00007fdf0653e0d9 [ 1177.845243][T19114] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 1177.845256][T19114] RBP: 00007fdf04796090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.845267][T19114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.845279][T19114] R13: 00007fdf067c6038 R14: 00007fdf067c5fa0 R15: 00007fff098fcaa8 [ 1177.845309][T19114] [ 1177.847918][T19114] syz.5.3469: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1177.847984][T19114] CPU: 1 UID: 0 PID: 19114 Comm: syz.5.3469 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1177.848011][T19114] Tainted: [L]=SOFTLOCKUP [ 1177.848019][T19114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1177.848030][T19114] Call Trace: [ 1177.848038][T19114] [ 1177.848046][T19114] dump_stack_lvl+0xe8/0x150 [ 1177.848076][T19114] warn_alloc+0x24c/0x270 [ 1177.848101][T19114] ? __pfx_warn_alloc+0x10/0x10 [ 1177.848129][T19114] ? __get_vm_area_node+0x2af/0x300 [ 1177.848162][T19114] __vmalloc_node_range_noprof+0x37d/0x1730 [ 1177.848198][T19114] ? is_bpf_text_address+0x26/0x2b0 [ 1177.848236][T19114] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1177.848264][T19114] ? is_bpf_text_address+0x26/0x2b0 [ 1177.848286][T19114] ? kernel_text_address+0xa5/0xe0 [ 1177.848320][T19114] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1177.848338][T19114] __vmalloc_noprof+0xd2/0x120 [ 1177.848366][T19114] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1177.848388][T19114] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1177.848405][T19114] ? bpf_prog_alloc+0x2a/0x1a0 [ 1177.848427][T19114] bpf_prog_alloc+0x3c/0x1a0 [ 1177.848448][T19114] bpf_prog_load+0x7f8/0x1c00 [ 1177.848477][T19114] ? __pfx_bpf_prog_load+0x10/0x10 [ 1177.848519][T19114] __sys_bpf+0xd0d/0xd90 [ 1177.848545][T19114] ? __pfx___sys_bpf+0x10/0x10 [ 1177.848566][T19114] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1177.848593][T19114] ? rt_mutex_slowunlock+0x219/0x460 [ 1177.848639][T19114] ? ksys_write+0x248/0x270 [ 1177.848670][T19114] ? __pfx_ksys_write+0x10/0x10 [ 1177.848697][T19114] __x64_sys_bpf+0xba/0xd0 [ 1177.848725][T19114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.848745][T19114] do_syscall_64+0x174/0x580 [ 1177.848768][T19114] ? trace_irq_disable+0x3b/0x140 [ 1177.848795][T19114] ? clear_bhb_loop+0x70/0xc0 [ 1177.848822][T19114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.848841][T19114] RIP: 0033:0x7fdf0653e0d9 [ 1177.848859][T19114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.848874][T19114] RSP: 002b:00007fdf04796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1177.848893][T19114] RAX: ffffffffffffffda RBX: 00007fdf067c5fa0 RCX: 00007fdf0653e0d9 [ 1177.848907][T19114] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 1177.848920][T19114] RBP: 00007fdf04796090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.848932][T19114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.848944][T19114] R13: 00007fdf067c6038 R14: 00007fdf067c5fa0 R15: 00007fff098fcaa8 [ 1177.848974][T19114] [ 1177.848982][T19114] Mem-Info: [ 1177.848990][T19114] active_anon:207 inactive_anon:16377 isolated_anon:0 [ 1177.848990][T19114] active_file:29058 inactive_file:39093 isolated_file:0 [ 1177.848990][T19114] unevictable:0 dirty:228 writeback:0 [ 1177.848990][T19114] slab_reclaimable:14270 slab_unreclaimable:112056 [ 1177.848990][T19114] mapped:45301 shmem:10670 pagetables:1453 [ 1177.848990][T19114] sec_pagetables:0 bounce:0 [ 1177.848990][T19114] kernel_misc_reclaimable:0 [ 1177.848990][T19114] free:1255235 free_pcp:13362 free_cma:0 [ 1177.849043][T19114] Node 0 active_anon:828kB inactive_anon:65508kB active_file:116032kB inactive_file:156372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181204kB dirty:912kB writeback:0kB shmem:42680kB kernel_stack:13884kB pagetables:5680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1177.849091][T19114] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1177.849135][T19114] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1177.849189][T19114] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1177.849221][T19114] Node 0 DMA32 free:1064456kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:828kB inactive_anon:65508kB active_file:116032kB inactive_file:156372kB unevictable:0kB writepending:912kB zspages:0kB present:3129332kB managed:2560500kB mlocked:0kB bounce:0kB free_pcp:53440kB local_pcp:23252kB free_cma:0kB [ 1177.849280][T19114] lowmem_reserve[]: 0 0 1 1 1 [ 1177.849309][T19114] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1177.860032][T19114] lowmem_reserve[]: 0 0 0 0 0 [ 1177.860271][T19114] Node 1 Normal free:3941124kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1177.860331][T19114] lowmem_reserve[]: 0 0 0 0 0 [ 1177.860364][T19114] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1177.860468][T19114] Node 0 DMA32: 658*4kB (UM) 810*8kB (UME) 202*16kB (UME) 93*32kB (UME) 208*64kB (UME) 202*128kB (UME) 195*256kB (UME) 55*512kB (UME) 10*1024kB (UM) 16*2048kB (UM) 217*4096kB (M) = 1064408kB [ 1177.860598][T19114] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1177.860695][T19114] Node 1 Normal: 3*4kB (U) 5*8kB (UM) 5*16kB (UM) 10*32kB (UM) 7*64kB (UM) 5*128kB (UM) 3*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3941124kB [ 1177.860830][T19114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1177.860847][T19114] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1177.860862][T19114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1177.860878][T19114] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1177.860893][T19114] 78842 total pagecache pages [ 1177.860901][T19114] 0 pages in swap cache [ 1177.860907][T19114] Free swap = 124996kB [ 1177.860914][T19114] Total swap = 124996kB [ 1177.860923][T19114] 2097051 pages RAM [ 1177.860929][T19114] 0 pages HighMem/MovableOnly [ 1177.860936][T19114] 424848 pages reserved [ 1177.860943][T19114] 0 pages cma reserved [ 1177.861136][ T36] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1177.984205][ T36] usb 1-1: device descriptor read/64, error -71 [ 1178.054207][T19117] FAULT_INJECTION: forcing a failure. [ 1178.054207][T19117] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.054241][T19117] CPU: 1 UID: 0 PID: 19117 Comm: syz.5.3471 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1178.054268][T19117] Tainted: [L]=SOFTLOCKUP [ 1178.054275][T19117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1178.054287][T19117] Call Trace: [ 1178.054295][T19117] [ 1178.054302][T19117] dump_stack_lvl+0xe8/0x150 [ 1178.054334][T19117] should_fail_ex+0x467/0x600 [ 1178.054365][T19117] should_failslab+0xa8/0x100 [ 1178.054387][T19117] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1178.054418][T19117] ? __alloc_skb+0x1d7/0x7a0 [ 1178.054436][T19117] ? __alloc_skb+0x1d7/0x7a0 [ 1178.054462][T19117] __alloc_skb+0x1d7/0x7a0 [ 1178.054485][T19117] netlink_sendmsg+0x5d4/0xb40 [ 1178.054519][T19117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1178.054544][T19117] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1178.054570][T19117] ? __kernel_text_address+0xd/0x30 [ 1178.054599][T19117] ? unwind_get_return_address+0x4d/0x90 [ 1178.054622][T19117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1178.054644][T19117] sock_sendmsg_nosec+0x13a/0x180 [ 1178.054675][T19117] ____sys_sendmsg+0x565/0x870 [ 1178.054698][T19117] ? __might_fault+0xaf/0x130 [ 1178.054723][T19117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1178.054754][T19117] ? import_iovec+0x73/0xa0 [ 1178.054778][T19117] ___sys_sendmsg+0x2a5/0x360 [ 1178.054801][T19117] ? __lock_acquire+0x683/0x2ce0 [ 1178.054823][T19117] ? __pfx____sys_sendmsg+0x10/0x10 [ 1178.054878][T19117] ? __fget_files+0x2a/0x420 [ 1178.054896][T19117] ? __fget_files+0x3a8/0x420 [ 1178.054924][T19117] __x64_sys_sendmsg+0x1b7/0x290 [ 1178.054950][T19117] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1178.054989][T19117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.055010][T19117] do_syscall_64+0x174/0x580 [ 1178.055032][T19117] ? trace_irq_disable+0x3b/0x140 [ 1178.055060][T19117] ? clear_bhb_loop+0x70/0xc0 [ 1178.055083][T19117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.055109][T19117] RIP: 0033:0x7fdf0653e0d9 [ 1178.055127][T19117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.055142][T19117] RSP: 002b:00007fdf04796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1178.055163][T19117] RAX: ffffffffffffffda RBX: 00007fdf067c5fa0 RCX: 00007fdf0653e0d9 [ 1178.055177][T19117] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1178.055190][T19117] RBP: 00007fdf04796090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.055202][T19117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.055214][T19117] R13: 00007fdf067c6038 R14: 00007fdf067c5fa0 R15: 00007fff098fcaa8 [ 1178.055246][T19117] [ 1178.212917][ T36] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1178.339544][ T36] usb 1-1: device descriptor read/64, error -71 [ 1178.443658][ T36] usb usb1-port1: attempt power cycle [ 1178.784554][ T36] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1178.804895][ T36] usb 1-1: device descriptor read/8, error -71 [ 1178.873959][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1178.873975][ T37] audit: type=1800 audit(1786767001.494:4171): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1178.883190][ T37] audit: type=1800 audit(1786767001.504:4172): pid=19137 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.3473" name="file0" dev="overlay" ino=1493 res=0 errno=0 [ 1179.042286][ T36] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1179.067169][ T36] usb 1-1: device descriptor read/8, error -71 [ 1179.167862][ T36] usb usb1-port1: unable to enumerate USB device [ 1179.252005][T19143] overlayfs: failed to resolve './file1': -2 [ 1179.506981][ T37] audit: type=1800 audit(1786767001.955:4173): pid=19144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.3478" name="file0" dev="tmpfs" ino=2714 res=0 errno=0 [ 1180.096381][T19147] FAULT_INJECTION: forcing a failure. [ 1180.096381][T19147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.096423][T19147] CPU: 0 UID: 0 PID: 19147 Comm: syz.2.3479 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1180.096451][T19147] Tainted: [L]=SOFTLOCKUP [ 1180.096459][T19147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1180.096471][T19147] Call Trace: [ 1180.096480][T19147] [ 1180.096489][T19147] dump_stack_lvl+0xe8/0x150 [ 1180.096521][T19147] should_fail_ex+0x467/0x600 [ 1180.096556][T19147] _copy_from_user+0x2d/0xb0 [ 1180.096579][T19147] ucma_write+0x166/0x2f0 [ 1180.096604][T19147] ? __pfx_ucma_write+0x10/0x10 [ 1180.096625][T19147] ? security_file_permission+0x75/0x260 [ 1180.096647][T19147] ? rw_verify_area+0x209/0x4d0 [ 1180.096675][T19147] vfs_writev+0x4c4/0x990 [ 1180.096704][T19147] ? __pfx_ucma_write+0x10/0x10 [ 1180.096730][T19147] ? __pfx_vfs_writev+0x10/0x10 [ 1180.096772][T19147] ? __fget_files+0x2a/0x420 [ 1180.096796][T19147] ? __fget_files+0x3a8/0x420 [ 1180.096815][T19147] ? __fget_files+0x2a/0x420 [ 1180.096842][T19147] do_writev+0x15a/0x2e0 [ 1180.096873][T19147] ? __pfx_do_writev+0x10/0x10 [ 1180.096909][T19147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.096930][T19147] do_syscall_64+0x174/0x580 [ 1180.096954][T19147] ? trace_irq_disable+0x3b/0x140 [ 1180.096986][T19147] ? clear_bhb_loop+0x70/0xc0 [ 1180.097011][T19147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.097031][T19147] RIP: 0033:0x7f3ec4c5e0d9 [ 1180.097049][T19147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.097066][T19147] RSP: 002b:00007f3ec2eb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1180.097088][T19147] RAX: ffffffffffffffda RBX: 00007f3ec4ee5fa0 RCX: 00007f3ec4c5e0d9 [ 1180.097103][T19147] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000007 [ 1180.097117][T19147] RBP: 00007f3ec2eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.097130][T19147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.097142][T19147] R13: 00007f3ec4ee6038 R14: 00007f3ec4ee5fa0 R15: 00007ffcf1a23fc8 [ 1180.097174][T19147] [ 1180.240762][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3481'. [ 1180.264924][ T37] audit: type=1800 audit(1786767002.952:4174): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1180.272324][ T37] audit: type=1800 audit(1786767002.963:4175): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297636 res=0 errno=0 [ 1180.316148][ T37] audit: type=1800 audit(1786767003.005:4176): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1180.323807][ T37] audit: type=1800 audit(1786767003.015:4177): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297648 res=0 errno=0 [ 1180.500897][ T37] audit: type=1800 audit(1786767003.194:4178): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1181.014973][ T37] audit: type=1800 audit(1786767003.739:4179): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297668 res=0 errno=0 [ 1181.263443][ T37] audit: type=1800 audit(1786767004.002:4180): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1181.381095][T19167] futex_wake_op: syz.2.3486 tries to shift op by 144; fix this program [ 1181.383447][T19167] FAULT_INJECTION: