last executing test programs: 13.637700483s ago: executing program 3 (id=840): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x70, 0x3, 0x80}]}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000080003"], 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100c5de131a000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x0, 0xffffffff}, 0x28) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000bc0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "0100", 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4e21, 0x4e20, 0x4d, 0x0, @wg=@response={0x2, 0x4, 0x4, "f7b3a0f4902dd70b64812ce5d9fda914ad23ac4cfe163fe5b8d9a6a14966fb6e", "d9972e4593020000003e5b2daf3600", {"df87836acb9b57babd62f264731e1a6f", "0f1a6a0677eb07a023751ca8feb90a8f"}}}}}}}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x8, 0x9, [0x7, 0x5, 0x92dd, 0x8, 0x8, 0x400, 0x3, 0xe359, 0x2]}, &(0x7f00000001c0)=0x1a) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000240)={r5, 0xa, 0x7fffffff, 0xb}, 0x10) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) unshare(0x26020400) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000100)={'aio_aio12_8\x00', [0x100, 0x12, 0xd0, 0x2, 0x2, 0x100, 0x3, 0x40007c, 0x5, 0xb, 0x2, 0x7, 0xffffffff, 0x2, 0x10000, 0x1, 0xf8, 0xfffffffd, 0xfe5, 0x403, 0x0, 0x2, 0x7, 0x9, 0xb6, 0x9, 0x7, 0x26, 0x787f, 0x20003, 0x9]}) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 11.981749351s ago: executing program 3 (id=845): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) 11.589727877s ago: executing program 3 (id=847): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="40350400473f"], 0x0, 0x0, 0x0, 0x0}) 8.285168949s ago: executing program 3 (id=857): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018080000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c6090100000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ae9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x18, @val=@tracing={0xffffffffffffffff, 0x4}}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x4000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket(0x1d, 0x2, 0x6) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) write$FUSE_INTERRUPT(r2, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) 7.793295918s ago: executing program 4 (id=861): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) socket(0x10, 0x803, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000340), 0x8) 7.576041516s ago: executing program 4 (id=862): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000800)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0xffffffffffffffff], 0x0, 0x7, 0x1}}, 0x40) 7.276361412s ago: executing program 3 (id=864): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = socket(0x1d, 0x2, 0x6) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) setsockopt$ALG_SET_KEY(r1, 0x6a, 0x1, 0x0, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000002240)=ANY=[@ANYBLOB="18000000000000000000000000000000711843000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000003a40), 0x2, 0x0) writev(r3, &(0x7f0000003e40)=[{&(0x7f0000003a80)='J', 0x1}], 0x1) syz_usb_disconnect(r0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r6, 0x800, 0x6, [0x3, 0xa, 0xa, 0x6, 0x1, 0x62cf]}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) setpgid(r7, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30, 0xa]}}}, 0x4e}]}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r8 = epoll_create1(0x0) r9 = socket$unix(0x1, 0x2, 0x0) close(r9) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000002c0)={0xa002a014}) r10 = syz_clone(0x900, &(0x7f00000064c0)="e917336fcb4b7a6ad16b10e1b1c445c8ee9b1a75f10f0c1a2b2e865f018f61b20ac8c71d12f6", 0x26, &(0x7f0000006500), &(0x7f0000006540), &(0x7f0000006580)="d2906ed77797d9009186645058e80c14ffd4cc6a3b18afde97405f83f8de5fc32b7d2c3cbbf7f45c41657c6617ddbb6e7532") stat(&(0x7f00000065c0)='./file0\x00', &(0x7f0000006600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000006680), 0x8000, 0x0) sendmsg$netlink(r1, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006400)=[{&(0x7f0000000400)={0x150, 0x10, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@generic="662ae6fd27ed1b7d6ebd96a249a1dfea7930db78e3cc1b93cd7a382f2da82405ff31adfbee50235de7a6f9c6a12877401c337132c631a5a22438c98416abc228b48497f72b59b26955bda0e4c5245ab545f78a214b44bc898d9d38d988698ad6369a65ceda8a0f0899c45fa0b8dad1fae6", @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x81}, @nested={0xba, 0x103, 0x0, 0x1, [@nested={0x4, 0x90}, @generic="394f9d82d713af0fec940abe9e4b812817dd317f4be16779bb755ca404fe6c6d94d374497c4e56af6b3544e603a4e1f4c9df26583914b7050373f66747feeed6473982828ac42177fba1de0957c331aedc2832cacc0788a308fd2d2ddf32eed14a23b7628db8242337437724e03c422bb5b63bf988988ca129591384f41d6d45b7e5c29234cbcdeb8a3186091c6a35e357e4f77c", @nested={0x4, 0xa3}, @nested={0x4, 0x165}, @generic="39d74784e84487ec6142bfb00d6f17505814", @nested={0x4, 0xb0}]}, @typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@empty}]}, 0x150}, {&(0x7f0000000600)={0x38c, 0x12, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@generic="653ae0efe44dd1108ceaeb759d9d98e11313dc0fd86e84d4c234657ef453d0906f25579fc1ada6e86582e86f8fa547769abb30590f126797e67c275d1980dafc4b3d157ace71250a8cc6b7d9abfe110f1421c874d6f980c99b3a884decacb950eca7ac70ab86c2728cb761ac4e6b8316ee3e8344e23cc30832cb2bd15c04", @nested={0x24, 0x40, 0x0, 0x1, [@typed={0x4, 0x120}, @typed={0x8, 0x13c, 0x0, 0x0, @fd=r3}, @nested={0x4, 0xf0}, @nested={0x4, 0xdf}, @typed={0xc, 0x36, 0x0, 0x0, @u64=0xffff}]}, @nested={0x2bc, 0x77, 0x0, 0x1, [@typed={0x14, 0x110, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x6, 0x22, 0x0, 0x0, @str='^\x00'}, @typed={0x8, 0x10b, 0x0, 0x0, @uid}, @typed={0x101, 0x161, 0x0, 0x0, @binary="ec95ef10de3271bb931aee7121ce22402acaa5e39dd17fd8f058e07bed101dfac06fb1fd8718ac5255c46c7798785e877b4b21fcfe2e0910481e4c734d385cd841c40f8bf22e98c363f4f1d799c82609e1dfbbf33defb2760f3751ae198280c83a6a34dd925a410b00a2f12071ab9da98271d253aa82bf440bd82ce08ba84cb5608a4d3fc1b3068ced3f052c2042d615dfd76e1dca97df7680e1bff20b7a58753bca19ec4bdd62543bdbfbb71b9cd3ccc4e3844a70c455ae1f94d6cedee82150a39b248b83a8fb5a00df61758c8b73ec70f25a1950f1967fd00baa1d7762a4cbc9ff4d8242509dc371dd3f9e2301d63086cb558e61505e5e592d010458"}, @nested={0x4, 0xf8}, @generic="00601cdbfa9cc2e9573463fc7608d96a0fc65efeabf25d0c9e75539b9442fcb64ad5a77926a992ec6c657e62e1ae57ec3616f7698e5ffd0cd79c8de40b52b1f1428c2c68b1ea662bb3db3fabc977d946286e6e7f7b9beb4c4d02190ef6b4790c33025ac585a8495860cc66158c68a8fa1caaaeb996929ac7817b3f0ea612b52d775406064d31f9af6d3ac9fe79f766d96ead592cce16f261acd4a27fb2adeac3687e7ec315b893388efedeed2238f04fc1ab4e36cf8f17336e95ac57755b5da399a7cd948b99a6e3326d089461f81ba9996d1d2eae8904277c4ec0dc355e0052b55bf7c0d50ee9b8e1d43dc5a05f50d1c66ba630db1eab9f578a30a2f3401c", @generic="8ceccd2beda1cece14335f2d761a8f4fb952b2ce45be3a105389af8cbbf5099fe3d285b030c1f7c8cdaaf52f5772a411f1ef996fa9983607f848fe8fe4871d5d412d847bfc43a78641ac1e9d61a07e3f78c258c1c8999c6e6e5a9a3a98a768699939245f39bccc25f372ee71a28a292ec3ca7782306204b2212b8203012058a425fada9390"]}, @nested={0x19, 0xcc, 0x0, 0x1, [@generic="d8242747319dbef051902fff788e39e7c154e21323"]}]}, 0x38c}, {&(0x7f00000009c0)={0x1f4, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@nested={0xd1, 0x146, 0x0, 0x1, [@nested={0x4, 0x16}, @typed={0x8, 0x151, 0x0, 0x0, @pid}, @nested={0x4, 0xac}, @generic="b8ffcc7035501af1d8f0fe1473f827d7f8119a975f225c861b25b7f13cf765fd2cecb0da03bfd0a0f8933b6dfcfed8d0dbf932f08ef38f6a9b8d7fbbe6699fbbd6e3120e7bd2b745202e21f7a5f47a1626dc3991b0de94dd67eec503170ee5fddb7324da62cd129ab59c530396a7534146163f77fadf0ca165d18c4454ac530d0876b7d42d8af28afd07e33767c821e64e70658a87616b4d5c3731e0ba34eb9d02338cb44ea89539b17ed62a109618048c468a652c2d9e9535", @nested={0x4, 0x55}]}, @nested={0xc, 0x139, 0x0, 0x1, [@nested={0x4, 0xe2}, @nested={0x4, 0x11f}]}, @nested={0xbd, 0x101, 0x0, 0x1, [@nested={0x4, 0x15}, @nested={0x4, 0x2}, @generic="e10bc6506d7e57d9d3edca8d8c99033faab364d8f586f991ebbcbef905ad34d5b9bb889a85fba40fe32cacd2f3307969a917318fc480179fa672786ab9fc7b1de73142c7f8c8c890d08ea8b0b5ae9adfab9f73fca9ecfe3a953599527cf6e8ca6b65306dcad6731856b20677e97861a329258338035e026c1f4ca957df8d62ccee8da499a8a1d2eef293ed27b90f7544b1f8a8a8768266c798", @typed={0x8, 0xc4, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x108}, @typed={0x5, 0x3f, 0x0, 0x0, @str='\x00'}, @generic, @nested={0x4}]}, @nested={0x14, 0x13b, 0x0, 0x1, [@typed={0xc, 0x10e, 0x0, 0x0, @u64=0x8001}, @nested={0x4, 0x1a}]}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0x1000}, @nested={0x18, 0x32, 0x0, 0x1, [@nested={0x4, 0x3d}, @nested={0x4, 0x34}, @typed={0x8, 0xbc, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x167}]}, @typed={0x4, 0x112}, @typed={0x8, 0xac, 0x0, 0x0, @fd=r3}]}, 0x1f4}, {&(0x7f0000000c40)={0x1040, 0x40, 0x800, 0x70bd2a, 0xe8, "", [@nested={0x30, 0x7c, 0x0, 0x1, [@generic="38ee2e2cb385023f5454b44cd32418481addd70740e4aa67882821871fa79143100f0901d36fcb4102b4c921"]}, @generic="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"]}, 0x1040}, {&(0x7f0000003e80)={0x12ac, 0x13, 0x100, 0x70bd25, 0x25dfdbff, "", [@typed={0x4, 0x160}, @generic="ceb077a355df7a910059ca85cbc21e3b8617e5c8421797bd2b6865d83938b143b741152a98bfec974a48a615e1a09800d715f72229a3eac5215d15cf8e5690ed4b6a019fccffae08ac7d1b8d017948cb9f427e2246d5ec0c2b38f161fbd2ee962ac2572ac0f6c2cdba1343fe23abdd9dd28d3ffd5189eba86e1ba5519c1725d0df8fc277ecba70550d549244f8ca007b7a41417fd007cbdb4fd6c70d2b826e3a58ce73ee78d2a26a18a46310fd47e288b24b268ef88c9c009a6b5a60009ed4a3fc66ddec3b57466014de346b32d2ccce1ed46e61c377dabcc3fe1323dd942a453234191c85814b36", @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x45, 0x1f, 0x0, 0x1, [@typed={0x8, 0xbc, 0x0, 0x0, @uid}, @generic="b353324caafa3921489090c1a63fe23c1903539de4966589afc5b88b5bd552bd00790bf88a3f4a151427bf97f980635eb4780f3f36405db498"]}, @generic, @generic="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", @typed={0x7, 0x43, 0x0, 0x0, @str='j\x9d\x00'}, @nested={0x156, 0xe1, 0x0, 0x1, [@nested={0x4, 0x40}, @typed={0x5, 0xc1, 0x0, 0x0, @str='\x00'}, @generic="ee320eb898fb8ddc243ddc6381f61f833681eed95e507685a6f3f01dae70e119d766b5707580b2f62a421f1a2b5880290b5f7a634108d39d88ac9ad38523e1b19094cdc9be7ddb4ee7f2c4522e71c6c433c3ae2d6bb584a45f4f9f6ea9fdb29c035bfc96e776001328654476e7b0cd8a5da720a30e3decd888a18813fd1123341a5407c5d40c80dbf6991956d1a33e55b60c948d7cd9aa94f53b4353ea4fe50df7c7254705f71411e86dd042f6d1c127ceecf1e28e0c34ef5a9a5250d9b21b078043", @nested={0x4, 0x52}, @typed={0x58, 0x8, 0x0, 0x0, @binary="676735ad506089fd93cfbdabb7c3589fc4c5b6f497ed685a8236eaa538fb1e7dab977ba76a5f363c41b1df88eb376d033fc358a4564e337aa31542c4fd0f21414dd3e51ec357abd15a2c9cbb6eeff070f57d226e"}, @nested={0x4, 0x11b}, @typed={0x8, 0x18, 0x0, 0x0, @uid}, @generic="aed3cab9e392b134cf61dc8099a3b7262411288c70b36ad3388b0198"]}]}, 0x12ac}, {&(0x7f0000006340)={0x98, 0x14, 0x4, 0x70bd29, 0x25dfdbfc, "", [@nested={0x87, 0x153, 0x0, 0x1, [@generic="d00ff6b60d18e130a3141b7919e52471eaf7210cdb1aca65c9f3c07365abc69d84cccac6f3822c2a7902b0b5a8f302b8742cdc65e6759ff6aad5db7ae96394e7da356d41b026a7d0015db9d9f105abc2fbd4d76b7b0ef7a5463d057b697de22d15c28a9c05dd6c9631b50b038a8ffaa279f4231c0ca2603b876479e483b285fe249872"]}]}, 0x98}], 0x6, &(0x7f00000066c0)=[@rights={{0x1c, 0x1, 0x1, [r3, r3, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}, @rights={{0x28, 0x1, 0x1, [r3, r3, 0xffffffffffffffff, r9, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}, @rights={{0x38, 0x1, 0x1, [r1, r5, r12, r2, r5, r2, r1, r2, r5, r5]}}], 0xb8, 0x20004000}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x802, 0xf83, 0x6}, 0x1c) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 6.985215268s ago: executing program 1 (id=865): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004008, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x7b36, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe654, 0x1, 0x1, 0x80000}, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0xa2e}], 0x1, 0x22061, 0x0) 6.569244523s ago: executing program 1 (id=867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) close_range(r1, r2, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x10001, 0x8, 0x6, 0xa40, r3, 0x9, '\x00', 0x0, r4, 0x5, 0x2, 0x4}, 0x50) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/18, @ANYRES32, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000088945b406d04b6088eca000000010902"], 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x8a881, 0x0) socket$igmp(0x2, 0x3, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r6], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680), 0xc) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$inet_sctp(0x2, 0x5, 0x84) 6.102316151s ago: executing program 0 (id=871): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2a, 0x2, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[], 0x44}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x6c}}, 0x40801) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) landlock_restrict_self(r4, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = socket(0x40000000015, 0x5, 0x0) ioctl$FIOCLEX(r4, 0x5451) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00'}, 0x1c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000, 0xffffffffffffffff}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) modify_ldt$write(0x1, &(0x7f0000000080)={0x400, 0x20001000, 0x4000, 0x1, 0x1, 0x1}, 0x10) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @remote, 0x9}, 0x1c) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x3}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xdd}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x20044001) 5.865792353s ago: executing program 0 (id=873): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000300)={0xe0, 0x23, 0xf2, {0xf2, 0x30, "38999dd5806ee1c1957ca4ba378c6b3275c208b95e95e87214c4b48aea12194584e2dde768c6290e97306cf1e48fde8cc9efe40b6c10c2eb6ffc8e334151d382619bf7228642c5ca519357f2c656ac090220e20f8271435a6756f9fd245b2160de557c4ba40eb6e66f64eba0c35fcae33de3e9f153c30e7f42293c62b0535a5c06842cc3928032c9281340d7375150e52bbc9d038375b5929fccef2b0fafcdd4fd8d861a9b59e4d6750bb86e3552b354dcd42342f8324024005f97432d8fa3229282b37494e5def1f56e3985e45cde550ca3d49421b133582ffc85fd6cd604daccc72d6138be7781226c618c77b33270"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f00000004c0)={0x0, 0xf, 0x13d, {0x5, 0xf, 0x13d, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0x1, 0x8000}, @generic={0xf7, 0x10, 0xa, "e27b75bfb82e77c3721c71723610d45c5586bb0217ab15ebbeabd8ca90f5262b150bcb88fe74200a4ccb258d654cb22bba1caaf0224e738b9ab1fc080648b17c9247fa8a949805a2abd83e3410f7cd3f184d03562e9a4e1d4593d3c436ddc72cd4ec5efca5d3c90d011ca4d37babed607140906ea5b6941f098281204db62d2c5b5de0eb9fbc67fc72c0186f2b2cf87bc4b924f6a707adb3119b58ea04f62c71464c8516196cd214b591c0d4a5e3560a0eac16fa1ec34d77bc4de811a1411d19872f44b33432fbc76d480c83b49c14f5dd17b387776c3b474692cc942e84bae466e24bd819acc16625ce47df77c09ba0d68ddea9"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x2, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0xcb, 0x4, 0x7fff, 0xf00, 0x9, [0x3f3f, 0x3f00, 0x3f0f, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "7a65b3919cc9f969e103ccd8ed6947df"}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x10, 0x8, "0074d2c0", "bb00a408"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x46, 0x81, 0x3, 0xe000, 0x6}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="001584000000344b0ec64e781f44fbe8117a92d40b452cc7077b05851727840b4b90f9692eb3c1cd42c336454039d5ccac67ee135b2ff01e50802bcc009d3b49104012b8e49c006dd00c38cd4a38c0e91f7ed59f87836ff7f1b60b0a7cc904d63eea8312cd8de50fb187a215d975b430c473b541c52f72a43d5b4d3fab3528e8cf0e7e16eb26bce44774"], &(0x7f0000000840)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x160, 0x24}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "ffff"}, &(0x7f0000000000)={0x40, 0xf, 0x2, 0x47}, &(0x7f0000000a40)={0x40, 0x13, 0x6}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @random="15e5e3a1e6ad"}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "dbc0"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x2}}) r1 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMGETOOBSEL(r1, 0x80c84d0a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) getpgrp(0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x3, 0x2) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) 5.068414154s ago: executing program 4 (id=879): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_open_dev$mtd(&(0x7f0000000040), 0xff, 0xfc48e8389c476f3d) ioctl$OTPLOCK(r2, 0x800c4d10, &(0x7f0000000000)={0x1, 0x40, 0xfffffff9}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@newlink={0x60, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x12a03}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4404d80c}, 0x20008000) 5.033538382s ago: executing program 1 (id=881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}], 0x1, 0x23, 0x0) (fail_nth: 1) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.725607763s ago: executing program 4 (id=882): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002400)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/102, 0x41}], 0x2}, 0x18}], 0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) 3.470860505s ago: executing program 4 (id=884): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002"], 0x48) socket(0x10, 0x803, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000340), 0x8) 3.404271437s ago: executing program 4 (id=885): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x7, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b8c82b8af0000000000000000000000000000000800", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002400)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @loopback}, {0xa, 0x0, 0x0, @empty, 0x8000}, 0x201, {[0x0, 0x0, 0xee1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}}, 0x5c) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r3, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/102, 