last executing test programs: 2m31.643667554s ago: executing program 1 (id=106): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e", 0xbc}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d603", 0x45}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m31.249884991s ago: executing program 1 (id=108): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b", 0x77}, {&(0x7f0000000380)}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d603", 0x45}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0", 0x9}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m30.995037212s ago: executing program 1 (id=109): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m30.890304735s ago: executing program 1 (id=110): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e8", 0x4b}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917b", 0x2f}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m30.720582109s ago: executing program 1 (id=111): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2}, 0x5) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000500)="d7") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000001480)="5579d8ba", 0x4) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, r3, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000001080)=ANY=[@ANYBLOB="1c1000005e000100000080000000000008000000010000000410"], 0x101c}], 0x1}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) read(r6, 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x6, 0xab, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="8fc8984e00c0", 0xfffffffffffffffd, 0x0, 0x10030, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000000)=r5) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1915, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x78, 0x8, 0x1, {0x7, 0x25, 0x1, 0x0, 0x8, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x5}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfd, 0x2, 0x3, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x2, 0x0, {0x7, 0x25, 0x1, 0x0, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 2m27.568723063s ago: executing program 1 (id=136): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b", 0x77}, {&(0x7f0000000380)}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d603", 0x45}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0", 0x9}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m12.569477468s ago: executing program 32 (id=136): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b", 0x77}, {&(0x7f0000000380)}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d603", 0x45}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0", 0x9}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m15.172239903s ago: executing program 3 (id=847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, 0x0) 1m14.919766727s ago: executing program 3 (id=850): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6", 0x2d}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e", 0xbc}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c61", 0x8a}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m14.599697764s ago: executing program 3 (id=854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast=0xffff0011}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (fail_nth: 1) 1m14.492666801s ago: executing program 3 (id=856): r0 = fsopen(&(0x7f0000000180)='v7\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xf6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x40045201, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r4) sendmsg$NFC_CMD_GET_DEVICE(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES8, @ANYBLOB="01082cbd7000fbdbdf2501000000080001003180", @ANYRES64=r6, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') r7 = openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) move_mount(r7, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0/../file0\x00', 0x100) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000090603000000000000000000050000400900020073797a310000000005000100070000002400078005000700ff0000000c00018008000140e00040000c00140b08000140ffff0011"], 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m14.177164017s ago: executing program 3 (id=858): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) 1m14.125758232s ago: executing program 3 (id=859): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000000c0)={0x0, 0xc9, 0x7d, 0x20203143, 0x0, [0x2], [0x101], [], [0x0, 0x8000005f8]}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) ptrace$poke(0xffffffffffffffff, r1, &(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x6}) setpriority(0x2, r1, 0x7) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x8000) 59.071486704s ago: executing program 33 (id=859): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000000c0)={0x0, 0xc9, 0x7d, 0x20203143, 0x0, [0x2], [0x101], [], [0x0, 0x8000005f8]}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) ptrace$poke(0xffffffffffffffff, r1, &(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x6}) setpriority(0x2, r1, 0x7) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x8000) 1.478194943s ago: executing program 4 (id=1644): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc", 0x28}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.371053035s ago: executing program 2 (id=1647): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b", 0x77}, {&(0x7f0000000380)}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d7", 0x81}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.219968103s ago: executing program 0 (id=1649): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b", 0x77}, {&(0x7f0000000380)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a", 0x7d}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.124049684s ago: executing program 4 (id=1651): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b", 0x77}, {&(0x7f0000000380)}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8d", 0x67}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0) 1.053751294s ago: executing program 2 (id=1652): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a", 0x42}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917b", 0x2f}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.025591905s ago: executing program 0 (id=1653): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b", 0x77}, {&(0x7f0000000380)}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917b", 0x2f}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c", 0x89}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c1", 0xa}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 920.570051ms ago: executing program 5 (id=1654): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f0", 0x4f}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 877.849829ms ago: executing program 0 (id=1655): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e8", 0x4b}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917b", 0x2f}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 865.35413ms ago: executing program 2 (id=1656): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8", 0x4a}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917b", 0x2f}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 785.05495ms ago: executing program 4 (id=1657): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e8", 0x4b}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917b", 0x2f}, {&(0x7f0000000800)}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0", 0x9}], 0x1}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 784.634067ms ago: executing program 5 (id=1658): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f0", 0x4f}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c61", 0x8a}, {&(0x7f00000000c0)}], 0x5}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x6f4}}, 0x0) 651.051975ms ago: executing program 0 (id=1659): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b", 0x3c}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 621.97731ms ago: executing program 4 (id=1660): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b", 0x77}, {&(0x7f0000000380)}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d7", 0x81}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 613.311174ms ago: executing program 2 (id=1661): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b", 0x77}, {&(0x7f0000000380)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a", 0x7d}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 565.067263ms ago: executing program 5 (id=1662): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e", 0xbc}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c61", 0x8a}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 417.901312ms ago: executing program 0 (id=1663): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b", 0x77}, {&(0x7f0000000380)}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917b", 0x2f}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c", 0x89}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c1", 0xa}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 394.722678ms ago: executing program 5 (id=1664): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a", 0x42}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917b", 0x2f}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 328.304581ms ago: executing program 4 (id=1665): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b", 0x77}, {&(0x7f0000000380)}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8d", 0x67}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 313.163018ms ago: executing program 2 (id=1666): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b", 0x77}, {&(0x7f0000000380)}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917b", 0x2f}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc3", 0x88}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c1", 0xa}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 203.061469ms ago: executing program 5 (id=1667): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f0", 0x4f}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 201.444915ms ago: executing program 0 (id=1668): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e8", 0x4b}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917b", 0x2f}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 92.970945ms ago: executing program 2 (id=1669): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8", 0x4a}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917b", 0x2f}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 36.588895ms ago: executing program 4 (id=1670): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f0", 0x4f}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c61", 0x8a}, {&(0x7f00000000c0)}], 0x5}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x6f4}}, 0x0) 0s ago: executing program 5 (id=1671): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b", 0x3c}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): 92] _copy_from_user+0x2d/0xb0 [ 189.393856][ T7792] ___sys_sendmsg+0x1c6/0x360 [ 189.393886][ T7792] ? __lock_acquire+0x6b5/0x2cf0 [ 189.393919][ T7792] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.393984][ T7792] ? __fget_files+0x2a/0x420 [ 189.394011][ T7792] ? __fget_files+0x3a6/0x420 [ 189.394048][ T7792] __x64_sys_sendmsg+0x1c3/0x2a0 [ 189.394088][ T7792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.394126][ T7792] ? __pfx_ksys_write+0x10/0x10 [ 189.394165][ T7792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.394191][ T7792] do_syscall_64+0x15f/0xf80 [ 189.394214][ T7792] ? trace_irq_disable+0x3b/0x140 [ 189.394240][ T7792] ? clear_bhb_loop+0x40/0x90 [ 189.394266][ T7792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.394294][ T7792] RIP: 0033:0x7f4f8c94c819 [ 189.394316][ T7792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.394336][ T7792] RSP: 002b:00007f4f8ab9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.394361][ T7792] RAX: ffffffffffffffda RBX: 00007f4f8cbc5fa0 RCX: 00007f4f8c94c819 [ 189.394378][ T7792] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 189.394392][ T7792] RBP: 00007f4f8ab9e090 R08: 0000000000000000 R09: 0000000000000000 [ 189.394406][ T7792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.394420][ T7792] R13: 00007f4f8cbc6038 R14: 00007f4f8cbc5fa0 R15: 00007ffc1cf54ca8 [ 189.394455][ T7792] [ 189.989793][ T5145] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 190.497541][ T7827] FAULT_INJECTION: forcing a failure. [ 190.497541][ T7827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.497582][ T7827] CPU: 1 UID: 0 PID: 7827 Comm: syz.4.773 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 190.497614][ T7827] Tainted: [L]=SOFTLOCKUP [ 190.497621][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 190.497633][ T7827] Call Trace: [ 190.497642][ T7827] [ 190.497650][ T7827] dump_stack_lvl+0xe8/0x150 [ 190.497680][ T7827] should_fail_ex+0x46b/0x600 [ 190.497715][ T7827] _copy_to_user+0x31/0xb0 [ 190.497750][ T7827] simple_read_from_buffer+0xe1/0x170 [ 190.497783][ T7827] proc_fail_nth_read+0x1be/0x230 [ 190.497822][ T7827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.497853][ T7827] ? rw_verify_area+0x2ac/0x4e0 [ 190.497883][ T7827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.497911][ T7827] vfs_read+0x212/0xa80 [ 190.497951][ T7827] ? __pfx_vfs_read+0x10/0x10 [ 190.497984][ T7827] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 190.498007][ T7827] ? lockdep_hardirqs_on+0x7a/0x110 [ 190.498029][ T7827] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 190.498052][ T7827] ? mutex_lock_nested+0x152/0x1d0 [ 190.498079][ T7827] ? fdget_pos+0x252/0x320 [ 190.498115][ T7827] ksys_read+0x156/0x270 [ 190.498149][ T7827] ? __pfx_ksys_read+0x10/0x10 [ 190.498188][ T7827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.498213][ T7827] do_syscall_64+0x15f/0xf80 [ 190.498234][ T7827] ? trace_irq_disable+0x3b/0x140 [ 190.498259][ T7827] ? clear_bhb_loop+0x40/0x90 [ 190.498287][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.498309][ T7827] RIP: 0033:0x7fbe989fd04e [ 190.498328][ T7827] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 190.498346][ T7827] RSP: 002b:00007fbe96c6cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.498371][ T7827] RAX: ffffffffffffffda RBX: 00007fbe96c6d6c0 RCX: 00007fbe989fd04e [ 190.498387][ T7827] RDX: 000000000000000f RSI: 00007fbe96c6d0a0 RDI: 0000000000000005 [ 190.498402][ T7827] RBP: 00007fbe96c6d090 R08: 0000000000000000 R09: 0000000000000000 [ 190.498416][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.498429][ T7827] R13: 00007fbe98cb6128 R14: 00007fbe98cb6090 R15: 00007ffc6bdfc428 [ 190.498464][ T7827] [ 190.760202][ T7830] FAULT_INJECTION: forcing a failure. [ 190.760202][ T7830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.760243][ T7830] CPU: 0 UID: 0 PID: 7830 Comm: syz.2.776 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 190.760274][ T7830] Tainted: [L]=SOFTLOCKUP [ 190.760282][ T7830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 190.760295][ T7830] Call Trace: [ 190.760302][ T7830] [ 190.760311][ T7830] dump_stack_lvl+0xe8/0x150 [ 190.760341][ T7830] should_fail_ex+0x46b/0x600 [ 190.760375][ T7830] _copy_from_user+0x2d/0xb0 [ 190.760408][ T7830] ___sys_recvmsg+0x175/0x590 [ 190.760444][ T7830] ? __pfx____sys_recvmsg+0x10/0x10 [ 190.760479][ T7830] ? __fget_files+0x2a/0x420 [ 190.760524][ T7830] ? __fget_files+0x3a6/0x420 [ 190.760561][ T7830] do_recvmmsg+0x33a/0x800 [ 190.760599][ T7830] ? __pfx_do_recvmmsg+0x10/0x10 [ 190.760640][ T7830] ? rt_mutex_slowunlock+0x1cb/0x300 [ 190.760687][ T7830] __x64_sys_recvmmsg+0x198/0x250 [ 190.760721][ T7830] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 190.760758][ T7830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.760788][ T7830] do_syscall_64+0x15f/0xf80 [ 190.760810][ T7830] ? trace_irq_disable+0x3b/0x140 [ 190.760834][ T7830] ? clear_bhb_loop+0x40/0x90 [ 190.760862][ T7830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.760884][ T7830] RIP: 0033:0x7f4f8c94c819 [ 190.760905][ T7830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.760925][ T7830] RSP: 002b:00007f4f8ab9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 190.760949][ T7830] RAX: ffffffffffffffda RBX: 00007f4f8cbc5fa0 RCX: 00007f4f8c94c819 [ 190.760965][ T7830] RDX: 0000000000000004 RSI: 0000200000000d80 RDI: 0000000000000003 [ 190.760980][ T7830] RBP: 00007f4f8ab9e090 R08: 0000000000000000 R09: 0000000000000000 [ 190.760993][ T7830] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 190.761006][ T7830] R13: 00007f4f8cbc6038 R14: 00007f4f8cbc5fa0 R15: 00007ffc1cf54ca8 [ 190.761038][ T7830] [ 191.531765][ T7858] FAULT_INJECTION: forcing a failure. [ 191.531765][ T7858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.531804][ T7858] CPU: 1 UID: 0 PID: 7858 Comm: syz.4.790 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 