last executing test programs: 8m45.637272733s ago: executing program 3 (id=99): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x7) fanotify_init(0x200, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) connect$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x16, r3, 0x1, 0x81}, 0x14) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m44.978256899s ago: executing program 4 (id=103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0xb4, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x4, 0x8000446, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8010}, 0x44830) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x60040) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000200)={0xa, @capture={0x0, 0x1, {0x9, 0x8000}, 0x7, 0x6}}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="310000001000000000000000", @ANYRES32, @ANYBLOB="e8b51a67a6e25a74c3a087ada8b0b498300cfbcea9c1258835bc52ebd3e5791b0a7e8267a313dfcc8c6b82d084c7f868de1e526d835223aa7dcaad13dd92f9a0379a4f9b279996bf29854e5a555bb3b9a60a980f4a173b41b93ecfc51e9e6c4ea2c642e2422464f30dce85e88d78b500040535dc660fac4b7d19361ee758754b5deda2bc9069a5522cda0637ca0e400aa77409e33abc3e265dcf6cd533be5a5b176a7ff41cbef9", @ANYRES64=0x0], 0x20) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xfffffffffffff4f9, 0x7d, 0xfffffffffffffffc, 0x0, 0x8, 0x1}, 0x0, &(0x7f00000003c0)={0x3ff, 0x4000000000000560, 0xffffffbfffffbfff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = socket(0x0, 0x5, 0x6) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r3, @ANYRES16, @ANYRES8], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc040081) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/177, 0xb1}], 0x1}, 0xcce1}], 0x1, 0x20, 0x0) 8m44.538210374s ago: executing program 3 (id=105): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) (fail_nth: 1) 8m44.024938943s ago: executing program 2 (id=107): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x7fffffff, 0xffffffff, 0x2}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r0 = syz_open_dev$video4linux(&(0x7f0000000480), 0xf, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, @raw_data=[0x80b, 0x400008, 0x7, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x8, 0x5, 0xd60, 0x80000004, 0x4, 0x1, 0xeb]}) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r2, 0x4b4b, &(0x7f0000000340)=""/6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3f, 0x0, &(0x7f0000000380)="e30080670000ec67838717bd86dde148d0a2a75b8a1edd63f063096242904bcee14db42415e424cec361dd2757fbf397fd4483dde10f6684a6180f290f19e1", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10}, 0x50) r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) 8m43.921994947s ago: executing program 1 (id=108): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r1 = fanotify_init(0x8, 0x1) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) r2 = dup2(r1, r0) read$FUSE(r2, 0x0, 0x0) 8m43.703151969s ago: executing program 4 (id=109): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x194, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "1a000b00ff80366a6a849a7390450024"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}}, 0x44050) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 8m43.614369185s ago: executing program 3 (id=110): socket(0x10, 0x80003, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000001c0)={0x6, 0xe1, 0xa, 0x50b}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000680)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x9, 0x6, "c829e4", 0x9, 0x33, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x4, 0x0, 0x6, 0x1, 0x0, 0x6, 0x67}]}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000005000000000200004000000000000000", @ANYBLOB="24e39362", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r2, &(0x7f0000000080), &(0x7f0000000180)=""/29}, 0x20) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write(r6, &(0x7f00000000c0)="510003000000", 0x6) sendmmsg(r3, &(0x7f0000000000), 0x1ff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x5, 0x0, 0x2, 0x10004003, 0x7, 0x0, 0x7}}) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000001580)={0x21}, 0x8) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r9, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4082, 0xff2}, {&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f0000002980)=""/219, 0xdb}, {&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f0000000640)=""/141, 0x8d}], 0x7}, 0x4}], 0x1, 0x0, 0x0) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000140)={0x7, 0x0, 0xeb, 0xf2, 0x4, 0x7f, 0x27, 0x4, 0x6, 0xd, 0x5, 0x6, 0xce, 0x5}, 0xe) connect$can_bcm(r8, &(0x7f0000000200), 0x10) clock_gettime(0x3, &(0x7f00000004c0)) socket$inet6_sctp(0xa, 0x1, 0x84) 8m43.443986925s ago: executing program 1 (id=112): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) 8m43.419840693s ago: executing program 2 (id=113): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x21e6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) (fail_nth: 2) 8m42.766302073s ago: executing program 2 (id=114): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000240)={0x1, 0xc}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x40, &(0x7f0000000400)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e25, @loopback}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f0000000500)=0x10) 8m42.764072011s ago: executing program 1 (id=115): syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000017e000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m42.586093697s ago: executing program 4 (id=116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x7) fanotify_init(0x200, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) connect$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x16, r3, 0x1, 0x81}, 0x14) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m42.46608592s ago: executing program 2 (id=118): socket(0x2b, 0x1, 0x0) socket(0x26, 0x3, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3c, &(0x7f0000000280), 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000061c0)=ANY=[@ANYBLOB="140000001400010600000000000000002b"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000100000000000000070000000000009500000000000066156b9c918cd1763d8c385e7e"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x22020400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000001000000022000001d00000000000000", @ANYRES32=0x1, @ANYBLOB="ffca0000e8ffffffcc8dffff4423000000000000eca9711850ce7bd6359d0d542a4aefbc71888f94c7510184bdb3a4", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1ff, r4, 0x4}, 0x38) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r6, 0x0, r5}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x4f0, 0xffffffff, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'hsr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0xffffffffffffffff}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @loopback, 0x0, 0x0, 'bond_slave_1\x00', 'batadv_slave_1\x00', {0x836b636e4bafbd70}, {}, 0x62, 0x2, 0x6}, 0x287, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x40c, [{0x5, 0x7, 0x40, 0x1000}, {0x2, 0x6, 0x10, 0x1}, {0x9, 0x3, 0x81, 0x3}, {0x8, 0x41, 0x4, 0x1}, {0x6, 0x6, 0xe, 0x1}, {0x8001, 0x10, 0x1, 0x4}, {0xa2, 0x0, 0x7f, 0xa}, {0x7fff, 0x5, 0x5, 0x3}, {0x3ff, 0xe8, 0x2, 0x80}, {0x5, 0x9, 0x7}, {0x4, 0x40, 0x4}, {0xfffb, 0x1, 0xf3, 0x6}, {0x3, 0x8, 0x6, 0x2}, {0x3, 0x8, 0x3, 0x10000}, {0x31, 0x80, 0xd, 0x800}, {0xc, 0xff, 0x1c, 0x4}, {0x6, 0x0, 0xc, 0xf}, {0x7, 0xb5, 0x6, 0x80576}, {0x3, 0xc, 0x6, 0x9}, {0x2, 0x8, 0xf8, 0xfffffff2}, {0x7fc, 0xca, 0xc, 0x4e14}, {0x76, 0x7, 0xcb, 0x7}, {0x8, 0x1, 0x1c, 0xfff}, {0x1, 0x2, 0x2, 0xfec4}, {0x0, 0x3, 0x80, 0x9}, {0x400, 0x0, 0x4, 0x8}, {0x1, 0x1, 0x1, 0xa}, {0xc7b8, 0x57, 0xfc, 0x6}, {0x7, 0x7, 0x3, 0x8}, {0x10, 0x7, 0xd, 0xfffffffe}, {0x8, 0xfc, 0xff, 0x6}, {0x3, 0x9, 0x6, 0x9}, {0x2, 0x8, 0x8, 0x2}, {0x2f1c, 0xfd, 0x8}, {0x400, 0x0, 0x4, 0x7}, {0x7d, 0x8, 0x4, 0x1}, {0x4, 0x1a, 0x80, 0x7}, {0x1, 0x4, 0x8, 0xfffff000}, {0x1ff, 0x2, 0x9, 0xc}, {0xc30f, 0x1, 0x3, 0x3}, {0x4, 0x0, 0xbf}, {0x7, 0xc, 0x5, 0x3}, {0x2, 0x1, 0x5, 0x1}, {0xdf, 0x3, 0x4, 0xfa98}, {0x800, 0x3, 0x5, 0x2}, {0x200, 0x9, 0x81, 0x1}, {0x8, 0x0, 0x6d}, {0x3, 0x4, 0xea, 0xa0c4}, {0x40, 0x38, 0x3, 0x91e2}, {0x9, 0x91, 0xfd, 0xfffff001}, {0x2, 0x6, 0x10, 0xfffffff9}, {0x5, 0x1, 0x4, 0xd8b}, {0x6, 0x2, 0x9, 0x3}, {0x1, 0xe0, 0x5, 0x6}, {0x2, 0x8, 0x1, 0xbdcb}, {0x5, 0xfb, 0x0, 0x9}, {0x100, 0xf8, 0xf5, 0xfd}, {0x5, 0xf1, 0x0, 0x1ff}, {0x5, 0x1, 0x9c, 0x8}, {0x1000, 0xe, 0x2, 0x3}, {0xa, 0x1, 0x2, 0xc7e}, {0x5e1, 0x8e, 0x7, 0x5}, {0x6, 0x8, 0x4, 0x6}, {0x9, 0x67, 0xfd, 0x8}], {0x2}}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x1, 0x2}, {0x3, 0x0, 0x7}, {0x2, 0x6, 0x1}, 0x80, 0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) r8 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r8, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) 8m42.419749182s ago: executing program 