last executing test programs: 16m40.437560461s ago: executing program 3 (id=1523): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x356, 0x0, 0x780, 0x528, 0x0, 0x0, 0x0, 0x2, {0x7a8213fc, 0x7}, {0x27, 0x3, 0x1}, {0x401, 0x5}, {0xffffff43, 0x4, 0x1}, 0x1, 0x0, 0x3, 0x1, 0x1, 0x6e, 0x10, 0x12, 0x803, 0x80, 0x8f2c, 0x8, 0x8, 0x4, 0x1, 0x6}) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x10, 0x800) recvmmsg(r1, &(0x7f00000056c0)=[{{&(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, &(0x7f00000002c0)=""/39, 0x27}, 0xb92}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/223, 0xdf}], 0x1, &(0x7f0000000440)=""/196, 0xc4}, 0x8}, {{&(0x7f0000000540)=@nl=@unspec, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000005c0)=""/32, 0x20}, {&(0x7f0000000600)=""/159, 0x9f}, {&(0x7f00000006c0)=""/1, 0x1}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/164, 0xa4}, {&(0x7f00000017c0)=""/234, 0xea}, {&(0x7f00000018c0)=""/13, 0xd}, {&(0x7f0000001900)=""/219, 0xdb}, {&(0x7f0000001a00)=""/186, 0xba}, {&(0x7f0000001ac0)=""/229, 0xe5}], 0xa, &(0x7f0000001c80)=""/69, 0x45}, 0x5}, {{&(0x7f0000001d00)=@x25, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001d80)=""/255, 0xff}, {&(0x7f0000001e80)=""/247, 0xf7}], 0x2, &(0x7f0000001fc0)=""/40, 0x28}, 0x4}, {{&(0x7f0000002000)=@nfc, 0x80, &(0x7f0000003480)=[{&(0x7f0000002080)=""/246, 0xf6}, {&(0x7f0000002180)=""/86, 0x56}, {&(0x7f0000002200)=""/131, 0x83}, {&(0x7f00000022c0)=""/252, 0xfc}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/178, 0xb2}], 0x6, &(0x7f0000003500)=""/184, 0xb8}, 0x2}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f00000035c0)=""/12, 0xc}, {&(0x7f0000003600)=""/99, 0x63}, {&(0x7f0000003680)=""/125, 0x7d}], 0x3, &(0x7f0000003740)=""/144, 0x90}, 0x6}, {{&(0x7f0000003800)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003880)=""/1, 0x1}, {&(0x7f00000038c0)=""/48, 0x30}, {&(0x7f0000003900)=""/222, 0xde}, {&(0x7f0000003a00)=""/185, 0xb9}, {&(0x7f0000003ac0)=""/52, 0x34}], 0x5, &(0x7f0000003b80)=""/214, 0xd6}}, {{&(0x7f0000003c80)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003d00)=""/136, 0x88}, {&(0x7f0000003dc0)=""/148, 0x94}, {&(0x7f0000003e80)=""/150, 0x96}, {&(0x7f0000003f40)=""/57, 0x39}], 0x4, &(0x7f0000003fc0)=""/153, 0x99}, 0x6}, {{0x0, 0x0, &(0x7f0000005600)=[{&(0x7f0000004080)=""/253, 0xfd}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000005180)=""/115, 0x73}, {&(0x7f0000005200)=""/176, 0xb0}, {&(0x7f00000052c0)=""/5, 0x5}, {&(0x7f0000005300)=""/180, 0xb4}, {&(0x7f00000053c0)=""/215, 0xd7}, {&(0x7f00000054c0)=""/186, 0xba}, {&(0x7f0000005580)=""/101, 0x65}], 0x9}, 0x8}], 0x9, 0x40000020, &(0x7f0000005900)={0x77359400}) 16m40.405222569s ago: executing program 3 (id=1525): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x2, 0x100, 0x0, {0x8000, 0x3, 0x5, 0x92}}) (fail_nth: 2) 16m40.18242414s ago: executing program 3 (id=1528): syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xccd, 0xb1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xff, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x6, 0xd8, {0x7, 0x25, 0x1, 0x18, 0xe9, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x0, 0x7, {0x7, 0x25, 0x1, 0xc, 0x7, 0x800}}}}}}}}]}}, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac2(0x0, 0xa5, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x86a, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x81, 0x0, 0x65, {0x8, 0xb, 0x2, 0x0, 0x1, 0x2, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x7, 0x11, 0x4}, [@source_unit={0x8, 0x24, 0xa, 0x3, 0x2, 0x8, 0x2, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xb8, 0x6, 0x32}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0xb6, 0xf9, {0x8, 0x25, 0x1, 0x81, 0x27, 0x17, 0xcf7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x8, 0xc, 0x99}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xfffd, 0x7, 0x9, "ec0d0288467e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0xa, 0x9, {0x8, 0x25, 0x1, 0x40, 0x0, 0x4, 0x8}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x9, 0x2, 0x17, 0x40, 0x9}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x9, [{0x99, &(0x7f0000000140)=@string={0x99, 0x3, "7df5890782cbc063ba5c2aec7d4c830ee9893717cafa424dba391fd34befc132e90f14d3c92855412c6d3197c1b0a58d570ecbd20c886fd0a6d88dba48ab9e3273a327bc921195971a9df99de10869ece6fcdc3bd90eecf376a5a97e4d0464ed731d802b19220342522b999d21533b76991286d857ec07494abac233f35699d50904ee8b81f9ffff9405d3ad4cd788099d940f8f29777f"}}, {0x15, &(0x7f0000000200)=@string={0x15, 0x3, "dddf9531659c5d1b8d3db7547093b716b3fcca"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x446}}, {0x43, &(0x7f0000000280)=@string={0x43, 0x3, "b6f37275699b5942d609bde94d13ec11f7df19dc78d8526eb7b5ef65e31486d56efbd310e8682261467fda2d71fd87d550439919ca999d970e7cb1adc99646f222"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1004}}, {0xce, &(0x7f0000000400)=@string={0xce, 0x3, "19bcd88bb92a8ecbd5c1bef16b3a1675debb21ad49d67ebebea3cd24d21e98324718e1ed3b79fd55b25b64aae6b28557f1821ad2f88023b6bbcb9b8e07fd2b67bf63b64b65b9fc4ec26f171ed714fcb4cf454b8932a6b67e2ba2655ab5491a6662c4bd8e309e452574b3265666f231132651957a69decdf4e9b005a46770f99e4cce9184edd802028201e70a6def282d9c1e945a10e7930a644ec34c35dcb04b94dc6e55155f861d7764718529f3e35a3551637424d8feba139d9a193545a0120140876027192b6213721544"}}, {0x2e, &(0x7f0000000500)=@string={0x2e, 0x3, "692a0b3df6af60be8070ecaf55c1ddb7b2c5cee64f14c1e870ce44ab980735ac1eaded69354cfa89b3350f15"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3001}}]}) 16m38.914002373s ago: executing program 3 (id=1535): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000040)={0xff5, 0x0, 0x2008, 0x9, 0x6, {0x6, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x300) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00') r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4000004) ioctl$KVM_TDX_CAPABILITIES(r1, 0xc008aeba, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x1, 0x0, [{}]}}}) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000040)={0xff5, 0x0, 0x2008, 0x9, 0x6, {0x6, 0x2}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) (async) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) (async) chroot(&(0x7f0000001140)='./file0\x00') (async) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x300) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00') (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) chdir(0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4000004) (async) ioctl$KVM_TDX_CAPABILITIES(r1, 0xc008aeba, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x1, 0x0, [{}]}}}) (async) 16m38.800200466s ago: executing program 3 (id=1537): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (fail_nth: 6) 16m36.532338063s ago: executing program 3 (id=1552): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x424}}, {0x63, &(0x7f0000000240)=@string={0x63, 0x3, "09fd587cc7783af4de6c730bcea31bafea34a6cf9a2584490935b888854cc9c8b00128a8075c5ae498770e8c4b7fe0f58c5a3a58e567a9d09bcc2983cc80d3e41bbbf30c0f6b950e1ac29c470b3e672c12c4aba6c1a1567406df7114a3974d7c26"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 16m36.279008253s ago: executing program 32 (id=1552): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x424}}, {0x63, &(0x7f0000000240)=@string={0x63, 0x3, "09fd587cc7783af4de6c730bcea31bafea34a6cf9a2584490935b888854cc9c8b00128a8075c5ae498770e8c4b7fe0f58c5a3a58e567a9d09bcc2983cc80d3e41bbbf30c0f6b950e1ac29c470b3e672c12c4aba6c1a1567406df7114a3974d7c26"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 11m52.861512448s ago: executing program 4 (id=3189): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x2fc, 0x3f, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x2fc, 0x0, 0x1, [@typed={0x5, 0x6a, 0x0, 0x0, @str='\x00'}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x80'}]}, @nested={0x2c2, 0xf1, 0x0, 0x1, [@typed={0x14, 0x41, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="5d4b7e06a7dd", @generic="cee3eaadaec511a1fb31a558df3eb08f9a953c4b5dbac89a99ea3f1ee09b49ef9bde168676c46984312c900711f6040c27a463e36f6dcfa2de5e377e871636df610e23d091e34f0713b375f65569a5fb8f3e133914aafa468da2f11c56526fc15d810f73a34e47473bef66964248f76db559ff599c5903892ee6c24cd2c49d8aef3432d127beaa433e7fe16d0598db1abc2250d9354ba62b6adbba23547b98fddc0282e0dda9", @typed={0x6, 0x168, 0x0, 0x0, @str='*\x00'}, @generic="bbe7a60b920dc75b090208fc4fb79de39d8d234e79403544f1bf9669003709170347d0c104150bf50e6eb562eb1c984a93eff1db81a2b12f76748711b7c7c74f1ef72af7a1d263f74f37c9fb86a20c5360157f9801db36908101bf443306d91f0a2811e80533cf58b07b7b0dbfe81126c771d3fae08da7ab935752088e6994628313e5a19dcde1848a86fe38538969c2c3f7cb141c01a98d7cbf8c21023747d8798674e6bc21e81f874dfd6320540de121b1d3a280cde27c2ed4ba82e26f4ad879fd043f76e4a447a6acdff9175dfa71c3d2824d0574854bcde1a6206d1a0fb47c0407b36211830950018261c3a7b3912ad967d18a2e", @nested={0x14, 0x1a, 0x0, 0x1, [@typed={0x8, 0x119, 0x0, 0x0, @fd}, @typed={0x8, 0x35, 0x0, 0x0, @str='}\xb4%\x00'}]}, @typed={0x8, 0x137, 0x0, 0x0, @pid}, @typed={0xe4, 0xf8, 0x0, 0x0, @binary="4a7053d21a250a748748577bda66aceecc7e841e786c8eff128bf99c83be97e67fc460feadc4453dcfb6d76b5fbf5499b1fedb440c29726ff75c3ff0b3a15f9bbe5ae3b893bbcaf509e04bc3d7c11769291da0410ce03b34a40bd5b2f0a580d3a1414e97ac44858b520748189a999e3948f5832c2d501fd95b9dbfe913343e0e17f7e4040437df96294e2784610d0278b163b33f93d0c3ea7044180ec027378247e3572874ae358e8202ce42f2dfd9521e1924600824a800043a78cf98c345ed869162332cf9fe84d2ac2d2ae5054d8d06b278652ae38b08addecb54f313d539"}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 11m52.773077862s ago: executing program 4 (id=3190): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x900, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 11m52.666236523s ago: executing program 4 (id=3192): sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="487e0be4f71efa00245e7961a427a85099104a9668303c722842255e25870136c0b505c006579aea1e25b7d71af8f90a250074f2fd7b1c99a19d090f45180082d0a00945aaaa4f03d12318cdf4953a080296147fca891ddc45a9023490c7a61ff894ed21ec71256ebf5cf2ac845b858035b73dd0784a9fe0a019", 0x7a, 0x10, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000520001f7fcffffffffffffff0a"], 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x4000074) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0xa4, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x7c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x183e}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8050}, 0x1c008080) 11m52.377602467s ago: executing program 4 (id=3197): unshare(0x6a040000) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4087, 0xff7}], 0x2, 0x0, 0x4000}, 0x16002) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async, rerun: 32) socket$inet(0x2, 0x802, 0x1) (rerun: 32) 11m49.129685765s ago: executing program 4 (id=3216): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) inotify_init() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x2, 0x12) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000940)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pread64(r4, 0x0, 0x0, 0x6) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c810}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) write$6lowpan_enable(r5, &(0x7f0000000000)='1', 0x1) 11m48.977696883s ago: executing program 4 (id=3219): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000240), 0x1, 0x480) pipe2(&(0x7f0000000000), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) userfaultfd(0x80001) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$tipc(0x1e, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_usbip_server_init(0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x100, 0x2, 0xc3}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x8000, 0x2, 0x318, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2, 0x1, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7668, 0x10, 0x0, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5fb, 0x2000, 0x2, 0x40021a, 0x0, r0}}], 0x17, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x7, 0x48b, 0x0, 0x0}}, 0x0) 11m33.78081216s ago: executing program 33 (id=3219): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000240), 0x1, 0x480) pipe2(&(0x7f0000000000), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) userfaultfd(0x80001) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$tipc(0x1e, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_usbip_server_init(0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x100, 0x2, 0xc3}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x8000, 0x2, 0x318, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2, 0x1, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7668, 0x10, 0x0, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5fb, 0x2000, 0x2, 0x40021a, 0x0, r0}}], 0x17, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x7, 0x48b, 0x0, 0x0}}, 0x0) 1m50.50667024s ago: executing program 1 (id=6654): syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) 1m50.343794741s ago: executing program 1 (id=6655): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$kcm(0x2, 0xa, 0x2) r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7f54}, 0x1c) timer_create(0xb34d1b6788ee1b17, 0x0, &(0x7f0000000400)) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) socket(0x40000000015, 0x5, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6}]}, 0x10) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0x903b, 0x8000, 0xfffffffe, 0x1bb}, 0x0, 0x4, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x480) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x290, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0xd0, 0x3, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0xf71}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x7, 0x4}}}}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="050f1500010e000fdfff00"], 0x1, [{0x0, 0x0}]}) close(0x3) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) 1m46.759791168s ago: executing program 1 (id=6667): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000017c0)={0x60, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x1}, @flat=@weak_binder={0x77622a85, 0x4, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3a}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}, @increfs={0x40046304, 0x1}, @free_buffer={0x40086303, r4}], 0x1000, 0x0, &(0x7f00000007c0)="f23e980d352e80628897c69fe69eed0e1f37ae4f67cdf826e0875a514a88241273599c58b04b7dfb17319ccabf71ad7b41d1b721230bd613674495dbad37739d0fd6cae48bf70b076b3ed4d1ce03a7d24dbfe3da37912769fb327cd7bc7da246c45d2b54b460ab93baa75e55318253ee14d9a8b5a122312691af4cdd61737bab1262e4fd902167cf8c71de492b2f3ce347334038190d634a2c44558a7c13177cd38af7c4870921b7d64d8f94523f7c09e7b9f736ebb64c72935024c742390931008ea09ebcb368f827a96d77b9a7e5026472eddc7d48f678ae3387138f5307287f5389c67dffbab6f19c40043c13da73f0c55ab254f2b681aac9f0f086a17b4c538de7fa2e2a1ff170bb39f52daccf73e87478ca5d3e955b7bf4571968246b6fae34bb6d95fa228fd826ce324f0fa03ef7565506ecf6c5e8e29f7f82b7463d4c4409bf94667bc7d75ad2024bba8367ccdc5851a6a536b60fa24e2e45fde148d6c15567b8aa4a48bea42e34ba5c74c0d34608f9db9296272fbf3eb21d3f76b304c9f98abf72e99fa4230f83304b8507304e05f41770d5377a671c01643310fc5cbd0859ab730260ba3b0c5a845a65d3008caf676844dc3434ee894f5c15929c94d65b83a3329e5ad1ed33cc6bc3ddcb726ee2fa465df014b3c5a6b631ef78377ac7c95af6927adea64d2aeeb530d5139cb6106e46ee06bd56bb1e465cd3a7dea700b7f26d496be9e400795c14f72fd070ebc32bde0f79636020f27ab21925d44b8b9c8b2ff9112d437201f5a17fa7b6878cc1edfa6ef3818a74b4a99b8207d5acea86f615cfc8e2fac5ed23a93c4498bda5523c0785040b7322d0ec8254edc2590b746586d426993fa769ed14e3eaf0680e6fa4ce85a2702845fe807f428187332ce260a9260f923f615c08728eedf1f5d5811aaecb48fd06e8b9eb3167be23160718e9800f7cdca3b83ceed067dbe2491ca1e3903c9b6b5cedb7e41601fcab985db8031cc8ef6feedb4cdf81df6881b06e7f1024c664c4eb813a102ede3e88ddd452df8b67c5c0a124a4efe1612b5b7fae07017303f5c40aeaa3b46ac84851e626add5f6500fbe94a44bb2999c50b0c560f8eedd2496dd7d3424419f4e0161d0ff8b62e79177728a0a8d693359fe2838be78780977ef89db77fa1585f586cf35da15886bfa29a97327b5b8e5ae5d7bc57144394b08854a8dc3b6deaa4bb791eb4b8d4d6b31a4f57b2e5cc6192e2361abcd833fc3c469811433fe8256384f599e9ccadd3ac9a832484f1431cf8ee2bf7f8a81e94c9fecf775dee0dec0b8cb3936fe95158029922058d9ea04a6b5ce8bff6f58be8eb6c58c7ff1e682ebb1b0b2a49e835a8dda845a108a2272418bc1d0f1a0569396b2f01f2e2c8d6a1ef7926c4baaf83f830e6508e8fb056b5cb3e66fd7e2c96a50619f3f27bd260823f15d88198807b2757664afff1645280ed09c48de968e1619d28444ac1ef3a7c72c38e48720e39b217b7e68cbb10190047c1974d0b3fad1bfd7a52a3831c0bf59ab9179ef01186f0a835696d70665af455a08238646495c7672b77f65916d118c8c8c047b7c64b283b6f26a4a0720cbd6da1b287cae766b5ce59405166ea90fdf3f026fec4759b338d4f1adf41529a002fdefd6e65f8ac54b2d4a33a6fdf8afb4d7638faa068197b81482e6bd63028a1a045188de883b9d9b8535064229c66d599378289674d5de93b4500433e9dffb65d5a218c0144351e02f4aada00e0ba1b4c313f5fcd40100baa5452f808b35fff80be88742cdc4a60acb0c6cf1a1e737d21bd6fd76f0cb4979cc3e42f864acf76ffed4a6a5bb6b98ef10e1c19db6fb5b290b7b34a5969aabdf0941721ff9fd748630ade9530631086185406ae905c22f6f4305f648239285398597474fdc20a12085071027f6038c73004760817bbad0788dacef49341c3fac85304c23b04407addc3d5264736b42d619936f9e6f48bf1ad83ceb2707105efcd3581f0fa4d8dd69de673a2d65bf622b285ecd24ee2bae9589cc25b1fce7f6bf75d7be5a5bb6de5e11522801ef3fcc9f3e5f10aa7441acd5d2963cd36cd6a7cf407bb0349fefe09b7df423f61ab399a2fc366438326b3534b52f40b58bf17d1b886293fcb440db2f978292807ebe4d9fa69dba0d6169f5b8c4441e86d7e245d09ceb6545dca58deda1a6d66dceae5a003f58bd34dfe697a91fb078452815f872746bf24cbf283ce6ebdb6dd4fc2a305dcf29709fad631c6c199df9934b46b417c78e2865ef701ee356b2ddd9128ee2e7d8c4bf0575e544937e0e21982fa97802d8b04777c6a3c9a014d68a86d84b351131c9dd6b17580c33e6c1c472480f8cbe55815f20a0ff4d3b334c0c9f21d8d035a2fe9050cf633189fa57563c45d4cae681be35d38a9e70099dac536bfa585d6977f53d50c86d426beb15cda565a2c38392a8a917ca3f1886f0fa12eb4ad7328d6345911edeaecf1f9eece16a50ceec6e94aa2b7a62d26e32248b15a03f503dab65bc0890f564f4b293262d9802167762228d5a1d10eb84fa094c23a7c2757dcb05a22e8e0c49ff2065ca3d4a43ac420f50438ca713da4c6d4b38718c887af628bd210b005760ddfffae0d842d5fce4d6a2fea9fbd4ac5b2754a1dfc658f2508024337fc94c264339ba5329cda45c08af251bbd24b16c54426725b3dc04c79989e4994dfe7222ccd41c487b2120832a3f52a4e9d6688cde3ce1cf15caa3507011febf6b65e3d06f91412a953031a71155cdea4d6d717184b7910b7f4d3fd247ca2ee140b08e5a16feb58df687873905e399c319ee94cf1b1fa83d7a4110a779dc17014718608959f0c3dc2219fba8d406e5835436f6bc17ad86d91a462ab3f914cc62ce19a51167f7ff493d1287350fb28324166446d4c30504bb281cd8ceb6b5c13237ce5ebcc1569046208f7d6944bd46b6d7ce7eece57c1588c058fedc4f3e46b57cbe12490f019c8bedfc7d06957f8a511ec040329075828c615700239c8b735d0c0b65ca65206c7327b7a99ec3ed6b89795b6fda14e5e091c0f77cff5d4708e34f9c0a481574f3df6adcf2fc3a0df4d6e50c26ae09b7b0891d784b51e1f968c343963a84f8f8dada6260115868389f26255bd501b4c5431e03a8be148eea1a8defc352b50403c5b3a4aff6b8d41f7a7559075357fb2ad54013ced3bd4b37ad772e3046a00301e16cafc2519c66ce5e7622e818aec58d3dcf7b44f1ccde760476d3249928451204dc155f1af5997ad3023559b8161a05a353b4386be59e86a7c174ded28940ae1bd2618dbf9b52485e6b49020e7743b251a2316b67b0f6a703d8d5b67c4d0b8369f6f31126ea4be4e8712fde90817c338db22b2c4cbab2fb3b93e1142535e4239caf24636d7786be18ce7a1cf6e9c46e6c901bea2c2669c9909a1785a56efa79af1edc03a4be0fad8b958a637656b560ad656cf356e825f82f00d73c6d04ae039889ccf3742f2784f812bf174396ac4d99baa1bb5361d88c6b1ff07182193b6e196ceca804c6c4b305d7b1a030a7f86c28788fa8778f41b8b8c773cb29202c177351613351fdfc9edb974e97bd25dce4d1f6375313c1ae648dcadb05b9873f07b8d2ffadeb0321ab6052e345951edfd71d842a553162bfc85c14b3c4b3cf15d09299db3c7271c9384ac0af08aeeda8e8ec9613713538776949a583aa8b6867068e73bc2d133bb6dc2b580ecc7294fa925d833c1ec41fff1746b78bd5eff8787c7ccac4b3625c6d362051f728e9e83be9dfc4ccfd32232d48f04f9dd9d9b83f55b58d1f995370e4af7f686895718aeb10027076dae0f4fd556307539dac865752ec9a62e9faec67af4a4ec0186ffd79308ff9e0cc1711ba9be1041d24e1a8b619c1c1714a59174f4415e57b5f4b96fe1c00d96468a8610dcd975573bbe9461cec4b925482a4b19d368e9ed49a7a32d7dda191c9ac8533f664611e2d881cb61db7bf345748ab7bfa4d8bb225b1076d4d8326bb7abec27aed3c394f1635fa9a21a48ac233200d06823a3db51b071baffaea10a567aef9bda877af79f1f6a8b1ef8a559c58640e9b06d6df6c8e9c5851f5a4d60ab8aef9f2b1bb52ff7ca8f4b8a7ff6f73e357135e9ad31a7c1043ec0afd1bcf31032f9801e315f7942fc9b1299757bb41528b98846b8bb33a51ab501c6a91f7e6f887494a18e888551ee5e27d0e5406f6819dc52bd8e6c693e6e41e29b9e50517c7afa4ade8a2432c62e64d542115e0b45c4d449dcfd2695b21140da61723a9ddab9e71c2e0dfde2d6b20ce460fae3adcdd0827b70f996221b8ea129fa7c951b886ab6acaaacc3665db419e29356f666d843edcadb7ee772136701ec904b67161efabaa8407666d7b24a7ca43dc66ef12647f84872ef313eaf046dcf306491d1a6aaab04fbe3b02b181442748c76d3b72d9b9abf65b830efe10af1b8596c0808cef6b26bc0094a0ba7247249758ad77d6b8a3b11b9e120e354412c6d48fc58399c915b9d326f6e7cd40c41201da8fb5aa6e75a0623a2dd6a79dddb75a1183edceb387c310edb53137e4dd13b723f905b4130cc2002644409621917add0f6bd7431445bcc4431f9d5268d5dc96a536b0c9ca2a0b12e308f43b544ccf883d01d9acb18e7171e5c0220634facc4dfbccb0c976fe0f56725f4747c2dcaab956121eb1b7befd240d72a0b5be65706af19364b4a28098d27af41af77d4a3f1859c569473a9b4f974899f394451819d4e2c578e2ab49c2f9c81d4be9da703dc95fdc40547b0de19254c54886a5da8df8df52dc729c0f5c4d864dd9d64bfc77ff2568fe041f5eeda25bbda23b862d66383c55f4d8d59be7200a8b47c56b79b5711a7e69f2947b1e9f57d762256a3eade8791a87b6b9d61b3b0d63ac02d45c730cebeb351d58683249d9eaa6c89d458fa6e467204633c123cae6cc21bfd33d2f095cf903bd620dff73bc7843bc3e164a21dc7edeba9a27a356985d9cae9554e0dab27467b3f9632cee28db9d2404067566e0f8422b384a12ddfc99fb74b2841736def3b3a950c049273efab4662da55ab90d5d08a04e7ce9d50ad306869add8f294ff7ab2b63462d8075bd207ddecb9f602e397ac5957e391f69b2f414a953bf30f78ca323811d0ca2d8a74ab609a9b74d789ab91e5da2c5f02bb6e60170b87934c2310a621d07d90619bdb2b418ea25ad6e8cd68343fb0ca490d2ded9aca4f66aefadb6e4837f1fee8678076c6d36bd92d70a91ce7218024c926ac1526b4731b4319634f1616a26d97710142d47fba53b7a275e0ed6045e8ecde7e8b777b8cb256765f410b1597e235f87879406f7d487b7d4cfbc6114289d86cbae87cf05ead9e66018a8cf54fac94d7f2bdd73a856ba69681fd6289ac5661cfe823a02bc6087eacdc7f5b3fc5a00922dd0df52c63c3b2fe3a7c6b613c16f6b7e91d6f8a7836924e4a01ce50b412df5a8266e5c77743460ffc076566f59118969f875c9ad53dc6208e62b5306ef1ee08cb9290f75a0bafda856192190737e0120ee0d93b4620e5f964c70dc5ac6d263cb6ca567e1226bc826e5ace3b6da53fb33b430ff57027e72d7d3111f9292543d846724f2c679d9306790622d4579e80cd261e2ddaa001c6f175e0cdb53aa5611dbf1672cf94011060e08d000bdb7ac2650e66029bffacba3792c7d6cc3a6ba4b6f236ee4def1087b5b3ec9ab997a88afa74df30ebc69ef0620c764377fb38074e8f019c67ced63f36d17d27fea8f082df982003ae7b542a69e85783e5be39f51c3c62080916345ee0b13fab7d7"}) 1m46.606300233s ago: executing program 1 (id=6670): syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) 