191.531833][ T7858] Tainted: [L]=SOFTLOCKUP [ 191.531841][ T7858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 191.531854][ T7858] Call Trace: [ 191.531862][ T7858] [ 191.531871][ T7858] dump_stack_lvl+0xe8/0x150 [ 191.531899][ T7858] should_fail_ex+0x46b/0x600 [ 191.531932][ T7858] _copy_from_iter+0x1d3/0x1670 [ 191.531966][ T7858] ? __lock_acquire+0x6b5/0x2cf0 [ 191.531997][ T7858] ? __pfx__copy_from_iter+0x10/0x10 [ 191.532048][ T7858] tun_get_user+0x264/0x4400 [ 191.532079][ T7858] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 191.532104][ T7858] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 191.532122][ T7858] ? rt_mutex_slowunlock+0x450/0x8b0 [ 191.532145][ T7858] ? reacquire_held_locks+0x104/0x190 [ 191.532172][ T7858] ? rt_spin_lock+0x1e0/0x400 [ 191.532198][ T7858] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 191.532225][ T7858] ? __pfx_tun_get_user+0x10/0x10 [ 191.532245][ T7858] ? rt_spin_unlock+0x14f/0x200 [ 191.532276][ T7858] ? rt_spin_unlock+0x160/0x200 [ 191.532306][ T7858] ? save_netdev_trace_buffer+0x4ba/0x5f0 [ 191.532348][ T7858] ? ref_tracker_alloc+0x332/0x4a0 [ 191.532379][ T7858] ? tun_get+0x157/0x2f0 [ 191.532397][ T7858] ? vfs_write+0x629/0xba0 [ 191.532423][ T7858] ? ksys_write+0x156/0x270 [ 191.532451][ T7858] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 191.532485][ T7858] ? tun_get+0x1c/0x2f0 [ 191.532511][ T7858] ? tun_get+0x1c/0x2f0 [ 191.532531][ T7858] ? tun_get+0x1c/0x2f0 [ 191.532557][ T7858] tun_chr_write_iter+0x119/0x210 [ 191.532583][ T7858] vfs_write+0x629/0xba0 [ 191.532622][ T7858] ? __pfx_vfs_write+0x10/0x10 [ 191.532663][ T7858] ? __fget_files+0x2a/0x420 [ 191.532697][ T7858] ksys_write+0x156/0x270 [ 191.532729][ T7858] ? __pfx_ksys_write+0x10/0x10 [ 191.532767][ T7858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.532790][ T7858] do_syscall_64+0x15f/0xf80 [ 191.532811][ T7858] ? trace_irq_disable+0x3b/0x140 [ 191.532834][ T7858] ? clear_bhb_loop+0x40/0x90 [ 191.532860][ T7858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.532882][ T7858] RIP: 0033:0x7fbe98a3c819 [ 191.532903][ T7858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.532922][ T7858] RSP: 002b:00007fbe96c8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.532946][ T7858] RAX: ffffffffffffffda RBX: 00007fbe98cb5fa0 RCX: 00007fbe98a3c819 [ 191.532962][ T7858] RDX: 0000000000000fce RSI: 0000200000001240 RDI: 0000000000000003 [ 191.532976][ T7858] RBP: 00007fbe96c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 191.532991][ T7858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.533005][ T7858] R13: 00007fbe98cb6038 R14: 00007fbe98cb5fa0 R15: 00007ffc6bdfc428 [ 191.533054][ T7858] [ 191.535441][ T7860] FAULT_INJECTION: forcing a failure. [ 191.535441][ T7860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.535480][ T7860] CPU: 0 UID: 0 PID: 7860 Comm: syz.3.788 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 191.535511][ T7860] Tainted: [L]=SOFTLOCKUP [ 191.535519][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 191.535532][ T7860] Call Trace: [ 191.535541][ T7860] [ 191.535549][ T7860] dump_stack_lvl+0xe8/0x150 [ 191.535579][ T7860] should_fail_ex+0x46b/0x600 [ 191.535614][ T7860] _copy_to_user+0x31/0xb0 [ 191.535650][ T7860] simple_read_from_buffer+0xe1/0x170 [ 191.535683][ T7860] proc_fail_nth_read+0x1be/0x230 [ 191.535716][ T7860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.535747][ T7860] ? rw_verify_area+0x2ac/0x4e0 [ 191.535778][ T7860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.535817][ T7860] vfs_read+0x212/0xa80 [ 191.535858][ T7860] ? __pfx_vfs_read+0x10/0x10 [ 191.535892][ T7860] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 191.535916][ T7860] ? lockdep_hardirqs_on+0x7a/0x110 [ 191.535938][ T7860] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 191.535960][ T7860] ? mutex_lock_nested+0x152/0x1d0 [ 191.535988][ T7860] ? fdget_pos+0x252/0x320 [ 191.536025][ T7860] ksys_read+0x156/0x270 [ 191.536059][ T7860] ? __pfx_ksys_read+0x10/0x10 [ 191.536099][ T7860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.536124][ T7860] do_syscall_64+0x15f/0xf80 [ 191.536145][ T7860] ? trace_irq_disable+0x3b/0x140 [ 191.536170][ T7860] ? clear_bhb_loop+0x40/0x90 [ 191.536197][ T7860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.536220][ T7860] RIP: 0033:0x7f1e3d83d04e [ 191.536240][ T7860] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 191.536259][ T7860] RSP: 002b:00007f1e3baacfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.536283][ T7860] RAX: ffffffffffffffda RBX: 00007f1e3baad6c0 RCX: 00007f1e3d83d04e [ 191.536300][ T7860] RDX: 000000000000000f RSI: 00007f1e3baad0a0 RDI: 0000000000000005 [ 191.536313][ T7860] RBP: 00007f1e3baad090 R08: 0000000000000000 R09: 0000000000000000 [ 191.536327][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.536340][ T7860] R13: 00007f1e3daf6128 R14: 00007f1e3daf6090 R15: 00007ffce705b4e8 [ 191.536375][ T7860] [ 192.333760][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 192.334043][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 192.609751][ T6101] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 192.619604][ T5839] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 192.778933][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 192.789168][ T5839] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 192.789199][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.807574][ T6101] usb 1-1: unable to get BOS descriptor or descriptor too short [ 192.817371][ T6101] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.817400][ T6101] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.842859][ T6101] usb 1-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 192.842891][ T6101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.842914][ T6101] usb 1-1: Product: syz [ 192.842928][ T6101] usb 1-1: Manufacturer: syz [ 192.842944][ T6101] usb 1-1: SerialNumber: syz [ 192.893391][ T5839] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 193.175164][ T6101] usb 1-1: unknown interface protocol 0x2, assuming v1 [ 193.175193][ T6101] usb 1-1: cannot find UAC_HEADER [ 193.285396][ T7887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.304119][ T7887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.312920][ T5839] gspca_nw80x: reg_r err -71 [ 193.313028][ T5839] nw80x 4-1:3.0: probe with driver nw80x failed with error -71 [ 193.332067][ T5841] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 193.398201][ T5839] usb 4-1: USB disconnect, device number 15 [ 193.502865][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 193.508685][ T6101] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 193.511518][ T5841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 193.511579][ T5841] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 193.511602][ T5841] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 193.511626][ T5841] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 193.511647][ T5841] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 193.511669][ T5841] usb 5-1: config 1 interface 0 has no altsetting 0 [ 193.511711][ T5841] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 193.511733][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.543990][ T5841] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 193.624135][ T6101] usb 1-1: USB disconnect, device number 5 [ 193.658939][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.881983][ T5841] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 193.975037][ T5841] usb 5-1: USB disconnect, device number 7 [ 194.243471][ T7932] FAULT_INJECTION: forcing a failure. [ 194.243471][ T7932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.243512][ T7932] CPU: 1 UID: 0 PID: 7932 Comm: syz.3.818 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 194.243542][ T7932] Tainted: [L]=SOFTLOCKUP [ 194.243550][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 194.243562][ T7932] Call Trace: [ 194.243570][ T7932] [ 194.243580][ T7932] dump_stack_lvl+0xe8/0x150 [ 194.243617][ T7932] should_fail_ex+0x46b/0x600 [ 194.243651][ T7932] _copy_from_user+0x2d/0xb0 [ 194.243683][ T7932] ___sys_sendmsg+0x1c6/0x360 [ 194.243711][ T7932] ? __lock_acquire+0x6b5/0x2cf0 [ 194.243741][ T7932] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.243804][ T7932] ? __fget_files+0x2a/0x420 [ 194.243832][ T7932] ? __fget_files+0x3a6/0x420 [ 194.243868][ T7932] __x64_sys_sendmsg+0x1c3/0x2a0 [ 194.243900][ T7932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.243948][ T7932] ? __pfx_ksys_write+0x10/0x10 [ 194.243987][ T7932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.244020][ T7932] do_syscall_64+0x15f/0xf80 [ 194.244041][ T7932] ? trace_irq_disable+0x3b/0x140 [ 194.244067][ T7932] ? clear_bhb_loop+0x40/0x90 [ 194.244095][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.244117][ T7932] RIP: 0033:0x7f1e3d87c819 [ 194.244135][ T7932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.244153][ T7932] RSP: 002b:00007f1e3bace028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.244177][ T7932] RAX: ffffffffffffffda RBX: 00007f1e3daf5fa0 RCX: 00007f1e3d87c819 [ 194.244193][ T7932] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 194.244208][ T7932] RBP: 00007f1e3bace090 R08: 0000000000000000 R09: 0000000000000000 [ 194.244221][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.244233][ T7932] R13: 00007f1e3daf6038 R14: 00007f1e3daf5fa0 R15: 00007ffce705b4e8 [ 194.244265][ T7932] [ 194.476156][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.476264][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.639793][ T7944] FAULT_INJECTION: forcing a failure. [ 194.639793][ T7944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.639835][ T7944] CPU: 0 UID: 0 PID: 7944 Comm: syz.2.822 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 194.639866][ T7944] Tainted: [L]=SOFTLOCKUP [ 194.639875][ T7944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 194.639888][ T7944] Call Trace: [ 194.639896][ T7944] [ 194.639906][ T7944] dump_stack_lvl+0xe8/0x150 [ 194.639936][ T7944] should_fail_ex+0x46b/0x600 [ 194.639971][ T7944] _copy_from_user+0x2d/0xb0 [ 194.640013][ T7944] ___sys_sendmsg+0x1c6/0x360 [ 194.640041][ T7944] ? __lock_acquire+0x6b5/0x2cf0 [ 194.640075][ T7944] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.640138][ T7944] ? __fget_files+0x2a/0x420 [ 194.640164][ T7944] ? __fget_files+0x3a6/0x420 [ 194.640199][ T7944] __x64_sys_sendmsg+0x1c3/0x2a0 [ 194.640229][ T7944] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.640266][ T7944] ? __pfx_ksys_write+0x10/0x10 [ 194.640307][ T7944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.640331][ T7944] do_syscall_64+0x15f/0xf80 [ 194.640357][ T7944] ? trace_irq_disable+0x3b/0x140 [ 194.640382][ T7944] ? clear_bhb_loop+0x40/0x90 [ 194.640408][ T7944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.640430][ T7944] RIP: 0033:0x7f4f8c94c819 [ 194.640450][ T7944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.640468][ T7944] RSP: 002b:00007f4f8ab9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.640493][ T7944] RAX: ffffffffffffffda RBX: 00007f4f8cbc5fa0 RCX: 00007f4f8c94c819 [ 194.640509][ T7944] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 194.640522][ T7944] RBP: 00007f4f8ab9e090 R08: 0000000000000000 R09: 0000000000000000 [ 194.640535][ T7944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.640547][ T7944] R13: 00007f4f8cbc6038 R14: 00007f4f8cbc5fa0 R15: 00007ffc1cf54ca8 [ 194.640579][ T7944] [ 194.939194][ T7952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.213422][ T7964] FAULT_INJECTION: forcing a failure. [ 195.213422][ T7964] name failslab, interval 1, probability 0, space 0, times 0 [ 195.213463][ T7964] CPU: 1 UID: 0 PID: 7964 Comm: syz.4.832 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 195.213494][ T7964] Tainted: [L]=SOFTLOCKUP [ 195.213501][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 195.213513][ T7964] Call Trace: [ 195.213522][ T7964] [ 195.213530][ T7964] dump_stack_lvl+0xe8/0x150 [ 195.213559][ T7964] should_fail_ex+0x46b/0x600 [ 195.213592][ T7964] should_failslab+0xa8/0x100 [ 195.213625][ T7964] __kmalloc_noprof+0xdf/0x7b0 [ 195.213653][ T7964] ? kfree+0x4d/0x6c0 [ 195.213677][ T7964] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 195.213712][ T7964] tomoyo_realpath_from_path+0xe3/0x5d0 [ 195.213749][ T7964] ? tomoyo_domain+0xd7/0x130 [ 195.213783][ T7964] ? tomoyo_path_number_perm+0x219/0x630 [ 195.213807][ T7964] tomoyo_path_number_perm+0x246/0x630 [ 195.213835][ T7964] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 195.213859][ T7964] ? __lock_acquire+0x6b5/0x2cf0 [ 195.213890][ T7964] ? do_raw_spin_lock+0x12b/0x2f0 [ 195.213954][ T7964] ? __fget_files+0x2a/0x420 [ 195.213983][ T7964] ? __fget_files+0x2a/0x420 [ 195.214008][ T7964] ? __fget_files+0x3a6/0x420 [ 195.214033][ T7964] ? __fget_files+0x2a/0x420 [ 195.214063][ T7964] security_file_ioctl+0xc3/0x2a0 [ 195.214088][ T7964] __se_sys_ioctl+0x47/0x170 [ 195.214120][ T7964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.214145][ T7964] do_syscall_64+0x15f/0xf80 [ 195.214166][ T7964] ? trace_irq_disable+0x3b/0x140 [ 195.214189][ T7964] ? clear_bhb_loop+0x40/0x90 [ 195.214217][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.214238][ T7964] RIP: 0033:0x7fbe98a3c819 [ 195.214260][ T7964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.214280][ T7964] RSP: 002b:00007fbe96c8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.214304][ T7964] RAX: ffffffffffffffda RBX: 00007fbe98cb5fa0 RCX: 00007fbe98a3c819 [ 195.214321][ T7964] RDX: 0000200000000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 195.214335][ T7964] RBP: 00007fbe96c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 195.214349][ T7964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.214362][ T7964] R13: 00007fbe98cb6038 R14: 00007fbe98cb5fa0 R15: 00007ffc6bdfc428 [ 195.214398][ T7964] [ 195.214439][ T7964] ERROR: Out of memory at tomoyo_realpath_from_path. [ 195.624645][ T7974] sg_write: data in/out 214457/136 bytes for SCSI command 0x37-- guessing data in; [ 195.624645][ T7974] program syz.3.837 not setting count and/or reply_len properly [ 195.656441][ T7974] sg_write: data in/out 214457/136 bytes for SCSI command 0x37-- guessing data in; [ 195.656441][ T7974] program syz.3.837 not setting count and/or reply_len properly [ 195.940713][ T7987] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.842'. [ 196.209736][ T8002] FAULT_INJECTION: forcing a failure. [ 196.209736][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 196.209764][ T8002] CPU: 1 UID: 0 PID: 8002 Comm: syz.0.849 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 196.209782][ T8002] Tainted: [L]=SOFTLOCKUP [ 196.209787][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.209795][ T8002] Call Trace: [ 196.209800][ T8002] [ 196.209805][ T8002] dump_stack_lvl+0xe8/0x150 [ 196.209825][ T8002] should_fail_ex+0x46b/0x600 [ 196.209846][ T8002] should_failslab+0xa8/0x100 [ 196.209867][ T8002] __kmalloc_noprof+0xdf/0x7b0 [ 196.209883][ T8002] ? kfree+0x4d/0x6c0 [ 196.209898][ T8002] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 196.209918][ T8002] tomoyo_realpath_from_path+0xe3/0x5d0 [ 196.209937][ T8002] ? tomoyo_domain+0xd7/0x130 [ 196.209957][ T8002] ? tomoyo_path_number_perm+0x219/0x630 [ 196.209971][ T8002] tomoyo_path_number_perm+0x246/0x630 [ 196.209990][ T8002] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 196.210004][ T8002] ? __lock_acquire+0x6b5/0x2cf0 [ 196.210022][ T8002] ? do_raw_spin_lock+0x12b/0x2f0 [ 196.210055][ T8002] ? __fget_files+0x2a/0x420 [ 196.210072][ T8002] ? __fget_files+0x2a/0x420 [ 196.210086][ T8002] ? __fget_files+0x3a6/0x420 [ 196.210100][ T8002] ? __fget_files+0x2a/0x420 [ 196.210117][ T8002] security_file_ioctl+0xc3/0x2a0 [ 196.210132][ T8002] __se_sys_ioctl+0x47/0x170 [ 196.210152][ T8002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.210165][ T8002] do_syscall_64+0x15f/0xf80 [ 196.210178][ T8002] ? trace_irq_disable+0x3b/0x140 [ 196.210192][ T8002] ? clear_bhb_loop+0x40/0x90 [ 196.210211][ T8002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.210231][ T8002] RIP: 0033:0x7fc0ff06c819 [ 196.210252][ T8002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.210268][ T8002] RSP: 002b:00007fc0fd2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.210283][ T8002] RAX: ffffffffffffffda RBX: 00007fc0ff2e5fa0 RCX: 00007fc0ff06c819 [ 196.210292][ T8002] RDX: 0000000000000000 RSI: 00000000c048ae65 RDI: 0000000000000004 [ 196.210300][ T8002] RBP: 00007fc0fd2c6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.210308][ T8002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.210316][ T8002] R13: 00007fc0ff2e6038 R14: 00007fc0ff2e5fa0 R15: 00007ffe83815ff8 [ 196.210335][ T8002] [ 196.223988][ T8002] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.509703][ T6101] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 196.594597][ T8012] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.853'. [ 196.679617][ T6101] usb 5-1: Using ep0 maxpacket: 8 [ 196.687048][ T6101] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 196.687089][ T6101] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.687116][ T6101] usb 5-1: config 0 interface 0 has no altsetting 0 [ 196.687154][ T6101] usb 5-1: New USB device found, idVendor=045e, idProduct=003b, bcdDevice= 0.00 [ 196.687179][ T6101] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.692929][ T8014] FAULT_INJECTION: forcing a failure. [ 196.692929][ T8014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.692965][ T8014] CPU: 0 UID: 0 PID: 8014 Comm: syz.3.854 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 196.693001][ T8014] Tainted: [L]=SOFTLOCKUP [ 196.693008][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.693020][ T8014] Call Trace: [ 196.693027][ T8014] [ 196.693035][ T8014] dump_stack_lvl+0xe8/0x150 [ 196.693069][ T8014] should_fail_ex+0x46b/0x600 [ 196.693100][ T8014] _copy_from_user+0x2d/0xb0 [ 196.693129][ T8014] ___sys_sendmsg+0x1c6/0x360 [ 196.693153][ T8014] ? __lock_acquire+0x6b5/0x2cf0 [ 196.693182][ T8014] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.693238][ T8014] ? __fget_files+0x2a/0x420 [ 196.693262][ T8014] ? __fget_files+0x3a6/0x420 [ 196.693294][ T8014] __x64_sys_sendmsg+0x1c3/0x2a0 [ 196.693321][ T8014] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.693354][ T8014] ? __pfx_ksys_write+0x10/0x10 [ 196.693391][ T8014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.693414][ T8014] do_syscall_64+0x15f/0xf80 [ 196.693434][ T8014] ? trace_irq_disable+0x3b/0x140 [ 196.693455][ T8014] ? clear_bhb_loop+0x40/0x90 [ 196.693480][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.693500][ T8014] RIP: 0033:0x7f1e3d87c819 [ 196.693518][ T8014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.693535][ T8014] RSP: 002b:00007f1e3bace028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.693557][ T8014] RAX: ffffffffffffffda RBX: 00007f1e3daf5fa0 RCX: 00007f1e3d87c819 [ 196.693571][ T8014] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 196.693583][ T8014] RBP: 00007f1e3bace090 R08: 0000000000000000 R09: 0000000000000000 [ 196.693595][ T8014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.693613][ T8014] R13: 00007f1e3daf6038 R14: 00007f1e3daf5fa0 R15: 00007ffce705b4e8 [ 196.693642][ T8014] [ 196.955419][ T6101] usb 5-1: config 0 descriptor?? [ 197.353321][ T8029] FAULT_INJECTION: forcing a failure. [ 197.353321][ T8029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.353359][ T8029] CPU: 0 UID: 0 PID: 8029 Comm: syz.2.860 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 197.353381][ T8029] Tainted: [L]=SOFTLOCKUP [ 197.353386][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 197.353393][ T8029] Call Trace: [ 197.353399][ T8029] [ 197.353405][ T8029] dump_stack_lvl+0xe8/0x150 [ 197.353433][ T8029] should_fail_ex+0x46b/0x600 [ 197.353473][ T8029] _copy_to_user+0x31/0xb0 [ 197.353509][ T8029] simple_read_from_buffer+0xe1/0x170 [ 197.353542][ T8029] proc_fail_nth_read+0x1be/0x230 [ 197.353571][ T8029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.353599][ T8029] ? rw_verify_area+0x2ac/0x4e0 [ 197.353629][ T8029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.353657][ T8029] vfs_read+0x212/0xa80 [ 197.353695][ T8029] ? __pfx_vfs_read+0x10/0x10 [ 197.353725][ T8029] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 197.353740][ T8029] ? lockdep_hardirqs_on+0x7a/0x110 [ 197.353753][ T8029] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 197.353778][ T8029] ? mutex_lock_nested+0x152/0x1d0 [ 197.353805][ T8029] ? fdget_pos+0x252/0x320 [ 197.353841][ T8029] ksys_read+0x156/0x270 [ 197.353873][ T8029] ? __pfx_ksys_read+0x10/0x10 [ 197.353906][ T8029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.353921][ T8029] do_syscall_64+0x15f/0xf80 [ 197.353933][ T8029] ? trace_irq_disable+0x3b/0x140 [ 197.353951][ T8029] ? clear_bhb_loop+0x40/0x90 [ 197.353977][ T8029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.353999][ T8029] RIP: 0033:0x7f4f8c90d04e [ 197.354019][ T8029] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 197.354038][ T8029] RSP: 002b:00007f4f8ab9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.354061][ T8029] RAX: ffffffffffffffda RBX: 00007f4f8ab9e6c0 RCX: 00007f4f8c90d04e [ 197.354075][ T8029] RDX: 000000000000000f RSI: 00007f4f8ab9e0a0 RDI: 0000000000000003 [ 197.354087][ T8029] RBP: 00007f4f8ab9e090 R08: 0000000000000000 R09: 0000000000000000 [ 197.354094][ T8029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.354102][ T8029] R13: 00007f4f8cbc6038 R14: 00007f4f8cbc5fa0 R15: 00007ffc1cf54ca8 [ 197.354122][ T8029] [ 197.474287][ T8031] FAULT_INJECTION: forcing a failure. [ 197.474287][ T8031] name failslab, interval 1, probability 0, space 0, times 0 [ 197.474326][ T8031] CPU: 0 UID: 0 PID: 8031 Comm: syz.2.861 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 197.474353][ T8031] Tainted: [L]=SOFTLOCKUP [ 197.474360][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 197.474372][ T8031] Call Trace: [ 197.474379][ T8031] [ 197.474387][ T8031] dump_stack_lvl+0xe8/0x150 [ 197.474419][ T8031] should_fail_ex+0x46b/0x600 [ 197.474458][ T8031] should_failslab+0xa8/0x100 [ 197.474488][ T8031] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 197.474515][ T8031] ? __alloc_skb+0x1d0/0x7d0 [ 197.474536][ T8031] ? lockdep_hardirqs_on+0x7a/0x110 [ 197.474562][ T8031] __alloc_skb+0x1d0/0x7d0 [ 197.474590][ T8031] alloc_skb_with_frags+0xc8/0x760 [ 197.474614][ T8031] ? __lock_acquire+0x6b5/0x2cf0 [ 197.474648][ T8031] sock_alloc_send_pskb+0x884/0x9a0 [ 197.474691][ T8031] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 197.474743][ T8031] hci_sock_sendmsg+0x208/0xf40 [ 197.474782][ T8031] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 197.474813][ T8031] ? __pfx_aa_file_perm+0x10/0x10 [ 197.474839][ T8031] ? aa_sock_msg_perm+0x122/0x200 [ 197.474864][ T8031] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 197.474893][ T8031] sock_sendmsg_nosec+0x112/0x150 [ 197.474929][ T8031] sock_write_iter+0x308/0x410 [ 197.474960][ T8031] ? __pfx_sock_write_iter+0x10/0x10 [ 197.475007][ T8031] vfs_write+0x629/0xba0 [ 197.475042][ T8031] ? __pfx_vfs_write+0x10/0x10 [ 197.475081][ T8031] ? __fget_files+0x2a/0x420 [ 197.475115][ T8031] ksys_write+0x156/0x270 [ 197.475143][ T8031] ? __pfx_ksys_write+0x10/0x10 [ 197.475178][ T8031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.475199][ T8031] do_syscall_64+0x15f/0xf80 [ 197.475218][ T8031] ? trace_irq_disable+0x3b/0x140 [ 197.475242][ T8031] ? clear_bhb_loop+0x40/0x90 [ 197.475269][ T8031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.475289][ T8031] RIP: 0033:0x7f4f8c94c819 [ 197.475308][ T8031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.475324][ T8031] RSP: 002b:00007f4f8ab9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.475347][ T8031] RAX: ffffffffffffffda RBX: 00007f4f8cbc5fa0 RCX: 00007f4f8c94c819 [ 197.475361][ T8031] RDX: 0000000000000013 RSI: 0000200000000140 RDI: 0000000000000004 [ 197.475373][ T8031] RBP: 00007f4f8ab9e090 R08: 0000000000000000 R09: 0000000000000000 [ 197.475386][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.475400][ T8031] R13: 00007f4f8cbc6038 R14: 00007f4f8cbc5fa0 R15: 00007ffc1cf54ca8 [ 197.475433][ T8031] [ 197.921727][ T6101] hid_parser_main: 4002 callbacks suppressed [ 197.921769][ T6101] microsoft 0003:045E:003B.0002: unknown main item tag 0x0 [ 197.921802][ T6101] microsoft 0003:045E:003B.0002: unknown main item tag 0x1 [ 197.921831][ T6101] microsoft 0003:045E:003B.0002: unknown main item tag 0x0 [ 197.921857][ T6101] microsoft 0003:045E:003B.0002: unknown main item tag 0x0 [ 197.921884][ T6101] microsoft 0003:045E:003B.0002: unknown main item tag 0x0 [ 197.921910][ T6101] microsoft 0003:045E:003B.0002: unknown main item tag 0x0 [ 197.921936][ T6101] microsoft 0003:045E:003B.0002: unknown main item tag 0x0 [ 197.921963][ T6101] microsoft 0003:045E:003B.0002: unknown main item tag 0x0 [ 197.921988][ T6101] microsoft 0003:045E:003B.0002: unknown main item tag 0x0 [ 197.922011][ T6101] microsoft 0003:045E:003B.0002: unknown main item tag 0x0 [ 197.922185][ T6101] microsoft 0003:045E:003B.0002: item fetching failed at offset 37/40 [ 197.923149][ T6101] microsoft 0003:045E:003B.0002: parse failed [ 197.923216][ T6101] microsoft 0003:045E:003B.0002: probe with driver microsoft failed with error -22 [ 197.939685][ T5841] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 198.058475][ T6101] usb 5-1: USB disconnect, device number 8 [ 198.090386][ T5841] usb 3-1: Using ep0 maxpacket: 32 [ 198.092252][ T5841] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 198.092274][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.143966][ T5841] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 198.731564][ T5841] gspca_nw80x: reg_w err -71 [ 198.731666][ T5841] nw80x 3-1:3.0: probe with driver nw80x failed with error -71 [ 198.744972][ T5841] usb 3-1: USB disconnect, device number 14 [ 199.301304][ T8063] FAULT_INJECTION: forcing a failure. [ 199.301304][ T8063] name failslab, interval 1, probability 0, space 0, times 0 [ 199.301347][ T8063] CPU: 0 UID: 0 PID: 8063 Comm: syz.0.874 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 199.301376][ T8063] Tainted: [L]=SOFTLOCKUP [ 199.301384][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 199.301397][ T8063] Call Trace: [ 199.301405][ T8063] [ 199.301414][ T8063] dump_stack_lvl+0xe8/0x150 [ 199.301442][ T8063] should_fail_ex+0x46b/0x600 [ 199.301475][ T8063] should_failslab+0xa8/0x100 [ 199.301507][ T8063] __kmalloc_noprof+0xdf/0x7b0 [ 199.301533][ T8063] ? kfree+0x4d/0x6c0 [ 199.301556][ T8063] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 199.301590][ T8063] tomoyo_realpath_from_path+0xe3/0x5d0 [ 199.301620][ T8063] ? tomoyo_domain+0xd7/0x130 [ 199.301653][ T8063] ? tomoyo_path_number_perm+0x219/0x630 [ 199.301678][ T8063] tomoyo_path_number_perm+0x246/0x630 [ 199.301704][ T8063] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 199.301727][ T8063] ? __lock_acquire+0x6b5/0x2cf0 [ 199.301759][ T8063] ? do_raw_spin_lock+0x12b/0x2f0 [ 199.301814][ T8063] ? __fget_files+0x2a/0x420 [ 199.301843][ T8063] ? __fget_files+0x2a/0x420 [ 199.301868][ T8063] ? __fget_files+0x3a6/0x420 [ 199.301908][ T8063] ? __fget_files+0x2a/0x420 [ 199.301937][ T8063] security_file_ioctl+0xc3/0x2a0 [ 199.301963][ T8063] __se_sys_ioctl+0x47/0x170 [ 199.301996][ T8063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.302019][ T8063] do_syscall_64+0x15f/0xf80 [ 199.302039][ T8063] ? trace_irq_disable+0x3b/0x140 [ 199.302065][ T8063] ? clear_bhb_loop+0x40/0x90 [ 199.302091][ T8063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.302114][ T8063] RIP: 0033:0x7fc0ff06c819 [ 199.302135][ T8063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.302153][ T8063] RSP: 002b:00007fc0fd2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.302176][ T8063] RAX: ffffffffffffffda RBX: 00007fc0ff2e5fa0 RCX: 00007fc0ff06c819 [ 199.302192][ T8063] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 199.302206][ T8063] RBP: 00007fc0fd2c6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.302220][ T8063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.302233][ T8063] R13: 00007fc0ff2e6038 R14: 00007fc0ff2e5fa0 R15: 00007ffe83815ff8 [ 199.302267][ T8063] [ 199.302308][ T8063] ERROR: Out of memory at tomoyo_realpath_from_path. [ 199.594912][ T8068] FAULT_INJECTION: forcing a failure. [ 199.594912][ T8068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.594949][ T8068] CPU: 1 UID: 0 PID: 8068 Comm: syz.2.876 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 199.594988][ T8068] Tainted: [L]=SOFTLOCKUP [ 199.594995][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 199.595006][ T8068] Call Trace: [ 199.595013][ T8068] [ 199.595021][ T8068] dump_stack_lvl+0xe8/0x150 [ 199.595045][ T8068] should_fail_ex+0x46b/0x600 [ 199.595073][ T8068] _copy_from_iter+0x1d3/0x1670 [ 199.595100][ T8068] ? __lock_acquire+0x6b5/0x2cf0 [ 199.595128][ T8068] ? __pfx__copy_from_iter+0x10/0x10 [ 199.595169][ T8068] tun_get_user+0x264/0x4400 [ 199.595193][ T8068] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 199.595215][ T8068] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 199.595232][ T8068] ? rt_mutex_slowunlock+0x451/0x8b0 [ 199.595254][ T8068] ? reacquire_held_locks+0x104/0x190 [ 199.595278][ T8068] ? rt_spin_lock+0x1e0/0x400 [ 199.595304][ T8068] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 199.595328][ T8068] ? __pfx_tun_get_user+0x10/0x10 [ 199.595344][ T8068] ? rt_spin_unlock+0x14f/0x200 [ 199.595371][ T8068] ? rt_spin_unlock+0x160/0x200 [ 199.595397][ T8068] ? save_netdev_trace_buffer+0x4ba/0x5f0 [ 199.595431][ T8068] ? ref_tracker_alloc+0x332/0x4a0 [ 199.595454][ T8068] ? tun_get+0x157/0x2f0 [ 199.595470][ T8068] ? vfs_write+0x629/0xba0 [ 199.595491][ T8068] ? ksys_write+0x156/0x270 [ 199.595513][ T8068] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 199.595541][ T8068] ? tun_get+0x1c/0x2f0 [ 199.595564][ T8068] ? tun_get+0x1c/0x2f0 [ 199.595601][ T8068] ? tun_get+0x1c/0x2f0 [ 199.595623][ T8068] tun_chr_write_iter+0x119/0x210 [ 199.595644][ T8068] vfs_write+0x629/0xba0 [ 199.595684][ T8068] ? __pfx_vfs_write+0x10/0x10 [ 199.595717][ T8068] ? __fget_files+0x2a/0x420 [ 199.595746][ T8068] ksys_write+0x156/0x270 [ 199.595772][ T8068] ? __pfx_ksys_write+0x10/0x10 [ 199.595812][ T8068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.595833][ T8068] do_syscall_64+0x15f/0xf80 [ 199.595849][ T8068] ? trace_irq_disable+0x3b/0x140 [ 199.595877][ T8068] ? clear_bhb_loop+0x40/0x90 [ 199.595913][ T8068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.595938][ T8068] RIP: 0033:0x7f4f8c94c819 [ 199.595956][ T8068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.595971][ T8068] RSP: 002b:00007f4f8ab9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 199.595997][ T8068] RAX: ffffffffffffffda RBX: 00007f4f8cbc5fa0 RCX: 00007f4f8c94c819 [ 199.596012][ T8068] RDX: 000000000000003a RSI: 0000200000000200 RDI: 0000000000000003 [ 199.596026][ T8068] RBP: 00007f4f8ab9e090 R08: 0000000000000000 R09: 0000000000000000 [ 199.596038][ T8068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.596051][ T8068] R13: 00007f4f8cbc6038 R14: 00007f4f8cbc5fa0 R15: 00007ffc1cf54ca8 [ 199.596083][ T8068] [ 199.922613][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 199.978925][ T8075] FAULT_INJECTION: forcing a failure. [ 199.978925][ T8075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.978966][ T8075] CPU: 0 UID: 0 PID: 8075 Comm: syz.0.879 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 199.978998][ T8075] Tainted: [L]=SOFTLOCKUP [ 199.979006][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 199.979020][ T8075] Call Trace: [ 199.979028][ T8075] [ 199.979037][ T8075] dump_stack_lvl+0xe8/0x150 [ 199.979069][ T8075] should_fail_ex+0x46b/0x600 [ 199.979104][ T8075] _copy_to_user+0x31/0xb0 [ 199.979138][ T8075] simple_read_from_buffer+0xe1/0x170 [ 199.979171][ T8075] proc_fail_nth_read+0x1be/0x230 [ 199.979202][ T8075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.979234][ T8075] ? rw_verify_area+0x2ac/0x4e0 [ 199.979265][ T8075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.979295][ T8075] vfs_read+0x212/0xa80 [ 199.979334][ T8075] ? __pfx_vfs_read+0x10/0x10 [ 199.979368][ T8075] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 199.979392][ T8075] ? lockdep_hardirqs_on+0x7a/0x110 [ 199.979415][ T8075] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 199.979443][ T8075] ? mutex_lock_nested+0x152/0x1d0 [ 199.979468][ T8075] ? fdget_pos+0x252/0x320 [ 199.979502][ T8075] ksys_read+0x156/0x270 [ 199.979534][ T8075] ? __pfx_ksys_read+0x10/0x10 [ 199.979573][ T8075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.979598][ T8075] do_syscall_64+0x15f/0xf80 [ 199.979621][ T8075] ? trace_irq_disable+0x3b/0x140 [ 199.979646][ T8075] ? clear_bhb_loop+0x40/0x90 [ 199.979674][ T8075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.979706][ T8075] RIP: 0033:0x7fc0ff02d04e [ 199.979727][ T8075] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 199.979747][ T8075] RSP: 002b:00007fc0fd2a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.979772][ T8075] RAX: ffffffffffffffda RBX: 00007fc0fd2a56c0 RCX: 00007fc0ff02d04e [ 199.979787][ T8075] RDX: 000000000000000f RSI: 00007fc0fd2a50a0 RDI: 0000000000000004 [ 199.979801][ T8075] RBP: 00007fc0fd2a5090 R08: 0000000000000000 R09: 0000000000000000 [ 199.979815][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.979829][ T8075] R13: 00007fc0ff2e6128 R14: 00007fc0ff2e6090 R15: 00007ffe83815ff8 [ 199.979864][ T8075] [ 