1 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0xb4, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x4, 0x8000446, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8010}, 0x44830) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x60040) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000200)={0xa, @capture={0x0, 0x1, {0x9, 0x8000}, 0x7, 0x6}}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="310000001000000000000000", @ANYBLOB="e8b51a67a6e25a74c3a087ada8b0b498300cfbcea9c1258835bc52ebd3e5791b0a7e8267a313dfcc8c6b82d084c7f868de1e526d835223aa7dcaad13dd92f9a0379a4f9b279996bf29854e5a555bb3b9a60a980f4a173b41b93ecfc51e9e6c4ea2c642e2422464f30dce85e88d78b500040535dc660fac4b7d19361ee758754b5deda2bc9069a5522cda0637ca0e400aa77409e33abc3e265dcf6cd533be5a5b176a7ff41cbef905", @ANYRES64=0x0], 0x20) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xfffffffffffff4f9, 0x7d, 0xfffffffffffffffc, 0x0, 0x8, 0x1}, 0x0, &(0x7f00000003c0)={0x3ff, 0x4000000000000560, 0xffffffbfffffbfff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = socket(0x0, 0x5, 0x6) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r3, @ANYRES16, @ANYRES8], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc040081) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/177, 0xb1}], 0x1}, 0xcce1}], 0x1, 0x20, 0x0) 8m41.342172834s ago: executing program 4 (id=120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) close(0x3) 8m41.12081402s ago: executing program 3 (id=121): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000003e00070127bd700000000000017c00000400fc800c000180e6ffeeff", @ANYRES32=r2, @ANYBLOB="080002"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 8m40.654068187s ago: executing program 1 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0xc0d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b2, 0x0, 0xf}]}) 8m40.522144846s ago: executing program 2 (id=124): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004140)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r5, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r6, 0x589, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x21}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x40000) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x0) 8m40.349919544s ago: executing program 4 (id=125): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x200000}) 8m40.257911215s ago: executing program 3 (id=127): r0 = socket(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) gettid() setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) bind$x25(r0, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x149521) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045518, &(0x7f0000000140)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0x80000000, 0xf, 0x8, 0x80, 0x2, 0x318, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0xbc5b, 0x80000001, 0x25, 0x11, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xffffffff, 0x8, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x7fffffff, 0x6, 0x6, 0x2, 0x9, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x9, 0x5, 0xfffffff7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0xfffff001, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0x7, 0x0, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x5, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0xf94, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x3, 0x5, 0x1, 0x486, 0x3, 0x303c, 0x3e7, 0x4, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d04, 0x6, 0x38, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x9, 0x5, 0x1c, 0x120000, 0x5, 0x7f, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x69d9, 0xb, 0x5, 0x4, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x14000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7fffffff, 0x1, 0x98, 0xa1f, 0xf40, 0x2, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7]}, 0x45c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x2, 0x5}, 0x4) connect$inet6(r2, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x400e7, @mcast1, 0xfffff373}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71073f3ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) 8m40.229256375s ago: executing program 4 (id=128): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 8m40.162068627s ago: executing program 1 (id=129): syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000017e000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x8, 0x2e5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m39.435117626s ago: executing program 3 (id=130): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='\\##*+^\x00', &(0x7f00000001c0)='%\x00', 0x0) syz_usb_connect$cdc_ncm(0x5, 0x78, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0xac, 0x60, 0x28, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "d695"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x99ab, 0x0, 0x3d}, {0x6, 0x24, 0x1a, 0x400, 0x2a}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x12, 0xe2}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0xff, 0x1}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x7f, 0x2, 0xfd, 0x8, 0x1}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x861}}, {0xf9, &(0x7f0000000240)=@string={0xf9, 0x3, "2c263a46aed01255b785d7f6981c0763c109d58ac5358fa97e769636edcd4133982070cdcc7c3bf7b5ee6635178bbddb8a8e4ccc47962fa6f334fedbdfd9e33d1acce16efb7ff7f770054f339d827aff4ebaf697c0e4ed6393c965643b586fed92abbc1b9bfd001d0644d02b98e878a80add2497afd03268c6560282df762b180a045cafc64a3e583a4ad360f1b4cd8c3836f7fbf5180037b881848eaab4849fd3661d9e194853129cd02877523371b787758dee288e0b711a5cc64a213b6008523dfae3593a5987accb3c0a716779c136b18ae524c7ddbc26ef9367d60a1185fa2b95ee8faae8823f5521f67567e0acf1bdd6258fbbb7"}}, {0x9e, &(0x7f0000000340)=@string={0x9e, 0x3, "462b476326e4f48f47e7eb9beb609b9497f6bf8dd2b150d4e350bf657d1bb25958ad9f00331287329c970d05ffb14365e878057338daaf074daab4ccb91b69fe8e05430a9d479daabd2f638cfdd483959d00a605e7613664b9656bbe48cc201a82cd95913428ab43feafc828c97254ff7cd753cead468a647120fae2f83f369cb051c6e3612223547c8381df0821b7b10fa0ad0fad455c413565a69f"}}, {0x5e, &(0x7f0000000400)=@string={0x5e, 0x3, "1fa421aa710c234d7d98a71a1f08c3e47732be0594092a36bb0328f03a0270abff01f6627721fba2e15399cc7504f7d331eb65ce34ca4666abde89797722a83321a90f68d30c262529347957e6c9858c4f8e5a32c7593abb87ea927a"}}]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="401c01000000"], 0x0, 0x0, 0x0, 0x0}) 8m39.40840298s ago: executing program 2 (id=131): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000020ac050a034000010203010902240001012a40f2090400000003010000002100000001220000a77d7fdc9f4857e69a"], 0x0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000140)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0xa7, &(0x7f0000000080)=""/167}, 0x94) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c011}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc801}, 0x0) (async) close(r2) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x34, 0x3e, 0x107, 0x70bd2b, 0x2, {0x1, 0x7c}, [@nested={0xc, 0xfc, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @ipv4=@empty=0x5000000}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 8m12.737225428s ago: executing program 32 (id=126): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000000)='1\x00', 0x2) 8m12.347321696s ago: executing program 33 (id=129): syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000017e000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x8, 0x2e5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m12.073198517s ago: executing program 34 (id=131): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000020ac050a034000010203010902240001012a40f2090400000003010000002100000001220000a77d7fdc9f4857e69a"], 0x0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000140)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0xa7, &(0x7f0000000080)=""/167}, 0x94) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c011}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc801}, 0x0) (async) close(r2) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x34, 0x3e, 0x107, 0x70bd2b, 0x2, {0x1, 0x7c}, [@nested={0xc, 0xfc, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @ipv4=@empty=0x5000000}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 8m11.721682267s ago: executing program 35 (id=130): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='\\##*+^\x00', &(0x7f00000001c0)='%\x00', 0x0) syz_usb_connect$cdc_ncm(0x5, 0x78, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0xac, 0x60, 0x28, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "d695"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x99ab, 0x0, 0x3d}, {0x6, 0x24, 0x1a, 0x400, 0x2a}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x12, 0xe2}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0xff, 0x1}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x7f, 0x2, 0xfd, 0x8, 