0x41}], 0x2}, 0x18}], 0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) 3.204367446s ago: executing program 1 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000039ff8df200000000000fff0000000000000000000800040007000000"], 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="17090000000000000000010d0000050007000000000008000900000000001400200000000000000000000000ffffe000000008000a000200800006000200f000000014001f"], 0x5c}, 0x1, 0x620b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b"], 0x48) bind$inet(r5, 0x0, 0x0) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f00000000c0)=""/196, &(0x7f0000000080)=0x1b) setreuid(0x0, r4) syz_clone(0x12008000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000080)=r9, 0x4) readahead(r6, 0x6, 0x40) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000016c0)={&(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x1}) socket$inet6(0xa, 0x3, 0x8000000003c) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r10, &(0x7f0000000040)={0xa, 0xfffc, 0xe9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c) r11 = socket(0x10, 0x80002, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fe3000/0x4000)=nil, 0x3000, 0x2}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000716000/0x4000)=nil, 0x4000}) sendmsg$nl_route_sched(r11, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x18, 0x30, 0x51b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 3.054705916s ago: executing program 1 (id=887): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r0, &(0x7f0000008ac0)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x2, @broadcast}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24008800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r1, &(0x7f0000000140)={0x5e}, 0xffd3) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000440)=""/25, 0x19}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 2.989105463s ago: executing program 3 (id=889): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="800001001800000018003480"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) 2.702698569s ago: executing program 0 (id=890): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="800001001800000018003480"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) (fail_nth: 1) 2.612932826s ago: executing program 1 (id=891): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) close_range(r1, r2, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x10001, 0x8, 0x6, 0xa40, r3, 0x9, '\x00', 0x0, r4, 0x5, 0x2, 0x4}, 0x50) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/18, @ANYRES32, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000088945b406d04b6088eca000000010902"], 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x8a881, 0x0) socket$igmp(0x2, 0x3, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r6], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680), 0xc) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$inet_sctp(0x2, 0x5, 0x84) 2.564986238s ago: executing program 2 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb8}}, 0x0) (fail_nth: 1) 2.31758274s ago: executing program 0 (id=893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000001c0)=r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) setgroups(0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x82) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="af09ee55df06b042ab9e87208f7fa5d568d181", 0x13}], 0x1, &(0x7f0000000240)=[{0x78, 0x114, 0x401, "7e72dbd8149c36d2b0f27b6a09dbd235f11f57de36fd6bf8565a95fc7c09a87a06effa68e5ea665e2339ca78823d2a390b0a7c9368b5499acaa0b3fe419fc2a7b9ef56b2a48d0cea371ee56e19e324950fd20e7e4da08f7986e2c57c0553cc9a6d"}], 0x78}, 0x1) fchdir(r5) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt(r6, 0x6b, 0x58, 0x0, &(0x7f0000000240)) fchmodat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0) 2.317267706s ago: executing program 2 (id=894): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[{0x2, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0xa379, 0x0, 0x82}, {0xc, 0x0, 0x2}, {0x7, 0x0, 0x82}], 0x5}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.817781293s ago: executing program 2 (id=895): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002"], 0x48) socket(0x10, 0x803, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000340), 0x8) 937.93209ms ago: executing program 0 (id=896): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfc}, 0x200000}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, 0x0, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)=ANY=[], 0xf) 867.901115ms ago: executing program 2 (id=897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000039ff8df200000000000fff0000000000000000000800040007000000"], 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="17090000000000000000010d0000050007000000000008000900000000001400200000000000000000000000ffffe000000008000a000200800006000200f000000014001f"], 0x5c}, 0x1, 0x620b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b"], 0x48) bind$inet(r5, 0x0, 0x0) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f00000000c0)=""/196, &(0x7f0000000080)=0x1b) setreuid(0x0, r4) syz_clone(0x12008000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 573.07158ms ago: executing program 0 (id=898): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(0x3) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x1ef6, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'gre0\x00', {0x4}, 0xe423}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xce24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000005488e2b33b7810214034000000"], 0x10}, 0x20000834) 210.416619ms ago: executing program 2 (id=899): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a, 0xffffffffffdffffe}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (fail_nth: 1) 0s ago: executing program 2 (id=900): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0xee00, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): ke+0x119/0x600 [ 288.187800][ T7749] ? __pfx_futex_wake+0x10/0x10 [ 288.187819][ T7749] ? do_raw_spin_lock+0x12b/0x2f0 [ 288.187857][ T7749] do_futex+0x458/0x4e0 [ 288.187881][ T7749] ? __pfx_do_futex+0x10/0x10 [ 288.187905][ T7749] ? __might_fault+0xaf/0x130 [ 288.187924][ T7749] mm_release+0x101/0x290 [ 288.187947][ T7749] exit_mm+0x50/0x240 [ 288.187972][ T7749] do_exit+0x6cd/0x2360 [ 288.187993][ T7749] ? lockdep_hardirqs_on+0x7a/0x110 [ 288.188018][ T7749] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 288.188047][ T7749] ? __pfx_do_exit+0x10/0x10 [ 288.188069][ T7749] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 288.188088][ T7749] ? rt_spin_lock+0x1e0/0x400 [ 288.188113][ T7749] ? rt_spin_unlock+0x157/0x200 [ 288.188135][ T7749] do_group_exit+0x22d/0x2f0 [ 288.188157][ T7749] ? rt_spin_unlock+0x163/0x200 [ 288.188180][ T7749] get_signal+0x121b/0x12c0 [ 288.188216][ T7749] arch_do_signal_or_restart+0xbb/0x860 [ 288.188242][ T7749] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 288.188281][ T7749] exit_to_user_mode_loop+0x104/0x730 [ 288.188297][ T7749] ? rcu_is_watching+0x15/0xb0 [ 288.188317][ T7749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.188335][ T7749] do_syscall_64+0x353/0x580 [ 288.188359][ T7749] ? trace_irq_disable+0x3b/0x140 [ 288.188383][ T7749] ? clear_bhb_loop+0x40/0x90 [ 288.188403][ T7749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.188419][ T7749] RIP: 0033:0x7f9cd614de99 [ 288.188442][ T7749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.188456][ T7749] RSP: 002b:00007f9cd4385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 288.188475][ T7749] RAX: 0000000000000000 RBX: 00007f9cd63d6090 RCX: 00007f9cd614de99 [ 288.188486][ T7749] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 288.188496][ T7749] RBP: 00007f9cd4385090 R08: 0000000000000000 R09: 0000000000000000 [ 288.188506][ T7749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.188515][ T7749] R13: 00007f9cd63d6128 R14: 00007f9cd63d6090 R15: 00007ffc8608de58 [ 288.188543][ T7749] [ 288.504262][ T5732] usb 1-1: USB disconnect, device number 29 [ 288.654317][ T7760] netlink: 596 bytes leftover after parsing attributes in process `syz.3.599'. [ 288.834409][ T7769] netlink: 'syz.3.603': attribute type 8 has an invalid length. [ 288.995183][ T197] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 289.882481][ T7776] FAULT_INJECTION: forcing a failure. [ 289.882481][ T7776] name failslab, interval 1, probability 0, space 0, times 0 [ 289.882512][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.2.605 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 289.882532][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 289.882543][ T7776] Call Trace: [ 289.882549][ T7776] [ 289.882557][ T7776] dump_stack_lvl+0xe8/0x150 [ 289.882591][ T7776] should_fail_ex+0x467/0x600 [ 289.882621][ T7776] should_failslab+0xa8/0x100 [ 289.882643][ T7776] __kmalloc_noprof+0xfe/0x780 [ 289.882660][ T7776] ? rcu_is_watching+0x15/0xb0 [ 289.882681][ T7776] ? tomoyo_realpath_from_path+0xef/0x640 [ 289.882702][ T7776] ? tomoyo_realpath_from_path+0xef/0x640 [ 289.882730][ T7776] tomoyo_realpath_from_path+0xef/0x640 [ 289.882760][ T7776] ? tomoyo_path_number_perm+0x219/0x5f0 [ 289.882787][ T7776] tomoyo_path_number_perm+0x246/0x5f0 [ 289.882816][ T7776] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 289.882841][ T7776] ? __lock_acquire+0x683/0x2ce0 [ 289.882874][ T7776] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 289.882904][ T7776] ? hook_file_ioctl+0x1f3/0x600 [ 289.882927][ T7776] ? lockdep_hardirqs_on+0x7a/0x110 [ 289.882970][ T7776] ? __fget_files+0x2a/0x420 [ 289.882991][ T7776] ? __fget_files+0x2a/0x420 [ 289.883006][ T7776] ? __fget_files+0x3a8/0x420 [ 289.883022][ T7776] ? __fget_files+0x2a/0x420 [ 289.883043][ T7776] security_file_ioctl+0xc3/0x2a0 [ 289.883064][ T7776] __se_sys_ioctl+0x47/0x170 [ 289.883086][ T7776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.883106][ T7776] do_syscall_64+0x174/0x580 [ 289.883129][ T7776] ? trace_irq_disable+0x3b/0x140 [ 289.883155][ T7776] ? clear_bhb_loop+0x40/0x90 [ 289.883176][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.883194][ T7776] RIP: 0033:0x7fe20c19de99 [ 289.883210][ T7776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.883225][ T7776] RSP: 002b:00007fe20a3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.883244][ T7776] RAX: ffffffffffffffda RBX: 00007fe20c425fa0 RCX: 00007fe20c19de99 [ 289.883257][ T7776] RDX: 0000200000000040 RSI: 0000000000005609 RDI: 0000000000000003 [ 289.883268][ T7776] RBP: 00007fe20a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 289.883279][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.883289][ T7776] R13: 00007fe20c426038 R14: 00007fe20c425fa0 R15: 00007ffd3ca389c8 [ 289.883320][ T7776] [ 289.883390][ T7776] ERROR: Out of memory at tomoyo_realpath_from_path. [ 289.895387][ T197] usb 5-1: Using ep0 maxpacket: 32 [ 289.900571][ T197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.900614][ T197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.900650][ T197] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 289.900670][ T197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.922909][ T197] usb 5-1: config 0 descriptor?? [ 290.025104][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.205747][ T4911] Bluetooth: hci2: command 0x0406 tx timeout [ 290.459654][ T7787] FAULT_INJECTION: forcing a failure. [ 290.459654][ T7787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.459686][ T7787] CPU: 1 UID: 0 PID: 7787 Comm: syz.3.607 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 290.459706][ T7787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 290.459717][ T7787] Call Trace: [ 290.459724][ T7787] [ 290.459731][ T7787] dump_stack_lvl+0xe8/0x150 [ 290.459762][ T7787] should_fail_ex+0x467/0x600 [ 290.459790][ T7787] _copy_from_user+0x2d/0xb0 [ 290.459809][ T7787] ___sys_recvmsg+0x173/0x5a0 [ 290.459834][ T7787] ? __pfx____sys_recvmsg+0x10/0x10 [ 290.459856][ T7787] ? __fget_files+0x2a/0x420 [ 290.459888][ T7787] ? __fget_files+0x3a8/0x420 [ 290.459914][ T7787] do_recvmmsg+0x320/0x7f0 [ 290.459940][ T7787] ? __pfx_do_recvmmsg+0x10/0x10 [ 290.459959][ T7787] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 290.459992][ T7787] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 290.460025][ T7787] __x64_sys_recvmmsg+0x198/0x250 [ 290.460046][ T7787] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 290.460073][ T7787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.460089][ T7787] do_syscall_64+0x174/0x580 [ 290.460113][ T7787] ? trace_irq_disable+0x3b/0x140 [ 290.460138][ T7787] ? clear_bhb_loop+0x40/0x90 [ 290.460159][ T7787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.460176][ T7787] RIP: 0033:0x7f1685bade99 [ 290.460191][ T7787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.460205][ T7787] RSP: 002b:00007f1683de5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 290.460224][ T7787] RAX: ffffffffffffffda RBX: 00007f1685e36090 RCX: 00007f1685bade99 [ 290.460243][ T7787] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 290.460254][ T7787] RBP: 00007f1683de5090 R08: 0000000000000000 R09: 0000000000000000 [ 290.460265][ T7787] R10: 0000000040002000 R11: 0000000000000246 R12: 0000000000000001 [ 290.460274][ T7787] R13: 00007f1685e36128 R14: 00007f1685e36090 R15: 00007ffd04ddd268 [ 290.460301][ T7787] [ 290.721274][ T197] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 290.721308][ T197] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 290.812705][ T197] ft260 0003:0403:6030.0012: failed to retrieve chip version [ 290.813119][ T197] ft260 0003:0403:6030.0012: probe with driver ft260 failed with error -5 [ 292.042520][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 292.376413][ T5791] usb 5-1: USB disconnect, device number 29 [ 292.508979][ T7824] netlink: 'syz.4.617': attribute type 8 has an invalid length. [ 292.783459][ T7832] Bluetooth: MGMT ver 1.23 [ 292.923024][ T7834] fuse: Bad value for 'fd' [ 293.029326][ T7836] trusted_key: encrypted_key: insufficient parameters specified [ 293.054147][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 293.149885][ T7845] FAULT_INJECTION: forcing a failure. [ 293.149885][ T7845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.149968][ T7845] CPU: 0 UID: 0 PID: 7845 Comm: syz.2.624 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 293.149986][ T7845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 293.149994][ T7845] Call Trace: [ 293.149999][ T7845] [ 293.150006][ T7845] dump_stack_lvl+0xe8/0x150 [ 293.150032][ T7845] should_fail_ex+0x467/0x600 [ 293.150056][ T7845] _copy_from_user+0x2d/0xb0 [ 293.150071][ T7845] ___sys_sendmsg+0x1c6/0x360 [ 293.150086][ T7845] ? __lock_acquire+0x683/0x2ce0 [ 293.150106][ T7845] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.150145][ T7845] ? __fget_files+0x2a/0x420 [ 293.150158][ T7845] ? __fget_files+0x3a8/0x420 [ 293.150181][ T7845] __x64_sys_sendmsg+0x1b7/0x290 [ 293.150197][ T7845] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 293.150223][ T7845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.150237][ T7845] do_syscall_64+0x174/0x580 [ 293.150256][ T7845] ? trace_irq_disable+0x3b/0x140 [ 293.150275][ T7845] ? clear_bhb_loop+0x40/0x90 [ 293.150291][ T7845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.150303][ T7845] RIP: 0033:0x7fe20c19de99 [ 293.150316][ T7845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.150328][ T7845] RSP: 002b:00007fe20a3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.150346][ T7845] RAX: ffffffffffffffda RBX: 00007fe20c425fa0 RCX: 00007fe20c19de99 [ 293.150358][ T7845] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 293.150366][ T7845] RBP: 00007fe20a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 293.150373][ T7845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.150380][ T7845] R13: 00007fe20c426038 R14: 00007fe20c425fa0 R15: 00007ffd3ca389c8 [ 293.150401][ T7845] [ 293.434632][ T31] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 293.463763][ T7850] FAULT_INJECTION: forcing a failure. [ 293.463763][ T7850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.463793][ T7850] CPU: 0 UID: 0 PID: 7850 Comm: syz.2.627 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 293.463812][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 293.463821][ T7850] Call Trace: [ 293.463828][ T7850] [ 293.463835][ T7850] dump_stack_lvl+0xe8/0x150 [ 293.463864][ T7850] should_fail_ex+0x467/0x600 [ 293.463892][ T7850] _copy_from_iter+0x1d3/0x1660 [ 293.463922][ T7850] ? txopt_get+0x79/0x3f0 [ 293.463939][ T7850] ? txopt_get+0x79/0x3f0 [ 293.463954][ T7850] ? txopt_get+0x79/0x3f0 [ 293.463970][ T7850] ? __pfx__copy_from_iter+0x10/0x10 [ 293.463990][ T7850] ? txopt_get+0x343/0x3f0 [ 293.464005][ T7850] ? kernel_text_address+0xa5/0xe0 [ 293.464022][ T7850] ? __pfx_txopt_get+0x10/0x10 [ 293.464037][ T7850] ? unwind_get_return_address+0x4d/0x90 [ 293.464058][ T7850] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 293.464088][ T7850] rawv6_sendmsg+0xb88/0x18c0 [ 293.464115][ T7850] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 293.464138][ T7850] ? smack_socket_sendmsg+0x1a9/0x590 [ 293.464161][ T7850] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 293.464195][ T7850] ? sock_rps_record_flow+0x19/0x350 [ 293.464220][ T7850] ? inet_sendmsg+0x298/0x320 [ 293.464237][ T7850] ? __fget_files+0x2a/0x420 [ 293.464256][ T7850] ? __pfx_inet_sendmsg+0x10/0x10 [ 293.464275][ T7850] sock_sendmsg_nosec+0x10e/0x180 [ 293.464301][ T7850] __sys_sendto+0x41e/0x5d0 [ 293.464331][ T7850] ? __pfx___sys_sendto+0x10/0x10 [ 293.464379][ T7850] ? __pfx_ksys_write+0x10/0x10 [ 293.464404][ T7850] __x64_sys_sendto+0xde/0x100 [ 293.464429][ T7850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.464449][ T7850] do_syscall_64+0x174/0x580 [ 293.464480][ T7850] ? trace_irq_disable+0x3b/0x140 [ 293.464502][ T7850] ? clear_bhb_loop+0x40/0x90 [ 293.464520][ T7850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.464536][ T7850] RIP: 0033:0x7fe20c19de99 [ 293.464552][ T7850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.464564][ T7850] RSP: 002b:00007fe20a3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 293.464582][ T7850] RAX: ffffffffffffffda RBX: 00007fe20c425fa0 RCX: 00007fe20c19de99 [ 293.464593][ T7850] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000003 [ 293.464604][ T7850] RBP: 00007fe20a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 293.464615][ T7850] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 293.464624][ T7850] R13: 00007fe20c426038 R14: 00007fe20c425fa0 R15: 00007ffd3ca389c8 [ 293.464650][ T7850] [ 293.794979][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 293.822264][ T7858] FAULT_INJECTION: forcing a failure. [ 293.822264][ T7858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.822326][ T7858] CPU: 1 UID: 0 PID: 7858 Comm: syz.2.629 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 293.822347][ T7858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 293.822358][ T7858] Call Trace: [ 293.822365][ T7858] [ 293.822373][ T7858] dump_stack_lvl+0xe8/0x150 [ 293.822405][ T7858] should_fail_ex+0x467/0x600 [ 293.822435][ T7858] _copy_from_user+0x2d/0xb0 [ 293.822456][ T7858] ___sys_sendmsg+0x1c6/0x360 [ 293.822481][ T7858] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.822535][ T7858] ? __fget_files+0x2a/0x420 [ 293.822552][ T7858] ? __fget_files+0x3a8/0x420 [ 293.822579][ T7858] __x64_sys_sendmsg+0x1b7/0x290 [ 293.822600][ T7858] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 293.822635][ T7858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.822654][ T7858] do_syscall_64+0x174/0x580 [ 293.822681][ T7858] ? clear_bhb_loop+0x40/0x90 [ 293.822702][ T7858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.822726][ T7858] RIP: 0033:0x7fe20c19de99 [ 293.822742][ T7858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.822756][ T7858] RSP: 002b:00007fe20a3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.822775][ T7858] RAX: ffffffffffffffda RBX: 00007fe20c425fa0 RCX: 00007fe20c19de99 [ 293.822788][ T7858] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 293.822799][ T7858] RBP: 00007fe20a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 293.822810][ T7858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.822820][ T7858] R13: 00007fe20c426038 R14: 00007fe20c425fa0 R15: 00007ffd3ca389c8 [ 293.822849][ T7858] [ 294.606386][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 294.621182][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 294.621208][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.621226][ T31] usb 4-1: Product: â­ëœ—爀å—乱臛ꓮ캥ؓহïŽê²›ç´é¼Šè¿ë਽霶Ⅹ٧䭡ݜ䀖鼼⪌ꪆáé«°î¡î˜šç…‡í‚¢ä´²ê‚“΋ퟖᄆí²è¿Šé¤™êµ”ì£Ì¡î³ï‚²çˆì½žä„¬åº°è‹¢ê·šë¬¹ï³­ë­‚é¤â†²ä­Šãˆ©è“…갴昢䀣Ô㮧範î«ì‡è…餒톯兄ꬦ⾌癄鞖㰔㖓깅馈ꎛ歅✥ꒄ▬켰넋칂å®ä©™ì±æ¶¬î³‚칯Ⅼ꼗ꓨ엢⭳ࢡ섷췔茽쮼 [ 294.621252][ T31] usb 4-1: Manufacturer: 䇕Ⳝ嗅꫻ꎒ抌㇧ä‚뒔߯牚浂궙ゑꄗ臃픋âœì™œå­ªê‡æ“‘ꃮá’䞑냔ã‘כּŌ [ 294.621269][ T31] usb 4-1: SerialNumber: Д [ 294.834660][ T5733] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 294.987745][ T7865] netlink: 'syz.2.630': attribute type 8 has an invalid length. [ 294.992459][ T5733] usb 5-1: unable to get BOS descriptor or descriptor too short [ 294.999342][ T5733] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 254, changing to 4 [ 294.999371][ T5733] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 294.999402][ T5733] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 295.107959][ T31] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 295.318672][ T5717] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 295.481328][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 295.481359][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 132, setting to 64 [ 295.483718][ T5717] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 295.483743][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.483760][ T5717] usb 1-1: Product: syz [ 295.483772][ T5717] usb 1-1: Manufacturer: syz [ 295.483786][ T5717] usb 1-1: SerialNumber: syz [ 295.547640][ T5717] usb 1-1: config 0 descriptor?? [ 295.549345][ T7867] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 295.695747][ T5791] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 295.819444][ T5717] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18 [ 295.876863][ T5791] usb 3-1: Using ep0 maxpacket: 16 [ 295.915352][ T5791] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.915385][ T5791] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.915406][ T5791] usb 3-1: config 0 interface 0 has no altsetting 0 [ 295.915438][ T5791] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 295.915458][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.993484][ T5791] usb 3-1: config 0 descriptor?? [ 296.346641][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 296.475390][ T31] usb 4-1: USB disconnect, device number 26 [ 296.530165][ T5733] usb 5-1: string descriptor 0 read error: -71 [ 296.530312][ T5733] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 296.530333][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.563968][ T5733] usb 5-1: can't set config #1, error -71 [ 296.580270][ T5583] usb 1-1: USB disconnect, device number 30 [ 296.640440][ T5791] mcp2221 0003:04D8:00DD.0013: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 296.703361][ T5733] usb 5-1: USB disconnect, device number 30 [ 296.778165][ T37] audit: type=1326 audit(1784320114.293:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7888 comm="syz.4.640" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd614de99 code=0x7ffc0000 [ 296.795251][ T37] audit: type=1326 audit(1784320114.313:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7888 comm="syz.4.640" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f9cd614de99 code=0x7ffc0000 [ 296.795450][ T37] audit: type=1326 audit(1784320114.321:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7888 comm="syz.4.640" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd614de99 code=0x7ffc0000 [ 296.809570][ T37] audit: type=1326 audit(1784320114.321:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7888 comm="syz.4.640" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd614de99 code=0x7ffc0000 [ 296.859049][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.040892][ T7898] netlink: 'syz.4.642': attribute type 8 has an invalid length. [ 297.046686][ T7887] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 297.046708][ T7887] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 297.191670][ T5791] usb 3-1: USB disconnect, device number 26 [ 297.242122][ T7887] vhci_hcd vhci_hcd.0: Device attached [ 297.269684][ T7891] vhci_hcd: connection closed [ 297.330219][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 297.331318][ T768] vhci_hcd vhci_hcd.3: stop threads [ 297.332363][ T768] vhci_hcd vhci_hcd.3: release socket [ 297.332576][ T768] vhci_hcd vhci_hcd.3: disconnect device [ 297.746698][ T5717] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 298.287117][ T5717] usb 1-1: Using ep0 maxpacket: 16 [ 298.295910][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'. [ 298.348420][ T5717] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 298.366613][ T5717] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 298.366642][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.366660][ T5717] usb 1-1: Product: â­ëœ—爀å—乱臛ꓮ캥ؓহïŽê²›ç´é¼Šè¿ë਽霶Ⅹ٧䭡ݜ䀖鼼⪌ꪆáé«°î¡î˜šç…‡í‚¢ä´²ê‚“΋ퟖᄆí²è¿Šé¤™êµ”ì£Ì¡î³ï‚²çˆì½žä„¬åº°è‹¢ê·šë¬¹ï³­ë­‚é¤â†²ä­Šãˆ©è“…갴昢䀣Ô㮧範î«ì‡è…餒톯兄ꬦ⾌癄鞖㰔㖓깅馈ꎛ歅✥ꒄ▬켰넋칂å®ä©™ì±æ¶¬î³‚칯Ⅼ꼗ꓨ엢⭳ࢡ섷췔茽쮼 [ 298.366686][ T5717] usb 1-1: Manufacturer: 䇕Ⳝ嗅꫻ꎒ抌㇧ä‚뒔߯牚浂궙ゑꄗ臃픋âœì™œå­ªê‡æ“‘ꃮá’䞑냔ã‘כּŌ [ 298.366703][ T5717] usb 1-1: SerialNumber: Д [ 299.421830][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.649'. [ 299.606095][ T5717] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 299.785060][ T5717] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 299.853007][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'. [ 299.864854][ T5717] usb 1-1: USB disconnect, device number 31 [ 299.957999][ T7892] udevd[7892]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.199168][ T7941] FAULT_INJECTION: forcing a failure. [ 301.199168][ T7941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.199199][ T7941] CPU: 0 UID: 0 PID: 7941 Comm: syz.0.654 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 301.199219][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 301.199229][ T7941] Call Trace: [ 301.199236][ T7941] [ 301.199244][ T7941] dump_stack_lvl+0xe8/0x150 [ 301.199275][ T7941] should_fail_ex+0x467/0x600 [ 301.199305][ T7941] _copy_from_iter+0x1d3/0x1660 [ 301.199334][ T7941] ? unwind_next_frame+0x8f/0x2550 [ 301.199359][ T7941] ? __pfx__copy_from_iter+0x10/0x10 [ 301.199384][ T7941] ? ktime_get+0x45/0x220 [ 301.199407][ T7941] ? lock_acquire+0x106/0x350 [ 301.199437][ T7941] tun_get_user+0x259/0x4380 [ 301.199460][ T7941] ? ktime_get+0x45/0x220 [ 301.199489][ T7941] ? lapic_next_event+0x11/0x20 [ 301.199506][ T7941] ? clockevents_program_event+0x3d1/0x630 [ 301.199535][ T7941] ? __lock_acquire+0x683/0x2ce0 [ 301.199554][ T7941] ? __pfx_tun_get_user+0x10/0x10 [ 301.199578][ T7941] ? __lock_acquire+0x683/0x2ce0 [ 301.199597][ T7941] ? kstrtoull+0x12f/0x1d0 [ 301.199628][ T7941] ? ref_tracker_alloc+0x353/0x4c0 [ 301.199657][ T7941] ? get_pid_task+0x20/0x1f0 [ 301.199683][ T7941] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 301.199708][ T7941] ? tun_get+0x1c/0x2f0 [ 301.199731][ T7941] ? tun_get+0x1c/0x2f0 [ 301.199758][ T7941] ? tun_get+0x1c/0x2f0 [ 301.199780][ T7941] ? tun_get+0x1c/0x2f0 [ 301.199806][ T7941] tun_chr_write_iter+0x119/0x200 [ 301.199831][ T7941] vfs_write+0x61e/0xbb0 [ 301.199861][ T7941] ? __pfx_vfs_write+0x10/0x10 [ 301.199890][ T7941] ? __fget_files+0x2a/0x420 [ 301.199916][ T7941] ksys_write+0x156/0x270 [ 301.199938][ T7941] ? __pfx_ksys_write+0x10/0x10 [ 301.199966][ T7941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.199985][ T7941] do_syscall_64+0x174/0x580 [ 301.200010][ T7941] ? trace_irq_disable+0x3b/0x140 [ 301.200036][ T7941] ? clear_bhb_loop+0x40/0x90 [ 301.200058][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.200075][ T7941] RIP: 0033:0x7f517a50de99 [ 301.200093][ T7941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.200106][ T7941] RSP: 002b:00007f5178766028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 301.200125][ T7941] RAX: ffffffffffffffda RBX: 00007f517a795fa0 RCX: 00007f517a50de99 [ 301.200138][ T7941] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000003 [ 301.200149][ T7941] RBP: 00007f5178766090 R08: 0000000000000000 R09: 0000000000000000 [ 301.200160][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.200171][ T7941] R13: 00007f517a796038 R14: 00007f517a795fa0 R15: 00007ffd2e0b1ea8 [ 301.200200][ T7941] [ 302.396321][ T5717] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 302.492810][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.658'. [ 302.552940][ T5717] usb 2-1: Using ep0 maxpacket: 16 [ 302.557765][ T5717] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.557796][ T5717] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.557815][ T5717] usb 2-1: config 0 interface 0 has no altsetting 0 [ 302.557845][ T5717] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 302.557865][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.626125][ T5717] usb 2-1: config 0 descriptor?? [ 303.163072][ T7954] FAULT_INJECTION: forcing a failure. [ 303.163072][ T7954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.163138][ T7954] CPU: 1 UID: 0 PID: 7954 Comm: syz.2.659 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 303.163159][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 303.163169][ T7954] Call Trace: [ 303.163176][ T7954] [ 303.163183][ T7954] dump_stack_lvl+0xe8/0x150 [ 303.163214][ T7954] should_fail_ex+0x467/0x600 [ 303.163244][ T7954] _copy_from_user+0x2d/0xb0 [ 303.163264][ T7954] ___sys_recvmsg+0x173/0x5a0 [ 303.163290][ T7954] ? __pfx____sys_recvmsg+0x10/0x10 [ 303.163307][ T7954] ? irqentry_exit+0x218/0x8f0 [ 303.163336][ T7954] ? __fget_files+0x2a/0x420 [ 303.163369][ T7954] ? __fget_files+0x3a8/0x420 [ 303.163396][ T7954] do_recvmmsg+0x320/0x7f0 [ 303.163422][ T7954] ? __schedule+0x16f2/0x5500 [ 303.163444][ T7954] ? __pfx_do_recvmmsg+0x10/0x10 [ 303.163463][ T7954] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 303.163520][ T7954] __x64_sys_recvmmsg+0x198/0x250 [ 303.163542][ T7954] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 303.163569][ T7954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.163588][ T7954] do_syscall_64+0x174/0x580 [ 303.163615][ T7954] ? clear_bhb_loop+0x40/0x90 [ 303.163636][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.163654][ T7954] RIP: 0033:0x7fe20c19de99 [ 303.163671][ T7954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.163684][ T7954] RSP: 002b:00007fe20a3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 303.163702][ T7954] RAX: ffffffffffffffda RBX: 00007fe20c425fa0 RCX: 00007fe20c19de99 [ 303.163715][ T7954] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 303.163726][ T7954] RBP: 00007fe20a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 303.163736][ T7954] R10: 0000000040002000 R11: 0000000000000246 R12: 0000000000000001 [ 303.163747][ T7954] R13: 00007fe20c426038 R14: 00007fe20c425fa0 R15: 00007ffd3ca389c8 [ 303.163778][ T7954] [ 303.867971][ T5717] mcp2221 0003:04D8:00DD.0014: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 303.928889][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.660'. [ 303.983355][ T7960] FAULT_INJECTION: forcing a failure. [ 303.983355][ T7960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.983386][ T7960] CPU: 0 UID: 0 PID: 7960 Comm: syz.4.662 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 303.983405][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 303.983415][ T7960] Call Trace: [ 303.983422][ T7960] [ 303.983430][ T7960] dump_stack_lvl+0xe8/0x150 [ 303.983459][ T7960] should_fail_ex+0x467/0x600 [ 303.983489][ T7960] _copy_from_user+0x2d/0xb0 [ 303.983508][ T7960] ___sys_sendmsg+0x1c6/0x360 [ 303.983528][ T7960] ? __lock_acquire+0x683/0x2ce0 [ 303.983550][ T7960] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.983601][ T7960] ? __fget_files+0x2a/0x420 [ 303.983618][ T7960] ? __fget_files+0x3a8/0x420 [ 303.983644][ T7960] __x64_sys_sendmsg+0x1b7/0x290 [ 303.983665][ T7960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.983700][ T7960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.983719][ T7960] do_syscall_64+0x174/0x580 [ 303.983743][ T7960] ? trace_irq_disable+0x3b/0x140 [ 303.983768][ T7960] ? clear_bhb_loop+0x40/0x90 [ 303.983789][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.983805][ T7960] RIP: 0033:0x7f9cd614de99 [ 303.983821][ T7960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.983835][ T7960] RSP: 002b:00007f9cd43a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.983853][ T7960] RAX: ffffffffffffffda RBX: 00007f9cd63d5fa0 RCX: 00007f9cd614de99 [ 303.983866][ T7960] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 303.983877][ T7960] RBP: 00007f9cd43a6090 R08: 0000000000000000 R09: 0000000000000000 [ 303.983888][ T7960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.983898][ T7960] R13: 00007f9cd63d6038 R14: 00007f9cd63d5fa0 R15: 00007ffc8608de58 [ 303.983927][ T7960] [ 303.988867][ T7961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.661'. [ 305.414621][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 305.737066][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 305.737089][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 305.969088][ T5732] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 306.123696][ T5732] usb 3-1: Using ep0 maxpacket: 16 [ 306.140798][ T5732] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 306.143364][ T5732] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 306.143389][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.143407][ T5732] usb 3-1: Product: â­ëœ—爀å—乱臛ꓮ캥ؓহïŽê²›ç´é¼Šè¿ë਽霶Ⅹ٧䭡ݜ䀖鼼⪌ꪆáé«°î¡î˜šç…‡í‚¢ä´²ê‚“΋ퟖᄆí²è¿Šé¤™êµ”ì£Ì¡î³ï‚²çˆì½žä„¬åº°è‹¢ê·šë¬¹ï³­ë­‚é¤â†²ä­Šãˆ©è“…갴昢䀣Ô㮧範î«ì‡è…餒톯兄ꬦ⾌癄鞖㰔㖓깅馈ꎛ歅✥ꒄ▬켰넋칂å®ä©™ì±æ¶¬î³‚칯Ⅼ꼗ꓨ엢⭳ࢡ섷췔茽쮼 [ 306.143529][ T5732] usb 3-1: Manufacturer: 䇕Ⳝ嗅꫻ꎒ抌㇧ä‚뒔߯牚浂궙ゑꄗ臃픋âœì™œå­ªê‡æ“‘ꃮá’䞑냔ã‘כּŌ [ 306.143549][ T5732] usb 3-1: SerialNumber: Д [ 306.291671][ T7987] fuse: Bad value for 'fd' [ 306.504378][ T5732] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 306.696434][ T5732] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 306.898571][ T5732] usb 3-1: USB disconnect, device number 27 [ 306.927880][ T5717] usb 2-1: USB disconnect, device number 18 [ 306.963288][ T7892] udevd[7892]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.072133][ T7999] netlink: 'syz.0.673': attribute type 1 has an invalid length. [ 307.235176][ T7999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.266031][ T5601] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 307.386847][ T5732] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 307.442997][ T8001] bond1: (slave gretap1): making interface the new active one [ 307.463215][ T5601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 307.463234][ T5601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 132, setting to 64 [ 307.466638][ T5601] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 307.466653][ T5601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.466663][ T5601] usb 5-1: Product: syz [ 307.466670][ T5601] usb 5-1: Manufacturer: syz [ 307.466677][ T5601] usb 5-1: SerialNumber: syz [ 307.512520][ T5601] usb 5-1: config 0 descriptor?? [ 307.525603][ T7997] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 307.534984][ T8001] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 307.556962][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 307.556993][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 