forcing a failure. [ 1181.383447][T19167] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.383480][T19167] CPU: 1 UID: 0 PID: 19167 Comm: syz.2.3486 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1181.383508][T19167] Tainted: [L]=SOFTLOCKUP [ 1181.383515][T19167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1181.383528][T19167] Call Trace: [ 1181.383535][T19167] [ 1181.383544][T19167] dump_stack_lvl+0xe8/0x150 [ 1181.383577][T19167] should_fail_ex+0x467/0x600 [ 1181.383610][T19167] should_failslab+0xa8/0x100 [ 1181.383635][T19167] __kmalloc_cache_noprof+0xa0/0x6b0 [ 1181.383656][T19167] ? io_ring_ctx_alloc+0x53/0xc60 [ 1181.383673][T19167] ? io_ring_ctx_alloc+0x53/0xc60 [ 1181.383699][T19167] io_ring_ctx_alloc+0x53/0xc60 [ 1181.383717][T19167] ? io_prepare_config+0x8c8/0xc70 [ 1181.383747][T19167] io_uring_create+0x50/0x990 [ 1181.383770][T19167] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1181.383796][T19167] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1181.383827][T19167] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1181.383867][T19167] ? __pfx_ksys_write+0x10/0x10 [ 1181.383898][T19167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.383921][T19167] do_syscall_64+0x174/0x580 [ 1181.383944][T19167] ? trace_irq_disable+0x3b/0x140 [ 1181.383974][T19167] ? clear_bhb_loop+0x70/0xc0 [ 1181.383999][T19167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.384019][T19167] RIP: 0033:0x7f3ec4c5e0d9 [ 1181.384037][T19167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.384054][T19167] RSP: 002b:00007f3ec2eb5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1181.384076][T19167] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f3ec4c5e0d9 [ 1181.384091][T19167] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000003c9 [ 1181.384104][T19167] RBP: 0000200000000800 R08: 0000000000000000 R09: 0000000000000101 [ 1181.384117][T19167] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 1181.384131][T19167] R13: 0000200000000890 R14: 00007f3ec2eb5fd8 R15: 0000000000000000 [ 1181.384161][T19167] [ 1181.490829][T14764] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 1182.042538][T19174] futex_wake_op: syz.0.3490 tries to shift op by 144; fix this program [ 1182.065693][T14764] usb 7-1: device descriptor read/64, error -71 [ 1182.317497][T14764] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 1182.337170][T19182] FAULT_INJECTION: forcing a failure. [ 1182.337170][T19182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.337204][T19182] CPU: 0 UID: 0 PID: 19182 Comm: syz.5.3491 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1182.337241][T19182] Tainted: [L]=SOFTLOCKUP [ 1182.337248][T19182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1182.337261][T19182] Call Trace: [ 1182.337269][T19182] [ 1182.337277][T19182] dump_stack_lvl+0xe8/0x150 [ 1182.337310][T19182] should_fail_ex+0x467/0x600 [ 1182.337344][T19182] _copy_from_iter+0x1d3/0x1660 [ 1182.337375][T19182] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1182.337403][T19182] ? __pfx_policy_nodemask+0x10/0x10 [ 1182.337429][T19182] ? unwind_next_frame+0x8f/0x2550 [ 1182.337450][T19182] ? __pfx__copy_from_iter+0x10/0x10 [ 1182.337484][T19182] ? alloc_pages_mpol+0x115/0x280 [ 1182.337515][T19182] copy_page_from_iter+0x219/0x2d0 [ 1182.337538][T19182] tun_get_user+0x1b68/0x4380 [ 1182.337564][T19182] ? is_bpf_text_address+0x292/0x2b0 [ 1182.337587][T19182] ? tun_get_user+0x6e7/0x4380 [ 1182.337631][T19182] ? __pfx_tun_get_user+0x10/0x10 [ 1182.337660][T19182] ? __lock_acquire+0x683/0x2ce0 [ 1182.337693][T19182] ? ref_tracker_alloc+0x353/0x4c0 [ 1182.337720][T19182] ? get_pid_task+0x20/0x1f0 [ 1182.337749][T19182] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1182.337777][T19182] ? tun_get+0x1c/0x2f0 [ 1182.337804][T19182] ? tun_get+0x1c/0x2f0 [ 1182.337837][T19182] ? tun_get+0x1c/0x2f0 [ 1182.337864][T19182] ? tun_get+0x1c/0x2f0 [ 1182.337896][T19182] tun_chr_write_iter+0x119/0x200 [ 1182.337926][T19182] vfs_write+0x61e/0xbb0 [ 1182.337956][T19182] ? __pfx_vfs_write+0x10/0x10 [ 1182.337988][T19182] ? __fget_files+0x2a/0x420 [ 1182.338017][T19182] ksys_write+0x156/0x270 [ 1182.338042][T19182] ? __pfx_ksys_write+0x10/0x10 [ 1182.338074][T19182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.338095][T19182] do_syscall_64+0x174/0x580 [ 1182.338119][T19182] ? trace_irq_disable+0x3b/0x140 [ 1182.338147][T19182] ? clear_bhb_loop+0x70/0xc0 [ 1182.338172][T19182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.338192][T19182] RIP: 0033:0x7fdf064fe90e [ 1182.338210][T19182] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1182.338234][T19182] RSP: 002b:00007fdf04774fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1182.338255][T19182] RAX: ffffffffffffffda RBX: 00007fdf047756c0 RCX: 00007fdf064fe90e [ 1182.338270][T19182] RDX: 000000000000006e RSI: 0000200000000640 RDI: 00000000000000c8 [ 1182.338283][T19182] RBP: 00007fdf04775090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.338295][T19182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.338307][T19182] R13: 00007fdf067c6128 R14: 00007fdf067c6090 R15: 00007fff098fcaa8 [ 1182.338339][T19182] [ 1182.364533][T19183] IPv6: NLM_F_CREATE should be specified when creating new route [ 1182.499334][T19185] FAULT_INJECTION: forcing a failure. [ 1182.499334][T19185] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.499369][T19185] CPU: 0 UID: 0 PID: 19185 Comm: syz.6.3493 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1182.499397][T19185] Tainted: [L]=SOFTLOCKUP [ 1182.499404][T19185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1182.499416][T19185] Call Trace: [ 1182.499423][T19185] [ 1182.499431][T19185] dump_stack_lvl+0xe8/0x150 [ 1182.499463][T19185] should_fail_ex+0x467/0x600 [ 1182.499497][T19185] should_failslab+0xa8/0x100 [ 1182.499520][T19185] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1182.499551][T19185] ? __alloc_skb+0x1d7/0x7a0 [ 1182.499571][T19185] ? __alloc_skb+0x1d7/0x7a0 [ 1182.499597][T19185] __alloc_skb+0x1d7/0x7a0 [ 1182.499621][T19185] netlink_sendmsg+0x5d4/0xb40 [ 1182.499653][T19185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1182.499676][T19185] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1182.499702][T19185] ? __kernel_text_address+0xd/0x30 [ 1182.499731][T19185] ? unwind_get_return_address+0x4d/0x90 [ 1182.499754][T19185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1182.499778][T19185] sock_sendmsg_nosec+0x13a/0x180 [ 1182.499809][T19185] ____sys_sendmsg+0x565/0x870 [ 1182.499832][T19185] ? __might_fault+0xaf/0x130 [ 1182.499857][T19185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1182.499891][T19185] ? import_iovec+0x73/0xa0 [ 1182.499915][T19185] ___sys_sendmsg+0x2a5/0x360 [ 1182.499938][T19185] ? __lock_acquire+0x683/0x2ce0 [ 1182.499961][T19185] ? __pfx____sys_sendmsg+0x10/0x10 [ 1182.500017][T19185] ? __fget_files+0x2a/0x420 [ 1182.500035][T19185] ? __fget_files+0x3a8/0x420 [ 1182.500063][T19185] __x64_sys_sendmsg+0x1b7/0x290 [ 1182.500089][T19185] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1182.500129][T19185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.500158][T19185] do_syscall_64+0x174/0x580 [ 1182.500182][T19185] ? trace_irq_disable+0x3b/0x140 [ 1182.500210][T19185] ? clear_bhb_loop+0x70/0xc0 [ 1182.500234][T19185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.500253][T19185] RIP: 0033:0x7f35f075e0d9 [ 1182.500271][T19185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.500287][T19185] RSP: 002b:00007f35ee9b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1182.500307][T19185] RAX: ffffffffffffffda RBX: 00007f35f09e5fa0 RCX: 00007f35f075e0d9 [ 1182.500322][T19185] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1182.500334][T19185] RBP: 00007f35ee9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.500347][T19185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.500358][T19185] R13: 00007f35f09e6038 R14: 00007f35f09e5fa0 R15: 00007fff2b62c5b8 [ 1182.500386][T19185] [ 1182.563520][T19187] FAULT_INJECTION: forcing a failure. [ 1182.563520][T19187] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.563555][T19187] CPU: 0 UID: 0 PID: 19187 Comm: syz.2.3492 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1182.563582][T19187] Tainted: [L]=SOFTLOCKUP [ 1182.563589][T19187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1182.563601][T19187] Call Trace: [ 1182.563609][T19187] [ 1182.563617][T19187] dump_stack_lvl+0xe8/0x150 [ 1182.563652][T19187] should_fail_ex+0x467/0x600 [ 1182.563686][T19187] should_failslab+0xa8/0x100 [ 1182.563710][T19187] __kmalloc_noprof+0xfe/0x780 [ 1182.563730][T19187] ? tomoyo_encode+0x2ad/0x570 [ 1182.563750][T19187] ? tomoyo_encode+0x2ad/0x570 [ 1182.563779][T19187] tomoyo_encode+0x2ad/0x570 [ 1182.563806][T19187] tomoyo_realpath_from_path+0x5fa/0x640 [ 1182.563839][T19187] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1182.563868][T19187] tomoyo_path_number_perm+0x246/0x5f0 [ 1182.563900][T19187] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1182.563928][T19187] ? __lock_acquire+0x683/0x2ce0 [ 1182.563960][T19187] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1182.563983][T19187] ? hook_file_ioctl+0x1f3/0x600 [ 1182.564008][T19187] ? lockdep_hardirqs_on+0x7a/0x110 [ 1182.564049][T19187] ? __fget_files+0x2a/0x420 [ 1182.564070][T19187] ? __fget_files+0x2a/0x420 [ 1182.564087][T19187] ? __fget_files+0x3a8/0x420 [ 1182.564104][T19187] ? __fget_files+0x2a/0x420 [ 1182.564127][T19187] security_file_ioctl+0xc3/0x2a0 [ 1182.564155][T19187] __se_sys_ioctl+0x47/0x170 [ 1182.564179][T19187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.564201][T19187] do_syscall_64+0x174/0x580 [ 1182.564223][T19187] ? trace_irq_disable+0x3b/0x140 [ 1182.564252][T19187] ? clear_bhb_loop+0x70/0xc0 [ 1182.564275][T19187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.564294][T19187] RIP: 0033:0x7f3ec4c5e0d9 [ 1182.564312][T19187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.564327][T19187] RSP: 002b:00007f3ec2e95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1182.564349][T19187] RAX: ffffffffffffffda RBX: 00007f3ec4ee6090 RCX: 00007f3ec4c5e0d9 [ 1182.564363][T19187] RDX: 0000200000000240 RSI: 000000000000227c RDI: 0000000000000007 [ 1182.564375][T19187] RBP: 00007f3ec2e95090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.564388][T19187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.564399][T19187] R13: 00007f3ec4ee6128 R14: 00007f3ec4ee6090 R15: 00007ffcf1a23fc8 [ 1182.564431][T19187] [ 1182.573529][T19187] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1183.343282][T19198] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3494'. [ 1183.395164][T19192] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3494'. [ 1183.489993][T19202] futex_wake_op: syz.3.3498 tries to shift op by 144; fix this program [ 1183.537542][T14764] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1183.820161][T14764] usb 3-1: Using ep0 maxpacket: 32 [ 1183.822772][T14764] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1183.824370][T14764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.881243][T14764] usb 3-1: config 0 descriptor?? [ 1183.904214][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 1183.904232][ T37] audit: type=1800 audit(1786767006.772:4184): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297839 res=0 errno=0 [ 1183.923450][T14764] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1183.939924][ T37] audit: type=1800 audit(1786767006.804:4185): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=297868 res=0 errno=0 [ 1183.939976][ T37] audit: type=1800 audit(1786767006.804:4186): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=297846 res=0 errno=0 [ 1183.943924][ T37] audit: type=1800 audit(1786767006.814:4187): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=297847 res=0 errno=0 [ 1183.958293][ T37] audit: type=1800 audit(1786767006.825:4188): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=297848 res=0 errno=0 [ 1183.997131][ T37] audit: type=1800 audit(1786767006.867:4189): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297888 res=0 errno=0 [ 1184.096357][T14764] gspca_sq930x: reg_r 001f failed -32 [ 1184.096416][T14764] sq930x 3-1:0.0: probe with driver sq930x failed with error -32 [ 1184.167878][T14764] usb 3-1: USB disconnect, device number 40 [ 1184.780093][ T37] audit: type=1800 audit(1786767007.685:4190): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1185.035564][T19227] futex_wake_op: syz.0.3506 tries to shift op by 144; fix this program [ 1185.059253][T19222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3505'. [ 1185.060199][T19222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3505'. [ 1185.236240][T19231] ip6tnl0: Caught tx_queue_len zero misconfig [ 1185.237668][T19231] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3508'. [ 1185.358775][T19234] netlink: 'syz.6.3509': attribute type 3 has an invalid length. [ 1185.418011][ T37] audit: type=1800 audit(1786767008.367:4191): pid=19224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3506" name="run" dev="sysfs" ino=1832 res=0 