0x1}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x861}}, {0xf9, &(0x7f0000000240)=@string={0xf9, 0x3, "2c263a46aed01255b785d7f6981c0763c109d58ac5358fa97e769636edcd4133982070cdcc7c3bf7b5ee6635178bbddb8a8e4ccc47962fa6f334fedbdfd9e33d1acce16efb7ff7f770054f339d827aff4ebaf697c0e4ed6393c965643b586fed92abbc1b9bfd001d0644d02b98e878a80add2497afd03268c6560282df762b180a045cafc64a3e583a4ad360f1b4cd8c3836f7fbf5180037b881848eaab4849fd3661d9e194853129cd02877523371b787758dee288e0b711a5cc64a213b6008523dfae3593a5987accb3c0a716779c136b18ae524c7ddbc26ef9367d60a1185fa2b95ee8faae8823f5521f67567e0acf1bdd6258fbbb7"}}, {0x9e, &(0x7f0000000340)=@string={0x9e, 0x3, "462b476326e4f48f47e7eb9beb609b9497f6bf8dd2b150d4e350bf657d1bb25958ad9f00331287329c970d05ffb14365e878057338daaf074daab4ccb91b69fe8e05430a9d479daabd2f638cfdd483959d00a605e7613664b9656bbe48cc201a82cd95913428ab43feafc828c97254ff7cd753cead468a647120fae2f83f369cb051c6e3612223547c8381df0821b7b10fa0ad0fad455c413565a69f"}}, {0x5e, &(0x7f0000000400)=@string={0x5e, 0x3, "1fa421aa710c234d7d98a71a1f08c3e47732be0594092a36bb0328f03a0270abff01f6627721fba2e15399cc7504f7d331eb65ce34ca4666abde89797722a83321a90f68d30c262529347957e6c9858c4f8e5a32c7593abb87ea927a"}}]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="401c01000000"], 0x0, 0x0, 0x0, 0x0}) 8m11.402640262s ago: executing program 36 (id=128): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 7m42.014846508s ago: executing program 7 (id=134): socket(0x2b, 0x1, 0x0) socket(0x26, 0x3, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3c, &(0x7f0000000280), 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000061c0)=ANY=[@ANYBLOB="140000001400010600000000000000002b"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000100000000000000070000000000009500000000000066156b9c918cd1763d8c385e7e"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x22020400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000001000000022000001d00000000000000", @ANYRES32=0x1, @ANYBLOB="ffca0000e8ffffffcc8dffff4423000000000000eca9711850ce7bd6359d0d542a4aefbc71888f94c7510184bdb3a4", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1ff, r4, 0x4}, 0x38) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r6, 0x0, r5}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x4f0, 0xffffffff, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'hsr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0xffffffffffffffff}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @loopback, 0x0, 0x0, 'bond_slave_1\x00', 'batadv_slave_1\x00', {0x836b636e4bafbd70}, {}, 0x62, 0x2, 0x6}, 0x287, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x40c, [{0x5, 0x7, 0x40, 0x1000}, {0x2, 0x6, 0x10, 0x1}, {0x9, 0x3, 0x81, 0x3}, {0x8, 0x41, 0x4, 0x1}, {0x6, 0x6, 0xe, 0x1}, {0x8001, 0x10, 0x1, 0x4}, {0xa2, 0x0, 0x7f, 0xa}, {0x7fff, 0x5, 0x5, 0x3}, {0x3ff, 0xe8, 0x2, 0x80}, {0x5, 0x9, 0x7}, {0x4, 0x40, 0x4}, {0xfffb, 0x1, 0xf3, 0x6}, {0x3, 0x8, 0x6, 0x2}, {0x3, 0x8, 0x3, 0x10000}, {0x31, 0x80, 0xd, 0x800}, {0xc, 0xff, 0x1c, 0x4}, {0x6, 0x0, 0xc, 0xf}, {0x7, 0xb5, 0x6, 0x80576}, {0x3, 0xc, 0x6, 0x9}, {0x2, 0x8, 0xf8, 0xfffffff2}, {0x7fc, 0xca, 0xc, 0x4e14}, {0x76, 0x7, 0xcb, 0x7}, {0x8, 0x1, 0x1c, 0xfff}, {0x1, 0x2, 0x2, 0xfec4}, {0x0, 0x3, 0x80, 0x9}, {0x400, 0x0, 0x4, 0x8}, {0x1, 0x1, 0x1, 0xa}, {0xc7b8, 0x57, 0xfc, 0x6}, {0x7, 0x7, 0x3, 0x8}, {0x10, 0x7, 0xd, 0xfffffffe}, {0x8, 0xfc, 0xff, 0x6}, {0x3, 0x9, 0x6, 0x9}, {0x2, 0x8, 0x8, 0x2}, {0x2f1c, 0xfd, 0x8}, {0x400, 0x0, 0x4, 0x7}, {0x7d, 0x8, 0x4, 0x1}, {0x4, 0x1a, 0x80, 0x7}, {0x1, 0x4, 0x8, 0xfffff000}, {0x1ff, 0x2, 0x9, 0xc}, {0xc30f, 0x1, 0x3, 0x3}, {0x4, 0x0, 0xbf}, {0x7, 0xc, 0x5, 0x3}, {0x2, 0x1, 0x5, 0x1}, {0xdf, 0x3, 0x4, 0xfa98}, {0x800, 0x3, 0x5, 0x2}, {0x200, 0x9, 0x81, 0x1}, {0x8, 0x0, 0x6d}, {0x3, 0x4, 0xea, 0xa0c4}, {0x40, 0x38, 0x3, 0x91e2}, {0x9, 0x91, 0xfd, 0xfffff001}, {0x2, 0x6, 0x10, 0xfffffff9}, {0x5, 0x1, 0x4, 0xd8b}, {0x6, 0x2, 0x9, 0x3}, {0x1, 0xe0, 0x5, 0x6}, {0x2, 0x8, 0x1, 0xbdcb}, {0x5, 0xfb, 0x0, 0x9}, {0x100, 0xf8, 0xf5, 0xfd}, {0x5, 0xf1, 0x0, 0x1ff}, {0x5, 0x1, 0x9c, 0x8}, {0x1000, 0xe, 0x2, 0x3}, {0xa, 0x1, 0x2, 0xc7e}, {0x5e1, 0x8e, 0x7, 0x5}, {0x6, 0x8, 0x4, 0x6}, {0x9, 0x67, 0xfd, 0x8}], {0x2}}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x1, 0x2}, {0x3, 0x0, 0x7}, {0x2, 0x6, 0x1}, 0x80, 0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) r8 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r8, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) 7m41.55271989s ago: executing program 7 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') pread64(r0, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) 7m41.465648813s ago: executing program 7 (id=138): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4b, &(0x7f0000000340)=""/6) 7m36.681671917s ago: executing program 7 (id=139): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x200000}) (fail_nth: 2) 7m36.47082459s ago: executing program 37 (id=139): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x200000}) (fail_nth: 2) 6.966140943s ago: executing program 0 (id=2688): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x40, 0x8, 0x72, {0x72, 0x1, "fc95ba181bf1a7f1b9798ffaf56f473d33e95060166f07a9917625880b8b140b27d46af9a7bc10f6e9b3adb9bd18dd4d7076b0c0ac8c34ee4c4c9df7ae0082dc63a0599f81d3ee3adba99509dcb5216d2827120adc764092a6711717bcf63ad3fb2fe4613851e1bbbc11abaa6d1733e2"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x40, 0xb, 0xad, "267afe8980ef4f7c5a6de8109b5565887ba31cf2d49fade5f5117352857bb45aa96cd674c8dfc8195249d2399678ff27866a8602944e2b76ad948de255968e48265ed5462eecb851a50d5d8fdeaf3686b8e7bcf5c6b8b1fcc87bfdc0515de739a1ee2a61173cd668acf3b2f62af9c6d1bbfd7e5d5b1e0c8fb50002192381d024b461dd18703b07ced33ef07c25264c386fc411bb1820665a9b2cb90416880d958930e3f393dbea7da445b6a90e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') lseek(r3, 0xfffffffffffffffa, 0x4) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 6.213838073s ago: executing program 6 (id=2699): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgroups(0x0, 0x0) 5.014231604s ago: executing program 5 (id=2703): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x11, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffdfffffffc, 0xfffffffc}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080)=0x2, 0x7f03) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x89, 0xfffff034}, {0x48}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x142, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd70b", 0x10c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x43, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0xf7, 0x5, 0x0, "6069cfa2ffee8dce743bb2368c9cec5847dadad5194072be06fe8df481870515bfa672f0d0ad6732f89b3b9ad7c5ac5561b06edbfb409a4f518eaacbd87f686ef3c15ef1dd06d01ccf3731f4a885b3970d5dd18abdc9b4cd2ef1637c9d0700b8898dc6b0cd76c6f4432cdb8543d2fdba6dc93c8e12346fccdf3b1f7123e63500fbc764d59d2b41c65681c5574d01639f1ce2afd3a3498eea5fb5ed0dde78680b1cd0c6766ae294327bc51503ed6d0fcf7e926b3e2ab38f42f6ad3763881b0c53c726664e9de5e0cddf8434f61c367c6aa2b14f67511daf69a0463abf4509df15899d1f8f96f708dd716e8d15f3429fc01dc64260"}]}}}}}}}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, &(0x7f0000000000)={0x20, 0x1, 0x97, {0x97, 0x13, "78a75c8f1bde2199602e09cbcd8359e39a22b808e2f6885826fb7655d9969b28e5e459745a4654c3b01a832d3845a1a1122da24f59503fc11a0c683a94db918220aa9f641b57b26d7456f2aa289a63976a6f7985e0d25f66c5a5040ff7e020ca90943b4ac8045aa723dd9694ec07f16a7c016cba9e6e761aef63f70b4556e6de4c8fccfe2862eaf4b802fa659d5e66c9dfa1780377"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x101f}}}, &(0x7f0000000680)={0x34, &(0x7f0000000440)={0x20, 0x14, 0xd5, "6f279243564c3742c6ff39781a1353434b61e1317ff77c6782655965c91557fc2787c21a74fe19fc61e87df40765e4b8cc34581f7c9d5c97ec43c91d1275f64e8c94584a5ab1364d0c45f8f73a8c6b6e0128fd23443d4be7562037c492152520e28c50cbef0f78e511a98dccb60e8489623862f2b43d96bc3a818f90884eb4fc7449d42237eccdbabad531fae9ed07786899c2fdc7199a5dbc1be1a642c61d9035c9bfe5650f918d82ee46b8f81bdd5480216dafb75350cfe777498fbe52f22d28ced577765b0e8a3d71bb8978d9d2f67767234449"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000600)={0x40, 0xa0, 0x4, 0xa}, &(0x7f0000000640)={0xc0, 0xa2, 0x2f, "2c654a0102d4c36cc811c02ab4690e885212517f74ac15345966efe7748ab8b67ca30c3945213e684495eadac9ad2e"}}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = gettid() kcmp(r7, r6, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) sched_getattr(r6, &(0x7f0000000580)={0x38}, 0x38, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x19, @string={0x19, 0x3, "9ab591efb6625a56d8b63962bbb87181140da704405c01"}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x10, 0x1, 0x81, 0x5, 0x3, 0xd}}}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x4, 0xffffffff, 0x5, r9}, &(0x7f0000000100)=0x10) 3.960725485s ago: executing program 0 (id=2709): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x74, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x640100fe}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r5, r3, 