1m46.544527088s ago: executing program 1 (id=6671): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @loopback, 0x2}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) read$usbfs(0xffffffffffffffff, &(0x7f0000002500)=""/233, 0xe9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r2, 0x1000000, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x20002018}) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0xd, 0xeeef0001, 0x2000, &(0x7f00006a7000/0x2000)=nil, 0x4}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000026f000/0x1000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 1m46.128808309s ago: executing program 1 (id=6674): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) r2 = fsopen(&(0x7f0000000040)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) socket$inet6(0xa, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='hfs\x00', 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r6], 0x15) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) r9 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0xffffd000) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r8], 0x1, 0x80800}) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f0000000780)={r12, 0xfffffffd, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0xa, 0x7, 0xa}) 1m29.592221963s ago: executing program 34 (id=6674): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) r2 = fsopen(&(0x7f0000000040)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) socket$inet6(0xa, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='hfs\x00', 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r6], 0x15) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) r9 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0xffffd000) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r8], 0x1, 0x80800}) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f0000000780)={r12, 0xfffffffd, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0xa, 0x7, 0xa}) 11.975757736s ago: executing program 0 (id=7376): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000500)={0x18, r1, 0x0, 0x0, 0x0}) (fail_nth: 5) 11.869795575s ago: executing program 0 (id=7377): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x5c}}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff00c}, {0x6}]}, 0x10) syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x442) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$sock(r4, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000000d40)='iB', 0x2}], 0x1}}], 0x1, 0x4008081) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$nl_generic(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x210}, 0x1, 0x0, 0x0, 0x4c895}, 0x20008051) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) 11.837409376s ago: executing program 0 (id=7378): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) (async) r1 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09d0200fb0a010000000000f5ffff0200", "2809e8dbe10859892d0000b420a9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c7f00", [0x4, 0x5]}}) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) (rerun: 32) 11.671227213s ago: executing program 0 (id=7379): r0 = socket$tipc(0x1e, 0x1, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x800) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 11.589760864s ago: executing program 0 (id=7380): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x173) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r2, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000008c0)={0xc0}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r6}, 0x8) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f00000000c0)) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000a, 0x28011, r7, 0x40000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) syz_usb_connect(0x2, 0x24, &(0x7f0000003900)={{0x12, 0x1, 0x200, 0xfa, 0x1, 0xb7, 0xff, 0xdb0, 0x6874, 0x1a54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x3, 0x70, 0x49, "", [{{0x9, 0x4, 0xfc, 0x4, 0x0, 0x28, 0x5e, 0x5a, 0x2}}]}}]}}, &(0x7f0000003f80)={0xf45bd8dca80a41d4, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x173) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) accept4$llc(r2, 0x0, 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000008c0)={0xc0}) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) shutdown(r5, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r6}, 0x8) (async) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f00000000c0)) (async) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000a, 0x28011, r7, 0x40000) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000003900)={{0x12, 0x1, 0x200, 0xfa, 0x1, 0xb7, 0xff, 0xdb0, 0x6874, 0x1a54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x3, 0x70, 0x49, "", [{{0x9, 0x4, 0xfc, 0x4, 0x0, 0x28, 0x5e, 0x5a, 0x2}}]}}]}}, &(0x7f0000003f80)={0xf45bd8dca80a41d4, 0x0, 0x0, 0x0}) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) 11.566398807s ago: executing program 0 (id=7381): sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) munmap(&(0x7f00000e4000/0x1000)=nil, 0x1000) ioprio_set$pid(0x2, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x207f000) landlock_restrict_self(0xffffffffffffffff, 0xc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) preadv2(r2, &(0x7f0000000580)=[{&(0x7f0000000100)=""/254, 0xfe}], 0x1, 0x1, 0x853, 0x8) 9.5731452s ago: executing program 6 (id=7391): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002a40)={&(0x7f0000000300)={0x2730, r1, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb68b, 0x50}}}}, [@NL80211_ATTR_FRAME={0x1ae, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @initial, @from_mac=@broadcast, {0xd, 0x6}, "", @value={0x7, 0x0, 0x2, 0x1, 0x7}, @value=@ver_80211n={0x0, 0x7, 0x3, 0x3, 0x0, 0x2}}, @a_msdu=[{@device_b, @device_b, 0x3a, "ba4aace7bd8d3671e7cf7ced4f11c6c424608ade93a248f5d7fe535b7276c7f50b451cce68f8d49b7ddfa3d373cca17d2f06cb6395635800a101"}, {@device_b, @device_a, 0xc6, "e08c294745e81b121f02482fcaaeccd2afcb746a8ec8c2cf93d6d8bc269440552d0dc8c3d6f446455382b40399bf65be82cb8b13d43eccf843e0770b5775711460395ab81178594ebe3e0d0a23497858bd7276f6b09ecbb3d8dfa8368c6d301c58a9ff41fb69dae5366f098937052604644355934d88e39b2c5456a6e3e048c80de9da0a43e5d99f56c6758c71eb6c1043e43b1bc739ba0a5eda85ebb4a7ed07043d6b88aabe7df1505258b2ded9638fb7d4de3e29f23ec4acdf0f3a504bd31b5071353ecaca"}, {@broadcast, @broadcast, 0x5f, "f763010ddb7ff2b5cf431ddca4558309df241850a3be4b8b40241ed9cb8938db06a6805317bdce6ac92b821681e6ffa65efaada3f3f2d4cc2c0806d5993cebc118b906f74245dc55d4fd15b042a3ced31e3ad9990615ce7d397df8e585883d"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x8}}}, @NL80211_ATTR_FRAME={0x2408, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@device_b, {0x3, 0x2}, "", @void, @value=@ver_80211n={0x0, 0x2, 0x2, 0x2, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0xa4, "0ec31853feaff25686ca9db7bb6f2e5f921d94645e1e08f81829ac22cf0f741358a655b32fa9836c88edf1d9d420a60a3a42b5adbecd167fd2b9afa42836469dfe4033450aef61ca637558039309f02f6e09c36594abc1a11a5c85111720f1261e17faccd296851c20507a992bbcaddf7bcfa2880b5f376ed0983da613f90aafc1c30c3e56f197cad2b86f5ef3bcc548b12928ea8b2048d5c88df834310831fc8f883c92"}, {@device_a, @device_b, 0x1000, "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"}, {@broadcast, @broadcast, 0xc9, "9d1bf1bf1965e974ce982a0572b1ad366956279bf9cc6125b02cef22c68753d9b04d58bc8fefcc108d8c1065ba3b1e78a6957b9e61c7479aa41193e54dc1d9f155a7e2d56ee789efa6e7f694b9fdb3711d841719307c96666f9e4ca777a2b9a90c7a41c711faab9866688ee51e011bcbd8fc7cb62487d61d6ef2da866faaa000ce07b4aa52ec7c167321e62a8fad246abd6325aed4a14a8011cc7aa4ab42ba514815bb996b538dcef27ef401fe313045c8d6ebe2898cc88077a7f7d52fc534677025ec57e42c4d954c"}, {@device_a, @broadcast, 0xb3, "b47de983055a3dda33d087f8663eab73a9e68804c17fb1984bd45555ecd6eb6ae88312a19e0f022735b7d84f1a347c3da2add6c74924eeafc03e75aef517fd891c9299656a7ade093719408ea63e0cf3be9613acf23f1cf06a6cb54835ed6252c6dd760bdb52fba94706d1168074de83dfb85006be58e6793357e4400cc8199345a51915d44b94a22c81c82cdf6059d1e68a9161737db2e4fa4985ba0ef6c0ac7d147cb9c9003df3d35a406eaeaf291d4c99c8"}, {@broadcast, @device_b, 0x1000, "07e304865a1a10db6bf6fe5aab93dbda26ba1149de051475ae17c32b1d8444e33c60d1efe2b7af6205c024097da3e04b7f4d51f6b0eeb75b70fcdd629745beb12a69658fa6f8cee08e1cf6ea6aeecb2f968ae0ab2e73df00612a6ea7ebb30ea77c1093b1967030d7c36246e33cec867ad4c1b4a9c65a2d1f15778e2c5a4d4778c498120ffc9cdb17849eec4d68ce57ede892cf50894aa04cedf786b741d22172f9a96e630119885c9bf0b7c5a7a3eabd108283e8f0f76abc98bfa84bd82e938634caa03faa5e43a6829ae8191af7fc0fd8f3ea1ac5a6aba25de2c00ad5eeb07e16fb19f2315211060750e0b8fd6d491409aa7674dcd47d14852d61d47559f00a0360e651d469ea4796f32f438dd9bfa43bacf4976ba7dbe9ccc09ee130197a65c9cda107de9702c7e6cb9cda444e00db49abfe1d965a5a680c113b66d08e9d8be3e6b6e0dbcef0d32649f95a19bbcd95ce995c401516a26ee15d24aa95bddb48460aabc7d5be20046a1f8e9456bf5458288edd0e5542b3ea290b78017ca73f1448c740a8aac58b5e65dd4d7a0fe3da0ff83c3f0ae52b620f7ef4c3d8a44dfba582340b8ef89dfd54cad77a8c117ead544281a1d5a1ad8c324223f47845593c359166d770bedb61523faa60465bdb55c83d0d1aba73269be6545961323e09a6bc4d4da2e031c32fc735f6472a85b4f8e8985789c0313e45d09d1afcd3f7195db480bff2ab623e2743f1fc393d2771033710d47766c5b3edcaffe7f9ed9c7453f3fb1fec0160843b218ee6d6732dc5bca7e692fa81673768e951772d0f58f632fb25ce650d135706d77d88cb05660e8271e62454658f04ec3d6cef387052765dd479d31fb65a25f10d65dfb8cf3e71980202575489ccea33cf1b2e4aac189aa290b9f97dc0c604a4b8ab4e14f6a45df3bf6299bdf0976220fc5a4240e5bfcd9504795ecbe602b40cf02c75de2ec66f7c922f62df3a01d89d5f7f387e653f20252a65d6323845d2854f9589073165ccd311f745109ecaebfb77caced6ba94a2541a60501c16574f3e1f8440a6ca0095f78f4e1c9d2c2ad20f1dbebbae89fda626f29106ba8bd9ba9ae0c054e0a477e2d66e3604a7e3a2ccfabf029947116bbaf73802b01321c5085a6f64e80014e498832be7e639b2a70c2798034ff0ac61de43d2a3ff842bd3793d7039322f2a7da20a3ca59b4342e2916b8c05df5d415e561985d1cc7629ce794b82309b33c64a111b98806e6b8a5e360fbecd03c0e8e9b9d662d0a45e3220cfb1199bb7088efa1975ec3cb716141a206db1cae7b4e58542e8d6a5187a98bf88354745539d59a18c63649ed59ee0fca522ed4e502074eca2b7c29cda29b5f822dc087e0eccd42594794eb942e4887bf9bcae5b0d8a84d9a5e01bd838eebb63564961551848e69e6fb24c56a05a0242b95fbd1347184b17fc3a79c35aaa96c92727d9f43948c008aafa697333db5b3866ecdd04b5cd25fdb31768d50e7465bf041f3a6963e0a3edc18235451c6b874860eeaec9c51a3e1e8b54d1788ac66b75d7d45d8f4b79766059c6db292dbfb66a1949db8b36052744db568bfb9847a58009d45d883e1d84b2628e295a48333bdcbb434b692a89cf3a9d0417b86d6fcc0f9a579da4a476edada560bcf4ca25c66989b80390c8c761852d149bbba2c42a6c21f8eb3995ec1bf407b3cffbfa7d099dabc5a2367ec4efcffe61dc38bd8cf805eeb387cc06205ee584a4ba1af164f69f2bf1f836c9bae46ec82432473602ab8c20b168fc70042fe1cc6442b59628861e8453a4a495fd08b333732bab21865db64eaa8b32f276dfba948e6adca394ac6e6786a611729f88e02ed45f3fa66b212dbdb681660be732f1d1c50faee5ad3f51bb7ce909401d754541dbe3856233c2d6877f72ee70901bd4151aa3ee15b6f03d84f493183dd4761c864b57e2e4b8997104f90a2f6cda7d091a4a8d8fa37cea727bc8d7f6d050893eaa9a91da6d6af843362ba8336a3f6d67bec8ecfdf21f16d837335aec9550d8cbf17804bc79f6f940a7faf236c0f34403906aba36ffe4a6bbd7adfdca96d64b720d8c859b71234c83e92ef63e69440f00eb96e24aa348ea2f14ad818b8def0a17bbe6745e792385c551448caf3f58b5fee4b460ea5d4b1dccfad17b4fb1558972caa30a5b2f2fe80e53cc98f841ee9e941698120049018302d93bf8dc5267628172572b4405598cce4b6f05b4de47c41c5a7c8da2242ee71aea6b118ff190c0d8d2ed9e479da011969b1cd1015226bbe4f78e3183e064757b354493ba07bba8170f8edefd99ab8018655ee9cc61fddd2017efbf8abe3ff0ff5ee2febffd91d73020831f9c04083bef91b6313ad7743d4ac1dfdfae45f5b25832e4f56e4ea95df9bc8f4076c45d94eeac94c2a6660bb03192cca2317c306012898285283ce73720591c66527da565af9034363be71a88ad0037e6cdcfad0008c7349720c7387fac05024f4fb970588586b25125027b9cb07878db3e843f8d0e7d54d55576a0dee3127f7003ae87b73ec4e50a113bcc4a9026999e04d939cc94d3f60217bc30be9cf6f3d0cf8d420772b66108fefcb14ce6262d711ca9fbf8b7c043a6ce6fc3b58d418dc3c4a5d0ba07cc5268819321718c3d15a3347023be95e93fc066ff5adaef58233a530a3e1bc325c1778630e6763ca6796b8292451ae79f0b705b6beade0bf5762f65f6df6daeb5df490aa63083a9f530320449445af76b7bbf72584cb97f26a46542e108cc3ad8a5d365fe697d7214607d562cb49b19e23fadff7bdc28367deaae86e915a1650c94b2f102b9f0516ae7ab09cf6717e077672b068b7059334792115438c7f036336f68025f35a03d75f2ff416fd04890b8e19fe675da478e287c3554357d803408708b9648bba36e4eccb66fe755438febc2b0a1e7863e571dab35102825bcb5c2ca346c5bcb31a933d83d741877711c1f37ed96ed06c808cd9a8bea402ec14afc4df3e52724c19a41a277210fc29cb5d847a219d71c933b2f4770d36358311261823701559deff0876a2484548e41f5ff1e9dcaed9268e994d2be71db1e146657a4c04ea32f06388882195493defa5719c66f3a9a670856979477cfa55adaf5133c7d11981430b10e582846a75684017e6c5fda21a6808c01f35e1702adcd0077cb0c0ffd58fd3f263c756dc6da14ff470a53af83dae911d58983b0120a56a996a9a2037ac9bb1a1327405749ea20231b29ddb6abbc2e5ccdb668c39e03bef5257a8706f2250cd95acbadb184958f0ab78e99c77d7fdbfd8ab51f33144c04d3c421fe98bb70343f8e037904bd282d83ea5aeafca4da7837ab8228f7e471fdf8ce705cef118ab74080a8d90f2acd3d3e9fd2a26a860507d41ab2a526a9c700619ae358dde521adbad4ce4c490c30ec05096499f431133ae5e4583ab1c65b00f756071c9a7b39798f1705ef676dd4d6d5aafe732f1259bc48c64b46be244ee5c6aa8248025c0bf3456b3ac8e7f264f0c335d3a27c6c720388d548ab3284c219aac3f5f28fc198e327066c75f05c1c956c0ce72777f9db64f2b656a16b4c3388c9df9114fae00784df41078ecdf46d02c224561bfa4f3449e2bf786a215f1624f9c8ee8edc20292f43bc4a0c95783a1da035d37a02e21a5c89c3095297c626fa9c9e697f9b806ed146e436bfee9b2b2d7c3bf0288a0915a37cd19f57b1ccae5f61f2525c4a314518ed29abc397c72d01b5d96e57d2ca5918dfbcb5fd0e8dab0246af2a68eb252a7456a0d0218c7bec57ec234a8440642478ca6509df746fc8e5afcf3ed0f4bf63bd6dbe21cc522938771f2e449d0aa143414629a2f02f952e1ed3229de49a54d4f3feea3d6d5680c003be0d4c9b1f1fef47238ddc0d2c40247752456dd5f7195b638bf3f9cc00c1c5b818c861bfdf222a8277f9c4dd500e7182ed11cc36caa70014ec74cfaa344a468aa2904ecbae61e85d1b73b9d63427ce6315fea168b40e80e6583ae7be1177e417a36528c9b083a1b631361a620e42463b946c41e2785be05983c538761871da2542a6f11903766a80a6d068e6d1f9f2d4c426def3a353c42fb6a312f7a19cecd27a8ad009080760a1e5a3916f629b8523273060744af7d73273ab6a6782a41db5b9d448f1e66a0127ff0bc00435d980c01b0e21e240b0986307cedf0e9d9c9c4ccf0aba3a75cf389a69efe618b1c42630468f8a33af945884c2ef03b21bfdd26dbda5c5076ba05ca80db08f63161e80219da2662a8141cda91cf2d9251a5c2c2a80b6de62070b544047e32daa935cc1bc0f20e5fb3b199bb9997de82b4a25e5462deb84fc48236448da37bb8dce832f0c3424d85127ba552ec9563ca0c999179198e9a11ed4261209bba0e61a43d4918edb9957b78a4966c8bc9dab0bbe2bd8b3477b94b9dc53bfd20fd967a4c34bf9a405d3bbecf90afb4ac2ae5e35da3ffbb5f91a42d943d89da6ef2f0d3357b7c1e69a6919ac2a3136a35e30b027e89cb82659faab6357645460f67cfd012da89eb9532354e471553c470c35caaea06106fdfc0c36acec56541535a72590da4cfcfe3e2266046cbae825c315b27ddfdfc5dc09b5e75cfe08ac384178ed1240c6ff181ce70eb12d9514b249ded21bdf03756c45e827a68ea5ba970f25d24e94e242dcf9be87d3216ac8c1fe69b07fd4ccd4e0eb53beef9d7e5be2e33c6d18c17843b869cad01f501c17633217a4120d8f86ee1a81c0f871170179bba56468e0ee1069d706bf99382f8a9dfcb56de6dc088caa573c5937dab4cbdec2817bfc1930aec5c414b25f60dc68ab47df849cef0ad69b34539f6a4ee26816be7b85935da9a211b39b82f6e8c3bff5e1d7ee1fab3bcf644bc232ca30cbe768d97992bf6a2ed74c939bdd23be37bed7262ff3167208cee060453d575bdcd5e317751c9ca89336ca24daffdaffb0850bb8479ec72dc71e76880f2c6e0bcc5ccdc9558415186503ed0c6a2a3154d53b20e3abdf6fb65d7bb9ed65d9f41c2ebd13bd09e208f55fc4917a67cb68572709c165ee346feb312e12e6b4f9fca35a0532b1e5816244fafc1b7075876e83f5031dd2e6ef891594e5005e2fd23bbfadc52514c27bbb308eb1249081ab413a3fc11d6c95cb7ec50d189020b568c6a48c70d1812a5f01429dc59bcb3c389450766d655baaacc621ff77dbb14911fa83c42542e3026c531f1e160bc00da5c724a311326cfa1c4e2c743a3afa55b9561dfacd7a96c7f231f33dcaabfea37abc139694a405858451ea42e11fc82754ba777d0aceb18ed4b7616cacd3b41c3137625626979176aaf7dba34830e466b442b39d57753ac67bf57feeadb8dfa2bb569f426fbafe7a7c6cb1d18b5ce8b7ce8196a936329de1ad0d185517cedd414a4b495876ca4888b88369fb5cc09db113b7beab3d3e688b7f0ebbe7306d354db865b78b7fc8476362614209d606d057d28576302e4496bff92f4f14ac02e86ce0ffd0d35f0e03e6de5abea6fbf70db8273ae7f4d6d0433ee3606107ea124fa7898a316d4d6f3b32a934cd177db0ef892bd513ab5850a1c9c26e3f65b7e0a5816861179a28585a87157ae2a60d318c800517de261dccd8d063fc3d3cde1141b9eef186a898ca2f04aece3a7fe821e758da5570df75562581829e819808a5337a87b496df2851ae352ac3c13808e12753867f19cb6de413160a07a07db4fccb675d9c067292394c29e627314f53f87b116cec2287aa49349039e79b891d1ff7c5db8cb955815d6190f72016e63678131b98a5271f3b8d3f652460"}, {@device_a, @broadcast, 0x9b, "9d8c136844b7f5860753acd5d95db87c61bbc4311359491ecc797bc745f7e371fa89275bb25012f0752faf8dcbce9968c161fc2e8ee71d17e6eed3ba8238765ed8207f62f0b63cbf77adce928f19d0c648a42ce436a0fe54bc95ed2fc932ee2676f7aeca16c92b379052d8022565160f78bd280edcbf3c1ad643450894ca9eb237c23f56a0438962a34f280a55cdffc7a980937df7791af48f05f1"}, {@broadcast, @device_b, 0x5d, "1fec2acbde44d000d247a49df874b9ef44750a79bc210b541a884ae2d743c8eecd1bab232afddade2f65367cdab8af5185be7b97d3ed28003f5ad964fbfa519bf6ce7f82b62bb0cfb8e224297ca9e6464c7f5209c42432eb3647598cc2"}, {@device_a, @broadcast, 0x52, "fbfb4db7cc04ea5cff035ed0aae74fdf3fb0c0b9f1bc01fcd39a83923d5b38b85b07a1cd57c39b382a4c52a2df9b3f7c20d091e4edf39d834705a49aabdbb20cab55a4582fa5cf6958ce1643d5287290de2b"}]}}, @NL80211_ATTR_FRAME={0x87, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xd8b}, @device_a, @device_a, @initial, {0x9, 0x9}}, 0x408, 0x58, @default, @void, @void, [{0xdd, 0x63, "0a3d88f500d6242fe59ac340860955d9193b58a68ca5a1147c9369946bf0ef09cf48f4e4fad140f7d5ab422ca2735becf9693f7645232f9d1c2daf0d95594d1ce2a9764b3f5ff70c5031525763bd3122dd61ce0116313216d26815f9089195a4e13e1a"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x98, 0x33, @ctrl_frame=@ba={{}, {0x9c}, @device_a, @broadcast, @basic={{0x0, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x3}, "d4b46a729aa577cb367551ee467eebbd992e3b1caec7745734cb90329895c9307ff89497de72b485f922e295b5251ceb5b42137b7ab0d943df6e12ad1db3db33e51defe941fdcf2057202f0b4bd41ae14c6ebb498f0fe5eca51ce38b02a911cbea85247aeab07659d49aea6a30fe7514974049c52d664a7d18e8a1cabb72e28c"}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2730}}, 0x80) unshare(0x8040480) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) 9.393907615s ago: executing program 6 (id=7392): syz_usb_connect(0x3, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12014101d6b68d10ac054602b12701020301090212000103fa103f0904140400034602022ae092544815e7ba3bcb"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x80000, 0x2000000000001]}}) 6.615174265s ago: executing program 5 (id=7394): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0b, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x3, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530496e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x6) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x1, 0x7, 0x4, 0x5, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) 6.221555597s ago: executing program 5 (id=7395): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (fail_nth: 7) 6.146576182s ago: executing program 6 (id=7396): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000640)=""/186, 0xba, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000040)=""/93, 0x5d, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000b00)={0x2, 0x0, {&(0x7f00000007c0)=""/186, 0xba, 0x0, 0x2, 0x2}}, 0x48) epoll_create(0x1) syz_open_dev$vim2m(&(0x7f0000000700), 0xc038, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x46}}}, &(0x7f0000000280)=0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0x1, 0x20000000, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x5, 0xa) syz_ublk_setup_queues(0xffffffffffffffff, r2, &(0x7f0000000200)={0x0, 0x145c, 0x400, 0x3, 0xb2}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x8, 0x2, 0x8002ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0xd, 0x102}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x40000, 0x3, 0x102c0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x8000002, 0x226}}], 0x4, &(0x7f0000001540)={0x2e, 0x10, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x0, 0x48a, 0x0, 0x0}}, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 5.932282916s ago: executing program 6 (id=7398): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xfffffffd, 0xfffffffd}, 0x20) connect$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7, 0xfffffffd}, 0x20) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001280)={0x14, 0x0, 0x0}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) 5.613816918s ago: executing program 2 (id=7399): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0xf0, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8800}, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x9, 0x2, 0x4, 0x2, 0x5c}, 0x14) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000900000000000000c2844bbfdcd1e52195ee5779b07b00f371cb8e45bb5dc69b176bfe7ef98137abbf4a510ac26804a8a859a5b2a1b3c663fffe7f6ab69ac01153677e6325e1089ac14ca3c46ec1076e7d62b64c71a455ff1bf138da0fb4683cb846926aca00c55c3c91b8163d6172e03e045dffc0f727eced3c9df47bf276fea82fd0b344b855318e8fbee0a7ab6d1b8c2f13f5fbba9d2ef93acb940bdf6609080a659ca6b6c85ea3045b0a6ef65e7d5b48122cfe6e7cbf5cfcbe6a53b1308d9477eb0a"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000840) readv(r4, &(0x7f0000000ac0)=[{&(0x7f0000000280)=""/4, 0x4}, {&(0x7f00000006c0)=""/198, 0xc6}], 0x2) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) pread64(r7, &(0x7f0000000100)=""/183, 0xb7, 0xa64) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/65, 0x41) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000001480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) fcntl$addseals(r5, 0x409, 0x3) 5.52337875s ago: executing program 2 (id=7400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@getstat={0xe0, 0x15, 0x200, 0x70bd27, 0x25dfdbfb, {{'drbg_pr_hmac_sha256\x00'}, '\x00', '\x00', 0x2000, 0x400}, ["", "", "", "", "", "", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x41) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{0xe10c, 0xfffffff9}, {0x0, 0x400}, 0x7f, 0x2}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0xc084) 5.302943945s ago: executing program 2 (id=7401): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000900)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) 4.993518694s ago: executing program 2 (id=7402): syz_usb_connect(0x1, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10, r1, 0xce466000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x90, 0x0, &(0x7f00000008c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd, @flat=@weak_handle={0x77682a85, 0xb}, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@fda={0x66646185, 0x1, 0x1, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/196, 