132, setting to 64 [ 307.587577][ T5732] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 307.587603][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.587619][ T5732] usb 3-1: Product: syz [ 307.587630][ T5732] usb 3-1: Manufacturer: syz [ 307.587642][ T5732] usb 3-1: SerialNumber: syz [ 307.676272][ T5732] usb 3-1: config 0 descriptor?? [ 307.685901][ T8003] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 307.752808][ T5601] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20 [ 307.917564][ T5732] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 307.960747][ T5583] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 308.082847][ T8010] sg_read: process 357 (syz.0.677) changed security contexts after opening file descriptor, this is not allowed. [ 308.111778][ T5583] usb 4-1: Using ep0 maxpacket: 16 [ 308.118454][ T5583] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.118570][ T5583] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.118593][ T5583] usb 4-1: config 0 interface 0 has no altsetting 0 [ 308.118623][ T5583] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 308.118645][ T5583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.206516][ T5583] usb 4-1: config 0 descriptor?? [ 308.232947][ T5604] usb 5-1: USB disconnect, device number 31 [ 308.233026][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 308.520821][ T31] usb 3-1: USB disconnect, device number 28 [ 308.649206][ T5583] mcp2221 0003:04D8:00DD.0015: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 308.665552][ T5601] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 308.825116][ T5604] usb 4-1: USB disconnect, device number 27 [ 308.867090][ T5601] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 308.867117][ T5601] usb 1-1: config 0 has no interface number 0 [ 308.901600][ T5601] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 308.901629][ T5601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.901654][ T5601] usb 1-1: Product: syz [ 308.901666][ T5601] usb 1-1: Manufacturer: syz [ 308.901678][ T5601] usb 1-1: SerialNumber: syz [ 308.941404][ T5601] usb 1-1: config 0 descriptor?? [ 309.419325][ T5601] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 309.419352][ T5601] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 309.419617][ T5601] asix 1-1:0.251: probe with driver asix failed with error -5 [ 309.437327][ T5601] usb 1-1: USB disconnect, device number 32 [ 309.608782][ T8029] netlink: 60 bytes leftover after parsing attributes in process `syz.1.683'. [ 309.609623][ T8029] netlink: 60 bytes leftover after parsing attributes in process `syz.1.683'. [ 309.935707][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.685'. [ 310.245660][ T5583] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 310.397143][ T5583] usb 5-1: Using ep0 maxpacket: 16 [ 310.401281][ T5583] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 310.403648][ T5583] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 310.403672][ T5583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.403689][ T5583] usb 5-1: Product: â­ëœ—爀å—乱臛ꓮ캥ؓহïŽê²›ç´é¼Šè¿ë਽霶Ⅹ٧䭡ݜ䀖鼼⪌ꪆáé«°î¡î˜šç…‡í‚¢ä´²ê‚“΋ퟖᄆí²è¿Šé¤™êµ”ì£Ì¡î³ï‚²çˆì½žä„¬åº°è‹¢ê·šë¬¹ï³­ë­‚é¤â†²ä­Šãˆ©è“…갴昢䀣Ô㮧範î«ì‡è…餒톯兄ꬦ⾌癄鞖㰔㖓깅馈ꎛ歅✥ꒄ▬켰넋칂å®ä©™ì±æ¶¬î³‚칯Ⅼ꼗ꓨ엢⭳ࢡ섷췔茽쮼 [ 310.403715][ T5583] usb 5-1: Manufacturer: 䇕Ⳝ嗅꫻ꎒ抌㇧ä‚뒔߯牚浂궙ゑꄗ臃픋âœì™œå­ªê‡æ“‘ꃮá’䞑냔ã‘כּŌ [ 310.403731][ T5583] usb 5-1: SerialNumber: Д [ 310.491776][ T5733] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 310.664145][ T5733] usb 1-1: config 0 has no interfaces? [ 310.664182][ T5733] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 310.664202][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.701655][ T5733] usb 1-1: config 0 descriptor?? [ 310.763704][ T5583] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 310.829202][ T5583] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 310.849572][ T5604] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 310.868806][ T5583] usb 5-1: USB disconnect, device number 32 [ 310.932931][ T7892] udevd[7892]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.022842][ T5604] usb 4-1: descriptor type invalid, skip [ 311.024161][ T5604] usb 4-1: not running at top speed; connect to a high speed hub [ 311.025216][ T5604] usb 4-1: config 0 has no interfaces? [ 311.027510][ T5604] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 311.027542][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.027558][ T5604] usb 4-1: Product: syz [ 311.027565][ T5604] usb 4-1: Manufacturer: syz [ 311.027572][ T5604] usb 4-1: SerialNumber: syz [ 311.048240][ T5604] usb 4-1: config 0 descriptor?? [ 311.280136][ T5604] usb 4-1: USB disconnect, device number 28 [ 311.677220][ T5607] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 311.677257][ T4911] Bluetooth: hci5: command 0x1003 tx timeout [ 311.927123][ T5733] usb 1-1: USB disconnect, device number 33 [ 312.111183][ T8068] FAULT_INJECTION: forcing a failure. [ 312.111183][ T8068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.111211][ T8068] CPU: 0 UID: 0 PID: 8068 Comm: syz.3.695 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 312.111226][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 312.111235][ T8068] Call Trace: [ 312.111240][ T8068] [ 312.111246][ T8068] dump_stack_lvl+0xe8/0x150 [ 312.111270][ T8068] should_fail_ex+0x467/0x600 [ 312.111294][ T8068] _copy_from_user+0x2d/0xb0 [ 312.111311][ T8068] ___sys_sendmsg+0x1c6/0x360 [ 312.111326][ T8068] ? __lock_acquire+0x683/0x2ce0 [ 312.111342][ T8068] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.111359][ T8068] ? kstrtouint+0x6e/0xe0 [ 312.111395][ T8068] ? __fget_files+0x2a/0x420 [ 312.111409][ T8068] ? __fget_files+0x3a8/0x420 [ 312.111429][ T8068] __sys_sendmmsg+0x279/0x4d0 [ 312.111447][ T8068] ? __pfx___sys_sendmmsg+0x10/0x10 [ 312.111469][ T8068] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 312.111498][ T8068] ? ksys_write+0x248/0x270 [ 312.111517][ T8068] ? __pfx_ksys_write+0x10/0x10 [ 312.111537][ T8068] __x64_sys_sendmmsg+0xa0/0xc0 [ 312.111550][ T8068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.111566][ T8068] do_syscall_64+0x174/0x580 [ 312.111587][ T8068] ? trace_irq_disable+0x3b/0x140 [ 312.111620][ T8068] ? clear_bhb_loop+0x40/0x90 [ 312.111637][ T8068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.111649][ T8068] RIP: 0033:0x7f1685bade99 [ 312.111663][ T8068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.111673][ T8068] RSP: 002b:00007f1683e06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 312.111688][ T8068] RAX: ffffffffffffffda RBX: 00007f1685e35fa0 RCX: 00007f1685bade99 [ 312.111697][ T8068] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 312.111705][ T8068] RBP: 00007f1683e06090 R08: 0000000000000000 R09: 0000000000000000 [ 312.111713][ T8068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.111721][ T8068] R13: 00007f1685e36038 R14: 00007f1685e35fa0 R15: 00007ffd04ddd268 [ 312.111741][ T8068] [ 312.158626][ T8069] FAULT_INJECTION: forcing a failure. [ 312.158626][ T8069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.168563][ T8069] CPU: 1 UID: 0 PID: 8069 Comm: syz.0.696 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 312.168589][ T8069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 312.168599][ T8069] Call Trace: [ 312.168606][ T8069] [ 312.168613][ T8069] dump_stack_lvl+0xe8/0x150 [ 312.168644][ T8069] should_fail_ex+0x467/0x600 [ 312.168673][ T8069] _copy_to_user+0x31/0xb0 [ 312.168695][ T8069] simple_read_from_buffer+0xe1/0x170 [ 312.168718][ T8069] proc_fail_nth_read+0x1be/0x230 [ 312.168738][ T8069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.168758][ T8069] ? rw_verify_area+0x250/0x4d0 [ 312.168779][ T8069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.168796][ T8069] vfs_read+0x219/0xa90 [ 312.168822][ T8069] ? __pfx_vfs_read+0x10/0x10 [ 312.168842][ T8069] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 312.168868][ T8069] ? lockdep_hardirqs_on+0x7a/0x110 [ 312.168891][ T8069] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 312.168916][ T8069] ? mutex_lock_nested+0x152/0x1d0 [ 312.168934][ T8069] ? fdget_pos+0x252/0x320 [ 312.168958][ T8069] ksys_read+0x156/0x270 [ 312.168981][ T8069] ? __pfx_ksys_read+0x10/0x10 [ 312.169008][ T8069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.169027][ T8069] do_syscall_64+0x174/0x580 [ 312.169050][ T8069] ? trace_irq_disable+0x3b/0x140 [ 312.169076][ T8069] ? clear_bhb_loop+0x40/0x90 [ 312.169097][ T8069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.169114][ T8069] RIP: 0033:0x7f517a4ce6ce [ 312.169130][ T8069] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.169144][ T8069] RSP: 002b:00007f5178744fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.169162][ T8069] RAX: ffffffffffffffda RBX: 00007f51787456c0 RCX: 00007f517a4ce6ce [ 312.169175][ T8069] RDX: 000000000000000f RSI: 00007f51787450a0 RDI: 0000000000000004 [ 312.169185][ T8069] RBP: 00007f5178745090 R08: 0000000000000000 R09: 0000000000000000 [ 312.169196][ T8069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.169206][ T8069] R13: 00007f517a796128 R14: 00007f517a796090 R15: 00007ffd2e0b1ea8 [ 312.169235][ T8069] [ 312.278596][ T5604] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 312.441865][ T5604] usb 5-1: config 0 has no interfaces? [ 312.441898][ T5604] usb 5-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 312.441919][ T5604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.663178][ T31] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 312.666472][ T5604] usb 5-1: config 0 descriptor?? [ 312.740261][ T8075] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 312.873828][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 312.875318][ T37] audit: type=1326 audit(1784320130.283:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8058 comm="syz.4.693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd614de99 code=0x7ffc0000 [ 312.875365][ T37] audit: type=1326 audit(1784320130.283:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8058 comm="syz.4.693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd614de99 code=0x7ffc0000 [ 312.875763][ T37] audit: type=1326 audit(1784320130.283:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8058 comm="syz.4.693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9cd614de99 code=0x7ffc0000 [ 312.876032][ T37] audit: type=1326 audit(1784320130.283:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8058 comm="syz.4.693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd610e6ce code=0x7ffc0000 [ 312.876383][ T37] audit: type=1326 audit(1784320130.283:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8058 comm="syz.4.693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd614de99 code=0x7ffc0000 [ 312.996841][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 312.999199][ T31] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.999228][ T31] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.999248][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 312.999277][ T31] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 312.999295][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.008213][ T31] usb 3-1: config 0 descriptor?? [ 313.015996][ T37] audit: type=1326 audit(1784320130.422:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8058 comm="syz.4.693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd610e6ce code=0x7ffc0000 [ 313.803928][ T37] audit: type=1326 audit(1784320130.989:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8058 comm="syz.4.693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd610e6ce code=0x7ffc0000 [ 313.803980][ T37] audit: type=1326 audit(1784320131.158:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8058 comm="syz.4.693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd610e6ce code=0x7ffc0000 [ 313.858275][ T37] audit: type=1326 audit(1784320131.257:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8058 comm="syz.4.693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd610e6ce code=0x7ffc0000 [ 314.039557][ T37] audit: type=1326 audit(1784320131.386:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8058 comm="syz.4.693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9cd614de99 code=0x7ffc0000 [ 314.059332][ T31] mcp2221 0003:04D8:00DD.0016: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 314.228515][ T5604] usb 5-1: USB disconnect, device number 33 [ 314.267490][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 314.382574][ T31] usb 3-1: USB disconnect, device number 29 [ 315.025476][ T5604] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 315.088212][ T8097] netlink: 'syz.0.706': attribute type 3 has an invalid length. [ 315.220858][ T5604] usb 4-1: Using ep0 maxpacket: 16 [ 315.410167][ T5604] usb 4-1: unable to get BOS descriptor or descriptor too short [ 315.414074][ T5604] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 315.414108][ T5604] usb 4-1: can't read configurations, error -71 [ 315.425684][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'. [ 318.145807][ T10] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 318.319264][ T8111] openvswitch: netlink: Missing valid actions attribute. [ 318.319300][ T8111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.360269][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.360334][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.610775][ T8117] fuse: Bad value for 'fd' [ 319.877188][ T8113] netlink: 56 bytes leftover after parsing attributes in process `syz.2.709'. [ 320.054532][ T5583] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 320.092003][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.718'. [ 320.203603][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 320.207600][ T5583] usb 2-1: Using ep0 maxpacket: 8 [ 320.210007][ T5583] usb 2-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 320.210033][ T5583] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.210060][ T5583] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a51, bcdDevice= 0.00 [ 320.210080][ T5583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.239571][ T5583] usb 2-1: config 0 descriptor?? [ 320.426479][ T31] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 320.728065][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 320.729957][ T31] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.729984][ T31] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.730057][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.730088][ T31] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 320.730107][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.781256][ T31] usb 4-1: config 0 descriptor?? [ 321.144694][ T5583] hid (null): unknown global tag 0xd [ 321.159055][ T5583] hid-corsair-void 0003:1B1C:0A51.0017: unknown main item tag 0x0 [ 321.159088][ T5583] hid-corsair-void 0003:1B1C:0A51.0017: unknown main item tag 0x0 [ 321.159112][ T5583] hid-corsair-void 0003:1B1C:0A51.0017: unknown main item tag 0x0 [ 321.159136][ T5583] hid-corsair-void 0003:1B1C:0A51.0017: unknown main item tag 0x0 [ 321.159204][ T5583] hid-corsair-void 0003:1B1C:0A51.0017: unknown main item tag 0x0 [ 321.159227][ T5583] hid-corsair-void 0003:1B1C:0A51.0017: unknown main item tag 0x0 [ 321.159251][ T5583] hid-corsair-void 0003:1B1C:0A51.0017: unknown main item tag 0x0 [ 321.159274][ T5583] hid-corsair-void 0003:1B1C:0A51.0017: unknown main item tag 0x0 [ 321.159297][ T5583] hid-corsair-void 0003:1B1C:0A51.0017: unknown global tag 0xd [ 321.159357][ T5583] hid-corsair-void 0003:1B1C:0A51.0017: item 0 0 1 13 parsing failed [ 321.163336][ T5583] hid-corsair-void 0003:1B1C:0A51.0017: parse failed (reason: -22) [ 321.163672][ T5583] hid-corsair-void 0003:1B1C:0A51.0017: probe with driver hid-corsair-void failed with error -22 [ 321.229990][ T31] mcp2221 0003:04D8:00DD.0018: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 321.326586][ T8159] FAULT_INJECTION: forcing a failure. [ 321.326586][ T8159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.326607][ T8159] CPU: 1 UID: 0 PID: 8159 Comm: syz.0.724 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 321.326619][ T8159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 321.326626][ T8159] Call Trace: [ 321.326630][ T8159] [ 321.326634][ T8159] dump_stack_lvl+0xe8/0x150 [ 321.326658][ T8159] should_fail_ex+0x467/0x600 [ 321.326675][ T8159] _copy_from_user+0x2d/0xb0 [ 321.326687][ T8159] ___sys_sendmsg+0x1c6/0x360 [ 321.326698][ T8159] ? __lock_acquire+0x683/0x2ce0 [ 321.326710][ T8159] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.326736][ T8159] ? __fget_files+0x2a/0x420 [ 321.326745][ T8159] ? __fget_files+0x3a8/0x420 [ 321.326758][ T8159] __x64_sys_sendmsg+0x1b7/0x290 [ 321.326770][ T8159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.326788][ T8159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.326799][ T8159] do_syscall_64+0x174/0x580 [ 321.326814][ T8159] ? trace_irq_disable+0x3b/0x140 [ 321.326829][ T8159] ? clear_bhb_loop+0x40/0x90 [ 321.326841][ T8159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.326850][ T8159] RIP: 0033:0x7f517a50de99 [ 321.326865][ T8159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.326874][ T8159] RSP: 002b:00007f5178745028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.326885][ T8159] RAX: ffffffffffffffda RBX: 00007f517a796090 RCX: 00007f517a50de99 [ 321.326892][ T8159] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000006 [ 321.326898][ T8159] RBP: 00007f5178745090 R08: 0000000000000000 R09: 0000000000000000 [ 321.326904][ T8159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.326909][ T8159] R13: 00007f517a796128 R14: 00007f517a796090 R15: 00007ffd2e0b1ea8 [ 321.326926][ T8159] [ 321.780065][ T8166] fuse: Bad value for 'fd' [ 322.496655][ T5733] usb 2-1: USB disconnect, device number 19 [ 323.077187][ T8173] netlink: 'syz.0.728': attribute type 12 has an invalid length. [ 323.810740][ T31] usb 4-1: USB