errno=0 [ 1185.801031][ T37] audit: type=1800 audit(1786767008.766:4192): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1186.405989][ T37] audit: type=1800 audit(1786767009.396:4193): pid=19242 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.3511" name="UDC" dev="configfs" ino=68898 res=0 errno=0 [ 1188.315699][T19242] configfs-gadget.g1 gadget.0: HOST MAC 4a:da:4f:4d:eb:49 [ 1188.315724][T19242] configfs-gadget.g1 gadget.0: MAC d2:6d:71:d6:8a:99 [ 1188.351690][T19261] netlink: 'syz.3.3517': attribute type 16 has an invalid length. [ 1188.351715][T19261] netlink: 'syz.3.3517': attribute type 17 has an invalid length. [ 1189.715153][ T5713] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1189.858320][ T5713] usb 1-1: New USB device found, idVendor=01d6, idProduct=0102, bcdDevice= 0.00 [ 1189.859167][ T5713] usb 1-1: Dual-Role OTG device on HNP port [ 1190.005247][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.026465][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1190.026482][ T37] audit: type=1800 audit(1786767013.194:4199): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=298025 res=0 errno=0 [ 1190.132648][ T37] audit: type=1800 audit(1786767013.310:4200): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=298054 res=0 errno=0 [ 1190.157983][ T37] audit: type=1800 audit(1786767013.331:4201): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=298032 res=0 errno=0 [ 1190.168380][ T37] audit: type=1800 audit(1786767013.341:4202): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=298033 res=0 errno=0 [ 1190.272337][ T37] audit: type=1800 audit(1786767013.457:4203): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=298034 res=0 errno=0 [ 1193.008005][ T5713] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1193.051131][ T37] audit: type=1800 audit(1786767016.374:4204): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=298074 res=0 errno=0 [ 1193.133983][ T37] audit: type=1800 audit(1786767016.458:4205): pid=18208 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=298802 res=0 errno=0 [ 1193.148045][ T37] audit: type=1800 audit(1786767016.479:4206): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=298773 res=0 errno=0 [ 1193.165722][ T37] audit: type=1800 audit(1786767016.500:4207): pid=18212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=298856 res=0 errno=0 [ 1193.284456][ T37] audit: type=1800 audit(1786767016.615:4208): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1193.436028][T19298] FAULT_INJECTION: forcing a failure. [ 1193.436028][T19298] name failslab, interval 1, probability 0, space 0, times 0 [ 1193.436063][T19298] CPU: 0 UID: 0 PID: 19298 Comm: syz.2.3518 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1193.436090][T19298] Tainted: [L]=SOFTLOCKUP [ 1193.436097][T19298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1193.436110][T19298] Call Trace: [ 1193.436118][T19298] [ 1193.436127][T19298] dump_stack_lvl+0xe8/0x150 [ 1193.436169][T19298] should_fail_ex+0x467/0x600 [ 1193.436203][T19298] should_failslab+0xa8/0x100 [ 1193.436227][T19298] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1193.436259][T19298] ? __alloc_skb+0x1d7/0x7a0 [ 1193.436279][T19298] ? __alloc_skb+0x1d7/0x7a0 [ 1193.436305][T19298] __alloc_skb+0x1d7/0x7a0 [ 1193.436327][T19298] netlink_sendmsg+0x5d4/0xb40 [ 1193.436362][T19298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1193.436389][T19298] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1193.436418][T19298] ? __kernel_text_address+0xd/0x30 [ 1193.436448][T19298] ? unwind_get_return_address+0x4d/0x90 [ 1193.436470][T19298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1193.436494][T19298] sock_sendmsg_nosec+0x13a/0x180 [ 1193.436526][T19298] ____sys_sendmsg+0x565/0x870 [ 1193.436551][T19298] ? __might_fault+0xaf/0x130 [ 1193.436576][T19298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1193.436609][T19298] ? import_iovec+0x73/0xa0 [ 1193.436635][T19298] ___sys_sendmsg+0x2a5/0x360 [ 1193.436658][T19298] ? __lock_acquire+0x683/0x2ce0 [ 1193.436681][T19298] ? __pfx____sys_sendmsg+0x10/0x10 [ 1193.436741][T19298] ? __fget_files+0x2a/0x420 [ 1193.436760][T19298] ? __fget_files+0x3a8/0x420 [ 1193.436789][T19298] __x64_sys_sendmsg+0x1b7/0x290 [ 1193.436817][T19298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1193.436860][T19298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.436881][T19298] do_syscall_64+0x174/0x580 [ 1193.436906][T19298] ? trace_irq_disable+0x3b/0x140 [ 1193.436936][T19298] ? clear_bhb_loop+0x70/0xc0 [ 1193.436959][T19298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.436979][T19298] RIP: 0033:0x7f3ec4c5e0d9 [ 1193.436998][T19298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1193.437015][T19298] RSP: 002b:00007f3ec2eb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1193.437034][T19298] RAX: ffffffffffffffda RBX: 00007f3ec4ee5fa0 RCX: 00007f3ec4c5e0d9 [ 1193.437047][T19298] RDX: 000000002c000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 1193.437059][T19298] RBP: 00007f3ec2eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.437070][T19298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1193.437080][T19298] R13: 00007f3ec4ee6038 R14: 00007f3ec4ee5fa0 R15: 00007ffcf1a23fc8 [ 1193.437109][T19298] [ 1193.744138][ T5713] cdc_eem 1-1:1.2 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, e6:b2:58:74:30:22 [ 1193.999104][T19308] sctp: [Deprecated]: syz.2.3527 (pid 19308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1193.999104][T19308] Use struct sctp_sack_info instead [ 1194.015145][T19308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3527'. [ 1195.349868][T19303] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3519'. [ 1195.600022][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 1195.600039][ T37] audit: type=1800 audit(1786767019.050:4220): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1195.615113][ T37] audit: type=1800 audit(1786767019.061:4221): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299008 res=0 errno=0 [ 1195.628243][ T37] audit: type=1800 audit(1786767019.071:4222): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=299012 res=0 errno=0 [ 1195.821945][ T37] audit: type=1800 audit(1786767019.270:4223): pid=19336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3533" name="UDC" dev="configfs" ino=69061 res=0 errno=0 [ 1195.890030][ T37] audit: type=1800 audit(1786767019.333:4224): pid=19331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3532" name="new_dev" dev="sysfs" ino=297624 res=0 errno=0 [ 1196.173332][ T37] audit: type=1800 audit(1786767019.638:4225): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1196.343653][T19349] nvme_fabrics: missing parameter 'transport=%s' [ 1196.343669][T19349] nvme_fabrics: missing parameter 'nqn=%s' [ 1196.344015][ T37] audit: type=1800 audit(1786767019.827:4226): pid=19327 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3532" name="raid_disks" dev="sysfs" ino=297618 res=0 errno=0 [ 1198.307228][ T37] audit: type=1800 audit(1786767021.873:4227): pid=19381 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.3545" name="UDC" dev="configfs" ino=69109 res=0 errno=0 [ 1199.125421][ T37] audit: type=1800 audit(1786767022.744:4228): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299159 res=0 errno=0 [ 1199.153818][ T37] audit: type=1800 audit(1786767022.775:4229): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=299164 res=0 errno=0 [ 1199.474938][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3550'. [ 1200.404057][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1200.404075][ T37] audit: type=1800 audit(1786767024.066:4232): pid=18208 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=299332 res=0 errno=0 [ 1200.443545][ T36] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1200.583256][T19420] FAULT_INJECTION: forcing a failure. [ 1200.583256][T19420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.583292][T19420] CPU: 0 UID: 0 PID: 19420 Comm: syz.6.3553 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1200.583319][T19420] Tainted: [L]=SOFTLOCKUP [ 1200.583326][T19420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1200.583340][T19420] Call Trace: [ 1200.583348][T19420] [ 1200.583356][T19420] dump_stack_lvl+0xe8/0x150 [ 1200.583390][T19420] should_fail_ex+0x467/0x600 [ 1200.583427][T19420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.583448][T19420] _copy_from_user+0x2d/0xb0 [ 1200.583471][T19420] memdup_user+0x5e/0xd0 [ 1200.583498][T19420] strndup_user+0x68/0xd0 [ 1200.583523][T19420] __se_sys_fsopen+0x3d/0x2c0 [ 1200.583550][T19420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.583571][T19420] do_syscall_64+0x174/0x580 [ 1200.583595][T19420] ? trace_irq_disable+0x3b/0x140 [ 1200.583624][T19420] ? clear_bhb_loop+0x70/0xc0 [ 1200.583647][T19420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.583665][T19420] RIP: 0033:0x7f35f075e0d9 [ 1200.583684][T19420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.583700][T19420] RSP: 002b:00007f35ee9b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1200.583720][T19420] RAX: ffffffffffffffda RBX: 00007f35f09e5fa0 RCX: 00007f35f075e0d9 [ 1200.583735][T19420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 1200.583747][T19420] RBP: 00007f35ee9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.583759][T19420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1200.583771][T19420] R13: 00007f35f09e6038 R14: 00007f35f09e5fa0 R15: 00007fff2b62c5b8 [ 1200.583800][T19420] [ 1200.601151][ T36] usb 4-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40 [ 1200.664772][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.664799][ T36] usb 4-1: Product: syz [ 1200.664814][ T36] usb 4-1: Manufacturer: syz [ 1200.664828][ T36] usb 4-1: SerialNumber: syz [ 1200.834301][ T37] audit: type=1800 audit(1786767024.496:4233): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299402 res=0 errno=0 [ 1200.884050][ T37] audit: type=1800 audit(1786767024.580:4234): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=299434 res=0 errno=0 [ 1200.922295][ T37] audit: type=1800 audit(1786767024.633:4235): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=299409 res=0 errno=0 [ 1200.957170][ T37] audit: type=1800 audit(1786767024.664:4236): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=299410 res=0 errno=0 [ 1201.141155][ T36] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1201.331316][T14764] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1201.489935][ T37] audit: type=1800 audit(1786767025.221:4237): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1201.515717][T14764] usb 7-1: Using ep0 maxpacket: 32 [ 1201.516931][T14764] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1201.518210][T14764] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.565313][T14764] usb 7-1: config 0 descriptor?? [ 1201.583973][ T37] audit: type=1800 audit(1786767025.325:4238): pid=18052 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299557 res=0 errno=0 [ 1201.621724][T14764] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1201.624000][ T37] audit: type=1800 audit(1786767025.367:4239): pid=18052 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=299586 res=0 errno=0 [ 1201.674043][ T37] audit: type=1800 audit(1786767025.409:4240): pid=18052 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=299564 res=0 errno=0 [ 1201.682568][ T37] audit: type=1800 audit(1786767025.420:4241): pid=18052 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=299565 res=0 errno=0 [ 1201.686303][T19433] futex_wake_op: syz.2.3556 tries to shift op by 144; fix this program [ 1201.787784][T14764] gspca_sq930x: reg_r 001f failed -32 [ 1201.797496][T14764] sq930x 7-1:0.0: probe with driver sq930x failed with error -32 [ 1201.909523][T19436] 0x000000000007-0x000000020000 : "" [ 1202.765749][T19426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.766755][T19426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.767844][ T36] usb 4-1: USB disconnect, device number 78 [ 1202.950200][T14764] usb 7-1: USB disconnect, device number 15 [ 1203.783938][T19436] ftl_cs: FTL header corrupt! [ 1203.904944][T14764] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1203.964281][T17533] udevd[17533]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1204.092648][T14764] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1204.092704][T14764] usb 7-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 1204.117073][T14764] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.117098][T14764] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1204.148306][T14764] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.148322][T14764] usb 7-1: Product: syz [ 1204.148330][T14764] usb 7-1: Manufacturer: syz [ 1204.148338][T14764] usb 7-1: SerialNumber: syz [ 1204.450074][T19453] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3559'. [ 1204.543810][T19467] FAULT_INJECTION: forcing a failure. [ 1204.543810][T19467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1204.543846][T19467] CPU: 1 UID: 0 PID: 19467 Comm: syz.5.3562 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1204.543874][T19467] Tainted: [L]=SOFTLOCKUP [ 1204.543881][T19467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1204.543893][T19467] Call Trace: [ 1204.543900][T19467] [ 1204.543909][T19467] dump_stack_lvl+0xe8/0x150 [ 1204.543942][T19467] should_fail_ex+0x467/0x600 [ 1204.543975][T19467] _copy_to_user+0x31/0xb0 [ 1204.544000][T19467] simple_read_from_buffer+0xe1/0x170 [ 1204.544025][T19467] proc_fail_nth_read+0x1be/0x230 [ 1204.544050][T19467] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1204.544075][T19467] ? rw_verify_area+0x250/0x4d0 [ 1204.544101][T19467] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1204.544121][T19467] vfs_read+0x219/0xa90 [ 1204.544149][T19467] ? __pfx_vfs_read+0x10/0x10 [ 1204.544172][T19467] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1204.544195][T19467] ? lockdep_hardirqs_on+0x7a/0x110 [ 1204.544218][T19467] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1204.544241][T19467] ? mutex_lock_nested+0x152/0x1d0 [ 1204.544269][T19467] ? fdget_pos+0x252/0x320 [ 1204.544296][T19467] ksys_read+0x156/0x270 [ 1204.544318][T19467] ? __pfx_ksys_read+0x10/0x10 [ 1204.544348][T19467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.544367][T19467] do_syscall_64+0x174/0x580 [ 1204.544389][T19467] ? trace_irq_disable+0x3b/0x140 [ 1204.544419][T19467] ? clear_bhb_loop+0x70/0xc0 [ 1204.544444][T19467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.544463][T19467] RIP: 0033:0x7fdf064fe90e [ 1204.544481][T19467] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1204.544496][T19467] RSP: 002b:00007fdf04795fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1204.544516][T19467] RAX: ffffffffffffffda RBX: 00007fdf047966c0 RCX: 00007fdf064fe90e [ 1204.544530][T19467] RDX: 000000000000000f RSI: 00007fdf047960a0 RDI: 0000000000000004 [ 1204.544545][T19467] RBP: 00007fdf04796090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.544557][T19467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.544569][T19467] R13: 00007fdf067c6038 R14: 00007fdf067c5fa0 R15: 00007fff098fcaa8 [ 1204.544601][T19467] [ 1205.197304][T19476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3564'. [ 1205.342158][T19480] futex_wake_op: syz.3.3565 tries to shift op by 144; fix this program [ 1207.459357][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 1207.459374][ T37] audit: type=1800 audit(1786767031.496:4265): pid=18208 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=299870 res=0 errno=0 [ 1207.463801][T14764] usb 7-1: USB disconnect, device number 16 [ 1207.464062][ T37] audit: type=1800 audit(1786767031.496:4266): pid=18208 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=299871 res=0 errno=0 [ 1208.687136][T17533] udevd[17533]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1209.201466][ T37] audit: type=1800 audit(1786767033.322:4267): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300122 res=0 errno=0 [ 1209.237334][ T37] audit: type=1800 audit(1786767033.343:4268): pid=19509 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3571" name="UDC" dev="configfs" ino=68449 res=0 errno=0 [ 1209.284536][ T37] audit: type=1800 audit(1786767033.406:4269): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299764 res=0 errno=0 [ 1211.019937][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1211.020009][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1211.033554][T19522] No source specified [ 1211.388102][ T37] audit: type=1800 audit(1786767035.620:4270): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1211.466122][T19526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 1211.466146][T19526] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3576'. [ 1211.622066][ T37] audit: type=1800 audit(1786767035.851:4271): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1212.907164][ T37] audit: type=1800 audit(1786767037.205:4272): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1213.360501][ T37] audit: type=1800 audit(1786767037.687:4273): pid=19554 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3583" name="UDC" dev="configfs" ino=69495 res=0 errno=0 [ 1213.997200][ T37] audit: type=1800 audit(1786767038.359:4274): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1214.345983][T19563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3587'. [ 1214.346007][T19563] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3587'. [ 1216.691267][T19582] No source specified [ 1217.323712][ T5713] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1217.517366][ T5713] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1217.517424][ T5713] usb 7-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 1217.526299][ T5713] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.526326][ T5713] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1217.568977][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.569004][ T5713] usb 7-1: Product: syz [ 1217.569018][ T5713] usb 7-1: Manufacturer: syz [ 1217.569031][ T5713] usb 7-1: SerialNumber: syz [ 1217.637355][ T37] audit: type=1800 audit(1786767042.179:4275): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300151 res=0 errno=0 [ 1217.753122][ T37] audit: type=1800 audit(1786767042.263:4276): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=300183 res=0 errno=0 [ 1217.753175][ T37] audit: type=1800 audit(1786767042.263:4277): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=300158 res=0 errno=0 [ 1217.902476][ T37] audit: type=1800 audit(1786767042.452:4278): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=300159 res=0 errno=0 [ 1218.110103][T19585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3578'. [ 1218.739309][ T37] audit: type=1800 audit(1786767043.323:4279): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300212 res=0 errno=0 [ 1218.758639][ T37] audit: type=1800 audit(1786767043.344:4280): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300224 res=0 errno=0 [ 1218.787069][ T37] audit: type=1800 audit(1786767043.365:4281): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300236 res=0 errno=0 [ 1219.149294][ T37] audit: type=1800 audit(1786767043.763:4282): pid=19609 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3596" name="UDC" dev="configfs" ino=69645 res=0 errno=0 [ 1219.311603][ T37] audit: type=1800 audit(1786767043.931:4283): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=300180 res=0 errno=0 [ 1219.334392][ T37] audit: type=1800 audit(1786767043.952:4284): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=300181 res=0 errno=0 [ 1219.336669][ T5713] usb 7-1: USB disconnect, device number 17 [ 1219.336810][ T37] audit: type=1800 audit(1786767043.952:4285): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=300160 res=0 errno=0 [ 1219.528023][T17533] udevd[17533]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1219.789564][T19611] FAULT_INJECTION: forcing a failure. [ 1219.789564][T19611] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.789587][T19611] CPU: 0 UID: 0 PID: 19611 Comm: syz.5.3597 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1219.789607][T19611] Tainted: [L]=SOFTLOCKUP [ 1219.789611][T19611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1219.789618][T19611] Call Trace: [ 1219.789623][T19611] [ 1219.789628][T19611] dump_stack_lvl+0xe8/0x150 [ 1219.789651][T19611] should_fail_ex+0x467/0x600 [ 1219.789670][T19611] should_failslab+0xa8/0x100 [ 1219.789683][T19611] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1219.789700][T19611] ? __alloc_skb+0x1d7/0x7a0 [ 1219.789712][T19611] ? __alloc_skb+0x1d7/0x7a0 [ 1219.789725][T19611] __alloc_skb+0x1d7/0x7a0 [ 1219.789738][T19611] netlink_sendmsg+0x5d4/0xb40 [ 1219.789757][T19611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1219.789771][T19611] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1219.789786][T19611] ? __lock_acquire+0x683/0x2ce0 [ 1219.789797][T19611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1219.789809][T19611] sock_sendmsg_nosec+0x13a/0x180 [ 1219.789827][T19611] ____sys_sendmsg+0x565/0x870 [ 1219.789839][T19611] ? lockdep_hardirqs_on+0x7a/0x110 [ 1219.789856][T19611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1219.789873][T19611] ? import_iovec+0x73/0xa0 [ 1219.789886][T19611] ___sys_sendmsg+0x2a5/0x360 [ 1219.789898][T19611] ? __lock_acquire+0x683/0x2ce0 [ 1219.789909][T19611] ? __pfx____sys_sendmsg+0x10/0x10 [ 1219.789938][T19611] ? __fget_files+0x2a/0x420 [ 1219.789947][T19611] ? __fget_files+0x3a8/0x420 [ 1219.789962][T19611] __x64_sys_sendmsg+0x1b7/0x290 [ 1219.789975][T19611] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1219.789996][T19611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.790007][T19611] do_syscall_64+0x174/0x580 [ 1219.790021][T19611] ? clear_bhb_loop+0x70/0xc0 [ 1219.790033][T19611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.790043][T19611] RIP: 0033:0x7fdf0653e0d9 [ 1219.790054][T19611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.790063][T19611] RSP: 002b:00007fdf04796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1219.790074][T19611] RAX: ffffffffffffffda RBX: 00007fdf067c5fa0 RCX: 00007fdf0653e0d9 [ 1219.790082][T19611] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1219.790089][T19611] RBP: 00007fdf04796090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.790102][T19611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.790108][T19611] R13: 00007fdf067c6038 R14: 00007fdf067c5fa0 R15: 00007fff098fcaa8 [ 1219.790123][T19611] [ 1220.145453][T19618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3600'. [ 1220.145485][T19618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3600'. [ 1221.249268][T14764] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1222.572044][T14764] usb 7-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1222.576607][T14764] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.576627][T14764] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.576638][T14764] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1222.576709][T14764] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.598105][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1222.598121][ T37] audit: type=1800 audit(1786767047.373:4288): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300365 res=0 errno=0 [ 1222.603297][T14764] usb 7-1: config 0 descriptor?? [ 1222.647820][ T37] audit: type=1800 audit(1786767047.436:4289): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=300394 res=0 errno=0 [ 1222.681705][ T37] audit: type=1800 audit(1786767047.468:4290): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=300372 res=0 errno=0 [ 1222.735640][ T37] audit: type=1800 audit(1786767047.520:4291): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=300373 res=0 errno=0 [ 1222.756434][ T37] audit: type=1800 audit(1786767047.541:4292): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=300374 res=0 errno=0 [ 1222.933184][ T37] audit: type=1800 audit(1786767047.730:4293): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300414 res=0 errno=0 [ 1223.012810][T19636] No source specified [ 1223.178871][T14764] usbhid 7-1:0.0: can't add hid device: -71 [ 1223.178956][T14764] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1223.350760][T14764] usb 7-1: USB disconnect, device number 18 [ 1225.822555][ T37] audit: type=1800 audit(1786767050.679:4294): pid=19659 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3610" name="UDC" dev="configfs" ino=69756 res=0 errno=0 [ 1226.642889][T19664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3612'. [ 1226.642931][T19664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3612'. [ 1227.321223][T19673] futex_wake_op: syz.3.3615 tries to shift op by 144; fix this program [ 1227.426509][T19671] 0x000000000007-0x000000020000 : "" [ 1227.845015][T19671] ftl_cs: FTL header corrupt! [ 1228.274341][ T37] audit: type=1800 audit(1786767053.323:4295): pid=19676 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300466 res=0 errno=0 [ 1228.325006][ T37] audit: type=1800 audit(1786767053.386:4296): pid=19676 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=300478 res=0 errno=0 [ 1228.571467][ T37] audit: type=1800 audit(1786767053.649:4297): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300495 res=0 errno=0 [ 1228.754393][ T37] audit: type=1800 audit(1786767053.838:4298): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1229.006662][ T37] audit: type=1800 audit(1786767054.100:4299): pid=19679 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300507 res=0 errno=0 [ 1229.647286][ T37] audit: type=1800 audit(1786767054.772:4300): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1231.650403][ T37] audit: type=1800 audit(1786767056.870:4301): pid=19711 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.3622" name="UDC" dev="configfs" ino=69849 res=0 errno=0 [ 1233.482685][ T37] audit: type=1800 audit(1786767058.791:4302): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300878 res=0 errno=0 [ 1233.623987][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3625'. [ 1233.624010][T19721] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3625'. [ 1233.709839][ T37] audit: type=1800 