last executing test programs: 12.744234052s ago: executing program 1 (id=5581): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32=r1, @ANYBLOB="140006000000000000000000000000000000000114000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 11.699542014s ago: executing program 1 (id=5583): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) capset(0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, 0x0, &(0x7f0000000480)=""/70, 0x100000}) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000007c0)='fdinfo\x00') getdents64(r3, 0x0, 0x55) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4c004) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 11.543760738s ago: executing program 1 (id=5585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711045000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c", 0x62}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x10000}) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) getpid() 9.063549149s ago: executing program 1 (id=5587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711045000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c", 0x62}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x10000}) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) getpid() 6.888959748s ago: executing program 4 (id=5594): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4404) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r2, 0x800, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x54) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) socket$inet6_tcp(0xa, 0x1, 0x0) 5.324648452s ago: executing program 1 (id=5598): syz_usb_connect$uac3(0x0, 0xdf, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x1a, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0x22, 0x30, 0xcf}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x13, 0x81}, [@power_domain={0x9, 0x24, 0x10, 0x8, 0xf, 0x93, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x80, 0x4, 0x3, 0xa, 'X(', '?kE'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x0, 0x0, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0x81, 0xa7, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0xd9, 0x1, {0xa, 0x25, 0x25, 0x9, 0xaf, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0xf862, 0x71, 0x2e}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x6, 0xf, 0x8}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0x4, 0x6, "", "3e1a"}, @as_header={0x17, 0x24, 0x1, 0x16, 0x743, 0x6, 0x3, 0xa, 0x1f, 0x7, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x7, 0x0, {0xa, 0x25, 0x25, 0x51759760, 0xd9, 0x6}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x6, 0x5, 0x9, 0xff, 0x7f}, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="050f37000314100405ba3aea327d522ce8592ef2eaad7f8fe51410047fe95ef4e46c877f56a8c910023f0eebc300000000020002036000"], 0x3, [{0x42, &(0x7f00000001c0)=@string={0x42, 0x3, "42f88583096a9029bb0db50683226731daea7228f9e314ae58ecaf9270388cd8ed7c86532e6f506813544f4525bd257d62c99d69d2ae703680ec1d915b22d075"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x426}}, {0x5d, &(0x7f0000000300)=@string={0x5d, 0x3, "77a5300795a236f1762177f5a3e1a4bee480f09f424d6f0655d1325fe1840191e9fbcff6d3b6e2329d0ed08be3a5d820c9ef0f8e8820f6685c329f3f81fb01665f884f85f26414f8b692766168f20d48d813f06a29c9a0320598cb"}}]}) 5.13269326s ago: executing program 3 (id=5601): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.901412342s ago: executing program 4 (id=5604): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 4.76200417s ago: executing program 3 (id=5607): r0 = eventfd2(0x1, 0x80801) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)='n', 0x1}], 0x1) (fail_nth: 1) 4.753116821s ago: executing program 4 (id=5608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711045000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c", 0x62}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x10000}) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) getpid() 4.392386165s ago: executing program 3 (id=5612): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000300)="80", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={'pimreg1\x00', {0x2, 0x4e22, @loopback}}) sendmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="86af849f5453b48d8c87642cfabc6fe4b835f0456003d0bb496eab5ff6a23f9eab", 0x21}, {&(0x7f0000000180)="526e9bbf60c6a8", 0x7}, {&(0x7f0000000340)="b2aa9a22b7994a32bb5de0991d91e4b9f1bde752a37cb3e8f52f860945592401c38009c88e6fe5cea198eb7e3d8fdc54f31ea136bf815749f308a923c141b8e2c009775fea8676f8011068b8d5bb7732fa95c0218ab14f700ea7c02952d877a5982f30fe2705d7e1c019c5665c064fa3001ce33d1d7043b52b7ac2261d25473ecc90a4fe8403a82d39ecdbc6c214a41744cee8ffe0f491005db01b719c91fe94fb9e0cc3b38c11a5aa8f744f6ed6613a9149be57db5dfde082d32d563be7423ea87b5440d0a0cb4c3a2ce24885", 0xcd}], 0x3}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x200, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b9f49fcdb15400c26a048835c8c82b8af00", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "6a3fcb2e83b497c83f8224f6e8d9fe09"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000005c0)=""/19, 0x13}], 0x2}, 0x2}], 0x1, 0x40, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r7, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) syz_open_procfs$pagemap(r5, &(0x7f0000000280)) 3.306429459s ago: executing program 4 (id=5614): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0x9, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000280)=0x6c, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x3ffffffe}], 0x1, 0x40002000, 0x0) (fail_nth: 1) 2.922786902s ago: executing program 3 (id=5617): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.826761296s ago: executing program 0 (id=5619): syz_open_dev$vbi(0x0, 0x3, 0x2) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (fail_nth: 1) 2.040675699s ago: executing program 0 (id=5621): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0x2c, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) recvmmsg(r0, &(0x7f000000b100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/203, 0xcb}}], 0x1, 0x2, 0x0) (async) r1 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x9) fchdir(r2) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x6, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x8000, 0x1000, &(0x7f0000000240)=""/4096, 0x41000, 0x20, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000001280)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000012c0)={0x0, 0x7, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001300)=[{0x0, 0x4, 0xb, 0x5}, {0x5, 0x3, 0xd, 0x2}, {0x4, 0x5, 0x6, 0x8}, {0x0, 0x5}, {0x4, 0x2, 0x8, 0x7}, {0x5, 0x4, 0xf, 0xa}, {0x2, 0x1, 0xc, 0x5}], 0x10, 0x6}, 0x94) 1.916168242s ago: executing program 0 (id=5623): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec773000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000100)=0xc, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.915232956s ago: executing program 3 (id=5624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711045000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c", 0x62}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x10000}) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) getpid() 1.88048276s ago: executing program 2 (id=5625): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) 780.975466ms ago: executing program 3 (id=5626): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/resume_offset', 0xa8081, 0x41) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x10001, 0x18}, 0xc) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x200100, 0x0) r4 = timerfd_create(0x0, 0x80800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) vmsplice(r5, &(0x7f00000007c0)=[{&(0x7f0000000180)="bb68", 0x2}], 0x1, 0x1) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r3) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r6, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x535}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfc3c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8810) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) poll(&(0x7f0000000400)=[{r0, 0x10}, {0xffffffffffffffff, 0x1000}, {r2, 0x26}, {r3, 0x204}, {r4, 0x8000}, {r7, 0x1060}, {r8, 0x200}, {r9, 0x1200}, {r10, 0x32c}], 0x9, 0x400) semtimedop(0x0, 0x0, 0x1f4, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="230900000000000000000100000005000700000000000800090000005d00060002000100000008000a0000000000080017"], 0x3c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) getpriority(0x1, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r13, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x15, 0x1, 'hash:ip,port,net\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c4}, 0x40000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000010680)={0x4a, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) socket$vsock_stream(0x28, 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000047c0), 0x80000, 0x0) 685.574786ms ago: executing program 2 (id=5627): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYBLOB="d72b77075d1bc13a66490b3b5ec8d4dc69a9655d87c3dc794c58be61161f1d45f3f55fa40ccb54127e40366f2091ac9a962325a166db050b1d635cf151a32c331e629bab1878f2f32fc583b4191f05a0c3d3401cffe1be93a46f2d85ceea602b954f87cd8a868b5c84a6d2b4bfa4e57b114cafaf2abd4765b2c12802673579d8be4c8f7d72c443ae7fdb0186b930151b8fa28704da0c44301475e4a05659d598bd087fc4159f1dc4a08f9184011633985946c908920d141cbc88149f422a50c1ef87d74ba3f30c1e36c1"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pidfd_send_signal(0xffffffffffffffff, 0x8, 0x0, 0xf8) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x1, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 667.710356ms ago: executing program 0 (id=5628): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 583.739161ms ago: executing program 2 (id=5629): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r3 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11f031bf8ed23da02f7a291fcc59c4382ecb979d1e92e19420e0ee84", 0x4b, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 581.661081ms ago: executing program 1 (id=5630): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x600050c) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$loop(0x0, 0x6, 0x446c00) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2000) syz_usb_disconnect(r5) syz_usb_connect(0x6, 0x36, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x5501, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) setsockopt(r3, 0x84, 0xa1, 0x0, 0x0) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r3, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) sendto$rxrpc(r6, &(0x7f0000000140)="9f5a5218b69e72650a23df604a13e743d4a62ed40705aa39", 0x18, 0x14, &(0x7f0000000200)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x170, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x417}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x93}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xeb}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x5}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2b19}]}]}, 0x170}}, 0x10) 469.848734ms ago: executing program 0 (id=5631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)={0x0, 0x7ff}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1400000009060108000000800000000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711839000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000040)=@proc={0x10, 0x0, 0x3, 0x1000}, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0x22, 0xd5, &(0x7f0000000280)="a5b9094ed5a741b229ab8012798fd35949243102dd75876968883c5c80dcb7b58d4c", &(0x7f0000000440)=""/213, 0x6ca, 0x0, 0x74, 0xeb, &(0x7f0000000300)="4fed4a989afac8434fdfaed3da14893da87b7412d42dd5bc0abbaeba22c2253435bf16a75ad1ac0ac7be5eff77885172ce4a903104ef16d67cb78617cee712a6e0fd2fc929b377f031e11e55b90f98352738e687cf6302a97408db0606926017b6d193e49d43d72bb27c43c6961c9d77cea259a2", &(0x7f0000000640)="c812e35b6fc39d63eacefef3e3bbcb22a3642574088dca53389d30bf3d12e9662b6247eee64afd529ab6742220e299570cf7d86f9ae8d0a24f281125a8e5981ea9d8df50109071cbaefe6cd9fa3057b7ff144300dcbc506622fa380ff861a1f185480260ea4765ae7e69c386c413e194a978003fd0708624108286bd17f89462c8f1ae45e2feefd4fc4761937d785bdcb335336a02d0939ed8a4af1f93bae43897eb2e0f42a33ce6c709266d8a35b474f544d83e16e35e52f0cc74a6b6f5f51cd2c0e65ec7c710b7ab73d987f9acbdad46716e356e334a8ed8945bf6d9ec0bd7007f96eca88cdc517d9040", 0x5, 0x0, 0x8}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0x22, 0xd5, &(0x7f0000000280)="a5b9094ed5a741b229ab8012798fd35949243102dd75876968883c5c80dcb7b58d4c", &(0x7f0000000440)=""/213, 0x6ca, 0x0, 0x74, 0xeb, &(0x7f0000000300)="4fed4a989afac8434fdfaed3da14893da87b7412d42dd5bc0abbaeba22c2253435bf16a75ad1ac0ac7be5eff77885172ce4a903104ef16d67cb78617cee712a6e0fd2fc929b377f031e11e55b90f98352738e687cf6302a97408db0606926017b6d193e49d43d72bb27c43c6961c9d77cea259a2", &(0x7f0000000640)="c812e35b6fc39d63eacefef3e3bbcb22a3642574088dca53389d30bf3d12e9662b6247eee64afd529ab6742220e299570cf7d86f9ae8d0a24f281125a8e5981ea9d8df50109071cbaefe6cd9fa3057b7ff144300dcbc506622fa380ff861a1f185480260ea4765ae7e69c386c413e194a978003fd0708624108286bd17f89462c8f1ae45e2feefd4fc4761937d785bdcb335336a02d0939ed8a4af1f93bae43897eb2e0f42a33ce6c709266d8a35b474f544d83e16e35e52f0cc74a6b6f5f51cd2c0e65ec7c710b7ab73d987f9acbdad46716e356e334a8ed8945bf6d9ec0bd7007f96eca88cdc517d9040", 0x5, 0x0, 0x8}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10400, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10400, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000200)={'macvlan1\x00', @local}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000200)={'macvlan1\x00', @local}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11, 0x0, r9}, 0x10) (async) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11, 0x0, r9}, 0x10) bind$xdp(r9, &(0x7f0000000040)={0x2c, 0x9, r11, 0x2e, r9}, 0x10) (async) bind$xdp(r9, &(0x7f0000000040)={0x2c, 0x9, r11, 0x2e, r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000080)={0xdd59, 0x2, 0x9, 0x8, 0x81}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790018000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 393.137595ms ago: executing program 2 (id=5632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='9', 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000140)={0x11}) close(r0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, 0x0) 330.428776ms ago: executing program 2 (id=5633): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket(0x25, 0x5, 0x4) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xae65, 0x0, 0x20003, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r5]) close_range(r0, 0xffffffffffffffff, 0x0) 168.342959ms ago: executing program 0 (id=5634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="850000002f000000d7000000100000009500000000000000423d19f1e4e058f160906b507e5120a0425f48f9550dcf76fc596696e6f89a4a2b1d29eadfdabd5217ba2d02d98d17b488d5437e04555f3dc719afc000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) 168.185606ms ago: executing program 4 (id=5635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb3}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '+'}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 506.045µs ago: executing program 2 (id=5636): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa0cc1, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @mcast2, 0x4000000, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xb) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r4, &(0x7f0000000380), 0xfffffffffffffffe) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='status\x00') read$FUSE(r7, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) 0s ago: executing program 4 (id=5637): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000019380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) fcntl$getflags(r0, 0xb) socket$xdp(0x2c, 0x3, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d", 0x4, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r5, r6}, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806000108040604"], 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xfffffffffffffe36, 0x30, &(0x7f0000000200)="42eae1d377a6288e0296ce75", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000194c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000e0000000800000000000000000000000000000000f228d08cd52c53d07de9fb5f5ca97d86a090a7d609721466a6add16cfbb14a9040550c3bba07384f9f0c86f6283a06a10542e7329aa38b63ac5f84647ea6de65d766cd7685a2b892610dcb04fc4dc1a2136a7d0f759359f2a692ebb4aba5b2cbb334dba89e814ea2"], 0x50) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r4}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000019400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r8, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000000300000005000000000000000000000000000c00000000009b1f3397cb395556842cb989d50423a176fc5dc31d99811826a342ee594c9e5a48387f258e5f32ae65d1d81d255ca2e4bebb7c3f0331e5639cf7c409fd10103589003e890418087ad024e5ff5bd4b451d2ef90eb5e3c60907f2627b7756946118c15477c4dede8b0"], 0x50) kernel console output (not intermixed with test programs): x7f756f18c799 code=0x7ffc0000 [ 686.492789][ T36] audit: type=1326 audit(1773225033.422:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19567 comm="syz.3.5138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756f18c799 code=0x7ffc0000 [ 686.492827][ T36] audit: type=1326 audit(1773225033.422:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19567 comm="syz.3.5138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f756f18c799 code=0x7ffc0000 [ 686.620994][ T36] audit: type=1326 audit(1773225033.544:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19567 comm="syz.3.5138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756f18c799 code=0x7ffc0000 [ 686.680939][T10148] gs_usb 5-1:0.0: Couldn't send data format (err=-71) [ 686.680982][T10148] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 686.709119][T10148] usb 5-1: USB disconnect, device number 33 [ 690.139990][T10148] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 690.289723][T10148] usb 2-1: device descriptor read/64, error -71 [ 690.618999][T19637] FAULT_INJECTION: forcing a failure. [ 690.618999][T19637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.619059][T19637] CPU: 0 UID: 0 PID: 19637 Comm: syz.2.5158 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 690.619085][T19637] Tainted: [L]=SOFTLOCKUP [ 690.619092][T19637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 690.619103][T19637] Call Trace: [ 690.619111][T19637] [ 690.619120][T19637] dump_stack_lvl+0xe8/0x150 [ 690.619151][T19637] should_fail_ex+0x46b/0x600 [ 690.619177][T19637] _copy_from_user+0x2d/0xb0 [ 690.619201][T19637] ___sys_sendmsg+0x1c6/0x360 [ 690.619233][T19637] ? __pfx____sys_sendmsg+0x10/0x10 [ 690.619291][T19637] ? __fget_files+0x2a/0x420 [ 690.619313][T19637] ? __fget_files+0x3a6/0x420 [ 690.619344][T19637] __sys_sendmmsg+0x282/0x4e0 [ 690.619374][T19637] ? __pfx___sys_sendmmsg+0x10/0x10 [ 690.619437][T19637] __x64_sys_sendmmsg+0xa0/0xc0 [ 690.619464][T19637] do_syscall_64+0x14d/0xf80 [ 690.619487][T19637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.619506][T19637] ? clear_bhb_loop+0x40/0x90 [ 690.619528][T19637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.619547][T19637] RIP: 0033:0x7fba2b0ac799 [ 690.619565][T19637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.619581][T19637] RSP: 002b:00007fba292bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 690.619601][T19637] RAX: ffffffffffffffda RBX: 00007fba2b326180 RCX: 00007fba2b0ac799 [ 690.619615][T19637] RDX: 0000000000000004 RSI: 00002000000042c0 RDI: 0000000000000007 [ 690.619628][T19637] RBP: 00007fba292bc090 R08: 0000000000000000 R09: 0000000000000000 [ 690.619640][T19637] R10: 000000000000c054 R11: 0000000000000246 R12: 0000000000000001 [ 690.619652][T19637] R13: 00007fba2b326218 R14: 00007fba2b326180 R15: 00007ffd5c22e748 [ 690.619682][T19637] [ 690.621952][T19637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5158'. [ 691.166343][T10148] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 691.369654][T10148] usb 2-1: device descriptor read/64, error -71 [ 691.487558][T10148] usb usb2-port1: attempt power cycle [ 692.812451][T19693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5159'. [ 693.252081][ T5805] Bluetooth: hci3: link tx timeout [ 693.252386][ T5805] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 693.351416][T19698] netlink: 'syz.4.5163': attribute type 11 has an invalid length. [ 693.601400][T19705] FAULT_INJECTION: forcing a failure. [ 693.601400][T19705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.601438][T19705] CPU: 1 UID: 0 PID: 19705 Comm: syz.2.5176 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 693.601463][T19705] Tainted: [L]=SOFTLOCKUP [ 693.601470][T19705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 693.601481][T19705] Call Trace: [ 693.601489][T19705] [ 693.601497][T19705] dump_stack_lvl+0xe8/0x150 [ 693.601528][T19705] should_fail_ex+0x46b/0x600 [ 693.601558][T19705] _copy_to_user+0x31/0xb0 [ 693.601584][T19705] simple_read_from_buffer+0xe1/0x170 [ 693.601612][T19705] proc_fail_nth_read+0x1be/0x230 [ 693.601636][T19705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 693.601661][T19705] ? rw_verify_area+0x2ac/0x4e0 [ 693.601684][T19705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 693.601707][T19705] vfs_read+0x212/0xa80 [ 693.601739][T19705] ? __pfx_vfs_read+0x10/0x10 [ 693.601765][T19705] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 693.601790][T19705] ? lockdep_hardirqs_on+0x7a/0x110 [ 693.601813][T19705] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 693.601835][T19705] ? mutex_lock_nested+0x152/0x1d0 [ 693.601852][T19705] ? fdget_pos+0x252/0x320 [ 693.601883][T19705] ksys_read+0x156/0x270 [ 693.601909][T19705] ? __pfx_ksys_read+0x10/0x10 [ 693.601944][T19705] do_syscall_64+0x14d/0xf80 [ 693.601965][T19705] ? trace_irq_disable+0x3b/0x150 [ 693.601985][T19705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.602003][T19705] ? clear_bhb_loop+0x40/0x90 [ 693.602026][T19705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.602051][T19705] RIP: 0033:0x7fba2b06cfce [ 693.602069][T19705] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 693.602085][T19705] RSP: 002b:00007fba292fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 693.602105][T19705] RAX: ffffffffffffffda RBX: 00007fba292fe6c0 RCX: 00007fba2b06cfce [ 693.602119][T19705] RDX: 000000000000000f RSI: 00007fba292fe0a0 RDI: 0000000000000004 [ 693.602131][T19705] RBP: 00007fba292fe090 R08: 0000000000000000 R09: 0000000000000000 [ 693.602143][T19705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.602155][T19705] R13: 00007fba2b326038 R14: 00007fba2b325fa0 R15: 00007ffd5c22e748 [ 693.602186][T19705] [ 694.107646][ T5882] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 694.128980][ T5879] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 694.216193][T19728] FAULT_INJECTION: forcing a failure. [ 694.216193][T19728] name failslab, interval 1, probability 0, space 0, times 0 [ 694.216226][T19728] CPU: 0 UID: 0 PID: 19728 Comm: syz.2.5182 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 694.216251][T19728] Tainted: [L]=SOFTLOCKUP [ 694.216257][T19728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 694.216268][T19728] Call Trace: [ 694.216277][T19728] [ 694.216288][T19728] dump_stack_lvl+0xe8/0x150 [ 694.216317][T19728] should_fail_ex+0x46b/0x600 [ 694.216343][T19728] should_failslab+0xa8/0x100 [ 694.216363][T19728] __kmalloc_noprof+0xdf/0x7b0 [ 694.216386][T19728] ? kfree+0x4d/0x6c0 [ 694.216407][T19728] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 694.216431][T19728] tomoyo_realpath_from_path+0xe3/0x5d0 [ 694.216457][T19728] ? tomoyo_path_number_perm+0x219/0x630 [ 694.216481][T19728] tomoyo_path_number_perm+0x246/0x630 [ 694.216505][T19728] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 694.216531][T19728] ? __lock_acquire+0x6b5/0x2cf0 [ 694.216580][T19728] ? __fget_files+0x2a/0x420 [ 694.216605][T19728] ? __fget_files+0x2a/0x420 [ 694.216624][T19728] ? __fget_files+0x3a6/0x420 [ 694.216644][T19728] ? __fget_files+0x2a/0x420 [ 694.216668][T19728] security_file_ioctl+0xc3/0x2a0 [ 694.216696][T19728] __se_sys_ioctl+0x47/0x170 [ 694.216723][T19728] do_syscall_64+0x14d/0xf80 [ 694.216746][T19728] ? trace_irq_disable+0x3b/0x150 [ 694.216764][T19728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.216782][T19728] ? clear_bhb_loop+0x40/0x90 [ 694.216804][T19728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.216822][T19728] RIP: 0033:0x7fba2b0ac799 [ 694.216839][T19728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.216855][T19728] RSP: 002b:00007fba292fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 694.216874][T19728] RAX: ffffffffffffffda RBX: 00007fba2b325fa0 RCX: 00007fba2b0ac799 [ 694.216887][T19728] RDX: 0000200000000080 RSI: 000000004010744d RDI: 0000000000000003 [ 694.216899][T19728] RBP: 00007fba292fe090 R08: 0000000000000000 R09: 0000000000000000 [ 694.216910][T19728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.216920][T19728] R13: 00007fba2b326038 R14: 00007fba2b325fa0 R15: 00007ffd5c22e748 [ 694.216947][T19728] [ 694.218535][T19728] ERROR: Out of memory at tomoyo_realpath_from_path. [ 694.289433][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 694.292510][ T5879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.292533][ T5879] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 694.312171][ T5879] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 694.329941][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.329966][ T5879] usb 2-1: Product: syz [ 694.329980][ T5879] usb 2-1: Manufacturer: syz [ 694.330000][ T5879] usb 2-1: SerialNumber: syz [ 694.332251][T19213] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 694.450083][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.450277][ T5799] Bluetooth: hci3: link tx timeout [ 694.450292][ T5799] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 694.452888][ T5882] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 694.452913][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 694.452932][ T5882] usb 4-1: Manufacturer: syz [ 694.452945][ T5882] usb 4-1: SerialNumber: syz [ 694.551176][T19732] FAULT_INJECTION: forcing a failure. [ 694.551176][T19732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.551233][T19732] CPU: 0 UID: 0 PID: 19732 Comm: syz.0.5183 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 694.551259][T19732] Tainted: [L]=SOFTLOCKUP [ 694.551266][T19732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 694.551278][T19732] Call Trace: [ 694.551286][T19732] [ 694.551294][T19732] dump_stack_lvl+0xe8/0x150 [ 694.551325][T19732] should_fail_ex+0x46b/0x600 [ 694.551352][T19732] _copy_from_user+0x2d/0xb0 [ 694.551377][T19732] __sys_sendto+0x2bc/0x710 [ 694.551407][T19732] ? __pfx___sys_sendto+0x10/0x10 [ 694.551466][T19732] __x64_sys_sendto+0xde/0x100 [ 694.551493][T19732] do_syscall_64+0x14d/0xf80 [ 694.551516][T19732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.551534][T19732] ? clear_bhb_loop+0x40/0x90 [ 694.551556][T19732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.551574][T19732] RIP: 0033:0x7f8d87f8c799 [ 694.551591][T19732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.551607][T19732] RSP: 002b:00007f8d861a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 694.551628][T19732] RAX: ffffffffffffffda RBX: 00007f8d88206180 RCX: 00007f8d87f8c799 [ 694.551642][T19732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 694.551653][T19732] RBP: 00007f8d861a4090 R08: 0000200000000000 R09: 000000000000001c [ 694.551665][T19732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.551677][T19732] R13: 00007f8d88206218 R14: 00007f8d88206180 R15: 00007ffc493387f8 [ 694.551707][T19732] [ 695.135186][ T5799] Bluetooth: hci3: link tx timeout [ 695.135205][ T5799] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 695.252536][T19213] usb 5-1: not running at top speed; connect to a high speed hub [ 695.263404][T19213] usb 5-1: config 1 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 695.263433][T19213] usb 5-1: config 1 interface 0 has no altsetting 0 [ 695.432356][ T5882] usb 4-1: config 0 descriptor?? [ 695.440615][T19213] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c05, bcdDevice= 0.40 [ 695.440641][T19213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.440661][T19213] usb 5-1: Product: Ъ [ 695.440674][T19213] usb 5-1: Manufacturer: Ў [ 695.440688][T19213] usb 5-1: SerialNumber: ц [ 695.446337][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 695.461280][T19734] vlan3: entered promiscuous mode [ 695.461300][T19734] gretap0: entered promiscuous mode [ 695.502721][T19722] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 695.655561][ T5874] usb 4-1: USB disconnect, device number 46 [ 695.720444][T19722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.720954][T19722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.764541][T19213] usbhid 5-1:1.0: can't add hid device: -71 [ 695.764700][T19213] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 695.802146][T19213] usb 5-1: USB disconnect, device number 34 [ 695.816562][T19740] FAULT_INJECTION: forcing a failure. [ 695.816562][T19740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.816596][T19740] CPU: 1 UID: 0 PID: 19740 Comm: syz.2.5187 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 695.816622][T19740] Tainted: [L]=SOFTLOCKUP [ 695.816628][T19740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 695.816639][T19740] Call Trace: [ 695.816647][T19740] [ 695.816655][T19740] dump_stack_lvl+0xe8/0x150 [ 695.816685][T19740] should_fail_ex+0x46b/0x600 [ 695.816712][T19740] _copy_from_user+0x2d/0xb0 [ 695.816734][T19740] ___sys_sendmsg+0x1c6/0x360 [ 695.816766][T19740] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.816795][T19740] ? kstrtouint+0x6e/0xe0 [ 695.816836][T19740] ? __fget_files+0x2a/0x420 [ 695.816856][T19740] ? __fget_files+0x3a6/0x420 [ 695.816886][T19740] __sys_sendmmsg+0x282/0x4e0 [ 695.816924][T19740] ? __pfx___sys_sendmmsg+0x10/0x10 [ 695.816957][T19740] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 695.816989][T19740] ? ksys_write+0x248/0x270 [ 695.817015][T19740] ? __pfx_ksys_write+0x10/0x10 [ 695.817044][T19740] __x64_sys_sendmmsg+0xa0/0xc0 [ 695.817069][T19740] do_syscall_64+0x14d/0xf80 [ 695.817092][T19740] ? trace_irq_disable+0x3b/0x150 [ 695.817112][T19740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.817131][T19740] ? clear_bhb_loop+0x40/0x90 [ 695.817152][T19740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.817170][T19740] RIP: 0033:0x7fba2b0ac799 [ 695.817187][T19740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.817202][T19740] RSP: 002b:00007fba292fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 695.817223][T19740] RAX: ffffffffffffffda RBX: 00007fba2b325fa0 RCX: 00007fba2b0ac799 [ 695.817237][T19740] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 695.817250][T19740] RBP: 00007fba292fe090 R08: 0000000000000000 R09: 0000000000000000 [ 695.817262][T19740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.817274][T19740] R13: 00007fba2b326038 R14: 00007fba2b325fa0 R15: 00007ffd5c22e748 [ 695.817302][T19740] [ 696.064593][T14827] udevd[14827]: setting owner of /dev/bus/usb/005/034 to uid=0, gid=0 failed: No such file or directory [ 696.215144][ T5879] usb 2-1: USB disconnect, device number 76 [ 696.372240][T14826] udevd[14826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 696.580141][T19775] FAULT_INJECTION: forcing a failure. [ 696.580141][T19775] name failslab, interval 1, probability 0, space 0, times 0 [ 696.580175][T19775] CPU: 1 UID: 0 PID: 19775 Comm: syz.2.5198 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 696.580201][T19775] Tainted: [L]=SOFTLOCKUP [ 696.580207][T19775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 696.580218][T19775] Call Trace: [ 696.580226][T19775] [ 696.580234][T19775] dump_stack_lvl+0xe8/0x150 [ 696.580261][T19775] should_fail_ex+0x46b/0x600 [ 696.580302][T19775] should_failslab+0xa8/0x100 [ 696.580331][T19775] __kmalloc_noprof+0xdf/0x7b0 [ 696.580353][T19775] ? kfree+0x4d/0x6c0 [ 696.580374][T19775] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 696.580397][T19775] tomoyo_realpath_from_path+0xe3/0x5d0 [ 696.580423][T19775] ? tomoyo_path_number_perm+0x219/0x630 [ 696.580446][T19775] tomoyo_path_number_perm+0x246/0x630 [ 696.580472][T19775] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 696.580497][T19775] ? __lock_acquire+0x6b5/0x2cf0 [ 696.580546][T19775] ? __fget_files+0x2a/0x420 [ 696.580570][T19775] ? __fget_files+0x2a/0x420 [ 696.580586][T19775] ? __fget_files+0x3a6/0x420 [ 696.580603][T19775] ? __fget_files+0x2a/0x420 [ 696.580624][T19775] security_file_ioctl+0xc3/0x2a0 [ 696.580648][T19775] __se_sys_ioctl+0x47/0x170 [ 696.580667][T19775] do_syscall_64+0x14d/0xf80 [ 696.580681][T19775] ? trace_irq_disable+0x3b/0x150 [ 696.580693][T19775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.580704][T19775] ? clear_bhb_loop+0x40/0x90 [ 696.580716][T19775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.580726][T19775] RIP: 0033:0x7fba2b0ac799 [ 696.580736][T19775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.580745][T19775] RSP: 002b:00007fba292fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.580757][T19775] RAX: ffffffffffffffda RBX: 00007fba2b325fa0 RCX: 00007fba2b0ac799 [ 696.580764][T19775] RDX: 0000000000000000 RSI: 0000000000005441 RDI: 0000000000000003 [ 696.580771][T19775] RBP: 00007fba292fe090 R08: 0000000000000000 R09: 0000000000000000 [ 696.580777][T19775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.580783][T19775] R13: 00007fba2b326038 R14: 00007fba2b325fa0 R15: 00007ffd5c22e748 [ 696.580799][T19775] [ 696.580804][T19775] ERROR: Out of memory at tomoyo_realpath_from_path. [ 696.738173][T19781] FAULT_INJECTION: forcing a failure. [ 696.738173][T19781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.738207][T19781] CPU: 1 UID: 0 PID: 19781 Comm: syz.2.5200 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 