disconnect, device number 31 [ 324.003758][ T37] audit: type=1326 audit(1784320141.350:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8176 comm="syz.1.731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f477fde99 code=0x7ffc0000 [ 324.007768][ T37] audit: type=1326 audit(1784320141.350:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8176 comm="syz.1.731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f477fde99 code=0x7ffc0000 [ 324.007812][ T37] audit: type=1326 audit(1784320141.360:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8176 comm="syz.1.731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f9f477fde99 code=0x7ffc0000 [ 324.008374][ T37] audit: type=1326 audit(1784320141.360:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8176 comm="syz.1.731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f477fde99 code=0x7ffc0000 [ 324.009229][ T37] audit: type=1326 audit(1784320141.360:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8176 comm="syz.1.731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f477fde99 code=0x7ffc0000 [ 324.009269][ T37] audit: type=1326 audit(1784320141.360:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8176 comm="syz.1.731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f477fde99 code=0x7ffc0000 [ 324.025880][ T37] audit: type=1326 audit(1784320141.360:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8176 comm="syz.1.731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9f477fde99 code=0x7ffc0000 [ 324.026183][ T37] audit: type=1326 audit(1784320141.360:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8176 comm="syz.1.731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f477fde99 code=0x7ffc0000 [ 324.032476][ T37] audit: type=1326 audit(1784320141.380:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8176 comm="syz.1.731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f477fde99 code=0x7ffc0000 [ 324.032523][ T37] audit: type=1326 audit(1784320141.380:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8176 comm="syz.1.731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f477be6ce code=0x7ffc0000 [ 324.046478][ T8186] loop9: detected capacity change from 0 to 7 [ 326.458293][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 326.528816][ T5717] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 326.749223][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.749269][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 326.749289][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.795068][ T5717] usb 3-1: Using ep0 maxpacket: 16 [ 326.798769][ T5717] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.798797][ T5717] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.798817][ T5717] usb 3-1: config 0 interface 0 has no altsetting 0 [ 326.798847][ T5717] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 326.798867][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.958095][ T10] usb 4-1: config 0 descriptor?? [ 327.702725][ T5717] usb 3-1: config 0 descriptor?? [ 327.936775][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 327.936891][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 327.943495][ T10] usb 4-1: USB disconnect, device number 32 [ 328.172802][ T5717] mcp2221 0003:04D8:00DD.0019: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 328.347639][ T5732] usb 3-1: USB disconnect, device number 30 [ 328.457885][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 328.607649][ T8252] Mount JFS Failure: -5 [ 328.616153][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.616198][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 328.616217][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.660801][ T10] usb 4-1: config 0 descriptor?? [ 328.976372][ T8259] FAULT_INJECTION: forcing a failure. [ 328.976372][ T8259] name failslab, interval 1, probability 0, space 0, times 0 [ 328.976404][ T8259] CPU: 1 UID: 0 PID: 8259 Comm: syz.0.755 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 328.976423][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 328.976433][ T8259] Call Trace: [ 328.976440][ T8259] [ 328.976447][ T8259] dump_stack_lvl+0xe8/0x150 [ 328.976487][ T8259] should_fail_ex+0x467/0x600 [ 328.976517][ T8259] should_failslab+0xa8/0x100 [ 328.976538][ T8259] __kvmalloc_node_noprof+0x17a/0x8a0 [ 328.976561][ T8259] ? traverse+0xf1/0x620 [ 328.976581][ T8259] ? traverse+0xf1/0x620 [ 328.976608][ T8259] traverse+0xf1/0x620 [ 328.976632][ T8259] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 328.976660][ T8259] ? seq_read_iter+0xa5/0xcb0 [ 328.976686][ T8259] seq_read_iter+0xb6b/0xcb0 [ 328.976724][ T8259] vfs_read+0x59e/0xa90 [ 328.976752][ T8259] ? __pfx_vfs_read+0x10/0x10 [ 328.976783][ T8259] ? __fget_files+0x2a/0x420 [ 328.976809][ T8259] __x64_sys_pread64+0x199/0x230 [ 328.976832][ T8259] ? __pfx___x64_sys_pread64+0x10/0x10 [ 328.976862][ T8259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.976882][ T8259] do_syscall_64+0x174/0x580 [ 328.976905][ T8259] ? trace_irq_disable+0x3b/0x140 [ 328.976931][ T8259] ? clear_bhb_loop+0x40/0x90 [ 328.976954][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.976970][ T8259] RIP: 0033:0x7f517a50de99 [ 328.976987][ T8259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.977000][ T8259] RSP: 002b:00007f5178766028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 328.977019][ T8259] RAX: ffffffffffffffda RBX: 00007f517a795fa0 RCX: 00007f517a50de99 [ 328.977032][ T8259] RDX: 00000000000000d0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 328.977043][ T8259] RBP: 00007f5178766090 R08: 0000000000000000 R09: 0000000000000000 [ 328.977054][ T8259] R10: 0000000000008d35 R11: 0000000000000246 R12: 0000000000000001 [ 328.977065][ T8259] R13: 00007f517a796038 R14: 00007f517a795fa0 R15: 00007ffd2e0b1ea8 [ 328.977094][ T8259] [ 329.507126][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.759'. [ 331.112279][ T10] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 331.117975][ T10] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 332.015120][ T5861] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 332.166899][ T10] usb 4-1: USB disconnect, device number 33 [ 332.167021][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 332.295985][ T5861] usb 5-1: unable to get BOS descriptor or descriptor too short [ 332.297080][ T5861] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 332.297121][ T5861] usb 5-1: can't read configurations, error -71 [ 333.020609][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 333.020629][ T37] audit: type=1326 audit(1784320150.237:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8291 comm="syz.3.767" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1685bade99 code=0x0 [ 333.465325][ T8298] FAULT_INJECTION: forcing a failure. [ 333.465325][ T8298] name failslab, interval 1, probability 0, space 0, times 0 [ 333.465356][ T8298] CPU: 1 UID: 0 PID: 8298 Comm: syz.2.768 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 333.465376][ T8298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 333.465386][ T8298] Call Trace: [ 333.465393][ T8298] [ 333.465400][ T8298] dump_stack_lvl+0xe8/0x150 [ 333.465429][ T8298] should_fail_ex+0x467/0x600 [ 333.465460][ T8298] should_failslab+0xa8/0x100 [ 333.465481][ T8298] __kmalloc_cache_noprof+0xa0/0x6b0 [ 333.465500][ T8298] ? sget_fc+0x70c/0x1910 [ 333.465517][ T8298] ? sget_fc+0x70c/0x1910 [ 333.465541][ T8298] sget_fc+0x70c/0x1910 [ 333.465568][ T8298] ? __pfx_test_keyed_super+0x10/0x10 [ 333.465586][ T8298] ? __pfx_set_anon_super_fc+0x10/0x10 [ 333.465608][ T8298] ? __pfx_sget_fc+0x10/0x10 [ 333.465633][ T8298] ? rcu_is_watching+0x15/0xb0 [ 333.465655][ T8298] ? cap_capable+0x123/0x460 [ 333.465671][ T8298] ? __pfx_rpc_fill_super+0x10/0x10 [ 333.465693][ T8298] get_tree_keyed+0x5c/0x170 [ 333.465716][ T8298] vfs_get_tree+0x92/0x2a0 [ 333.465739][ T8298] vfs_cmd_create+0xa2/0x200 [ 333.465765][ T8298] __se_sys_fsconfig+0x6bf/0x810 [ 333.465793][ T8298] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 333.465814][ T8298] ? ksys_write+0x248/0x270 [ 333.465836][ T8298] ? __pfx_ksys_write+0x10/0x10 [ 333.465860][ T8298] ? __x64_sys_fsconfig+0x20/0xc0 [ 333.465882][ T8298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.465904][ T8298] do_syscall_64+0x174/0x580 [ 333.465928][ T8298] ? trace_irq_disable+0x3b/0x140 [ 333.465954][ T8298] ? clear_bhb_loop+0x40/0x90 [ 333.465976][ T8298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.466016][ T8298] RIP: 0033:0x7fe20c19de99 [ 333.466033][ T8298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.466047][ T8298] RSP: 002b:00007fe20a3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 333.466066][ T8298] RAX: ffffffffffffffda RBX: 00007fe20c425fa0 RCX: 00007fe20c19de99 [ 333.466079][ T8298] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 333.466089][ T8298] RBP: 00007fe20a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 333.466100][ T8298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.466110][ T8298] R13: 00007fe20c426038 R14: 00007fe20c425fa0 R15: 00007ffd3ca389c8 [ 333.466141][ T8298] [ 333.922931][ T8311] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.954616][ T5861] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 334.277977][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 334.299622][ T5861] usb 3-1: config 0 has no interfaces? [ 334.299656][ T5861] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 334.299677][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.307943][ T5861] usb 3-1: config 0 descriptor?? [ 335.111913][ T8323] netlink: 9 bytes leftover after parsing attributes in process `syz.1.777'. [ 335.112965][ T8318] fuse: Bad value for 'fd' [ 335.151444][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.151488][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 335.151508][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.174941][ T10] usb 1-1: config 0 descriptor?? [ 335.223932][ T8327] FAULT_INJECTION: forcing a failure. [ 335.223932][ T8327] name failslab, interval 1, probability 0, space 0, times 0 [ 335.223962][ T8327] CPU: 1 UID: 0 PID: 8327 Comm: syz.1.779 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 335.223980][ T8327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 335.223989][ T8327] Call Trace: [ 335.223996][ T8327] [ 335.224004][ T8327] dump_stack_lvl+0xe8/0x150 [ 335.224034][ T8327] should_fail_ex+0x467/0x600 [ 335.224063][ T8327] should_failslab+0xa8/0x100 [ 335.224084][ T8327] kmem_cache_alloc_noprof+0xa4/0x650 [ 335.224110][ T8327] ? vm_area_dup+0x28/0x670 [ 335.224129][ T8327] ? vm_area_dup+0x28/0x670 [ 335.224153][ T8327] vm_area_dup+0x28/0x670 [ 335.224170][ T8327] ? __split_vma+0x1ce/0xa40 [ 335.224194][ T8327] __split_vma+0x1e4/0xa40 [ 335.224223][ T8327] ? unwind_get_return_address+0x4d/0x90 [ 335.224245][ T8327] ? __pfx___split_vma+0x10/0x10 [ 335.224265][ T8327] ? __lock_acquire+0x683/0x2ce0 [ 335.224292][ T8327] ? __lock_acquire+0x683/0x2ce0 [ 335.224315][ T8327] vms_gather_munmap_vmas+0x322/0x1370 [ 335.224345][ T8327] ? mtree_range_walk+0x70a/0x8c0 [ 335.224367][ T8327] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 335.224406][ T8327] ? mas_find+0xa23/0xcf0 [ 335.224429][ T8327] mmap_region+0x914/0x2310 [ 335.224468][ T8327] ? __lock_acquire+0x683/0x2ce0 [ 335.224485][ T8327] ? __pfx_mmap_region+0x10/0x10 [ 335.224507][ T8327] ? __lock_acquire+0x683/0x2ce0 [ 335.224531][ T8327] ? __lock_acquire+0x683/0x2ce0 [ 335.224607][ T8327] ? __lock_acquire+0x683/0x2ce0 [ 335.224642][ T8327] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 335.224674][ T8327] ? __lock_acquire+0x683/0x2ce0 [ 335.224692][ T8327] ? cap_mmap_addr+0xaf/0x100 [ 335.224710][ T8327] ? bpf_lsm_mmap_addr+0x9/0x50 [ 335.224733][ T8327] ? security_mmap_addr+0x71/0x240 [ 335.224753][ T8327] ? shmem_mapping+0xd/0x50 [ 335.224776][ T8327] ? memfd_check_seals_mmap+0xcb/0x210 [ 335.224796][ T8327] do_mmap+0xc1e/0x10b0 [ 335.224828][ T8327] ? __pfx_do_mmap+0x10/0x10 [ 335.224849][ T8327] ? rwbase_write_lock+0x550/0x720 [ 335.224876][ T8327] vm_mmap_pgoff+0x275/0x4e0 [ 335.224906][ T8327] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 335.224935][ T8327] ? __fget_files+0x2a/0x420 [ 335.224951][ T8327] ? __fget_files+0x3a8/0x420 [ 335.224965][ T8327] ? __fget_files+0x2a/0x420 [ 335.224983][ T8327] ksys_mmap_pgoff+0x4a6/0x720 [ 335.225008][ T8327] ? __x64_sys_mmap+0x7f/0x140 [ 335.225033][ T8327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.225050][ T8327] do_syscall_64+0x174/0x580 [ 335.225074][ T8327] ? trace_irq_disable+0x3b/0x140 [ 335.225099][ T8327] ? clear_bhb_loop+0x40/0x90 [ 335.225118][ T8327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.225131][ T8327] RIP: 0033:0x7f9f477fde99 [ 335.225147][ T8327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.225159][ T8327] RSP: 002b:00007f9f45a56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 335.225178][ T8327] RAX: ffffffffffffffda RBX: 00007f9f47a85fa0 RCX: 00007f9f477fde99 [ 335.225190][ T8327] RDX: 000000000280000b RSI: 0000000000002000 RDI: 0000200000956000 [ 335.225211][ T8327] RBP: 00007f9f45a56090 R08: 0000000000000003 R09: 0080c00100000000 [ 335.225223][ T8327] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 335.225234][ T8327] R13: 00007f9f47a86038 R14: 00007f9f47a85fa0 R15: 00007ffd062ee778 [ 335.225263][ T8327] [ 335.300542][ T5861] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 335.587620][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 335.587734][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 335.605647][ T10] usb 1-1: USB disconnect, device number 35 [ 335.613853][ T8331] FAULT_INJECTION: forcing a failure. [ 335.613853][ T8331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.613882][ T8331] CPU: 0 UID: 0 PID: 8331 Comm: syz.1.780 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 335.613912][ T8331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 335.613922][ T8331] Call Trace: [ 335.613928][ T8331] [ 335.613936][ T8331] dump_stack_lvl+0xe8/0x150 [ 335.613966][ T8331] should_fail_ex+0x467/0x600 [ 335.613997][ T8331] _copy_to_user+0x31/0xb0 [ 335.614019][ T8331] simple_read_from_buffer+0xe1/0x170 [ 335.614041][ T8331] proc_fail_nth_read+0x1be/0x230 [ 335.614058][ T8331] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 335.614086][ T8331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.614107][ T8331] ? rw_verify_area+0x250/0x4d0 [ 335.614129][ T8331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.614146][ T8331] vfs_read+0x219/0xa90 [ 335.614174][ T8331] ? __pfx_vfs_read+0x10/0x10 [ 335.614196][ T8331] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 335.614220][ T8331] ? lockdep_hardirqs_on+0x7a/0x110 [ 335.614246][ T8331] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 335.614270][ T8331] ? mutex_lock_nested+0x152/0x1d0 [ 335.614288][ T8331] ? fdget_pos+0x252/0x320 [ 335.614314][ T8331] ksys_read+0x156/0x270 [ 335.614337][ T8331] ? __pfx_ksys_read+0x10/0x10 [ 335.614364][ T8331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.614384][ T8331] do_syscall_64+0x174/0x580 [ 335.614407][ T8331] ? trace_irq_disable+0x3b/0x140 [ 335.614433][ T8331] ? clear_bhb_loop+0x40/0x90 [ 335.614455][ T8331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.614472][ T8331] RIP: 0033:0x7f9f477be6ce [ 335.614488][ T8331] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 335.614501][ T8331] RSP: 002b:00007f9f45a34fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.614520][ T8331] RAX: ffffffffffffffda RBX: 00007f9f45a356c0 RCX: 00007f9f477be6ce [ 335.614533][ T8331] RDX: 000000000000000f RSI: 00007f9f45a350a0 RDI: 0000000000000007 [ 335.614544][ T8331] RBP: 00007f9f45a35090 R08: 0000000000000000 R09: 0000000000000000 [ 335.614555][ T8331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.614566][ T8331] R13: 00007f9f47a86128 R14: 00007f9f47a86090 R15: 00007ffd062ee778 [ 335.614597][ T8331] [ 336.049330][ T8336] 9p: Could not find request transport: xen [ 336.081826][ T8340] netlink: 'syz.3.782': attribute type 13 has an invalid length. [ 336.158077][ T5733] usb 3-1: USB disconnect, device number 31 [ 336.203502][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 336.265192][ T8342] netlink: 'syz.2.784': attribute type 13 has an invalid length. [ 336.265212][ T8342] netlink: 'syz.2.784': attribute type 27 has an invalid length. [ 336.299206][ T8340] gretap0: refused to change device tx_queue_len [ 336.470258][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.470306][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 336.470325][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.537976][ T8340] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 336.580638][ T10] usb 1-1: config 0 descriptor?? [ 337.591018][ T5861] usb 5-1: unable to get BOS descriptor or descriptor too short [ 337.591946][ T5861] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 337.591976][ T5861] usb 5-1: can't read configurations, error -71 [ 337.628368][ T5733] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 337.795918][ T10] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 337.810129][ T5733] usb 3-1: Using ep0 maxpacket: 16 [ 337.812197][ T5733] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.812225][ T5733] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.812243][ T5733] usb 3-1: config 0 interface 0 has no altsetting 0 [ 337.812269][ T5733] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 337.812287][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.852122][ T5733] usb 3-1: config 0 descriptor?? [ 337.903906][ T10] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input24 [ 338.244007][ T10] usb 1-1: USB disconnect, device number 36 [ 338.244120][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 338.347088][ T5733] mcp2221 0003:04D8:00DD.001A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 338.708549][ T5733] usb 3-1: USB disconnect, device number 32 [ 