audit(1786767059.032:4303): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300519 res=0 errno=0 [ 1234.845678][ T36] IPVS: starting estimator thread 0... [ 1235.120007][T19735] IPVS: using max 8 ests per chain, 19200 per kthread [ 1235.937923][ T37] audit: type=1800 audit(1786767061.372:4304): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1236.765817][ T37] audit: type=1800 audit(1786767062.243:4305): pid=19760 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.3635" name="UDC" dev="configfs" ino=70005 res=0 errno=0 [ 1237.395960][T19774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3638'. [ 1237.395990][T19774] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3638'. [ 1237.495619][T19777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.516882][T19777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.632467][ T37] audit: type=1800 audit(1786767063.156:4306): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1237.805210][T19784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.813847][T19784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.924255][ T5713] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1238.070437][ T5713] usb 3-1: New USB device found, idVendor=2019, idProduct=ed17, bcdDevice=a9.12 [ 1238.072408][ T5713] usb 3-1: config 16 has an invalid interface number: 247 but max is 0 [ 1238.072434][ T5713] usb 3-1: config 16 has an invalid interface number: 204 but max is 0 [ 1238.072455][ T5713] usb 3-1: config 16 contains an unexpected descriptor of type 0x1, skipping [ 1238.072473][ T5713] usb 3-1: config 16 has 2 interfaces, different from the descriptor's value: 1 [ 1238.072494][ T5713] usb 3-1: config 16 has no interface number 0 [ 1238.072509][ T5713] usb 3-1: config 16 has no interface number 1 [ 1238.072561][ T5713] usb 3-1: config 16 interface 247 altsetting 9 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1238.072588][ T5713] usb 3-1: config 16 interface 247 altsetting 9 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1238.072613][ T5713] usb 3-1: config 16 interface 247 altsetting 9 endpoint 0x9 has invalid maxpacket 1007, setting to 64 [ 1238.072638][ T5713] usb 3-1: config 16 interface 247 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 1238.072660][ T5713] usb 3-1: config 16 interface 247 altsetting 9 has 5 endpoint descriptors, different from the interface descriptor's value: 13 [ 1238.072685][ T5713] usb 3-1: too many endpoints for config 16 interface 204 altsetting 245: 83, using maximum allowed: 30 [ 1238.072741][ T5713] usb 3-1: config 16 interface 204 altsetting 245 has a duplicate endpoint with address 0x9, skipping [ 1238.072763][ T5713] usb 3-1: config 16 interface 204 altsetting 245 has a duplicate endpoint with address 0x8, skipping [ 1238.072786][ T5713] usb 3-1: config 16 interface 204 altsetting 245 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1238.072812][ T5713] usb 3-1: config 16 interface 204 altsetting 245 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1238.072838][ T5713] usb 3-1: config 16 interface 204 altsetting 245 has a duplicate endpoint with address 0xD, skipping [ 1238.072860][ T5713] usb 3-1: config 16 interface 204 altsetting 245 has a duplicate endpoint with address 0xD, skipping [ 1238.072881][ T5713] usb 3-1: config 16 interface 204 altsetting 245 has a duplicate endpoint with address 0x7, skipping [ 1238.072903][ T5713] usb 3-1: config 16 interface 204 altsetting 245 has a duplicate endpoint with address 0x8, skipping [ 1238.072924][ T5713] usb 3-1: config 16 interface 204 altsetting 245 has 8 endpoint descriptors, different from the interface descriptor's value: 83 [ 1238.072949][ T5713] usb 3-1: config 16 interface 247 has no altsetting 0 [ 1238.072967][ T5713] usb 3-1: config 16 interface 204 has no altsetting 0 [ 1238.123623][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.123649][ T5713] usb 3-1: Product: 廅狈亶섎롚烄ꮃ棥墷脄꺆ꠟ㟟㷡푍ꠂ䎳髅鎮쬿韗䭐燅傮︛変䇋턌ᄧ銀덏䝌럄ꇏ诸䄧䴠瀕띱ꄘᑚ齁萭澄╡㥚敮韌⧾첇䮒턁ꛎ濊ᨐ⼥릞❷䢶ᰈ夲㈊᳂턐삀₥࠯삱姀뭌嚺츁□ [ 1238.123677][ T5713] usb 3-1: Manufacturer: А [ 1238.357341][T19799] FAULT_INJECTION: forcing a failure. [ 1238.357341][T19799] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.357446][T19799] CPU: 0 UID: 0 PID: 19799 Comm: syz.5.3642 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1238.357474][T19799] Tainted: [L]=SOFTLOCKUP [ 1238.357481][T19799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1238.357493][T19799] Call Trace: [ 1238.357501][T19799] [ 1238.357509][T19799] dump_stack_lvl+0xe8/0x150 [ 1238.357544][T19799] should_fail_ex+0x467/0x600 [ 1238.357578][T19799] should_failslab+0xa8/0x100 [ 1238.357601][T19799] __kmalloc_noprof+0xfe/0x780 [ 1238.357622][T19799] ? io_uring_alloc_async_data+0x78/0x120 [ 1238.357648][T19799] ? io_uring_alloc_async_data+0x78/0x120 [ 1238.357683][T19799] io_uring_alloc_async_data+0x78/0x120 [ 1238.357713][T19799] __io_timeout_prep+0x35a/0x780 [ 1238.357739][T19799] ? io_check_restriction+0x53/0x1b0 [ 1238.357769][T19799] io_submit_sqes+0xbde/0x2310 [ 1238.357820][T19799] __se_sys_io_uring_enter+0x364/0x1bb0 [ 1238.357842][T19799] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1238.357880][T19799] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1238.357903][T19799] ? fput+0xa0/0xd0 [ 1238.357931][T19799] ? ksys_write+0x248/0x270 [ 1238.357955][T19799] ? __pfx_ksys_write+0x10/0x10 [ 1238.357982][T19799] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1238.358006][T19799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.358027][T19799] do_syscall_64+0x174/0x580 [ 1238.358049][T19799] ? trace_irq_disable+0x3b/0x140 [ 1238.358077][T19799] ? clear_bhb_loop+0x70/0xc0 [ 1238.358101][T19799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.358120][T19799] RIP: 0033:0x7fdf0653e0d9 [ 1238.358138][T19799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1238.358153][T19799] RSP: 002b:00007fdf04795fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1238.358175][T19799] RAX: ffffffffffffffda RBX: 00002000000002c0 RCX: 00007fdf0653e0d9 [ 1238.358189][T19799] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003 [ 1238.358201][T19799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000008 [ 1238.358212][T19799] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1238.358224][T19799] R13: 00007fdf067c6038 R14: 00007fdf067c5fa0 R15: 00007fff098fcaa8 [ 1238.358254][T19799] [ 1238.590139][ T37] audit: type=1800 audit(1786767064.101:4307): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300919 res=0 errno=0 [ 1238.597834][ T37] audit: type=1800 audit(1786767064.164:4308): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=300950 res=0 errno=0 [ 1240.066256][ T5713] usb 3-1: USB disconnect, device number 41 [ 1240.277898][ T37] audit: type=1800 audit(1786767065.927:4309): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=300926 res=0 errno=0 [ 1242.029864][ T37] audit: type=1800 audit(1786767067.763:4310): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1242.871987][ T37] audit: type=1800 audit(1786767068.655:4311): pid=19826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3647" name="UDC" dev="configfs" ino=70117 res=0 errno=0 [ 1243.261304][ T37] audit: type=1800 audit(1786767069.064:4312): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1243.506906][T19834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3650'. [ 1243.517425][T19834] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3650'. [ 1244.047689][ T37] audit: type=1800 audit(1786767069.883:4313): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1244.425960][ T5684] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1244.565909][ T5684] usb 3-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 1244.567421][ T5684] usb 3-1: config 3 has an invalid interface number: 3 but max is 1 [ 1244.567445][ T5684] usb 3-1: config 3 has an invalid interface number: 50 but max is 1 [ 1244.567464][ T5684] usb 3-1: config 3 has no interface number 0 [ 1244.567480][ T5684] usb 3-1: config 3 has no interface number 1 [ 1244.567520][ T5684] usb 3-1: config 3 interface 3 has no altsetting 0 [ 1244.567538][ T5684] usb 3-1: config 3 interface 50 has no altsetting 0 [ 1244.574048][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.574074][ T5684] usb 3-1: Product: syz [ 1244.574089][ T5684] usb 3-1: Manufacturer: syz [ 1244.574103][ T5684] usb 3-1: SerialNumber: syz [ 1244.687649][ T37] audit: type=1800 audit(1786767070.555:4314): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=301125 res=0 errno=0 [ 1244.734323][ T37] audit: type=1800 audit(1786767070.607:4315): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=301157 res=0 errno=0 [ 1244.778592][ T37] audit: type=1800 audit(1786767070.649:4316): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=301132 res=0 errno=0 [ 1244.808632][ T37] audit: type=1800 audit(1786767070.681:4317): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=301133 res=0 errno=0 [ 1244.896394][T19847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.907661][T19847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.946325][ T5684] usb 3-1: unknown number of interfaces: 2 [ 1244.952518][ T5684] usb 3-1: USB disconnect, device number 42 [ 1244.957407][ T37] audit: type=1800 audit(1786767070.848:4318): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=301154 res=0 errno=0 [ 1245.701434][ T37] audit: type=1800 audit(1786767071.594:4319): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1245.924004][T19859] IPv6: Can't replace route, no match found [ 1246.977594][ T37] audit: type=1800 audit(1786767072.958:4320): pid=19870 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3660" name="UDC" dev="configfs" ino=70192 res=0 errno=0 [ 1246.977647][ T37] audit: type=1800 audit(1786767072.968:4321): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1247.226234][T19876] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3664'. [ 1247.491330][T19885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3665'. [ 1247.491364][T19885] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3665'. [ 1247.815122][T19893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.815864][T19893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.082265][T19896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.086878][T19896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.160616][ T37] audit: type=1800 audit(1786767076.305:4322): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1250.298725][ T37] audit: type=1800 audit(1786767076.442:4323): pid=19913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3673" name="UDC" dev="configfs" ino=70277 res=0 errno=0 [ 1250.498797][T19918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.499293][T19918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.627612][T19918] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1250.634859][ T37] audit: type=1800 audit(1786767076.799:4324): pid=19918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3676" name="pm_test" dev="sysfs" ino=1415 res=0 errno=0 [ 1250.698419][ T37] audit: type=1800 audit(1786767076.862:4325): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1251.393354][ T37] audit: type=1800 audit(1786767077.586:4326): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1251.545671][T19932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3681'. [ 1251.545711][T19932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3681'. [ 1252.033370][ T37] audit: type=1800 audit(1786767078.268:4327): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1252.227601][T19946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.229159][T19951] futex_wake_op: syz.5.3685 tries to shift op by 144; fix this program [ 1252.232122][T19946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.307760][T19946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.308391][T19946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.545578][ T37] audit: type=1800 audit(1786767078.803:4328): pid=19959 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.3687" name="UDC" dev="configfs" ino=70439 res=0 errno=0 [ 1254.523218][T19973] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3693'. [ 1254.665633][T19975] fuse: Bad value for 'fd' [ 1254.776177][T19979] FAULT_INJECTION: forcing a failure. [ 1254.776177][T19979] name failslab, interval 1, probability 0, space 0, times 0 [ 1254.776223][T19979] CPU: 1 UID: 0 PID: 19979 Comm: syz.0.3694 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1254.776250][T19979] Tainted: [L]=SOFTLOCKUP [ 1254.776258][T19979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1254.776270][T19979] Call Trace: [ 1254.776278][T19979] [ 1254.776286][T19979] dump_stack_lvl+0xe8/0x150 [ 1254.776319][T19979] should_fail_ex+0x467/0x600 [ 1254.776354][T19979] should_failslab+0xa8/0x100 [ 1254.776378][T19979] __kmalloc_noprof+0xfe/0x780 [ 1254.776396][T19979] ? rcu_is_watching+0x15/0xb0 [ 1254.776420][T19979] ? tomoyo_realpath_from_path+0xef/0x640 [ 1254.776443][T19979] ? tomoyo_realpath_from_path+0xef/0x640 [ 1254.776473][T19979] tomoyo_realpath_from_path+0xef/0x640 [ 1254.776507][T19979] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1254.776541][T19979] tomoyo_path_number_perm+0x246/0x5f0 [ 1254.776574][T19979] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1254.776602][T19979] ? __lock_acquire+0x683/0x2ce0 [ 1254.776634][T19979] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1254.776657][T19979] ? hook_file_ioctl+0x1f3/0x600 [ 1254.776683][T19979] ? lockdep_hardirqs_on+0x7a/0x110 [ 1254.776724][T19979] ? __fget_files+0x2a/0x420 [ 1254.776748][T19979] ? __fget_files+0x2a/0x420 [ 1254.776766][T19979] ? __fget_files+0x3a8/0x420 [ 1254.776783][T19979] ? __fget_files+0x2a/0x420 [ 1254.776805][T19979] security_file_ioctl+0xc3/0x2a0 [ 1254.776828][T19979] __se_sys_ioctl+0x47/0x170 [ 1254.776853][T19979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.776875][T19979] do_syscall_64+0x174/0x580 [ 1254.776900][T19979] ? clear_bhb_loop+0x70/0xc0 [ 1254.776924][T19979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.776944][T19979] RIP: 0033:0x7f91beffe0d9 [ 1254.776963][T19979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1254.776979][T19979] RSP: 002b:00007f91bd256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1254.776999][T19979] RAX: ffffffffffffffda RBX: 00007f91bf285fa0 RCX: 00007f91beffe0d9 [ 1254.777015][T19979] RDX: 0000200000000000 RSI: 000000008010aa01 RDI: 0000000000000003 [ 1254.777029][T19979] RBP: 00007f91bd256090 R08: 0000000000000000 R09: 0000000000000000 [ 1254.777041][T19979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1254.777053][T19979] R13: 00007f91bf286038 R14: 00007f91bf285fa0 R15: 00007ffdebbccf58 [ 1254.777084][T19979] [ 1254.784966][T19979] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1255.347857][ T37] audit: type=1800 audit(1786767081.741:4329): pid=19988 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3698" name="UDC" dev="configfs" ino=70505 res=0 errno=0 [ 1256.810538][T19994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.811195][T19994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.905954][ T37] audit: type=1800 audit(1786767083.378:4330): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1256.985382][T19998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.990887][T19998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.075668][ T37] audit: type=1800 audit(1786767084.606:4331): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1258.516722][T20020] tipc: Enabling of bearer rejected, media not registered [ 1258.556707][T20021] binder: 20019:20021 ioctl 4018620d 0 returned -22 [ 1260.736216][ T9] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1260.909057][ T9] usb 7-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 1260.910887][ T9] usb 7-1: config 3 has an invalid interface number: 3 but max is 1 [ 1260.910914][ T9] usb 7-1: config 3 has an invalid interface number: 50 but max is 1 [ 1260.910934][ T9] usb 7-1: config 3 has no interface number 0 [ 1260.910951][ T9] usb 7-1: config 3 has no interface number 1 [ 1260.911093][ T9] usb 7-1: config 3 interface 3 has no altsetting 0 [ 1260.911112][ T9] usb 7-1: config 3 interface 50 has no altsetting 0 [ 1260.916108][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.916140][ T9] usb 7-1: Product: syz [ 1260.916153][ T9] usb 7-1: Manufacturer: syz [ 1260.916167][ T9] usb 7-1: SerialNumber: syz [ 1261.021297][ T37] audit: type=1800 audit(1786767087.702:4332): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=301515 res=0 errno=0 [ 1261.070930][ T37] audit: type=1800 audit(1786767087.733:4333): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=301547 res=0 errno=0 [ 1261.097336][ T37] audit: type=1800 audit(1786767087.775:4334): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=301522 res=0 errno=0 [ 1261.117906][ T37] audit: type=1800 audit(1786767087.796:4335): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=301523 res=0 errno=0 [ 1261.298540][T20035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.301367][T20035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.474837][ T9] usb 7-1: unknown number of interfaces: 2 [ 1261.501138][ T37] audit: type=1800 audit(1786767088.195:4336): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=301544 res=0 errno=0 [ 1261.501189][ T37] audit: type=1800 audit(1786767088.206:4337): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=301545 res=0 errno=0 [ 1261.506228][ T9] usb 7-1: USB disconnect, device number 19 [ 1261.517295][ T37] audit: type=1800 audit(1786767088.216:4338): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=301524 res=0 errno=0 [ 1261.580558][ T37] audit: type=1800 audit(1786767088.289:4339): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=301546 res=0 errno=0 [ 1262.571936][T20058] FAULT_INJECTION: forcing a failure. [ 1262.571936][T20058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1262.579887][T20058] CPU: 1 UID: 0 PID: 20058 Comm: syz.0.3718 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1262.579921][T20058] Tainted: [L]=SOFTLOCKUP [ 1262.579929][T20058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1262.579940][T20058] Call Trace: [ 1262.579949][T20058] [ 1262.579957][T20058] dump_stack_lvl+0xe8/0x150 [ 1262.579988][T20058] should_fail_ex+0x467/0x600 [ 1262.580020][T20058] _copy_from_user+0x2d/0xb0 [ 1262.580043][T20058] kstrtouint_from_user+0xd6/0x180 [ 1262.580072][T20058] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1262.580098][T20058] ? __lock_acquire+0x683/0x2ce0 [ 1262.580133][T20058] proc_fail_nth_write+0x8e/0x210 [ 1262.580153][T20058] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1262.580179][T20058] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1262.580197][T20058] vfs_write+0x29f/0xbb0 [ 1262.580226][T20058] ? __pfx_vfs_write+0x10/0x10 [ 1262.580251][T20058] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1262.580277][T20058] ? lockdep_hardirqs_on+0x7a/0x110 [ 1262.580299][T20058] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1262.580321][T20058] ? mutex_lock_nested+0x152/0x1d0 [ 1262.580348][T20058] ? fdget_pos+0x252/0x320 [ 1262.580374][T20058] ksys_write+0x156/0x270 [ 1262.580402][T20058] ? __pfx_ksys_write+0x10/0x10 [ 1262.580433][T20058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.580455][T20058] do_syscall_64+0x174/0x580 [ 1262.580479][T20058] ? trace_irq_disable+0x3b/0x140 [ 1262.580508][T20058] ? clear_bhb_loop+0x70/0xc0 [ 1262.580532][T20058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.580551][T20058] RIP: 0033:0x7f91befbe90e [ 1262.580570][T20058] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1262.580586][T20058] RSP: 002b:00007f91bd234fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1262.580608][T20058] RAX: ffffffffffffffda RBX: 00007f91bd2356c0 RCX: 00007f91befbe90e [ 1262.580624][T20058] RDX: 0000000000000001 RSI: 00007f91bd2350a0 RDI: 0000000000000004 [ 1262.580636][T20058] RBP: 00007f91bd235090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.580649][T20058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.580661][T20058] R13: 00007f91bf286128 R14: 00007f91bf286090 R15: 00007ffdebbccf58 [ 1262.580694][T20058] [ 1262.929350][ T37] audit: type=1800 audit(1786767089.685:4340): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1263.121997][ T37] audit: type=1800 audit(1786767089.906:4341): pid=20060 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3711" name="UDC" dev="configfs" ino=71688 res=0 errno=0 [ 1263.438577][T20073] binder: 20071:20073 ioctl 4018620d 0 returned -22 [ 1265.443638][ T5684] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1265.706649][ T5684] usb 7-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 1265.708216][ T5684] usb 7-1: config 3 has an invalid interface number: 3 but max is 1 [ 1265.708242][ T5684] usb 7-1: config 3 has an invalid interface number: 50 but max is 1 [ 1265.708261][ T5684] usb 7-1: config 3 has no interface number 0 [ 1265.708276][ T5684] usb 7-1: config 3 has no interface number 1 [ 1265.708318][ T5684] usb 7-1: config 3 interface 3 has no altsetting 0 [ 1265.708336][ T5684] usb 7-1: config 3 interface 50 has no altsetting 0 [ 1265.771090][ T5684] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.771117][ T5684] usb 7-1: Product: syz [ 1265.771132][ T5684] usb 7-1: Manufacturer: syz [ 1265.771156][ T5684] usb 7-1: SerialNumber: syz [ 1265.852194][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1265.852210][ T37] audit: type=1800 audit(1786767092.760:4344): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1265.889171][ T37] audit: type=1800 audit(1786767092.781:4345): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=301637 res=0 errno=0 [ 1265.926228][ T37] audit: type=1800 audit(1786767092.844:4346): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=301669 res=0 errno=0 [ 1265.952422][ T37] audit: type=1800 audit(1786767092.865:4347): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=301644 res=0 errno=0 [ 1265.985542][ T37] audit: type=1800 audit(1786767092.896:4348): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=301645 res=0 errno=0 [ 1266.155286][ T37] audit: type=1800 audit(1786767093.085:4349): pid=20099 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3731" name="UDC" dev="configfs" ino=71369 res=0 errno=0 [ 1266.252948][T20100] fuse: Bad value for 'fd' [ 1266.385029][T20105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.400030][T20105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.483743][ T5684] usb 7-1: unknown number of interfaces: 2 [ 1266.490475][ T37] audit: type=1800 audit(1786767093.432:4350): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=301666 res=0 errno=0 [ 1266.499046][ T37] audit: type=1800 audit(1786767093.442:4351): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=301667 res=0 errno=0 [ 1266.521301][ T37] audit: type=1800 audit(1786767093.463:4352): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=301646 res=0 errno=0 [ 1266.562097][ T5684] usb 7-1: USB disconnect, device number 20 [ 1266.568711][ T37] audit: type=1800 audit(1786767093.515:4353): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=301668 res=0 errno=0 [ 1266.999217][T20115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3737'. [ 1267.382940][T20112] FAULT_INJECTION: forcing a failure. [ 1267.382940][T20112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1267.382980][T20112] CPU: 1 UID: 0 PID: 20112 Comm: syz.5.3736 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1267.383007][T20112] Tainted: [L]=SOFTLOCKUP [ 1267.383014][T20112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1267.383026][T20112] Call Trace: [ 1267.383034][T20112] [ 1267.383043][T20112] dump_stack_lvl+0xe8/0x150 [ 1267.383075][T20112] should_fail_ex+0x467/0x600 [ 1267.383107][T20112] _copy_to_iter+0x404/0x1810 [ 1267.383138][T20112] ? lockdep_hardirqs_on+0x7a/0x110 [ 1267.383168][T20112] ? __pfx__copy_to_iter+0x10/0x10 [ 1267.383194][T20112] ? reacquire_held_locks+0x104/0x190 [ 1267.383226][T20112] ? rt_spin_unlock+0x157/0x200 [ 1267.383245][T20112] __skb_datagram_iter+0xf8/0x980 [ 1267.383270][T20112] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1267.383301][T20112] skb_copy_datagram_iter+0xb5/0x240 [ 1267.383329][T20112] packet_recvmsg+0x792/0x17e0 [ 1267.383354][T20112] ? __lock_acquire+0x683/0x2ce0 [ 1267.383382][T20112] ? do_raw_spin_lock+0x12b/0x2f0 [ 1267.383408][T20112] ? __pfx_packet_recvmsg+0x10/0x10 [ 1267.383434][T20112] ? unwind_next_frame+0x8f/0x2550 [ 1267.383457][T20112] ? __lock_acquire+0x683/0x2ce0 [ 1267.383477][T20112] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1267.383509][T20112] ? security_socket_recvmsg+0x7e/0x2c0 [ 1267.383537][T20112] ? __pfx_packet_recvmsg+0x10/0x10 [ 1267.383563][T20112] sock_recvmsg+0x196/0x1e0 [ 1267.383595][T20112] ____sys_recvmsg+0x1f2/0x4b0 [ 1267.383626][T20112] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1267.383666][T20112] ? import_iovec+0x73/0xa0 [ 1267.383691][T20112] ___sys_recvmsg+0x213/0x5a0 [ 1267.383719][T20112] ? __pfx____sys_recvmsg+0x10/0x10 [ 1267.383749][T20112] ? __fget_files+0x2a/0x420 [ 1267.383784][T20112] ? __fget_files+0x3a8/0x420 [ 1267.383813][T20112] do_recvmmsg+0x320/0x7f0 [ 1267.383845][T20112] ? __pfx_do_recvmmsg+0x10/0x10 [ 1267.383870][T20112] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1267.383903][T20112] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1267.383945][T20112] __x64_sys_recvmmsg+0x198/0x250 [ 1267.383974][T20112] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1267.384008][T20112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.384030][T20112] do_syscall_64+0x174/0x580 [ 1267.384054][T20112] ? clear_bhb_loop+0x70/0xc0 [ 1267.384079][T20112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.384098][T20112] RIP: 0033:0x7fdf0653e0d9 [ 1267.384118][T20112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.384134][T20112] RSP: 002b:00007fdf04796028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1267.384156][T20112] RAX: ffffffffffffffda RBX: 00007fdf067c5fa0 RCX: 00007fdf0653e0d9 [ 1267.384171][T20112] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000003 [ 1267.384184][T20112] RBP: 00007fdf04796090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.384197][T20112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.384209][T20112] R13: 