200.075919][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 200.083154][ T10] usb 5-1: config 5 has an invalid interface number: 19 but max is 0 [ 200.083183][ T10] usb 5-1: config 5 has no interface number 0 [ 200.083214][ T10] usb 5-1: config 5 interface 19 has no altsetting 0 [ 200.110551][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=624e, bcdDevice=a0.4d [ 200.110583][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.110604][ T10] usb 5-1: Product: syz [ 200.110627][ T10] usb 5-1: Manufacturer: syz [ 200.110640][ T10] usb 5-1: SerialNumber: syz [ 200.372417][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624e [ 200.373500][ T10] gspca_sn9c20x: Write register 1000 failed -71 [ 200.373520][ T10] gspca_sn9c20x: Device initialization failed [ 200.373612][ T10] gspca_sn9c20x 5-1:5.19: probe with driver gspca_sn9c20x failed with error -71 [ 200.383424][ T10] usb 5-1: USB disconnect, device number 9 [ 200.566415][ T8083] FAULT_INJECTION: forcing a failure. [ 200.566415][ T8083] name failslab, interval 1, probability 0, space 0, times 0 [ 200.566457][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.0.883 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 200.566487][ T8083] Tainted: [L]=SOFTLOCKUP [ 200.566495][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 200.566508][ T8083] Call Trace: [ 200.566517][ T8083] [ 200.566526][ T8083] dump_stack_lvl+0xe8/0x150 [ 200.566554][ T8083] should_fail_ex+0x46b/0x600 [ 200.566588][ T8083] should_failslab+0xa8/0x100 [ 200.566629][ T8083] __kmalloc_noprof+0xdf/0x7b0 [ 200.566658][ T8083] ? kfree+0x4d/0x6c0 [ 200.566680][ T8083] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 200.566701][ T8083] tomoyo_realpath_from_path+0xe3/0x5d0 [ 200.566719][ T8083] ? tomoyo_domain+0xd7/0x130 [ 200.566740][ T8083] ? tomoyo_path_number_perm+0x219/0x630 [ 200.566754][ T8083] tomoyo_path_number_perm+0x246/0x630 [ 200.566770][ T8083] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 200.566783][ T8083] ? __lock_acquire+0x6b5/0x2cf0 [ 200.566802][ T8083] ? do_raw_spin_lock+0x12b/0x2f0 [ 200.566833][ T8083] ? __fget_files+0x2a/0x420 [ 200.566850][ T8083] ? __fget_files+0x2a/0x420 [ 200.566864][ T8083] ? __fget_files+0x3a6/0x420 [ 200.566881][ T8083] ? __fget_files+0x2a/0x420 [ 200.566897][ T8083] security_file_ioctl+0xc3/0x2a0 [ 200.566912][ T8083] __se_sys_ioctl+0x47/0x170 [ 200.566932][ T8083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.566946][ T8083] do_syscall_64+0x15f/0xf80 [ 200.566958][ T8083] ? trace_irq_disable+0x3b/0x140 [ 200.566973][ T8083] ? clear_bhb_loop+0x40/0x90 [ 200.566988][ T8083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.567001][ T8083] RIP: 0033:0x7fc0ff06c819 [ 200.567018][ T8083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.567030][ T8083] RSP: 002b:00007fc0fd2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.567045][ T8083] RAX: ffffffffffffffda RBX: 00007fc0ff2e5fa0 RCX: 00007fc0ff06c819 [ 200.567055][ T8083] RDX: 0000200000000240 RSI: 00000000c03864bc RDI: 000000000000000c [ 200.567063][ T8083] RBP: 00007fc0fd2c6090 R08: 0000000000000000 R09: 0000000000000000 [ 200.567070][ T8083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.567077][ T8083] R13: 00007fc0ff2e6038 R14: 00007fc0ff2e5fa0 R15: 00007ffe83815ff8 [ 200.567096][ T8083] [ 200.567122][ T8083] ERROR: Out of memory at tomoyo_realpath_from_path. [ 201.019190][ T8089] FAULT_INJECTION: forcing a failure. [ 201.019190][ T8089] name failslab, interval 1, probability 0, space 0, times 0 [ 201.019233][ T8089] CPU: 0 UID: 0 PID: 8089 Comm: syz.0.886 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 201.019264][ T8089] Tainted: [L]=SOFTLOCKUP [ 201.019271][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 201.019285][ T8089] Call Trace: [ 201.019293][ T8089] [ 201.019302][ T8089] dump_stack_lvl+0xe8/0x150 [ 201.019335][ T8089] should_fail_ex+0x46b/0x600 [ 201.019370][ T8089] should_failslab+0xa8/0x100 [ 201.019406][ T8089] __kmalloc_noprof+0xdf/0x7b0 [ 201.019440][ T8089] ? kfree+0x4d/0x6c0 [ 201.019464][ T8089] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 201.019500][ T8089] tomoyo_realpath_from_path+0xe3/0x5d0 [ 201.019532][ T8089] ? tomoyo_domain+0xd7/0x130 [ 201.019567][ T8089] ? tomoyo_path_number_perm+0x219/0x630 [ 201.019592][ T8089] tomoyo_path_number_perm+0x246/0x630 [ 201.019621][ T8089] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 201.019644][ T8089] ? __lock_acquire+0x6b5/0x2cf0 [ 201.019684][ T8089] ? do_raw_spin_lock+0x12b/0x2f0 [ 201.019744][ T8089] ? __fget_files+0x2a/0x420 [ 201.019773][ T8089] ? __fget_files+0x2a/0x420 [ 201.019797][ T8089] ? __fget_files+0x3a6/0x420 [ 201.019821][ T8089] ? __fget_files+0x2a/0x420 [ 201.019850][ T8089] security_file_ioctl+0xc3/0x2a0 [ 201.019877][ T8089] __se_sys_ioctl+0x47/0x170 [ 201.019910][ T8089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.019933][ T8089] do_syscall_64+0x15f/0xf80 [ 201.019956][ T8089] ? trace_irq_disable+0x3b/0x140 [ 201.019979][ T8089] ? clear_bhb_loop+0x40/0x90 [ 201.020006][ T8089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.020026][ T8089] RIP: 0033:0x7fc0ff06c819 [ 201.020048][ T8089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.020065][ T8089] RSP: 002b:00007fc0fd2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.020090][ T8089] RAX: ffffffffffffffda RBX: 00007fc0ff2e5fa0 RCX: 00007fc0ff06c819 [ 201.020106][ T8089] RDX: 0000200000000440 RSI: 000000004010ae42 RDI: 0000000000000004 [ 201.020121][ T8089] RBP: 00007fc0fd2c6090 R08: 0000000000000000 R09: 0000000000000000 [ 201.020134][ T8089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.020146][ T8089] R13: 00007fc0ff2e6038 R14: 00007fc0ff2e5fa0 R15: 00007ffe83815ff8 [ 201.020182][ T8089] [ 201.035475][ T8089] ERROR: Out of memory at tomoyo_realpath_from_path. [ 201.828271][ T8113] FAULT_INJECTION: forcing a failure. [ 201.828271][ T8113] name failslab, interval 1, probability 0, space 0, times 0 [ 201.828312][ T8113] CPU: 0 UID: 0 PID: 8113 Comm: syz.0.895 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 201.828343][ T8113] Tainted: [L]=SOFTLOCKUP [ 201.828351][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 201.828364][ T8113] Call Trace: [ 201.828373][ T8113] [ 201.828382][ T8113] dump_stack_lvl+0xe8/0x150 [ 201.828412][ T8113] should_fail_ex+0x46b/0x600 [ 201.828446][ T8113] should_failslab+0xa8/0x100 [ 201.828481][ T8113] __kmalloc_noprof+0xdf/0x7b0 [ 201.828509][ T8113] ? kfree+0x4d/0x6c0 [ 201.828534][ T8113] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 201.828572][ T8113] tomoyo_realpath_from_path+0xe3/0x5d0 [ 201.828603][ T8113] ? tomoyo_domain+0xd7/0x130 [ 201.828651][ T8113] ? tomoyo_path_number_perm+0x219/0x630 [ 201.828676][ T8113] tomoyo_path_number_perm+0x246/0x630 [ 201.828702][ T8113] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 201.828725][ T8113] ? __lock_acquire+0x6b5/0x2cf0 [ 201.828756][ T8113] ? do_raw_spin_lock+0x12b/0x2f0 [ 201.828810][ T8113] ? __fget_files+0x2a/0x420 [ 201.828840][ T8113] ? __fget_files+0x2a/0x420 [ 201.828863][ T8113] ? __fget_files+0x3a6/0x420 [ 201.828886][ T8113] ? __fget_files+0x2a/0x420 [ 201.828916][ T8113] security_file_ioctl+0xc3/0x2a0 [ 201.828943][ T8113] __se_sys_ioctl+0x47/0x170 [ 201.828975][ T8113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.829001][ T8113] do_syscall_64+0x15f/0xf80 [ 201.829023][ T8113] ? trace_irq_disable+0x3b/0x140 [ 201.829055][ T8113] ? clear_bhb_loop+0x40/0x90 [ 201.829083][ T8113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.829104][ T8113] RIP: 0033:0x7fc0ff06c819 [ 201.829125][ T8113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.829144][ T8113] RSP: 002b:00007fc0fd2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.829168][ T8113] RAX: ffffffffffffffda RBX: 00007fc0ff2e5fa0 RCX: 00007fc0ff06c819 [ 201.829184][ T8113] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000006 [ 201.829197][ T8113] RBP: 00007fc0fd2c6090 R08: 0000000000000000 R09: 0000000000000000 [ 201.829209][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.829222][ T8113] R13: 00007fc0ff2e6038 R14: 00007fc0ff2e5fa0 R15: 00007ffe83815ff8 [ 201.829257][ T8113] [ 201.839852][ T8113] ERROR: Out of memory at tomoyo_realpath_from_path. [ 202.249785][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 202.349911][ T820] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 202.399780][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 202.416408][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 202.416441][ T9] usb 3-1: config 0 has no interface number 0 [ 202.436209][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 202.436244][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.436267][ T9] usb 3-1: Product: syz [ 202.436281][ T9] usb 3-1: Manufacturer: syz [ 202.436296][ T9] usb 3-1: SerialNumber: syz [ 202.483322][ T9] usb 3-1: config 0 descriptor?? [ 202.499691][ T820] usb 5-1: Using ep0 maxpacket: 32 [ 202.510348][ T820] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 202.510379][ T820] usb 5-1: config 0 has no interface number 0 [ 202.510429][ T820] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 202.544454][ T820] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 202.544491][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.544513][ T820] usb 5-1: Product: syz [ 202.544529][ T820] usb 5-1: Manufacturer: syz [ 202.544544][ T820] usb 5-1: SerialNumber: syz [ 202.577862][ T820] usb 5-1: config 0 descriptor?? [ 202.578820][ T8120] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 202.602855][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 202.771640][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 202.811099][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 202.811190][ T8120] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 203.201855][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 203.213497][ T6101] usb 3-1: USB disconnect, device number 15 [ 203.361163][ T6101] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 203.481707][ T6101] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 203.488938][ T6101] quatech2 3-1:0.51: device disconnected [ 203.611404][ T8158] FAULT_INJECTION: forcing a failure. [ 203.611404][ T8158] name failslab, interval 1, probability 0, space 0, times 0 [ 203.611441][ T8158] CPU: 0 UID: 0 PID: 8158 Comm: syz.0.916 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 203.611467][ T8158] Tainted: [L]=SOFTLOCKUP [ 203.611474][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 203.611484][ T8158] Call Trace: [ 203.611492][ T8158] [ 203.611499][ T8158] dump_stack_lvl+0xe8/0x150 [ 203.611526][ T8158] should_fail_ex+0x46b/0x600 [ 203.611555][ T8158] should_failslab+0xa8/0x100 [ 203.611583][ T8158] __kmalloc_noprof+0xdf/0x7b0 [ 203.611605][ T8158] ? kfree+0x4d/0x6c0 [ 203.611625][ T8158] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 203.611669][ T8158] tomoyo_realpath_from_path+0xe3/0x5d0 [ 203.611695][ T8158] ? tomoyo_domain+0xd7/0x130 [ 203.611723][ T8158] ? tomoyo_path_number_perm+0x219/0x630 [ 203.611743][ T8158] tomoyo_path_number_perm+0x246/0x630 [ 203.611765][ T8158] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 203.611784][ T8158] ? __lock_acquire+0x6b5/0x2cf0 [ 203.611809][ T8158] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.611860][ T8158] ? __fget_files+0x2a/0x420 [ 203.611884][ T8158] ? __fget_files+0x2a/0x420 [ 203.611904][ T8158] ? __fget_files+0x3a6/0x420 [ 203.611925][ T8158] ? __fget_files+0x2a/0x420 [ 203.611950][ T8158] security_file_ioctl+0xc3/0x2a0 [ 203.611972][ T8158] __se_sys_ioctl+0x47/0x170 [ 203.611998][ T8158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.612018][ T8158] do_syscall_64+0x15f/0xf80 [ 203.612036][ T8158] ? trace_irq_disable+0x3b/0x140 [ 203.612057][ T8158] ? clear_bhb_loop+0x40/0x90 [ 203.612079][ T8158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.612095][ T8158] RIP: 0033:0x7fc0ff06c819 [ 203.612112][ T8158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.612128][ T8158] RSP: 002b:00007fc0fd2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.612148][ T8158] RAX: ffffffffffffffda RBX: 00007fc0ff2e5fa0 RCX: 00007fc0ff06c819 [ 203.612161][ T8158] RDX: 0000200000000240 RSI: 00000000c03864bc RDI: 000000000000000c [ 203.612172][ T8158] RBP: 00007fc0fd2c6090 R08: 0000000000000000 R09: 0000000000000000 [ 203.612183][ T8158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.612194][ T8158] R13: 00007fc0ff2e6038 R14: 00007fc0ff2e5fa0 R15: 00007ffe83815ff8 [ 203.612224][ T8158] [ 203.612232][ T8158] ERROR: Out of memory at tomoyo_realpath_from_path. [ 204.113667][ T820] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 204.113704][ T820] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 204.129996][ T820] asix 5-1:0.188: probe with driver asix failed with error -71 [ 204.164561][ T820] usb 5-1: USB disconnect, device number 10 [ 204.355489][ T8173] netlink: 132 bytes leftover after parsing attributes in process `syz.2.923'. [ 204.589357][ T8183] FAULT_INJECTION: forcing a failure. [ 204.589357][ T8183] name failslab, interval 1, probability 0, space 0, times 0 [ 204.589399][ T8183] CPU: 0 UID: 0 PID: 8183 Comm: syz.0.925 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 204.589430][ T8183] Tainted: [L]=SOFTLOCKUP [ 204.589443][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 204.589456][ T8183] Call Trace: [ 204.589464][ T8183] [ 204.589474][ T8183] dump_stack_lvl+0xe8/0x150 [ 204.589506][ T8183] should_fail_ex+0x46b/0x600 [ 204.589542][ T8183] should_failslab+0xa8/0x100 [ 204.589576][ T8183] __kmalloc_noprof+0xdf/0x7b0 [ 204.589605][ T8183] ? kfree+0x4d/0x6c0 [ 204.589631][ T8183] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 204.589678][ T8183] tomoyo_realpath_from_path+0xe3/0x5d0 [ 204.589717][ T8183] ? tomoyo_domain+0xd7/0x130 [ 204.589754][ T8183] ? tomoyo_path_number_perm+0x219/0x630 [ 204.589778][ T8183] tomoyo_path_number_perm+0x246/0x630 [ 204.589806][ T8183] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 204.589839][ T8183] ? __lock_acquire+0x6b5/0x2cf0 [ 204.589871][ T8183] ? do_raw_spin_lock+0x12b/0x2f0 [ 204.589932][ T8183] ? __fget_files+0x2a/0x420 [ 204.589962][ T8183] ? __fget_files+0x2a/0x420 [ 204.589988][ T8183] ? __fget_files+0x3a6/0x420 [ 204.590013][ T8183] ? __fget_files+0x2a/0x420 [ 204.590045][ T8183] security_file_ioctl+0xc3/0x2a0 [ 204.590072][ T8183] __se_sys_ioctl+0x47/0x170 [ 204.590106][ T8183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.590132][ T8183] do_syscall_64+0x15f/0xf80 [ 204.590155][ T8183] ? trace_irq_disable+0x3b/0x140 [ 204.590180][ T8183] ? clear_bhb_loop+0x40/0x90 [ 204.590209][ T8183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.590232][ T8183] RIP: 0033:0x7fc0ff06c819 [ 204.590253][ T8183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.590272][ T8183] RSP: 002b:00007fc0fd2a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.590296][ T8183] RAX: ffffffffffffffda RBX: 00007fc0ff2e6090 RCX: 00007fc0ff06c819 [ 204.590312][ T8183] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 204.590326][ T8183] RBP: 00007fc0fd2a5090 R08: 0000000000000000 R09: 0000000000000000 [ 204.590339][ T8183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.590353][ T8183] R13: 00007fc0ff2e6128 R14: 00007fc0ff2e6090 R15: 00007ffe83815ff8 [ 204.590389][ T8183] [ 204.629716][ T8183] ERROR: Out of memory at tomoyo_realpath_from_path. [ 205.241036][ T8199] FAULT_INJECTION: forcing a failure. [ 205.241036][ T8199] name failslab, interval 1, probability 0, space 0, times 0 [ 205.241065][ T8199] CPU: 0 UID: 0 PID: 8199 Comm: syz.4.932 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 205.241084][ T8199] Tainted: [L]=SOFTLOCKUP [ 205.241088][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 205.241096][ T8199] Call Trace: [ 205.241101][ T8199] [ 205.241107][ T8199] dump_stack_lvl+0xe8/0x150 [ 205.241127][ T8199] should_fail_ex+0x46b/0x600 [ 205.241147][ T8199] should_failslab+0xa8/0x100 [ 205.241167][ T8199] __kmalloc_noprof+0xdf/0x7b0 [ 205.241184][ T8199] ? kfree+0x4d/0x6c0 [ 205.241199][ T8199] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 205.241226][ T8199] tomoyo_realpath_from_path+0xe3/0x5d0 [ 205.241244][ T8199] ? tomoyo_domain+0xd7/0x130 [ 205.241264][ T8199] ? tomoyo_path_number_perm+0x219/0x630 [ 205.241278][ T8199] tomoyo_path_number_perm+0x246/0x630 [ 205.241294][ T8199] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 205.241307][ T8199] ? __lock_acquire+0x6b5/0x2cf0 [ 205.241325][ T8199] ? do_raw_spin_lock+0x12b/0x2f0 [ 205.241358][ T8199] ? __fget_files+0x2a/0x420 [ 205.241375][ T8199] ? __fget_files+0x2a/0x420 [ 205.241454][ T8199] ? __fget_files+0x3a6/0x420 [ 205.241492][ T8199] ? __fget_files+0x2a/0x420 [ 205.241522][ T8199] security_file_ioctl+0xc3/0x2a0 [ 205.241549][ T8199] __se_sys_ioctl+0x47/0x170 [ 205.241578][ T8199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.241602][ T8199] do_syscall_64+0x15f/0xf80 [ 205.241619][ T8199] ? trace_irq_disable+0x3b/0x140 [ 205.241640][ T8199] ? clear_bhb_loop+0x40/0x90 [ 205.241659][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.241673][ T8199] RIP: 0033:0x7fbe98a3c819 [ 205.241687][ T8199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.241699][ T8199] RSP: 002b:00007fbe96c8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.241714][ T8199] RAX: ffffffffffffffda RBX: 00007fbe98cb5fa0 RCX: 00007fbe98a3c819 [ 205.241724][ T8199] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 205.241731][ T8199] RBP: 00007fbe96c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 205.241739][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.241746][ T8199] R13: 00007fbe98cb6038 R14: 00007fbe98cb5fa0 R15: 00007ffc6bdfc428 [ 205.241765][ T8199] [ 205.241845][ T8199] ERROR: Out of memory at tomoyo_realpath_from_path. [ 205.574093][ T8202] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.933'. [ 205.735164][ T8206] input: syz0 as /devices/virtual/input/input8 [ 206.072653][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 206.074853][ T8222] netlink: 'syz.0.942': attribute type 10 has an invalid length. [ 206.076259][ T8223] netlink: 'syz.0.942': attribute type 10 has an invalid length. [ 206.145647][ T8222] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 206.219795][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 206.222238][ T9] usb 5-1: config 2 has an invalid interface number: 200 but max is 0 [ 206.222270][ T9] usb 5-1: config 2 has no interface number 0 [ 206.222302][ T9] usb 5-1: config 2 interface 200 has no altsetting 0 [ 206.225267][ T9] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=79.77 [ 206.225297][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.225319][ T9] usb 5-1: Product: syz [ 206.225334][ T9] usb 5-1: Manufacturer: syz [ 206.225349][ T9] usb 5-1: SerialNumber: syz [ 206.456777][ T8231] FAULT_INJECTION: forcing a failure. [ 206.456777][ T8231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.456809][ T8231] CPU: 1 UID: 0 PID: 8231 Comm: syz.0.945 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 206.456837][ T8231] Tainted: [L]=SOFTLOCKUP [ 206.456844][ T8231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 206.456857][ T8231] Call Trace: [ 206.456865][ T8231] [ 206.456874][ T8231] dump_stack_lvl+0xe8/0x150 [ 206.456904][ T8231] should_fail_ex+0x46b/0x600 [ 206.456936][ T8231] _copy_from_user+0x2d/0xb0 [ 206.456967][ T8231] ___sys_recvmsg+0x175/0x590 [ 206.456989][ T8231] ? __pfx____sys_recvmsg+0x10/0x10 [ 206.457008][ T8231] ? __fget_files+0x2a/0x420 [ 206.457047][ T8231] ? __fget_files+0x3a6/0x420 [ 206.457085][ T8231] do_recvmmsg+0x33a/0x800 [ 206.457121][ T8231] ? __pfx_do_recvmmsg+0x10/0x10 [ 206.457153][ T8231] ? rt_mutex_slowunlock+0x1cb/0x300 [ 206.457181][ T8231] __x64_sys_recvmmsg+0x198/0x250 [ 206.457213][ T8231] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 206.457251][ T8231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.457275][ T8231] do_syscall_64+0x15f/0xf80 [ 206.457295][ T8231] ? trace_irq_disable+0x3b/0x140 [ 206.457319][ T8231] ? clear_bhb_loop+0x40/0x90 [ 206.457344][ T8231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.457357][ T8231] RIP: 0033:0x7fc0ff06c819 [ 206.457375][ T8231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.457393][ T8231] RSP: 002b:00007fc0fd2c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 206.457418][ T8231] RAX: ffffffffffffffda RBX: 00007fc0ff2e5fa0 RCX: 00007fc0ff06c819 [ 206.457434][ T8231] RDX: 04000000000001b6 RSI: 00002000000001c0 RDI: 0000000000000003 [ 206.457454][ T8231] RBP: 00007fc0fd2c6090 R08: 0000000000000000 R09: 0000000000000000 [ 206.457466][ T8231] R10: 0000000000000180 R11: 0000000000000246 R12: 0000000000000001 [ 206.457479][ T8231] R13: 00007fc0ff2e6038 R14: 00007fc0ff2e5fa0 R15: 00007ffe83815ff8 [ 206.457504][ T8231] [ 206.680038][ T9] cypress_cy7c63 5-1:2.200: Cypress CY7C63xxx device now attached [ 206.695031][ T9] usb 5-1: USB disconnect, device number 11 [ 206.712201][ T9] cypress_cy7c63 5-1:2.200: Cypress CY7C63xxx device now disconnected [ 207.023040][ T8243] 9p: Bad value for 'rfdno' [ 207.402061][ T8252] FAULT_INJECTION: forcing a failure. [ 207.402061][ T8252] name failslab, interval 1, probability 0, space 0, times 0 [ 207.402090][ T8252] CPU: 1 UID: 0 PID: 8252 Comm: syz.2.954 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 207.402109][ T8252] Tainted: [L]=SOFTLOCKUP [ 207.402113][ T8252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 207.402121][ T8252] Call Trace: [ 207.402126][ T8252] [ 207.402132][ T8252] dump_stack_lvl+0xe8/0x150 [ 207.402151][ T8252] should_fail_ex+0x46b/0x600 [ 207.402172][ T8252] should_failslab+0xa8/0x100 [ 207.402192][ T8252] __kmalloc_noprof+0xdf/0x7b0 [ 207.402209][ T8252] ? kfree+0x4d/0x6c0 [ 207.402224][ T8252] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 207.402245][ T8252] tomoyo_realpath_from_path+0xe3/0x5d0 [ 207.402263][ T8252] ? tomoyo_domain+0xd7/0x130 [ 207.402284][ T8252] ? tomoyo_path_number_perm+0x219/0x630 [ 207.402298][ T8252] tomoyo_path_number_perm+0x246/0x630 [ 207.402314][ T8252] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 207.402328][ T8252] ? __lock_acquire+0x6b5/0x2cf0 [ 207.402346][ T8252] ? do_raw_spin_lock+0x12b/0x2f0 [ 207.402377][ T8252] ? __fget_files+0x2a/0x420 [ 207.402415][ T8252] ? __fget_files+0x2a/0x420 [ 207.402428][ T8252] ? __fget_files+0x3a6/0x420 [ 207.402442][ T8252] ? __fget_files+0x2a/0x420 [ 207.402458][ T8252] security_file_ioctl+0xc3/0x2a0 [ 207.402474][ T8252] __se_sys_ioctl+0x47/0x170 [ 207.402493][ T8252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.402507][ T8252] do_syscall_64+0x15f/0xf80 [ 207.402520][ T8252] ? trace_irq_disable+0x3b/0x140 [ 207.402534][ T8252] ? clear_bhb_loop+0x40/0x90 [ 207.402550][ T8252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.402562][ T8252] RIP: 0033:0x7f4f8c94c819 [ 207.402581][ T8252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.402593][ T8252] RSP: 002b:00007f4f8ab9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.402607][ T8252] RAX: ffffffffffffffda RBX: 00007f4f8cbc5fa0 RCX: 00007f4f8c94c819 [ 207.402616][ T8252] RDX: 000020000000a100 RSI: 00000000c080aebe RDI: 0000000000000005 [ 207.402625][ T8252] RBP: 00007f4f8ab9e090 R08: 0000000000000000 R09: 0000000000000000 [ 207.402632][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.402640][ T8252] R13: 00007f4f8cbc6038 R14: 00007f4f8cbc5fa0 R15: 00007ffc1cf54ca8 [ 207.402659][ T8252] [ 207.402664][ T8252] ERROR: Out of memory at tomoyo_realpath_from_path. [ 207.999801][ T820] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 208.168653][ T820] usb 5-1: unable to get BOS descriptor or descriptor too short [ 208.181467][ T820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.181539][ T820] usb 5-1: config 1 interface 1 has no altsetting 1 [ 208.211720][ T820] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.211756][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.211780][ T820] usb 5-1: Product: syz [ 208.211795][ T820] usb 5-1: Manufacturer: syz [ 208.211810][ T820] usb 5-1: SerialNumber: syz [ 208.509725][ T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 208.663391][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.663429][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.663476][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.663503][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.709621][ T5841] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 208.887022][ T9] usb 3-1: usb_control_msg returned -32 [ 208.887081][ T9] usbtmc 3-1:16.0: can't read capabilities [ 208.910129][ T5841] usb 1-1: unable to get BOS descriptor or descriptor too short [ 208.915991][ T5841] usb 1-1: config 1 interface 0 has no altsetting 0 [ 208.950830][ T5841] usb 1-1: string descriptor 0 read error: -22 [ 208.951020][ T5841] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.40 [ 208.951047][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.425356][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.427912][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.720573][ T5841] usbhid 1-1:1.0: can't add hid device: -71 [ 209.720711][ T5841] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 209.747878][ T5841] usb 1-1: USB disconnect, device number 6 [ 209.749666][ T5145] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 210.019922][ T820] usb 5-1: selecting invalid altsetting 1 [ 210.045353][ T820] cdc_ncm 5-1:1.0: bind() failure [ 210.115407][ T820] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 210.115463][ T820] cdc_ncm 5-1:1.1: bind() failure [ 210.126537][ T820] usb 5-1: USB disconnect, device number 12 [ 210.604715][ T8306] trusted_key: syz.0.976 sent an empty control message without MSG_MORE. [ 211.346264][ T820] usb 3-1: USB disconnect, device number 16 [ 211.655799][ T8351] netlink: 104 bytes leftover after parsing attributes in process `syz.4.996'. [ 212.099682][ T6102] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 212.252962][ T6102] usb 3-1: Using ep0 maxpacket: 8 [ 212.266501][ T6102] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 212.266546][ T6102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.266570][ T6102] usb 3-1: Product: syz [ 212.266585][ T6102] usb 3-1: Manufacturer: syz [ 212.266601][ T6102] usb 3-1: SerialNumber: syz [ 212.303956][ T6102] usb 3-1: config 0 descriptor?? [ 212.331237][ T6102] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 212.496586][ T8381] FAULT_INJECTION: forcing a failure. [ 212.496586][ T8381] name failslab, interval 1, probability 0, space 0, times 0 [ 212.496629][ T8381] CPU: 0 UID: 0 PID: 8381 Comm: syz.0.1009 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 212.496662][ T8381] Tainted: [L]=SOFTLOCKUP [ 212.496670][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 212.496683][ T8381] Call Trace: [ 212.496691][ T8381] [ 212.496709][ T8381] dump_stack_lvl+0xe8/0x150 [ 212.496742][ T8381] should_fail_ex+0x46b/0x600 [ 212.496776][ T8381] should_failslab+0xa8/0x100 [ 212.496812][ T8381] __kmalloc_noprof+0xdf/0x7b0 [ 212.496841][ T8381] ? kfree+0x4d/0x6c0 [ 212.496867][ T8381] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 212.496905][ T8381] tomoyo_realpath_from_path+0xe3/0x5d0 [ 212.496936][ T8381] ? tomoyo_domain+0xd7/0x130 [ 212.496972][ T8381] ? tomoyo_path_number_perm+0x219/0x630 [ 212.496997][ T8381] tomoyo_path_number_perm+0x246/0x630 [ 212.497027][ T8381] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 212.497052][ T8381] ? __lock_acquire+0x6b5/0x2cf0 [ 212.497085][ T8381] ? do_raw_spin_lock+0x12b/0x2f0 [ 212.497142][ T8381] ? __fget_files+0x2a/0x420 [ 212.497174][ T8381] ? __fget_files+0x2a/0x420 [ 212.497199][ T8381] ? __fget_files+0x3a6/0x420 [ 212.497225][ T8381] ? __fget_files+0x2a/0x420 [ 212.497255][ T8381] security_file_ioctl+0xc3/0x2a0 [ 212.497281][ T8381] __se_sys_ioctl+0x47/0x170 [ 212.497315][ T8381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.497340][ T8381] do_syscall_64+0x15f/0xf80 [ 212.497363][ T8381] ? trace_irq_disable+0x3b/0x140 [ 212.497388][ T8381] ? clear_bhb_loop+0x40/0x90 [ 212.497416][ T8381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.497438][ T8381] RIP: 0033:0x7fc0ff06c819 [ 212.497458][ T8381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.497477][ T8381] RSP: 002b:00007fc0fd2a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.497503][ T8381] RAX: ffffffffffffffda RBX: 00007fc0ff2e6090 RCX: 00007fc0ff06c819 [ 212.497519][ T8381] RDX: 0000200000000400 RSI: 000000004020ae46 RDI: 0000000000000004 [ 212.497534][ T8381] RBP: 00007fc0fd2a5090 R08: 0000000000000000 R09: 0000000000000000 [ 212.497549][ T8381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.497562][ T8381] R13: 00007fc0ff2e6128 R14: 00007fc0ff2e6090 R15: 00007ffe83815ff8 [ 212.497596][ T8381] [ 212.497605][ T8381] ERROR: Out of memory at tomoyo_realpath_from_path. [ 212.798639][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.835412][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.850882][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.856662][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.858851][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.228515][ T6102] gspca_sonixj: reg_w1 err -71 [ 213.228619][ T6102] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 213.254510][ T6102] usb 3-1: USB disconnect, device number 17 [ 213.417548][ T8386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.418228][ T8386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.694254][ T8383] chnl_net:caif_netlink_parms(): no params data found [ 214.038733][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.042467][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.042759][ T8383] bridge_slave_0: entered allmulticast mode [ 214.046450][ T8383] bridge_slave_0: entered promiscuous mode [ 214.058055][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.058429][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.058691][ T8383] bridge_slave_1: entered allmulticast mode [ 214.062625][ T8383] bridge_slave_1: entered promiscuous mode [ 214.293707][ T8383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.312697][ T8383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.496419][ T8428] FAULT_INJECTION: forcing a failure. [ 214.496419][ T8428] name failslab, interval 1, probability 0, space 0, times 0 [ 214.496459][ T8428] CPU: 0 UID: 0 PID: 8428 Comm: syz.2.1025 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 214.496489][ T8428] Tainted: [L]=SOFTLOCKUP [ 214.496496][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 214.496507][ T8428] Call Trace: [ 214.496515][ T8428] [ 214.496524][ T8428] dump_stack_lvl+0xe8/0x150 [ 214.496554][ T8428] should_fail_ex+0x46b/0x600 [ 214.496589][ T8428] should_failslab+0xa8/0x100 [ 214.496624][ T8428] __kmalloc_noprof+0xdf/0x7b0 [ 214.496652][ T8428] ? kfree+0x4d/0x6c0 [ 214.496676][ T8428] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 214.496711][ T8428] tomoyo_realpath_from_path+0xe3/0x5d0 [ 214.496743][ T8428] ? tomoyo_domain+0xd7/0x130 [ 214.496789][ T8428] ? tomoyo_path_number_perm+0x219/0x630 [ 214.496814][ T8428] tomoyo_path_number_perm+0x246/0x630 [ 214.496842][ T8428] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.496866][ T8428] ? __lock_acquire+0x6b5/0x2cf0 [ 214.496896][ T8428] ? do_raw_spin_lock+0x12b/0x2f0 [ 214.496951][ T8428] ? __fget_files+0x2a/0x420 [ 214.496980][ T8428] ? __fget_files+0x2a/0x420 [ 214.497004][ T8428] ? __fget_files+0x3a6/0x420 [ 214.497030][ T8428] ? __fget_files+0x2a/0x420 [ 214.497060][ T8428] security_file_ioctl+0xc3/0x2a0 [ 214.497087][ T8428] __se_sys_ioctl+0x47/0x170 [ 214.497120][ T8428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.497145][ T8428] do_syscall_64+0x15f/0xf80 [ 214.497167][ T8428] ? trace_irq_disable+0x3b/0x140 [ 214.497199][ T8428] ? clear_bhb_loop+0x40/0x90 [ 214.497227][ T8428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.497249][ T8428] RIP: 0033:0x7f4f8c94c819 [ 214.497270][ T8428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.497289][ T8428] RSP: 002b:00007f4f8ab9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.497315][ T8428] RAX: ffffffffffffffda RBX: 00007f4f8cbc5fa0 RCX: 00007f4f8c94c819 [ 214.497331][ T8428] RDX: 0000000000000000 RSI: 000000004020aea5 RDI: 0000000000000004 [ 214.497345][ T8428] RBP: 00007f4f8ab9e090 R08: 0000000000000000 R09: 0000000000000000 [ 214.497358][ T8428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.497372][ T8428] R13: 00007f4f8cbc6038 R14: 00007f4f8cbc5fa0 R15: 00007ffc1cf54ca8 [ 214.497407][ T8428] [ 214.499079][ T8428] ERROR: Out of memory at tomoyo_realpath_from_path. [ 214.857411][ T8383] team0: Port device team_slave_0 added [ 214.869033][ T8383] team0: Port device team_slave_1 added [ 214.969796][ T60] Bluetooth: hci5: command tx timeout [ 215.070527][ T8442] FAULT_INJECTION: forcing a failure. [ 215.070527][ T8442] name failslab, interval 1, probability 0, space 0, times 0 [ 215.070662][ T8442] CPU: 0 UID: 0 PID: 8442 Comm: syz.2.1030 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 215.070690][ T8442] Tainted: [L]=SOFTLOCKUP [ 215.070696][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 215.070718][ T8442] Call Trace: [ 215.070726][ T8442] [ 215.070733][ T8442] dump_stack_lvl+0xe8/0x150 [ 215.070760][ T8442] should_fail_ex+0x46b/0x600 [ 215.070787][ T8442] should_failslab+0xa8/0x100 [ 215.070870][ T8442] __kmalloc_noprof+0xdf/0x7b0 [ 215.070892][ T8442] ? kfree+0x4d/0x6c0 [ 215.070914][ T8442] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 215.070973][ T8442] tomoyo_realpath_from_path+0xe3/0x5d0 [ 215.071004][ T8442] ? tomoyo_domain+0xd7/0x130 [ 215.071038][ T8442] ? tomoyo_path_number_perm+0x219/0x630 [ 215.071062][ T8442] tomoyo_path_number_perm+0x246/0x630 [ 215.071089][ T8442] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 215.071135][ T8442] ? __lock_acquire+0x6b5/0x2cf0 [ 215.071180][ T8442] ? do_raw_spin_lock+0x12b/0x2f0 [ 215.071240][ T8442] ? __fget_files+0x2a/0x420 [ 215.071271][ T8442] ? __fget_files+0x2a/0x420 [ 215.071297][ T8442] ? __fget_files+0x3a6/0x420 [ 215.071322][ T8442] ? __fget_files+0x2a/0x420 [ 215.071352][ T8442] security_file_ioctl+0xc3/0x2a0 [ 215.071378][ T8442] __se_sys_ioctl+0x47/0x170 [ 215.071412][ T8442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.071437][ T8442] do_syscall_64+0x15f/0xf80 [ 215.071458][ T8442] ? trace_irq_disable+0x3b/0x140 [ 215.071484][ T8442] ? clear_bhb_loop+0x40/0x90 [ 215.071513][ T8442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.071535][ T8442] RIP: 0033:0x7f4f8c94c819 [ 215.071557][ T8442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.071576][ T8442] RSP: 002b:00007f4f8ab7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.071602][ T8442] RAX: ffffffffffffffda RBX: 00007f4f8cbc6090 RCX: 00007f4f8c94c819 [ 215.071618][ T8442] RDX: 0000200000000400 RSI: 000000004020ae46 RDI: 0000000000000004 [ 215.071633][ T8442] RBP: 00007f4f8ab7d090 R08: 0000000000000000 R09: 0000000000000000 [ 215.071647][ T8442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.071661][ T8442] R13: 00007f4f8cbc6128 R14: 00007f4f8cbc6090 R15: 00007ffc1cf54ca8 [ 215.071696][ T8442] [ 215.071714][ T8442] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.181927][ T8383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.181946][ T8383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.181972][ T8383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.210568][ T8383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.210585][ T8383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.210613][ T8383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.360321][ T8383] hsr_slave_0: entered promiscuous mode [ 215.366176][ T8383] hsr_slave_1: entered promiscuous mode [ 215.369811][ T8383] debugfs: 'hsr0' already exists in 'hsr' [ 215.381371][ T8383] Cannot create hsr debugfs directory [ 215.402719][ T32] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 215.554289][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 215.556531][ T32] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 215.556559][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.635738][ T32] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 215.996743][ T8444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.997445][ T8444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.419726][ T9] usb 5-1: USB disconnect, device number 13 [ 217.029691][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 217.036939][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 217.036985][ T5846] Bluetooth: hci5: command tx timeout [ 217.114958][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 217.115740][ T5848] Bluetooth: hci0: command 0x0401 tx timeout [ 217.488328][ T8383] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.519316][ T8383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.529737][ T8383] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.622302][ T8383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.630715][ T8383] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.705392][ T8383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.707907][ T8383] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.813809][ T8383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.460709][ T8383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.528169][ T8383] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.559604][ T820] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 218.581213][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.628740][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.715561][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.715673][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.769710][ T820] usb 5-1: Using ep0 maxpacket: 32 [ 218.772946][ T820] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 218.772976][ T820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.854821][ T820] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 219.120827][ T5145] Bluetooth: hci5: command tx timeout [ 219.233626][ T8521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.234280][ T8521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.478247][ T9] usb 5-1: USB disconnect, device number 14 [ 220.198142][ T8383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.192532][ T5145] Bluetooth: hci5: command tx timeout [ 221.199633][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 221.329682][ T9] usb 5-1: device descriptor read/64, error -71 [ 221.362639][ T8383] veth0_vlan: entered promiscuous mode [ 221.416121][ T8383] veth1_vlan: entered promiscuous mode [ 221.581843][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 221.610792][ T8383] veth0_macvtap: entered promiscuous mode [ 221.626523][ T8383] veth1_macvtap: entered promiscuous mode [ 221.722609][ T9] usb 5-1: device descriptor read/64, error -71 [ 221.746059][ T8383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.808082][ T8383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.830582][ T9] usb usb5-port1: attempt power cycle [ 221.835212][ T8627] netlink: 'syz.0.1105': attribute type 27 has an invalid length. [ 221.836839][ T8626] FAULT_INJECTION: forcing a failure. [ 221.836839][ T8626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.836870][ T8626] CPU: 1 UID: 0 PID: 8626 Comm: syz.2.1106 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 221.836897][ T8626] Tainted: [L]=SOFTLOCKUP [ 221.836903][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 221.836914][ T8626] Call Trace: [ 221.836922][ T8626] [ 221.836930][ T8626] dump_stack_lvl+0xe8/0x150 [ 221.836955][ T8626] should_fail_ex+0x46b/0x600 [ 221.836986][ T8626] _copy_to_user+0x31/0xb0 [ 221.837016][ T8626] simple_read_from_buffer+0xe1/0x170 [ 221.837045][ T8626] proc_fail_nth_read+0x1be/0x230 [ 221.837072][ T8626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.837104][ T8626] ? rw_verify_area+0x2ac/0x4e0 [ 221.837130][ T8626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.837155][ T8626] vfs_read+0x212/0xa80 [ 221.837189][ T8626] ? __pfx_vfs_read+0x10/0x10 [ 221.837217][ T8626] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 221.837239][ T8626] ? lockdep_hardirqs_on+0x7a/0x110 [ 221.837259][ T8626] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 221.837279][ T8626] ? mutex_lock_nested+0x152/0x1d0 [ 221.837303][ T8626] ? fdget_pos+0x252/0x320 [ 221.837336][ T8626] ksys_read+0x156/0x270 [ 221.837367][ T8626] ? __pfx_ksys_read+0x10/0x10 [ 221.837498][ T8626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.837521][ T8626] do_syscall_64+0x15f/0xf80 [ 221.837543][ T8626] ? trace_irq_disable+0x3b/0x140 [ 221.837565][ T8626] ? clear_bhb_loop+0x40/0x90 [ 221.837589][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.837610][ T8626] RIP: 0033:0x7f4f8c90d04e [ 221.837630][ T8626] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 221.837647][ T8626] RSP: 002b:00007f4f8ab9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.837669][ T8626] RAX: ffffffffffffffda RBX: 00007f4f8ab9e6c0 RCX: 00007f4f8c90d04e [ 221.837684][ T8626] RDX: 000000000000000f RSI: 00007f4f8ab9e0a0 RDI: 0000000000000005 [ 221.837697][ T8626] RBP: 00007f4f8ab9e090 R08: 0000000000000000 R09: 0000000000000000 [ 221.837709][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.837721][ T8626] R13: 00007f4f8cbc6038 R14: 00007f4f8cbc5fa0 R15: 00007ffc1cf54ca8 [ 221.837753][ T8626] [ 221.846559][ T8624] netlink: 'syz.0.1105': attribute type 27 has an invalid length. [ 221.934554][ T2584] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.090323][ T2412] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.105418][ T2412] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.112687][ T2412] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.595557][ T8637] FAULT_INJECTION: forcing a failure. [ 222.595557][ T8637] name failslab, interval 1, probability 0, space 0, times 0 [ 222.595592][ T8637] CPU: 1 UID: 0 PID: 8637 Comm: syz.0.1110 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 222.595618][ T8637] Tainted: [L]=SOFTLOCKUP [ 222.595624][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 222.595634][ T8637] Call Trace: [ 222.595641][ T8637] [ 222.595648][ T8637] dump_stack_lvl+0xe8/0x150 [ 222.595675][ T8637] should_fail_ex+0x46b/0x600 [ 222.595704][ T8637] should_failslab+0xa8/0x100 [ 222.595732][ T8637] __kmalloc_noprof+0xdf/0x7b0 [ 222.595757][ T8637] ? tomoyo_encode+0x28b/0x550 [ 222.595786][ T8637] tomoyo_encode+0x28b/0x550 [ 222.595816][ T8637] tomoyo_realpath_from_path+0x58d/0x5d0 [ 222.595851][ T8637] ? tomoyo_path_number_perm+0x219/0x630 [ 222.595872][ T8637] tomoyo_path_number_perm+0x246/0x630 [ 222.595894][ T8637] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 222.595913][ T8637] ? __lock_acquire+0x6b5/0x2cf0 [ 222.595939][ T8637] ? do_raw_spin_lock+0x12b/0x2f0 [ 222.595988][ T8637] ? __fget_files+0x2a/0x420 [ 222.596012][ T8637] ? __fget_files+0x2a/0x420 [ 222.596031][ T8637] ? __fget_files+0x3a6/0x420 [ 222.596049][ T8637] ? __fget_files+0x2a/0x420 [ 222.596075][ T8637] security_file_ioctl+0xc3/0x2a0 [ 222.596098][ T8637] __se_sys_ioctl+0x47/0x170 [ 222.596123][ T8637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.596142][ T8637] do_syscall_64+0x15f/0xf80 [ 222.596159][ T8637] ? trace_irq_disable+0x3b/0x140 [ 222.596179][ T8637] ? clear_bhb_loop+0x40/0x90 [ 222.596201][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.596218][ T8637] RIP: 0033:0x7fc0ff06c819 [ 222.596237][ T8637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.596252][ T8637] RSP: 002b:00007fc0fd2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.596274][ T8637] RAX: ffffffffffffffda RBX: 00007fc0ff2e5fa0 RCX: 00007fc0ff06c819 [ 222.596288][ T8637] RDX: 0000200000000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 222.596300][ T8637] RBP: 00007fc0fd2c6090 R08: 0000000000000000 R09: 0000000000000000 [ 222.596310][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.596321][ T8637] R13: 00007fc0ff2e6038 R14: 00007fc0ff2e5fa0 R15: 00007ffe83815ff8 [ 222.596351][ T8637] [ 222.596373][ T8637] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.773132][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 222.824955][ T9] usb 5-1: device descriptor read/8, error -71 [ 223.079633][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 223.108371][ T9] usb 5-1: device descriptor read/8, error -71 [ 223.135000][ T8645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.137730][ T8645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.144564][ T8645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.192600][ T8645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.220204][ T9] usb usb5-port1: unable to enumerate USB device [ 223.306005][ T8647] FAULT_INJECTION: forcing a failure. [ 223.306005][ T8647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.306042][ T8647] CPU: 0 UID: 0 PID: 8647 Comm: syz.2.1115 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 223.306069][ T8647] Tainted: [L]=SOFTLOCKUP [ 223.306076][ T8647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 223.306087][ T8647] Call Trace: [ 223.306093][ T8647] [ 223.306101][ T8647] dump_stack_lvl+0xe8/0x150 [ 223.306126][ T8647] should_fail_ex+0x46b/0x600 [ 223.306155][ T8647] _copy_from_user+0x2d/0xb0 [ 223.306180][ T8647] ___sys_sendmsg+0x1c6/0x360 [ 223.306203][ T8647] ? __lock_acquire+0x6b5/0x2cf0 [ 223.306233][ T8647] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.306286][ T8647] ? __fget_files+0x2a/0x420 [ 223.306306][ T8647] ? __fget_files+0x3a6/0x420 [ 223.306335][ T8647] __x64_sys_sendmsg+0x1c3/0x2a0 [ 223.306361][ T8647] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.306392][ T8647] ? __pfx_ksys_write+0x10/0x10 [ 223.306425][ T8647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.306444][ T8647] do_syscall_64+0x15f/0xf80 [ 223.306462][ T8647] ? trace_irq_disable+0x3b/0x140 [ 223.306484][ T8647] ? clear_bhb_loop+0x40/0x90 [ 223.306506][ T8647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.306523][ T8647] RIP: 0033:0x7f4f8c94c819 [ 223.306540][ T8647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.306556][ T8647] RSP: 002b:00007f4f8ab9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.306593][ T8647] RAX: ffffffffffffffda RBX: 00007f4f8cbc5fa0 RCX: 00007f4f8c94c819 [ 223.306606][ T8647] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 223.306617][ T8647] RBP: 00007f4f8ab9e090 R08: 0000000000000000 R09: 0000000000000000 [ 223.306628][ T8647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.306639][ T8647] R13: 00007f4f8cbc6038 R14: 00007f4f8cbc5fa0 R15: 00007ffc1cf54ca8 [ 223.306668][ T8647] [ 223.319808][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.319832][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.379811][ T37] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 223.604835][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 223.613541][ T37] usb 1-1: config index 0 descriptor too short (expected 46593, got 71) [ 223.613573][ T37] usb 1-1: config 0 has too many interfaces: 158, using maximum allowed: 32 [ 223.613598][ T37] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.613618][ T37] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 158 [ 223.613639][ T37] usb 1-1: config 0 has no interface number 0 [ 223.617347][ T37] usb 1-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 223.617433][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.617499][ T37] usb 1-1: Product: syz [ 223.617518][ T37] usb 1-1: Manufacturer: syz [ 223.617534][ T37] usb 1-1: SerialNumber: syz [ 223.691217][ T37] usb 1-1: config 0 descriptor?? [ 223.756457][ T37] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22 [ 223.870099][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.870123][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.918580][ T9] usb 1-1: USB disconnect, device number 7 [ 225.697223][ T8702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1137'. [ 225.733487][ T8702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1137'. [ 225.846529][ T8706] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1141'. [ 226.399094][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 226.458234][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 226.468981][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 226.479330][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 226.489820][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 227.642339][ T8738] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 227.651794][ T8739] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 227.760462][ T8742] input: syz0 as /devices/virtual/input/input9 [ 228.494103][ T3586] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.565082][ T8715] chnl_net:caif_netlink_parms(): no params data found [ 228.630724][ T5842] Bluetooth: hci6: command tx timeout [ 228.964324][ T821] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 228.978585][ T3586] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.141697][ T821] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 229.141734][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.141756][ T821] usb 5-1: Product: syz [ 229.141771][ T821] usb 5-1: Manufacturer: syz [ 229.141787][ T821] usb 5-1: SerialNumber: syz [ 229.184134][ T821] usb 5-1: config 0 descriptor?? [ 229.197475][ T8715] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.197865][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.198178][ T8715] bridge_slave_0: entered allmulticast mode [ 229.223261][ T8715] bridge_slave_0: entered promiscuous mode [ 229.236148][ T8715] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.236543][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.236822][ T8715] bridge_slave_1: entered allmulticast mode [ 229.254993][ T8715] bridge_slave_1: entered promiscuous mode [ 229.338582][ T8715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.356191][ T8715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.399858][ T821] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 229.532445][ T8715] team0: Port device team_slave_0 added [ 229.759717][ T37] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 229.917789][ T37] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 229.917824][ T37] usb 3-1: config 0 has no interface number 0 [ 229.917879][ T37] usb 3-1: config 0 interface 41 has no altsetting 0 [ 229.945887][ T37] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 229.945920][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.945941][ T37] usb 3-1: Product: syz [ 229.945954][ T37] usb 3-1: Manufacturer: syz [ 229.945969][ T37] usb 3-1: SerialNumber: syz [ 230.004821][ T37] usb 3-1: config 0 descriptor?? [ 230.147042][ T3586] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.255517][ T8780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.303225][ T8780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.579943][ T37] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 230.625851][ T37] usb 3-1: USB disconnect, device number 18 [ 230.697922][ T8715] team0: Port device team_slave_1 added [ 230.709918][ T5842] Bluetooth: hci6: command tx timeout [ 230.802550][ T8789] FAULT_INJECTION: forcing a failure. [ 230.802550][ T8789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.802587][ T8789] CPU: 1 UID: 0 PID: 8789 Comm: syz.5.1170 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 230.802613][ T8789] Tainted: [L]=SOFTLOCKUP [ 230.802619][ T8789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 230.802630][ T8789] Call Trace: [ 230.802637][ T8789] [ 230.802645][ T8789] dump_stack_lvl+0xe8/0x150 [ 230.802673][ T8789] should_fail_ex+0x46b/0x600 [ 230.802702][ T8789] _copy_to_user+0x31/0xb0 [ 230.802730][ T8789] simple_read_from_buffer+0xe1/0x170 [ 230.802757][ T8789] proc_fail_nth_read+0x1be/0x230 [ 230.802784][ T8789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.802809][ T8789] ? rw_verify_area+0x2ac/0x4e0 [ 230.802833][ T8789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.802856][ T8789] vfs_read+0x212/0xa80 [ 230.802888][ T8789] ? __pfx_vfs_read+0x10/0x10 [ 230.802915][ T8789] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 230.802936][ T8789] ? lockdep_hardirqs_on+0x7a/0x110 [ 230.802954][ T8789] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 230.802972][ T8789] ? mutex_lock_nested+0x152/0x1d0 [ 230.803001][ T8789] ? fdget_pos+0x252/0x320 [ 230.803030][ T8789] ksys_read+0x156/0x270 [ 230.803057][ T8789] ? __pfx_ksys_read+0x10/0x10 [ 230.803090][ T8789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.803111][ T8789] do_syscall_64+0x15f/0xf80 [ 230.803128][ T8789] ? trace_irq_disable+0x3b/0x140 [ 230.803148][ T8789] ? clear_bhb_loop+0x40/0x90 [ 230.803171][ T8789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.803189][ T8789] RIP: 0033:0x7f872460d04e [ 230.803207][ T8789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 230.803222][ T8789] RSP: 002b:00007f8722884fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.803242][ T8789] RAX: ffffffffffffffda RBX: 00007f87228856c0 RCX: 00007f872460d04e [ 230.803254][ T8789] RDX: 000000000000000f RSI: 00007f87228850a0 RDI: 0000000000000005 [ 230.803265][ T8789] RBP: 00007f8722885090 R08: 0000000000000000 R09: 0000000000000000 [ 230.803276][ T8789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.803287][ T8789] R13: 00007f87248c6128 R14: 00007f87248c6090 R15: 00007ffc8e90c558 [ 230.803326][ T8789] [ 231.205240][ T8756] input: syz0 as /devices/virtual/input/input10 [ 231.526587][ T821] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 231.639736][ T821] usb 5-1: USB disconnect, device number 19 [ 231.981254][ T3586] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.026901][ T8715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.026922][ T8715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.026951][ T8715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.036898][ T8715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.036917][ T8715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.036944][ T8715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.251994][ T8808] FAULT_INJECTION: forcing a failure. [ 232.251994][ T8808] name failslab, interval 1, probability 0, space 0, times 0 [ 232.252038][ T8808] CPU: 1 UID: 0 PID: 8808 Comm: syz.5.1179 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 232.252069][ T8808] Tainted: [L]=SOFTLOCKUP [ 232.252077][ T8808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 232.252090][ T8808] Call Trace: [ 232.252098][ T8808] [ 232.252108][ T8808] dump_stack_lvl+0xe8/0x150 [ 232.252139][ T8808] should_fail_ex+0x46b/0x600 [ 232.252174][ T8808] should_failslab+0xa8/0x100 [ 232.252210][ T8808] __kmalloc_noprof+0xdf/0x7b0 [ 232.252242][ T8808] ? tomoyo_encode+0x28b/0x550 [ 232.252279][ T8808] tomoyo_encode+0x28b/0x550 [ 232.252314][ T8808] tomoyo_realpath_from_path+0x58d/0x5d0 [ 232.252364][ T8808] ? tomoyo_domain+0xd7/0x130 [ 232.252398][ T8808] ? tomoyo_path_number_perm+0x219/0x630 [ 232.252423][ T8808] tomoyo_path_number_perm+0x246/0x630 [ 232.252450][ T8808] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 232.252472][ T8808] ? __lock_acquire+0x6b5/0x2cf0 [ 232.252502][ T8808] ? do_raw_spin_lock+0x12b/0x2f0 [ 232.252558][ T8808] ? __fget_files+0x2a/0x420 [ 232.252585][ T8808] ? __fget_files+0x2a/0x420 [ 232.252614][ T8808] ? __fget_files+0x3a6/0x420 [ 232.252637][ T8808] ? __fget_files+0x2a/0x420 [ 232.252666][ T8808] security_file_ioctl+0xc3/0x2a0 [ 232.252691][ T8808] __se_sys_ioctl+0x47/0x170 [ 232.252723][ T8808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.252748][ T8808] do_syscall_64+0x15f/0xf80 [ 232.252770][ T8808] ? trace_irq_disable+0x3b/0x140 [ 232.252795][ T8808] ? clear_bhb_loop+0x40/0x90 [ 232.252823][ T8808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.252846][ T8808] RIP: 0033:0x7f872464c819 [ 232.252867][ T8808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.252886][ T8808] RSP: 002b:00007f87228a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.252912][ T8808] RAX: ffffffffffffffda RBX: 00007f87248c5fa0 RCX: 00007f872464c819 [ 232.252928][ T8808] RDX: 0000200000000200 RSI: 000000004040ae9e RDI: 0000000000000005 [ 232.252943][ T8808] RBP: 00007f87228a6090 R08: 0000000000000000 R09: 0000000000000000 [ 232.252958][ T8808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.252972][ T8808] R13: 00007f87248c6038 R14: 00007f87248c5fa0 R15: 00007ffc8e90c558 [ 232.253007][ T8808] [ 232.253061][ T8808] ERROR: Out of memory at tomoyo_realpath_from_path. [ 232.460988][ T8715] hsr_slave_0: entered promiscuous mode [ 232.480503][ T8715] hsr_slave_1: entered promiscuous mode [ 232.488636][ T8715] debugfs: 'hsr0' already exists in 'hsr' [ 232.488665][ T8715] Cannot create hsr debugfs directory [ 232.802510][ T5842] Bluetooth: hci6: command tx timeout [ 233.241381][ T8827] FAULT_INJECTION: forcing a failure. [ 233.241381][ T8827] name failslab, interval 1, probability 0, space 0, times 0 [ 233.241420][ T8827] CPU: 1 UID: 0 PID: 8827 Comm: syz.5.1186 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 233.241446][ T8827] Tainted: [L]=SOFTLOCKUP [ 233.241452][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 233.241463][ T8827] Call Trace: [ 233.241471][ T8827] [ 233.241478][ T8827] dump_stack_lvl+0xe8/0x150 [ 233.241518][ T8827] should_fail_ex+0x46b/0x600 [ 233.241549][ T8827] should_failslab+0xa8/0x100 [ 233.241577][ T8827] __kmalloc_noprof+0xdf/0x7b0 [ 233.241601][ T8827] ? tomoyo_encode+0x28b/0x550 [ 233.241629][ T8827] tomoyo_encode+0x28b/0x550 [ 233.241658][ T8827] tomoyo_realpath_from_path+0x58d/0x5d0 [ 233.241683][ T8827] ? tomoyo_domain+0xd7/0x130 [ 233.241713][ T8827] ? tomoyo_path_number_perm+0x219/0x630 [ 233.241734][ T8827] tomoyo_path_number_perm+0x246/0x630 [ 233.241757][ T8827] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 233.241781][ T8827] ? __lock_acquire+0x6b5/0x2cf0 [ 233.241806][ T8827] ? do_raw_spin_lock+0x12b/0x2f0 [ 233.241856][ T8827] ? __fget_files+0x2a/0x420 [ 233.241879][ T8827] ? __fget_files+0x2a/0x420 [ 233.241900][ T8827] ? __fget_files+0x3a6/0x420 [ 233.241922][ T8827] ? __fget_files+0x2a/0x420 [ 233.241950][ T8827] security_file_ioctl+0xc3/0x2a0 [ 233.241974][ T8827] __se_sys_ioctl+0x47/0x170 [ 233.242005][ T8827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.242029][ T8827] do_syscall_64+0x15f/0xf80 [ 233.242052][ T8827] ? trace_irq_disable+0x3b/0x140 [ 233.242094][ T8827] ? clear_bhb_loop+0x40/0x90 [ 233.242154][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.242177][ T8827] RIP: 0033:0x7f872464c819 [ 233.242198][ T8827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.242216][ T8827] RSP: 002b:00007f87228a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.242239][ T8827] RAX: ffffffffffffffda RBX: 00007f87248c5fa0 RCX: 00007f872464c819 [ 233.242254][ T8827] RDX: 0000200000000180 RSI: 000000004048aecb RDI: 0000000000000005 [ 233.242267][ T8827] RBP: 00007f87228a6090 R08: 0000000000000000 R09: 0000000000000000 [ 233.242278][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.242288][ T8827] R13: 00007f87248c6038 R14: 00007f87248c5fa0 R15: 00007ffc8e90c558 [ 233.242318][ T8827] [ 233.279661][ T8827] ERROR: Out of memory at tomoyo_realpath_from_path. [ 234.718012][ T8856] FAULT_INJECTION: forcing a failure. [ 234.718012][ T8856] name failslab, interval 1, probability 0, space 0, times 0 [ 234.718040][ T8856] CPU: 0 UID: 0 PID: 8856 Comm: syz.5.1199 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 234.718059][ T8856] Tainted: [L]=SOFTLOCKUP [ 234.718064][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 234.718071][ T8856] Call Trace: [ 234.718076][ T8856] [ 234.718082][ T8856] dump_stack_lvl+0xe8/0x150 [ 234.718102][ T8856] should_fail_ex+0x46b/0x600 [ 234.718121][ T8856] should_failslab+0xa8/0x100 [ 234.718141][ T8856] __kmalloc_noprof+0xdf/0x7b0 [ 234.718158][ T8856] ? tomoyo_encode+0x28b/0x550 [ 234.718179][ T8856] tomoyo_encode+0x28b/0x550 [ 234.718212][ T8856] tomoyo_realpath_from_path+0x58d/0x5d0 [ 234.718262][ T8856] ? tomoyo_path_number_perm+0x219/0x630 [ 234.718287][ T8856] tomoyo_path_number_perm+0x246/0x630 [ 234.718312][ T8856] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 234.718325][ T8856] ? __lock_acquire+0x6b5/0x2cf0 [ 234.718343][ T8856] ? do_raw_spin_lock+0x12b/0x2f0 [ 234.718376][ T8856] ? __fget_files+0x2a/0x420 [ 234.718393][ T8856] ? __fget_files+0x2a/0x420 [ 234.718406][ T8856] ? __fget_files+0x3a6/0x420 [ 234.718420][ T8856] ? __fget_files+0x2a/0x420 [ 234.718437][ T8856] security_file_ioctl+0xc3/0x2a0 [ 234.718452][ T8856] __se_sys_ioctl+0x47/0x170 [ 234.718470][ T8856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.718484][ T8856] do_syscall_64+0x15f/0xf80 [ 234.718497][ T8856] ? trace_irq_disable+0x3b/0x140 [ 234.718514][ T8856] ? clear_bhb_loop+0x40/0x90 [ 234.718530][ T8856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.718542][ T8856] RIP: 0033:0x7f872464c819 [ 234.718555][ T8856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.718566][ T8856] RSP: 002b:00007f87228a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.718581][ T8856] RAX: ffffffffffffffda RBX: 00007f87248c5fa0 RCX: 00007f872464c819 [ 234.718590][ T8856] RDX: 0000200000000480 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 234.718598][ T8856] RBP: 00007f87228a6090 R08: 0000000000000000 R09: 0000000000000000 [ 234.718606][ T8856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.718613][ T8856] R13: 00007f87248c6038 R14: 00007f87248c5fa0 R15: 00007ffc8e90c558 [ 234.718632][ T8856] [ 234.718707][ T8856] ERROR: Out of memory at tomoyo_realpath_from_path. [ 234.869617][ T5842] Bluetooth: hci6: command tx timeout [ 235.020606][ T3586] bridge_slave_1: left allmulticast mode [ 235.044645][ T3586] bridge_slave_1: left promiscuous mode [ 235.083687][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.271409][ T3586] bridge_slave_0: left allmulticast mode [ 235.271438][ T3586] bridge_slave_0: left promiscuous mode [ 235.271622][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.416138][ T8872] FAULT_INJECTION: forcing a failure. [ 235.416138][ T8872] name failslab, interval 1, probability 0, space 0, times 0 [ 235.416178][ T8872] CPU: 1 UID: 0 PID: 8872 Comm: syz.5.1207 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 235.416209][ T8872] Tainted: [L]=SOFTLOCKUP [ 235.416217][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 235.416230][ T8872] Call Trace: [ 235.416239][ T8872] [ 235.416248][ T8872] dump_stack_lvl+0xe8/0x150 [ 235.416279][ T8872] should_fail_ex+0x46b/0x600 [ 235.416314][ T8872] should_failslab+0xa8/0x100 [ 235.416349][ T8872] __kmalloc_noprof+0xdf/0x7b0 [ 235.416379][ T8872] ? tomoyo_encode+0x28b/0x550 [ 235.416416][ T8872] tomoyo_encode+0x28b/0x550 [ 235.416446][ T8872] tomoyo_realpath_from_path+0x58d/0x5d0 [ 235.416479][ T8872] ? tomoyo_domain+0xd7/0x130 [ 235.416524][ T8872] ? tomoyo_path_number_perm+0x219/0x630 [ 235.416551][ T8872] tomoyo_path_number_perm+0x246/0x630 [ 235.416580][ T8872] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 235.416605][ T8872] ? __lock_acquire+0x6b5/0x2cf0 [ 235.416638][ T8872] ? do_raw_spin_lock+0x12b/0x2f0 [ 235.416698][ T8872] ? __fget_files+0x2a/0x420 [ 235.416729][ T8872] ? __fget_files+0x2a/0x420 [ 235.416754][ T8872] ? __fget_files+0x3a6/0x420 [ 235.416779][ T8872] ? __fget_files+0x2a/0x420 [ 235.416810][ T8872] security_file_ioctl+0xc3/0x2a0 [ 235.416837][ T8872] __se_sys_ioctl+0x47/0x170 [ 235.416870][ T8872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.416895][ T8872] do_syscall_64+0x15f/0xf80 [ 235.416918][ T8872] ? trace_irq_disable+0x3b/0x140 [ 235.416943][ T8872] ? clear_bhb_loop+0x40/0x90 [ 235.416969][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.416989][ T8872] RIP: 0033:0x7f872464c819 [ 235.417036][ T8872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.417055][ T8872] RSP: 002b:00007f87228a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.417079][ T8872] RAX: ffffffffffffffda RBX: 00007f87248c5fa0 RCX: 00007f872464c819 [ 235.417095][ T8872] RDX: 0000200000000000 RSI: 0000000000008b2b RDI: 0000000000000003 [ 235.417109][ T8872] RBP: 00007f87228a6090 R08: 0000000000000000 R09: 0000000000000000 [ 235.417123][ T8872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.417136][ T8872] R13: 00007f87248c6038 R14: 00007f87248c5fa0 R15: 00007ffc8e90c558 [ 235.417172][ T8872] [ 235.417193][ T8872] ERROR: Out of memory at tomoyo_realpath_from_path. [ 236.442066][ T3586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.507744][ T3586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.560200][ T3586] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 236.588033][ T3586] bond0 (unregistering): Released all slaves [ 236.701090][ T8872] warning: `syz.5.1207' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 237.059062][ T8882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.295624][ T8882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.602390][ T8895] program syz.2.1211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.394422][ T8913] FAULT_INJECTION: forcing a failure. [ 238.394422][ T8913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.394475][ T8913] CPU: 1 UID: 0 PID: 8913 Comm: syz.5.1217 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 238.394503][ T8913] Tainted: [L]=SOFTLOCKUP [ 238.394510][ T8913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 238.394521][ T8913] Call Trace: [ 238.394528][ T8913] [ 238.394536][ T8913] dump_stack_lvl+0xe8/0x150 [ 238.394565][ T8913] should_fail_ex+0x46b/0x600 [ 238.394598][ T8913] _copy_from_user+0x2d/0xb0 [ 238.394629][ T8913] ___sys_sendmsg+0x1c6/0x360 [ 238.394656][ T8913] ? __lock_acquire+0x6b5/0x2cf0 [ 238.394689][ T8913] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.394750][ T8913] ? __fget_files+0x2a/0x420 [ 238.394774][ T8913] ? __fget_files+0x3a6/0x420 [ 238.394809][ T8913] __x64_sys_sendmsg+0x1c3/0x2a0 [ 238.394839][ T8913] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.394875][ T8913] ? __pfx_ksys_write+0x10/0x10 [ 238.394914][ T8913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.394936][ T8913] do_syscall_64+0x15f/0xf80 [ 238.394957][ T8913] ? trace_irq_disable+0x3b/0x140 [ 238.394981][ T8913] ? clear_bhb_loop+0x40/0x90 [ 238.395007][ T8913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.395028][ T8913] RIP: 0033:0x7f872464c819 [ 238.395047][ T8913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.395065][ T8913] RSP: 002b:00007f87228a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.395088][ T8913] RAX: ffffffffffffffda RBX: 00007f87248c5fa0 RCX: 00007f872464c819 [ 238.395104][ T8913] RDX: 0000000000008040 RSI: 00002000000003c0 RDI: 0000000000000005 [ 238.395118][ T8913] RBP: 00007f87228a6090 R08: 0000000000000000 R09: 0000000000000000 [ 238.395131][ T8913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.395144][ T8913] R13: 00007f87248c6038 R14: 00007f87248c5fa0 R15: 00007ffc8e90c558 [ 238.395177][ T8913] [ 238.569054][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 239.604163][ T8929] input: syz0 as /devices/virtual/input/input11 [ 239.622430][ T8929] FAULT_INJECTION: forcing a failure. [ 239.622430][ T8929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.622472][ T8929] CPU: 0 UID: 0 PID: 8929 Comm: syz.5.1221 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 239.622504][ T8929] Tainted: [L]=SOFTLOCKUP [ 239.622512][ T8929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 239.622524][ T8929] Call Trace: [ 239.622532][ T8929] [ 