0x4}, 0x10) 3.906112207s ago: executing program 6 (id=2711): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x400c8c0) syz_usb_connect(0xe, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r3, 0x1, 0x4070bd2b, 0x1, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x3}]}, 0x2c}}, 0x98) write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES8=r4, @ANYRES8=0x0, @ANYBLOB="ee5cfd60450d7b3d5d3b444d92d4683996fe31c86a3e5ce47688d07202f37874c673281a7badf1d8b10dd38ab2bdc4846bde36bf5fe8b2a074214ffa9a58190de54f11db3b5374ab0c61ed040000000000000099b0512f13f9d4b5b4dd6ffb23b9fd10a5b40f6b088a97c574e00bce91c36c7532872cf0f487255a81efc7f6a461e5ceae3d85f4fbbeb4e7c69fee06f102644e6e61fb29e09675b7e2e51528a9dfe1efdd840229112aacc09febb0b0ebead0583e8f2d30070fcbcc9e6da7469685bcc480231e88da174edb5d106d00a3f585c0", @ANYRESOCT=r0, @ANYBLOB="2be6e12317391dadf79f9712a3c3e9f14b2808169b076f2174cf9ae0e649389dfdad26938d549530f86e39dcb5bf028deaff9bddfc70ff08c54a7861d0e633b8c27b4c8bd014bba192230809014d8bf21510f7414afb7db5240994e41434", @ANYRES32=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000000000a23fbb72e4c89ccf83e9c4688ee5d76a94b756e1490000000000000002c6bfdec5e72ba779951a987996b0804e1555304f91a3fbacde1a04d93d6332d050869285a0d32d514a01a4d523ea", @ANYRES64=r5, @ANYRES64=r6, @ANYRES64=0x77359400, @ANYRES64, @ANYBLOB="0000000001"], 0x48}}, 0x0) 3.742236814s ago: executing program 5 (id=2712): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8000000006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0xf, 0x1, 0x2, "6040c47d6572a1000000150073d600deff0000000804000000ee00", 0x49323159}) (fail_nth: 2) 3.68593724s ago: executing program 0 (id=2714): syz_emit_ethernet(0x75, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x37, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x48, {0x0, 0x6, "fd3a85", 0xff, 0x89, 0x0, @remote, @local, [], "85e7d2e1a48a75"}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(0x0, &(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000000)=@nullb, 0x0, 0x0, 0x210818, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.620428572s ago: executing program 5 (id=2715): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000540), 0x280, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x10}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)=0x0) sched_setscheduler(r2, 0x0, &(0x7f0000000440)=0xa380) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r7, 0x0, &(0x7f0000000000)="bd", 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000200)='~', 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x8}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r10, 0x80044dfe, &(0x7f0000000340)) r11 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r11, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010, 0x0, 0x0, 0x0, 0xffffffff, 0x1}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r13 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r13, 0xc0405602, &(0x7f00000011c0)={0x1a, 0x2, 0x0, "4a6b3b2336b289e567507046051555df9a9b380dca688361c241e01eadc97bbb", 0x38415262}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}]}, 0x60}}, 0x40448d0) r17 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r17, 0x40045730, &(0x7f00000002c0)=0x30) r18 = socket$inet_icmp_raw(0x2, 0x3, 0x1) quotactl_fd$Q_GETINFO(r18, 0xffffffff80000501, 0x0, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r18, @ANYRES16=r12, @ANYBLOB="240c29bd7000fcdbdf257700000008000300", @ANYRES32=r14, @ANYBLOB="05feee00000000000500ee00070000000800ef00000000000800ef00010000000800ef0000000000050000ef0008000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x90) 2.437750456s ago: executing program 6 (id=2718): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) gettid() r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x41) 2.354089075s ago: executing program 0 (id=2719): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x2, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x100000, 0x1e4, 0x2, 0x1b, 0xb, 0x1b, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4008000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, '\x95\\4\x150x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r4], &(0x7f0000000200), &(0x7f0000000580)=[r5], &(0x7f0000000040)}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b00)={0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000916977fc6a45bd18bb853966d940ea2e8557ea03f57b35df07d56a4887770001813400b066ebc3c00c8a7c2359701f68118062e0c0a86dc4628614692551713d21bec131434d18aa731579419f6c87caa0f88ce332ce077057c719dd7791"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000200)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000e19519843f975254739000008000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r7, &(0x7f0000000280), 0x0}, 0x20) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 2.311975907s ago: executing program 8 (id=2721): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000300)='\x00', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0201000a0a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) getdents64(0xffffffffffffff9c, &(0x7f0000000200)=""/19, 0x13) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x4}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x4048000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/203, 0xcb}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f00000024c0)=""/98, 0x62}, {&(0x7f0000002540)=""/224, 0xe0}, {&(0x7f0000002640)=""/203, 0xcb}], 0x8}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 2.098255307s ago: executing program 8 (id=2722): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x3fffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000630100e0000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r1, 0xfffffffe, 0x2) r2 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x3, 0x1, 0x4d) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x6, 0x0) pread64(r3, &(0x7f0000000140)=""/200, 0xc8, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f0000000440)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) getpeername(r0, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.086963549s ago: executing program 9 (id=2723): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum64={0xd, 0x1, 0x0, 0x13, 0x0, 0x2, [{0xb, 0x5, 0x8}]}]}, {0x0, [0x30]}}, &(0x7f0000000080)=""/216, 0x33, 0xd8, 0x1, 0x7fff}, 0x28) timer_create(0x1, &(0x7f0000000940)={0x0, 0x32, 0x1, @thr={&(0x7f00000007c0)="821da43eb58a4b61f488ef0480899a9639c7b2ec6cf81bd356e36e635313ead2683acfc99bf5363e1be8e24b2816159eae75bd371e40bb8b6f430342e020d9bf8ac1e90e346e", &(0x7f0000000880)="b1467c4495609e56c64b939c75e7b6ae358b36f8555cfa2462dd5f28fa5ef1cd46234925c25d0dd5f594cf33c42d0216d9"}}, &(0x7f0000000840)=0x0) timer_settime(r1, 0x1, &(0x7f00000008c0), &(0x7f0000000900)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x4840, &(0x7f0000000380), 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xfffffffd, '\x00', 0x0, r0, 0x20000000}, 0x50) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x8, 0x7, 0x98, @private2, @empty, 0x10, 0x1, 0x7, 0x401}}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7}, 0x0, 0x9}}, &(0x7f0000000000), 0x0) r6 = dup3(r3, r4, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000000480)={0x1, 0x6, 0x9, 0x0, '\x00', '\x00', '\x00', 0xfffb, 0x6, 0x7, 0x7f, "7e77042c5c9b852982e073dd67a8cf37"}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25640101010000000000000000000000007f000001000000000000000000000000000000004e210000020000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x23, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x94}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.691292152s ago: executing program 6 (id=2724): userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x88, 0x0, @remote, @private=0xa010100, {[@cipso={0x86, 0x21, 0x0, [{0x6, 0xf, "2aa5ee884af04d0e298bc86e40"}, {0x1, 0xc, "0433dcb0f58c647a0c31"}]}, @timestamp_addr={0x44, 0x1c, 0xa4, 0x1, 0x1, [{@private=0xa010101, 0x4}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}}}}}}, 0x0) 1.62964546s ago: executing program 9 (id=2725): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x6) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = dup(r1) sendmsg$can_raw(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@can={{0x4, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "010eb7e3e7090300"}, 0x10}, 0x1, 0x0, 0x0, 0x4041810}, 0x4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.35821094s ago: executing program 5 (id=2726): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001100)=ANY=[@ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 1.250639233s ago: executing program 8 (id=2727): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x80}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@loopback={0x0, 0xffff7f000001}, 0x80}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0xa3, 