00007fdf067c6038 R14: 00007fdf067c5fa0 R15: 00007fff098fcaa8 [ 1267.384239][T20112] [ 1268.096432][T20125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3740'. [ 1268.136589][T20127] binder: 20126:20127 ioctl 4018620d 0 returned -22 [ 1268.607347][ T5684] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1268.839479][ T5684] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1268.839536][ T5684] usb 7-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 1268.842836][ T5684] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.842861][ T5684] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1268.881653][ T5684] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.881681][ T5684] usb 7-1: Product: syz [ 1268.881696][ T5684] usb 7-1: Manufacturer: syz [ 1268.881710][ T5684] usb 7-1: SerialNumber: syz [ 1269.293746][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3742'. [ 1270.718424][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1270.718500][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1271.121178][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1271.121199][ T37] audit: type=1800 audit(1786767098.280:4361): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1271.255175][T20153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.273522][T20153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.646709][ T37] audit: type=1800 audit(1786767098.815:4362): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1271.702906][ T37] audit: type=1800 audit(1786767098.909:4363): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=301788 res=0 errno=0 [ 1271.702956][ T37] audit: type=1800 audit(1786767098.909:4364): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=301789 res=0 errno=0 [ 1271.721025][ T5684] usb 7-1: USB disconnect, device number 21 [ 1271.725070][ T37] audit: type=1800 audit(1786767098.920:4365): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=301768 res=0 errno=0 [ 1271.933092][ T37] audit: type=1800 audit(1786767099.140:4366): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=301790 res=0 errno=0 [ 1272.148390][T19995] udevd[19995]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1273.190927][ T5713] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1273.195276][ T37] audit: type=1800 audit(1786767100.473:4367): pid=20186 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3757" name="UDC" dev="configfs" ino=71455 res=0 errno=0 [ 1273.329583][T20190] FAULT_INJECTION: forcing a failure. [ 1273.329583][T20190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.329685][T20190] CPU: 0 UID: 0 PID: 20190 Comm: syz.5.3758 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1273.329713][T20190] Tainted: [L]=SOFTLOCKUP [ 1273.329721][T20190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1273.329734][T20190] Call Trace: [ 1273.329742][T20190] [ 1273.329751][T20190] dump_stack_lvl+0xe8/0x150 [ 1273.329787][T20190] should_fail_ex+0x467/0x600 [ 1273.329821][T20190] _copy_from_user+0x2d/0xb0 [ 1273.329845][T20190] kstrtouint_from_user+0xd6/0x180 [ 1273.329878][T20190] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1273.329904][T20190] ? __lock_acquire+0x683/0x2ce0 [ 1273.329941][T20190] proc_fail_nth_write+0x8e/0x210 [ 1273.329964][T20190] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1273.329994][T20190] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1273.330015][T20190] vfs_write+0x29f/0xbb0 [ 1273.330048][T20190] ? __pfx_vfs_write+0x10/0x10 [ 1273.330074][T20190] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1273.330099][T20190] ? lockdep_hardirqs_on+0x7a/0x110 [ 1273.330123][T20190] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1273.330147][T20190] ? mutex_lock_nested+0x152/0x1d0 [ 1273.330176][T20190] ? fdget_pos+0x252/0x320 [ 1273.330205][T20190] ksys_write+0x156/0x270 [ 1273.330231][T20190] ? __pfx_ksys_write+0x10/0x10 [ 1273.330264][T20190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.330286][T20190] do_syscall_64+0x174/0x580 [ 1273.330310][T20190] ? trace_irq_disable+0x3b/0x140 [ 1273.330346][T20190] ? clear_bhb_loop+0x70/0xc0 [ 1273.330371][T20190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.330390][T20190] RIP: 0033:0x7fdf064fe90e [ 1273.330409][T20190] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1273.330426][T20190] RSP: 002b:00007fdf04774fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1273.330447][T20190] RAX: ffffffffffffffda RBX: 00007fdf047756c0 RCX: 00007fdf064fe90e [ 1273.330463][T20190] RDX: 0000000000000001 RSI: 00007fdf047750a0 RDI: 0000000000000004 [ 1273.330476][T20190] RBP: 00007fdf04775090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.330489][T20190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.330502][T20190] R13: 00007fdf067c6128 R14: 00007fdf067c6090 R15: 00007fff098fcaa8 [ 1273.330535][T20190] [ 1273.401032][ T5713] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1273.401088][ T5713] usb 7-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 1273.407679][ T5713] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.407706][ T5713] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1273.431937][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.431965][ T5713] usb 7-1: Product: syz [ 1273.431979][ T5713] usb 7-1: Manufacturer: syz [ 1273.431993][ T5713] usb 7-1: SerialNumber: syz [ 1273.473926][ T37] audit: type=1800 audit(1786767100.767:4368): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302020 res=0 errno=0 [ 1273.503607][ T37] audit: type=1800 audit(1786767100.798:4369): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=302052 res=0 errno=0 [ 1273.520859][ T37] audit: type=1800 audit(1786767100.819:4370): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=302027 res=0 errno=0 [ 1275.463413][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3756'. [ 1275.693912][T20201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3749'. [ 1275.694011][T20201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3749'. [ 1275.810198][T20203] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3762'. [ 1276.116441][ T36] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1276.330653][ T36] usb 4-1: New USB device found, idVendor=2019, idProduct=ed17, bcdDevice=a9.12 [ 1276.335306][ T36] usb 4-1: config 16 has an invalid interface number: 247 but max is 0 [ 1276.335497][ T36] usb 4-1: config 16 has no interface number 0 [ 1276.335538][ T36] usb 4-1: config 16 interface 247 has no altsetting 0 [ 1276.380790][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.380874][ T36] usb 4-1: Product: 廅狈亶섎롚烄ꮃ棥墷脄꺆ꠟ㟟㷡푍ꠂ䎳髅鎮쬿韗䭐燅傮︛変䇋턌ᄧ銀덏䝌럄ꇏ诸䄧䴠瀕띱ꄘᑚ齁萭澄╡㥚敮韌⧾첇䮒턁ꛎ濊ᨐ⼥릞❷䢶ᰈ夲㈊᳂턐삀₥࠯삱姀뭌嚺츁□ [ 1276.380903][ T36] usb 4-1: Manufacturer: А [ 1276.578866][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1276.578885][ T37] audit: type=1800 audit(1786767104.020:4372): pid=20044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302089 res=0 errno=0 [ 1276.718781][T20209] futex_wake_op: syz.5.3764 tries to shift op by 144; fix this program [ 1276.815217][ T37] audit: type=1800 audit(1786767104.272:4373): pid=20044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=302120 res=0 errno=0 [ 1276.835534][ T37] audit: type=1800 audit(1786767104.293:4374): pid=20044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=302096 res=0 errno=0 [ 1276.849777][ T37] audit: type=1800 audit(1786767104.303:4375): pid=20044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=302097 res=0 errno=0 [ 1276.994740][ T37] audit: type=1800 audit(1786767104.461:4376): pid=20044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=302118 res=0 errno=0 [ 1277.043475][ T36] usb 4-1: USB disconnect, device number 79 [ 1277.051131][ T37] audit: type=1800 audit(1786767104.503:4377): pid=20044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=302119 res=0 errno=0 [ 1277.103586][ T37] audit: type=1800 audit(1786767104.576:4378): pid=20044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=302098 res=0 errno=0 [ 1277.921412][ T37] audit: type=1800 audit(1786767105.437:4379): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=302049 res=0 errno=0 [ 1277.928347][ T5713] usb 7-1: USB disconnect, device number 22 [ 1277.993722][ T37] audit: type=1800 audit(1786767105.510:4380): pid=20230 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.3769" name="UDC" dev="configfs" ino=71521 res=0 errno=0 [ 1278.006560][T20229] sg_write: data in/out 266204/136 bytes for SCSI command 0x0-- guessing data in; [ 1278.006560][T20229] program syz.6.3768 not setting count and/or reply_len properly [ 1278.033982][ T37] audit: type=1800 audit(1786767105.552:4381): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=302050 res=0 errno=0 [ 1278.361005][T19995] udevd[19995]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1280.531563][T20256] futex_wake_op: syz.2.3775 tries to shift op by 144; fix this program [ 1280.647802][T20257] 0x000000000007-0x000000020000 : "" [ 1280.838055][T20257] ftl_cs: FTL header corrupt! [ 1281.988118][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1281.988265][ T37] audit: type=1800 audit(1786767109.666:4386): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302284 res=0 errno=0 [ 1281.988494][ T37] audit: type=1800 audit(1786767109.676:4387): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302325 res=0 errno=0 [ 1282.101187][ T37] audit: type=1800 audit(1786767109.823:4388): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=302296 res=0 errno=0 [ 1282.115516][ T37] audit: type=1800 audit(1786767109.834:4389): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302448 res=0 errno=0 [ 1282.144896][ T37] audit: type=1800 audit(1786767109.865:4390): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302313 res=0 errno=0 [ 1282.172825][ T37] audit: type=1800 audit(1786767109.897:4391): pid=20217 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302337 res=0 errno=0 [ 1283.136126][ T37] audit: type=1800 audit(1786767110.894:4392): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1283.699255][ T37] audit: type=1800 audit(1786767111.492:4393): pid=20282 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3781" name="UDC" dev="configfs" ino=72054 res=0 errno=0 [ 1283.741207][ T5713] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1283.867200][ T37] audit: type=1800 audit(1786767111.670:4394): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1283.900824][ T5713] usb 7-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 1283.904082][ T5713] usb 7-1: config 3 has an invalid interface number: 3 but max is 1 [ 1283.904110][ T5713] usb 7-1: config 3 has an invalid interface number: 50 but max is 1 [ 1283.904128][ T5713] usb 7-1: config 3 has no interface number 0 [ 1283.904143][ T5713] usb 7-1: config 3 has no interface number 1 [ 1283.904180][ T5713] usb 7-1: config 3 interface 3 has no altsetting 0 [ 1283.904198][ T5713] usb 7-1: config 3 interface 50 has no altsetting 0 [ 1283.935042][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.935068][ T5713] usb 7-1: Product: syz [ 1283.935082][ T5713] usb 7-1: Manufacturer: syz [ 1283.935096][ T5713] usb 7-1: SerialNumber: syz [ 1284.016070][ T37] audit: type=1800 audit(1786767111.828:4395): pid=20044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302554 res=0 errno=0 [ 1284.418523][T20286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.501432][T20286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.590463][ T5713] usb 7-1: unknown number of interfaces: 2 [ 1284.626079][ T5713] usb 7-1: USB disconnect, device number 23 [ 1284.940546][ T36] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1286.128410][ T36] usb 3-1: device descriptor read/64, error -71 [ 1286.162247][T20304] FAULT_INJECTION: forcing a failure. [ 1286.162247][T20304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1286.162284][T20304] CPU: 1 UID: 0 PID: 20304 Comm: syz.5.3787 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1286.162311][T20304] Tainted: [L]=SOFTLOCKUP [ 1286.162318][T20304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1286.162330][T20304] Call Trace: [ 1286.162338][T20304] [ 1286.162347][T20304] dump_stack_lvl+0xe8/0x150 [ 1286.162381][T20304] should_fail_ex+0x467/0x600 [ 1286.162415][T20304] _copy_from_user+0x2d/0xb0 [ 1286.162438][T20304] ipv6_flowlabel_opt+0x153/0x2420 [ 1286.162467][T20304] ? do_raw_spin_lock+0x12b/0x2f0 [ 1286.162499][T20304] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1286.162525][T20304] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1286.162552][T20304] ? lockdep_hardirqs_on+0x7a/0x110 [ 1286.162576][T20304] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1286.162600][T20304] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1286.162635][T20304] ? __local_bh_enable+0x1e1/0x2f0 [ 1286.162662][T20304] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1286.162684][T20304] ? lockdep_hardirqs_on+0x7a/0x110 [ 1286.162715][T20304] do_ipv6_setsockopt+0xdff/0x3180 [ 1286.162746][T20304] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1286.162767][T20304] ? get_pid_task+0x20/0x1f0 [ 1286.162803][T20304] ? __lock_acquire+0x683/0x2ce0 [ 