0xc4, 0x0, 0x3a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000880)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2000000002) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x23, 0x7, 0xc1, 0xf9, 0xc, 0xd9, 0x40, 0xb, 0xfb, 0x5e, 0xc, 0x1, 0x1, 0x8, 0x1, 0x25}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x30, 0x0, &(0x7f00000004c0)=[@clear_death, @dead_binder_done, @request_death={0x400c630e, 0x2}, @register_looper], 0x68, 0x0, &(0x7f00000005c0)="5a46d44a8b865913bcd82547cf4e9c2259ba8200a44b68733370b18606d696acc7c7d66566d8d7569d37aa71f7bbb1db31283ff408effd67f0e9b428f3e69e9b3e0e930e4d43879c5ec0d8fb87b60a8bf84d3b72138b9a453a33b58bb5df3f8f7d6d22c12f927e36"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 4.697750055s ago: executing program 5 (id=7403): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d469e70009058acf", @ANYRESHEX], 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = syz_open_dev$video(&(0x7f0000000180), 0xffffffff, 0x80) ioctl$VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x9, @sdr={0xa4ad4f23, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xfdef) 3.160673158s ago: executing program 5 (id=7404): r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg(r2, &(0x7f0000000640)={&(0x7f0000000540)=@ll={0x11, 0x4, r3, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000180)="cf3bdf15fd81685544f46c3f0800", 0x36}], 0x1, 0x0, 0x0, 0x11000000}, 0x24008814) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4, @ANYBLOB="b85cd848b021b424b0eeaa2ffc2da1844eee51ff0465a4b51c6f424ac0a0d3792b1d427d66aa97db4a5b58fb20802ce0eaf72597c0f528c1781356bb217e79053d416c5d3ac4973ad4fc52f78139b1180ae70ca4921b769c49fe44bbcd0d224ff83d1cd19a8bf98dadec9ac5826c039bdabe85591490689e2334e8a2b010025e4675d00909f4a59f82c8d2f991a7f05788a15a7a616049158dfdc8e8472879dd8cf2eb"], 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) 2.760286359s ago: executing program 5 (id=7405): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x6, 0x4c8, &(0x7f0000000c00)={{0x12, 0x1, 0x310, 0xee, 0xc3, 0xde, 0x10, 0x1b3d, 0x128, 0x7955, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b6, 0x3, 0x8, 0x85, 0x30, 0x2, "", [{{0x9, 0x4, 0xb6, 0x4, 0x0, 0x37, 0x10, 0x38, 0xa, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "cc71"}, {0x5, 0x24, 0x0, 0x66e5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x0, 0xf}, [@obex={0x5}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0xff, 0xc, 0x1}, @acm={0x4, 0x24, 0x2, 0x8}, @dmm={0x7, 0x24, 0x14, 0x6e, 0xe}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "8e11"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0x1ff, 0x4}, {0x6, 0x24, 0x1a, 0x68, 0x22}, [@dmm={0x7, 0x24, 0x14, 0x591a, 0x7}, @obex={0x5, 0x24, 0x15, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x1, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0xfe, 0x6, 0x1, 0x1}]}]}}, {{0x9, 0x4, 0xee, 0x4, 0xb, 0x6c, 0x9, 0x3c, 0xd8, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x8, 0x6, 0x5}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x0, 0x8, 0x5d, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xf801}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xe9, 0x8}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x0, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x8}, @generic={0x93, 0x9, "9dde0dc102a535f965f0a5d0db137a8c76282eb8c5b3220a8e0c70706846a166838395e95bb9c0e4766e63ab4c63a8a0535283efd8811f961606f91bf08c688ec3c528c65f59904b8444638424f72277f6b6b7a9bed762b35c313b45de7207ca9f1334f668e95d6e118bdb9d3e6538aae7bf1aabd10995ca52a14d3ff08adb33bc809d45fd5c5c7d6fb1c69a3403e5b44e"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x4, 0xff, 0x6}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x9, 0xb, 0x1}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0xab, 0x6, 0x5}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x7, 0x2, 0x9, [@generic={0xa0, 0x5, "3c9f5a18bbd895aa48fa27798b90f5eb3f8a0eaa5f1875b75cd88262ae6f7c7fcf5520263752ef84e910007bbcb5c666acc705c96d58c10ba83968445be66eb9f4bc3ca1d577ddb63a8fcb113f704fced3b027a51fd175f98dbc49bb0ce41fbd59c0d7aeda4fd46b9023117a5434817c66128cdbd125774416e73aae6d5ff4699d8a8ad1096c792d9697aba1f4d629c8b8bdd0b2a2c6459c19dbc8b5226e"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x46, 0x7, 0x5}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0x3, 0x7f, 0x2}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0xd, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc, 0xfffe}, @generic={0x5c, 0x30, "93db0df99771b20c480636561ff6b1fcb29aacd235153a7f3af3b88ae44493d6fd599847ae10fa8a607468bb57cd5c4ad10784e632279ac8795270b010b04bd44f3796fb2145919b4962d71d13b0a07f71e21b84ca5a49d8565e"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x2, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x7}]}}]}}, {{0x9, 0x4, 0xaf, 0x6, 0x6, 0xfd, 0x48, 0x4d, 0x2, [], [{{0x9, 0x5, 0x6, 0x4, 0x40, 0x6, 0x5, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x8000}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0xaf, 0x80, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x6}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0xf8, 0x9, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x5}, @generic={0xc0, 0x30, "e9e8c610e7bb77bf508da2ac98869fb9c9fb01edbc76b5203da13345675238c19fa95722f882650dd7190a01d706c35469f4386ed39ce270867e7729a8f4fb1744027bbe88baf2a650824e2aec0644f12383d1688cb54fd04371491a3816df193402242a751f0099452b1b7f75e7a1fc6654945ad1592b6499321ae91abe3ab1a48798d89e9aeef081b866497b7ee10ec57f98e448b04aa0e5d0431d1ebaac5d079ef96c4b614bc618a7c2530e47d63e37839361c49021f3afc42861049f"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0x6c, 0xc, 0x3, [@generic={0x15, 0x7, "bc1987b1b3a41dc3378bc2deb0e23cea407fa0"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x0, 0x40, 0x3, [@generic={0xe5, 0x31, "ba9dd642189d669ba493a9e0155a5b71b47e64fb4888d0a018b60d37034042ebd5bdb279df695d472d535e8f14dbe216f5111fcee134eaf583f6df06e2a59c9b73d54b428bdf8b788e189aa0097bb20dacba36623155db65a227cddb225a8685b2bfdff3ff6ce09800b3bf2942f56c6f4d2873b2a60f6bc76906a3c262933feb27faf9bffdbc12430f9e528208d4753bdc18b4ac68ba98f66bc686d9885a8b9ac1ed7e11a48ce4977feeb4c367e5e80e6b43a6cdcba5f0c1a2467a130da970854a3e80994f212c585925bd547a3fece2033a671d966bd4d7b1b80fed87c605d3240591"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfa, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x10, 0x8e, 0x4}}]}}]}}]}}, &(0x7f0000001c80)={0x0, 0x0, 0xc5, &(0x7f0000001700)={0x5, 0xf, 0xc5, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x9, 0x9}, @generic={0x8e, 0x10, 0x4, "5c7d25f286353a06269e15dc82800e88b4f34711d27449d42bd045c877f00fda8ee1a60f20de83a6a0de14c95def74aac839009b267bd54aab3270b75f8853c4ba65b5108cb60c6a8a940176e3fb83eef43b25e9005d2b22fee2c132e10ce88740253403b32c3aa4ea97480e755506d14bdbcafb8b299085347218b09039d612d6bbf28d37a4492f2dc1a8"}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x0, 0x0, 0x4, [0xffc0c0]}, @ssp_cap={0x14, 0x10, 0xa, 0xd, 0x2, 0xaf5, 0xf, 0xf4, [0xff, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x2, 0x13a}]}, 0x8, [{0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x415}}, {0xba, &(0x7f0000001840)=@string={0xba, 0x3, "09ac9394f60b1156a8bfc5aab049fbeacfb0bbc003b07a075ce8624b1e7ca8c38a2188928a254e53925c93082113fc4b8df2df022315eac5882d026db8f2756c9da09179877ed187d8b05e77c3b4875ee7ce182bf8ec49a4d07ecf000fe1cc4405d361560aadb47576800ebd7ce45677da9e035d5a79945a776c4652b3e0d033f140f0204542a16b2ef9041c778f3780005738fc50cdf212f4d459368db5c63cc03c603c464ddbead003fa35141f60acfcf5e26f0559bb27"}}, {0xc8, &(0x7f0000001900)=@string={0xc8, 0x3, "be08cb3a487d4bf00eba4ae14bd92b33d1b171404a5195c840e97fc9524595ab84a1ef037d5a958125507d02fd0e6cf045b35c3763f3f10cc90d891d78b02a3037a0a4770d165acf1e25526b89ac3c83afef28e107f5e143786a919dc491575880b8bd9bf951ecb936cde0f16a0ef1f077bdda6b32808dd39fdab8fd6568ba9ce4370369071a36af05945faa8814afb154ddcdb1eff4d70c49cae9fcc9fda9fe25cc4990be0a74a91edecfda0a85f69e24bd4fc5145c154a51be87eabf55398ec1accd68ea79"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0xc10}}, {0x91, &(0x7f0000001a40)=@string={0x91, 0x3, "a92e2365eab85a46ddc7e60344af4ee8469709531cf36106dd7fc9003ee4ca8f2caa38432b54776c37dc48fc25f818d55142b8e57d22943a5c6e5466e16525f8cc7d214019c826ba0a467371d00d9d4b8141aa175d2751bace21231282735654774efcf53c974ca19852d20628f2c54ce4b2b750f3ed36df93b74c61fb5bd8b20d735495c9d2421228d135eb39783d"}}, {0x72, &(0x7f0000001b00)=@string={0x72, 0x3, "b68b5ac474932d82ba4a65ad611e634d353fb1b3556a172a9675c437d46acbf31c4fda71aba37563aab197612434e10c815042dd98b002aa1d1cba8eb3e77a4584eae31d9f73a9c174adf3fa109bf94c7e0e2523253bb83c56a37347e848704da6e63b98a550e37dc8774d8a0c3ac047"}}, {0xa5, &(0x7f0000001b80)=@string={0xa5, 0x3, "11e23a69cbd9a53446cfb4df71362ccdb578457b0864d6472e65227e15dfaaabaefe99014dc597d3317d999935012ce1ad5c56b9a1dd6f4d2ce1bc43d79b2894d4da9ab89545f62bbdbd11615f0bc7263940788d489cd4cc8199e313adf443cdc2f57d480f281d90388a5c3182e4288b6955cc3c3c1126f8e1a899bff947f106bff5c7efaa19e07d47bbd1e0b9e1fd5d091c0e166c49ee3a85f60b137ecb43433ee672"}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x444}}]}) syz_usb_connect$cdc_ecm(0x6, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x5, 0xc0, 0x63, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0xdc, {{0xb, 0x24, 0x6, 0x0, 0x0, "e636c38cebbb"}, {0x5, 0x24, 0x0, 0xfaf}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x50b5, 0x1, 0x1b}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x6, 0x40}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x711, 0x1, 0x3, 0xc, 0xff, 0x5}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x424}}, {0x63, &(0x7f0000000240)=@string={0x63, 0x3, "09fd587cc7783af4de6c730bcea31bafea34a6cf9a2584490935b888854cc9c8b00128a8075c5ae498770e8c4b7fe0f58c5a3a58e567a9d09bcc2983cc80d3e41bbbf30c0f6b950e1ac29c470b3e672c12c4aba6c1a1567406df7114a3974d7c26"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.441861655s ago: executing program 6 (id=7406): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000640)=""/186, 0xba, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000040)=""/93, 0x5d, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000b00)={0x2, 0x0, {&(0x7f00000007c0)=""/186, 0xba, 0x0, 0x2, 0x2}}, 0x48) epoll_create(0x1) syz_open_dev$vim2m(&(0x7f0000000700), 0xc038, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x46}}}, &(0x7f0000000280)=0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0x1, 0x20000000, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x5, 0xa) syz_ublk_setup_queues(0xffffffffffffffff, r2, &(0x7f0000000200)={0x0, 0x145c, 0x400, 0x3, 0xb2}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x8, 0x2, 0x8002ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0xd, 0x102}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x40000, 0x3, 0x102c0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x8000002, 0x226}}], 0x4, &(0x7f0000001540)={0x2e, 0x10, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x0, 0x48a, 0x0, 0x0}}, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 2.304933671s ago: executing program 6 (id=7407): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="2fab135228d9e9d8", 0x8}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904"], 0x0) 1.669707979s ago: executing program 2 (id=7408): syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc0051"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x4000000) 397.917368ms ago: executing program 2 (id=7409): syz_usb_connect$uac3(0x0, 0x9e, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x323b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0xab, 0x60, 0x7, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x1e, 0x800}, [@input_terminal={0x14, 0x24, 0x2, 0x2, 0x401, 0x4, 0x1, 0xccd, 0x5c, 0x5, 0x10a, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x5, 0x4, 'l~'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3df, 0x6, 0x2, 0x4, {0xa, 0x25, 0x25, 0x9, 0xed, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x3, 0x5, {0xa, 0x25, 0x25, 0x1, 0x7, 0x6}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0xfe, 0x4, 0x5, 0xff, 0x10}, 0x0, 0x0}) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x40, 0x10f5, 0x200, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x40, 0xd, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa, 0x7ffffffe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0xbf, 0xfb, {0xa, 0x25, 0x25, 0x101, 0x7, 0xcd5f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x30, 0x0, 0x6, {0xa, 0x25, 0x25, 0x92, 0xe5, 0xf54c}}}}}}}}]}}, 0x0) 0s ago: executing program 5 (id=7410): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/70, 0x46}, {&(0x7f00000001c0)=""/225, 0xe1}], 0x2, 0x3ff, 0xd) kernel console output (not intermixed with test programs): Product: syz [ 1244.809589][T21629] usb 6-1: Manufacturer: syz [ 1244.809604][T21629] usb 6-1: SerialNumber: syz [ 1244.881655][T21629] usb 6-1: config 0 descriptor?? [ 1245.153370][T21629] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1245.218720][T26202] FAULT_INJECTION: forcing a failure. [ 1245.218720][T26202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1245.218755][T26202] CPU: 1 UID: 0 PID: 26202 Comm: syz.2.7013 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1245.218783][T26202] Tainted: [L]=SOFTLOCKUP [ 1245.218791][T26202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1245.218802][T26202] Call Trace: [ 1245.218811][T26202] [ 1245.218820][T26202] dump_stack_lvl+0xe8/0x150 [ 1245.218848][T26202] should_fail_ex+0x467/0x600 [ 1245.218884][T26202] _copy_from_user+0x2d/0xb0 [ 1245.218909][T26202] kstrtouint_from_user+0xd6/0x180 [ 1245.218942][T26202] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1245.218998][T26202] proc_fail_nth_write+0x8e/0x210 [ 1245.219021][T26202] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1245.219051][T26202] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1245.219072][T26202] vfs_write+0x29f/0xbb0 [ 1245.219108][T26202] ? __pfx_vfs_write+0x10/0x10 [ 1245.219136][T26202] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1245.219163][T26202] ? lockdep_hardirqs_on+0x7a/0x110 [ 1245.219188][T26202] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1245.219213][T26202] ? mutex_lock_nested+0x152/0x1d0 [ 1245.219241][T26202] ? fdget_pos+0x252/0x320 [ 1245.219273][T26202] ksys_write+0x156/0x270 [ 1245.219301][T26202] ? __pfx_ksys_write+0x10/0x10 [ 1245.219325][T26202] ? __pfx_tty_ioctl+0x10/0x10 [ 1245.219357][T26202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.219379][T26202] do_syscall_64+0x174/0x580 [ 1245.219404][T26202] ? trace_irq_disable+0x3b/0x140 [ 1245.219430][T26202] ? clear_bhb_loop+0x40/0x90 [ 1245.219454][T26202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.219474][T26202] RIP: 0033:0x7f2a61a7e68e [ 1245.219493][T26202] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1245.219510][T26202] RSP: 002b:00007f2a5fd15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1245.219531][T26202] RAX: ffffffffffffffda RBX: 00007f2a5fd166c0 RCX: 00007f2a61a7e68e [ 1245.219547][T26202] RDX: 0000000000000001 RSI: 00007f2a5fd160a0 RDI: 0000000000000005 [ 1245.219559][T26202] RBP: 00007f2a5fd16090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.219571][T26202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.219585][T26202] R13: 00007f2a61d46038 R14: 00007f2a61d45fa0 R15: 00007ffcf288cdb8 [ 1245.219615][T26202] [ 1245.564221][T26212] netlink: 'syz.5.6999': attribute type 10 has an invalid length. [ 1245.711301][ T6391] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1245.882279][ T6391] usb 1-1: Using ep0 maxpacket: 16 [ 1245.884399][T26212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.888495][T26212] bond0: entered promiscuous mode [ 1245.888514][T26212] bond_slave_0: entered promiscuous mode [ 1245.888865][T26212] bond_slave_1: entered promiscuous mode [ 1245.889523][T26212] bond0: entered allmulticast mode [ 1245.889592][T26212] bond_slave_0: entered allmulticast mode [ 1245.889614][T26212] bond_slave_1: entered allmulticast mode [ 1245.929259][ T6391] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1245.929300][ T6391] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1245.929371][ T6391] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.955125][ T6391] usb 1-1: config 0 descriptor?? [ 1245.963114][T26212] team0: Port device bond0 added [ 1246.120884][T14060] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1246.217606][T20803] usb 6-1: USB disconnect, device number 39 [ 1246.235842][ T6391] hid_parser_main: 74 callbacks suppressed [ 1246.235865][ T6391] nzxt-smart2 0003:1E71:2009.004C: unknown main item tag 0x0 [ 1246.235895][ T6391] nzxt-smart2 0003:1E71:2009.004C: unknown main item tag 0x0 [ 1246.235920][ T6391] nzxt-smart2 0003:1E71:2009.004C: unknown main item tag 0x0 [ 1246.235942][ T6391] nzxt-smart2 0003:1E71:2009.004C: unknown main item tag 0x0 [ 1246.235965][ T6391] nzxt-smart2 0003:1E71:2009.004C: unknown main item tag 0x0 [ 1246.270882][ T6391] nzxt-smart2 0003:1E71:2009.004C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1246.309847][T14060] usb 3-1: Using ep0 maxpacket: 16 [ 1246.313788][T14060] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7 [ 1246.332592][T14060] usb 3-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 1246.332623][T14060] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.332643][T14060] usb 3-1: Product: syz [ 1246.332658][T14060] usb 3-1: Manufacturer: syz [ 1246.332672][T14060] usb 3-1: SerialNumber: syz [ 1246.397015][T14060] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1246.459605][ T6391] usb 1-1: USB disconnect, device number 46 [ 1246.552231][T26220] fido_id[26220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1246.692012][T26228] FAULT_INJECTION: forcing a failure. [ 1246.692012][T26228] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1246.692106][T26228] CPU: 1 UID: 0 PID: 26228 Comm: syz.0.7022 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1246.692134][T26228] Tainted: [L]=SOFTLOCKUP [ 1246.692140][T26228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1246.692153][T26228] Call Trace: [ 1246.692162][T26228] [ 1246.692171][T26228] dump_stack_lvl+0xe8/0x150 [ 1246.692200][T26228] should_fail_ex+0x467/0x600 [ 1246.692238][T26228] prepare_alloc_pages+0x223/0x690 [ 1246.692268][T26228] __alloc_frozen_pages_noprof+0x12f/0x390 [ 1246.692297][T26228] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1246.692325][T26228] ? __pfx_policy_nodemask+0x10/0x10 [ 1246.692350][T26228] ? __memcg_slab_post_alloc_hook+0x4d6/0xf60 [ 1246.692377][T26228] alloc_pages_mpol+0xce/0x280 [ 1246.692406][T26228] alloc_pages_noprof+0xd2/0x2f0 [ 1246.692434][T26228] pgd_alloc+0x44/0x750 [ 1246.692466][T26228] mm_init+0x60a/0xb70 [ 1246.692496][T26228] alloc_bprm+0x38d/0x640 [ 1246.692524][T26228] do_execveat_common+0x172/0x670 [ 1246.692553][T26228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.692575][T26228] __x64_sys_execve+0x97/0xc0 [ 1246.692603][T26228] do_syscall_64+0x174/0x580 [ 1246.692631][T26228] ? clear_bhb_loop+0x40/0x90 [ 1246.692655][T26228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.692675][T26228] RIP: 0033:0x7f9023b7de59 [ 1246.692693][T26228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1246.692711][T26228] RSP: 002b:00007f9021dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1246.692731][T26228] RAX: ffffffffffffffda RBX: 00007f9023e05fa0 RCX: 00007f9023b7de59 [ 1246.692747][T26228] RDX: 0000200000000800 RSI: 0000000000000000 RDI: 0000200000000180 [ 1246.692761][T26228] RBP: 00007f9021dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.692780][T26228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1246.692792][T26228] R13: 00007f9023e06038 R14: 00007f9023e05fa0 R15: 00007ffda9ad3d88 [ 1246.692823][T26228] [ 1246.808951][T14060] usb 3-1: unit 4 not found! [ 1246.808973][T14060] usb 3-1: unit 8 not found! [ 1246.809373][T14060] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1246.809461][T14060] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1247.054853][T14060] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1247.094158][T14060] usb 3-1: USB disconnect, device number 2 [ 1247.138640][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1248.068953][T26271] FAULT_INJECTION: forcing a failure. [ 1248.068953][T26271] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.068978][T26271] CPU: 0 UID: 0 PID: 26271 Comm: syz.0.7034 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1248.068994][T26271] Tainted: [L]=SOFTLOCKUP [ 1248.068998][T26271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1248.069005][T26271] Call Trace: [ 1248.069010][T26271] [ 1248.069015][T26271] dump_stack_lvl+0xe8/0x150 [ 1248.069032][T26271] should_fail_ex+0x467/0x600 [ 1248.069051][T26271] should_failslab+0xa8/0x100 [ 1248.069066][T26271] __kvmalloc_node_noprof+0x176/0x880 [ 1248.069081][T26271] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 1248.069093][T26271] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 1248.069106][T26271] ? __pfx_kvm_hv_setup_tsc_page+0x10/0x10 [ 1248.069124][T26271] __kvm_mmu_topup_memory_cache+0x461/0x600 [ 1248.069138][T26271] ? kvm_msr_allowed+0x9a/0x490 [ 1248.069155][T26271] mmu_topup_memory_caches+0x21/0x170 [ 1248.069171][T26271] kvm_mmu_load+0x9d/0x22b0 [ 1248.069185][T26271] ? kvm_msr_allowed+0x9a/0x490 [ 1248.069198][T26271] ? kvm_msr_allowed+0x9a/0x490 [ 1248.069211][T26271] ? kvm_msr_allowed+0x9a/0x490 [ 1248.069223][T26271] ? kvm_msr_allowed+0x3f4/0x490 [ 1248.069250][T26271] ? kvm_msr_allowed+0x9a/0x490 [ 1248.069269][T26271] ? kvm_apic_has_interrupt+0x740/0x770 [ 1248.069294][T26271] vcpu_run+0x4c13/0x73e0 [ 1248.069329][T26271] ? __lock_acquire+0x683/0x2ce0 [ 1248.069354][T26271] ? __pfx_vcpu_run+0x10/0x10 [ 1248.069372][T26271] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 1248.069386][T26271] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 1248.069405][T26271] kvm_arch_vcpu_ioctl_run+0xe51/0x1960 [ 1248.069420][T26271] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 1248.069442][T26271] kvm_vcpu_ioctl+0xa64/0xfe0 [ 1248.069460][T26271] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1248.069473][T26271] ? hook_file_ioctl+0x1f3/0x600 [ 1248.069487][T26271] ? lockdep_hardirqs_on+0x7a/0x110 [ 1248.069511][T26271] ? __fget_files+0x2a/0x420 [ 1248.069524][T26271] ? __fget_files+0x2a/0x420 [ 1248.069535][T26271] ? __fget_files+0x3a8/0x420 [ 1248.069545][T26271] ? __fget_files+0x2a/0x420 [ 1248.069558][T26271] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1248.069571][T26271] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1248.069585][T26271] __se_sys_ioctl+0xff/0x170 [ 1248.069600][T26271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.069611][T26271] do_syscall_64+0x174/0x580 [ 1248.069624][T26271] ? trace_irq_disable+0x3b/0x140 [ 1248.069638][T26271] ? clear_bhb_loop+0x40/0x90 [ 1248.069650][T26271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.069661][T26271] RIP: 0033:0x7f9023b7de59 [ 1248.069672][T26271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1248.069681][T26271] RSP: 002b:00007f9021db5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1248.069693][T26271] RAX: ffffffffffffffda RBX: 00007f9023e06090 RCX: 00007f9023b7de59 [ 1248.069700][T26271] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1248.069707][T26271] RBP: 00007f9021db5090 R08: 0000000000000000 R09: 0000000000000000 [ 1248.069717][T26271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.069723][T26271] R13: 00007f9023e06128 R14: 00007f9023e06090 R15: 00007ffda9ad3d88 [ 1248.069740][T26271] [ 1248.243929][T21629] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1248.489839][T21629] usb 3-1: Using ep0 maxpacket: 16 [ 1248.492089][T21629] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1248.493224][T21629] usb 3-1: config 3 has an invalid interface number: 74 but max is 0 [ 1248.493248][T21629] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.493268][T21629] usb 3-1: config 3 has no interface number 0 [ 1248.493313][T21629] usb 3-1: config 3 interface 74 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1248.493331][T21629] usb 3-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 1248.493344][T21629] usb 3-1: config 3 interface 74 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 538 [ 1248.493357][T21629] usb 3-1: config 3 interface 74 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 1248.493368][T21629] usb 3-1: config 3 interface 74 altsetting 1 bulk endpoint 0xD has invalid maxpacket 8 [ 1248.493380][T21629] usb 3-1: config 3 interface 74 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1248.493392][T21629] usb 3-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 1248.493405][T21629] usb 3-1: config 3 interface 74 altsetting 1 endpoint 0x81 has invalid maxpacket 9507, setting to 1024 [ 1248.493418][T21629] usb 3-1: config 3 interface 74 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1248.493437][T21629] usb 3-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0x49, changing to 0x9 [ 1248.493449][T21629] usb 3-1: config 3 interface 74 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 87 [ 1248.493461][T21629] usb 3-1: config 3 interface 74 altsetting 1 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 1248.493475][T21629] usb 3-1: config 3 interface 74 has no altsetting 0 [ 1248.495674][T21629] usb 3-1: New USB device found, idVendor=045e, idProduct=0468, bcdDevice=b2.9c [ 1248.495701][T21629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.495728][T21629] usb 3-1: Product: syz [ 1248.495740][T21629] usb 3-1: Manufacturer: syz [ 1248.495748][T21629] usb 3-1: SerialNumber: syz [ 1249.452387][T26296] FAULT_INJECTION: forcing a failure. [ 1249.452387][T26296] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.452419][T26296] CPU: 1 UID: 0 PID: 26296 Comm: syz.5.7044 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1249.452444][T26296] Tainted: [L]=SOFTLOCKUP [ 1249.452459][T26296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1249.452471][T26296] Call Trace: [ 1249.452478][T26296] [ 1249.452488][T26296] dump_stack_lvl+0xe8/0x150 [ 1249.452514][T26296] should_fail_ex+0x467/0x600 [ 1249.452541][T26296] should_failslab+0xa8/0x100 [ 1249.452559][T26296] __kmalloc_cache_noprof+0xa1/0x670 [ 1249.452576][T26296] ? binder_alloc_new_buf+0x26d/0x31f0 [ 1249.452591][T26296] ? binder_alloc_new_buf+0x26d/0x31f0 [ 1249.452610][T26296] binder_alloc_new_buf+0x26d/0x31f0 [ 1249.452629][T26296] ? binder_debug+0x155/0x1d0 [ 1249.452649][T26296] ? __pfx_binder_debug+0x10/0x10 [ 1249.452667][T26296] ? __kasan_kmalloc+0x93/0xb0 [ 1249.452683][T26296] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 1249.452697][T26296] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 1249.452712][T26296] ? binder_transaction+0x20db/0x7010 [ 1249.452728][T26296] ? binder_transaction+0x20db/0x7010 [ 1249.452749][T26296] binder_transaction+0x28be/0x7010 [ 1249.452784][T26296] ? unwind_get_return_address+0x4d/0x90 [ 1249.452815][T26296] ? __pfx_binder_transaction+0x10/0x10 [ 1249.452833][T26296] ? __lock_acquire+0x683/0x2ce0 [ 1249.452856][T26296] ? __lock_acquire+0x683/0x2ce0 [ 1249.452882][T26296] ? __lock_acquire+0x683/0x2ce0 [ 1249.452906][T26296] ? __lock_acquire+0x683/0x2ce0 [ 1249.452930][T26296] ? __lock_acquire+0x683/0x2ce0 [ 1249.452954][T26296] ? __might_fault+0xaf/0x130 [ 1249.452975][T26296] ? __might_fault+0xaf/0x130 [ 1249.453009][T26296] binder_ioctl_write_read+0xe2c/0xa5d0 [ 1249.453055][T26296] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1249.453073][T26296] ? stack_depot_save_flags+0x33/0x800 [ 1249.453095][T26296] ? __lock_acquire+0x683/0x2ce0 [ 1249.453116][T26296] ? do_raw_spin_lock+0x12b/0x2f0 [ 1249.453141][T26296] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1249.453160][T26296] ? lockdep_hardirqs_on+0x7a/0x110 [ 1249.453179][T26296] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1249.453196][T26296] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1249.453220][T26296] ? rt_spin_unlock+0x157/0x200 [ 1249.453239][T26296] ? binder_get_thread+0x176/0x6d0 [ 1249.453257][T26296] ? binder_ioctl+0x189/0x1b10 [ 1249.453275][T26296] binder_ioctl+0x420/0x1b10 [ 1249.453291][T26296] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1249.453311][T26296] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1249.453331][T26296] ? do_vfs_ioctl+0x1184/0x1550 [ 1249.453351][T26296] ? __pfx_binder_ioctl+0x10/0x10 [ 1249.453367][T26296] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1249.453394][T26296] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1249.453411][T26296] ? hook_file_ioctl+0x1f3/0x600 [ 1249.453430][T26296] ? lockdep_hardirqs_on+0x7a/0x110 [ 1249.453474][T26296] ? __fget_files+0x2a/0x420 [ 1249.453498][T26296] ? __fget_files+0x2a/0x420 [ 1249.453512][T26296] ? __fget_files+0x3a8/0x420 [ 1249.453526][T26296] ? __fget_files+0x2a/0x420 [ 1249.453543][T26296] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1249.453561][T26296] ? __pfx_binder_ioctl+0x10/0x10 [ 1249.453576][T26296] __se_sys_ioctl+0xff/0x170 [ 1249.453595][T26296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.453611][T26296] do_syscall_64+0x174/0x580 [ 1249.453630][T26296] ? trace_irq_disable+0x3b/0x140 [ 1249.453648][T26296] ? clear_bhb_loop+0x40/0x90 [ 1249.453666][T26296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.453680][T26296] RIP: 0033:0x7f77a70cde59 [ 1249.453695][T26296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.453708][T26296] RSP: 002b:00007f77a5326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1249.453724][T26296] RAX: ffffffffffffffda RBX: 00007f77a7355fa0 RCX: 00007f77a70cde59 [ 1249.453735][T26296] RDX: 0000200000000380 RSI: 00000000c0306201 RDI: 0000000000000005 [ 1249.453744][T26296] RBP: 00007f77a5326090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.453753][T26296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.453763][T26296] R13: 00007f77a7356038 R14: 00007f77a7355fa0 R15: 00007ffc491b2e48 [ 1249.453786][T26296] [ 1249.943114][ T821] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1250.231639][ T821] usb 1-1: device descriptor read/64, error -71 [ 1250.488132][ T821] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1250.626968][ T821] usb 1-1: device descriptor read/64, error -71 [ 1250.741534][T21629] ipaq 3-1:3.74: PocketPC PDA converter detected [ 1250.741860][T21629] usb 3-1: active config #3 != 1 ?? [ 1250.761441][ T821] usb usb1-port1: attempt power cycle [ 1250.816727][T21629] usb 3-1: USB disconnect, device number 3 [ 1251.139849][ T821] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1251.162866][ T821] usb 1-1: device descriptor read/8, error -71 [ 1251.340231][T26316] FAULT_INJECTION: forcing a failure. [ 1251.340231][T26316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1251.340267][T26316] CPU: 0 UID: 0 PID: 26316 Comm: syz.6.7051 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1251.340294][T26316] Tainted: [L]=SOFTLOCKUP [ 1251.340301][T26316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1251.340313][T26316] Call Trace: [ 1251.340321][T26316] [ 1251.340339][T26316] dump_stack_lvl+0xe8/0x150 [ 1251.340366][T26316] should_fail_ex+0x467/0x600 [ 1251.340401][T26316] _copy_to_user+0x31/0xb0 [ 1251.340424][T26316] simple_read_from_buffer+0xe1/0x170 [ 1251.340448][T26316] proc_fail_nth_read+0x1be/0x230 [ 1251.340472][T26316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1251.340497][T26316] ? rw_verify_area+0x250/0x4d0 [ 1251.340521][T26316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1251.340542][T26316] vfs_read+0x219/0xa90 [ 1251.340571][T26316] ? __pfx_vfs_read+0x10/0x10 [ 1251.340600][T26316] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1251.340623][T26316] ? lockdep_hardirqs_on+0x7a/0x110 [ 1251.340647][T26316] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1251.340672][T26316] ? mutex_lock_nested+0x152/0x1d0 [ 1251.340701][T26316] ? fdget_pos+0x252/0x320 [ 1251.340729][T26316] ksys_read+0x156/0x270 [ 1251.340755][T26316] ? __pfx_ksys_read+0x10/0x10 [ 1251.340778][T26316] ? __pfx_binder_ioctl+0x10/0x10 [ 1251.340807][T26316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.340829][T26316] do_syscall_64+0x174/0x580 [ 1251.340847][T26316] ? trace_irq_disable+0x3b/0x140 [ 1251.340872][T26316] ? clear_bhb_loop+0x40/0x90 [ 1251.340896][T26316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.340915][T26316] RIP: 0033:0x7f85e27de68e [ 1251.340933][T26316] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1251.340950][T26316] RSP: 002b:00007f85e0a75fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1251.340970][T26316] RAX: ffffffffffffffda RBX: 00007f85e0a766c0 RCX: 00007f85e27de68e [ 1251.340984][T26316] RDX: 000000000000000f RSI: 00007f85e0a760a0 RDI: 0000000000000004 [ 1251.340996][T26316] RBP: 00007f85e0a76090 R08: 0000000000000000 R09: 0000000000000000 [ 1251.341009][T26316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1251.341022][T26316] R13: 00007f85e2aa6038 R14: 00007f85e2aa5fa0 R15: 00007ffc9db6e658 [ 1251.341052][T26316] [ 1251.524524][ T821] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1251.561335][ T821] usb 1-1: device descriptor read/8, error -71 [ 1251.614565][T26327] sg_write: data in/out 1702065419/74 bytes for SCSI command 0x0-- guessing data in; [ 1251.614565][T26327] program syz.5.7053 not setting count and/or reply_len properly [ 1251.674567][ T821] usb usb1-port1: unable to enumerate USB device [ 1252.595799][T26335] FAULT_INJECTION: forcing a failure. [ 1252.595799][T26335] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.595836][T26335] CPU: 1 UID: 0 PID: 26335 Comm: syz.2.7056 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1252.595864][T26335] Tainted: [L]=SOFTLOCKUP [ 1252.595871][T26335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1252.595882][T26335] Call Trace: [ 1252.595890][T26335] [ 1252.595899][T26335] dump_stack_lvl+0xe8/0x150 [ 1252.595925][T26335] should_fail_ex+0x467/0x600 [ 1252.595959][T26335] should_failslab+0xa8/0x100 [ 1252.595985][T26335] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1252.596007][T26335] ? __alloc_skb+0x1d7/0x7a0 [ 1252.596028][T26335] ? __alloc_skb+0x1d7/0x7a0 [ 1252.596058][T26335] __alloc_skb+0x1d7/0x7a0 [ 1252.596084][T26335] tcp_stream_alloc_skb+0x3f/0x5c0 [ 1252.596109][T26335] ? __asan_memset+0x22/0x50 [ 1252.596140][T26335] tcp_connect+0x1582/0x53e0 [ 1252.596190][T26335] ? __pfx_tcp_connect+0x10/0x10 [ 1252.596214][T26335] ? rt_spin_unlock+0x157/0x200 [ 1252.596244][T26335] ? __asan_memset+0x22/0x50 [ 1252.596281][T26335] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1252.596307][T26335] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 1252.596338][T26335] ? sk_setup_caps+0x94f/0xbc0 [ 1252.596365][T26335] ? sk_setup_caps+0x29/0xbc0 [ 1252.596393][T26335] tcp_v4_connect+0x1051/0x1950 [ 1252.596433][T26335] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1252.596459][T26335] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1252.596483][T26335] ? lockdep_hardirqs_on+0x7a/0x110 [ 1252.596508][T26335] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1252.596536][T26335] __inet_stream_connect+0x258/0xe00 [ 1252.596570][T26335] ? __pfx___inet_stream_connect+0x10/0x10 [ 1252.596591][T26335] ? __local_bh_enable+0x1e1/0x2f0 [ 1252.596625][T26335] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1252.596653][T26335] ? lockdep_hardirqs_on+0x7a/0x110 [ 1252.596682][T26335] inet_stream_connect+0x66/0xa0 [ 1252.596708][T26335] __sys_connect+0x336/0x470 [ 1252.596733][T26335] ? __pfx___sys_connect+0x10/0x10 [ 1252.596768][T26335] ? __pfx_ksys_write+0x10/0x10 [ 1252.596803][T26335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.596825][T26335] __x64_sys_connect+0x7a/0x90 [ 1252.596849][T26335] do_syscall_64+0x174/0x580 [ 1252.596874][T26335] ? trace_irq_disable+0x3b/0x140 [ 1252.596899][T26335] ? clear_bhb_loop+0x40/0x90 [ 1252.596923][T26335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.596942][T26335] RIP: 0033:0x7f2a61abde59 [ 1252.596960][T26335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.596977][T26335] RSP: 002b:00007f2a5fd16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1252.596998][T26335] RAX: ffffffffffffffda RBX: 00007f2a61d45fa0 RCX: 00007f2a61abde59 [ 1252.597013][T26335] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 1252.597025][T26335] RBP: 00007f2a5fd16090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.597038][T26335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.597051][T26335] R13: 00007f2a61d46038 R14: 00007f2a61d45fa0 R15: 00007ffcf288cdb8 [ 1252.597083][T26335] [ 1253.095544][T26365] FAULT_INJECTION: forcing a failure. [ 1253.095544][T26365] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.095581][T26365] CPU: 1 UID: 0 PID: 26365 Comm: syz.0.7060 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1253.095607][T26365] Tainted: [L]=SOFTLOCKUP [ 1253.095615][T26365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1253.095626][T26365] Call Trace: [ 1253.095634][T26365] [ 1253.095642][T26365] dump_stack_lvl+0xe8/0x150 [ 1253.095669][T26365] should_fail_ex+0x467/0x600 [ 1253.095701][T26365] should_failslab+0xa8/0x100 [ 1253.095725][T26365] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1253.095746][T26365] ? __alloc_skb+0x1d7/0x7a0 [ 1253.095767][T26365] ? __alloc_skb+0x1d7/0x7a0 [ 1253.095793][T26365] __alloc_skb+0x1d7/0x7a0 [ 1253.095818][T26365] tcp_stream_alloc_skb+0x3f/0x5c0 [ 1253.095840][T26365] ? skb_page_frag_refill+0x119/0x460 [ 1253.095870][T26365] tcp_connect+0x24d4/0x53e0 [ 1253.095919][T26365] ? __pfx_tcp_connect+0x10/0x10 [ 1253.095964][T26365] ? rcu_is_watching+0x15/0xb0 [ 1253.096001][T26365] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 1253.096024][T26365] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1253.096057][T26365] tcp_sendmsg_fastopen+0x2c5/0x5f0 [ 1253.096088][T26365] tcp_sendmsg_locked+0x4ce2/0x55c0 [ 1253.096116][T26365] ? tcp_sendmsg_locked+0x5d1/0x55c0 [ 1253.096146][T26365] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1253.096185][T26365] ? __lock_acquire+0x683/0x2ce0 [ 1253.096227][T26365] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1253.096253][T26365] ? lockdep_hardirqs_on+0x7a/0x110 [ 1253.096278][T26365] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1253.096302][T26365] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1253.096330][T26365] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1253.096368][T26365] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1253.096398][T26365] ? lockdep_hardirqs_on+0x7a/0x110 [ 1253.096428][T26365] tcp_sendmsg+0x2f/0x50 [ 1253.096453][T26365] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1253.096472][T26365] sock_sendmsg_nosec+0x90/0x180 [ 1253.096496][T26365] ____sys_sendmsg+0x565/0x870 [ 1253.096523][T26365] ? __might_fault+0xaf/0x130 [ 1253.096550][T26365] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1253.096586][T26365] ? import_iovec+0x73/0xa0 [ 1253.096613][T26365] ___sys_sendmsg+0x2a5/0x360 [ 1253.096638][T26365] ? __lock_acquire+0x683/0x2ce0 [ 1253.096668][T26365] ? __pfx____sys_sendmsg+0x10/0x10 [ 1253.096700][T26365] ? kstrtouint+0x6e/0xe0 [ 1253.096754][T26365] ? __fget_files+0x2a/0x420 [ 1253.096776][T26365] ? __fget_files+0x3a8/0x420 [ 1253.096808][T26365] __sys_sendmmsg+0x279/0x4d0 [ 1253.096840][T26365] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1253.096876][T26365] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1253.096906][T26365] ? ksys_write+0x248/0x270 [ 1253.096934][T26365] ? __pfx_ksys_write+0x10/0x10 [ 1253.096964][T26365] __x64_sys_sendmmsg+0xa0/0xc0 [ 1253.096991][T26365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.097011][T26365] do_syscall_64+0x174/0x580 [ 1253.097038][T26365] ? clear_bhb_loop+0x40/0x90 [ 1253.097063][T26365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.097083][T26365] RIP: 0033:0x7f9023b7de59 [ 1253.097102][T26365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1253.097119][T26365] RSP: 002b:00007f9021dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1253.097140][T26365] RAX: ffffffffffffffda RBX: 00007f9023e05fa0 RCX: 00007f9023b7de59 [ 1253.097156][T26365] RDX: 0000000000000001 RSI: 0000200000007bc0 RDI: 0000000000000003 [ 1253.097169][T26365] RBP: 00007f9021dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.097182][T26365] R10: 000000000000c015 R11: 0000000000000246 R12: 0000000000000001 [ 1253.097195][T26365] R13: 00007f9023e06038 R14: 00007f9023e05fa0 R15: 00007ffda9ad3d88 [ 1253.097235][T26365] [ 1253.322694][T12970] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1253.355697][T26371] syzkaller1: entered promiscuous mode [ 1253.356564][T26371] syzkaller1: entered allmulticast mode [ 1253.498140][T12970] usb 3-1: Using ep0 maxpacket: 8 [ 1253.500806][T12970] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1253.500832][T12970] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1253.500868][T12970] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1253.500891][T12970] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1253.500930][T12970] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1253.500952][T12970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.735027][T12970] usb 3-1: GET_CAPABILITIES returned 0 [ 1253.735078][T12970] usbtmc 3-1:16.0: can't read capabilities [ 1253.952671][ T821] usb 3-1: USB disconnect, device number 4 [ 1254.186091][T26379] FAULT_INJECTION: forcing a failure. [ 1254.186091][T26379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1254.186126][T26379] CPU: 0 UID: 0 PID: 26379 Comm: syz.0.7064 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1254.186150][T26379] Tainted: [L]=SOFTLOCKUP [ 1254.186156][T26379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1254.186166][T26379] Call Trace: [ 1254.186173][T26379] [ 1254.186181][T26379] dump_stack_lvl+0xe8/0x150 [ 1254.186206][T26379] should_fail_ex+0x467/0x600 [ 1254.186238][T26379] _copy_to_user+0x31/0xb0 [ 1254.186262][T26379] simple_read_from_buffer+0xe1/0x170 [ 1254.186288][T26379] proc_fail_nth_read+0x1be/0x230 [ 1254.186311][T26379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1254.186333][T26379] ? rw_verify_area+0x250/0x4d0 [ 1254.186357][T26379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1254.186376][T26379] vfs_read+0x219/0xa90 [ 1254.186406][T26379] ? __pfx_vfs_read+0x10/0x10 [ 1254.186433][T26379] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1254.186473][T26379] ? lockdep_hardirqs_on+0x7a/0x110 [ 1254.186498][T26379] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1254.186521][T26379] ? mutex_lock_nested+0x152/0x1d0 [ 1254.186546][T26379] ? fdget_pos+0x252/0x320 [ 1254.186572][T26379] ksys_read+0x156/0x270 [ 1254.186596][T26379] ? __pfx_ksys_read+0x10/0x10 [ 1254.186626][T26379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.186646][T26379] do_syscall_64+0x174/0x580 [ 1254.186670][T26379] ? trace_irq_disable+0x3b/0x140 [ 1254.186693][T26379] ? clear_bhb_loop+0x40/0x90 [ 1254.186714][T26379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.186731][T26379] RIP: 0033:0x7f9023b3e68e [ 1254.186749][T26379] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1254.186766][T26379] RSP: 002b:00007f9021dd5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1254.186787][T26379] RAX: ffffffffffffffda RBX: 00007f9021dd66c0 RCX: 00007f9023b3e68e [ 1254.186800][T26379] RDX: 000000000000000f RSI: 00007f9021dd60a0 RDI: 0000000000000006 [ 1254.186812][T26379] RBP: 00007f9021dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1254.186823][T26379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1254.186835][T26379] R13: 00007f9023e06038 R14: 00007f9023e05fa0 R15: 00007ffda9ad3d88 [ 1254.186866][T26379] [ 1254.208181][T26386] FAULT_INJECTION: forcing a failure. [ 1254.208181][T26386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1254.208218][T26386] CPU: 0 UID: 0 PID: 26386 Comm: syz.5.7067 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1254.208245][T26386] Tainted: [L]=SOFTLOCKUP [ 1254.208251][T26386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1254.208263][T26386] Call Trace: [ 1254.208271][T26386] [ 1254.208278][T26386] dump_stack_lvl+0xe8/0x150 [ 1254.208305][T26386] should_fail_ex+0x467/0x600 [ 1254.208337][T26386] _copy_from_user+0x2d/0xb0 [ 1254.208362][T26386] drm_mode_atomic_ioctl+0x7cd/0x24c0 [ 1254.208407][T26386] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1254.208425][T26386] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1254.208473][T26386] ? rt_spin_unlock+0x157/0x200 [ 1254.208496][T26386] ? rt_spin_unlock+0x163/0x200 [ 1254.208518][T26386] ? drm_is_current_master+0x1a2/0x210 [ 1254.208540][T26386] drm_ioctl_kernel+0x2e2/0x3b0 [ 1254.208570][T26386] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1254.208590][T26386] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1254.208625][T26386] drm_ioctl+0x713/0xba0 [ 1254.208658][T26386] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1254.208678][T26386] ? __pfx_drm_ioctl+0x10/0x10 [ 1254.208716][T26386] ? __fget_files+0x2a/0x420 [ 