0xc, 0x10d2c0, 0x1ff, 0x40, 0x21, 0x1, 0x400}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xfff5, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000000) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000b80)=ANY=[@ANYBLOB="54020000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="8400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff03000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008000000008000600", @ANYRES32=r4, @ANYBLOB="01000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="00000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="51ee32e521000000"], 0x254}, 0x1, 0x0, 0x0, 0x4020800}, 0x40) socket$alg(0x26, 0x5, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES8=r2], 0xc2, r5) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe2(&(0x7f0000000040), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30d76351", @ANYRES16=0x0, @ANYBLOB="00020000000002000000010000001c000180080003000a01010105000200bf00000008"], 0x30}}, 0x4004811) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fanotify_init(0x200, 0x0) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 611.924948ms ago: executing program 9 (id=2728): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x8800, 0x0) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_int(r1, 0x0, 0x17, 0x0, &(0x7f00000013c0)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={0x0}, &(0x7f0000000000)=0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) (async) r6 = fsopen(&(0x7f0000000080)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000040)='ro\x00', &(0x7f0000000140)="a6", 0x1) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESOCT=r6, @ANYBLOB='Q3M'], 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000000)=""/19, 0x13}, {0x0}], &(0x7f0000000200)=[0xba], 0x11a}, 0x20) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f00000004000000080000000700000cff030000", @ANYRES32, @ANYBLOB="00a000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010100}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r7, 0x7, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000480)={'nat\x00', 0x0, 0x4, 0xdc, [0xa, 0x4, 0x6, 0x7f, 0x3, 0x2], 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f0000000380)=""/220}, &(0x7f00000000c0)=0x78) ioctl$PPPIOCSACTIVE(r0, 0x40047459, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000300)={r3, 0x7}, &(0x7f0000000340)=0x8) (rerun: 64) 608.220576ms ago: executing program 6 (id=2729): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 490.182797ms ago: executing program 0 (id=2730): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8, 0xfffff96e}) 466.410849ms ago: executing program 8 (id=2731): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, 0x0, 0x5010) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "00000004", "ba0200"}, 0x28) syz_io_uring_setup(0x18d7, 0x0, 0x0, 0x0) close(0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x5, 0xffffff81, 0x9, 0x1}, 0x50) 457.898401ms ago: executing program 6 (id=2732): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xb80420, &(0x7f0000000080)=ANY=[@ANYBLOB='stats=g']) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) 408.023889ms ago: executing program 0 (id=2733): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) ptrace$ARCH_GET_CPUID(0x1e, r1, 0x0, 0x1011) syz_usb_control_io(r2, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="400b490000003d3abbd5911672f575c81298df3b7416e618407dff02150a22fd090a0b139dab04882f426fd2f092d16b900584a62a34a2fefaf6f667af3eed7d8b3070db4f401c2b01097d9392eb63"], 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) getdents64(r0, &(0x7f0000000140)=""/22, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r3}, 0x18) openat$incfs(0xffffffffffffffff, &(0x7f0000000500)='.log\x00', 0x101142, 0x168) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r3}, 0x8) 337.936823ms ago: executing program 9 (id=2734): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f0000005400)={0x2020}, 0xffe4) preadv(r0, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0xffffffc0, 0xffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000d40)=""/213, 0xd5}, {&(0x7f0000000c40)=""/222, 0xde}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f0000000b80)=""/175, 0xaf}, {&(0x7f00000024c0)=""/4137, 0x1029}], 0x7}, 0x22120) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0xfffffffffffffec4}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000280)={0xc, r3}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000ff"]) io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) 337.374964ms ago: executing program 5 (id=2735): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) inotify_init() sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, &(0x7f0000000180)=0x18) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f0000000440)=""/145, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f000000000000000b00020018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000019500000000000000bd0a060000000000a500f4fffcfffcff180000000600000000000000090007004d90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1019, &(0x7f0000000840)=""/4121, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5e}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x20004085) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) lseek(r9, 0xe3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 239.211404ms ago: executing program 8 (id=2736): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@fd={0x2, 0x8, 0x4, 0x40, 0x101, {}, {0x2, 0xc, 0xff, 0xe, 0x5, 0x1, "65e6fb0f"}, 0xffff, 0x4, {}, 0x8}) 212.544683ms ago: executing program 9 (id=2737): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) fanotify_init(0xa00, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x67, 0xf0, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0xd0, 0x5, 0x8, 0x5}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048000) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000002240)=""/155, 0x9b}], 0x1, 0x8, 0x5) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) 96.084306ms ago: executing program 8 (id=2738): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, &(0x7f0000000080)={0x14, &(0x7f00000001c0)={0x40, 0x1a, 0x2, {0x2, 0x6}}, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f00000000000010e20000000000000000001300", [0xfffffffffffffffe, 0x8]}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) io_uring_setup(0x6d28, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xc, 0x2000000]}) 0s ago: executing program 9 (id=2739): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xece, &(0x7f0000000000)={0x0, 0x1773, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x20003, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000540)={0x0, 0x17, 0x4, "f7e1647d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, &(0x7f0000000180)={0x20, 0x9, 0x33, {0x33, 0xf, "de43c89ea7c408c788b6be4f4c7727e7d9dc35dc434f84dbdee31a39a1fcfeb6497200dbc6afdc98bcaba2b50332900eb6"}}, &(0x7f0000000200)={0x0, 0x3, 0x6e, @string={0x6e, 0x3, "5555a7376a600937cd27cb8a587bf494db91781642d3be87d5d5bbb23c0704b7f31557af916614b4f542409231b6fdcaa7e2adc0f7cc8f2f3cd0ef04c8bb8aae8eb1c706008d73aba2bce13d123aa63176e3fe84b2666b44d67101aabdf1f4c35a1577fae02e3368520561ec"}}, &(0x7f0000000280)={0x0, 0x22, 0x3, {[@main=@item_012={0x1, 0x0, 0xc, '$'}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff7, 0xd7, 0x1, {0x22, 0xc2}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x40, 0xf, 0x71, "147fdb28d02d0520c45c6d23e9e18285e2864c8dedb0788abbc73624fbba3c239c2c3d775ee1855cab70c173f546fae6fd76a2e20a4fd6f0a45a7639f3f587897bb667f502ab50088a802d6b50dbbad6505810595a4e046f69f061283f716c17dbbad5bc237394886741a3c3d50b99ef6f"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xe6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000440)={0x20, 0x1, 0x4c, "2ca8081532448141b15b1faeedca0624744460afff44aef78c7695303fedc6671d4c11d5467852db3f5f3fc0f8aeef8b28393cd97ab4b1edfcdd2d4b9a2900f4015d0a5b70afc7a90b33e230"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x6}}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000027298bb36dc56efd00040001000000", 0x24) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0x10100) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) kernel console output (not intermixed with test programs): x2a0 [ 485.576267][T12134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.576307][T12134] ? __pfx_ksys_write+0x10/0x10 [ 485.576350][T12134] do_syscall_64+0x14d/0xf80 [ 485.576379][T12134] ? trace_irq_disable+0x3b/0x150 [ 485.576405][T12134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.576427][T12134] ? clear_bhb_loop+0x40/0x90 [ 485.576456][T12134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.576479][T12134] RIP: 0033:0x7f26a85ac799 [ 485.576501][T12134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.576521][T12134] RSP: 