1286.162837][T20304] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1286.162862][T20304] ? lockdep_hardirqs_on+0x7a/0x110 [ 1286.162888][T20304] ? __fget_files+0x2a/0x420 [ 1286.162918][T20304] ? __fget_files+0x2a/0x420 [ 1286.162941][T20304] ipv6_setsockopt+0x59/0x170 [ 1286.162964][T20304] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1286.162997][T20304] do_sock_setsockopt+0x17c/0x1b0 [ 1286.163024][T20304] __x64_sys_setsockopt+0x143/0x1b0 [ 1286.163049][T20304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.163071][T20304] do_syscall_64+0x174/0x580 [ 1286.163094][T20304] ? trace_irq_disable+0x3b/0x140 [ 1286.163123][T20304] ? clear_bhb_loop+0x70/0xc0 [ 1286.163148][T20304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.163167][T20304] RIP: 0033:0x7fdf0653e0d9 [ 1286.163185][T20304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.163201][T20304] RSP: 002b:00007fdf04775028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1286.163221][T20304] RAX: ffffffffffffffda RBX: 00007fdf067c6090 RCX: 00007fdf0653e0d9 [ 1286.163235][T20304] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 1286.163248][T20304] RBP: 00007fdf04775090 R08: 0000000000000020 R09: 0000000000000000 [ 1286.163260][T20304] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1286.163273][T20304] R13: 00007fdf067c6128 R14: 00007fdf067c6090 R15: 00007fff098fcaa8 [ 1286.163305][T20304] [ 1286.352510][ T36] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1286.486043][ T36] usb 3-1: device descriptor read/64, error -71 [ 1286.589553][ T36] usb usb3-port1: attempt power cycle [ 1286.615319][T20306] binder: 20305:20306 ioctl c0306201 0 returned -14 [ 1286.922609][ T36] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1286.942494][ T36] usb 3-1: device descriptor read/8, error -71 [ 1287.189748][ T36] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1287.222185][ T36] usb 3-1: device descriptor read/8, error -71 [ 1287.327950][ T36] usb usb3-port1: unable to enumerate USB device [ 1287.795834][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 1287.795854][ T37] audit: type=1800 audit(1786767115.784:4405): pid=20321 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3795" name="UDC" dev="configfs" ino=72120 res=0 errno=0 [ 1287.849667][ T37] audit: type=1800 audit(1786767115.857:4406): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302753 res=0 errno=0 [ 1288.006279][ T37] audit: type=1800 audit(1786767115.994:4407): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302764 res=0 errno=0 [ 1288.125407][T20322] FAULT_INJECTION: forcing a failure. [ 1288.125407][T20322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1288.125444][T20322] CPU: 1 UID: 0 PID: 20322 Comm: syz.6.3796 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1288.125472][T20322] Tainted: [L]=SOFTLOCKUP [ 1288.125479][T20322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1288.125492][T20322] Call Trace: [ 1288.125499][T20322] [ 1288.125508][T20322] dump_stack_lvl+0xe8/0x150 [ 1288.125540][T20322] should_fail_ex+0x467/0x600 [ 1288.125573][T20322] _copy_from_iter+0x1d3/0x1660 [ 1288.125604][T20322] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1288.125631][T20322] ? __pfx_policy_nodemask+0x10/0x10 [ 1288.125654][T20322] ? unwind_next_frame+0x8f/0x2550 [ 1288.125676][T20322] ? __pfx__copy_from_iter+0x10/0x10 [ 1288.125710][T20322] ? alloc_pages_mpol+0x115/0x280 [ 1288.125742][T20322] copy_page_from_iter+0x219/0x2d0 [ 1288.125764][T20322] tun_get_user+0x1b68/0x4380 [ 1288.125793][T20322] ? is_bpf_text_address+0x292/0x2b0 [ 1288.125816][T20322] ? tun_get_user+0x6e7/0x4380 [ 1288.125862][T20322] ? __pfx_tun_get_user+0x10/0x10 [ 1288.125894][T20322] ? __lock_acquire+0x683/0x2ce0 [ 1288.125927][T20322] ? ref_tracker_alloc+0x353/0x4c0 [ 1288.125962][T20322] ? get_pid_task+0x20/0x1f0 [ 1288.125991][T20322] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1288.126021][T20322] ? tun_get+0x1c/0x2f0 [ 1288.126050][T20322] ? tun_get+0x1c/0x2f0 [ 1288.126082][T20322] ? tun_get+0x1c/0x2f0 [ 1288.126110][T20322] ? tun_get+0x1c/0x2f0 [ 1288.126141][T20322] tun_chr_write_iter+0x119/0x200 [ 1288.126171][T20322] vfs_write+0x61e/0xbb0 [ 1288.126204][T20322] ? __pfx_vfs_write+0x10/0x10 [ 1288.126237][T20322] ? __fget_files+0x2a/0x420 [ 1288.126265][T20322] ksys_write+0x156/0x270 [ 1288.126290][T20322] ? __pfx_ksys_write+0x10/0x10 [ 1288.126322][T20322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.126344][T20322] do_syscall_64+0x174/0x580 [ 1288.126367][T20322] ? trace_irq_disable+0x3b/0x140 [ 1288.126397][T20322] ? clear_bhb_loop+0x70/0xc0 [ 1288.126421][T20322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.126441][T20322] RIP: 0033:0x7f35f071e90e [ 1288.126460][T20322] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1288.126476][T20322] RSP: 002b:00007f35ee9b5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1288.126498][T20322] RAX: ffffffffffffffda RBX: 00007f35ee9b66c0 RCX: 00007f35f071e90e [ 1288.126513][T20322] RDX: 0000000000000036 RSI: 0000200000000040 RDI: 00000000000000c8 [ 1288.126527][T20322] RBP: 00007f35ee9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.126540][T20322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1288.126552][T20322] R13: 00007f35f09e6038 R14: 00007f35f09e5fa0 R15: 00007fff2b62c5b8 [ 1288.126587][T20322] [ 1288.395958][ T5586] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1288.562725][ T5586] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1288.570593][ T5586] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1288.575748][ T5586] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1288.580024][ T5586] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1288.698642][ T37] audit: type=1800 audit(1786767116.749:4408): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302783 res=0 errno=0 [ 1290.379850][ T37] audit: type=1800 audit(1786767118.502:4409): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15294 res=0 errno=0 [ 1290.436043][ T37] audit: type=1800 audit(1786767118.565:4410): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302794 res=0 errno=0 [ 1290.830269][T13665] Bluetooth: hci6: command tx timeout [ 1292.223534][ T5713] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 1292.296883][ T5713] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 1292.811570][ C1] ------------[ cut here ]------------ [ 1292.811586][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci6 [ 1292.811624][ C1] WARNING: kernel/workqueue.c:2306 at __queue_work+0xd91/0x10f0, CPU#1: ktimers/1/29 [ 1292.811669][ C1] Modules linked in: [ 1292.811697][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1292.811726][ C1] Tainted: [L]=SOFTLOCKUP [ 1292.811733][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1292.811746][ C1] RIP: 0010:__queue_work+0xdae/0x10f0 [ 1292.811773][ C1] Code: 81 c3 68 01 00 00 4c 8d 35 cf c8 24 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 fc 74 a1 00 49 8b 77 18 4c 89 f7 48 89 da <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff [ 1292.811791][ C1] RSP: 0018:ffffc90000a3f990 EFLAGS: 00010046 [ 1292.811810][ C1] RAX: 1ffff1100f88b953 RBX: ffff88805599b968 RCX: ffff88801d2b3e00 [ 1292.811827][ C1] RDX: ffff88805599b968 RSI: ffffffff8a36cac0 RDI: ffffffff8fb29290 [ 1292.811844][ C1] RBP: 0000000000000100 R08: 0000000000000000 R09: 0000000000000100 [ 1292.811858][ C1] R10: dffffc0000000000 R11: ffffffff818dd0f0 R12: dffffc0000000000 [ 1292.811875][ C1] R13: 0000000000000008 R14: ffffffff8fb29290 R15: ffff88807c45ca80 [ 1292.811890][ C1] FS: 0000000000000000(0000) GS:ffff888125d3a000(0000) knlGS:0000000000000000 [ 1292.811906][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1292.811919][ C1] CR2: 00007fadaf3aaa10 CR3: 00000000417ae000 CR4: 00000000003526f0 [ 1292.811935][ C1] Call Trace: [ 1292.811944][ C1] [ 1292.811954][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1292.811996][ C1] call_timer_fn+0x192/0x5e0 [ 1292.812021][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1292.812056][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1292.812078][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1292.812105][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1292.812126][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1292.812157][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1292.812186][ C1] __run_timer_base+0x73c/0x9b0 [ 1292.812222][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1292.812244][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1292.812268][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1292.812297][ C1] run_timer_softirq+0xb7/0x170 [ 1292.812318][ C1] handle_softirqs+0x1d9/0x6c0 [ 1292.812356][ C1] run_ktimerd+0x69/0x100 [ 1292.812384][ C1] smpboot_thread_fn+0x57c/0xa80 [ 1292.812416][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 1292.812451][ C1] kthread+0x388/0x470 [ 1292.812483][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1292.812509][ C1] ? __pfx_kthread+0x10/0x10 [ 1292.812543][ C1] ret_from_fork+0x514/0xb70 [ 1292.812577][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1292.812605][ C1] ? __switch_to+0xc89/0x1420 [ 1292.812632][ C1] ? __pfx_kthread+0x10/0x10 [ 1292.812663][ C1] ret_from_fork_asm+0x1a/0x30 [ 1292.812714][ C1] [ 1292.812736][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1292.812754][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1292.812782][ C1] Tainted: [L]=SOFTLOCKUP [ 1292.812790][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1292.812801][ C1] Call Trace: [ 1292.812809][ C1] [ 1292.812818][ C1] vpanic+0x56c/0xa60 [ 1292.812853][ C1] ? __pfx__printk+0x10/0x10 [ 1292.812877][ C1] ? __pfx_vpanic+0x10/0x10 [ 1292.812906][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1292.812930][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1292.812962][ C1] panic+0xc5/0xd0 [ 1292.812993][ C1] ? __pfx_panic+0x10/0x10 [ 1292.813035][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1292.813084][ C1] __warn+0x315/0x4c0 [ 1292.813117][ C1] ? __queue_work+0xd91/0x10f0 [ 1292.813146][ C1] ? __queue_work+0xd91/0x10f0 [ 1292.813173][ C1] __report_bug+0x276/0x570 [ 1292.813206][ C1] ? __queue_work+0xd91/0x10f0 [ 1292.813236][ C1] ? __pfx___report_bug+0x10/0x10 [ 1292.813262][ C1] ? try_to_take_rt_mutex+0x842/0xb00 [ 1292.813285][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1292.813315][ C1] ? look_up_lock_class+0x57/0x110 [ 1292.813343][ C1] ? register_lock_class+0x31/0x2e0 [ 1292.813364][ C1] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 1292.813394][ C1] report_bug_entry+0x19a/0x290 [ 1292.813423][ C1] ? __queue_work+0xdae/0x10f0 [ 1292.813447][ C1] ? __queue_work+0xdb3/0x10f0 [ 1292.813473][ C1] handle_bug+0xce/0x200 [ 1292.813503][ C1] exc_invalid_op+0x1a/0x50 [ 1292.813534][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1292.813556][ C1] RIP: 0010:__queue_work+0xdae/0x10f0 [ 1292.813583][ C1] Code: 81 c3 68 01 00 00 4c 8d 35 cf c8 24 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 fc 74 a1 00 49 8b 77 18 4c 89 f7 48 89 da <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff [ 1292.813602][ C1] RSP: 0018:ffffc90000a3f990 EFLAGS: 00010046 [ 1292.813622][ C1] RAX: 1ffff1100f88b953 RBX: ffff88805599b968 RCX: ffff88801d2b3e00 [ 1292.813640][ C1] RDX: ffff88805599b968 RSI: ffffffff8a36cac0 RDI: ffffffff8fb29290 [ 1292.813657][ C1] RBP: 0000000000000100 R08: 0000000000000000 R09: 0000000000000100 [ 1292.813671][ C1] R10: dffffc0000000000 R11: ffffffff818dd0f0 R12: dffffc0000000000 [ 1292.813689][ C1] R13: 0000000000000008 R14: ffffffff8fb29290 R15: ffff88807c45ca80 [ 1292.813710][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1292.813742][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1292.813770][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1292.813808][ C1] call_timer_fn+0x192/0x5e0 [ 1292.813834][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1292.813860][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1292.813885][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1292.813918][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1292.813946][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1292.813980][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1292.814008][ C1] __run_timer_base+0x73c/0x9b0 [ 1292.814054][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1292.814084][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1292.814111][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1292.814143][ C1] run_timer_softirq+0xb7/0x170 [ 1292.814168][ C1] handle_softirqs+0x1d9/0x6c0 [ 1292.814205][ C1] run_ktimerd+0x69/0x100 [ 1292.814234][ C1] smpboot_thread_fn+0x57c/0xa80 [ 1292.814265][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 1292.814303][ C1] kthread+0x388/0x470 [ 1292.814334][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1292.814361][ C1] ? __pfx_kthread+0x10/0x10 [ 1292.814392][ C1] ret_from_fork+0x514/0xb70 [ 1292.814428][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1292.814461][ C1] ? __switch_to+0xc89/0x1420 [ 1292.814493][ C1] ? __pfx_kthread+0x10/0x10 [ 1292.814523][ C1] ret_from_fork_asm+0x1a/0x30 [ 1292.814570][ C1] [ 1292.814838][ C1] Kernel Offset: disabled