696.738232][T19781] Tainted: [L]=SOFTLOCKUP [ 696.738239][T19781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 696.738249][T19781] Call Trace: [ 696.738257][T19781] [ 696.738264][T19781] dump_stack_lvl+0xe8/0x150 [ 696.738293][T19781] should_fail_ex+0x46b/0x600 [ 696.738327][T19781] _copy_from_user+0x2d/0xb0 [ 696.738353][T19781] copy_from_sockptr+0x5e/0x90 [ 696.738378][T19781] packet_setsockopt+0xbeb/0x1510 [ 696.738402][T19781] ? __pfx_packet_setsockopt+0x10/0x10 [ 696.738430][T19781] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 696.738453][T19781] ? lockdep_hardirqs_on+0x7a/0x110 [ 696.738486][T19781] ? __fget_files+0x2a/0x420 [ 696.738510][T19781] ? __fget_files+0x2a/0x420 [ 696.738529][T19781] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 696.738552][T19781] ? __pfx_packet_setsockopt+0x10/0x10 [ 696.738575][T19781] do_sock_setsockopt+0x17c/0x1b0 [ 696.738604][T19781] __x64_sys_setsockopt+0x143/0x1b0 [ 696.738636][T19781] do_syscall_64+0x14d/0xf80 [ 696.738657][T19781] ? trace_irq_disable+0x3b/0x150 [ 696.738676][T19781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.738694][T19781] ? clear_bhb_loop+0x40/0x90 [ 696.738716][T19781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.738734][T19781] RIP: 0033:0x7fba2b0ac799 [ 696.738750][T19781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.738766][T19781] RSP: 002b:00007fba292dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 696.738784][T19781] RAX: ffffffffffffffda RBX: 00007fba2b326090 RCX: 00007fba2b0ac799 [ 696.738797][T19781] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000005 [ 696.738808][T19781] RBP: 00007fba292dd090 R08: 0000000000000008 R09: 0000000000000000 [ 696.738819][T19781] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.738831][T19781] R13: 00007fba2b326128 R14: 00007fba2b326090 R15: 00007ffd5c22e748 [ 696.738858][T19781] [ 696.759951][ T5874] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 696.914392][T19783] netlink: 'syz.1.5201': attribute type 12 has an invalid length. [ 696.914411][T19783] netlink: 'syz.1.5201': attribute type 29 has an invalid length. [ 696.914424][T19783] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5201'. [ 696.914498][T19783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5201'. [ 697.269758][T19791] FAULT_INJECTION: forcing a failure. [ 697.269758][T19791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.269781][T19791] CPU: 1 UID: 0 PID: 19791 Comm: syz.0.5204 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 697.269798][T19791] Tainted: [L]=SOFTLOCKUP [ 697.269802][T19791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 697.269809][T19791] Call Trace: [ 697.269813][T19791] [ 697.269819][T19791] dump_stack_lvl+0xe8/0x150 [ 697.269838][T19791] should_fail_ex+0x46b/0x600 [ 697.269853][T19791] _copy_from_user+0x2d/0xb0 [ 697.269867][T19791] ___sys_sendmsg+0x1c6/0x360 [ 697.269886][T19791] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.269916][T19791] ? __fget_files+0x2a/0x420 [ 697.269929][T19791] ? __fget_files+0x3a6/0x420 [ 697.269945][T19791] __x64_sys_sendmsg+0x1c3/0x2a0 [ 697.269961][T19791] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 697.269980][T19791] ? __pfx_ksys_write+0x10/0x10 [ 697.270005][T19791] do_syscall_64+0x14d/0xf80 [ 697.270019][T19791] ? trace_irq_disable+0x3b/0x150 [ 697.270030][T19791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.270040][T19791] ? clear_bhb_loop+0x40/0x90 [ 697.270053][T19791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.270063][T19791] RIP: 0033:0x7f8d87f8c799 [ 697.270073][T19791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.270081][T19791] RSP: 002b:00007f8d861e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.270098][T19791] RAX: ffffffffffffffda RBX: 00007f8d88205fa0 RCX: 00007f8d87f8c799 [ 697.270111][T19791] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 697.270122][T19791] RBP: 00007f8d861e6090 R08: 0000000000000000 R09: 0000000000000000 [ 697.270133][T19791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.270144][T19791] R13: 00007f8d88206038 R14: 00007f8d88205fa0 R15: 00007ffc493387f8 [ 697.270170][T19791] [ 699.000172][T19806] FAULT_INJECTION: forcing a failure. [ 699.000172][T19806] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 699.000196][T19806] CPU: 1 UID: 0 PID: 19806 Comm: syz.4.5210 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 699.000217][T19806] Tainted: [L]=SOFTLOCKUP [ 699.000221][T19806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 699.000227][T19806] Call Trace: [ 699.000233][T19806] [ 699.000239][T19806] dump_stack_lvl+0xe8/0x150 [ 699.000259][T19806] should_fail_ex+0x46b/0x600 [ 699.000275][T19806] prepare_alloc_pages+0x22a/0x6b0 [ 699.000291][T19806] __alloc_frozen_pages_noprof+0x12f/0x380 [ 699.000305][T19806] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 699.000318][T19806] ? __pfx_policy_nodemask+0x10/0x10 [ 699.000328][T19806] ? __lock_acquire+0x6b5/0x2cf0 [ 699.000342][T19806] alloc_pages_mpol+0xd1/0x380 [ 699.000355][T19806] vma_alloc_folio_noprof+0xea/0x290 [ 699.000367][T19806] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 699.000383][T19806] do_pte_missing+0x7f9/0x29e0 [ 699.000402][T19806] handle_mm_fault+0xd0a/0x13c0 [ 699.000421][T19806] ? handle_mm_fault+0xe7/0x13c0 [ 699.000436][T19806] ? __pfx_handle_mm_fault+0x10/0x10 [ 699.000460][T19806] ? lock_mm_and_find_vma+0xa7/0x340 [ 699.000473][T19806] do_user_addr_fault+0x75b/0x1340 [ 699.000496][T19806] exc_page_fault+0x6a/0xc0 [ 699.000511][T19806] asm_exc_page_fault+0x26/0x30 [ 699.000522][T19806] RIP: 0010:filldir+0x29b/0x690 [ 699.000534][T19806] Code: 86 ff 4c 89 ff 4c 89 e6 e8 f2 ac 86 ff 4d 39 e7 0f 82 7c 02 00 00 49 39 ef 0f 87 73 02 00 00 0f 01 cb 0f ae e8 48 8b 44 24 50 <49> 89 44 24 08 48 8b 4c 24 08 48 8b 44 24 58 48 89 01 48 8b 04 24 [ 699.000542][T19806] RSP: 0018:ffffc90005287c68 EFLAGS: 00050287 [ 699.000552][T19806] RAX: 0000000000000000 RBX: ffffc90005287e38 RCX: ffff888033733d00 [ 699.000560][T19806] RDX: 0000000000000000 RSI: 0000200000001fc0 RDI: 0000200000001fd8 [ 699.000566][T19806] RBP: 00007ffffffff000 R08: 0000000000000000 R09: 0000000000000000 [ 699.000573][T19806] R10: 0000000000000100 R11: ffffffff823da700 R12: 0000200000001fc0 [ 699.000579][T19806] R13: ffffffff8b5dc180 R14: 0000000000000001 R15: 0000200000001fd8 [ 699.000589][T19806] ? __pfx_filldir+0x10/0x10 [ 699.000603][T19806] ? filldir+0x27e/0x690 [ 699.000617][T19806] ? __pfx_filldir+0x10/0x10 [ 699.000627][T19806] dcache_readdir+0x16b/0x6a0 [ 699.000640][T19806] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 699.000657][T19806] iterate_dir+0x3a5/0x580 [ 699.000670][T19806] __se_sys_getdents+0xf1/0x270 [ 699.000682][T19806] ? __pfx___se_sys_getdents+0x10/0x10 [ 699.000691][T19806] ? ksys_write+0x248/0x270 [ 699.000704][T19806] ? __pfx_filldir+0x10/0x10 [ 699.000714][T19806] ? __pfx_ksys_write+0x10/0x10 [ 699.000734][T19806] do_syscall_64+0x14d/0xf80 [ 699.000746][T19806] ? trace_irq_disable+0x3b/0x150 [ 699.000758][T19806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.000768][T19806] ? clear_bhb_loop+0x40/0x90 [ 699.000780][T19806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.000790][T19806] RIP: 0033:0x7fec9dd2c799 [ 699.000800][T19806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.000808][T19806] RSP: 002b:00007fec9bf7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 699.000818][T19806] RAX: ffffffffffffffda RBX: 00007fec9dfa5fa0 RCX: 00007fec9dd2c799 [ 699.000825][T19806] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000005 [ 699.000831][T19806] RBP: 00007fec9bf7e090 R08: 0000000000000000 R09: 0000000000000000 [ 699.000837][T19806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.000843][T19806] R13: 00007fec9dfa6038 R14: 00007fec9dfa5fa0 R15: 00007fffa65f8a58 [ 699.000859][T19806] [ 699.046990][T10148] kernel read not supported for file /1233/net/route (pid: 10148 comm: kworker/1:7) [ 699.322272][T19813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5212'. [ 699.322470][T19813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 699.322485][T19813] IPv6: NLM_F_CREATE should be set when creating new route [ 699.322598][T19813] IPv6: NLM_F_CREATE should be set when creating new route [ 699.351857][ T36] kauditd_printk_skb: 144 callbacks suppressed [ 699.351876][ T36] audit: type=1326 audit(1773225045.437:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19810 comm="syz.4.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9dd2c799 code=0x7ffc0000 [ 699.360165][ T36] audit: type=1326 audit(1773225045.456:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19810 comm="syz.4.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9dd2c799 code=0x7ffc0000 [ 699.360215][ T36] audit: type=1326 audit(1773225045.456:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19810 comm="syz.4.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fec9dd2c799 code=0x7ffc0000 [ 699.360252][ T36] audit: type=1326 audit(1773225045.456:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19810 comm="syz.4.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9dd2c799 code=0x7ffc0000 [ 699.360290][ T36] audit: type=1326 audit(1773225045.456:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19810 comm="syz.4.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9dd2c799 code=0x7ffc0000 [ 699.362766][ T36] audit: type=1326 audit(1773225045.465:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19810 comm="syz.4.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec9dcecfce code=0x7ffc0000 [ 699.362808][ T36] audit: type=1326 audit(1773225045.465:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19810 comm="syz.4.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9dd2c799 code=0x7ffc0000 [ 699.362845][ T36] audit: type=1326 audit(1773225045.465:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19810 comm="syz.4.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9dd2c799 code=0x7ffc0000 [ 699.364911][ T36] audit: type=1326 audit(1773225045.465:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19810 comm="syz.4.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec9dd2c799 code=0x7ffc0000 [ 699.367036][ T36] audit: type=1326 audit(1773225045.465:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19810 comm="syz.4.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9dd2c799 code=0x7ffc0000 [ 699.927111][T19821] FAULT_INJECTION: forcing a failure. [ 699.927111][T19821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.927146][T19821] CPU: 0 UID: 0 PID: 19821 Comm: syz.2.5214 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 699.927171][T19821] Tainted: [L]=SOFTLOCKUP [ 699.927178][T19821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 699.927189][T19821] Call Trace: [ 699.927197][T19821] [ 699.927205][T19821] dump_stack_lvl+0xe8/0x150 [ 699.927236][T19821] should_fail_ex+0x46b/0x600 [ 699.927262][T19821] _copy_from_user+0x2d/0xb0 [ 699.927285][T19821] ___sys_sendmsg+0x1c6/0x360 [ 699.927316][T19821] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.927372][T19821] ? __fget_files+0x2a/0x420 [ 699.927393][T19821] ? __fget_files+0x3a6/0x420 [ 699.927424][T19821] __x64_sys_sendmsg+0x1c3/0x2a0 [ 699.927448][T19821] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 699.927482][T19821] ? __pfx_ksys_write+0x10/0x10 [ 699.927517][T19821] do_syscall_64+0x14d/0xf80 [ 699.927540][T19821] ? trace_irq_disable+0x3b/0x150 [ 699.927559][T19821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.927577][T19821] ? clear_bhb_loop+0x40/0x90 [ 699.927605][T19821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.927623][T19821] RIP: 0033:0x7fba2b0ac799 [ 699.927640][T19821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.927653][T19821] RSP: 002b:00007fba292fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.927672][T19821] RAX: ffffffffffffffda RBX: 00007fba2b325fa0 RCX: 00007fba2b0ac799 [ 699.927685][T19821] RDX: 0000000000000800 RSI: 00002000000002c0 RDI: 000000000000000f [ 699.927697][T19821] RBP: 00007fba292fe090 R08: 0000000000000000 R09: 0000000000000000 [ 699.927709][T19821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.927719][T19821] R13: 00007fba2b326038 R14: 00007fba2b325fa0 R15: 00007ffd5c22e748 [ 699.927749][T19821] [ 700.054608][T19823] netlink: 'syz.3.5215': attribute type 1 has an invalid length. [ 700.127383][T19823] dummy0: entered promiscuous mode [ 700.127597][T19823] macvlan2: entered allmulticast mode [ 700.127611][T19823] dummy0: entered allmulticast mode [ 700.134831][T19823] dummy0: left allmulticast mode [ 700.134885][T19823] dummy0: left promiscuous mode [ 700.242390][T19827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 701.364200][T19833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 701.405054][T19833] FAULT_INJECTION: forcing a failure. [ 701.405054][T19833] name failslab, interval 1, probability 0, space 0, times 0 [ 701.405089][T19833] CPU: 1 UID: 0 PID: 19833 Comm: syz.2.5218 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 701.405115][T19833] Tainted: [L]=SOFTLOCKUP [ 701.405122][T19833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 701.405134][T19833] Call Trace: [ 701.405142][T19833] [ 701.405150][T19833] dump_stack_lvl+0xe8/0x150 [ 701.405181][T19833] should_fail_ex+0x46b/0x600 [ 701.405207][T19833] should_failslab+0xa8/0x100 [ 701.405228][T19833] __kmalloc_noprof+0xdf/0x7b0 [ 701.405252][T19833] ? kfree+0x4d/0x6c0 [ 701.405273][T19833] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 701.405298][T19833] tomoyo_realpath_from_path+0xe3/0x5d0 [ 701.405326][T19833] ? tomoyo_path_number_perm+0x219/0x630 [ 701.405350][T19833] tomoyo_path_number_perm+0x246/0x630 [ 701.405375][T19833] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 701.405401][T19833] ? __lock_acquire+0x6b5/0x2cf0 [ 701.405447][T19833] ? __fget_files+0x2a/0x420 [ 701.405470][T19833] ? __fget_files+0x2a/0x420 [ 701.405490][T19833] ? __fget_files+0x3a6/0x420 [ 701.405509][T19833] ? __fget_files+0x2a/0x420 [ 701.405534][T19833] security_file_ioctl+0xc3/0x2a0 [ 701.405562][T19833] __se_sys_ioctl+0x47/0x170 [ 701.405597][T19833] do_syscall_64+0x14d/0xf80 [ 701.405620][T19833] ? trace_irq_disable+0x3b/0x150 [ 701.405640][T19833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.405658][T19833] ? clear_bhb_loop+0x40/0x90 [ 701.405681][T19833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.405699][T19833] RIP: 0033:0x7fba2b0ac799 [ 701.405716][T19833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.405732][T19833] RSP: 002b:00007fba292fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 701.405752][T19833] RAX: ffffffffffffffda RBX: 00007fba2b325fa0 RCX: 00007fba2b0ac799 [ 701.405765][T19833] RDX: 0000200000000800 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 701.405778][T19833] RBP: 00007fba292fe090 R08: 0000000000000000 R09: 0000000000000000 [ 701.405790][T19833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.405801][T19833] R13: 00007fba2b326038 R14: 00007fba2b325fa0 R15: 00007ffd5c22e748 [ 701.405832][T19833] [ 701.412091][T19833] ERROR: Out of memory at tomoyo_realpath_from_path. [ 701.927489][T19845] program syz.4.5224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 702.268528][T19854] FAULT_INJECTION: forcing a failure. [ 702.268528][T19854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.268564][T19854] CPU: 0 UID: 0 PID: 19854 Comm: syz.2.5228 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 702.268589][T19854] Tainted: [L]=SOFTLOCKUP [ 702.268596][T19854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 702.268607][T19854] Call Trace: [ 702.268615][T19854] [ 702.268623][T19854] dump_stack_lvl+0xe8/0x150 [ 702.268653][T19854] should_fail_ex+0x46b/0x600 [ 702.268679][T19854] _copy_from_user+0x2d/0xb0 [ 702.268703][T19854] ___sys_sendmsg+0x1c6/0x360 [ 702.268733][T19854] ? __pfx____sys_sendmsg+0x10/0x10 [ 702.268783][T19854] ? __fget_files+0x2a/0x420 [ 702.268800][T19854] ? __fget_files+0x3a6/0x420 [ 702.268829][T19854] __x64_sys_sendmsg+0x1c3/0x2a0 [ 702.268851][T19854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 702.268875][T19854] ? __pfx_ksys_write+0x10/0x10 [ 702.268901][T19854] do_syscall_64+0x14d/0xf80 [ 702.268919][T19854] ? trace_irq_disable+0x3b/0x150 [ 702.268934][T19854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.268952][T19854] ? clear_bhb_loop+0x40/0x90 [ 702.268969][T19854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.268983][T19854] RIP: 0033:0x7fba2b0ac799 [ 702.268998][T19854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.269010][T19854] RSP: 002b:00007fba292fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.269025][T19854] RAX: ffffffffffffffda RBX: 00007fba2b325fa0 RCX: 00007fba2b0ac799 [ 702.269035][T19854] RDX: 0000000000000802 RSI: 00002000000003c0 RDI: 0000000000000009 [ 702.269044][T19854] RBP: 00007fba292fe090 R08: 0000000000000000 R09: 0000000000000000 [ 702.269053][T19854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.269062][T19854] R13: 00007fba2b326038 R14: 00007fba2b325fa0 R15: 