339.073649][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 339.888776][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 341.063460][ T8357] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 341.063543][ T5607] Bluetooth: hci0: command 0x0406 tx timeout [ 341.183611][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.183666][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 341.183839][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.243245][ T10] usb 4-1: config 0 descriptor?? [ 341.384589][ T8390] comedi comedi1: adq12b: I/O base address or length out of range [ 341.623070][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 341.623185][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 341.647606][ T10] usb 4-1: USB disconnect, device number 34 [ 341.850069][ T8396] program syz.2.801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.107519][ T31] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 342.261798][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.261845][ T31] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 342.261865][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.271527][ T31] usb 4-1: config 0 descriptor?? [ 343.002450][ T8408] netlink: 'syz.0.805': attribute type 8 has an invalid length. [ 343.092958][ T31] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 343.103357][ T31] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 343.166606][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 343.443545][ T5601] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 343.452697][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 343.501711][ T5733] usb 4-1: USB disconnect, device number 35 [ 343.501811][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 343.614047][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 343.621464][ T5601] usb 5-1: config 0 has no interfaces? [ 343.621488][ T5601] usb 5-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 343.621499][ T5601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.653529][ T31] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 343.661997][ T5601] usb 5-1: config 0 descriptor?? [ 343.754738][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 343.755495][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 343.755514][ T10] usb 2-1: can't read configurations, error -71 [ 343.809041][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 343.809072][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 132, setting to 64 [ 343.812330][ T31] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 343.812356][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.812382][ T31] usb 1-1: Product: syz [ 343.812394][ T31] usb 1-1: Manufacturer: syz [ 343.812406][ T31] usb 1-1: SerialNumber: syz [ 343.867451][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 343.869136][ T37] audit: type=1326 audit(1784320161.121:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8415 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd614de99 code=0x7ffc0000 [ 343.869182][ T37] audit: type=1326 audit(1784320161.121:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8415 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd614de99 code=0x7ffc0000 [ 343.870832][ T37] audit: type=1326 audit(1784320161.121:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8415 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9cd614de99 code=0x7ffc0000 [ 343.871239][ T37] audit: type=1326 audit(1784320161.121:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8415 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd610e6ce code=0x7ffc0000 [ 343.871291][ T37] audit: type=1326 audit(1784320161.121:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8415 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd614de99 code=0x7ffc0000 [ 343.972129][ T37] audit: type=1326 audit(1784320161.221:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8415 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd610e6ce code=0x7ffc0000 [ 344.028643][ T31] usb 1-1: config 0 descriptor?? [ 344.031441][ T8418] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 344.072915][ T37] audit: type=1326 audit(1784320161.320:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8415 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd610e6ce code=0x7ffc0000 [ 344.130732][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 344.173768][ T37] audit: type=1326 audit(1784320161.420:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8415 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd610e6ce code=0x7ffc0000 [ 344.274699][ T37] audit: type=1326 audit(1784320161.530:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8415 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd610e6ce code=0x7ffc0000 [ 344.294337][ T31] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input26 [ 344.426812][ T37] audit: type=1326 audit(1784320161.689:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8415 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9cd614de99 code=0x7ffc0000 [ 344.473917][ T5861] usb 5-1: USB disconnect, device number 38 [ 344.674779][ T8429] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 344.674804][ T8429] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 344.674896][ T8429] vhci_hcd vhci_hcd.0: Device attached [ 344.712090][ T8431] vhci_hcd: connection closed [ 344.735465][ T1507] vhci_hcd vhci_hcd.3: stop threads [ 344.735487][ T1507] vhci_hcd vhci_hcd.3: release socket [ 344.735523][ T1507] vhci_hcd vhci_hcd.3: disconnect device [ 344.854539][ T8436] netlink: 'syz.4.815': attribute type 8 has an invalid length. [ 344.878056][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 344.897550][ T31] usb 1-1: USB disconnect, device number 37 [ 344.897665][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 345.015542][ T8440] FAULT_INJECTION: forcing a failure. [ 345.015542][ T8440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.015579][ T8440] CPU: 0 UID: 0 PID: 8440 Comm: syz.2.816 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 345.015605][ T8440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 345.015616][ T8440] Call Trace: [ 345.015693][ T8440] [ 345.015766][ T8440] dump_stack_lvl+0xe8/0x150 [ 345.015912][ T8440] should_fail_ex+0x467/0x600 [ 345.016025][ T8440] _copy_from_user+0x2d/0xb0 [ 345.016077][ T8440] ___sys_sendmsg+0x1c6/0x360 [ 345.016163][ T8440] ? __lock_acquire+0x683/0x2ce0 [ 345.016286][ T8440] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.016346][ T8440] ? __fget_files+0x2a/0x420 [ 345.016410][ T8440] ? __fget_files+0x3a8/0x420 [ 345.016437][ T8440] __x64_sys_sendmsg+0x1b7/0x290 [ 345.016458][ T8440] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.016493][ T8440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.016563][ T8440] do_syscall_64+0x174/0x580 [ 345.016674][ T8440] ? trace_irq_disable+0x3b/0x140 [ 345.016763][ T8440] ? clear_bhb_loop+0x40/0x90 [ 345.016785][ T8440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.016801][ T8440] RIP: 0033:0x7fe20c19de99 [ 345.016844][ T8440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.016858][ T8440] RSP: 002b:00007fe20a3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.016904][ T8440] RAX: ffffffffffffffda RBX: 00007fe20c425fa0 RCX: 00007fe20c19de99 [ 345.016917][ T8440] RDX: 0000000024008084 RSI: 0000200000000300 RDI: 0000000000000003 [ 345.016928][ T8440] RBP: 00007fe20a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 345.016938][ T8440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.016948][ T8440] R13: 00007fe20c426038 R14: 00007fe20c425fa0 R15: 00007ffd3ca389c8 [ 345.016977][ T8440] [ 345.078788][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 345.124924][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 345.124941][ T10] usb 2-1: config 1 has no interface number 0 [ 345.124961][ T10] usb 2-1: config 1 interface 1 has no altsetting 0 [ 345.159106][ T10] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 345.159133][ T10] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 345.159150][ T10] usb 2-1: Product: syz [ 345.159162][ T10] usb 2-1: Manufacturer: syz [ 345.159172][ T10] usb 2-1: SerialNumber: syz [ 345.430585][ T8444] FAULT_INJECTION: forcing a failure. [ 345.430585][ T8444] name failslab, interval 1, probability 0, space 0, times 0 [ 345.430617][ T8444] CPU: 0 UID: 0 PID: 8444 Comm: syz.3.819 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 345.430638][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 345.430648][ T8444] Call Trace: [ 345.430654][ T8444] [ 345.430662][ T8444] dump_stack_lvl+0xe8/0x150 [ 345.430702][ T8444] should_fail_ex+0x467/0x600 [ 345.430733][ T8444] should_failslab+0xa8/0x100 [ 345.430820][ T8444] kmem_cache_alloc_node_noprof+0xae/0x670 [ 345.430878][ T8444] ? __alloc_skb+0x1d7/0x7a0 [ 345.430971][ T8444] ? __alloc_skb+0x1d7/0x7a0 [ 345.431000][ T8444] __alloc_skb+0x1d7/0x7a0 [ 345.431028][ T8444] tcp_stream_alloc_skb+0x3f/0x5c0 [ 345.431107][ T8444] tcp_sendmsg_locked+0x143d/0x55c0 [ 345.431179][ T8444] ? __lock_acquire+0x683/0x2ce0 [ 345.431223][ T8444] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 345.431256][ T8444] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 345.431340][ T8444] ? lockdep_hardirqs_on+0x7a/0x110 [ 345.431372][ T8444] tcp_sendmsg+0x2f/0x50 [ 345.431394][ T8444] ? __pfx_inet_sendmsg+0x10/0x10 [ 345.431446][ T8444] sock_sendmsg_nosec+0x10e/0x180 [ 345.431472][ T8444] __sys_sendto+0x41e/0x5d0 [ 345.431528][ T8444] ? __pfx___sys_sendto+0x10/0x10 [ 345.431577][ T8444] ? __pfx_ksys_write+0x10/0x10 [ 345.431673][ T8444] __x64_sys_sendto+0xde/0x100 [ 345.431699][ T8444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.431719][ T8444] do_syscall_64+0x174/0x580 [ 345.431742][ T8444] ? trace_irq_disable+0x3b/0x140 [ 345.431767][ T8444] ? clear_bhb_loop+0x40/0x90 [ 345.431787][ T8444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.431802][ T8444] RIP: 0033:0x7f1685bade99 [ 345.431818][ T8444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.431831][ T8444] RSP: 002b:00007f1683e06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 345.431850][ T8444] RAX: ffffffffffffffda RBX: 00007f1685e35fa0 RCX: 00007f1685bade99 [ 345.431863][ T8444] RDX: 0000000000000381 RSI: 00002000000004c0 RDI: 0000000000000003 [ 345.431875][ T8444] RBP: 00007f1683e06090 R08: 0000000000000000 R09: 0000000000000000 [ 345.431885][ T8444] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 345.431896][ T8444] R13: 00007f1685e36038 R14: 00007f1685e35fa0 R15: 00007ffd04ddd268 [ 345.431926][ T8444] [ 345.574932][ T8448] netlink: 68 bytes leftover after parsing attributes in process `syz.4.818'. [ 346.187097][ T8457] netlink: 172 bytes leftover after parsing attributes in process `syz.3.822'. [ 346.196183][ T8457] netlink: 172 bytes leftover after parsing attributes in process `syz.3.822'. [ 346.297762][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 346.624679][ T5604] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 346.693964][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 346.693986][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 346.775649][ T197] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 346.795142][ T5604] usb 5-1: Using ep0 maxpacket: 16 [ 346.851193][ T5604] usb 5-1: unable to get BOS descriptor or descriptor too short [ 346.853551][ T5604] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 346.853586][ T5604] usb 5-1: can't read configurations, error -71 [ 346.889684][ T8472] netlink: 'syz.3.828': attribute type 8 has an invalid length. [ 346.974027][ T197] usb 3-1: config 0 has no interfaces? [ 346.974065][ T197] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 346.974086][ T197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.003108][ T10] usb 2-1: palm_os_3_probe - error -71 getting connection information [ 347.003317][ T10] visor 2-1:1.1: probe with driver visor failed with error -71 [ 347.026003][ T197] usb 3-1: config 0 descriptor?? [ 347.030319][ T10] usb 2-1: USB disconnect, device number 21 [ 347.236280][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.825'. [ 347.402666][ T8479] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 347.773880][ T31] usb 3-1: USB disconnect, device number 33 [ 347.845192][ T8489] FAULT_INJECTION: forcing a failure. [ 347.845192][ T8489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.845223][ T8489] CPU: 0 UID: 0 PID: 8489 Comm: syz.2.838 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 347.845243][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 347.845253][ T8489] Call Trace: [ 347.845260][ T8489] [ 347.845268][ T8489] dump_stack_lvl+0xe8/0x150 [ 347.845299][ T8489] should_fail_ex+0x467/0x600 [ 347.845329][ T8489] _copy_from_user+0x2d/0xb0 [ 347.845349][ T8489] ___sys_sendmsg+0x1c6/0x360 [ 347.845369][ T8489] ? __lock_acquire+0x683/0x2ce0 [ 347.845391][ T8489] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.845443][ T8489] ? __fget_files+0x2a/0x420 [ 347.845460][ T8489] ? __fget_files+0x3a8/0x420 [ 347.845495][ T8489] __x64_sys_sendmsg+0x1b7/0x290 [ 347.845515][ T8489] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.845546][ T8489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.845563][ T8489] do_syscall_64+0x174/0x580 [ 347.845584][ T8489] ? trace_irq_disable+0x3b/0x140 [ 347.845612][ T8489] ? clear_bhb_loop+0x40/0x90 [ 347.845632][ T8489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.845647][ T8489] RIP: 0033:0x7fe20c19de99 [ 347.845662][ T8489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.845676][ T8489] RSP: 002b:00007fe20a3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.845694][ T8489] RAX: ffffffffffffffda RBX: 00007fe20c425fa0 RCX: 00007fe20c19de99 [ 347.845706][ T8489] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 347.845716][ T8489] RBP: 00007fe20a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 347.845728][ T8489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.845737][ T8489] R13: 00007fe20c426038 R14: 00007fe20c425fa0 R15: 00007ffd3ca389c8 [ 347.845763][ T8489] [ 349.334233][ T197] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 349.370824][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 349.525501][ T197] usb 2-1: Using ep0 maxpacket: 32 [ 349.527248][ T197] usb 2-1: config 100 has an invalid interface number: 254 but max is 0 [ 349.527270][ T197] usb 2-1: config 100 has no interface number 0 [ 349.529739][ T197] usb 2-1: New USB device found, idVendor=045e, idProduct=0403, bcdDevice=87.3a [ 349.529762][ T197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.529778][ T197] usb 2-1: Product: syz [ 349.529790][ T197] usb 2-1: Manufacturer: syz [ 349.529802][ T197] usb 2-1: SerialNumber: syz [ 349.688811][ T5861] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 349.746960][ T8515] FAULT_INJECTION: forcing a failure. [ 349.746960][ T8515] name failslab, interval 1, probability 0, space 0, times 0 [ 349.746995][ T8515] CPU: 0 UID: 0 PID: 8515 Comm: syz.0.844 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 349.747020][ T8515] Tainted: [L]=SOFTLOCKUP [ 349.747025][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 349.747035][ T8515] Call Trace: [ 349.747043][ T8515] [ 349.747051][ T8515] dump_stack_lvl+0xe8/0x150 [ 349.747082][ T8515] should_fail_ex+0x467/0x600 [ 349.747113][ T8515] should_failslab+0xa8/0x100 [ 349.747136][ T8515] __kmalloc_noprof+0xfe/0x780 [ 349.747209][ T8515] ? rcu_is_watching+0x15/0xb0 [ 349.747284][ T8515] ? tomoyo_realpath_from_path+0xef/0x640 [ 349.747470][ T8515] ? tomoyo_realpath_from_path+0xef/0x640 [ 349.747497][ T8515] tomoyo_realpath_from_path+0xef/0x640 [ 349.747528][ T8515] ? tomoyo_path_number_perm+0x219/0x5f0 [ 349.747581][ T8515] tomoyo_path_number_perm+0x246/0x5f0 [ 349.747610][ T8515] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 349.747636][ T8515] ? __lock_acquire+0x683/0x2ce0 [ 349.747668][ T8515] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 349.747743][ T8515] ? hook_file_ioctl+0x1f3/0x600 [ 349.747791][ T8515] ? lockdep_hardirqs_on+0x7a/0x110 [ 349.747833][ T8515] ? __fget_files+0x2a/0x420 [ 349.747854][ T8515] ? __fget_files+0x2a/0x420 [ 349.747870][ T8515] ? __fget_files+0x3a8/0x420 [ 349.747886][ T8515] ? __fget_files+0x2a/0x420 [ 349.747907][ T8515] security_file_ioctl+0xc3/0x2a0 [ 349.747974][ T8515] __se_sys_ioctl+0x47/0x170 [ 349.748027][ T8515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.748046][ T8515] do_syscall_64+0x174/0x580 [ 349.748071][ T8515] ? trace_irq_disable+0x3b/0x140 [ 349.748097][ T8515] ? clear_bhb_loop+0x40/0x90 [ 349.748118][ T8515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.748135][ T8515] RIP: 0033:0x7f517a50de99 [ 349.748152][ T8515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.748167][ T8515] RSP: 002b:00007f5178766028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.748186][ T8515] RAX: ffffffffffffffda RBX: 00007f517a795fa0 RCX: 00007f517a50de99 [ 349.748197][ T8515] RDX: 0000000000000000 RSI: 00000000c0303e03 RDI: 0000000000000004 [ 349.748208][ T8515] RBP: 00007f5178766090 R08: 0000000000000000 R09: 0000000000000000 [ 349.748227][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.748238][ T8515] R13: 00007f517a796038 R14: 00007f517a795fa0 R15: 00007ffd2e0b1ea8 [ 349.748268][ T8515] [ 349.748402][ T8515] ERROR: Out of memory at tomoyo_realpath_from_path. [ 349.839423][ T8498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.839980][ T8498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.850512][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 349.936897][ T5861] usb 5-1: unable to get BOS descriptor or descriptor too short [ 349.952742][ T5861] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 349.952776][ T5861] usb 5-1: can't read configurations, error -71 [ 350.179448][ T8519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.846'. [ 350.568536][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 350.586202][ T8528] FAULT_INJECTION: forcing a failure. [ 350.586202][ T8528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.586238][ T8528] CPU: 1 UID: 0 PID: 8528 Comm: syz.2.851 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 350.586262][ T8528] Tainted: [L]=SOFTLOCKUP [ 350.586268][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 350.586282][ T8528] Call Trace: [ 350.586289][ T8528] [ 350.586296][ T8528] dump_stack_lvl+0xe8/0x150 [ 350.586328][ T8528] should_fail_ex+0x467/0x600 [ 350.586357][ T8528] _copy_from_user+0x2d/0xb0 [ 350.586376][ T8528] ___sys_sendmsg+0x1c6/0x360 [ 350.586395][ T8528] ? __lock_acquire+0x683/0x2ce0 [ 350.586418][ T8528] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.586467][ T8528] ? __fget_files+0x2a/0x420 [ 350.586484][ T8528] ? __fget_files+0x3a8/0x420 [ 350.586506][ T8528] __x64_sys_sendmsg+0x1b7/0x290 [ 350.586527][ T8528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.586560][ T8528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.586579][ T8528] do_syscall_64+0x174/0x580 [ 350.586603][ T8528] ? trace_irq_disable+0x3b/0x140 [ 350.586629][ T8528] ? clear_bhb_loop+0x40/0x90 [ 350.586649][ T8528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.586666][ T8528] RIP: 0033:0x7fe20c19de99 [ 350.586683][ T8528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.586697][ T8528] RSP: 002b:00007fe20a3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.586714][ T8528] RAX: ffffffffffffffda RBX: 00007fe20c425fa0 RCX: 00007fe20c19de99 [ 350.586727][ T8528] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 350.586738][ T8528] RBP: 00007fe20a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 350.586751][ T8528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.586761][ T8528] R13: 00007fe20c426038 R14: 00007fe20c425fa0 R15: 00007ffd3ca389c8 [ 350.586789][ T8528] [ 350.789386][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 350.840064][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 350.840092][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.840165][ T10] usb 4-1: Product: syz [ 350.840177][ T10] usb 4-1: Manufacturer: syz [ 350.840189][ T10] usb 4-1: SerialNumber: syz [ 350.893570][ T10] usb 4-1: config 0 descriptor?? [ 351.293139][ T10] gspca_main: spca508-2.14.0 probing 041e:4018 [ 351.449307][ T10] gspca_spca508: reg_read err -32 [ 351.757225][ T10] gspca_spca508: reg_read err -71 [ 351.875105][ T8542] FAULT_INJECTION: forcing a failure. [ 351.875105][ T8542] name failslab, interval 1, probability 0, space 0, times 0 [ 351.875161][ T8542] CPU: 1 UID: 0 PID: 8542 Comm: syz.2.854 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 351.875185][ T8542] Tainted: [L]=SOFTLOCKUP [ 351.875191][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 351.875202][ T8542] Call Trace: [ 351.875209][ T8542] [ 351.875218][ T8542] dump_stack_lvl+0xe8/0x150 [ 351.875249][ T8542] should_fail_ex+0x467/0x600 [ 351.875279][ T8542] should_failslab+0xa8/0x100 [ 351.875301][ T8542] __kmalloc_cache_noprof+0xa0/0x6b0 [ 351.875321][ T8542] ? alloc_pipe_info+0xe8/0x4c0 [ 351.875423][ T8542] ? alloc_pipe_info+0xe8/0x4c0 [ 351.875466][ T8542] alloc_pipe_info+0xe8/0x4c0 [ 351.875491][ T8542] splice_direct_to_actor+0xa52/0xcc0 [ 351.875557][ T8542] ? irqentry_exit+0x218/0x8f0 [ 351.875583][ T8542] ? lockdep_hardirqs_on+0x7a/0x110 [ 351.875607][ T8542] ? irqentry_exit+0x218/0x8f0 [ 351.875638][ T8542] ? __pfx_direct_splice_actor+0x10/0x10 [ 351.875657][ T8542] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 351.875677][ T8542] ? do_splice_direct+0x178/0x2a0 [ 351.875695][ T8542] ? __pfx_direct_splice_actor+0x10/0x10 [ 351.875718][ T8542] do_splice_direct+0x19b/0x2a0 [ 351.875739][ T8542] ? __pfx_do_splice_direct+0x10/0x10 [ 351.875759][ T8542] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 351.875786][ T8542] ? rw_verify_area+0x209/0x4d0 [ 351.875810][ T8542] do_sendfile+0x540/0x7e0 [ 351.875842][ T8542] ? __pfx_do_sendfile+0x10/0x10 [ 351.875877][ T8542] __se_sys_sendfile64+0x144/0x1a0 [ 351.875904][ T8542] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 351.875935][ T8542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.875961][ T8542] do_syscall_64+0x174/0x580 [ 351.875988][ T8542] ? clear_bhb_loop+0x40/0x90 [ 351.876010][ T8542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.876027][ T8542] RIP: 0033:0x7fe20c19de99 [ 351.876045][ T8542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.876059][ T8542] RSP: 002b:00007fe20a3b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 351.876079][ T8542] RAX: ffffffffffffffda RBX: 00007fe20c426180 RCX: 00007fe20c19de99 [ 351.876091][ T8542] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 351.876102][ T8542] RBP: 00007fe20a3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 351.876113][ T8542] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.876123][ T8542] R13: 00007fe20c426218 R14: 00007fe20c426180 R15: 00007ffd3ca389c8 [ 351.876152][ T8542] [ 352.560557][ T10] gspca_spca508: reg_read err -71 [ 352.561341][ T10] gspca_spca508: reg_read err -71 [ 352.561815][ T10] gspca_spca508: reg write: error -71 [ 352.562119][ T10] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 352.834629][ T10] usb 4-1: USB disconnect, device number 36 [ 353.306414][ T8548] FAULT_INJECTION: forcing a failure. [ 353.306414][ T8548] name failslab, interval 1, probability 0, space 0, times 0 [ 353.306446][ T8548] CPU: 1 UID: 0 PID: 8548 Comm: syz.2.856 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 353.306468][ T8548] Tainted: [L]=SOFTLOCKUP [ 353.306475][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 353.306484][ T8548] Call Trace: [ 353.306490][ T8548] [ 353.306497][ T8548] dump_stack_lvl+0xe8/0x150 [ 353.306527][ T8548] should_fail_ex+0x467/0x600 [ 353.306557][ T8548] should_failslab+0xa8/0x100 [ 353.306579][ T8548] __kmalloc_noprof+0xfe/0x780 [ 353.306594][ T8548] ? rcu_is_watching+0x15/0xb0 [ 353.306614][ T8548] ? tomoyo_realpath_from_path+0xef/0x640 [ 353.306635][ T8548] ? tomoyo_realpath_from_path+0xef/0x640 [ 353.306661][ T8548] tomoyo_realpath_from_path+0xef/0x640 [ 353.306690][ T8548] ? tomoyo_path_number_perm+0x219/0x5f0 [ 353.306717][ T8548] tomoyo_path_number_perm+0x246/0x5f0 [ 353.306744][ T8548] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 353.306768][ T8548] ? __lock_acquire+0x683/0x2ce0 [ 353.306799][ T8548] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 353.306825][ T8548] ? hook_file_ioctl+0x1f3/0x600 [ 353.306847][ T8548] ? lockdep_hardirqs_on+0x7a/0x110 [ 353.306888][ T8548] ? __fget_files+0x2a/0x420 [ 353.306909][ T8548] ? __fget_files+0x2a/0x420 [ 353.306924][ T8548] ? __fget_files+0x3a8/0x420 [ 353.306948][ T8548] ? __fget_files+0x2a/0x420 [ 353.306969][ T8548] security_file_ioctl+0xc3/0x2a0 [ 353.306990][ T8548] __se_sys_ioctl+0x47/0x170 [ 353.307011][ T8548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.307030][ T8548] do_syscall_64+0x174/0x580 [ 353.307055][ T8548] ? trace_irq_disable+0x3b/0x140 [ 353.307081][ T8548] ? clear_bhb_loop+0x40/0x90 [ 353.307105][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.307122][ T8548] RIP: 0033:0x7fe20c19de99 [ 353.307139][ T8548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.307153][ T8548] RSP: 002b:00007fe20a3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.307171][ T8548] RAX: ffffffffffffffda RBX: 00007fe20c425fa0 RCX: 00007fe20c19de99 [ 353.307183][ T8548] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 353.307194][ T8548] RBP: 00007fe20a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 353.307205][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.307215][ T8548] R13: 00007fe20c426038 R14: 00007fe20c425fa0 R15: 00007ffd3ca389c8 [ 353.307242][ T8548] [ 353.315519][ T8548] ERROR: Out of memory at tomoyo_realpath_from_path. [ 353.532460][ T8550] netlink: 'syz.3.857': attribute type 8 has an invalid length. [ 353.866153][ T8554] FAULT_INJECTION: forcing a failure. [ 353.866153][ T8554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.866448][ T8554] CPU: 0 UID: 0 PID: 8554 Comm: syz.4.859 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 353.866472][ T8554] Tainted: [L]=SOFTLOCKUP [ 353.866479][ T8554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 353.866492][ T8554] Call Trace: [ 353.866499][ T8554] [ 353.866506][ T8554] dump_stack_lvl+0xe8/0x150 [ 353.866537][ T8554] should_fail_ex+0x467/0x600 [ 353.866567][ T8554] _copy_from_user+0x2d/0xb0 [ 353.866587][ T8554] __sys_bpf+0x2e7/0xd90 [ 353.866708][ T8554] ? __pfx___sys_bpf+0x10/0x10 [ 353.866727][ T8554] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 353.866757][ T8554] ? rt_mutex_slowunlock+0x219/0x460 [ 353.866794][ T8554] ? ksys_write+0x248/0x270 [ 353.866816][ T8554] ? __pfx_ksys_write+0x10/0x10 [ 353.866840][ T8554] __x64_sys_bpf+0xba/0xd0 [ 353.866893][ T8554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.866911][ T8554] do_syscall_64+0x174/0x580 [ 353.866934][ T8554] ? trace_irq_disable+0x3b/0x140 [ 353.866959][ T8554] ? clear_bhb_loop+0x40/0x90 [ 353.866980][ T8554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.866996][ T8554] RIP: 0033:0x7f9cd614de99 [ 353.867013][ T8554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.867026][ T8554] RSP: 002b:00007f9cd43a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.867045][ T8554] RAX: ffffffffffffffda RBX: 00007f9cd63d5fa0 RCX: 00007f9cd614de99 [ 353.867057][ T8554] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 353.867068][ T8554] RBP: 00007f9cd43a6090 R08: 0000000000000000 R09: 0000000000000000 [ 353.867079][ T8554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.867089][ T8554] R13: 00007f9cd63d6038 R14: 00007f9cd63d5fa0 R15: 00007ffc8608de58 [ 353.867117][ T8554] [ 354.596304][ T197] usb 2-1: USB disconnect, device number 22 [ 354.688480][ T8565] tmpfs: Bad value for 'nr_blocks' [ 354.693107][ T5861] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 354.767905][ T8560] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 354.842662][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 354.847253][ T5861] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 354.847280][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.847298][ T5861] usb 5-1: Product: syz [ 354.847310][ T5861] usb 5-1: Manufacturer: syz [ 354.847322][ T5861] usb 5-1: SerialNumber: syz [ 354.882761][ T5733] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 354.904504][ T5861] usb 5-1: config 0 descriptor?? [ 354.911712][ T5861] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 355.040047][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.040196][ T5733] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 355.040217][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.076425][ T5733] usb 4-1: config 0 descriptor?? [ 355.308470][ T5733] usbhid 4-1:0.0: can't add hid device: -71 [ 355.309196][ T5733] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 355.356261][ T5733] usb 4-1: USB disconnect, device number 37 [ 355.546475][ T5717] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 355.624886][ T8589] FAULT_INJECTION: forcing a failure. [ 355.624886][ T8589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.624919][ T8589] CPU: 0 UID: 0 PID: 8589 Comm: syz.0.870 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 355.624941][ T8589] Tainted: [L]=SOFTLOCKUP [ 355.624947][ T8589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 355.624956][ T8589] Call Trace: [ 355.624964][ T8589] [ 355.624971][ T8589] dump_stack_lvl+0xe8/0x150 [ 355.625005][ T8589] should_fail_ex+0x467/0x600 [ 355.625032][ T8589] _copy_from_user+0x2d/0xb0 [ 355.625051][ T8589] ___sys_sendmsg+0x1c6/0x360 [ 355.625070][ T8589] ? __lock_acquire+0x683/0x2ce0 [ 355.625090][ T8589] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.625145][ T8589] ? __fget_files+0x2a/0x420 [ 355.625161][ T8589] ? __fget_files+0x3a8/0x420 [ 355.625186][ T8589] __x64_sys_sendmsg+0x1b7/0x290 [ 355.625205][ T8589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.625238][ T8589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.625257][ T8589] do_syscall_64+0x174/0x580 [ 355.625280][ T8589] ? trace_irq_disable+0x3b/0x140 [ 355.625303][ T8589] ? clear_bhb_loop+0x40/0x90 [ 355.625322][ T8589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.625339][ T8589] RIP: 0033:0x7f517a50de99 [ 355.625356][ T8589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.625369][ T8589] RSP: 002b:00007f5178766028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.625388][ T8589] RAX: ffffffffffffffda RBX: 00007f517a795fa0 RCX: 00007f517a50de99 [ 355.625401][ T8589] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 355.625411][ T8589] RBP: 00007f5178766090 R08: 0000000000000000 R09: 0000000000000000 [ 355.625421][ T8589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.625429][ T8589] R13: 00007f517a796038 R14: 00007f517a795fa0 R15: 00007ffd2e0b1ea8 [ 355.625456][ T8589] [ 355.697823][ T5717] usb 2-1: config 0 has no interfaces? [ 355.697866][ T5717] usb 2-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 355.697886][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.712304][ T5717] usb 2-1: config 0 descriptor?? [ 355.752754][ T8591] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 355.966275][ T5733] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 356.120498][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.120596][ T5733] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 356.120616][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.155063][ T5861] gspca_ov534_9: reg_w failed -71 [ 356.160710][ T5733] usb 4-1: config 0 descriptor?? [ 356.251823][ T5717] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 356.276977][ T8602] netlink: 36 bytes leftover after parsing attributes in process `syz.2.876'. [ 356.324520][ T8604] FAULT_INJECTION: forcing a failure. [ 356.324520][ T8604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.324552][ T8604] CPU: 0 UID: 0 PID: 8604 Comm: syz.2.877 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 356.324576][ T8604] Tainted: [L]=SOFTLOCKUP [ 356.324581][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 356.324597][ T8604] Call Trace: [ 356.324604][ T8604] [ 356.324611][ T8604] dump_stack_lvl+0xe8/0x150 [ 356.324643][ T8604] should_fail_ex+0x467/0x600 [ 356.324673][ T8604] _copy_from_user+0x2d/0xb0 [ 356.324692][ T8604] __sys_bpf+0x2e7/0xd90 [ 356.324715][ T8604] ? vfs_write+0x980/0xbb0 [ 356.324734][ T8604] ? __pfx___sys_bpf+0x10/0x10 [ 356.324777][ T8604] ? ksys_write+0x202/0x270 [ 356.324799][ T8604] ? __pfx_ksys_write+0x10/0x10 [ 356.324824][ T8604] __x64_sys_bpf+0xba/0xd0 [ 356.324849][ T8604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.324868][ T8604] do_syscall_64+0x174/0x580 [ 356.324893][ T8604] ? trace_irq_disable+0x3b/0x140 [ 356.324918][ T8604] ? clear_bhb_loop+0x40/0x90 [ 356.324943][ T8604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.324960][ T8604] RIP: 0033:0x7fe20c19de99 [ 356.324977][ T8604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.324991][ T8604] RSP: 002b:00007fe20a3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.325009][ T8604] RAX: ffffffffffffffda RBX: 00007fe20c425fa0 RCX: 00007fe20c19de99 [ 356.325022][ T8604] RDX: 000000000000000c RSI: 0000200000000cc0 RDI: 0000000000000009 [ 356.325034][ T8604] RBP: 00007fe20a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 356.325045][ T8604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.325056][ T8604] R13: 00007fe20c426038 R14: 00007fe20c425fa0 R15: 00007ffd3ca389c8 [ 356.325086][ T8604] [ 356.398009][ T5717] usb 1-1: Using ep0 maxpacket: 32 [ 356.401927][ T5717] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 356.401950][ T5717] usb 1-1: config 0 has no interface number 0 [ 356.401990][ T5717] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 356.434598][ T5717] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 356.434624][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.434641][ T5717] usb 1-1: Product: syz [ 356.434654][ T5717] usb 1-1: Manufacturer: syz [ 356.434666][ T5717] usb 1-1: SerialNumber: syz [ 356.437754][ T5861] gspca_ov534_9: Unknown sensor 0000 [ 356.437899][ T5861] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 356.451381][ T5717] usb 1-1: config 0 descriptor?? [ 356.490225][ T5717] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 356.490384][ T5717] em28xx 1-1:0.132: Video interface 132 found: [ 356.614453][ T5861] usb 5-1: USB disconnect, device number 43 [ 356.705178][ T197] usb 2-1: USB disconnect, device number 23 [ 356.875377][ T5717] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 356.891453][ T8609] vlan2: entered allmulticast mode [ 356.891474][ T8609] veth1_macvtap: entered allmulticast mode [ 357.001103][ T5733] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 357.058955][ T5733] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input27 [ 357.151481][ T8615] futex_wake_op: syz.0.873 tries to shift op by 144; fix this program [ 357.377683][ T5717] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 357.377791][ T5717] em28xx 1-1:0.132: board has no eeprom [ 357.778212][ T8620] nfs: Unknown parameter 'noacle0' [ 357.780407][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 357.780421][ T37] audit: type=1326 audit(1784320174.984:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8619 comm="syz.2.883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe20c19de99 code=0x0 [ 357.954004][ T8621] FAULT_INJECTION: forcing a failure. [ 357.954004][ T8621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.954037][ T8621] CPU: 1 UID: 0 PID: 8621 Comm: syz.1.881 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 357.954064][ T8621] Tainted: [L]=SOFTLOCKUP [ 357.954070][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 357.954079][ T8621] Call Trace: [ 357.954086][ T8621] [ 357.954093][ T8621] dump_stack_lvl+0xe8/0x150 [ 357.954125][ T8621] should_fail_ex+0x467/0x600 [ 357.954155][ T8621] _copy_from_user+0x2d/0xb0 [ 357.954176][ T8621] ___sys_recvmsg+0x173/0x5a0 [ 357.954203][ T8621] ? __pfx____sys_recvmsg+0x10/0x10 [ 357.954227][ T8621] ? __fget_files+0x2a/0x420 [ 357.954262][ T8621] ? __fget_files+0x3a8/0x420 [ 357.954288][ T8621] do_recvmmsg+0x320/0x7f0 [ 357.954325][ T8621] ? __pfx_do_recvmmsg+0x10/0x10 [ 357.954344][ T8621] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 357.954380][ T8621] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 357.954414][ T8621] __x64_sys_recvmmsg+0x198/0x250 [ 357.954435][ T8621] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 357.954463][ T8621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.954482][ T8621] do_syscall_64+0x174/0x580 [ 357.954508][ T8621] ? clear_bhb_loop+0x40/0x90 [ 357.954529][ T8621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.954546][ T8621] RIP: 0033:0x7f9f477fde99 [ 357.954562][ T8621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.954575][ T8621] RSP: 002b:00007f9f45a35028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 357.954594][ T8621] RAX: ffffffffffffffda RBX: 00007f9f47a86090 RCX: 00007f9f477fde99 [ 357.954606][ T8621] RDX: 0000000000000001 RSI: 0000200000002c80 RDI: 0000000000000003 [ 357.954616][ T8621] RBP: 00007f9f45a35090 R08: 0000000000000000 R09: 0000000000000000 [ 357.954627][ T8621] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000001 [ 357.954637][ T8621] R13: 00007f9f47a86128 R14: 00007f9f47a86090 R15: 00007ffd062ee778 [ 357.954666][ T8621] [ 358.109345][ T197] usb 4-1: USB disconnect, device number 38 [ 358.109503][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 358.534167][ T5717] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 358.534283][ T5717] em28xx 1-1:0.132: analog set to bulk mode. [ 358.544280][ T5604] em28xx 1-1:0.132: Registering V4L2 extension [ 358.857224][ T5604] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 358.898820][ T5604] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 358.899224][ T5604] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 358.899593][ T5604] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 359.020505][ T5733] usb 1-1: USB disconnect, device number 38 [ 359.049305][ T5733] em28xx 1-1:0.132: Disconnecting em28xx [ 359.242984][ T8637] FAULT_INJECTION: forcing a failure. [ 359.242984][ T8637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.243022][ T8637] CPU: 1 UID: 0 PID: 8637 Comm: syz.0.890 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 359.243046][ T8637] Tainted: [L]=SOFTLOCKUP [ 359.243052][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 359.243062][ T8637] Call Trace: [ 359.243068][ T8637] [ 359.243076][ T8637] dump_stack_lvl+0xe8/0x150 [ 359.243106][ T8637] should_fail_ex+0x467/0x600 [ 359.243135][ T8637] _copy_from_user+0x2d/0xb0 [ 359.243152][ T8637] ___sys_sendmsg+0x1c6/0x360 [ 359.243172][ T8637] ? __lock_acquire+0x683/0x2ce0 [ 359.243202][ T8637] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.243253][ T8637] ? __fget_files+0x2a/0x420 [ 359.243269][ T8637] ? __fget_files+0x3a8/0x420 [ 359.243295][ T8637] __x64_sys_sendmsg+0x1b7/0x290 [ 359.243316][ T8637] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.243355][ T8637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.243375][ T8637] do_syscall_64+0x174/0x580 [ 359.243400][ T8637] ? trace_irq_disable+0x3b/0x140 [ 359.243425][ T8637] ? clear_bhb_loop+0x40/0x90 [ 359.243447][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.243464][ T8637] RIP: 0033:0x7f517a50de99 [ 359.243480][ T8637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.243495][ T8637] RSP: 002b:00007f5178766028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.243513][ T8637] RAX: ffffffffffffffda RBX: 00007f517a795fa0 RCX: 00007f517a50de99 [ 359.243526][ T8637] RDX: 0000000004008010 RSI: 00002000000006c0 RDI: 0000000000000003 [ 359.243538][ T8637] RBP: 00007f5178766090 R08: 0000000000000000 R09: 0000000000000000 [ 359.243549][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.243559][ T8637] R13: 00007f517a796038 R14: 00007f517a795fa0 R15: 00007ffd2e0b1ea8 [ 359.243588][ T8637] [ 359.272515][ T8640] FAULT_INJECTION: forcing a failure. [ 359.272515][ T8640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.272549][ T8640] CPU: 1 UID: 0 PID: 8640 Comm: syz.2.892 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 359.272572][ T8640] Tainted: [L]=SOFTLOCKUP [ 359.272578][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 359.272588][ T8640] Call Trace: [ 359.272595][ T8640] [ 359.272602][ T8640] dump_stack_lvl+0xe8/0x150 [ 359.272633][ T8640] should_fail_ex+0x467/0x600 [ 359.272662][ T8640] _copy_from_user+0x2d/0xb0 [ 359.272682][ T8640] ___sys_sendmsg+0x1c6/0x360 [ 359.272700][ T8640] ? __lock_acquire+0x683/0x2ce0 [ 359.272723][ T8640] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.272773][ T8640] ? __fget_files+0x2a/0x420 [ 359.272789][ T8640] ? __fget_files+0x3a8/0x420 [ 359.272815][ T8640] __x64_sys_sendmsg+0x1b7/0x290 [ 359.272836][ T8640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.272871][ T8640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.272892][ T8640] do_syscall_64+0x174/0x580 [ 359.272917][ T8640] ? trace_irq_disable+0x3b/0x140 [ 359.272942][ T8640] ? clear_bhb_loop+0x40/0x90 [ 359.272980][ T8640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.272996][ T8640] RIP: 0033:0x7fe20c19de99 [ 359.273012][ T8640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.273026][ T8640] RSP: 002b:00007fe20a3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.273045][ T8640] RAX: ffffffffffffffda RBX: 00007fe20c425fa0 RCX: 00007fe20c19de99 [ 359.273057][ T8640] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 359.273069][ T8640] RBP: 00007fe20a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 359.273079][ T8640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.273089][ T8640] R13: 00007fe20c426038 R14: 00007fe20c425fa0 R15: 00007ffd3ca389c8 [ 359.273117][ T8640] [ 359.978921][ T5861] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 360.615820][ T5861] usb 2-1: config 0 has no interfaces? [ 360.615858][ T5861] usb 2-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 360.615878][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.665310][ T5861] usb 2-1: config 0 descriptor?? [ 360.989955][ T5604] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 360.989985][ T5604] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 360.989997][ T5604] em28xx 1-1:0.132: No AC97 audio processor [ 361.388625][ T5604] usb 1-1: Decoder not found [ 361.388644][ T5604] em28xx 1-1:0.132: failed to create media graph [ 361.388791][ T5604] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 361.449072][ T8626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.535356][ T8662] 8021q: VLANs not supported on gre0 [ 361.646449][ T8664] FAULT_INJECTION: forcing a failure. [ 361.646449][ T8664] name failslab, interval 1, probability 0, space 0, times 0 [ 361.646482][ T8664] CPU: 1 UID: 0 PID: 8664 Comm: syz.2.899 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 361.646514][ T8664] Tainted: [L]=SOFTLOCKUP [ 361.646520][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 361.646530][ T8664] Call Trace: [ 361.646537][ T8664] [ 361.646544][ T8664] dump_stack_lvl+0xe8/0x150 [ 361.646576][ T8664] should_fail_ex+0x467/0x600 [ 361.646605][ T8664] should_failslab+0xa8/0x100 [ 361.646627][ T8664] __kmalloc_noprof+0xfe/0x780 [ 361.646643][ T8664] ? rcu_is_watching+0x15/0xb0 [ 361.646663][ T8664] ? tomoyo_realpath_from_path+0xef/0x640 [ 361.646684][ T8664] ? tomoyo_realpath_from_path+0xef/0x640 [ 361.646711][ T8664] tomoyo_realpath_from_path+0xef/0x640 [ 361.646742][ T8664] ? tomoyo_path_number_perm+0x219/0x5f0 [ 361.646768][ T8664] tomoyo_path_number_perm+0x246/0x5f0 [ 361.646796][ T8664] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 361.646821][ T8664] ? __lock_acquire+0x683/0x2ce0 [ 361.646853][ T8664] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 361.646877][ T8664] ? hook_file_ioctl+0x1f3/0x600 [ 361.646899][ T8664] ? lockdep_hardirqs_on+0x7a/0x110 [ 361.646942][ T8664] ? __fget_files+0x2a/0x420 [ 361.646961][ T8664] ? __fget_files+0x2a/0x420 [ 361.646976][ T8664] ? __fget_files+0x3a8/0x420 [ 361.646991][ T8664] ? __fget_files+0x2a/0x420 [ 361.647010][ T8664] security_file_ioctl+0xc3/0x2a0 [ 361.647031][ T8664] __se_sys_ioctl+0x47/0x170 [ 361.647051][ T8664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.647070][ T8664] do_syscall_64+0x174/0x580 [ 361.647093][ T8664] ? trace_irq_disable+0x3b/0x140 [ 361.647117][ T8664] ? clear_bhb_loop+0x40/0x90 [ 361.647137][ T8664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.647153][ T8664] RIP: 0033:0x7fe20c19de99 [ 361.647170][ T8664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.647184][ T8664] RSP: 002b:00007fe20a3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.647203][ T8664] RAX: ffffffffffffffda RBX: 00007fe20c425fa0 RCX: 00007fe20c19de99 [ 361.647215][ T8664] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000003 [ 361.647227][ T8664] RBP: 00007fe20a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 361.647237][ T8664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.647247][ T8664] R13: 00007fe20c426038 R14: 00007fe20c425fa0 R15: 00007ffd3ca389c8 [ 361.647278][ T8664] [ 361.647285][ T8664] ERROR: Out of memory at tomoyo_realpath_from_path. [ 361.647769][ T8664] binder_alloc: 8663: binder_alloc_buf, no vma [ 361.778823][ T8657] ================================================================== [ 361.778874][ T8657] BUG: KASAN: use-after-free in v4l2_open+0x39a/0x3a0 [ 361.779013][ T8657] Read of size 4 at addr ffff88803b9c49d0 by task v4l_id/8657 [ 361.779058][ T8657] [ 361.779077][ T8657] CPU: 0 UID: 0 PID: 8657 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 361.779127][ T8657] Tainted: [L]=SOFTLOCKUP [ 361.779133][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 361.779141][ T8657] Call Trace: [ 361.779148][ T8657] [ 361.779154][ T8657] dump_stack_lvl+0xe8/0x150 [ 361.779180][ T8657] print_address_description+0x55/0x1e0 [ 361.779216][ T8657] ? v4l2_open+0x39a/0x3a0 [ 361.779234][ T8657] print_report+0x58/0x70 [ 361.779255][ T8657] kasan_report+0x117/0x150 [ 361.779311][ T8657] ? v4l2_open+0x39a/0x3a0 [ 361.779333][ T8657] v4l2_open+0x39a/0x3a0 [ 361.779354][ T8657] chrdev_open+0x4dc/0x600 [ 361.779377][ T8657] ? __pfx_chrdev_open+0x10/0x10 [ 361.779397][ T8657] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 361.779469][ T8657] ? __pfx_chrdev_open+0x10/0x10 [ 361.779488][ T8657] do_dentry_open+0x849/0x1420 [ 361.779516][ T8657] vfs_open+0x3b/0x350 [ 361.779538][ T8657] ? path_openat+0x2e49/0x3850 [ 361.779585][ T8657] path_openat+0x2e60/0x3850 [ 361.779607][ T8657] ? kmem_cache_alloc_noprof+0x355/0x650 [ 361.779631][ T8657] ? __x64_sys_openat+0x138/0x170 [ 361.779646][ T8657] ? do_syscall_64+0x174/0x580 [ 361.779670][ T8657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.779696][ T8657] do_file_open+0x23e/0x4a0 [ 361.779714][ T8657] ? lockdep_hardirqs_on+0x7a/0x110 [ 361.779737][ T8657] ? __pfx_do_file_open+0x10/0x10 [ 361.779766][ T8657] ? alloc_fd+0x654/0x6d0 [ 361.779821][ T8657] do_sys_openat2+0x115/0x200 [ 361.779846][ T8657] ? __pfx_do_sys_openat2+0x10/0x10 [ 361.779869][ T8657] ? exc_page_fault+0x6a/0xc0 [ 361.779893][ T8657] ? do_user_addr_fault+0xc4a/0x1340 [ 361.779994][ T8657] __x64_sys_openat+0x138/0x170 [ 361.780011][ T8657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.780029][ T8657] do_syscall_64+0x174/0x580 [ 361.780051][ T8657] ? trace_irq_disable+0x3b/0x140 [ 361.780076][ T8657] ? clear_bhb_loop+0x40/0x90 [ 361.780095][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.780112][ T8657] RIP: 0033:0x7fd6c358a407 [ 361.780128][ T8657] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 361.780143][ T8657] RSP: 002b:00007fff0c9a0fe0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 361.780162][ T8657] RAX: ffffffffffffffda RBX: 00007fd6c349c880 RCX: 00007fd6c358a407 [ 361.780175][ T8657] RDX: 0000000000000000 RSI: 00007fff0c9a1f1b RDI: ffffffffffffff9c [ 361.780186][ T8657] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 361.780197][ T8657] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 361.780206][ T8657] R13: 00007fff0c9a1230 R14: 00007fd6c3d20000 R15: 000055c290f964d8 [ 361.780227][ T8657] [ 361.780233][ T8657] [ 361.780237][ T8657] The buggy address belongs to the physical page: [ 361.780255][ T8657] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803b9c6c00 pfn:0x3b9c4 [ 361.780271][ T8657] flags: 0x80000000000000(node=0|zone=1) [ 361.780295][ T8657] raw: 0080000000000000 ffffea0000ff4608 ffff8880b8642e40 0000000000000000 [ 361.780309][ T8657] raw: ffff88803b9c6c00 0000000000000000 00000000ffffffff 0000000000000000 [ 361.780318][ T8657] page dumped because: kasan: bad access detected [ 361.780330][ T8657] page_owner tracks the page as freed [ 361.780336][ T8657] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5604, tgid 5604 (kworker/0:4), ts 358579017043, free_ts 361769135833 [ 361.780363][ T8657] post_alloc_hook+0x1f9/0x250 [ 361.780439][ T8657] get_page_from_freelist+0x262a/0x26a0 [ 361.780455][ T8657] __alloc_frozen_pages_noprof+0x18d/0x380 [ 361.780471][ T8657] alloc_pages_mpol+0xce/0x280 [ 361.780512][ T8657] ___kmalloc_large_node+0x4c/0x120 [ 361.780525][ T8657] __kmalloc_large_noprof+0x1a/0x90 [ 361.780539][ T8657] em28xx_v4l2_init+0xda/0x3270 [ 361.780617][ T8657] em28xx_init_extension+0x120/0x1d0 [ 361.780635][ T8657] process_scheduled_works+0xa8e/0x14e0 [ 361.780684][ T8657] worker_thread+0xa47/0xfb0 [ 361.780701][ T8657] kthread+0x388/0x470 [ 361.780747][ T8657] ret_from_fork+0x514/0xb70 [ 361.780828][ T8657] ret_from_fork_asm+0x1a/0x30 [ 361.780842][ T8657] page last free pid 5604 tgid 5604 stack trace: [ 361.780852][ T8657] __free_frozen_pages+0x10e7/0x11c0 [ 361.780866][ T8657] em28xx_v4l2_init+0x1884/0x3270 [ 361.780885][ T8657] em28xx_init_extension+0x120/0x1d0 [ 361.780902][ T8657] process_scheduled_works+0xa8e/0x14e0 [ 361.780918][ T8657] worker_thread+0xa47/0xfb0 [ 361.780934][ T8657] kthread+0x388/0x470 [ 361.780953][ T8657] ret_from_fork+0x514/0xb70 [ 361.780972][ T8657] ret_from_fork_asm+0x1a/0x30 [ 361.780992][ T8657] [ 361.780996][ T8657] Memory state around the buggy address: [ 361.781004][ T8657] ffff88803b9c4880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 361.781015][ T8657] ffff88803b9c4900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 361.781026][ T8657] >ffff88803b9c4980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 361.781034][ T8657] ^ [ 361.781077][ T8657] ffff88803b9c4a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 361.781088][ T8657] ffff88803b9c4a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 361.781096][ T8657] ================================================================== [ 361.793052][ T8657] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 361.793074][ T8657] CPU: 0 UID: 0 PID: 8657 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 361.793097][ T8657] Tainted: [L]=SOFTLOCKUP [ 361.793103][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 361.793113][ T8657] Call Trace: [ 361.793119][ T8657] [ 361.793126][ T8657] vpanic+0x56c/0xa60 [ 361.793147][ T8657] ? rcu_is_watching+0x15/0xb0 [ 361.793167][ T8657] ? __pfx_vpanic+0x10/0x10 [ 361.793188][ T8657] panic+0xc5/0xd0 [ 361.793201][ T8657] ? __pfx_panic+0x10/0x10 [ 361.793216][ T8657] ? preempt_schedule_thunk+0x16/0x40 [ 361.793236][ T8657] ? preempt_schedule_thunk+0x16/0x40 [ 361.793255][ T8657] ? v4l2_open+0x39a/0x3a0 [ 361.793273][ T8657] check_panic_on_warn+0x89/0xb0 [ 361.793357][ T8657] ? v4l2_open+0x39a/0x3a0 [ 361.793370][ T8657] end_report+0x73/0x170 [ 361.793388][ T8657] ? v4l2_open+0x39a/0x3a0 [ 361.793400][ T8657] kasan_report+0x128/0x150 [ 361.793414][ T8657] ? v4l2_open+0x39a/0x3a0 [ 361.793430][ T8657] v4l2_open+0x39a/0x3a0 [ 361.793445][ T8657] chrdev_open+0x4dc/0x600 [ 361.793462][ T8657] ? __pfx_chrdev_open+0x10/0x10 [ 361.793478][ T8657] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 361.793498][ T8657] ? __pfx_chrdev_open+0x10/0x10 [ 361.793512][ T8657] do_dentry_open+0x849/0x1420 [ 361.793533][ T8657] vfs_open+0x3b/0x350 [ 361.793548][ T8657] ? path_openat+0x2e49/0x3850 [ 361.793564][ T8657] path_openat+0x2e60/0x3850 [ 361.793580][ T8657] ? kmem_cache_alloc_noprof+0x355/0x650 [ 361.793598][ T8657] ? __x64_sys_openat+0x138/0x170 [ 361.793609][ T8657] ? do_syscall_64+0x174/0x580 [ 361.793629][ T8657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.793649][ T8657] do_file_open+0x23e/0x4a0 [ 361.793662][ T8657] ? lockdep_hardirqs_on+0x7a/0x110 [ 361.793682][ T8657] ? __pfx_do_file_open+0x10/0x10 [ 361.793704][ T8657] ? alloc_fd+0x654/0x6d0 [ 361.793725][ T8657] do_sys_openat2+0x115/0x200 [ 361.793743][ T8657] ? __pfx_do_sys_openat2+0x10/0x10 [ 361.793760][ T8657] ? exc_page_fault+0x6a/0xc0 [ 361.793778][ T8657] ? do_user_addr_fault+0xc4a/0x1340 [ 361.793798][ T8657] __x64_sys_openat+0x138/0x170 [ 361.793810][ T8657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.793823][ T8657] do_syscall_64+0x174/0x580 [ 361.793840][ T8657] ? trace_irq_disable+0x3b/0x140 [ 361.793859][ T8657] ? clear_bhb_loop+0x40/0x90 [ 361.793873][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.793886][ T8657] RIP: 0033:0x7fd6c358a407 [ 361.793898][ T8657] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 361.793909][ T8657] RSP: 002b:00007fff0c9a0fe0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 361.793924][ T8657] RAX: ffffffffffffffda RBX: 00007fd6c349c880 RCX: 00007fd6c358a407 [ 361.793933][ T8657] RDX: 0000000000000000 RSI: 00007fff0c9a1f1b RDI: ffffffffffffff9c [ 361.793942][ T8657] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 361.793949][ T8657] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 361.793957][ T8657] R13: 00007fff0c9a1230 R14: 00007fd6c3d20000 R15: 000055c290f964d8 [ 361.793973][ T8657] [ 361.795460][ T8657] Kernel Offset: disabled