002b:00007f26a6806028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.576546][T12134] RAX: ffffffffffffffda RBX: 00007f26a8825fa0 RCX: 00007f26a85ac799 [ 485.576563][T12134] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 485.576578][T12134] RBP: 00007f26a6806090 R08: 0000000000000000 R09: 0000000000000000 [ 485.576593][T12134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.576607][T12134] R13: 00007f26a8826038 R14: 00007f26a8825fa0 R15: 00007fff288d4f68 [ 485.576644][T12134] [ 486.023773][T12143] FAULT_INJECTION: forcing a failure. [ 486.023773][T12143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.024150][T12143] CPU: 1 UID: 0 PID: 12143 Comm: syz.0.1922 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 486.024183][T12143] Tainted: [L]=SOFTLOCKUP [ 486.024191][T12143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 486.024205][T12143] Call Trace: [ 486.024214][T12143] [ 486.024225][T12143] dump_stack_lvl+0xe8/0x150 [ 486.024266][T12143] should_fail_ex+0x46b/0x600 [ 486.024308][T12143] _copy_from_user+0x2d/0xb0 [ 486.024336][T12143] load_msg+0x1f5/0x3b0 [ 486.024389][T12143] do_mq_timedsend+0x3c3/0xaf0 [ 486.024425][T12143] ? __pfx_do_mq_timedsend+0x10/0x10 [ 486.024459][T12143] ? rt_mutex_slowunlock+0x1cb/0x300 [ 486.024501][T12143] __x64_sys_mq_timedsend+0x17a/0x220 [ 486.024532][T12143] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 486.024574][T12143] do_syscall_64+0x14d/0xf80 [ 486.024604][T12143] ? trace_irq_disable+0x3b/0x150 [ 486.024630][T12143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.024653][T12143] ? clear_bhb_loop+0x40/0x90 [ 486.024690][T12143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.024714][T12143] RIP: 0033:0x7f26a85ac799 [ 486.024735][T12143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.024757][T12143] RSP: 002b:00007f26a6806028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 486.024781][T12143] RAX: ffffffffffffffda RBX: 00007f26a8825fa0 RCX: 00007f26a85ac799 [ 486.024799][T12143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 486.024812][T12143] RBP: 00007f26a6806090 R08: 0000000000000000 R09: 0000000000000000 [ 486.024827][T12143] R10: 0000000000000240 R11: 0000000000000246 R12: 0000000000000001 [ 486.024841][T12143] R13: 00007f26a8826038 R14: 00007f26a8825fa0 R15: 00007fff288d4f68 [ 486.024877][T12143] [ 486.360746][ T5873] kernel write not supported for file bpf-map (pid: 5873 comm: kworker/1:4) [ 486.467916][ T37] audit: type=1326 audit(1772313815.973:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12148 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f26a85ac799 code=0x7ffc0000 [ 486.467978][ T37] audit: type=1326 audit(1772313815.973:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12148 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f26a85ac799 code=0x7ffc0000 [ 486.469951][ T37] audit: type=1326 audit(1772313815.983:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12148 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f26a85ac799 code=0x7ffc0000 [ 486.470005][ T37] audit: type=1326 audit(1772313815.983:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12148 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f26a85ac799 code=0x7ffc0000 [ 486.470052][ T37] audit: type=1326 audit(1772313815.983:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12148 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f26a85ac799 code=0x7ffc0000 [ 486.470097][ T37] audit: type=1326 audit(1772313815.983:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12148 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f26a85ac799 code=0x7ffc0000 [ 486.470142][ T37] audit: type=1326 audit(1772313815.983:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12148 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f26a85ac799 code=0x7ffc0000 [ 486.470188][ T37] audit: type=1326 audit(1772313815.983:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12148 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f26a85ac799 code=0x7ffc0000 [ 486.470235][ T37] audit: type=1326 audit(1772313815.983:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12148 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f26a85ac799 code=0x7ffc0000 [ 486.470288][ T37] audit: type=1326 audit(1772313815.983:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12148 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f26a85ac799 code=0x7ffc0000 [ 488.982865][ T5117] Bluetooth: hci9: unexpected event for opcode 0x2005 [ 490.479205][T12219] FAULT_INJECTION: forcing a failure. [ 490.479205][T12219] name failslab, interval 1, probability 0, space 0, times 0 [ 490.479256][T12219] CPU: 0 UID: 0 PID: 12219 Comm: syz.0.1950 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 490.479287][T12219] Tainted: [L]=SOFTLOCKUP [ 490.479296][T12219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.479309][T12219] Call Trace: [ 490.479319][T12219] [ 490.479329][T12219] dump_stack_lvl+0xe8/0x150 [ 490.479369][T12219] should_fail_ex+0x46b/0x600 [ 490.479411][T12219] should_failslab+0xa8/0x100 [ 490.479449][T12219] __kmalloc_noprof+0xdf/0x7b0 [ 490.479481][T12219] ? tomoyo_encode+0x28b/0x550 [ 490.479524][T12219] tomoyo_encode+0x28b/0x550 [ 490.479566][T12219] tomoyo_realpath_from_path+0x58d/0x5d0 [ 490.479614][T12219] ? tomoyo_path_number_perm+0x219/0x630 [ 490.479643][T12219] tomoyo_path_number_perm+0x246/0x630 [ 490.479676][T12219] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 490.479709][T12219] ? __lock_acquire+0x6b5/0x2cf0 [ 490.479768][T12219] ? __fget_files+0x2a/0x420 [ 490.479799][T12219] ? __fget_files+0x2a/0x420 [ 490.479824][T12219] ? __fget_files+0x3a6/0x420 [ 490.479850][T12219] ? __fget_files+0x2a/0x420 [ 490.479880][T12219] security_file_ioctl+0xc3/0x2a0 [ 490.479914][T12219] __se_sys_ioctl+0x47/0x170 [ 490.479952][T12219] do_syscall_64+0x14d/0xf80 [ 490.479982][T12219] ? trace_irq_disable+0x3b/0x150 [ 490.480008][T12219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.480030][T12219] ? clear_bhb_loop+0x40/0x90 [ 490.480057][T12219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.480079][T12219] RIP: 0033:0x7f26a85ac799 [ 490.480101][T12219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.480120][T12219] RSP: 002b:00007f26a6806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.480143][T12219] RAX: ffffffffffffffda RBX: 00007f26a8825fa0 RCX: 00007f26a85ac799 [ 490.480160][T12219] RDX: 0000200000000180 RSI: 0000000000004b72 RDI: 0000000000000003 [ 490.480175][T12219] RBP: 00007f26a6806090 R08: 0000000000000000 R09: 0000000000000000 [ 490.480190][T12219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.480202][T12219] R13: 00007f26a8826038 R14: 00007f26a8825fa0 R15: 00007fff288d4f68 [ 490.480246][T12219] [ 490.480268][T12219] ERROR: Out of memory at tomoyo_realpath_from_path. [ 490.502030][T12218] ceph: No source [ 490.951874][T12227] netlink: 'syz.5.1953': attribute type 15 has an invalid length. [ 490.951901][T12227] netlink: 'syz.5.1953': attribute type 7 has an invalid length. [ 493.002458][T12264] FAULT_INJECTION: forcing a failure. [ 493.002458][T12264] name failslab, interval 1, probability 0, space 0, times 0 [ 493.002489][T12264] CPU: 0 UID: 0 PID: 12264 Comm: syz.0.1968 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 493.002512][T12264] Tainted: [L]=SOFTLOCKUP [ 493.002519][T12264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.002529][T12264] Call Trace: [ 493.002536][T12264] [ 493.002543][T12264] dump_stack_lvl+0xe8/0x150 [ 493.002572][T12264] should_fail_ex+0x46b/0x600 [ 493.002603][T12264] should_failslab+0xa8/0x100 [ 493.002631][T12264] __kmalloc_noprof+0xdf/0x7b0 [ 493.002656][T12264] ? tomoyo_encode+0x28b/0x550 [ 493.002685][T12264] tomoyo_encode+0x28b/0x550 [ 493.002721][T12264] tomoyo_realpath_from_path+0x58d/0x5d0 [ 493.002756][T12264] ? tomoyo_path_number_perm+0x219/0x630 [ 493.002777][T12264] tomoyo_path_number_perm+0x246/0x630 [ 493.002801][T12264] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 493.002824][T12264] ? __lock_acquire+0x6b5/0x2cf0 [ 493.002866][T12264] ? __fget_files+0x2a/0x420 [ 493.002887][T12264] ? __fget_files+0x2a/0x420 [ 493.002905][T12264] ? __fget_files+0x3a6/0x420 [ 493.002924][T12264] ? __fget_files+0x2a/0x420 [ 493.002945][T12264] security_file_ioctl+0xc3/0x2a0 [ 493.002972][T12264] __se_sys_ioctl+0x47/0x170 [ 493.002999][T12264] do_syscall_64+0x14d/0xf80 [ 493.003022][T12264] ? trace_irq_disable+0x3b/0x150 [ 493.003041][T12264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.003058][T12264] ? clear_bhb_loop+0x40/0x90 [ 493.003078][T12264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.003094][T12264] RIP: 0033:0x7f26a85ac799 [ 493.003110][T12264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.003124][T12264] RSP: 002b:00007f26a6806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.003141][T12264] RAX: ffffffffffffffda RBX: 00007f26a8825fa0 RCX: 00007f26a85ac799 [ 493.003153][T12264] RDX: 00002000000001c0 