1254.208741][T26386] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1254.208764][T26386] ? __pfx_drm_ioctl+0x10/0x10 [ 1254.208788][T26386] __se_sys_ioctl+0xff/0x170 [ 1254.208814][T26386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.208835][T26386] do_syscall_64+0x174/0x580 [ 1254.208860][T26386] ? trace_irq_disable+0x3b/0x140 [ 1254.208884][T26386] ? clear_bhb_loop+0x40/0x90 [ 1254.208908][T26386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.208927][T26386] RIP: 0033:0x7f77a70cde59 [ 1254.208945][T26386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1254.208961][T26386] RSP: 002b:00007f77a5326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1254.208984][T26386] RAX: ffffffffffffffda RBX: 00007f77a7355fa0 RCX: 00007f77a70cde59 [ 1254.208999][T26386] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 1254.209011][T26386] RBP: 00007f77a5326090 R08: 0000000000000000 R09: 0000000000000000 [ 1254.209024][T26386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1254.209036][T26386] R13: 00007f77a7356038 R14: 00007f77a7355fa0 R15: 00007ffc491b2e48 [ 1254.209068][T26386] [ 1255.147403][T12970] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1255.287213][T26416] binder: 26415:26416 ioctl 4018620d 0 returned -22 [ 1255.309732][T12970] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1255.310983][T12970] usb 1-1: config 64 has an invalid interface number: 44 but max is 0 [ 1255.311015][T12970] usb 1-1: config 64 has no interface number 0 [ 1255.311059][T12970] usb 1-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 1255.311086][T12970] usb 1-1: config 64 interface 44 has no altsetting 0 [ 1255.313482][T12970] usb 1-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 1255.313510][T12970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.313529][T12970] usb 1-1: Product: syz [ 1255.313543][T12970] usb 1-1: Manufacturer: syz [ 1255.313557][T12970] usb 1-1: SerialNumber: syz [ 1255.350209][T14060] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1255.560309][T12970] iowarrior 1-1:64.44: no interrupt-out endpoint found [ 1255.567203][T14060] usb 3-1: Using ep0 maxpacket: 8 [ 1255.571480][T12970] usb 1-1: USB disconnect, device number 51 [ 1255.582396][T14060] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1255.582424][T14060] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1255.582448][T14060] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1255.582470][T14060] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1255.582509][T14060] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1255.582533][T14060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.714774][ T821] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1255.865380][ T38] audit: type=1326 audit(1782955310.476:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26419 comm="syz.6.7081" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85e281de59 code=0x0 [ 1255.892851][T14060] usb 3-1: GET_CAPABILITIES returned 0 [ 1255.892897][T14060] usbtmc 3-1:16.0: can't read capabilities [ 1255.917963][ T821] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1255.918004][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.918023][ T821] usb 6-1: Product: syz [ 1255.918037][ T821] usb 6-1: Manufacturer: syz [ 1255.918051][ T821] usb 6-1: SerialNumber: syz [ 1255.937669][ T821] usb 6-1: config 0 descriptor?? [ 1256.121557][ T5689] usb 3-1: USB disconnect, device number 5 [ 1256.173372][ T821] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1256.570596][T26440] program syz.0.7086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1257.056535][T26464] FAULT_INJECTION: forcing a failure. [ 1257.056535][T26464] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.056572][T26464] CPU: 1 UID: 0 PID: 26464 Comm: syz.6.7094 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1257.056599][T26464] Tainted: [L]=SOFTLOCKUP [ 1257.056609][T26464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1257.056644][T26464] Call Trace: [ 1257.056652][T26464] [ 1257.056661][T26464] dump_stack_lvl+0xe8/0x150 [ 1257.056689][T26464] should_fail_ex+0x467/0x600 [ 1257.056723][T26464] should_failslab+0xa8/0x100 [ 1257.056748][T26464] __kmalloc_cache_noprof+0xa1/0x670 [ 1257.056778][T26464] ? __lock_acquire+0x683/0x2ce0 [ 1257.056802][T26464] ? fuse_lookup_name+0x1c6/0x870 [ 1257.056820][T26464] ? fuse_lookup_name+0x1c6/0x870 [ 1257.056846][T26464] fuse_lookup_name+0x1c6/0x870 [ 1257.056875][T26464] ? __pfx_fuse_lookup_name+0x10/0x10 [ 1257.056891][T26464] ? do_raw_spin_lock+0x12b/0x2f0 [ 1257.056911][T26464] ? lock_acquire+0x106/0x350 [ 1257.056950][T26464] ? lockdep_hardirqs_on+0x7a/0x110 [ 1257.056976][T26464] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1257.057001][T26464] ? mutex_lock_nested+0x152/0x1d0 [ 1257.057029][T26464] ? fuse_lock_inode+0xd3/0x120 [ 1257.057068][T26464] fuse_lookup+0x1fc/0x4f0 [ 1257.057095][T26464] ? __pfx_fuse_lookup+0x10/0x10 [ 1257.057112][T26464] ? d_alloc_parallel+0x1543/0x16c0 [ 1257.057163][T26464] fuse_atomic_open+0x18f/0x440 [ 1257.057183][T26464] ? d_lookup+0x1f/0xc0 [ 1257.057210][T26464] ? __pfx_fuse_atomic_open+0x10/0x10 [ 1257.057232][T26464] atomic_open+0x155/0x370 [ 1257.057263][T26464] path_openat+0x106f/0x3850 [ 1257.057319][T26464] do_file_open+0x23e/0x4a0 [ 1257.057342][T26464] ? lockdep_hardirqs_on+0x7a/0x110 [ 1257.057369][T26464] ? __pfx_do_file_open+0x10/0x10 [ 1257.057417][T26464] ? alloc_fd+0x654/0x6d0 [ 1257.057446][T26464] do_sys_openat2+0x115/0x200 [ 1257.057469][T26464] ? __pfx_do_sys_openat2+0x10/0x10 [ 1257.057490][T26464] ? ksys_write+0x248/0x270 [ 1257.057539][T26464] ? __pfx_ksys_write+0x10/0x10 [ 1257.057569][T26464] __x64_sys_openat+0x138/0x170 [ 1257.057592][T26464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.057611][T26464] do_syscall_64+0x174/0x580 [ 1257.057633][T26464] ? trace_irq_disable+0x3b/0x140 [ 1257.057656][T26464] ? clear_bhb_loop+0x40/0x90 [ 1257.057680][T26464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.057699][T26464] RIP: 0033:0x7f85e281de59 [ 1257.057716][T26464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.057732][T26464] RSP: 002b:00007f85e0a55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1257.057753][T26464] RAX: ffffffffffffffda RBX: 00007f85e2aa6090 RCX: 00007f85e281de59 [ 1257.057776][T26464] RDX: 000000000300000d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 1257.057790][T26464] RBP: 00007f85e0a55090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.057802][T26464] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1257.057814][T26464] R13: 00007f85e2aa6128 R14: 00007f85e2aa6090 R15: 00007ffc9db6e658 [ 1257.057846][T26464] [ 1257.421643][T26472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7100'. [ 1257.734404][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 1257.735000][ T821] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1257.743917][ T821] usb 6-1: USB disconnect, device number 40 [ 1257.983491][T26489] binder: 26488:26489 ioctl c0306201 0 returned -14 [ 1258.327425][T26501] FAULT_INJECTION: forcing a failure. [ 1258.327425][T26501] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.327448][T26501] CPU: 1 UID: 0 PID: 26501 Comm: syz.5.7111 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1258.327463][T26501] Tainted: [L]=SOFTLOCKUP [ 1258.327467][T26501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1258.327474][T26501] Call Trace: [ 1258.327478][T26501] [ 1258.327483][T26501] dump_stack_lvl+0xe8/0x150 [ 1258.327498][T26501] should_fail_ex+0x467/0x600 [ 1258.327518][T26501] should_failslab+0xa8/0x100 [ 1258.327536][T26501] __kmalloc_cache_noprof+0xa1/0x670 [ 1258.327558][T26501] ? nfnetlink_rcv+0x966/0x28d0 [ 1258.327580][T26501] ? nfnetlink_rcv+0x966/0x28d0 [ 1258.327607][T26501] nfnetlink_rcv+0x966/0x28d0 [ 1258.327657][T26501] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1258.327690][T26501] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 1258.327716][T26501] ? ref_tracker_free+0x668/0x820 [ 1258.327725][T26501] ? __netlink_deliver_tap+0x600/0x880 [ 1258.327739][T26501] ? netlink_deliver_tap+0x19c/0x1b0 [ 1258.327752][T26501] ? netlink_unicast+0x7b8/0x990 [ 1258.327762][T26501] ? netlink_sendmsg+0x813/0xb40 [ 1258.327776][T26501] ? sock_sendmsg_nosec+0x13a/0x180 [ 1258.327785][T26501] ? ____sys_sendmsg+0x565/0x870 [ 1258.327798][T26501] ? ___sys_sendmsg+0x2a5/0x360 [ 1258.327810][T26501] ? __x64_sys_sendmsg+0x1b7/0x290 [ 1258.327823][T26501] ? do_syscall_64+0x174/0x580 [ 1258.327836][T26501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.327850][T26501] ? __skb_clone+0x449/0x6c0 [ 1258.327867][T26501] ? skb_clone+0x246/0x3a0 [ 1258.327883][T26501] ? __netlink_deliver_tap+0x838/0x880 [ 1258.327896][T26501] ? netlink_deliver_tap+0x2e/0x1b0 [ 1258.327913][T26501] ? netlink_deliver_tap+0x2e/0x1b0 [ 1258.327926][T26501] ? netlink_deliver_tap+0x2e/0x1b0 [ 1258.327943][T26501] netlink_unicast+0x7f5/0x990 [ 1258.327963][T26501] netlink_sendmsg+0x813/0xb40 [ 1258.327982][T26501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1258.327999][T26501] ? aa_sock_msg_perm+0x122/0x200 [ 1258.328017][T26501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1258.328031][T26501] sock_sendmsg_nosec+0x13a/0x180 [ 1258.328043][T26501] ____sys_sendmsg+0x565/0x870 [ 1258.328056][T26501] ? __might_fault+0xaf/0x130 [ 1258.328071][T26501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1258.328090][T26501] ? import_iovec+0x73/0xa0 [ 1258.328104][T26501] ___sys_sendmsg+0x2a5/0x360 [ 1258.328117][T26501] ? __lock_acquire+0x683/0x2ce0 [ 1258.328133][T26501] ? __pfx____sys_sendmsg+0x10/0x10 [ 1258.328164][T26501] ? __fget_files+0x2a/0x420 [ 1258.328176][T26501] ? __fget_files+0x3a8/0x420 [ 1258.328192][T26501] __x64_sys_sendmsg+0x1b7/0x290 [ 1258.328210][T26501] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1258.328233][T26501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.328244][T26501] do_syscall_64+0x174/0x580 [ 1258.328256][T26501] ? trace_irq_disable+0x3b/0x140 [ 1258.328270][T26501] ? clear_bhb_loop+0x40/0x90 [ 1258.328283][T26501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.328294][T26501] RIP: 0033:0x7f77a70cde59 [ 1258.328305][T26501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.328314][T26501] RSP: 002b:00007f77a5326028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1258.328326][T26501] RAX: ffffffffffffffda RBX: 00007f77a7355fa0 RCX: 00007f77a70cde59 [ 1258.328334][T26501] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1258.328341][T26501] RBP: 00007f77a5326090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.328347][T26501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.328354][T26501] R13: 00007f77a7356038 R14: 00007f77a7355fa0 R15: 00007ffc491b2e48 [ 1258.328370][T26501] [ 1258.328589][T26501] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7111'. [ 1258.328602][T26501] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7111'. [ 1258.586577][ T38] audit: type=1326 audit(1782955313.021:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26504 comm="syz.5.7113" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77a70cde59 code=0x0 [ 1259.193981][T26519] netlink: 'syz.0.7119': attribute type 3 has an invalid length. [ 1259.194002][T26519] netlink: 'syz.0.7119': attribute type 4 has an invalid length. [ 1259.194014][T26519] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7119'. [ 1259.194263][T26520] netlink: 'syz.0.7119': attribute type 3 has an invalid length. [ 1259.194275][T26520] netlink: 'syz.0.7119': attribute type 4 has an invalid length. [ 1259.194285][T26520] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7119'. [ 1259.672566][T26540] FAULT_INJECTION: forcing a failure. [ 1259.672566][T26540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1259.672589][T26540] CPU: 0 UID: 0 PID: 26540 Comm: syz.5.7129 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1259.672604][T26540] Tainted: [L]=SOFTLOCKUP [ 1259.672609][T26540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1259.672622][T26540] Call Trace: [ 1259.672627][T26540] [ 1259.672632][T26540] dump_stack_lvl+0xe8/0x150 [ 1259.672648][T26540] should_fail_ex+0x467/0x600 [ 1259.672668][T26540] _copy_from_user+0x2d/0xb0 [ 1259.672682][T26540] drm_mode_atomic_ioctl+0x7cd/0x24c0 [ 1259.672706][T26540] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1259.672716][T26540] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1259.672735][T26540] ? rt_spin_unlock+0x157/0x200 [ 1259.672747][T26540] ? rt_spin_unlock+0x163/0x200 [ 1259.672759][T26540] ? drm_is_current_master+0x1a2/0x210 [ 1259.672775][T26540] drm_ioctl_kernel+0x2e2/0x3b0 [ 1259.672791][T26540] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1259.672802][T26540] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1259.672820][T26540] drm_ioctl+0x713/0xba0 [ 1259.672838][T26540] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1259.672848][T26540] ? __pfx_drm_ioctl+0x10/0x10 [ 1259.672868][T26540] ? __fget_files+0x2a/0x420 [ 1259.672882][T26540] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1259.672896][T26540] ? __pfx_drm_ioctl+0x10/0x10 [ 1259.672909][T26540] __se_sys_ioctl+0xff/0x170 [ 1259.672924][T26540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.672935][T26540] do_syscall_64+0x174/0x580 [ 1259.672948][T26540] ? trace_irq_disable+0x3b/0x140 [ 1259.672962][T26540] ? clear_bhb_loop+0x40/0x90 [ 1259.672974][T26540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.672985][T26540] RIP: 0033:0x7f77a70cde59 [ 1259.672995][T26540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.673004][T26540] RSP: 002b:00007f77a5326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1259.673016][T26540] RAX: ffffffffffffffda RBX: 00007f77a7355fa0 RCX: 00007f77a70cde59 [ 1259.673024][T26540] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000d [ 1259.673030][T26540] RBP: 00007f77a5326090 R08: 0000000000000000 R09: 0000000000000000 [ 1259.673036][T26540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.673042][T26540] R13: 00007f77a7356038 R14: 00007f77a7355fa0 R15: 00007ffc491b2e48 [ 1259.673058][T26540] [ 1260.009399][T20803] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1260.015318][T26546] binfmt_misc: register: failed to install interpreter file ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1260.170675][T20803] usb 1-1: Using ep0 maxpacket: 32 [ 1260.173948][T20803] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1260.173974][T20803] usb 1-1: config 0 has no interface number 0 [ 1260.174018][T20803] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1260.174038][T20803] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1260.177427][T20803] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1260.177455][T20803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.177474][T20803] usb 1-1: Product: syz [ 1260.177489][T20803] usb 1-1: Manufacturer: syz [ 1260.177503][T20803] usb 1-1: SerialNumber: syz [ 1260.262422][T20803] usb 1-1: config 0 descriptor?? [ 1260.393949][ T6391] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1260.487873][T20803] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1260.490902][T20803] cx231xx 1-1:0.1: Failed to read PCB config [ 1260.491006][T20803] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 1260.499118][T20803] usb 1-1: USB disconnect, device number 52 [ 1260.534135][ T5689] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1260.554373][ T6391] usb 6-1: Using ep0 maxpacket: 8 [ 1260.559713][ T6391] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.559737][ T6391] usb 6-1: config 0 has no interfaces? [ 1260.561986][ T6391] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1260.562015][ T6391] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.562035][ T6391] usb 6-1: Product: syz [ 1260.562049][ T6391] usb 6-1: Manufacturer: syz [ 1260.562063][ T6391] usb 6-1: SerialNumber: syz [ 1260.569833][ T6391] usb 6-1: config 0 descriptor?? [ 1260.719243][ T5689] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1260.719275][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.719293][ T5689] usb 3-1: Product: syz [ 1260.719305][ T5689] usb 3-1: Manufacturer: syz [ 1260.719313][ T5689] usb 3-1: SerialNumber: syz [ 1260.821442][T20803] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1260.828836][T26551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7134'. [ 1260.849405][ T821] usb 6-1: USB disconnect, device number 41 [ 1260.981747][T20803] usb 1-1: Using ep0 maxpacket: 32 [ 1260.983713][T20803] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1260.983738][T20803] usb 1-1: config 0 has no interface number 0 [ 1260.983780][T20803] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1260.983802][T20803] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1260.986224][T20803] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1260.986251][T20803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.986272][T20803] usb 1-1: Product: syz [ 1260.986286][T20803] usb 1-1: Manufacturer: syz [ 1260.986300][T20803] usb 1-1: SerialNumber: syz [ 1260.992121][T20803] usb 1-1: config 0 descriptor?? [ 1261.158901][ T5689] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1261.159001][ T5689] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1261.233125][T20803] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1261.233797][T20803] cx231xx 1-1:0.1: bad scenario!!!!! [ 1261.233797][T20803] config_info=0 [ 1261.233809][T20803] cx231xx 1-1:0.1: Failed to read PCB config [ 1261.452005][T20803] usb 1-1: USB disconnect, device number 53 [ 1261.538514][T26565] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7138'. [ 1261.714707][T26568] FAULT_INJECTION: forcing a failure. [ 1261.714707][T26568] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.714734][T26568] CPU: 0 UID: 0 PID: 26568 Comm: syz.5.7140 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1261.714750][T26568] Tainted: [L]=SOFTLOCKUP [ 1261.714754][T26568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1261.714761][T26568] Call Trace: [ 1261.714765][T26568] [ 1261.714771][T26568] dump_stack_lvl+0xe8/0x150 [ 1261.714801][T26568] should_fail_ex+0x467/0x600 [ 1261.714835][T26568] should_failslab+0xa8/0x100 [ 1261.714869][T26568] __kmalloc_cache_noprof+0xa1/0x670 [ 1261.714893][T26568] ? fuse_dentry_init+0x51/0x100 [ 1261.714921][T26568] ? fuse_dentry_init+0x51/0x100 [ 1261.714946][T26568] fuse_dentry_init+0x51/0x100 [ 1261.714975][T26568] __d_alloc+0x489/0x6f0 [ 1261.715006][T26568] d_alloc_parallel+0xde/0x16c0 [ 1261.715033][T26568] ? __d_lookup+0x66/0x790 [ 1261.715063][T26568] ? __d_lookup+0x66/0x790 [ 1261.715077][T26568] ? __d_lookup+0x66/0x790 [ 1261.715090][T26568] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1261.715102][T26568] ? __d_lookup+0x6f3/0x790 [ 1261.715120][T26568] ? d_lookup+0x1f/0xc0 [ 1261.715147][T26568] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1261.715169][T26568] ? lockdep_hardirqs_on+0x7a/0x110 [ 1261.715201][T26568] path_openat+0xbf0/0x3850 [ 1261.715230][T26568] ? kmem_cache_alloc_noprof+0x358/0x680 [ 1261.715241][T26568] ? __x64_sys_openat+0x138/0x170 [ 1261.715263][T26568] do_file_open+0x23e/0x4a0 [ 1261.715275][T26568] ? lockdep_hardirqs_on+0x7a/0x110 [ 1261.715301][T26568] ? __pfx_do_file_open+0x10/0x10 [ 1261.715350][T26568] ? alloc_fd+0x654/0x6d0 [ 1261.715382][T26568] do_sys_openat2+0x115/0x200 [ 1261.715400][T26568] ? __pfx_do_sys_openat2+0x10/0x10 [ 1261.715411][T26568] ? ksys_write+0x248/0x270 [ 1261.715426][T26568] ? __pfx_ksys_write+0x10/0x10 [ 1261.715441][T26568] __x64_sys_openat+0x138/0x170 [ 1261.715459][T26568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.715481][T26568] do_syscall_64+0x174/0x580 [ 1261.715505][T26568] ? trace_irq_disable+0x3b/0x140 [ 1261.715531][T26568] ? clear_bhb_loop+0x40/0x90 [ 1261.715556][T26568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.715569][T26568] RIP: 0033:0x7f77a70cde59 [ 1261.715583][T26568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.715593][T26568] RSP: 002b:00007f77a5305028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1261.715605][T26568] RAX: ffffffffffffffda RBX: 00007f77a7356090 RCX: 00007f77a70cde59 [ 1261.715612][T26568] RDX: 000000000300000d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 1261.715624][T26568] RBP: 00007f77a5305090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.715636][T26568] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1261.715648][T26568] R13: 00007f77a7356128 R14: 00007f77a7356090 R15: 00007ffc491b2e48 [ 1261.715680][T26568] [ 1262.249794][T26573] FAULT_INJECTION: forcing a failure. [ 1262.249794][T26573] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.249838][T26573] CPU: 1 UID: 0 PID: 26573 Comm: syz.0.7142 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1262.249869][T26573] Tainted: [L]=SOFTLOCKUP [ 1262.249879][T26573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1262.249890][T26573] Call Trace: [ 1262.249897][T26573] [ 1262.249906][T26573] dump_stack_lvl+0xe8/0x150 [ 1262.249934][T26573] should_fail_ex+0x467/0x600 [ 1262.249966][T26573] should_failslab+0xa8/0x100 [ 1262.249989][T26573] __kmalloc_noprof+0xfb/0x790 [ 1262.250010][T26573] ? tomoyo_encode+0x2ad/0x570 [ 1262.250036][T26573] ? tomoyo_encode+0x2ad/0x570 [ 1262.250069][T26573] tomoyo_encode+0x2ad/0x570 [ 1262.250099][T26573] tomoyo_realpath_from_path+0x5fa/0x640 [ 1262.250137][T26573] tomoyo_path_perm+0x283/0x560 [ 1262.250161][T26573] ? tomoyo_path_perm+0x251/0x560 [ 1262.250185][T26573] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1262.250241][T26573] ? __pfx_current_check_access_path+0x10/0x10 [ 1262.250271][T26573] ? d_splice_alias+0x12/0x30 [ 1262.250309][T26573] ? lookup_one_qstr_excl+0x1d4/0x360 [ 1262.250339][T26573] tomoyo_path_symlink+0xab/0xf0 [ 1262.250357][T26573] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 1262.250378][T26573] ? __pfx_filename_create+0x10/0x10 [ 1262.250408][T26573] security_path_symlink+0x16f/0x360 [ 1262.250439][T26573] filename_symlinkat+0x134/0x420 [ 1262.250472][T26573] ? __pfx_filename_symlinkat+0x10/0x10 [ 1262.250503][T26573] ? do_getname+0x151/0x250 [ 1262.250521][T26573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.250543][T26573] __se_sys_symlink+0x4d/0x2b0 [ 1262.250573][T26573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.250593][T26573] do_syscall_64+0x174/0x580 [ 1262.250615][T26573] ? trace_irq_disable+0x3b/0x140 [ 1262.250639][T26573] ? clear_bhb_loop+0x40/0x90 [ 1262.250663][T26573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.250683][T26573] RIP: 0033:0x7f9023b7de59 [ 