239.622542][ T8929] dump_stack_lvl+0xe8/0x150 [ 239.622572][ T8929] should_fail_ex+0x46b/0x600 [ 239.622605][ T8929] _copy_from_user+0x2d/0xb0 [ 239.622637][ T8929] input_event_from_user+0xb1/0x290 [ 239.622666][ T8929] ? __pfx_input_event_from_user+0x10/0x10 [ 239.622699][ T8929] ? rt_spin_unlock+0x160/0x200 [ 239.622732][ T8929] uinput_write+0x284/0xfe0 [ 239.622772][ T8929] ? __pfx_uinput_write+0x10/0x10 [ 239.622807][ T8929] ? rw_verify_area+0x25b/0x4e0 [ 239.622837][ T8929] ? __pfx_uinput_write+0x10/0x10 [ 239.622865][ T8929] vfs_write+0x2a3/0xba0 [ 239.622905][ T8929] ? __pfx_vfs_write+0x10/0x10 [ 239.622936][ T8929] ? __fget_files+0x2a/0x420 [ 239.622964][ T8929] ? __fget_files+0x2a/0x420 [ 239.622987][ T8929] ? __fget_files+0x3a6/0x420 [ 239.623010][ T8929] ? __fget_files+0x2a/0x420 [ 239.623046][ T8929] ksys_write+0x156/0x270 [ 239.623077][ T8929] ? __pfx_ksys_write+0x10/0x10 [ 239.623115][ T8929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.623142][ T8929] do_syscall_64+0x15f/0xf80 [ 239.623170][ T8929] ? trace_irq_disable+0x3b/0x140 [ 239.623229][ T8929] ? clear_bhb_loop+0x40/0x90 [ 239.623257][ T8929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.623280][ T8929] RIP: 0033:0x7f872464c819 [ 239.623301][ T8929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.623320][ T8929] RSP: 002b:00007f87228a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.623346][ T8929] RAX: ffffffffffffffda RBX: 00007f87248c5fa0 RCX: 00007f872464c819 [ 239.623362][ T8929] RDX: 000000000000045c RSI: 0000200000000a40 RDI: 0000000000000003 [ 239.623377][ T8929] RBP: 00007f87228a6090 R08: 0000000000000000 R09: 0000000000000000 [ 239.623391][ T8929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.623404][ T8929] R13: 00007f87248c6038 R14: 00007f87248c5fa0 R15: 00007ffc8e90c558 [ 239.623440][ T8929] [ 241.119811][ T3586] hsr_slave_0: left promiscuous mode [ 241.165987][ T3586] hsr_slave_1: left promiscuous mode [ 241.217674][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.217774][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.259083][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.259107][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.319726][ T6102] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 241.437944][ T3586] veth1_macvtap: left promiscuous mode [ 241.438207][ T3586] veth0_macvtap: left promiscuous mode [ 241.438577][ T3586] veth1_vlan: left promiscuous mode [ 241.438954][ T3586] veth0_vlan: left promiscuous mode [ 241.469984][ T6102] usb 5-1: device descriptor read/64, error -71 [ 241.709949][ T6102] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 241.839579][ T6102] usb 5-1: device descriptor read/64, error -71 [ 241.950910][ T6102] usb usb5-port1: attempt power cycle [ 242.330994][ T6102] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 242.360623][ T6102] usb 5-1: device descriptor read/8, error -71 [ 242.599814][ T6102] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 242.620458][ T6102] usb 5-1: device descriptor read/8, error -71 [ 242.740238][ T6102] usb usb5-port1: unable to enumerate USB device [ 243.161620][ T3586] team0 (unregistering): Port device team_slave_1 removed [ 243.245859][ T3586] team0 (unregistering): Port device team_slave_0 removed [ 245.626365][ T8715] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 245.883825][ T8715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.888722][ T8715] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 246.034137][ T8715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 246.048538][ T8715] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 246.170501][ T8715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 246.175834][ T8715] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 246.214937][ T8715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 247.228515][ T8715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.373823][ T8715] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.426517][ T2412] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.445311][ T2412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.494963][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.495081][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.862927][ T8715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.514727][ T8715] veth0_vlan: entered promiscuous mode [ 249.587503][ T8715] veth1_vlan: entered promiscuous mode [ 250.012634][ T8715] veth0_macvtap: entered promiscuous mode [ 250.094747][ T8715] veth1_macvtap: entered promiscuous mode [ 250.267157][ T8715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.451340][ T8715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.473038][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.482598][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.484372][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.484443][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.524938][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.524979][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.670500][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.670523][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.930707][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.930819][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.869829][ T8784] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 257.025204][ T8784] usb 3-1: config index 0 descriptor too short (expected 64874, got 72) [ 257.031307][ T8784] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 257.031350][ T8784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.031371][ T8784] usb 3-1: Product: syz [ 257.031387][ T8784] usb 3-1: Manufacturer: syz [ 257.031401][ T8784] usb 3-1: SerialNumber: syz [ 257.099100][ T8784] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 257.421524][ T5841] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 258.113177][ T9455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.119776][ T9455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.356911][ T37] usb 3-1: USB disconnect, device number 19 [ 258.551384][ T5841] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 258.551860][ T5841] ath9k_htc: Failed to initialize the device [ 258.634919][ T37] usb 3-1: ath9k_htc: USB layer deinitialized [ 259.310919][ T9488] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1452'. [ 259.979089][ T9514] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1465'. [ 260.654624][ T9538] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1478'. [ 261.476364][ T9566] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1491'. [ 262.291498][ T9597] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1506'. [ 271.101246][ T9920] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1665'. [ 271.278147][ T39] INFO: task syz-executor:5833 blocked for more than 143 seconds. [ 271.278180][ T39] Tainted: G L syzkaller #0 [ 271.278193][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 271.278203][ T39] task:syz-executor state:D stack:21160 pid:5833 tgid:5833 ppid:1 task_flags:0x400140 flags:0x00080002 [ 271.278270][ T39] Call Trace: [ 271.278278][ T39] [ 271.278293][ T39] __schedule+0x169e/0x54f0 [ 271.278350][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 271.278377][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 271.278402][ T39] ? rt_spin_lock+0x1e0/0x400 [ 271.278434][ T39] ? __pfx___schedule+0x10/0x10 [ 271.278480][ T39] ? schedule+0x90/0x360 [ 271.278515][ T39] schedule+0x164/0x360 [ 271.278552][ T39] fuse_chan_wait_aborted+0x15b/0x250 [ 271.278582][ T39] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 271.278606][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 271.278633][ T39] ? __pfx_fuse_chan_abort+0x10/0x10 [ 271.278657][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 271.278689][ T39] fuse_conn_destroy+0x1e7/0x3e0 [ 271.278720][ T39] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 271.278748][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 271.278771][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 271.278804][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 271.278838][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 271.278869][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 271.278893][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 271.278914][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 271.278941][ T39] fuse_kill_sb_anon+0x1ef/0x270 [ 271.278981][ T39] deactivate_locked_super+0xbc/0x130 [ 271.279014][ T39] cleanup_mnt+0x437/0x4d0 [ 271.279045][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 271.279070][ T39] task_work_run+0x1d9/0x270 [ 271.279107][ T39] ? __pfx_task_work_run+0x10/0x10 [ 271.279144][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.279168][ T39] exit_to_user_mode_loop+0xed/0x480 [ 271.279194][ T39] ? rcu_is_watching+0x15/0xb0 [ 271.279227][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.279250][ T39] do_syscall_64+0x33e/0xf80 [ 271.279271][ T39] ? trace_irq_disable+0x3b/0x140 [ 271.279297][ T39] ? clear_bhb_loop+0x40/0x90 [ 271.279325][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.279346][ T39] RIP: 0033:0x7f3dcecfda57 [ 271.279364][ T39] RSP: 002b:00007fffe8e1cab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 271.279386][ T39] RAX: 0000000000000000 RBX: 00007f3dced92048 RCX: 00007f3dcecfda57 [ 271.279402][ T39] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe8e1cb70 [ 271.279709][ T39] RBP: 00007fffe8e1cb70 R08: 00007fffe8e1db70 R09: 00000000ffffffff [ 271.279728][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe8e1dc00 [ 271.279743][ T39] R13: 00007f3dced92048 R14: 000000000001d90b R15: 00007fffe8e1dc40 [ 271.279778][ T39] [ 271.279835][ T39] [ 271.279835][ T39] Showing all locks held in the system: [ 271.279846][ T39] 1 lock held by khungtaskd/39: [ 271.279857][ T39] #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 271.279945][ T39] 3 locks held by udevd/5196: [ 271.279957][ T39] #0: ffff888038334480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 271.280025][ T39] #1: ffff888024ebdc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 271.280089][ T39] #2: ffff888026d643c8 (kn->active#5){++++}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 271.280157][ T39] 2 locks held by getty/5588: [ 271.280170][ T39] #0: ffff888037a1b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 271.280230][ T39] #1: ffffc90003cbb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 271.280288][ T39] 1 lock held by syz-executor/5833: [ 271.280300][ T39] #0: ffff8880368200d0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 271.280364][ T39] 3 locks held by kworker/0:4/5841: [ 271.280376][ T39] #0: ffff88813fe46538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 271.280428][ T39] #1: ffffc90005017c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 271.280482][ T39] #2: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x265/0x12e0 [ 271.280530][ T39] 1 lock held by syz.3.859/8026: [ 271.280539][ T39] #0: ffff8880368200d0 (&type->s_umount_key#52){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 271.280590][ T39] 9 locks held by syz-executor/8383: [ 271.280602][ T39] #0: ffffffff8e4992f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x130/0x4a0 [ 271.280653][ T39] #1: ffff88803543c4b0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x181/0x1d50 [ 271.280714][ T39] #2: ffff8880404cb7b0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x26f/0x1d50 [ 271.280780][ T39] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 271.280845][ T39] #4: ffff888059657b98 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 271.280908][ T39] #5: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 271.280967][ T39] #6: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 271.281024][ T39] #7: ffff88802dcea418 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x5ae/0x5550 [ 271.281090][ T39] #8: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1de/0x3f0 [ 271.281152][ T39] 2 locks held by syz.0.1668/9923: [ 271.281164][ T39] #0: ffff8880404c9db0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2c2/0x9e0 [ 271.281263][ T39] #1: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 271.281322][ T39] 4 locks held by syz.4.1670/9926: [ 271.281335][ T39] #0: ffff88813fe751b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0 [ 271.281394][ T39] #1: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 271.281451][ T39] #2: ffff88805b8467d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 271.281515][ T39] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 271.281576][ T39] [ 271.281581][ T39] ============================================= [ 271.281581][ T39] [ 271.281591][ T39] NMI backtrace for cpu 1 [ 271.281633][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 271.281662][ T39] Tainted: [L]=SOFTLOCKUP [ 271.281670][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 271.281683][ T39] Call Trace: [ 271.281691][ T39] [ 271.281700][ T39] dump_stack_lvl+0xe8/0x150 [ 271.281727][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 271.281757][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 271.281783][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 271.281881][ T39] sys_info+0x135/0x170 [ 271.281902][ T39] watchdog+0xfd3/0x1030 [ 271.281934][ T39] ? watchdog+0x1c9/0x1030 [ 271.281964][ T39] kthread+0x388/0x470 [ 271.281992][ T39] ? __pfx_watchdog+0x10/0x10 [ 271.282014][ T39] ? __pfx_kthread+0x10/0x10 [ 271.282043][ T39] ret_from_fork+0x514/0xb70 [ 271.282071][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 271.282094][ T39] ? __switch_to+0xc79/0x1410 [ 271.282129][ T39] ? __pfx_kthread+0x10/0x10 [ 271.282159][ T39] ret_from_fork_asm+0x1a/0x30 [ 271.282201][ T39] [ 271.282210][ T39] Sending NMI from CPU 1 to CPUs 0: [ 271.282240][ C0] NMI backtrace for cpu 0 [ 271.282258][ C0] CPU: 0 UID: 0 PID: 5841 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 271.282282][ C0] Tainted: [L]=SOFTLOCKUP [ 271.282288][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 271.282300][ C0] Workqueue: events_power_efficient gc_worker [ 271.282319][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 271.282343][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 6b 07 ee f5 cc [ 271.282359][ C0] RSP: 0018:ffffc900050179d8 EFLAGS: 00000293 [ 271.282373][ C0] RAX: ffffffff895f7992 RBX: 0000000000000700 RCX: ffff888039095c40 [ 271.282386][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.282397][ C0] RBP: ffffc90005017b30 R08: 0000000000000000 R09: 0000000000000000 [ 271.282408][ C0] R10: dffffc0000000000 R11: fffffbfff1f9e8ff R12: dffffc0000000000 [ 271.282420][ C0] R13: ffff888035fb2518 R14: 0000000000040000 R15: 0000000000000711 [ 271.282432][ C0] FS: 0000000000000000(0000) GS:ffff888125a62000(0000) knlGS:0000000000000000 [ 271.282446][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.282458][ C0] CR2: 000000110c395d23 CR3: 000000003940a000 CR4: 00000000003526f0 [ 271.282475][ C0] Call Trace: [ 271.282482][ C0] [ 271.282488][ C0] gc_worker+0xc02/0x12e0 [ 271.282510][ C0] ? gc_worker+0x265/0x12e0 [ 271.282528][ C0] ? __pfx_gc_worker+0x10/0x10 [ 271.282549][ C0] ? process_one_work+0x8b7/0x1710 [ 271.282564][ C0] process_one_work+0x9a3/0x1710 [ 271.282589][ C0] ? __pfx_process_one_work+0x10/0x10 [ 271.282604][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 271.282628][ C0] worker_thread+0xba8/0x11e0 [ 271.282656][ C0] kthread+0x388/0x470 [ 271.282676][ C0] ? __pfx_worker_thread+0x10/0x10 [ 271.282692][ C0] ? __pfx_kthread+0x10/0x10 [ 271.282713][ C0] ret_from_fork+0x514/0xb70 [ 271.282731][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 271.282748][ C0] ? __switch_to+0xc79/0x1410 [ 271.282772][ C0] ? __pfx_kthread+0x10/0x10 [ 271.282792][ C0] ret_from_fork_asm+0x1a/0x30 [ 271.282817][ C0] [ 271.283237][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 271.283256][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 271.283286][ T39] Tainted: [L]=SOFTLOCKUP [ 271.283294][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 271.283307][ T39] Call Trace: [ 271.283315][ T39] [ 271.283324][ T39] vpanic+0x56c/0xa60 [ 271.283357][ T39] ? __pfx_vpanic+0x10/0x10 [ 271.283394][ T39] panic+0xc5/0xd0 [ 271.283419][ T39] ? __pfx_panic+0x10/0x10 [ 271.283457][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 271.283491][ T39] watchdog+0x102c/0x1030 [ 271.283523][ T39] ? watchdog+0x1c9/0x1030 [ 271.283554][ T39] kthread+0x388/0x470 [ 271.283583][ T39] ? __pfx_watchdog+0x10/0x10 [ 271.283605][ T39] ? __pfx_kthread+0x10/0x10 [ 271.283635][ T39] ret_from_fork+0x514/0xb70 [ 271.283662][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 271.283691][ T39] ? __switch_to+0xc79/0x1410 [ 271.283725][ T39] ? __pfx_kthread+0x10/0x10 [ 271.283755][ T39] ret_from_fork_asm+0x1a/0x30 [ 271.283806][ T39] [ 271.284209][ T39] Kernel Offset: disabled