00007ffd5c22e748 [ 702.269089][T19854] [ 702.780119][T19863] FAULT_INJECTION: forcing a failure. [ 702.780119][T19863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.780234][T19863] CPU: 1 UID: 0 PID: 19863 Comm: syz.2.5231 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 702.780261][T19863] Tainted: [L]=SOFTLOCKUP [ 702.780269][T19863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 702.780280][T19863] Call Trace: [ 702.780288][T19863] [ 702.780297][T19863] dump_stack_lvl+0xe8/0x150 [ 702.780327][T19863] should_fail_ex+0x46b/0x600 [ 702.780353][T19863] copy_fpstate_to_sigframe+0xada/0xd90 [ 702.780388][T19863] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 702.780410][T19863] ? kvm_sched_clock_read+0x11/0x20 [ 702.780436][T19863] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 702.780464][T19863] ? __pfx_sched_clock_cpu+0x10/0x10 [ 702.780483][T19863] ? arch_scale_cpu_capacity+0x18/0xb0 [ 702.780518][T19863] ? fpu__alloc_mathframe+0xac/0x130 [ 702.780541][T19863] get_sigframe+0x5f7/0x820 [ 702.780563][T19863] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 702.780594][T19863] ? __pfx_get_sigframe+0x10/0x10 [ 702.780615][T19863] ? rt_mutex_slowunlock+0x61e/0x8b0 [ 702.780633][T19863] ? reacquire_held_locks+0x104/0x190 [ 702.780660][T19863] x64_setup_rt_frame+0x161/0xcb0 [ 702.780680][T19863] ? rt_spin_unlock+0x14f/0x200 [ 702.780702][T19863] ? rt_spin_unlock+0x160/0x200 [ 702.780723][T19863] ? get_signal+0x1120/0x1310 [ 702.780752][T19863] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 702.780783][T19863] arch_do_signal_or_restart+0x429/0x830 [ 702.780808][T19863] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 702.780847][T19863] exit_to_user_mode_loop+0x86/0x480 [ 702.780872][T19863] ? rcu_is_watching+0x15/0xb0 [ 702.780895][T19863] do_syscall_64+0x32d/0xf80 [ 702.780917][T19863] ? trace_irq_disable+0x3b/0x150 [ 702.780937][T19863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.780963][T19863] ? clear_bhb_loop+0x40/0x90 [ 702.780985][T19863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.781003][T19863] RIP: 0033:0x7fba2b0ac797 [ 702.781020][T19863] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 702.781036][T19863] RSP: 002b:00007fba292dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 702.781057][T19863] RAX: 0000000000000116 RBX: 00007fba2b326090 RCX: 00007fba2b0ac799 [ 702.781070][T19863] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 702.781082][T19863] RBP: 00007fba292dd090 R08: 0000000000000000 R09: 0000000000000000 [ 702.781094][T19863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.781105][T19863] R13: 00007fba2b326128 R14: 00007fba2b326090 R15: 00007ffd5c22e748 [ 702.781137][T19863] [ 703.610044][T19873] nbd: must specify at least one socket [ 704.097616][T19875] FAULT_INJECTION: forcing a failure. [ 704.097616][T19875] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 704.097653][T19875] CPU: 0 UID: 0 PID: 19875 Comm: syz.2.5235 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 704.097679][T19875] Tainted: [L]=SOFTLOCKUP [ 704.097686][T19875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 704.097697][T19875] Call Trace: [ 704.097704][T19875] [ 704.097713][T19875] dump_stack_lvl+0xe8/0x150 [ 704.097743][T19875] should_fail_ex+0x46b/0x600 [ 704.097767][T19875] prepare_alloc_pages+0x22a/0x6b0 [ 704.097794][T19875] __alloc_frozen_pages_noprof+0x12f/0x380 [ 704.097825][T19875] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 704.097848][T19875] ? __pfx_policy_nodemask+0x10/0x10 [ 704.097865][T19875] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 704.097884][T19875] ? reacquire_held_locks+0x104/0x190 [ 704.097904][T19875] ? rt_spin_lock+0x1e0/0x400 [ 704.097930][T19875] alloc_pages_mpol+0xd1/0x380 [ 704.097952][T19875] alloc_migration_target_by_mpol+0x2b8/0x630 [ 704.097982][T19875] migrate_pages_batch+0x683/0x4090 [ 704.098093][T19875] ? update_load_avg+0x1b0/0x1ec0 [ 704.098118][T19875] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 704.098146][T19875] ? __lock_acquire+0x6b5/0x2cf0 [ 704.098163][T19875] ? __pfx_migrate_pages_batch+0x10/0x10 [ 704.098184][T19875] ? trace_sched_set_need_resched_tp+0x3e/0x160 [ 704.098214][T19875] ? kvm_sched_clock_read+0x11/0x20 [ 704.098241][T19875] ? sched_clock+0x3f/0x60 [ 704.098262][T19875] ? sched_clock_cpu+0x74/0x440 [ 704.098297][T19875] ? finish_task_switch+0x240/0x920 [ 704.098316][T19875] ? lockdep_hardirqs_on+0x7a/0x110 [ 704.098340][T19875] ? rcu_is_watching+0x15/0xb0 [ 704.098361][T19875] ? trace_sched_exit_tp+0x3a/0x150 [ 704.098382][T19875] ? __schedule+0x1569/0x5240 [ 704.098409][T19875] migrate_pages+0x1c6b/0x2a50 [ 704.098445][T19875] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 704.098465][T19875] ? __pfx___schedule+0x10/0x10 [ 704.098491][T19875] ? __pfx_migrate_pages+0x10/0x10 [ 704.098514][T19875] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 704.098541][T19875] ? preempt_schedule_common+0x82/0xd0 [ 704.098563][T19875] ? preempt_schedule_thunk+0x16/0x30 [ 704.098603][T19875] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 704.098624][T19875] ? lockdep_hardirqs_on+0x7a/0x110 [ 704.098649][T19875] __se_sys_mbind+0xe89/0x10f0 [ 704.098683][T19875] ? __pfx___se_sys_mbind+0x10/0x10 [ 704.098706][T19875] ? rt_mutex_slowunlock+0x1cb/0x300 [ 704.098737][T19875] ? fput+0xa0/0xd0 [ 704.098759][T19875] ? ksys_write+0x248/0x270 [ 704.098785][T19875] ? __pfx_ksys_write+0x10/0x10 [ 704.098819][T19875] ? __x64_sys_mbind+0x21/0xf0 [ 704.098846][T19875] do_syscall_64+0x14d/0xf80 [ 704.098869][T19875] ? trace_irq_disable+0x3b/0x150 [ 704.098889][T19875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.098907][T19875] ? clear_bhb_loop+0x40/0x90 [ 704.098928][T19875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.098946][T19875] RIP: 0033:0x7fba2b0ac799 [ 704.098962][T19875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.098976][T19875] RSP: 002b:00007fba292fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 704.098996][T19875] RAX: ffffffffffffffda RBX: 00007fba2b325fa0 RCX: 00007fba2b0ac799 [ 704.099010][T19875] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000400000 [ 704.099023][T19875] RBP: 00007fba292fe090 R08: 0000000000000000 R09: 0000000000000002 [ 704.099035][T19875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.099047][T19875] R13: 00007fba2b326038 R14: 00007fba2b325fa0 R15: 00007ffd5c22e748 [ 704.099076][T19875] [ 705.937493][T19965] FAULT_INJECTION: forcing a failure. [ 705.937493][T19965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.937529][T19965] CPU: 1 UID: 0 PID: 19965 Comm: syz.3.5266 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 705.937554][T19965] Tainted: [L]=SOFTLOCKUP [ 705.937561][T19965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 705.937572][T19965] Call Trace: [ 705.937580][T19965] [ 705.937588][T19965] dump_stack_lvl+0xe8/0x150 [ 705.937619][T19965] should_fail_ex+0x46b/0x600 [ 705.937646][T19965] _copy_from_user+0x2d/0xb0 [ 705.937669][T19965] ___sys_sendmsg+0x1c6/0x360 [ 705.937701][T19965] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.937760][T19965] ? __fget_files+0x2a/0x420 [ 705.937780][T19965] ? __fget_files+0x3a6/0x420 [ 705.937811][T19965] __x64_sys_sendmsg+0x1c3/0x2a0 [ 705.937838][T19965] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 705.937872][T19965] ? __pfx_ksys_write+0x10/0x10 [ 705.937908][T19965] do_syscall_64+0x14d/0xf80 [ 705.937931][T19965] ? trace_irq_disable+0x3b/0x150 [ 705.937951][T19965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.937970][T19965] ? clear_bhb_loop+0x40/0x90 [ 705.937991][T19965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.938009][T19965] RIP: 0033:0x7f756f18c799 [ 705.938027][T19965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.938042][T19965] RSP: 002b:00007f756d3e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 705.938062][T19965] RAX: ffffffffffffffda RBX: 00007f756f405fa0 RCX: 00007f756f18c799 [ 705.938076][T19965] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000006 [ 705.938087][T19965] RBP: 00007f756d3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 705.938099][T19965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.938110][T19965] R13: 00007f756f406038 R14: 00007f756f405fa0 R15: 00007ffd97d27598 [ 705.938141][T19965] [ 706.114405][T19967] netlink: 'syz.0.5259': attribute type 10 has an invalid length. [ 706.148275][T19968] FAULT_INJECTION: forcing a failure. [ 706.148275][T19968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.155180][T19968] CPU: 0 UID: 0 PID: 19968 Comm: syz.1.5267 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 706.155211][T19968] Tainted: [L]=SOFTLOCKUP [ 706.155218][T19968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 706.155229][T19968] Call Trace: [ 706.155237][T19968] [ 706.155245][T19968] dump_stack_lvl+0xe8/0x150 [ 706.155277][T19968] should_fail_ex+0x46b/0x600 [ 706.155301][T19968] _copy_from_user+0x2d/0xb0 [ 706.155325][T19968] ___sys_sendmsg+0x1c6/0x360 [ 706.155359][T19968] ? __pfx____sys_sendmsg+0x10/0x10 [ 706.155413][T19968] ? __fget_files+0x2a/0x420 [ 706.155433][T19968] ? __fget_files+0x3a6/0x420 [ 706.155463][T19968] __x64_sys_sendmsg+0x1c3/0x2a0 [ 706.155489][T19968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 706.155520][T19968] ? __pfx_ksys_write+0x10/0x10 [ 706.155555][T19968] do_syscall_64+0x14d/0xf80 [ 706.155577][T19968] ? trace_irq_disable+0x3b/0x150 [ 706.155596][T19968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.155613][T19968] ? clear_bhb_loop+0x40/0x90 [ 706.155634][T19968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.155652][T19968] RIP: 0033:0x7f9ffaf4c799 [ 706.155670][T19968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.155684][T19968] RSP: 002b:00007f9ff919e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.155704][T19968] RAX: ffffffffffffffda RBX: 00007f9ffb1c5fa0 RCX: 00007f9ffaf4c799 [ 706.155717][T19968] RDX: 00000000240080d0 RSI: 00002000000029c0 RDI: 0000000000000041 [ 706.155729][T19968] RBP: 00007f9ff919e090 R08: 0000000000000000 R09: 0000000000000000 [ 706.155740][T19968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.155751][T19968] R13: 00007f9ffb1c6038 R14: 00007f9ffb1c5fa0 R15: 00007ffef8985bc8 [ 706.155780][T19968] [ 706.171799][T19967] team0: Device ipvlan1 failed to register rx_handler [ 706.970970][T19998] dlm: Unknown command passed to DLM device : 8 [ 706.970970][T19998] [ 707.062889][T20002] dlm: Unknown command passed to DLM device : 8 [ 707.062889][T20002] [ 709.355431][T20047] FAULT_INJECTION: forcing a failure. [ 709.355431][T20047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.355465][T20047] CPU: 1 UID: 0 PID: 20047 Comm: syz.3.5292 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 709.355490][T20047] Tainted: [L]=SOFTLOCKUP [ 709.355498][T20047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 709.355509][T20047] Call Trace: [ 709.355516][T20047] [ 709.355525][T20047] dump_stack_lvl+0xe8/0x150 [ 709.355555][T20047] should_fail_ex+0x46b/0x600 [ 709.355582][T20047] _copy_from_user+0x2d/0xb0 [ 709.355606][T20047] __sys_bpf+0x229/0x950 [ 709.355630][T20047] ? __pfx___sys_bpf+0x10/0x10 [ 709.355649][T20047] ? rt_mutex_slowunlock+0x1cb/0x300 [ 709.355685][T20047] ? ksys_write+0x248/0x270 [ 709.355711][T20047] ? __pfx_ksys_write+0x10/0x10 [ 709.355743][T20047] __x64_sys_bpf+0x7c/0x90 [ 709.355763][T20047] do_syscall_64+0x14d/0xf80 [ 709.355785][T20047] ? trace_irq_disable+0x3b/0x150 [ 709.355805][T20047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.355823][T20047] ? clear_bhb_loop+0x40/0x90 [ 709.355846][T20047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.355864][T20047] RIP: 0033:0x7f756f18c799 [ 709.355881][T20047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.355897][T20047] RSP: 002b:00007f756d3e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 709.355916][T20047] RAX: ffffffffffffffda RBX: 00007f756f405fa0 RCX: 00007f756f18c799 [ 709.355930][T20047] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 709.355941][T20047] RBP: 00007f756d3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 709.355954][T20047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.355965][T20047] R13: 00007f756f406038 R14: 00007f756f405fa0 R15: 00007ffd97d27598 [ 709.355995][T20047] [ 713.174548][T20083] FAULT_INJECTION: forcing a failure. [ 713.174548][T20083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.174590][T20083] CPU: 1 UID: 0 PID: 20083 Comm: syz.2.5298 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 713.174617][T20083] Tainted: [L]=SOFTLOCKUP [ 713.174624][T20083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 713.174635][T20083] Call Trace: [ 713.174643][T20083] [ 713.174651][T20083] dump_stack_lvl+0xe8/0x150 [ 713.174684][T20083] should_fail_ex+0x46b/0x600 [ 713.174710][T20083] _copy_to_user+0x31/0xb0 [ 713.174736][T20083] simple_read_from_buffer+0xe1/0x170 [ 713.174763][T20083] proc_fail_nth_read+0x1be/0x230 [ 713.174788][T20083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 713.174812][T20083] ? rw_verify_area+0x2ac/0x4e0 [ 713.174836][T20083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 713.174858][T20083] vfs_read+0x212/0xa80 [ 713.174889][T20083] ? __pfx_vfs_read+0x10/0x10 [ 713.174915][T20083] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 713.174940][T20083] ? lockdep_hardirqs_on+0x7a/0x110 [ 713.174962][T20083] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 713.174985][T20083] ? mutex_lock_nested+0x152/0x1d0 [ 713.175001][T20083] ? fdget_pos+0x252/0x320 [ 713.175031][T20083] ksys_read+0x156/0x270 [ 713.175057][T20083] ? __pfx_ksys_read+0x10/0x10 [ 713.175088][T20083] do_syscall_64+0x14d/0xf80 [ 713.175110][T20083] ? trace_irq_disable+0x3b/0x150 [ 713.175130][T20083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.175148][T20083] ? clear_bhb_loop+0x40/0x90 [ 713.175170][T20083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.175188][T20083] RIP: 0033:0x7fba2b06cfce [ 713.175205][T20083] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 713.175221][T20083] RSP: 002b:00007fba2919afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 713.175241][T20083] RAX: ffffffffffffffda RBX: 00007fba2919b6c0 RCX: 00007fba2b06cfce [ 713.175255][T20083] RDX: 000000000000000f RSI: 00007fba2919b0a0 RDI: 000000000000000f [ 713.175266][T20083] RBP: 00007fba2919b090 R08: 0000000000000000 R09: 0000000000000000 [ 713.175278][T20083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.175287][T20083] R13: 00007fba2b326218 R14: 00007fba2b326180 R15: 00007ffd5c22e748 [ 713.175317][T20083] [ 714.061282][T20100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5305'. [ 714.065196][T20100] vlan0: entered promiscuous mode [ 714.196418][T20098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5306'. [ 714.619013][T20117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5312'. [ 714.931227][ T5802] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 715.091486][ T5802] usb 1-1: Using ep0 maxpacket: 8 [ 716.344033][ T5802] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 716.344051][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.344062][ T5802] usb 1-1: Product: syz [ 716.344069][ T5802] usb 1-1: Manufacturer: syz [ 716.344076][ T5802] usb 1-1: SerialNumber: syz [ 716.399628][ T5802] usb 1-1: config 0 descriptor?? [ 716.627716][ T5802] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 716.709759][T20162] FAULT_INJECTION: forcing a failure. [ 716.709759][T20162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.709792][T20162] CPU: 0 UID: 0 PID: 20162 Comm: syz.2.5331 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 716.709816][T20162] Tainted: [L]=SOFTLOCKUP [ 716.709823][T20162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 716.709843][T20162] Call Trace: [ 716.709851][T20162] [ 716.709859][T20162] dump_stack_lvl+0xe8/0x150 [ 716.709889][T20162] should_fail_ex+0x46b/0x600 [ 716.709915][T20162] _copy_from_user+0x2d/0xb0 [ 716.709940][T20162] ___sys_sendmsg+0x1c6/0x360 [ 716.709971][T20162] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.710026][T20162] ? __fget_files+0x2a/0x420 [ 716.710049][T20162] ? __fget_files+0x3a6/0x420 [ 716.710079][T20162] __x64_sys_sendmsg+0x1c3/0x2a0 [ 716.710105][T20162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 716.710139][T20162] ? __pfx_ksys_write+0x10/0x10 [ 716.710174][T20162] do_syscall_64+0x14d/0xf80 [ 716.710197][T20162] ? trace_irq_disable+0x3b/0x150 [ 716.710216][T20162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.710235][T20162] ? clear_bhb_loop+0x40/0x90 [ 716.710258][T20162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.710276][T20162] RIP: 0033:0x7fba2b0ac799 [ 716.710294][T20162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.710309][T20162] RSP: 002b:00007fba292fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.710329][T20162] RAX: ffffffffffffffda RBX: 00007fba2b325fa0 RCX: 00007fba2b0ac799 [ 716.710342][T20162] RDX: 0000000000000840 RSI: 00002000000002c0 RDI: 0000000000000005 [ 716.710354][T20162] RBP: 00007fba292fe090 