1262.250701][T26573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.250719][T26573] RSP: 002b:00007f9021db5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1262.250740][T26573] RAX: ffffffffffffffda RBX: 00007f9023e06090 RCX: 00007f9023b7de59 [ 1262.250755][T26573] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000080 [ 1262.250769][T26573] RBP: 00007f9021db5090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.250782][T26573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.250794][T26573] R13: 00007f9023e06128 R14: 00007f9023e06090 R15: 00007ffda9ad3d88 [ 1262.250828][T26573] [ 1262.251115][T26573] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1262.465606][ T5689] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1262.484748][ T5689] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1262.720534][T26581] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1262.756808][T26584] FAULT_INJECTION: forcing a failure. [ 1262.756808][T26584] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.756844][T26584] CPU: 0 UID: 0 PID: 26584 Comm: syz.0.7147 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1262.756875][T26584] Tainted: [L]=SOFTLOCKUP [ 1262.756882][T26584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1262.756889][T26584] Call Trace: [ 1262.756894][T26584] [ 1262.756899][T26584] dump_stack_lvl+0xe8/0x150 [ 1262.756917][T26584] should_fail_ex+0x467/0x600 [ 1262.756938][T26584] should_failslab+0xa8/0x100 [ 1262.756964][T26584] __kmalloc_noprof+0xfb/0x790 [ 1262.756986][T26584] ? tomoyo_encode+0x2ad/0x570 [ 1262.757013][T26584] ? tomoyo_encode+0x2ad/0x570 [ 1262.757049][T26584] tomoyo_encode+0x2ad/0x570 [ 1262.757070][T26584] tomoyo_realpath_from_path+0x5fa/0x640 [ 1262.757091][T26584] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1262.757104][T26584] tomoyo_path_number_perm+0x246/0x5f0 [ 1262.757127][T26584] ? __lock_acquire+0x683/0x2ce0 [ 1262.757154][T26584] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1262.757183][T26584] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1262.757209][T26584] ? lockdep_hardirqs_on+0x7a/0x110 [ 1262.757250][T26584] ? __pfx_current_check_access_path+0x10/0x10 [ 1262.757265][T26584] ? d_alloc_parallel+0x1543/0x16c0 [ 1262.757291][T26584] tomoyo_path_mknod+0x14a/0x1a0 [ 1262.757312][T26584] ? d_alloc_parallel+0x3cf/0x16c0 [ 1262.757338][T26584] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1262.757370][T26584] security_path_mknod+0x176/0x370 [ 1262.757398][T26584] may_o_create+0x2d/0x370 [ 1262.757412][T26584] ? mode_strip_sgid+0xa1/0x1b0 [ 1262.757428][T26584] path_openat+0xfb5/0x3850 [ 1262.757446][T26584] ? kmem_cache_alloc_noprof+0x358/0x680 [ 1262.757489][T26584] do_file_open+0x23e/0x4a0 [ 1262.757514][T26584] ? lockdep_hardirqs_on+0x7a/0x110 [ 1262.757543][T26584] ? __pfx_do_file_open+0x10/0x10 [ 1262.757577][T26584] ? alloc_fd+0x654/0x6d0 [ 1262.757593][T26584] do_sys_openat2+0x115/0x200 [ 1262.757605][T26584] ? __pfx_do_sys_openat2+0x10/0x10 [ 1262.757618][T26584] ? ksys_write+0x248/0x270 [ 1262.757646][T26584] ? __pfx_ksys_write+0x10/0x10 [ 1262.757675][T26584] __x64_sys_openat+0x138/0x170 [ 1262.757700][T26584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.757721][T26584] do_syscall_64+0x174/0x580 [ 1262.757738][T26584] ? clear_bhb_loop+0x40/0x90 [ 1262.757751][T26584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.757761][T26584] RIP: 0033:0x7f9023b7de59 [ 1262.757772][T26584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.757781][T26584] RSP: 002b:00007f9021dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1262.757800][T26584] RAX: ffffffffffffffda RBX: 00007f9023e05fa0 RCX: 00007f9023b7de59 [ 1262.757815][T26584] RDX: 0000000000143042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1262.757830][T26584] RBP: 00007f9021dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.757843][T26584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.757855][T26584] R13: 00007f9023e06038 R14: 00007f9023e05fa0 R15: 00007ffda9ad3d88 [ 1262.757889][T26584] [ 1262.757915][T26584] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1263.113042][T26591] input: syz0 as /devices/virtual/input/input226 [ 1263.791271][T26611] kernel read not supported for file /& (pid: 26611 comm: syz.5.7157) [ 1263.854913][ T38] audit: type=1800 audit(1782955317.888:327): pid=26611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7157" name="&" dev="mqueue" ino=137583 res=0 errno=0 [ 1263.890622][T26611] tmpfs: Bad value for 'mpol' [ 1263.986849][T26611] syzkaller1: entered promiscuous mode [ 1263.986875][T26611] syzkaller1: entered allmulticast mode [ 1264.035156][T26611] ./file0: Can't lookup blockdev [ 1264.099904][T26611] netlink: 'syz.5.7157': attribute type 3 has an invalid length. [ 1264.408836][T26626] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7164'. [ 1264.468959][T26627] FAULT_INJECTION: forcing a failure. [ 1264.468959][T26627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1264.468993][T26627] CPU: 1 UID: 0 PID: 26627 Comm: syz.0.7164 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1264.469016][T26627] Tainted: [L]=SOFTLOCKUP [ 1264.469022][T26627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1264.469031][T26627] Call Trace: [ 1264.469038][T26627] [ 1264.469046][T26627] dump_stack_lvl+0xe8/0x150 [ 1264.469073][T26627] should_fail_ex+0x467/0x600 [ 1264.469102][T26627] _copy_from_user+0x2d/0xb0 [ 1264.469122][T26627] ___sys_sendmsg+0x1c6/0x360 [ 1264.469149][T26627] ? __pfx____sys_sendmsg+0x10/0x10 [ 1264.469175][T26627] ? up_read+0x34/0x180 [ 1264.469201][T26627] ? lockdep_hardirqs_on+0x7a/0x110 [ 1264.469242][T26627] __sys_sendmmsg+0x279/0x4d0 [ 1264.469268][T26627] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1264.469296][T26627] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1264.469323][T26627] ? ksys_write+0x248/0x270 [ 1264.469345][T26627] ? __pfx_ksys_write+0x10/0x10 [ 1264.469370][T26627] __x64_sys_sendmmsg+0xa0/0xc0 [ 1264.469391][T26627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.469407][T26627] do_syscall_64+0x174/0x580 [ 1264.469429][T26627] ? clear_bhb_loop+0x40/0x90 [ 1264.469450][T26627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.469465][T26627] RIP: 0033:0x7f9023b7de59 [ 1264.469480][T26627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.469494][T26627] RSP: 002b:00007f9021db5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1264.469512][T26627] RAX: ffffffffffffffda RBX: 00007f9023e06090 RCX: 00007f9023b7de59 [ 1264.469524][T26627] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000009 [ 1264.469535][T26627] RBP: 00007f9021db5090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.469545][T26627] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001 [ 1264.469556][T26627] R13: 00007f9023e06128 R14: 00007f9023e06090 R15: 00007ffda9ad3d88 [ 1264.469580][T26627] [ 1264.796636][T20803] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1264.925811][ T5689] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1264.925865][ T5689] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1264.926884][ T5689] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1264.956902][T20803] usb 1-1: Using ep0 maxpacket: 32 [ 1265.039628][ T5689] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1265.063069][ T5689] usb 3-1: USB disconnect, device number 6 [ 1265.095202][T20803] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.095237][T20803] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1265.095257][T20803] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1265.095280][T20803] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1265.095301][T20803] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1265.095322][T20803] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 1265.156068][T20803] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1265.156100][T20803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1265.156120][T20803] usb 1-1: SerialNumber: syz [ 1265.231942][T20803] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1265.274075][T20803] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 1265.493994][T20803] usb 1-1: USB disconnect, device number 54 [ 1265.503408][ T5689] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1265.662293][ T5689] usb 3-1: Using ep0 maxpacket: 16 [ 1265.665318][ T5689] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.665371][ T5689] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1265.667661][ T5689] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1265.667689][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.667709][ T5689] usb 3-1: Product: syz [ 1265.667723][ T5689] usb 3-1: Manufacturer: syz [ 1265.667731][ T5689] usb 3-1: SerialNumber: syz [ 1266.618810][ T6391] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1266.715278][ T5689] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1266.715313][ T5689] usb 3-1: MIDIStreaming interface descriptor not found [ 1266.815498][ T6391] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1266.815526][ T6391] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.815546][ T6391] usb 6-1: Product: syz [ 1266.815560][ T6391] usb 6-1: Manufacturer: syz [ 1266.815574][ T6391] usb 6-1: SerialNumber: syz [ 1266.833021][ T6391] usb 6-1: config 0 descriptor?? [ 1267.050242][ T5689] usb 3-1: USB disconnect, device number 7 [ 1267.056817][ T6391] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1267.206095][T26667] FAULT_INJECTION: forcing a failure. [ 1267.206095][T26667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1267.206135][T26667] CPU: 1 UID: 0 PID: 26667 Comm: syz.0.7177 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1267.206168][T26667] Tainted: [L]=SOFTLOCKUP [ 1267.206175][T26667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1267.206187][T26667] Call Trace: [ 1267.206196][T26667] [ 1267.206205][T26667] dump_stack_lvl+0xe8/0x150 [ 1267.206233][T26667] should_fail_ex+0x467/0x600 [ 1267.206265][T26667] _copy_to_user+0x31/0xb0 [ 1267.206288][T26667] simple_read_from_buffer+0xe1/0x170 [ 1267.206313][T26667] proc_fail_nth_read+0x1be/0x230 [ 1267.206338][T26667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1267.206362][T26667] ? rw_verify_area+0x250/0x4d0 [ 1267.206388][T26667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1267.206409][T26667] vfs_read+0x219/0xa90 [ 1267.206436][T26667] ? __pfx_vfs_read+0x10/0x10 [ 1267.206456][T26667] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1267.206475][T26667] ? lockdep_hardirqs_on+0x7a/0x110 [ 1267.206493][T26667] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1267.206511][T26667] ? mutex_lock_nested+0x152/0x1d0 [ 1267.206532][T26667] ? fdget_pos+0x252/0x320 [ 1267.206554][T26667] ksys_read+0x156/0x270 [ 1267.206573][T26667] ? __pfx_ksys_read+0x10/0x10 [ 1267.206597][T26667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.206613][T26667] do_syscall_64+0x174/0x580 [ 1267.206633][T26667] ? clear_bhb_loop+0x40/0x90 [ 1267.206662][T26667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.206676][T26667] RIP: 0033:0x7f9023b3e68e [ 1267.206690][T26667] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1267.206702][T26667] RSP: 002b:00007f9021db4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1267.206719][T26667] RAX: ffffffffffffffda RBX: 00007f9021db56c0 RCX: 00007f9023b3e68e [ 1267.206729][T26667] RDX: 000000000000000f RSI: 00007f9021db50a0 RDI: 0000000000000006 [ 1267.206738][T26667] RBP: 00007f9021db5090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.206747][T26667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.206756][T26667] R13: 00007f9023e06128 R14: 00007f9023e06090 R15: 00007ffda9ad3d88 [ 1267.206779][T26667] [ 1267.221850][T26668] sock: sock_set_timeout: `syz.6.7176' (pid 26668) tries to set negative timeout [ 1267.272545][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1267.272639][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1267.616014][ T5687] udevd[5687]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1268.023836][T12970] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1268.112656][T26689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7186'. [ 1268.112775][T26689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7186'. [ 1268.112870][T26689] FAULT_INJECTION: forcing a failure. [ 1268.112870][T26689] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.112900][T26689] CPU: 1 UID: 0 PID: 26689 Comm: syz.0.7186 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1268.112928][T26689] Tainted: [L]=SOFTLOCKUP [ 1268.112935][T26689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1268.112947][T26689] Call Trace: [ 1268.112955][T26689] [ 1268.112964][T26689] dump_stack_lvl+0xe8/0x150 [ 1268.112989][T26689] should_fail_ex+0x467/0x600 [ 1268.113025][T26689] should_failslab+0xa8/0x100 [ 1268.113050][T26689] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1268.113073][T26689] ? __alloc_skb+0x1d7/0x7a0 [ 1268.113095][T26689] ? __alloc_skb+0x1d7/0x7a0 [ 1268.113124][T26689] __alloc_skb+0x1d7/0x7a0 [ 1268.113151][T26689] netlink_ack+0x136/0xb30 [ 1268.113174][T26689] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1268.113193][T26689] ? ref_tracker_free+0x668/0x820 [ 1268.113213][T26689] ? ____sys_sendmsg+0x565/0x870 [ 1268.113237][T26689] ? ___sys_sendmsg+0x2a5/0x360 [ 1268.113260][T26689] ? __x64_sys_sendmsg+0x1b7/0x290 [ 1268.113284][T26689] ? do_syscall_64+0x174/0x580 [ 1268.113307][T26689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.113336][T26689] netlink_rcv_skb+0x2a4/0x4a0 [ 1268.113363][T26689] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1268.113385][T26689] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1268.113425][T26689] ? netlink_deliver_tap+0x2e/0x1b0 [ 1268.113451][T26689] ? netlink_deliver_tap+0x2e/0x1b0 [ 1268.113482][T26689] genl_rcv+0x28/0x40 [ 1268.113500][T26689] netlink_unicast+0x7f5/0x990 [ 1268.113535][T26689] netlink_sendmsg+0x813/0xb40 [ 1268.113572][T26689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1268.113603][T26689] ? aa_sock_msg_perm+0x122/0x200 [ 1268.113637][T26689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1268.113665][T26689] sock_sendmsg_nosec+0x13a/0x180 [ 1268.113689][T26689] ____sys_sendmsg+0x565/0x870 [ 1268.113714][T26689] ? __might_fault+0xaf/0x130 [ 1268.113750][T26689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1268.113786][T26689] ? import_iovec+0x73/0xa0 [ 1268.113812][T26689] ___sys_sendmsg+0x2a5/0x360 [ 1268.113837][T26689] ? __lock_acquire+0x683/0x2ce0 [ 1268.113868][T26689] ? __pfx____sys_sendmsg+0x10/0x10 [ 1268.113930][T26689] ? __fget_files+0x2a/0x420 [ 1268.113951][T26689] ? __fget_files+0x3a8/0x420 [ 1268.113983][T26689] __x64_sys_sendmsg+0x1b7/0x290 [ 1268.114012][T26689] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1268.114055][T26689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.114077][T26689] do_syscall_64+0x174/0x580 [ 1268.114101][T26689] ? trace_irq_disable+0x3b/0x140 [ 1268.114126][T26689] ? clear_bhb_loop+0x40/0x90 [ 1268.114151][T26689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.114170][T26689] RIP: 0033:0x7f9023b7de59 [ 1268.114188][T26689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1268.114204][T26689] RSP: 002b:00007f9021dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1268.114225][T26689] RAX: ffffffffffffffda RBX: 00007f9023e05fa0 RCX: 00007f9023b7de59 [ 1268.114240][T26689] RDX: 0000000004040084 RSI: 0000200000004bc0 RDI: 0000000000000003 [ 1268.114255][T26689] RBP: 00007f9021dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1268.114267][T26689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1268.114280][T26689] R13: 00007f9023e06038 R14: 00007f9023e05fa0 R15: 00007ffda9ad3d88 [ 1268.114312][T26689] [ 1268.227824][T12970] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1268.227853][T12970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.227873][T12970] usb 3-1: Product: syz [ 1268.227888][T12970] usb 3-1: Manufacturer: syz [ 1268.227902][T12970] usb 3-1: SerialNumber: syz [ 1268.257132][T12970] usb 3-1: config 0 descriptor?? [ 1268.519118][T12970] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1268.646748][T26696] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1269.012374][ T6391] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1269.034447][ T6391] usb 6-1: USB disconnect, device number 42 [ 1269.595642][T26732] FAULT_INJECTION: forcing a failure. [ 1269.595642][T26732] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.595727][T26732] CPU: 0 UID: 0 PID: 26732 Comm: syz.5.7204 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1269.595756][T26732] Tainted: [L]=SOFTLOCKUP [ 1269.595763][T26732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1269.595776][T26732] Call Trace: [ 1269.595784][T26732] [ 1269.595793][T26732] dump_stack_lvl+0xe8/0x150 [ 1269.595822][T26732] should_fail_ex+0x467/0x600 [ 1269.595857][T26732] ? proc_alloc_inode+0x2a/0xc0 [ 1269.595881][T26732] should_failslab+0xa8/0x100 [ 1269.595906][T26732] kmem_cache_alloc_lru_noprof+0xa2/0x670 [ 1269.595930][T26732] ? proc_alloc_inode+0x2a/0xc0 [ 1269.595952][T26732] ? d_alloc_parallel+0x3cf/0x16c0 [ 1269.595986][T26732] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1269.596003][T26732] proc_alloc_inode+0x2a/0xc0 [ 1269.596023][T26732] alloc_inode+0x6a/0x1b0 [ 1269.596041][T26732] new_inode+0x1f/0x170 [ 1269.596059][T26732] ? proc_pid_make_inode+0x19/0x130 [ 1269.596085][T26732] proc_pid_make_inode+0x21/0x130 [ 1269.596111][T26732] proc_map_files_instantiate+0x78/0x170 [ 1269.596136][T26732] proc_fill_cache+0x2a8/0x390 [ 1269.596160][T26732] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 1269.596183][T26732] ? __pfx_proc_fill_cache+0x10/0x10 [ 1269.596217][T26732] proc_map_files_readdir+0x81d/0xa80 [ 1269.596250][T26732] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 1269.596287][T26732] ? iterate_dir+0x215/0x4e0 [ 1269.596311][T26732] ? down_read_killable+0x14c/0x220 [ 1269.596339][T26732] ? __pfx_down_read_killable+0x10/0x10 [ 1269.596376][T26732] iterate_dir+0x2f1/0x4e0 [ 1269.596407][T26732] __se_sys_getdents+0xf1/0x270 [ 1269.596438][T26732] ? __pfx___se_sys_getdents+0x10/0x10 [ 1269.596464][T26732] ? ksys_write+0x248/0x270 [ 1269.596487][T26732] ? __pfx_filldir+0x10/0x10 [ 1269.596517][T26732] ? __pfx_ksys_write+0x10/0x10 [ 1269.596551][T26732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.596573][T26732] do_syscall_64+0x174/0x580 [ 1269.596598][T26732] ? trace_irq_disable+0x3b/0x140 [ 1269.596623][T26732] ? clear_bhb_loop+0x40/0x90 [ 1269.596648][T26732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.596667][T26732] RIP: 0033:0x7f77a70cde59 [ 1269.596686][T26732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.596703][T26732] RSP: 002b:00007f77a5326028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 1269.596724][T26732] RAX: ffffffffffffffda RBX: 00007f77a7355fa0 RCX: 00007f77a70cde59 [ 1269.596740][T26732] RDX: 0000000000000c54 RSI: 0000200000001ec0 RDI: 0000000000000003 [ 1269.596753][T26732] RBP: 00007f77a5326090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.596766][T26732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.596778][T26732] R13: 00007f77a7356038 R14: 00007f77a7355fa0 R15: 00007ffc491b2e48 [ 1269.596811][T26732] [ 1270.040890][T26743] vivid-000: disconnect [ 1270.076824][T26675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.078180][T26675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.085771][T12970] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1270.106371][T12970] usb 3-1: USB disconnect, device number 8 [ 1271.009811][T26795] FAULT_INJECTION: forcing a failure. [ 1271.009811][T26795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1271.009847][T26795] CPU: 0 UID: 0 PID: 26795 Comm: syz.2.7229 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1271.009875][T26795] Tainted: [L]=SOFTLOCKUP [ 1271.009883][T26795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1271.009895][T26795] Call Trace: [ 1271.009903][T26795] [ 1271.009910][T26795] dump_stack_lvl+0xe8/0x150 [ 1271.009940][T26795] should_fail_ex+0x467/0x600 [ 1271.009976][T26795] _copy_to_user+0x31/0xb0 [ 1271.010002][T26795] simple_read_from_buffer+0xe1/0x170 [ 1271.010030][T26795] proc_fail_nth_read+0x1be/0x230 [ 1271.010055][T26795] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1271.010079][T26795] ? rw_verify_area+0x250/0x4d0 [ 1271.010104][T26795] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1271.010124][T26795] vfs_read+0x219/0xa90 [ 1271.010153][T26795] ? __pfx_vfs_read+0x10/0x10 [ 1271.010178][T26795] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1271.010202][T26795] ? lockdep_hardirqs_on+0x7a/0x110 [ 1271.010225][T26795] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1271.010258][T26795] ? mutex_lock_nested+0x152/0x1d0 [ 1271.010287][T26795] ? fdget_pos+0x252/0x320 [ 1271.010317][T26795] ksys_read+0x156/0x270 [ 1271.010344][T26795] ? __pfx_ksys_read+0x10/0x10 [ 1271.010377][T26795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.010398][T26795] do_syscall_64+0x174/0x580 [ 1271.010423][T26795] ? trace_irq_disable+0x3b/0x140 [ 1271.010449][T26795] ? clear_bhb_loop+0x40/0x90 [ 1271.010474][T26795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.010493][T26795] RIP: 0033:0x7f2a61a7e68e [ 1271.010511][T26795] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1271.010526][T26795] RSP: 002b:00007f2a5fd15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1271.010547][T26795] RAX: ffffffffffffffda RBX: 00007f2a5fd166c0 RCX: 00007f2a61a7e68e [ 1271.010561][T26795] RDX: 000000000000000f RSI: 00007f2a5fd160a0 RDI: 0000000000000004 [ 1271.010574][T26795] RBP: 00007f2a5fd16090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.010587][T26795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.010599][T26795] R13: 00007f2a61d46038 R14: 00007f2a61d45fa0 R15: 00007ffcf288cdb8 [ 1271.010631][T26795] [ 1271.362456][T26805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7233'. [ 1271.402277][T26807] FAULT_INJECTION: forcing a failure. [ 1271.402277][T26807] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.402301][T26807] CPU: 1 UID: 0 PID: 26807 Comm: syz.0.7234 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1271.402316][T26807] Tainted: [L]=SOFTLOCKUP [ 1271.402320][T26807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1271.402327][T26807] Call Trace: [ 1271.402332][T26807] [ 1271.402337][T26807] dump_stack_lvl+0xe8/0x150 [ 1271.402359][T26807] should_fail_ex+0x467/0x600 [ 1271.402378][T26807] should_failslab+0xa8/0x100 [ 