R08: 0000000000000000 R09: 0000000000000000 [ 716.710366][T20162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.710378][T20162] R13: 00007fba2b326038 R14: 00007fba2b325fa0 R15: 00007ffd5c22e748 [ 716.710407][T20162] [ 716.889820][T20168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5332'. [ 717.279351][T20175] FAULT_INJECTION: forcing a failure. [ 717.279351][T20175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.279394][T20175] CPU: 0 UID: 0 PID: 20175 Comm: syz.1.5335 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 717.279419][T20175] Tainted: [L]=SOFTLOCKUP [ 717.279426][T20175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 717.279438][T20175] Call Trace: [ 717.279445][T20175] [ 717.279454][T20175] dump_stack_lvl+0xe8/0x150 [ 717.279486][T20175] should_fail_ex+0x46b/0x600 [ 717.279511][T20175] _copy_from_user+0x2d/0xb0 [ 717.279535][T20175] __sys_bpf+0x229/0x950 [ 717.279559][T20175] ? __pfx___sys_bpf+0x10/0x10 [ 717.279578][T20175] ? rt_mutex_slowunlock+0x1cb/0x300 [ 717.279613][T20175] ? ksys_write+0x248/0x270 [ 717.279639][T20175] ? __pfx_ksys_write+0x10/0x10 [ 717.279670][T20175] __x64_sys_bpf+0x7c/0x90 [ 717.279691][T20175] do_syscall_64+0x14d/0xf80 [ 717.279713][T20175] ? trace_irq_disable+0x3b/0x150 [ 717.279733][T20175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.279751][T20175] ? clear_bhb_loop+0x40/0x90 [ 717.279773][T20175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.279791][T20175] RIP: 0033:0x7f9ffaf4c799 [ 717.279809][T20175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.279824][T20175] RSP: 002b:00007f9ff919e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 717.279845][T20175] RAX: ffffffffffffffda RBX: 00007f9ffb1c5fa0 RCX: 00007f9ffaf4c799 [ 717.279858][T20175] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000009 [ 717.279870][T20175] RBP: 00007f9ff919e090 R08: 0000000000000000 R09: 0000000000000000 [ 717.279882][T20175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.279893][T20175] R13: 00007f9ffb1c6038 R14: 00007f9ffb1c5fa0 R15: 00007ffef8985bc8 [ 717.279923][T20175] [ 717.501063][ T5802] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 717.528073][ T5802] usb 1-1: USB disconnect, device number 60 [ 719.280915][T20196] FAULT_INJECTION: forcing a failure. [ 719.280915][T20196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.280938][T20196] CPU: 0 UID: 0 PID: 20196 Comm: syz.2.5343 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 719.280953][T20196] Tainted: [L]=SOFTLOCKUP [ 719.280957][T20196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 719.280963][T20196] Call Trace: [ 719.280968][T20196] [ 719.280973][T20196] dump_stack_lvl+0xe8/0x150 [ 719.280992][T20196] should_fail_ex+0x46b/0x600 [ 719.281007][T20196] _copy_from_user+0x2d/0xb0 [ 719.281021][T20196] __sys_bpf+0x229/0x950 [ 719.281036][T20196] ? __pfx___sys_bpf+0x10/0x10 [ 719.281046][T20196] ? rt_mutex_slowunlock+0x1cb/0x300 [ 719.281067][T20196] ? ksys_write+0x248/0x270 [ 719.281084][T20196] ? __pfx_ksys_write+0x10/0x10 [ 719.281101][T20196] __x64_sys_bpf+0x7c/0x90 [ 719.281112][T20196] do_syscall_64+0x14d/0xf80 [ 719.281125][T20196] ? trace_irq_disable+0x3b/0x150 [ 719.281137][T20196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.281149][T20196] ? clear_bhb_loop+0x40/0x90 [ 719.281163][T20196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.281180][T20196] RIP: 0033:0x7fba2b0ac799 [ 719.281191][T20196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.281200][T20196] RSP: 002b:00007fba292fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 719.281212][T20196] RAX: ffffffffffffffda RBX: 00007fba2b325fa0 RCX: 00007fba2b0ac799 [ 719.281219][T20196] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 0000000000000000 [ 719.281226][T20196] RBP: 00007fba292fe090 R08: 0000000000000000 R09: 0000000000000000 [ 719.281232][T20196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.281238][T20196] R13: 00007fba2b326038 R14: 00007fba2b325fa0 R15: 00007ffd5c22e748 [ 719.281253][T20196] [ 719.294743][ T5802] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 719.465860][ T5802] usb 5-1: Using ep0 maxpacket: 32 [ 719.467938][ T5802] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 719.467962][ T5802] usb 5-1: config 0 has no interface number 0 [ 719.508180][ T5802] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 719.508208][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.508228][ T5802] usb 5-1: Product: syz [ 719.508241][ T5802] usb 5-1: Manufacturer: syz [ 719.508254][ T5802] usb 5-1: SerialNumber: syz [ 719.543562][ T5802] usb 5-1: config 0 descriptor?? [ 719.550002][ T5802] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 720.032711][ T5874] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 720.157983][T20229] FAULT_INJECTION: forcing a failure. [ 720.157983][T20229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.158007][T20229] CPU: 0 UID: 0 PID: 20229 Comm: syz.2.5354 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 720.158032][T20229] Tainted: [L]=SOFTLOCKUP [ 720.158039][T20229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 720.158050][T20229] Call Trace: [ 720.158058][T20229] [ 720.158067][T20229] dump_stack_lvl+0xe8/0x150 [ 720.158096][T20229] should_fail_ex+0x46b/0x600 [ 720.158120][T20229] _copy_to_user+0x31/0xb0 [ 720.158135][T20229] simple_read_from_buffer+0xe1/0x170 [ 720.158151][T20229] proc_fail_nth_read+0x1be/0x230 [ 720.158164][T20229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 720.158187][T20229] ? rw_verify_area+0x2ac/0x4e0 [ 720.158211][T20229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 720.158234][T20229] vfs_read+0x212/0xa80 [ 720.158255][T20229] ? fd_install+0x30c/0x3e0 [ 720.158282][T20229] ? __pfx_vfs_read+0x10/0x10 [ 720.158295][T20229] ? do_fcntl+0x6a6/0x19e0 [ 720.158311][T20229] ? smack_file_fcntl+0x150/0x320 [ 720.158325][T20229] ? __pfx_do_fcntl+0x10/0x10 [ 720.158343][T20229] ? __pfx_smack_file_fcntl+0x10/0x10 [ 720.158374][T20229] ksys_read+0x156/0x270 [ 720.158400][T20229] ? __pfx_ksys_read+0x10/0x10 [ 720.158433][T20229] do_syscall_64+0x14d/0xf80 [ 720.158453][T20229] ? trace_irq_disable+0x3b/0x150 [ 720.158465][T20229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.158475][T20229] ? clear_bhb_loop+0x40/0x90 [ 720.158487][T20229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.158496][T20229] RIP: 0033:0x7fba2b06cfce [ 720.158513][T20229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 720.158529][T20229] RSP: 002b:00007fba292fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 720.158549][T20229] RAX: ffffffffffffffda RBX: 00007fba292fe6c0 RCX: 00007fba2b06cfce [ 720.158563][T20229] RDX: 000000000000000f RSI: 00007fba292fe0a0 RDI: 0000000000000004 [ 720.158593][T20229] RBP: 00007fba292fe090 R08: 0000000000000000 R09: 0000000000000000 [ 720.158605][T20229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.158615][T20229] R13: 00007fba2b326038 R14: 00007fba2b325fa0 R15: 00007ffd5c22e748 [ 720.158631][T20229] [ 720.193091][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 720.218093][ T5874] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 720.218117][ T5874] usb 1-1: config 0 has no interface number 0 [ 720.218152][ T5874] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 720.544888][T20237] FAULT_INJECTION: forcing a failure. [ 720.544888][T20237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.544923][T20237] CPU: 0 UID: 0 PID: 20237 Comm: syz.2.5358 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 720.544948][T20237] Tainted: [L]=SOFTLOCKUP [ 720.544955][T20237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 720.544966][T20237] Call Trace: [ 720.544973][T20237] [ 720.544982][T20237] dump_stack_lvl+0xe8/0x150 [ 720.545013][T20237] should_fail_ex+0x46b/0x600 [ 720.545039][T20237] _copy_from_user+0x2d/0xb0 [ 720.545071][T20237] ___sys_sendmsg+0x1c6/0x360 [ 720.545102][T20237] ? __pfx____sys_sendmsg+0x10/0x10 [ 720.545135][T20237] ? kstrtouint+0x6e/0xe0 [ 720.545178][T20237] ? __fget_files+0x2a/0x420 [ 720.545199][T20237] ? __fget_files+0x3a6/0x420 [ 720.545228][T20237] __sys_sendmmsg+0x282/0x4e0 [ 720.545257][T20237] ? __pfx___sys_sendmmsg+0x10/0x10 [ 720.545290][T20237] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 720.545324][T20237] ? ksys_write+0x248/0x270 [ 720.545351][T20237] ? __pfx_ksys_write+0x10/0x10 [ 720.545382][T20237] __x64_sys_sendmmsg+0xa0/0xc0 [ 720.545409][T20237] do_syscall_64+0x14d/0xf80 [ 720.545431][T20237] ? trace_irq_disable+0x3b/0x150 [ 720.545452][T20237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.545471][T20237] ? clear_bhb_loop+0x40/0x90 [ 720.545493][T20237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.545511][T20237] RIP: 0033:0x7fba2b0ac799 [ 720.545529][T20237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.545545][T20237] RSP: 002b:00007fba292fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 720.545565][T20237] RAX: ffffffffffffffda RBX: 00007fba2b325fa0 RCX: 00007fba2b0ac799 [ 720.545578][T20237] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 720.545590][T20237] RBP: 00007fba292fe090 R08: 0000000000000000 R09: 0000000000000000 [ 720.545602][T20237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.545613][T20237] R13: 00007fba2b326038 R14: 00007fba2b325fa0 R15: 00007ffd5c22e748 [ 720.545643][T20237] [ 720.890714][T20241] overlayfs: conflicting lowerdir path [ 721.654025][ T5874] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 721.657293][ T5874] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 721.657320][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 721.657561][ T5874] usb 1-1: Product: syz [ 721.657598][ T5874] usb 1-1: SerialNumber: syz [ 721.731986][ T5874] usb 1-1: config 0 descriptor?? [ 721.750253][ T5874] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 721.768648][ T5874] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input29 [ 721.923777][T20256] FAULT_INJECTION: forcing a failure. [ 721.923777][T20256] name failslab, interval 1, probability 0, space 0, times 0 [ 721.923816][T20256] CPU: 0 UID: 0 PID: 20256 Comm: syz.1.5366 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 721.923842][T20256] Tainted: [L]=SOFTLOCKUP [ 721.923848][T20256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 721.923859][T20256] Call Trace: [ 721.923866][T20256] [ 721.923875][T20256] dump_stack_lvl+0xe8/0x150 [ 721.923906][T20256] should_fail_ex+0x46b/0x600 [ 721.923931][T20256] should_failslab+0xa8/0x100 [ 721.923951][T20256] __kmalloc_noprof+0xdf/0x7b0 [ 721.923976][T20256] ? kfree+0x4d/0x6c0 [ 721.923997][T20256] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 721.924022][T20256] tomoyo_realpath_from_path+0xe3/0x5d0 [ 721.924051][T20256] ? tomoyo_path_number_perm+0x219/0x630 [ 721.924075][T20256] tomoyo_path_number_perm+0x246/0x630 [ 721.924101][T20256] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 721.924127][T20256] ? __lock_acquire+0x6b5/0x2cf0 [ 721.924177][T20256] ? __fget_files+0x2a/0x420 [ 721.924201][T20256] ? __fget_files+0x2a/0x420 [ 721.924221][T20256] ? __fget_files+0x3a6/0x420 [ 721.924240][T20256] ? __fget_files+0x2a/0x420 [ 721.924264][T20256] security_file_ioctl+0xc3/0x2a0 [ 721.924291][T20256] __se_sys_ioctl+0x47/0x170 [ 721.924319][T20256] do_syscall_64+0x14d/0xf80 [ 721.924342][T20256] ? trace_irq_disable+0x3b/0x150 [ 721.924361][T20256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.924379][T20256] ? clear_bhb_loop+0x40/0x90 [ 721.924400][T20256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.924417][T20256] RIP: 0033:0x7f9ffaf4c799 [ 721.924433][T20256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.924458][T20256] RSP: 002b:00007f9ff919e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 721.924478][T20256] RAX: ffffffffffffffda RBX: 00007f9ffb1c5fa0 RCX: 00007f9ffaf4c799 [ 721.924492][T20256] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 721.924504][T20256] RBP: 00007f9ff919e090 R08: 0000000000000000 R09: 0000000000000000 [ 721.924516][T20256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.924527][T20256] R13: 00007f9ffb1c6038 R14: 00007f9ffb1c5fa0 R15: 00007ffef8985bc8 [ 721.924556][T20256] [ 721.924647][T20256] ERROR: Out of memory at tomoyo_realpath_from_path. [ 721.925100][T20256] loop2: detected capacity change from 0 to 7 [ 721.934626][T20256] Dev loop2: unable to read RDB block 7 [ 721.934683][T20256] loop2: unable to read partition table [ 721.934877][T20256] loop2: partition table beyond EOD, truncated [ 721.934893][T20256] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 721.952092][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 721.990010][ T5879] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 722.161800][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 722.185597][ T5879] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.185628][ T5879] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.185649][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 722.185680][ T5879] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 722.185700][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.214212][ T5879] usb 4-1: config 0 descriptor?? [ 722.552058][ T5802] usb 5-1: qt2_attach - failed to power on unit: -71 [ 722.552395][ T5802] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 722.602196][ T5802] usb 5-1: USB disconnect, device number 35 [ 722.659267][ T5879] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 722.659293][ T5879] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 722.659315][ T5879] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 722.659340][ T5879] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 722.659365][ T5879] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 722.696128][ T5879] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 722.724280][T20272] FAULT_INJECTION: forcing a failure. [ 722.724280][T20272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.724315][T20272] CPU: 1 UID: 0 PID: 20272 Comm: syz.2.5373 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 722.724340][T20272] Tainted: [L]=SOFTLOCKUP [ 722.724347][T20272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 722.724357][T20272] Call Trace: [ 722.724366][T20272] [ 722.724373][T20272] dump_stack_lvl+0xe8/0x150 [ 722.724403][T20272] should_fail_ex+0x46b/0x600 [ 722.724437][T20272] _copy_from_user+0x2d/0xb0 [ 722.724460][T20272] io_submit_one+0xd3/0x14c0 [ 722.724489][T20272] ? irqentry_exit+0x59e/0x620 [ 722.724512][T20272] ? lockdep_hardirqs_on+0x7a/0x110 [ 722.724532][T20272] ? irqentry_exit+0x59e/0x620 [ 722.724553][T20272] ? trace_irq_disable+0x3b/0x150 [ 722.724578][T20272] ? __pfx_io_submit_one+0x10/0x10 [ 722.724616][T20272] ? __might_fault+0xaf/0x130 [ 722.724645][T20272] __se_sys_io_submit+0x195/0x340 [ 722.724670][T20272] ? __pfx___se_sys_io_submit+0x10/0x10 [ 722.724691][T20272] ? ksys_write+0x248/0x270 [ 722.724730][T20272] do_syscall_64+0x14d/0xf80 [ 722.724752][T20272] ? trace_irq_disable+0x3b/0x150 [ 722.724771][T20272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.724789][T20272] ? clear_bhb_loop+0x40/0x90 [ 722.724811][T20272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.724829][T20272] RIP: 0033:0x7fba2b0ac799 [ 722.724846][T20272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.724861][T20272] RSP: 002b:00007fba292fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 722.724881][T20272] RAX: ffffffffffffffda RBX: 00007fba2b325fa0 RCX: 00007fba2b0ac799 [ 722.724895][T20272] RDX: 0000200000000100 RSI: 0000000000000001 RDI: 00007fba2be5e000 [ 722.724908][T20272] RBP: 00007fba292fe090 R08: 0000000000000000 R09: 0000000000000000 [ 722.724919][T20272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.724931][T20272] R13: 00007fba2b326038 R14: 00007fba2b325fa0 R15: 00007ffd5c22e748 [ 722.724960][T20272] [ 722.854816][T20277] netlink: 'syz.4.5374': attribute type 1 has an invalid length. [ 722.854836][T20277] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5374'. [ 723.017300][ T810] usb 4-1: USB disconnect, device number 47 [ 724.086293][T20306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.093107][T20306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.728556][T20319] netlink: 'syz.4.5387': attribute type 10 has an invalid length. [ 724.805632][T20315] netlink: 'syz.4.5387': attribute type 10 has an invalid length. [ 724.805652][T20315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5387'. [ 724.806600][T20319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.836949][T20319] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 724.838101][T20315] batadv0: entered promiscuous mode [ 724.838121][T20315] batadv0: entered allmulticast mode [ 724.910483][T20315] bond0: (slave batadv0): Releasing backup interface [ 725.085914][T20317] syz.2.5390 (20317) used greatest stack depth: 14744 bytes left [ 725.149319][T20315] bridge0: port 3(batadv0) entered blocking state [ 725.149447][T20315] bridge0: port 3(batadv0) entered disabled state [ 725.177426][ T1470] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 725.177442][ T1470] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 726.642366][ T809] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 726.835128][ T809] usb 3-1: Using ep0 maxpacket: 8 [ 726.838924][ T809] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 726.838948][ T809] usb 3-1: config 0 has no interface number 0 [ 726.838992][ T809] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 726.839016][ T809] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 50335, setting to 1024 [ 726.839056][ T809] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 726.839078][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.907541][ T809] usb 3-1: config 0 descriptor?? [ 726.908550][T20352] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 726.961042][ T809] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 727.145055][T20364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.145581][T20364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.192402][ T809] usb 3-1: USB disconnect, device number 44 [ 727.209148][T19213] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 727.321096][T20369] FAULT_INJECTION: forcing a failure. [ 727.321096][T20369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.321130][T20369] CPU: 0 UID: 0 PID: 20369 Comm: syz.3.5410 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 727.321155][T20369] Tainted: [L]=SOFTLOCKUP [ 727.321162][T20369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 727.321172][T20369] Call Trace: [ 727.321180][T20369] [ 727.321189][T20369] dump_stack_lvl+0xe8/0x150 [ 727.321219][T20369] should_fail_ex+0x46b/0x600 [ 727.321245][T20369] _copy_from_user+0x2d/0xb0 [ 727.321268][T20369] ___sys_sendmsg+0x1c6/0x360 [ 727.321298][T20369] ? __pfx____sys_sendmsg+0x10/0x10 [ 727.321354][T20369] ? __fget_files+0x2a/0x420 [ 727.321375][T20369] ? __fget_files+0x3a6/0x420 [ 727.321403][T20369] __x64_sys_sendmsg+0x1c3/0x2a0 [ 727.321427][T20369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 727.321459][T20369] ? __pfx_ksys_write+0x10/0x10 [ 727.321492][T20369] do_syscall_64+0x14d/0xf80 [ 727.321514][T20369] ? trace_irq_disable+0x3b/0x150 [ 727.321532][T20369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.321551][T20369] ? clear_bhb_loop+0x40/0x90 [ 727.321571][T20369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.321600][T20369] RIP: 0033:0x7f756f18c799 [ 727.321618][T20369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.321634][T20369] RSP: 002b:00007f756d3e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.321654][T20369] RAX: ffffffffffffffda RBX: 00007f756f405fa0 RCX: 00007f756f18c799 [ 727.321667][T20369] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 727.321678][T20369] RBP: 00007f756d3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 727.321690][T20369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.321702][T20369] R13: 00007f756f406038 R14: 00007f756f405fa0 R15: 00007ffd97d27598 [ 727.321730][T20369] [ 727.369860][T19213] usb 5-1: Using ep0 maxpacket: 16 [ 727.377664][T19213] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 727.377691][T19213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.377709][T19213] usb 5-1: Product: syz [ 727.377723][T19213] usb 5-1: Manufacturer: syz [ 727.377736][T19213] usb 5-1: SerialNumber: syz [ 727.404114][T19213] usb 5-1: config 0 descriptor?? [ 727.910363][T19213] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 727.972978][T19213] usb 5-1: USB disconnect, device number 36 [ 728.209794][ T809] usb 1-1: USB disconnect, device number 61 [ 728.333297][ T809] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 729.068649][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 729.068709][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 731.794853][T20530] FAULT_INJECTION: forcing a failure. [ 731.794853][T20530] name failslab, interval 1, probability 0, space 0, times 0 [ 731.794887][T20530] CPU: 0 UID: 0 PID: 20530 Comm: syz.2.5445 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 731.794909][T20530] Tainted: [L]=SOFTLOCKUP [ 731.794915][T20530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 731.794926][T20530] Call Trace: [ 731.794934][T20530] [ 731.794941][T20530] dump_stack_lvl+0xe8/0x150 [ 731.794970][T20530] should_fail_ex+0x46b/0x600 [ 731.794995][T20530] should_failslab+0xa8/0x100 [ 731.795015][T20530] __kmalloc_noprof+0xdf/0x7b0 [ 731.795037][T20530] ? kfree+0x4d/0x6c0 [ 731.795057][T20530] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 731.795080][T20530] tomoyo_realpath_from_path+0xe3/0x5d0 [ 731.795107][T20530] ? tomoyo_path_number_perm+0x219/0x630 [ 731.795130][T20530] tomoyo_path_number_perm+0x246/0x630 [ 731.795153][T20530] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 731.795178][T20530] ? __lock_acquire+0x6b5/0x2cf0 [ 731.795224][T20530] ? __fget_files+0x2a/0x420 [ 731.795246][T20530] ? __fget_files+0x2a/0x420 [ 731.795265][T20530] ? __fget_files+0x3a6/0x420 [ 731.795283][T20530] ? __fget_files+0x2a/0x420 [ 731.795307][T20530] security_file_ioctl+0xc3/0x2a0 [ 731.795333][T20530] __se_sys_ioctl+0x47/0x170 [ 731.795359][T20530] do_syscall_64+0x14d/0xf80 [ 731.795382][T20530] ? trace_irq_disable+0x3b/0x150 [ 731.795408][T20530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.795424][T20530] ? clear_bhb_loop+0x40/0x90 [ 731.795446][T20530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.795463][T20530] RIP: 0033:0x7fba2b0ac799 [ 731.795488][T20530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.795503][T20530] RSP: 002b:00007fba292fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.795522][T20530] RAX: ffffffffffffffda RBX: 00007fba2b325fa0 RCX: 00007fba2b0ac799 [ 731.795535][T20530] RDX: 0000000000000000 RSI: 00000000000054a2 RDI: 0000000000000003 [ 731.795545][T20530] RBP: 00007fba292fe090 R08: 0000000000000000 R09: 0000000000000000 [ 731.795555][T20530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.795565][T20530] R13: 00007fba2b326038 R14: 00007fba2b325fa0 R15: 00007ffd5c22e748 [ 731.795593][T20530] [ 731.795686][T20530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 732.627943][T20547] tipc: Started in network mode [ 732.627972][T20547] tipc: Node identity ac14140f, cluster identity 4711 [ 732.628966][T20547] tipc: Enabled bearer , priority 10 [ 732.904963][ T809] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 733.263116][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 733.319853][ T809] usb 4-1: config 0 has no interfaces? [ 733.322053][ T809] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 733.322078][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.322096][ T809] usb 4-1: Product: syz [ 733.322109][ T809] usb 4-1: Manufacturer: syz [ 733.322121][ T809] usb 4-1: SerialNumber: syz [ 733.326361][ T809] usb 4-1: config 0 descriptor?? [ 733.477765][T20566] FAULT_INJECTION: forcing a failure. [ 733.477765][T20566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.477787][T20566] CPU: 0 UID: 0 PID: 20566 Comm: syz.4.5459 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 733.477802][T20566] Tainted: [L]=SOFTLOCKUP [ 733.477806][T20566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 733.477812][T20566] Call Trace: [ 733.477817][T20566] [ 733.477823][T20566] dump_stack_lvl+0xe8/0x150 [ 733.477844][T20566] should_fail_ex+0x46b/0x600 [ 733.477858][T20566] _copy_from_user+0x2d/0xb0 [ 733.477873][T20566] __sys_connect+0x156/0x450 [ 733.477888][T20566] ? __pfx___sys_connect+0x10/0x10 [ 733.477907][T20566] ? __pfx_ksys_write+0x10/0x10 [ 733.477926][T20566] __x64_sys_connect+0x7a/0x90 [ 733.477939][T20566] do_syscall_64+0x14d/0xf80 [ 733.477953][T20566] ? trace_irq_disable+0x3b/0x150 [ 733.477964][T20566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.477975][T20566] ? clear_bhb_loop+0x40/0x90 [ 733.477987][T20566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.477997][T20566] RIP: 0033:0x7fec9dd2c799 [ 733.478007][T20566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.478016][T20566] RSP: 002b:00007fec9bf7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 733.478028][T20566] RAX: ffffffffffffffda RBX: 00007fec9dfa5fa0 RCX: 00007fec9dd2c799 [ 733.478036][T20566] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 733.478043][T20566] RBP: 00007fec9bf7e090 R08: 0000000000000000 R09: 0000000000000000 [ 733.478049][T20566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.478055][T20566] R13: 00007fec9dfa6038 R14: 00007fec9dfa5fa0 R15: 00007fffa65f8a58 [ 733.478071][T20566] [ 733.575041][ T5879] usb 4-1: USB disconnect, device number 48 [ 733.789203][T19213] tipc: Node number set to 2886997007 [ 734.234067][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 734.234094][ T36] audit: type=1326 audit(2000000000.448:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20600 comm="syz.4.5473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec9dd2c799 code=0x0 [ 734.301237][T20607] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5476'. [ 734.302411][ T36] audit: type=1326 audit(2000000000.514:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20606 comm="syz.0.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d87f8c799 code=0x7ffc0000 [ 734.302755][ T36] audit: type=1326 audit(2000000000.514:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20606 comm="syz.0.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8d87f8c799 code=0x7ffc0000 [ 734.303290][ T36] audit: type=1326 audit(2000000000.514:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20606 comm="syz.0.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d87f8c799 code=0x7ffc0000 [ 734.303602][ T36] audit: type=1326 audit(2000000000.514:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20606 comm="syz.0.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d87f8c799 code=0x7ffc0000 [ 734.303834][ T36] audit: type=1326 audit(2000000000.514:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20606 comm="syz.0.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8d87f8c799 code=0x7ffc0000 [ 734.304273][ T36] audit: type=1326 audit(2000000000.514:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20606 comm="syz.0.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d87f8c799 code=0x7ffc0000 [ 734.304841][ T36] audit: type=1326 audit(2000000000.514:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20606 comm="syz.0.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f8d87f8c799 code=0x7ffc0000 [ 734.511000][ T36] audit: type=1326 audit(2000000000.710:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20606 comm="syz.0.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d87f8c799 code=0x7ffc0000 [ 734.511214][ T36] audit: type=1326 audit(2000000000.710:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20606 comm="syz.0.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d87f8c799 code=0x7ffc0000 [ 734.673159][T20621] dlm: non-version read from control device 8224 [ 734.848843][T20613] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.849923][T20613] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.305945][ T5882] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 735.411654][T20641] FAULT_INJECTION: forcing a failure. [ 735.411654][T20641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.411720][T20641] CPU: 0 UID: 0 PID: 20641 Comm: syz.2.5489 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 735.411748][T20641] Tainted: [L]=SOFTLOCKUP [ 735.411754][T20641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 735.411764][T20641] Call Trace: [ 735.411772][T20641] [ 735.411780][T20641] dump_stack_lvl+0xe8/0x150 [ 735.411810][T20641] should_fail_ex+0x46b/0x600 [ 735.411835][T20641] _copy_from_user+0x2d/0xb0 [ 735.411859][T20641] do_ipv6_setsockopt+0x264/0x31c0 [ 735.411895][T20641] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 735.411929][T20641] ? rcu_is_watching+0x15/0xb0 [ 735.411952][T20641] ? __pfx___schedule+0x10/0x10 [ 735.411987][T20641] ? irqentry_exit+0x59e/0x620 [ 735.412009][T20641] ? lockdep_hardirqs_on+0x7a/0x110 [ 735.412031][T20641] ? irqentry_exit+0x59e/0x620 [ 735.412052][T20641] ? trace_irq_disable+0x3b/0x150 [ 735.412086][T20641] ? security_socket_setsockopt+0x23b/0x290 [ 735.412115][T20641] ipv6_setsockopt+0x59/0x170 [ 735.412131][T20641] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 735.412154][T20641] do_sock_setsockopt+0x17c/0x1b0 [ 735.412184][T20641] __x64_sys_setsockopt+0x143/0x1b0 [ 735.412212][T20641] do_syscall_64+0x14d/0xf80 [ 735.412233][T20641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.412250][T20641] ? clear_bhb_loop+0x40/0x90 [ 735.412271][T20641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.412288][T20641] RIP: 0033:0x7fba2b0ac799 [ 735.412306][T20641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.412321][T20641] RSP: 002b:00007fba292dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 735.412340][T20641] RAX: ffffffffffffffda RBX: 00007fba2b326090 RCX: 00007fba2b0ac799 [ 735.412353][T20641] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000006 [ 735.412365][T20641] RBP: 00007fba292dd090 R08: 0000000000000108 R09: 0000000000000000 [ 735.412376][T20641] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 735.412387][T20641] R13: 00007fba2b326128 R14: 00007fba2b326090 R15: 00007ffd5c22e748 [ 735.412417][T20641] [ 735.608329][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 735.698539][ T5882] usb 2-1: config 0 has no interfaces? [ 735.728883][ T5882] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 735.728911][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.728929][ T5882] usb 2-1: Product: syz [ 735.728949][ T5882] usb 2-1: Manufacturer: syz [ 735.728962][ T5882] usb 2-1: SerialNumber: syz [ 735.751669][ T5882] usb 2-1: config 0 descriptor?? [ 735.989069][ T5802] usb 2-1: USB disconnect, device number 77 [ 736.105170][T20613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.121486][T20613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.954480][ T5879] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 737.128089][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.128143][ T5879] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 737.128165][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.142709][ T5879] usb 2-1: config 0 descriptor?? [ 737.158392][ T5879] pwc: Askey VC010 type 2 USB webcam detected. [ 737.339196][ T8072] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.339246][ T8072] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.339281][ T8072] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.340653][ T8072] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.439215][T20665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.446294][T20665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.709913][ T5879] pwc: recv_control_msg error -71 req 02 val 2b00 [ 737.717558][ T5879] pwc: recv_control_msg error -71 req 02 val 2700 [ 737.725125][ T5879] pwc: recv_control_msg error -71 req 02 val 2c00 [ 737.725613][ T5879] pwc: recv_control_msg error -71 req 04 val 1000 [ 737.726068][ T5879] pwc: recv_control_msg error -71 req 04 val 1300 [ 737.727996][ T5879] pwc: recv_control_msg error -71 req 04 val 1400 [ 737.728452][ T5879] pwc: recv_control_msg error -71 req 02 val 2000 [ 737.731179][ T5879] pwc: recv_control_msg error -71 req 02 val 2100 [ 737.732311][ T5879] pwc: recv_control_msg error -71 req 04 val 1500 [ 737.732791][ T5879] pwc: recv_control_msg error -71 req 02 val 2500 [ 737.733294][ T5879] pwc: recv_control_msg error -71 req 02 val 2400 [ 737.733739][ T5879] pwc: recv_control_msg error -71 req 02 val 2600 [ 737.736306][ T5879] pwc: recv_control_msg error -71 req 02 val 2900 [ 737.740622][ T5879] pwc: recv_control_msg error -71 req 02 val 2800 [ 737.741258][ T5879] pwc: recv_control_msg error -71 req 04 val 1100 [ 737.741695][ T5879] pwc: recv_control_msg error -71 req 04 val 1200 [ 737.775703][ T5879] pwc: Registered as video103. [ 737.790574][ T5879] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 737.840354][T19213] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 737.851167][ T5879] usb 2-1: USB disconnect, device number 78 [ 738.034997][T19213] usb 4-1: Using ep0 maxpacket: 32 [ 738.038949][T19213] usb 4-1: config 0 has no interfaces? [ 738.041690][T19213] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 738.041716][T19213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.041735][T19213] usb 4-1: Product: syz [ 738.041749][T19213] usb 4-1: Manufacturer: syz [ 738.041763][T19213] usb 4-1: SerialNumber: syz [ 738.072992][T19213] usb 4-1: config 0 descriptor?? [ 738.312663][ T5879] usb 4-1: USB disconnect, device number 49 [ 739.139874][T20749] FAULT_INJECTION: forcing a failure. [ 739.139874][T20749] name failslab, interval 1, probability 0, space 0, times 0 [ 739.139907][T20749] CPU: 0 UID: 0 PID: 20749 Comm: syz.1.5538 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 739.139931][T20749] Tainted: [L]=SOFTLOCKUP [ 739.139939][T20749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 739.139950][T20749] Call Trace: [ 739.139958][T20749] [ 739.139966][T20749] dump_stack_lvl+0xe8/0x150 [ 739.139997][T20749] should_fail_ex+0x46b/0x600 [ 739.140023][T20749] should_failslab+0xa8/0x100 [ 739.140042][T20749] kmem_cache_alloc_noprof+0x87/0x680 [ 739.140068][T20749] ? do_getname+0x2e/0x250 [ 739.140092][T20749] do_getname+0x2e/0x250 [ 739.140108][T20749] ? getname_flags+0x11/0x20 [ 739.140129][T20749] __se_sys_file_getattr+0x1a3/0x5b0 [ 739.140251][T20749] ? __pfx___se_sys_file_getattr+0x10/0x10 [ 739.140273][T20749] ? fput+0xa0/0xd0 [ 739.140293][T20749] ? ksys_write+0x248/0x270 [ 739.140327][T20749] ? __x64_sys_file_getattr+0x20/0xc0 [ 739.140351][T20749] do_syscall_64+0x14d/0xf80 [ 739.140374][T20749] ? trace_irq_disable+0x3b/0x150 [ 739.140393][T20749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.140411][T20749] ? clear_bhb_loop+0x40/0x90 [ 739.140433][T20749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.140451][T20749] RIP: 0033:0x7f9ffaf4c799 [ 739.140469][T20749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.140485][T20749] RSP: 002b:00007f9ff919e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d4 [ 739.140503][T20749] RAX: ffffffffffffffda RBX: 00007f9ffb1c5fa0 RCX: 00007f9ffaf4c799 [ 739.140517][T20749] RDX: 0000200000000280 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 739.140530][T20749] RBP: 00007f9ff919e090 R08: 0000000000000100 R09: 0000000000000000 [ 739.140542][T20749] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 739.140553][T20749] R13: 00007f9ffb1c6038 R14: 00007f9ffb1c5fa0 R15: 00007ffef8985bc8 [ 739.140582][T20749] [ 739.530094][T19213] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 739.690483][T19213] usb 5-1: Using ep0 maxpacket: 16 [ 739.693091][T19213] usb 5-1: descriptor type invalid, skip [ 739.700780][T19213] usb 5-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice= 0.40 [ 739.712594][T19213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.712618][T19213] usb 5-1: Product: ꕷܰꊕⅶ뺤胤鿰䵂ٯ텕弲蓡鄁ﯩ뛓㋢ຝ诐ꗣ⃘踏₈棶㉜㾟ﮁ昁衟蕏擲銶慶䠍Ꮨ櫰줩㊠項 [ 739.712637][T19213] usb 5-1: Manufacturer: Ц [ 739.712649][T19213] usb 5-1: SerialNumber: syz [ 739.765387][ T5879] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 739.925789][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 739.927706][ T5879] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 739.927722][ T5879] usb 3-1: config 8 has no interface number 0 [ 739.927795][ T5879] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 739.927808][ T5879] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 739.927822][ T5879] usb 3-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 739.927836][ T5879] usb 3-1: config 8 interface 206 has no altsetting 0 [ 739.929782][ T5879] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 739.929798][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.929808][ T5879] usb 3-1: Product: syz [ 739.929815][ T5879] usb 3-1: Manufacturer: syz [ 739.929822][ T5879] usb 3-1: SerialNumber: syz [ 740.093524][T19213] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 740.114281][T19213] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 740.178407][T19213] usb 5-1: USB disconnect, device number 37 [ 740.518043][T20782] FAULT_INJECTION: forcing a failure. [ 740.518043][T20782] name failslab, interval 1, probability 0, space 0, times 0 [ 740.518079][T20782] CPU: 1 UID: 0 PID: 20782 Comm: syz.3.5549 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 740.518104][T20782] Tainted: [L]=SOFTLOCKUP [ 740.518111][T20782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 740.518122][T20782] Call Trace: [ 740.518130][T20782] [ 740.518138][T20782] dump_stack_lvl+0xe8/0x150 [ 740.518168][T20782] should_fail_ex+0x46b/0x600 [ 740.518194][T20782] should_failslab+0xa8/0x100 [ 740.518216][T20782] __kmalloc_noprof+0xdf/0x7b0 [ 740.518240][T20782] ? kfree+0x4d/0x6c0 [ 740.518260][T20782] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 740.518286][T20782] tomoyo_realpath_from_path+0xe3/0x5d0 [ 740.518315][T20782] ? tomoyo_path_number_perm+0x219/0x630 [ 740.518338][T20782] tomoyo_path_number_perm+0x246/0x630 [ 740.518365][T20782] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 740.518391][T20782] ? __lock_acquire+0x6b5/0x2cf0 [ 740.518443][T20782] ? __fget_files+0x2a/0x420 [ 740.518470][T20782] ? __fget_files+0x2a/0x420 [ 740.518489][T20782] ? __fget_files+0x3a6/0x420 [ 740.518509][T20782] ? __fget_files+0x2a/0x420 [ 740.518534][T20782] security_file_ioctl+0xc3/0x2a0 [ 740.518562][T20782] __se_sys_ioctl+0x47/0x170 [ 740.518591][T20782] do_syscall_64+0x14d/0xf80 [ 740.518613][T20782] ? trace_irq_disable+0x3b/0x150 [ 740.518626][T20782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.518637][T20782] ? clear_bhb_loop+0x40/0x90 [ 740.518650][T20782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.518667][T20782] RIP: 0033:0x7f756f18c799 [ 740.518685][T20782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.518700][T20782] RSP: 002b:00007f756d3e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 740.518726][T20782] RAX: ffffffffffffffda RBX: 00007f756f405fa0 RCX: 00007f756f18c799 [ 740.518740][T20782] RDX: 0000200000000000 RSI: 0000000040045731 RDI: 0000000000000003 [ 740.518752][T20782] RBP: 00007f756d3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 740.518763][T20782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.518774][T20782] R13: 00007f756f406038 R14: 00007f756f405fa0 R15: 00007ffd97d27598 [ 740.518795][T20782] [ 740.520413][T20782] ERROR: Out of memory at tomoyo_realpath_from_path. [ 741.185728][T20784] bond1: option xmit_hash_policy: invalid value (14) [ 741.248217][T20784] bond1 (unregistering): Released all slaves [ 742.157546][ T5879] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 742.238453][ T5879] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 742.272498][ T5879] usb 3-1: USB disconnect, device number 45 [ 742.308839][ T5879] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 742.309735][ T5879] garmin_gps 3-1:8.206: device disconnected [ 743.752034][T20825] FAULT_INJECTION: forcing a failure. [ 743.752034][T20825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.752070][T20825] CPU: 0 UID: 0 PID: 20825 Comm: syz.0.5562 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 743.752095][T20825] Tainted: [L]=SOFTLOCKUP [ 743.752103][T20825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 743.752114][T20825] Call Trace: [ 743.752122][T20825] [ 743.752130][T20825] dump_stack_lvl+0xe8/0x150 [ 743.752161][T20825] should_fail_ex+0x46b/0x600 [ 743.752188][T20825] _copy_from_user+0x2d/0xb0 [ 743.752213][T20825] ___sys_sendmsg+0x1c6/0x360 [ 743.752245][T20825] ? __pfx____sys_sendmsg+0x10/0x10 [ 743.752302][T20825] ? __fget_files+0x2a/0x420 [ 743.752324][T20825] ? __fget_files+0x3a6/0x420 [ 743.752355][T20825] __x64_sys_sendmsg+0x1c3/0x2a0 [ 743.752382][T20825] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 743.752415][T20825] ? __pfx_ksys_write+0x10/0x10 [ 743.752450][T20825] do_syscall_64+0x14d/0xf80 [ 743.752474][T20825] ? trace_irq_disable+0x3b/0x150 [ 743.752494][T20825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.752512][T20825] ? clear_bhb_loop+0x40/0x90 [ 743.752534][T20825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.752552][T20825] RIP: 0033:0x7f8d87f8c799 [ 743.752570][T20825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.752585][T20825] RSP: 002b:00007f8d861e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 743.752605][T20825] RAX: ffffffffffffffda RBX: 00007f8d88205fa0 RCX: 00007f8d87f8c799 [ 743.752619][T20825] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 743.752631][T20825] RBP: 00007f8d861e6090 R08: 0000000000000000 R09: 0000000000000000 [ 743.752643][T20825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.752654][T20825] R13: 00007f8d88206038 R14: 00007f8d88205fa0 R15: 00007ffc493387f8 [ 743.752683][T20825] [ 745.021339][T20852] FAULT_INJECTION: forcing a failure. [ 745.021339][T20852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.021509][T20852] CPU: 0 UID: 0 PID: 20852 Comm: syz.0.5574 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 745.021536][T20852] Tainted: [L]=SOFTLOCKUP [ 745.021543][T20852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 745.021553][T20852] Call Trace: [ 745.021561][T20852] [ 745.021570][T20852] dump_stack_lvl+0xe8/0x150 [ 745.021599][T20852] should_fail_ex+0x46b/0x600 [ 745.021624][T20852] _copy_to_user+0x31/0xb0 [ 745.021649][T20852] simple_read_from_buffer+0xe1/0x170 [ 745.021675][T20852] proc_fail_nth_read+0x1be/0x230 [ 745.021699][T20852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 745.021723][T20852] ? rw_verify_area+0x2ac/0x4e0 [ 745.021746][T20852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 745.021767][T20852] vfs_read+0x212/0xa80 [ 745.021794][T20852] ? preempt_schedule_thunk+0x16/0x30 [ 745.021824][T20852] ? __pfx_vfs_read+0x10/0x10 [ 745.021847][T20852] ? preempt_schedule_thunk+0x16/0x30 [ 745.021872][T20852] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 745.021896][T20852] ? mutex_lock_nested+0x152/0x1d0 [ 745.021914][T20852] ? fdget_pos+0x252/0x320 [ 745.021944][T20852] ksys_read+0x156/0x270 [ 745.021970][T20852] ? __pfx_ksys_read+0x10/0x10 [ 745.022003][T20852] do_syscall_64+0x14d/0xf80 [ 745.022025][T20852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.022044][T20852] ? clear_bhb_loop+0x40/0x90 [ 745.022066][T20852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.022084][T20852] RIP: 0033:0x7f8d87f4cfce [ 745.022102][T20852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 745.022117][T20852] RSP: 002b:00007f8d861c4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 745.022137][T20852] RAX: ffffffffffffffda RBX: 00007f8d861c56c0 RCX: 00007f8d87f4cfce [ 745.022151][T20852] RDX: 000000000000000f RSI: 00007f8d861c50a0 RDI: 0000000000000006 [ 745.022162][T20852] RBP: 00007f8d861c5090 R08: 0000000000000000 R09: 0000000000000000 [ 745.022174][T20852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.022185][T20852] R13: 00007f8d88206128 R14: 00007f8d88206090 R15: 00007ffc493387f8 [ 745.022215][T20852] [ 745.298633][T20856] netlink: 182 bytes leftover after parsing attributes in process `syz.0.5576'. [ 745.905734][T20859] FAULT_INJECTION: forcing a failure. [ 745.905734][T20859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.905793][T20859] CPU: 0 UID: 0 PID: 20859 Comm: syz.2.5577 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 745.905820][T20859] Tainted: [L]=SOFTLOCKUP [ 745.905827][T20859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 745.905836][T20859] Call Trace: [ 745.905841][T20859] [ 745.905847][T20859] dump_stack_lvl+0xe8/0x150 [ 745.905868][T20859] should_fail_ex+0x46b/0x600 [ 745.905883][T20859] _copy_to_user+0x31/0xb0 [ 745.905898][T20859] simple_read_from_buffer+0xe1/0x170 [ 745.905914][T20859] proc_fail_nth_read+0x1be/0x230 [ 745.905928][T20859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 745.905942][T20859] ? proc_fail_nth_read+0xa/0x230 [ 745.905952][T20859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 745.905964][T20859] vfs_read+0x212/0xa80 [ 745.905981][T20859] ? preempt_schedule_thunk+0x16/0x30 [ 745.905994][T20859] ? __pfx_vfs_read+0x10/0x10 [ 745.906007][T20859] ? preempt_schedule_thunk+0x16/0x30 [ 745.906021][T20859] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 745.906036][T20859] ? mutex_lock_nested+0x152/0x1d0 [ 745.906045][T20859] ? fdget_pos+0x252/0x320 [ 745.906062][T20859] ksys_read+0x156/0x270 [ 745.906078][T20859] ? __pfx_ksys_read+0x10/0x10 [ 745.906090][T20859] ? __se_sys_kcmp+0x80e/0x950 [ 745.906108][T20859] do_syscall_64+0x14d/0xf80 [ 745.906122][T20859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.906132][T20859] ? clear_bhb_loop+0x40/0x90 [ 745.906145][T20859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.906155][T20859] RIP: 0033:0x7fba2b06cfce [ 745.906166][T20859] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 745.906174][T20859] RSP: 002b:00007fba292dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 745.906187][T20859] RAX: ffffffffffffffda RBX: 00007fba292dd6c0 RCX: 00007fba2b06cfce [ 745.906194][T20859] RDX: 000000000000000f RSI: 00007fba292dd0a0 RDI: 0000000000000004 [ 745.906201][T20859] RBP: 00007fba292dd090 R08: 0000000000000000 R09: 0000000000000000 [ 745.906213][T20859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.906219][T20859] R13: 00007fba2b326128 R14: 00007fba2b326090 R15: 00007ffd5c22e748 [ 745.906235][T20859] [ 747.771197][T20868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5581'. [ 747.808480][T20868] ip6gre4: entered promiscuous mode [ 747.808507][T20868] ip6gre4: entered allmulticast mode [ 748.980799][T20877] FAULT_INJECTION: forcing a failure. [ 748.980799][T20877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.980847][T20877] CPU: 0 UID: 0 PID: 20877 Comm: syz.4.5584 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 748.980874][T20877] Tainted: [L]=SOFTLOCKUP [ 748.980881][T20877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 748.980891][T20877] Call Trace: [ 748.980898][T20877] [ 748.980904][T20877] dump_stack_lvl+0xe8/0x150 [ 748.980923][T20877] should_fail_ex+0x46b/0x600 [ 748.980938][T20877] _copy_to_user+0x31/0xb0 [ 748.980954][T20877] simple_read_from_buffer+0xe1/0x170 [ 748.980976][T20877] proc_fail_nth_read+0x1be/0x230 [ 748.980991][T20877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 748.981001][T20877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 748.981013][T20877] ? vfs_read+0x1f7/0xa80 [ 748.981027][T20877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 748.981040][T20877] vfs_read+0x212/0xa80 [ 748.981058][T20877] ? __pfx_vfs_read+0x10/0x10 [ 748.981072][T20877] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 748.981088][T20877] ? lockdep_hardirqs_on+0x7a/0x110 [ 748.981101][T20877] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 748.981114][T20877] ? mutex_lock_nested+0x152/0x1d0 [ 748.981124][T20877] ? fdget_pos+0x252/0x320 [ 748.981140][T20877] ksys_read+0x156/0x270 [ 748.981155][T20877] ? __pfx_ksys_read+0x10/0x10 [ 748.981168][T20877] ? __se_sys_kcmp+0x8a0/0x950 [ 748.981186][T20877] do_syscall_64+0x14d/0xf80 [ 748.981199][T20877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.981209][T20877] ? clear_bhb_loop+0x40/0x90 [ 748.981221][T20877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.981231][T20877] RIP: 0033:0x7fec9dcecfce [ 748.981242][T20877] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 748.981251][T20877] RSP: 002b:00007fec9bf5cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 748.981263][T20877] RAX: ffffffffffffffda RBX: 00007fec9bf5d6c0 RCX: 00007fec9dcecfce [ 748.981270][T20877] RDX: 000000000000000f RSI: 00007fec9bf5d0a0 RDI: 0000000000000006 [ 748.981277][T20877] RBP: 00007fec9bf5d090 R08: 0000000000000000 R09: 0000000000000000 [ 748.981283][T20877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.981289][T20877] R13: 00007fec9dfa6128 R14: 00007fec9dfa6090 R15: 00007fffa65f8a58 [ 748.981305][T20877] [ 750.565254][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 751.373660][T20889] FAULT_INJECTION: forcing a failure. [ 751.373660][T20889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.373696][T20889] CPU: 1 UID: 0 PID: 20889 Comm: syz.0.5582 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 751.373721][T20889] Tainted: [L]=SOFTLOCKUP [ 751.373729][T20889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 751.373741][T20889] Call Trace: [ 751.373749][T20889] [ 751.373757][T20889] dump_stack_lvl+0xe8/0x150 [ 751.373787][T20889] should_fail_ex+0x46b/0x600 [ 751.373815][T20889] _copy_from_user+0x2d/0xb0 [ 751.373838][T20889] ___sys_sendmsg+0x1c6/0x360 [ 751.373869][T20889] ? __pfx____sys_sendmsg+0x10/0x10 [ 751.373926][T20889] ? __fget_files+0x2a/0x420 [ 751.373948][T20889] ? __fget_files+0x3a6/0x420 [ 751.373979][T20889] __x64_sys_sendmsg+0x1c3/0x2a0 [ 751.374005][T20889] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 751.374038][T20889] ? __pfx_ksys_write+0x10/0x10 [ 751.374073][T20889] do_syscall_64+0x14d/0xf80 [ 751.374095][T20889] ? trace_irq_disable+0x3b/0x150 [ 751.374115][T20889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.374134][T20889] ? clear_bhb_loop+0x40/0x90 [ 751.374156][T20889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.374174][T20889] RIP: 0033:0x7f8d87f8c799 [ 751.374192][T20889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.374207][T20889] RSP: 002b:00007f8d861e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.374226][T20889] RAX: ffffffffffffffda RBX: 00007f8d88205fa0 RCX: 00007f8d87f8c799 [ 751.374240][T20889] RDX: 0000000004000010 RSI: 0000200000000380 RDI: 0000000000000003 [ 751.374252][T20889] RBP: 00007f8d861e6090 R08: 0000000000000000 R09: 0000000000000000 [ 751.374264][T20889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.374276][T20889] R13: 00007f8d88206038 R14: 00007f8d88205fa0 R15: 00007ffc493387f8 [ 751.374306][T20889] [ 751.920100][T20899] FAULT_INJECTION: forcing a failure. [ 751.920100][T20899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.920136][T20899] CPU: 0 UID: 0 PID: 20899 