1271.402392][T26807] ? security_file_alloc+0x34/0x310 [ 1271.402405][T26807] kmem_cache_alloc_noprof+0x9e/0x680 [ 1271.402415][T26807] ? rcu_is_watching+0x15/0xb0 [ 1271.402431][T26807] ? security_file_alloc+0x34/0x310 [ 1271.402443][T26807] ? alloc_empty_file+0x5b/0x1d0 [ 1271.402456][T26807] security_file_alloc+0x34/0x310 [ 1271.402476][T26807] init_file+0x96/0x2d0 [ 1271.402488][T26807] alloc_empty_file+0x74/0x1d0 [ 1271.402499][T26807] path_openat+0x8f/0x3850 [ 1271.402515][T26807] ? __kernel_text_address+0xd/0x30 [ 1271.402528][T26807] ? unwind_get_return_address+0x4d/0x90 [ 1271.402543][T26807] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1271.402557][T26807] ? arch_stack_walk+0xfb/0x150 [ 1271.402575][T26807] ? do_getname+0x2e/0x250 [ 1271.402585][T26807] ? stack_trace_save+0xa9/0x100 [ 1271.402600][T26807] do_file_open+0x23e/0x4a0 [ 1271.402616][T26807] ? __pfx_do_file_open+0x10/0x10 [ 1271.402628][T26807] ? __kasan_slab_alloc+0x6c/0x80 [ 1271.402653][T26807] ? do_open_execat+0xad/0x590 [ 1271.402668][T26807] do_open_execat+0x12b/0x590 [ 1271.402679][T26807] ? __might_fault+0xaf/0x130 [ 1271.402691][T26807] ? __pfx_do_open_execat+0x10/0x10 [ 1271.402709][T26807] alloc_bprm+0x24/0x640 [ 1271.402730][T26807] do_execveat_common+0x172/0x670 [ 1271.402747][T26807] __x64_sys_execveat+0xc7/0xf0 [ 1271.402761][T26807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.402775][T26807] do_syscall_64+0x174/0x580 [ 1271.402789][T26807] ? trace_irq_disable+0x3b/0x140 [ 1271.402804][T26807] ? clear_bhb_loop+0x40/0x90 [ 1271.402816][T26807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.402827][T26807] RIP: 0033:0x7f9023b7de59 [ 1271.402837][T26807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.402847][T26807] RSP: 002b:00007f9021db5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1271.402859][T26807] RAX: ffffffffffffffda RBX: 00007f9023e06090 RCX: 00007f9023b7de59 [ 1271.402866][T26807] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 1271.402873][T26807] RBP: 00007f9021db5090 R08: 0000000000001000 R09: 0000000000000000 [ 1271.402880][T26807] R10: 0000200000004780 R11: 0000000000000246 R12: 0000000000000001 [ 1271.402887][T26807] R13: 00007f9023e06128 R14: 00007f9023e06090 R15: 00007ffda9ad3d88 [ 1271.402902][T26807] [ 1273.189810][T26871] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.7259'. [ 1273.769225][T26899] netlink: 378 bytes leftover after parsing attributes in process `syz.6.7269'. [ 1274.467971][ T5689] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1274.516847][T26930] Invalid ELF header type: 2 != 1 [ 1274.627834][ T5689] usb 1-1: Using ep0 maxpacket: 8 [ 1274.630014][ T5689] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 1274.630046][ T5689] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1274.634298][ T5689] usb 1-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 1274.634326][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.634345][ T5689] usb 1-1: Product: syz [ 1274.634360][ T5689] usb 1-1: Manufacturer: syz [ 1274.634373][ T5689] usb 1-1: SerialNumber: syz [ 1274.936078][T26920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.949617][T26920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.995039][ T5689] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input227 [ 1275.001339][ T4960] bcm5974 1-1:1.0: could not read from device [ 1275.046496][ T5689] usb 1-1: USB disconnect, device number 55 [ 1276.414220][T26995] FAULT_INJECTION: forcing a failure. [ 1276.414220][T26995] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.414255][T26995] CPU: 0 UID: 0 PID: 26995 Comm: syz.0.7296 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1276.414282][T26995] Tainted: [L]=SOFTLOCKUP [ 1276.414289][T26995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1276.414302][T26995] Call Trace: [ 1276.414311][T26995] [ 1276.414320][T26995] dump_stack_lvl+0xe8/0x150 [ 1276.414346][T26995] should_fail_ex+0x467/0x600 [ 1276.414376][T26995] ? sock_alloc_inode+0x2c/0x1a0 [ 1276.414395][T26995] should_failslab+0xa8/0x100 [ 1276.414418][T26995] kmem_cache_alloc_lru_noprof+0xa2/0x670 [ 1276.414441][T26995] ? sock_alloc_inode+0x2c/0x1a0 [ 1276.414462][T26995] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1276.414480][T26995] sock_alloc_inode+0x2c/0x1a0 [ 1276.414498][T26995] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1276.414516][T26995] alloc_inode+0x6a/0x1b0 [ 1276.414537][T26995] __sock_create+0x11e/0x960 [ 1276.414566][T26995] udp_sock_create4+0xc5/0x480 [ 1276.414593][T26995] ? __pfx_udp_sock_create4+0x10/0x10 [ 1276.414618][T26995] ? __pfx___nla_validate_parse+0x10/0x10 [ 1276.414647][T26995] fou_nl_add_doit+0x19f/0xa60 [ 1276.414679][T26995] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 1276.414702][T26995] ? rcu_is_watching+0x15/0xb0 [ 1276.414732][T26995] ? trace_kmalloc+0x2a/0xf0 [ 1276.414768][T26995] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1276.414790][T26995] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1276.414820][T26995] genl_family_rcv_msg_doit+0x233/0x340 [ 1276.414849][T26995] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1276.414883][T26995] ? bpf_lsm_capable+0x9/0x20 [ 1276.414917][T26995] ? security_capable+0x7e/0x2c0 [ 1276.414951][T26995] genl_rcv_msg+0x614/0x7a0 [ 1276.414978][T26995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1276.414997][T26995] ? ref_tracker_free+0x668/0x820 [ 1276.415015][T26995] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 1276.415041][T26995] ? ____sys_sendmsg+0x565/0x870 [ 1276.415064][T26995] ? ___sys_sendmsg+0x2a5/0x360 [ 1276.415087][T26995] ? __x64_sys_sendmsg+0x1b7/0x290 [ 1276.415112][T26995] ? do_syscall_64+0x174/0x580 [ 1276.415136][T26995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.415166][T26995] netlink_rcv_skb+0x226/0x4a0 [ 1276.415198][T26995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1276.415220][T26995] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1276.415270][T26995] genl_rcv+0x28/0x40 [ 1276.415289][T26995] netlink_unicast+0x7f5/0x990 [ 1276.415325][T26995] netlink_sendmsg+0x813/0xb40 [ 1276.415361][T26995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1276.415392][T26995] ? aa_sock_msg_perm+0x122/0x200 [ 1276.415426][T26995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1276.415452][T26995] sock_sendmsg_nosec+0x13a/0x180 [ 1276.415475][T26995] ____sys_sendmsg+0x565/0x870 [ 1276.415501][T26995] ? __might_fault+0xaf/0x130 [ 1276.415530][T26995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1276.415566][T26995] ? import_iovec+0x73/0xa0 [ 1276.415593][T26995] ___sys_sendmsg+0x2a5/0x360 [ 1276.415618][T26995] ? __lock_acquire+0x683/0x2ce0 [ 1276.415650][T26995] ? __pfx____sys_sendmsg+0x10/0x10 [ 1276.415710][T26995] ? __fget_files+0x2a/0x420 [ 1276.415731][T26995] ? __fget_files+0x3a8/0x420 [ 1276.415762][T26995] __x64_sys_sendmsg+0x1b7/0x290 [ 1276.415791][T26995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1276.415832][T26995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.415850][T26995] do_syscall_64+0x174/0x580 [ 1276.415872][T26995] ? trace_irq_disable+0x3b/0x140 [ 1276.415896][T26995] ? clear_bhb_loop+0x40/0x90 [ 1276.415927][T26995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.415946][T26995] RIP: 0033:0x7f9023b7de59 [ 1276.415965][T26995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.415980][T26995] RSP: 002b:00007f9021dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1276.416000][T26995] RAX: ffffffffffffffda RBX: 00007f9023e05fa0 RCX: 00007f9023b7de59 [ 1276.416013][T26995] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1276.416026][T26995] RBP: 00007f9021dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1276.416037][T26995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1276.416048][T26995] R13: 00007f9023e06038 R14: 00007f9023e05fa0 R15: 00007ffda9ad3d88 [ 1276.416076][T26995] [ 1276.416236][T26995] socket: no more sockets [ 1277.545242][ T5805] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1277.578264][T12968] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1277.716132][ T5805] usb 1-1: device descriptor read/64, error -71 [ 1277.748178][T12968] usb 6-1: Using ep0 maxpacket: 32 [ 1277.750585][T12968] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1277.751850][T12968] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1277.751868][T12968] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1277.756847][T12968] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1277.756876][T12968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.756896][T12968] usb 6-1: Manufacturer: ﾡ䮭ᑌ벭䇷ꀦ箮Ꭹ䟿⧒烉−퇔 [ 1277.756905][T12968] usb 6-1: SerialNumber: 䁠⯡桄蔂姹╪⡄싫ข템⌵棜冑팟ᥨ䤆了詖觿맛鯋닲㵙덻뤑獉ף [ 1277.865640][ T5689] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1277.983239][ T5805] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1278.063468][ T5689] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1278.063486][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.063497][ T5689] usb 3-1: Product: syz [ 1278.063505][ T5689] usb 3-1: Manufacturer: syz [ 1278.063513][ T5689] usb 3-1: SerialNumber: syz [ 1278.104823][ T5689] usb 3-1: config 0 descriptor?? [ 1278.124250][ T5805] usb 1-1: device descriptor read/64, error -71 [ 1278.189153][T27034] netlink: 'syz.5.7308': attribute type 21 has an invalid length. [ 1278.190572][T27034] openvswitch: netlink: Flow actions attr not present in new flow. [ 1278.303970][ T5805] usb usb1-port1: attempt power cycle [ 1278.315889][T27034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7308'. [ 1278.339698][ T5689] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1278.679776][T12968] cdc_ncm 6-1:1.0: bind() failure [ 1278.711621][T12968] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1278.711651][T12968] cdc_ncm 6-1:1.1: bind() failure [ 1278.722330][T12968] usb 6-1: USB disconnect, device number 43 [ 1278.819631][ T5805] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1278.849482][ T5805] usb 1-1: device descriptor read/8, error -71 [ 1279.116037][ T5805] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1279.139815][ T5805] usb 1-1: device descriptor read/8, error -71 [ 1279.255646][ T5805] usb usb1-port1: unable to enumerate USB device [ 1280.062317][ T5689] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1280.069244][ T5689] usb 3-1: USB disconnect, device number 9 [ 1280.723615][T27057] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7318'. [ 1280.737091][T27057] syzkaller1: entered promiscuous mode [ 1280.737116][T27057] syzkaller1: entered allmulticast mode [ 1281.205241][T27080] FAULT_INJECTION: forcing a failure. [ 1281.205241][T27080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.205277][T27080] CPU: 1 UID: 0 PID: 27080 Comm: syz.0.7329 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1281.205303][T27080] Tainted: [L]=SOFTLOCKUP [ 1281.205311][T27080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1281.205323][T27080] Call Trace: [ 1281.205339][T27080] [ 1281.205348][T27080] dump_stack_lvl+0xe8/0x150 [ 1281.205377][T27080] should_fail_ex+0x467/0x600 [ 1281.205410][T27080] _copy_to_user+0x31/0xb0 [ 1281.205435][T27080] simple_read_from_buffer+0xe1/0x170 [ 1281.205463][T27080] proc_fail_nth_read+0x1be/0x230 [ 1281.205486][T27080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1281.205514][T27080] ? rw_verify_area+0x250/0x4d0 [ 1281.205542][T27080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1281.205563][T27080] vfs_read+0x219/0xa90 [ 1281.205595][T27080] ? __pfx_vfs_read+0x10/0x10 [ 1281.205623][T27080] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1281.205649][T27080] ? lockdep_hardirqs_on+0x7a/0x110 [ 1281.205674][T27080] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1281.205699][T27080] ? mutex_lock_nested+0x152/0x1d0 [ 1281.205728][T27080] ? fdget_pos+0x252/0x320 [ 1281.205760][T27080] ksys_read+0x156/0x270 [ 1281.205787][T27080] ? __pfx_ksys_read+0x10/0x10 [ 1281.205809][T27080] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1281.205835][T27080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.205857][T27080] do_syscall_64+0x174/0x580 [ 1281.205879][T27080] ? trace_irq_disable+0x3b/0x140 [ 1281.205904][T27080] ? clear_bhb_loop+0x40/0x90 [ 1281.205927][T27080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.205946][T27080] RIP: 0033:0x7f9023b3e68e [ 1281.205964][T27080] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1281.205980][T27080] RSP: 002b:00007f9021dd5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1281.206000][T27080] RAX: ffffffffffffffda RBX: 00007f9021dd66c0 RCX: 00007f9023b3e68e [ 1281.206015][T27080] RDX: 000000000000000f RSI: 00007f9021dd60a0 RDI: 0000000000000005 [ 1281.206028][T27080] RBP: 00007f9021dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.206041][T27080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.206053][T27080] R13: 00007f9023e06038 R14: 00007f9023e05fa0 R15: 00007ffda9ad3d88 [ 1281.206084][T27080] [ 1281.457200][T27085] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7331'. [ 1281.457226][T27085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1281.501828][T27086] FAULT_INJECTION: forcing a failure. [ 1281.501828][T27086] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.501863][T27086] CPU: 0 UID: 0 PID: 27086 Comm: syz.5.7330 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1281.501889][T27086] Tainted: [L]=SOFTLOCKUP [ 1281.501897][T27086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1281.501907][T27086] Call Trace: [ 1281.501915][T27086] [ 1281.501923][T27086] dump_stack_lvl+0xe8/0x150 [ 1281.501952][T27086] should_fail_ex+0x467/0x600 [ 1281.501984][T27086] should_failslab+0xa8/0x100 [ 1281.502008][T27086] __kmalloc_noprof+0xfb/0x790 [ 1281.502029][T27086] ? tomoyo_encode+0x2ad/0x570 [ 1281.502054][T27086] ? tomoyo_encode+0x2ad/0x570 [ 1281.502087][T27086] tomoyo_encode+0x2ad/0x570 [ 1281.502121][T27086] tomoyo_realpath_from_path+0x5fa/0x640 [ 1281.502156][T27086] ? tomoyo_path2_perm+0x299/0x760 [ 1281.502180][T27086] tomoyo_path2_perm+0x2c5/0x760 [ 1281.502208][T27086] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 1281.502232][T27086] ? __asan_memset+0x22/0x50 [ 1281.502259][T27086] ? current_check_refer_path+0x402/0x11f0 [ 1281.502324][T27086] tomoyo_path_rename+0x14e/0x1b0 [ 1281.502348][T27086] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 1281.502378][T27086] security_path_rename+0x248/0x460 [ 1281.502430][T27086] filename_renameat2+0x4ba/0x9b0 [ 1281.502448][T27086] ? __might_fault+0xaf/0x130 [ 1281.502479][T27086] ? __pfx_filename_renameat2+0x10/0x10 [ 1281.502515][T27086] ? do_getname+0x151/0x250 [ 1281.502534][T27086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.502555][T27086] __se_sys_rename+0x55/0x2c0 [ 1281.502576][T27086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.502597][T27086] do_syscall_64+0x174/0x580 [ 1281.502621][T27086] ? trace_irq_disable+0x3b/0x140 [ 1281.502647][T27086] ? clear_bhb_loop+0x40/0x90 [ 1281.502671][T27086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.502691][T27086] RIP: 0033:0x7f77a70cde59 [ 1281.502710][T27086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.502727][T27086] RSP: 002b:00007f77a52e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1281.502746][T27086] RAX: ffffffffffffffda RBX: 00007f77a7356180 RCX: 00007f77a70cde59 [ 1281.502761][T27086] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000180 [ 1281.502781][T27086] RBP: 00007f77a52e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.502794][T27086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.502805][T27086] R13: 00007f77a7356218 R14: 00007f77a7356180 R15: 00007ffc491b2e48 [ 1281.502835][T27086] [ 1281.502858][T27086] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1282.061496][T27102] FAULT_INJECTION: forcing a failure. [ 1282.061496][T27102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1282.061532][T27102] CPU: 0 UID: 0 PID: 27102 Comm: syz.0.7338 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1282.061560][T27102] Tainted: [L]=SOFTLOCKUP [ 1282.061568][T27102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1282.061580][T27102] Call Trace: [ 1282.061588][T27102] [ 1282.061597][T27102] dump_stack_lvl+0xe8/0x150 [ 1282.061625][T27102] should_fail_ex+0x467/0x600 [ 1282.061660][T27102] _copy_from_user+0x2d/0xb0 [ 1282.061695][T27102] kstrtouint_from_user+0xd6/0x180 [ 1282.061728][T27102] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1282.061775][T27102] proc_fail_nth_write+0x8e/0x210 [ 1282.061799][T27102] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1282.061828][T27102] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1282.061850][T27102] vfs_write+0x29f/0xbb0 [ 1282.061885][T27102] ? __pfx_vfs_write+0x10/0x10 [ 1282.061913][T27102] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1282.061939][T27102] ? lockdep_hardirqs_on+0x7a/0x110 [ 1282.061964][T27102] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1282.061989][T27102] ? mutex_lock_nested+0x152/0x1d0 [ 1282.062018][T27102] ? fdget_pos+0x252/0x320 [ 1282.062049][T27102] ksys_write+0x156/0x270 [ 1282.062077][T27102] ? __pfx_ksys_write+0x10/0x10 [ 1282.062109][T27102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.062132][T27102] do_syscall_64+0x174/0x580 [ 1282.062156][T27102] ? trace_irq_disable+0x3b/0x140 [ 1282.062180][T27102] ? clear_bhb_loop+0x40/0x90 [ 1282.062205][T27102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.062224][T27102] RIP: 0033:0x7f9023b3e68e [ 1282.062243][T27102] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1282.062260][T27102] RSP: 002b:00007f9021dd5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1282.062282][T27102] RAX: ffffffffffffffda RBX: 00007f9021dd66c0 RCX: 00007f9023b3e68e [ 1282.062297][T27102] RDX: 0000000000000001 RSI: 00007f9021dd60a0 RDI: 0000000000000003 [ 1282.062310][T27102] RBP: 00007f9021dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1282.062323][T27102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.062335][T27102] R13: 00007f9023e06038 R14: 00007f9023e05fa0 R15: 00007ffda9ad3d88 [ 1282.062384][T27102] [ 1282.685211][ T5689] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1282.750648][T27130] FAULT_INJECTION: forcing a failure. [ 1282.750648][T27130] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.750693][T27130] CPU: 0 UID: 0 PID: 27130 Comm: syz.0.7349 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1282.750720][T27130] Tainted: [L]=SOFTLOCKUP [ 1282.750728][T27130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1282.750740][T27130] Call Trace: [ 1282.750747][T27130] [ 1282.750757][T27130] dump_stack_lvl+0xe8/0x150 [ 1282.750784][T27130] should_fail_ex+0x467/0x600 [ 1282.750816][T27130] should_failslab+0xa8/0x100 [ 1282.750840][T27130] __kmalloc_noprof+0xfb/0x790 [ 1282.750862][T27130] ? tomoyo_realpath_from_path+0xef/0x640 [ 1282.750889][T27130] ? tomoyo_realpath_from_path+0xef/0x640 [ 1282.750921][T27130] tomoyo_realpath_from_path+0xef/0x640 [ 1282.750956][T27130] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1282.750979][T27130] tomoyo_path_number_perm+0x246/0x5f0 [ 1282.751006][T27130] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1282.751028][T27130] ? __lock_acquire+0x683/0x2ce0 [ 1282.751066][T27130] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1282.751091][T27130] ? hook_file_ioctl+0x1f3/0x600 [ 1282.751115][T27130] ? lockdep_hardirqs_on+0x7a/0x110 [ 1282.751155][T27130] ? __fget_files+0x2a/0x420 [ 1282.751178][T27130] ? __fget_files+0x2a/0x420 [ 1282.751196][T27130] ? __fget_files+0x3a8/0x420 [ 1282.751214][T27130] ? __fget_files+0x2a/0x420 [ 1282.751237][T27130] security_file_ioctl+0xc3/0x2a0 [ 1282.751261][T27130] __se_sys_ioctl+0x47/0x170 [ 1282.751287][T27130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.751307][T27130] do_syscall_64+0x174/0x580 [ 1282.751330][T27130] ? trace_irq_disable+0x3b/0x140 [ 1282.751355][T27130] ? clear_bhb_loop+0x40/0x90 [ 1282.751379][T27130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.751397][T27130] RIP: 0033:0x7f9023b7de59 [ 1282.751414][T27130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1282.751432][T27130] RSP: 002b:00007f9021dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1282.751453][T27130] RAX: ffffffffffffffda RBX: 00007f9023e05fa0 RCX: 00007f9023b7de59 [ 1282.751468][T27130] RDX: 00002000000001c0 RSI: 000000004068aea3 RDI: 0000000000000004 [ 1282.751482][T27130] RBP: 00007f9021dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1282.751495][T27130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.751508][T27130] R13: 00007f9023e06038 R14: 00007f9023e05fa0 R15: 00007ffda9ad3d88 [ 1282.751539][T27130] [ 1282.752857][T27130] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1283.029511][ T5689] usb 6-1: Using ep0 maxpacket: 16 [ 1283.049391][ T5689] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1283.049418][ T5689] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1283.049437][ T5689] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1283.049454][ T5689] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1283.049486][ T5689] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1283.049504][ T5689] usb 6-1: config 0 has no interface number 0 [ 1283.049545][ T5689] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1283.049573][ T5689] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1283.049593][ T5689] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1283.049627][ T5689] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1283.049651][ T5689] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1283.049669][ T5689] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1283.127638][ T5689] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1283.127670][ T5689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.127689][ T5689] usb 6-1: Product: syz [ 1283.127704][ T5689] usb 6-1: Manufacturer: syz [ 1283.127717][ T5689] usb 6-1: SerialNumber: syz [ 1283.206609][ T5689] usb 6-1: config 0 descriptor?? [ 1283.228392][ T5689] usb 6-1: selecting invalid altsetting 2 [ 1283.238875][T27141] FAULT_INJECTION: forcing a failure. [ 1283.238875][T27141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1283.238910][T27141] CPU: 0 UID: 0 PID: 27141 Comm: syz.0.7354 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1283.238937][T27141] Tainted: [L]=SOFTLOCKUP [ 1283.238944][T27141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1283.238956][T27141] Call Trace: [ 1283.238964][T27141] [ 1283.238973][T27141] dump_stack_lvl+0xe8/0x150 [ 1283.239002][T27141] should_fail_ex+0x467/0x600 [ 1283.239037][T27141] _copy_from_user+0x2d/0xb0 [ 1283.239061][T27141] do_sock_getsockopt+0x200/0x7e0 [ 1283.239093][T27141] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1283.239134][T27141] ? __fget_files+0x3a8/0x420 [ 1283.239154][T27141] ? __fget_files+0x2a/0x420 [ 1283.239179][T27141] __x64_sys_getsockopt+0x1aa/0x250 [ 1283.239206][T27141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.239226][T27141] do_syscall_64+0x174/0x580 [ 1283.239248][T27141] ? trace_irq_disable+0x3b/0x140 [ 1283.239271][T27141] ? clear_bhb_loop+0x40/0x90 [ 1283.239295][T27141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.239315][T27141] RIP: 0033:0x7f9023b7de59 [ 1283.239332][T27141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.239345][T27141] RSP: 002b:00007f9021dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1283.239362][T27141] RAX: ffffffffffffffda RBX: 00007f9023e05fa0 RCX: 00007f9023b7de59 [ 1283.239374][T27141] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003 [ 1283.239384][T27141] RBP: 00007f9021dd6090 R08: 0000200000000080 R09: 0000000000000000 [ 1283.239395][T27141] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1283.239405][T27141] R13: 00007f9023e06038 R14: 00007f9023e05fa0 R15: 00007ffda9ad3d88 [ 1283.239429][T27141] [ 1283.988352][T27167] FAULT_INJECTION: forcing a failure. [ 1283.988352][T27167] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.988388][T27167] CPU: 0 UID: 0 PID: 27167 Comm: syz.0.7365 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1283.988417][T27167] Tainted: [L]=SOFTLOCKUP [ 1283.988425][T27167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1283.988437][T27167] Call Trace: [ 1283.988445][T27167] [ 1283.988455][T27167] dump_stack_lvl+0xe8/0x150 [ 1283.988475][T27167] should_fail_ex+0x467/0x600 [ 1283.988495][T27167] should_failslab+0xa8/0x100 [ 1283.988510][T27167] __kmalloc_noprof+0xfb/0x790 [ 1283.988525][T27167] ? nl80211_trigger_scan+0x59c/0x21e0 [ 1283.988555][T27167] ? nl80211_trigger_scan+0x59c/0x21e0 [ 1283.988578][T27167] ? lockdep_hardirqs_on+0x7a/0x110 [ 1283.988610][T27167] nl80211_trigger_scan+0x59c/0x21e0 [ 1283.988642][T27167] genl_family_rcv_msg_doit+0x233/0x340 [ 1283.988667][T27167] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1283.988699][T27167] ? bpf_lsm_capable+0x9/0x20 [ 1283.988723][T27167] ? security_capable+0x7e/0x2c0 [ 1283.988752][T27167] genl_rcv_msg+0x614/0x7a0 [ 1283.988779][T27167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1283.988796][T27167] ? ref_tracker_free+0x668/0x820 [ 1283.988811][T27167] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1283.988838][T27167] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 1283.988859][T27167] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1283.988887][T27167] ? ____sys_sendmsg+0x565/0x870 [ 1283.988911][T27167] ? ___sys_sendmsg+0x2a5/0x360 [ 1283.988935][T27167] ? __x64_sys_sendmsg+0x1b7/0x290 [ 1283.988959][T27167] ? do_syscall_64+0x174/0x580 [ 1283.988983][T27167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.989011][T27167] netlink_rcv_skb+0x226/0x4a0 [ 1283.989036][T27167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1283.989058][T27167] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1283.989097][T27167] ? netlink_deliver_tap+0x2e/0x1b0 [ 1283.989123][T27167] ? netlink_deliver_tap+0x2e/0x1b0 [ 1283.989153][T27167] genl_rcv+0x28/0x40 [ 1283.989172][T27167] netlink_unicast+0x7f5/0x990 [ 1283.989208][T27167] netlink_sendmsg+0x813/0xb40 [ 1283.989244][T27167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1283.989275][T27167] ? aa_sock_msg_perm+0x122/0x200 [ 1283.989306][T27167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1283.989331][T27167] sock_sendmsg_nosec+0x13a/0x180 [ 1283.989354][T27167] ____sys_sendmsg+0x565/0x870 [ 1283.989379][T27167] ? __might_fault+0xaf/0x130 [ 1283.989408][T27167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1283.989443][T27167] ? import_iovec+0x73/0xa0 [ 1283.989470][T27167] ___sys_sendmsg+0x2a5/0x360 [ 1283.989496][T27167] ? __lock_acquire+0x683/0x2ce0 [ 1283.989533][T27167] ? __pfx____sys_sendmsg+0x10/0x10 [ 1283.989595][T27167] ? __fget_files+0x2a/0x420 [ 1283.989616][T27167] ? __fget_files+0x3a8/0x420 [ 1283.989649][T27167] __x64_sys_sendmsg+0x1b7/0x290 [ 1283.989677][T27167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1283.989721][T27167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.989742][T27167] do_syscall_64+0x174/0x580 [ 1283.989766][T27167] ? trace_irq_disable+0x3b/0x140 [ 1283.989792][T27167] ? clear_bhb_loop+0x40/0x90 [ 1283.989816][T27167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.989836][T27167] RIP: 0033:0x7f9023b7de59 [ 1283.989855][T27167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.989871][T27167] RSP: 002b:00007f9021dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1283.989893][T27167] RAX: ffffffffffffffda RBX: 00007f9023e05fa0 RCX: 00007f9023b7de59 [ 1283.989908][T27167] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 1283.989920][T27167] RBP: 00007f9021dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.989934][T27167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.989946][T27167] R13: 00007f9023e06038 R14: 00007f9023e05fa0 R15: 00007ffda9ad3d88 [ 1283.989978][T27167] [ 1284.365437][ T5689] get_1284_register timeout [ 1284.365686][ C1] usb 6-1: async_complete: urb error -104 [ 1284.365787][ C1] usb 6-1: async_complete: urb error -104 [ 1284.365875][ C1] usb 6-1: async_complete: urb error -104 [ 1284.627355][T27190] FAULT_INJECTION: forcing a failure. [ 1284.627355][T27190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1284.627379][T27190] CPU: 0 UID: 0 PID: 27190 Comm: syz.0.7376 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1284.627395][T27190] Tainted: [L]=SOFTLOCKUP [ 1284.627402][T27190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1284.627412][T27190] Call Trace: [ 1284.627421][T27190] [ 1284.627429][T27190] dump_stack_lvl+0xe8/0x150 [ 1284.627455][T27190] should_fail_ex+0x467/0x600 [ 1284.627488][T27190] _copy_to_user+0x31/0xb0 [ 1284.627512][T27190] simple_read_from_buffer+0xe1/0x170 [ 1284.627538][T27190] proc_fail_nth_read+0x1be/0x230 [ 1284.627564][T27190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1284.627589][T27190] ? rw_verify_area+0x250/0x4d0 [ 1284.627608][T27190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1284.627619][T27190] vfs_read+0x219/0xa90 [ 1284.627636][T27190] ? __pfx_vfs_read+0x10/0x10 [ 1284.627650][T27190] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1284.627665][T27190] ? lockdep_hardirqs_on+0x7a/0x110 [ 1284.627678][T27190] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1284.627691][T27190] ? mutex_lock_nested+0x152/0x1d0 [ 1284.627706][T27190] ? fdget_pos+0x252/0x320 [ 1284.627723][T27190] ksys_read+0x156/0x270 [ 1284.627737][T27190] ? __pfx_ksys_read+0x10/0x10 [ 1284.627750][T27190] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1284.627767][T27190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.627779][T27190] do_syscall_64+0x174/0x580 [ 1284.627792][T27190] ? trace_irq_disable+0x3b/0x140 [ 1284.627805][T27190] ? clear_bhb_loop+0x40/0x90 [ 1284.627818][T27190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.627829][T27190] RIP: 0033:0x7f9023b3e68e [ 1284.627843][T27190] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1284.627854][T27190] RSP: 002b:00007f9021dd5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1284.627866][T27190] RAX: ffffffffffffffda RBX: 00007f9021dd66c0 RCX: 00007f9023b3e68e [ 1284.627874][T27190] RDX: 000000000000000f RSI: 00007f9021dd60a0 RDI: 0000000000000004 [ 1284.627881][T27190] RBP: 00007f9021dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1284.627887][T27190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1284.627893][T27190] R13: 00007f9023e06038 R14: 00007f9023e05fa0 R15: 00007ffda9ad3d88 [ 1284.627910][T27190] [ 1285.708885][T12970] usb 6-1: USB disconnect, device number 44 [ 1285.882868][ T5805] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1286.065103][ T5805] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1286.065133][ T5805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.065152][ T5805] usb 3-1: config 0 has no interface number 0 [ 1286.065196][ T5805] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1286.065221][ T5805] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1286.065242][ T5805] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1286.131509][ T5805] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1286.131537][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.131557][ T5805] usb 3-1: Product: syz [ 1286.131572][ T5805] usb 3-1: Manufacturer: syz [ 1286.131587][ T5805] usb 3-1: SerialNumber: syz [ 1286.181434][ T5805] usb 3-1: config 0 descriptor?? [ 1286.835224][ T5805] usb 3-1: USB disconnect, device number 10 [ 1287.690077][ T5616] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1287.849321][ T5616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.849367][ T5616] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1287.849390][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.860038][ T5616] usb 3-1: config 0 descriptor?? [ 1288.093283][ T5616] usbhid 3-1:0.0: can't add hid device: -71 [ 1288.093415][ T5616] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1288.127763][ T5616] usb 3-1: USB disconnect, device number 11 [ 1288.638809][ T5616] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1288.800051][ T5616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.800080][ T5616] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1288.800093][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.815299][ T5616] usb 3-1: config 0 descriptor?? [ 1289.706658][ T5616] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1289.711532][ T5616] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input229 [ 1290.045128][T21629] usb 3-1: USB disconnect, device number 12 [ 1290.045290][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1290.624908][ T5805] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1290.785609][ T5805] usb 6-1: Using ep0 maxpacket: 32 [ 1290.787723][ T5805] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1290.787750][ T5805] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1290.787772][ T5805] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1290.787820][ T5805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1290.787843][ T5805] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1290.787867][ T5805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1290.787888][ T5805] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1290.787909][ T5805] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1290.787949][ T5805] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1290.787972][ T5805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.792796][ T5805] usb 6-1: config 0 descriptor?? [ 1291.012152][ T5805] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1291.227403][T27269] FAULT_INJECTION: forcing a failure. [ 1291.227403][T27269] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.227440][T27269] CPU: 1 UID: 0 PID: 27269 Comm: syz.5.7395 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1291.227468][T27269] Tainted: [L]=SOFTLOCKUP [ 1291.227476][T27269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1291.227488][T27269] Call Trace: [ 1291.227496][T27269] [ 1291.227506][T27269] dump_stack_lvl+0xe8/0x150 [ 1291.227533][T27269] should_fail_ex+0x467/0x600 [ 1291.227569][T27269] should_failslab+0xa8/0x100 [ 1291.227595][T27269] __kmalloc_noprof+0xfb/0x790 [ 1291.227617][T27269] ? usb_alloc_urb+0x46/0x150 [ 1291.227636][T27269] ? usb_alloc_urb+0x46/0x150 [ 1291.227661][T27269] usb_alloc_urb+0x46/0x150 [ 1291.227682][T27269] usblp_submit_read+0x1f/0x4b0 [ 1291.227702][T27269] ? usblp_open+0x27f/0x430 [ 1291.227725][T27269] usblp_open+0x28c/0x430 [ 1291.227750][T27269] ? __pfx_usblp_open+0x10/0x10 [ 1291.227773][T27269] usb_open+0x159/0x1e0 [ 1291.227795][T27269] chrdev_open+0x4dc/0x600 [ 1291.227828][T27269] ? __pfx_chrdev_open+0x10/0x10 [ 1291.227856][T27269] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1291.227888][T27269] ? __pfx_chrdev_open+0x10/0x10 [ 1291.227916][T27269] do_dentry_open+0x849/0x1420 [ 1291.227947][T27269] vfs_open+0x3b/0x350 [ 1291.227964][T27269] ? path_openat+0x2e49/0x3850 [ 1291.227992][T27269] path_openat+0x2e60/0x3850 [ 1291.228026][T27269] ? kmem_cache_alloc_noprof+0x358/0x680 [ 1291.228046][T27269] ? __x64_sys_openat+0x138/0x170 [ 1291.228065][T27269] ? do_syscall_64+0x174/0x580 [ 1291.228089][T27269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.228128][T27269] do_file_open+0x23e/0x4a0 [ 1291.228152][T27269] ? lockdep_hardirqs_on+0x7a/0x110 [ 1291.228190][T27269] ? __pfx_do_file_open+0x10/0x10 [ 1291.228240][T27269] ? alloc_fd+0x654/0x6d0 [ 1291.228271][T27269] do_sys_openat2+0x115/0x200 [ 1291.228294][T27269] ? __pfx_do_sys_openat2+0x10/0x10 [ 1291.228321][T27269] ? rcu_is_watching+0x15/0xb0 [ 1291.228356][T27269] __x64_sys_openat+0x138/0x170 [ 1291.228380][T27269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.228400][T27269] do_syscall_64+0x174/0x580 [ 1291.228424][T27269] ? trace_irq_disable+0x3b/0x140 [ 1291.228450][T27269] ? clear_bhb_loop+0x40/0x90 [ 1291.228473][T27269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.228494][T27269] RIP: 0033:0x7f77a708e68e [ 1291.228513][T27269] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1291.228529][T27269] RSP: 002b:00007f77a5325b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1291.228550][T27269] RAX: ffffffffffffffda RBX: 00007f77a53266c0 RCX: 00007f77a708e68e [ 1291.228565][T27269] RDX: 0000000000000002 RSI: 00007f77a5325c00 RDI: ffffffffffffff9c [ 1291.228578][T27269] RBP: 00007f77a5326090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.228590][T27269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1291.228602][T27269] R13: 00007f77a7356038 R14: 00007f77a7355fa0 R15: 00007ffc491b2e48 [ 1291.228635][T27269] [ 1291.256905][ T5616] usb 6-1: USB disconnect, device number 45 [ 1291.303409][ T5616] usblp0: removed [ 1292.163603][ T5616] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1292.323875][ T5616] usb 6-1: Using ep0 maxpacket: 8 [ 1292.327897][ T5616] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 1292.327925][ T5616] usb 6-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 1292.327945][ T5616] usb 6-1: config 0 has no interface number 0 [ 1292.327989][ T5616] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 102, changing to 10 [ 1292.328015][ T5616] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 1292.328042][ T5616] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1292.328068][ T5616] usb 6-1: config 0 interface 52 has no altsetting 0 [ 1292.329180][ T5616] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1292.329206][ T5616] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1292.329224][ T5616] usb 6-1: Manufacturer: syz [ 1292.335976][ T5616] usb 6-1: config 0 descriptor?? [ 1292.375629][ T5616] hub 6-1:0.52: bad descriptor, ignoring hub [ 1292.375666][ T5616] hub 6-1:0.52: probe with driver hub failed with error -5 [ 1292.754859][ T5616] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input230 [ 1292.884529][ T5616] usb 6-1: Failed to suspend device, error -71 [ 1292.885492][ T5616] usb 6-1: USB disconnect, device number 46 [ 1294.236794][T14060] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1294.410496][T14060] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.410544][T14060] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1294.410560][T14060] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.414187][T14060] usb 6-1: config 0 descriptor?? [ 1294.641931][T14060] usbhid 6-1:0.0: can't add hid device: -71 [ 1294.642057][T14060] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1294.667646][T14060] usb 6-1: USB disconnect, device number 47 [ 1295.209191][T14060] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1295.371763][T14060] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.371821][T14060] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1295.371845][T14060] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.383999][T14060] usb 6-1: config 0 descriptor?? [ 1295.652143][T14060] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 1295.665911][T14060] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input231 [ 1295.708801][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1295.713630][T14060] usb 6-1: USB disconnect, device number 48 [ 1296.512886][ T6391] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1296.572823][T25363] vivid-000: reconnect [ 1296.788317][ T6391] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1296.798605][ T6391] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1296.801008][ T6391] usb 3-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 1296.801036][ T6391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.801056][ T6391] usb 3-1: Product: syz [ 1296.801070][ T6391] usb 3-1: Manufacturer: syz [ 1296.801085][ T6391] usb 3-1: SerialNumber: syz [ 1297.090636][T27305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.092075][T27305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.211811][ T6391] ================================================================== [ 1297.211825][ T6391] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1297.211851][ T6391] Read of size 8 at addr ffffc9000de1a008 by task kworker/0:6/6391 [ 1297.211864][ T6391] [ 1297.211875][ T6391] CPU: 0 UID: 0 PID: 6391 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1297.211894][ T6391] Tainted: [L]=SOFTLOCKUP [ 1297.211899][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1297.211909][ T6391] Workqueue: usb_hub_wq hub_event [ 1297.211928][ T6391] Call Trace: [ 1297.211935][ T6391] [ 1297.211943][ T6391] dump_stack_lvl+0xe8/0x150 [ 1297.211960][ T6391] print_address_description+0x55/0x1e0 [ 1297.211978][ T6391] ? __list_add_valid_or_report+0x4e/0x130 [ 1297.211990][ T6391] print_report+0x58/0x70 [ 1297.212006][ T6391] kasan_report+0x117/0x150 [ 1297.212024][ T6391] ? __list_add_valid_or_report+0x4e/0x130 [ 1297.212040][ T6391] __list_add_valid_or_report+0x4e/0x130 [ 1297.212054][ T6391] kcov_remote_stop+0x457/0x680 [ 1297.212073][ T6391] hub_event+0x4789/0x4cf0 [ 1297.212099][ T6391] ? __lock_acquire+0x683/0x2ce0 [ 1297.212131][ T6391] ? __pfx_hub_event+0x10/0x10 [ 1297.212146][ T6391] ? process_one_work+0x8cd/0x12b0 [ 1297.212167][ T6391] ? process_one_work+0x8cd/0x12b0 [ 1297.212185][ T6391] ? rcu_is_watching+0x15/0xb0 [ 1297.212206][ T6391] ? process_one_work+0x8cd/0x12b0 [ 1297.212225][ T6391] ? process_one_work+0x8cd/0x12b0 [ 1297.212243][ T6391] process_one_work+0x93a/0x12b0 [ 1297.212266][ T6391] ? __pfx_process_one_work+0x10/0x10 [ 1297.212284][ T6391] ? do_raw_spin_lock+0x12b/0x2f0 [ 1297.212301][ T6391] ? assign_work+0x3cf/0x5d0 [ 1297.212321][ T6391] worker_thread+0xb05/0x10d0 [ 1297.212345][ T6391] ? __kthread_parkme+0x71/0x1f0 [ 1297.212369][ T6391] kthread+0x388/0x470 [ 1297.212386][ T6391] ? __pfx_worker_thread+0x10/0x10 [ 1297.212406][ T6391] ? __pfx_kthread+0x10/0x10 [ 1297.212422][ T6391] ret_from_fork+0x514/0xb70 [ 1297.212440][ T6391] ? __pfx_ret_from_fork+0x10/0x10 [ 1297.212457][ T6391] ? __switch_to+0xc89/0x1420 [ 1297.212472][ T6391] ? __pfx_kthread+0x10/0x10 [ 1297.212487][ T6391] ret_from_fork_asm+0x1a/0x30 [ 1297.212510][ T6391] [ 1297.212516][ T6391] [ 1297.212520][ T6391] The buggy address belongs to a vmalloc virtual mapping [ 1297.212538][ T6391] Memory state around the buggy address: [ 1297.212546][ T6391] ffffc9000de19f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1297.212556][ T6391] ffffc9000de19f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1297.212566][ T6391] >ffffc9000de1a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1297.212573][ T6391] ^ [ 1297.212582][ T6391] ffffc9000de1a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1297.212592][ T6391] ffffc9000de1a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1297.212599][ T6391] ================================================================== [ 1297.217317][ T6391] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1297.217341][ T6391] CPU: 0 UID: 0 PID: 6391 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1297.217369][ T6391] Tainted: [L]=SOFTLOCKUP [ 1297.217377][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1297.217391][ T6391] Workqueue: usb_hub_wq hub_event [ 1297.217419][ T6391] Call Trace: [ 1297.217427][ T6391] [ 1297.217436][ T6391] vpanic+0x56c/0xa60 [ 1297.217466][ T6391] ? __pfx_vpanic+0x10/0x10 [ 1297.217492][ T6391] ? __pfx___schedule+0x10/0x10 [ 1297.217517][ T6391] panic+0xc5/0xd0 [ 1297.217543][ T6391] ? __pfx_panic+0x10/0x10 [ 1297.217569][ T6391] ? preempt_schedule_thunk+0x16/0x40 [ 1297.217601][ T6391] ? __list_add_valid_or_report+0x4e/0x130 [ 1297.217621][ T6391] check_panic_on_warn+0x89/0xb0 [ 1297.217645][ T6391] ? __list_add_valid_or_report+0x4e/0x130 [ 1297.217664][ T6391] end_report+0x73/0x170 [ 1297.217687][ T6391] ? __list_add_valid_or_report+0x4e/0x130 [ 1297.217705][ T6391] kasan_report+0x128/0x150 [ 1297.217738][ T6391] ? __list_add_valid_or_report+0x4e/0x130 [ 1297.217759][ T6391] __list_add_valid_or_report+0x4e/0x130 [ 1297.217780][ T6391] kcov_remote_stop+0x457/0x680 [ 1297.217805][ T6391] hub_event+0x4789/0x4cf0 [ 1297.217828][ T6391] ? __lock_acquire+0x683/0x2ce0 [ 1297.217873][ T6391] ? __pfx_hub_event+0x10/0x10 [ 1297.217897][ T6391] ? process_one_work+0x8cd/0x12b0 [ 1297.217926][ T6391] ? process_one_work+0x8cd/0x12b0 [ 1297.217953][ T6391] ? rcu_is_watching+0x15/0xb0 [ 1297.217976][ T6391] ? process_one_work+0x8cd/0x12b0 [ 1297.217999][ T6391] ? process_one_work+0x8cd/0x12b0 [ 1297.218022][ T6391] process_one_work+0x93a/0x12b0 [ 1297.218054][ T6391] ? __pfx_process_one_work+0x10/0x10 [ 1297.218079][ T6391] ? do_raw_spin_lock+0x12b/0x2f0 [ 1297.218099][ T6391] ? assign_work+0x3cf/0x5d0 [ 1297.218118][ T6391] worker_thread+0xb05/0x10d0 [ 1297.218144][ T6391] ? __kthread_parkme+0x71/0x1f0 [ 1297.218161][ T6391] kthread+0x388/0x470 [ 1297.218183][ T6391] ? __pfx_worker_thread+0x10/0x10 [ 1297.218207][ T6391] ? __pfx_kthread+0x10/0x10 [ 1297.218223][ T6391] ret_from_fork+0x514/0xb70 [ 1297.218242][ T6391] ? __pfx_ret_from_fork+0x10/0x10 [ 1297.218258][ T6391] ? __switch_to+0xc89/0x1420 [ 1297.218272][ T6391] ? __pfx_kthread+0x10/0x10 [ 1297.218290][ T6391] ret_from_fork_asm+0x1a/0x30 [ 1297.218319][ T6391] [ 1297.218602][ T6391] Kernel Offset: disabled