Comm: syz.2.5593 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 751.920162][T20899] Tainted: [L]=SOFTLOCKUP [ 751.920169][T20899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 751.920180][T20899] Call Trace: [ 751.920188][T20899] [ 751.920196][T20899] dump_stack_lvl+0xe8/0x150 [ 751.920227][T20899] should_fail_ex+0x46b/0x600 [ 751.920253][T20899] strncpy_from_user+0x36/0x2b0 [ 751.920285][T20899] path_setxattrat+0x191/0x440 [ 751.920319][T20899] ? __pfx_path_setxattrat+0x10/0x10 [ 751.920367][T20899] ? ksys_write+0x248/0x270 [ 751.920395][T20899] ? __pfx_ksys_write+0x10/0x10 [ 751.920424][T20899] __x64_sys_setxattr+0xbc/0xe0 [ 751.920450][T20899] do_syscall_64+0x14d/0xf80 [ 751.920473][T20899] ? trace_irq_disable+0x3b/0x150 [ 751.920493][T20899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.920511][T20899] ? clear_bhb_loop+0x40/0x90 [ 751.920533][T20899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.920551][T20899] RIP: 0033:0x7fba2b0ac799 [ 751.920569][T20899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.920584][T20899] RSP: 002b:00007fba292fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 751.920604][T20899] RAX: ffffffffffffffda RBX: 00007fba2b325fa0 RCX: 00007fba2b0ac799 [ 751.920618][T20899] RDX: 0000200000000180 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 751.920631][T20899] RBP: 00007fba292fe090 R08: 0000000000000000 R09: 0000000000000000 [ 751.920643][T20899] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 751.920654][T20899] R13: 00007fba2b326038 R14: 00007fba2b325fa0 R15: 00007ffd5c22e748 [ 751.920683][T20899] [ 752.132509][T20901] FAULT_INJECTION: forcing a failure. [ 752.132509][T20901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.132565][T20901] CPU: 1 UID: 0 PID: 20901 Comm: syz.3.5592 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 752.132590][T20901] Tainted: [L]=SOFTLOCKUP [ 752.132597][T20901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 752.132608][T20901] Call Trace: [ 752.132616][T20901] [ 752.132624][T20901] dump_stack_lvl+0xe8/0x150 [ 752.132655][T20901] should_fail_ex+0x46b/0x600 [ 752.132680][T20901] _copy_from_user+0x2d/0xb0 [ 752.132704][T20901] ___sys_sendmsg+0x1c6/0x360 [ 752.132736][T20901] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.132765][T20901] ? __schedule+0x1569/0x5240 [ 752.132812][T20901] ? __fget_files+0x2a/0x420 [ 752.132834][T20901] ? __fget_files+0x3a6/0x420 [ 752.132865][T20901] __x64_sys_sendmsg+0x1c3/0x2a0 [ 752.132892][T20901] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 752.132939][T20901] do_syscall_64+0x14d/0xf80 [ 752.132961][T20901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.132980][T20901] ? clear_bhb_loop+0x40/0x90 [ 752.133003][T20901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.133021][T20901] RIP: 0033:0x7f756f18c799 [ 752.133039][T20901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.133056][T20901] RSP: 002b:00007f756d3a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.133076][T20901] RAX: ffffffffffffffda RBX: 00007f756f406180 RCX: 00007f756f18c799 [ 752.133090][T20901] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 752.133102][T20901] RBP: 00007f756d3a4090 R08: 0000000000000000 R09: 0000000000000000 [ 752.133113][T20901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.133124][T20901] R13: 00007f756f406218 R14: 00007f756f406180 R15: 00007ffd97d27598 [ 752.133154][T20901] [ 754.932836][T20941] FAULT_INJECTION: forcing a failure. [ 754.932836][T20941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.932871][T20941] CPU: 0 UID: 0 PID: 20941 Comm: syz.3.5607 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 754.932896][T20941] Tainted: [L]=SOFTLOCKUP [ 754.932901][T20941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 754.932910][T20941] Call Trace: [ 754.932916][T20941] [ 754.932922][T20941] dump_stack_lvl+0xe8/0x150 [ 754.932948][T20941] should_fail_ex+0x46b/0x600 [ 754.932968][T20941] _copy_to_user+0x31/0xb0 [ 754.932989][T20941] simple_read_from_buffer+0xe1/0x170 [ 754.933010][T20941] proc_fail_nth_read+0x1be/0x230 [ 754.933029][T20941] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 754.933047][T20941] ? rw_verify_area+0x2ac/0x4e0 [ 754.933066][T20941] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 754.933083][T20941] vfs_read+0x212/0xa80 [ 754.933114][T20941] ? __pfx_vfs_read+0x10/0x10 [ 754.933137][T20941] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 754.933157][T20941] ? lockdep_hardirqs_on+0x7a/0x110 [ 754.933175][T20941] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 754.933192][T20941] ? mutex_lock_nested+0x152/0x1d0 [ 754.933205][T20941] ? fdget_pos+0x252/0x320 [ 754.933228][T20941] ksys_read+0x156/0x270 [ 754.933249][T20941] ? __pfx_ksys_read+0x10/0x10 [ 754.933266][T20941] ? __pfx_do_sync_core+0x10/0x10 [ 754.933290][T20941] do_syscall_64+0x14d/0xf80 [ 754.933307][T20941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.933322][T20941] ? clear_bhb_loop+0x40/0x90 [ 754.933338][T20941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.933352][T20941] RIP: 0033:0x7f756f14cfce [ 754.933365][T20941] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 754.933378][T20941] RSP: 002b:00007f756d3e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 754.933393][T20941] RAX: ffffffffffffffda RBX: 00007f756d3e66c0 RCX: 00007f756f14cfce [ 754.933404][T20941] RDX: 000000000000000f RSI: 00007f756d3e60a0 RDI: 0000000000000004 [ 754.933413][T20941] RBP: 00007f756d3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 754.933422][T20941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.933430][T20941] R13: 00007f756f406038 R14: 00007f756f405fa0 R15: 00007ffd97d27598 [ 754.933453][T20941] [ 756.467919][T20964] FAULT_INJECTION: forcing a failure. [ 756.467919][T20964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.467953][T20964] CPU: 1 UID: 0 PID: 20964 Comm: syz.0.5615 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 756.467979][T20964] Tainted: [L]=SOFTLOCKUP [ 756.467985][T20964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 756.467996][T20964] Call Trace: [ 756.468004][T20964] [ 756.468013][T20964] dump_stack_lvl+0xe8/0x150 [ 756.468042][T20964] should_fail_ex+0x46b/0x600 [ 756.468068][T20964] _copy_from_user+0x2d/0xb0 [ 756.468092][T20964] ___sys_sendmsg+0x1c6/0x360 [ 756.468123][T20964] ? __pfx____sys_sendmsg+0x10/0x10 [ 756.468179][T20964] ? __fget_files+0x2a/0x420 [ 756.468201][T20964] ? __fget_files+0x3a6/0x420 [ 756.468231][T20964] __x64_sys_sendmsg+0x1c3/0x2a0 [ 756.468258][T20964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 756.468291][T20964] ? __pfx_ksys_write+0x10/0x10 [ 756.468328][T20964] do_syscall_64+0x14d/0xf80 [ 756.468350][T20964] ? trace_irq_disable+0x3b/0x150 [ 756.468371][T20964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.468389][T20964] ? clear_bhb_loop+0x40/0x90 [ 756.468412][T20964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.468437][T20964] RIP: 0033:0x7f8d87f8c799 [ 756.468455][T20964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.468471][T20964] RSP: 002b:00007f8d861e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.468492][T20964] RAX: ffffffffffffffda RBX: 00007f8d88205fa0 RCX: 00007f8d87f8c799 [ 756.468506][T20964] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 756.468518][T20964] RBP: 00007f8d861e6090 R08: 0000000000000000 R09: 0000000000000000 [ 756.468530][T20964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.468542][T20964] R13: 00007f8d88206038 R14: 00007f8d88205fa0 R15: 00007ffc493387f8 [ 756.468572][T20964] [ 756.706934][ T5874] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 756.751020][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5618'. [ 756.751050][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5618'. [ 757.181824][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 757.185677][T20973] FAULT_INJECTION: forcing a failure. [ 757.185677][T20973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.185699][T20973] CPU: 0 UID: 0 PID: 20973 Comm: syz.0.5619 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 757.185714][T20973] Tainted: [L]=SOFTLOCKUP [ 757.185718][T20973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 757.185724][T20973] Call Trace: [ 757.185729][T20973] [ 757.185734][T20973] dump_stack_lvl+0xe8/0x150 [ 757.185754][T20973] should_fail_ex+0x46b/0x600 [ 757.185768][T20973] _copy_from_user+0x2d/0xb0 [ 757.185782][T20973] get_timespec64+0x96/0x1b0 [ 757.185793][T20973] ? __pfx_get_timespec64+0x10/0x10 [ 757.185801][T20973] ? rt_mutex_slowunlock+0x1cb/0x300 [ 757.185814][T20973] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 757.185828][T20973] __se_sys_pselect6+0x13a/0x320 [ 757.185844][T20973] ? __pfx___se_sys_pselect6+0x10/0x10 [ 757.185855][T20973] ? __pfx_ksys_write+0x10/0x10 [ 757.185875][T20973] ? __x64_sys_pselect6+0x21/0xf0 [ 757.185891][T20973] do_syscall_64+0x14d/0xf80 [ 757.185905][T20973] ? trace_irq_disable+0x3b/0x150 [ 757.185916][T20973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.185927][T20973] ? clear_bhb_loop+0x40/0x90 [ 757.185939][T20973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.185949][T20973] RIP: 0033:0x7f8d87f8c799 [ 757.185959][T20973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.185968][T20973] RSP: 002b:00007f8d861bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 757.185980][T20973] RAX: ffffffffffffffda RBX: 00007f8d88206090 RCX: 00007f8d87f8c799 [ 757.185987][T20973] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 757.185994][T20973] RBP: 00007f8d861bc090 R08: 0000200000000280 R09: 0000000000000000 [ 757.186000][T20973] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 757.186007][T20973] R13: 00007f8d88206128 R14: 00007f8d88206090 R15: 00007ffc493387f8 [ 757.186022][T20973] [ 757.195896][ T5874] usb 2-1: descriptor type invalid, skip [ 757.204920][ T5874] usb 2-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice= 0.40 [ 757.204947][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.204966][ T5874] usb 2-1: Product: ꕷܰꊕⅶ뺤胤鿰䵂ٯ텕弲蓡鄁ﯩ뛓㋢ຝ诐ꗣ⃘踏₈棶㉜㾟ﮁ昁衟蕏擲銶慶䠍Ꮨ櫰줩㊠項 [ 757.204985][ T5874] usb 2-1: Manufacturer: Ц [ 757.204998][ T5874] usb 2-1: SerialNumber: syz [ 757.501065][ T5874] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 757.501391][ T5874] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 757.589803][ T5874] usb 2-1: USB disconnect, device number 79 [ 759.366133][T21011] FAULT_INJECTION: forcing a failure. [ 759.366133][T21011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.366167][T21011] CPU: 0 UID: 0 PID: 21011 Comm: syz.4.5614 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 759.366193][T21011] Tainted: [L]=SOFTLOCKUP [ 759.366199][T21011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 759.366210][T21011] Call Trace: [ 759.366218][T21011] [ 759.366226][T21011] dump_stack_lvl+0xe8/0x150 [ 759.366256][T21011] should_fail_ex+0x46b/0x600 [ 759.366283][T21011] _copy_from_user+0x2d/0xb0 [ 759.366306][T21011] ___sys_recvmsg+0x175/0x590 [ 759.366338][T21011] ? __pfx____sys_recvmsg+0x10/0x10 [ 759.366386][T21011] ? __fget_files+0x3a6/0x420 [ 759.366418][T21011] do_recvmmsg+0x33a/0x800 [ 759.366450][T21011] ? __pfx_do_recvmmsg+0x10/0x10 [ 759.366487][T21011] ? rt_mutex_slowunlock+0x1cb/0x300 [ 759.366523][T21011] __x64_sys_recvmmsg+0x198/0x250 [ 759.366550][T21011] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 759.366588][T21011] do_syscall_64+0x14d/0xf80 [ 759.366609][T21011] ? trace_irq_disable+0x3b/0x150 [ 759.366629][T21011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.366649][T21011] ? clear_bhb_loop+0x40/0x90 [ 759.366671][T21011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.366689][T21011] RIP: 0033:0x7fec9dd2c799 [ 759.366707][T21011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.366722][T21011] RSP: 002b:00007fec9bf7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 759.366750][T21011] RAX: ffffffffffffffda RBX: 00007fec9dfa5fa0 RCX: 00007fec9dd2c799 [ 759.366764][T21011] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 759.366776][T21011] RBP: 00007fec9bf7e090 R08: 0000000000000000 R09: 0000000000000000 [ 759.366788][T21011] R10: 0000000040002000 R11: 0000000000000246 R12: 0000000000000001 [ 759.366800][T21011] R13: 00007fec9dfa6038 R14: 00007fec9dfa5fa0 R15: 00007fffa65f8a58 [ 759.366831][T21011] [ 759.661434][ T5799] Oops: general protection fault, probably for non-canonical address 0xdffffc000000006b: 0000 [#1] SMP KASAN PTI [ 759.661459][ T5799] KASAN: null-ptr-deref in range [0x0000000000000358-0x000000000000035f] [ 759.661481][ T5799] CPU: 1 UID: 0 PID: 5799 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 759.661507][ T5799] Tainted: [L]=SOFTLOCKUP [ 759.661514][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 759.661526][ T5799] Workqueue: hci5 hci_rx_work [ 759.661556][ T5799] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 759.661576][ T5799] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 759.661592][ T5799] RSP: 0018:ffffc90004787518 EFLAGS: 00010202 [ 759.661607][ T5799] RAX: dffffc0000000000 RBX: ffffffff88ec47be RCX: 0000000080000001 [ 759.661620][ T5799] RDX: 0000000000000000 RSI: ffffffff88ec47be RDI: 000000000000006b [ 759.661632][ T5799] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 759.661643][ T5799] R10: dffffc0000000000 R11: ffffffff8a2248c0 R12: 0000000000000000 [ 759.661655][ T5799] R13: 0000000000000358 R14: 0000000000000358 R15: 0000000000000001 [ 759.661668][ T5799] FS: 0000000000000000(0000) GS:ffff88812643f000(0000) knlGS:0000000000000000 [ 759.661682][ T5799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 759.661695][ T5799] CR2: 00007fba2be55690 CR3: 000000005c8ea000 CR4: 00000000003526f0 [ 759.661721][ T5799] Call Trace: [ 759.661728][ T5799] [ 759.661736][ T5799] __kasan_check_byte+0x12/0x40 [ 759.661763][ T5799] lock_acquire+0x79/0x2e0 [ 759.661784][ T5799] lock_sock_nested+0x3e/0x130 [ 759.661803][ T5799] ? l2cap_sock_new_connection_cb+0x4a/0x2e0 [ 759.661827][ T5799] l2cap_sock_new_connection_cb+0x4a/0x2e0 [ 759.661849][ T5799] l2cap_connect_cfm+0x368/0x1390 [ 759.661869][ T5799] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 759.661886][ T5799] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 759.661912][ T5799] ? lockdep_hardirqs_on+0x7a/0x110 [ 759.661935][ T5799] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 759.661956][ T5799] ? mutex_lock_nested+0x152/0x1d0 [ 759.661973][ T5799] ? hci_connect_cfm+0x2c/0x140 [ 759.661997][ T5799] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 759.662014][ T5799] hci_connect_cfm+0x95/0x140 [ 759.662037][ T5799] le_conn_complete_evt+0xf65/0x1430 [ 759.662065][ T5799] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 759.662090][ T5799] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 759.662112][ T5799] ? lockdep_hardirqs_on+0x7a/0x110 [ 759.662134][ T5799] ? skb_pull_data+0xfb/0x200 [ 759.662153][ T5799] hci_le_conn_complete_evt+0x187/0x470 [ 759.662181][ T5799] hci_event_packet+0x7af/0x12c0 [ 759.662204][ T5799] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 759.662226][ T5799] ? __pfx_hci_event_packet+0x10/0x10 [ 759.662247][ T5799] ? rt_spin_unlock+0x14f/0x200 [ 759.662269][ T5799] ? hci_send_to_monitor+0xe2/0x590 [ 759.662287][ T5799] hci_rx_work+0x3ee/0x1030 [ 759.662311][ T5799] ? process_scheduled_works+0xa25/0x1830 [ 759.662335][ T5799] process_scheduled_works+0xb02/0x1830 [ 759.662368][ T5799] ? __pfx_process_scheduled_works+0x10/0x10 [ 759.662393][ T5799] ? assign_work+0x3d5/0x5e0 [ 759.662416][ T5799] worker_thread+0xa50/0xfc0 [ 759.662450][ T5799] kthread+0x388/0x470 [ 759.662467][ T5799] ? __pfx_worker_thread+0x10/0x10 [ 759.662489][ T5799] ? __pfx_kthread+0x10/0x10 [ 759.662506][ T5799] ret_from_fork+0x51e/0xb90 [ 759.662531][ T5799] ? __pfx_ret_from_fork+0x10/0x10 [ 759.662552][ T5799] ? __switch_to+0xc7d/0x1450 [ 759.662574][ T5799] ? __pfx_kthread+0x10/0x10 [ 759.662592][ T5799] ret_from_fork_asm+0x1a/0x30 [ 759.662616][ T5799] [ 759.662632][ T5799] Modules linked in: [ 759.662651][ T5799] ---[ end trace 0000000000000000 ]--- [ 759.662665][ T5799] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 759.662685][ T5799] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 759.662708][ T5799] RSP: 0018:ffffc90004787518 EFLAGS: 00010202 [ 759.662725][ T5799] RAX: dffffc0000000000 RBX: ffffffff88ec47be RCX: 0000000080000001 [ 759.662740][ T5799] RDX: 0000000000000000 RSI: ffffffff88ec47be RDI: 000000000000006b [ 759.662753][ T5799] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 759.662765][ T5799] R10: dffffc0000000000 R11: ffffffff8a2248c0 R12: 0000000000000000 [ 759.662779][ T5799] R13: 0000000000000358 R14: 0000000000000358 R15: 0000000000000001 [ 759.662792][ T5799] FS: 0000000000000000(0000) GS:ffff88812643f000(0000) knlGS:0000000000000000 [ 759.662808][ T5799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 759.662821][ T5799] CR2: 00007fba2be55690 CR3: 000000005c8ea000 CR4: 00000000003526f0 [ 759.662843][ T5799] Kernel panic - not syncing: Fatal exception [ 759.663104][ T5799] Kernel Offset: disabled