RSI: 00000000000007a8 RDI: 0000000000000003 [ 493.003164][T12264] RBP: 00007f26a6806090 R08: 0000000000000000 R09: 0000000000000000 [ 493.003174][T12264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.003184][T12264] R13: 00007f26a8826038 R14: 00007f26a8825fa0 R15: 00007fff288d4f68 [ 493.003209][T12264] [ 493.003223][T12264] ERROR: Out of memory at tomoyo_realpath_from_path. [ 493.337767][T12268] FAULT_INJECTION: forcing a failure. [ 493.337767][T12268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.337808][T12268] CPU: 1 UID: 0 PID: 12268 Comm: syz.8.1969 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 493.337840][T12268] Tainted: [L]=SOFTLOCKUP [ 493.337848][T12268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.337862][T12268] Call Trace: [ 493.337872][T12268] [ 493.337882][T12268] dump_stack_lvl+0xe8/0x150 [ 493.337929][T12268] should_fail_ex+0x46b/0x600 [ 493.337973][T12268] _copy_from_iter+0x1d3/0x1670 [ 493.338012][T12268] ? __pfx__copy_from_iter+0x10/0x10 [ 493.338036][T12268] ? trace_kmalloc+0x2a/0x110 [ 493.338072][T12268] ? __kmalloc_noprof+0x408/0x7b0 [ 493.338103][T12268] ? kernfs_fop_write_iter+0x159/0x540 [ 493.338141][T12268] kernfs_fop_write_iter+0x19c/0x540 [ 493.338180][T12268] vfs_write+0x629/0xba0 [ 493.338220][T12268] ? __pfx_vfs_write+0x10/0x10 [ 493.338252][T12268] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 493.338283][T12268] ? lockdep_hardirqs_on+0x7a/0x110 [ 493.338314][T12268] ? mutex_lock_nested+0x152/0x1d0 [ 493.338335][T12268] ? fdget_pos+0x252/0x320 [ 493.338371][T12268] ksys_write+0x156/0x270 [ 493.338406][T12268] ? __pfx_ksys_write+0x10/0x10 [ 493.338451][T12268] do_syscall_64+0x14d/0xf80 [ 493.338481][T12268] ? trace_irq_disable+0x3b/0x150 [ 493.338508][T12268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.338532][T12268] ? clear_bhb_loop+0x40/0x90 [ 493.338561][T12268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.338585][T12268] RIP: 0033:0x7fb0e777c799 [ 493.338607][T12268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.338627][T12268] RSP: 002b:00007fb0e59ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 493.338651][T12268] RAX: ffffffffffffffda RBX: 00007fb0e79f5fa0 RCX: 00007fb0e777c799 [ 493.338669][T12268] RDX: 0000000000000009 RSI: 00002000000002c0 RDI: 0000000000000003 [ 493.338685][T12268] RBP: 00007fb0e59ce090 R08: 0000000000000000 R09: 0000000000000000 [ 493.338699][T12268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.338714][T12268] R13: 00007fb0e79f6038 R14: 00007fb0e79f5fa0 R15: 00007ffd625cdf88 [ 493.338751][T12268] [ 495.443193][T12312] FAULT_INJECTION: forcing a failure. [ 495.443193][T12312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.443234][T12312] CPU: 0 UID: 0 PID: 12312 Comm: syz.0.1984 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 495.443265][T12312] Tainted: [L]=SOFTLOCKUP [ 495.443274][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.443289][T12312] Call Trace: [ 495.443299][T12312] [ 495.443309][T12312] dump_stack_lvl+0xe8/0x150 [ 495.443349][T12312] should_fail_ex+0x46b/0x600 [ 495.443391][T12312] _copy_to_user+0x31/0xb0 [ 495.443444][T12312] simple_read_from_buffer+0xe1/0x170 [ 495.443475][T12312] proc_fail_nth_read+0x1be/0x230 [ 495.443504][T12312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 495.443534][T12312] ? rw_verify_area+0x2ac/0x4e0 [ 495.443565][T12312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 495.443593][T12312] vfs_read+0x212/0xa80 [ 495.443634][T12312] ? __pfx_vfs_read+0x10/0x10 [ 495.443668][T12312] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 495.443700][T12312] ? lockdep_hardirqs_on+0x7a/0x110 [ 495.443745][T12312] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 495.443780][T12312] ? mutex_lock_nested+0x152/0x1d0 [ 495.443803][T12312] ? fdget_pos+0x252/0x320 [ 495.443844][T12312] ksys_read+0x156/0x270 [ 495.443877][T12312] ? __pfx_ksys_read+0x10/0x10 [ 495.443927][T12312] do_syscall_64+0x14d/0xf80 [ 495.443957][T12312] ? trace_irq_disable+0x3b/0x150 [ 495.443984][T12312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.444006][T12312] ? clear_bhb_loop+0x40/0x90 [ 495.444035][T12312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.444059][T12312] RIP: 0033:0x7f26a856cfce [ 495.444080][T12312] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 495.444099][T12312] RSP: 002b:00007f26a6805fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 495.444122][T12312] RAX: ffffffffffffffda RBX: 00007f26a68066c0 RCX: 00007f26a856cfce [ 495.444138][T12312] RDX: 000000000000000f RSI: 00007f26a68060a0 RDI: 0000000000000005 [ 495.444153][T12312] RBP: 00007f26a6806090 R08: 0000000000000000 R09: 0000000000000000 [ 495.444167][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.444180][T12312] R13: 00007f26a8826038 R14: 00007f26a8825fa0 R15: 00007fff288d4f68 [ 495.444215][T12312] [ 496.013216][T12322] FAULT_INJECTION: forcing a failure. [ 496.013216][T12322] name failslab, interval 1, probability 0, space 0, times 0 [ 496.013258][T12322] CPU: 1 UID: 0 PID: 12322 Comm: syz.8.1988 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 496.013290][T12322] Tainted: [L]=SOFTLOCKUP [ 496.013299][T12322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.013313][T12322] Call Trace: [ 496.013322][T12322] [ 496.013333][T12322] dump_stack_lvl+0xe8/0x150 [ 496.013374][T12322] should_fail_ex+0x46b/0x600 [ 496.013416][T12322] should_failslab+0xa8/0x100 [ 496.013453][T12322] __kmalloc_noprof+0xdf/0x7b0 [ 496.013485][T12322] ? tomoyo_encode+0x28b/0x550 [ 496.013527][T12322] tomoyo_encode+0x28b/0x550 [ 496.013574][T12322] tomoyo_realpath_from_path+0x58d/0x5d0 [ 496.013631][T12322] ? tomoyo_path_number_perm+0x219/0x630 [ 496.013661][T12322] tomoyo_path_number_perm+0x246/0x630 [ 496.013695][T12322] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 496.013728][T12322] ? __lock_acquire+0x6b5/0x2cf0 [ 496.013788][T12322] ? __fget_files+0x2a/0x420 [ 496.013820][T12322] ? __fget_files+0x2a/0x420 [ 496.013846][T12322] ? __fget_files+0x3a6/0x420 [ 496.013872][T12322] ? __fget_files+0x2a/0x420 [ 496.013903][T12322] security_file_ioctl+0xc3/0x2a0 [ 496.013936][T12322] __se_sys_ioctl+0x47/0x170 [ 496.013974][T12322] do_syscall_64+0x14d/0xf80 [ 496.014004][T12322] ? trace_irq_disable+0x3b/0x150 [ 496.014029][T12322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.014053][T12322] ? clear_bhb_loop+0x40/0x90 [ 496.014082][T12322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.014105][T12322] RIP: 0033:0x7fb0e777c799 [ 496.014126][T12322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.014146][T12322] RSP: 002b:00007fb0e59ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.014171][T12322] RAX: ffffffffffffffda RBX: 00007fb0e79f5fa0 RCX: 00007fb0e777c799 [ 496.014188][T12322] RDX: 00002000000005c0 RSI: 00000000c0cc5615 RDI: 0000000000000003 [ 496.014204][T12322] RBP: 00007fb0e59ce090 R08: 0000000000000000 R09: 0000000000000000 [ 496.014218][T12322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.014232][T12322] R13: 00007fb0e79f6038 R14: 00007fb0e79f5fa0 R15: 00007ffd625cdf88 [ 496.014269][T12322] [ 496.014290][T12322] ERROR: Out of memory at tomoyo_realpath_from_path. [ 498.826835][ T5922] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 498.957171][ T5922] usb 9-1: device descriptor read/64, error -71 [ 499.066959][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 499.196963][ T5922] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 499.216728][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 499.219057][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 499.228932][ T10] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 499.228964][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.228986][ T10] usb 1-1: Product: syz [ 499.229003][ T10] usb 1-1: Manufacturer: syz [ 499.229019][ T10] usb 1-1: SerialNumber: syz [ 499.294315][ T10] usb 1-1: config 0 descriptor?? [ 499.315325][ T10] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 499.329018][ T5922] usb 9-1: device descriptor read/64, error -71 [ 499.437367][ T5922] usb usb9-port1: attempt power cycle [ 499.807168][ T5922] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 499.830295][ T5922] usb 9-1: device descriptor read/8, error -71 [ 499.869626][T12352] 0ªX¹¦Dö»: left allmulticast mode [ 500.066951][ T5922] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 500.098582][ T5922] usb 9-1: device descriptor read/8, error -71 [ 500.207305][ T5922] usb usb9-port1: unable to enumerate USB device [ 500.658068][T12374] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2007'. [ 501.536275][T12386] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2014'. [ 501.786921][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.786998][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.829059][T12392] tipc: Started in network mode [ 501.829075][T12392] tipc: Node identity , cluster identity 4711 [ 501.875080][ T5922] usb 1-1: USB disconnect, device number 20 [ 502.498193][T12402] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2018'. [ 502.526234][ T5117] Bluetooth: hci8: unexpected event for opcode 0x2005 [ 502.721303][T12406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.887124][T12441] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2033'. [ 505.158914][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2037'. [ 505.391691][T12455] FAULT_INJECTION: forcing a failure. [ 505.391691][T12455] name failslab, interval 1, probability 0, space 0, times 0 [ 505.391734][T12455] CPU: 1 UID: 0 PID: 12455 Comm: syz.8.2035 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 505.391765][T12455] Tainted: [L]=SOFTLOCKUP [ 505.391774][T12455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.391789][T12455] Call Trace: [ 505.391798][T12455] [ 505.391809][T12455] dump_stack_lvl+0xe8/0x150 [ 505.391849][T12455] should_fail_ex+0x46b/0x600 [ 505.391892][T12455] should_failslab+0xa8/0x100 [ 505.391929][T12455] __kmalloc_noprof+0xdf/0x7b0 [ 505.391961][T12455] ? tomoyo_encode+0x28b/0x550 [ 505.392001][T12455] tomoyo_encode+0x28b/0x550 [ 505.392043][T12455] tomoyo_realpath_from_path+0x58d/0x5d0 [ 505.392091][T12455] ? tomoyo_path_number_perm+0x219/0x630 [ 505.392121][T12455] tomoyo_path_number_perm+0x246/0x630 [ 505.392153][T12455] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 505.392187][T12455] ? __lock_acquire+0x6b5/0x2cf0 [ 505.392246][T12455] ? __fget_files+0x2a/0x420 [ 505.392277][T12455] ? __fget_files+0x2a/0x420 [ 505.392301][T12455] ? __fget_files+0x3a6/0x420 [ 505.392326][T12455] ? __fget_files+0x2a/0x420 [ 505.392357][T12455] security_file_ioctl+0xc3/0x2a0 [ 505.392391][T12455] __se_sys_ioctl+0x47/0x170 [ 505.392427][T12455] do_syscall_64+0x14d/0xf80 [ 505.392456][T12455] ? trace_irq_disable+0x3b/0x150 [ 505.392492][T12455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.392515][T12455] ? clear_bhb_loop+0x40/0x90 [ 505.392544][T12455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.392567][T12455] RIP: 0033:0x7fb0e777c799 [ 505.392588][T12455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.392608][T12455] RSP: 002b:00007fb0e59ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.392631][T12455] RAX: ffffffffffffffda RBX: 00007fb0e79f6090 RCX: 00007fb0e777c799 [ 505.392648][T12455] RDX: 0000200000000540 RSI: 00000000c0306201 RDI: 0000000000000004 [ 505.392663][T12455] RBP: 00007fb0e59ad090 R08: 0000000000000000 R09: 0000000000000000 [ 505.392677][T12455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.392691][T12455] R13: 00007fb0e79f6128 R14: 00007fb0e79f6090 R15: 00007ffd625cdf88 [ 505.392727][T12455] [ 505.392747][T12455] ERROR: Out of memory at tomoyo_realpath_from_path. [ 506.157310][ T5117] Bluetooth: hci9: unexpected event for opcode 0x2005 [ 507.971408][T12500] FAULT_INJECTION: forcing a failure. [ 507.971408][T12500] name failslab, interval 1, probability 0, space 0, times 0 [ 507.971517][T12500] CPU: 0 UID: 0 PID: 12500 Comm: syz.0.2057 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 507.971548][T12500] Tainted: [L]=SOFTLOCKUP [ 507.971557][T12500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 507.971572][T12500] Call Trace: [ 507.971582][T12500] [ 507.971593][T12500] dump_stack_lvl+0xe8/0x150 [ 507.971633][T12500] should_fail_ex+0x46b/0x600 [ 507.971676][T12500] should_failslab+0xa8/0x100 [ 507.971713][T12500] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 507.971745][T12500] ? __alloc_skb+0x1d0/0x7d0 [ 507.971769][T12500] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 507.971807][T12500] __alloc_skb+0x1d0/0x7d0 [ 507.971838][T12500] netlink_sendmsg+0x5d4/0xb40 [ 507.971872][T12500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.971905][T12500] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 507.971940][T12500] ____sys_sendmsg+0xa4e/0xac0 [ 507.971981][T12500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.972022][T12500] ? import_iovec+0x73/0xa0 [ 507.972053][T12500] ___sys_sendmsg+0x2a5/0x360 [ 507.972089][T12500] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.972142][T12500] ? lockdep_hardirqs_on+0x7a/0x110 [ 507.972191][T12500] ? __x64_sys_sendmsg+0x1a8/0x2a0 [ 507.972269][T12500] __x64_sys_sendmsg+0x1c3/0x2a0 [ 507.972304][T12500] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 507.972361][T12500] do_syscall_64+0x14d/0xf80 [ 507.972393][T12500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.972417][T12500] ? clear_bhb_loop+0x40/0x90 [ 507.972446][T12500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.972470][T12500] RIP: 0033:0x7f26a85ac799 [ 507.972493][T12500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.972513][T12500] RSP: 002b:00007f26a67e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.972537][T12500] RAX: ffffffffffffffda RBX: 00007f26a8826090 RCX: 00007f26a85ac799 [ 507.972554][T12500] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 507.972568][T12500] RBP: 00007f26a67e5090 R08: 0000000000000000 R09: 0000000000000000 [ 507.972583][T12500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.972597][T12500] R13: 00007f26a8826128 R14: 00007f26a8826090 R15: 00007fff288d4f68 [ 507.972631][T12500] [ 508.066642][T12500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2057'. [ 508.932579][T12506] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2059'. [ 509.431853][ T1232] IPVS: starting estimator thread 0... [ 509.536976][T12520] IPVS: using max 11 ests per chain, 26400 per kthread [ 509.755392][ T5117] Bluetooth: hci5: unexpected event for opcode 0x2005 [ 510.432254][T12550] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2079'. [ 510.963470][T12559] FAULT_INJECTION: forcing a failure. [ 510.963470][T12559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.963511][T12559] CPU: 0 UID: 0 PID: 12559 Comm: syz.8.2083 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 510.963541][T12559] Tainted: [L]=SOFTLOCKUP [ 510.963550][T12559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.963564][T12559] Call Trace: [ 510.963573][T12559] [ 510.963583][T12559] dump_stack_lvl+0xe8/0x150 [ 510.963621][T12559] should_fail_ex+0x46b/0x600 [ 510.963663][T12559] _copy_from_user+0x2d/0xb0 [ 510.963691][T12559] ___sys_sendmsg+0x1c6/0x360 [ 510.963728][T12559] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.963795][T12559] ? __fget_files+0x2a/0x420 [ 510.963821][T12559] ? __fget_files+0x3a6/0x420 [ 510.963859][T12559] __x64_sys_sendmsg+0x1c3/0x2a0 [ 510.963892][T12559] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.963933][T12559] ? __pfx_ksys_write+0x10/0x10 [ 510.963976][T12559] do_syscall_64+0x14d/0xf80 [ 510.964006][T12559] ? trace_irq_disable+0x3b/0x150 [ 510.964032][T12559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.964054][T12559] ? clear_bhb_loop+0x40/0x90 [ 510.964082][T12559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.964106][T12559] RIP: 0033:0x7fb0e777c799 [ 510.964127][T12559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.964146][T12559] RSP: 002b:00007fb0e59ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.964176][T12559] RAX: ffffffffffffffda RBX: 00007fb0e79f5fa0 RCX: 00007fb0e777c799 [ 510.964192][T12559] RDX: 0000000020044800 RSI: 0000200000000000 RDI: 0000000000000003 [ 510.964208][T12559] RBP: 00007fb0e59ce090 R08: 0000000000000000 R09: 0000000000000000 [ 510.964222][T12559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.964234][T12559] R13: 00007fb0e79f6038 R14: 00007fb0e79f5fa0 R15: 00007ffd625cdf88 [ 510.964269][T12559] [ 512.150926][T12578] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2090'. [ 512.150958][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2090'. [ 512.208199][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 512.217640][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 512.219192][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 512.282175][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 512.283602][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 512.928304][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 512.928319][ T37] audit: type=1326 audit(1772313842.443:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.9.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6a87c799 code=0x7ffc0000 [ 512.928356][ T37] audit: type=1326 audit(1772313842.443:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.9.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6a87c799 code=0x7ffc0000 [ 512.933599][ T37] audit: type=1326 audit(1772313842.443:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.9.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed6a83cfce code=0x7ffc0000 [ 512.933641][ T37] audit: type=1326 audit(1772313842.443:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.9.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fed6a83cfce code=0x7ffc0000 [ 512.933683][ T37] audit: type=1326 audit(1772313842.443:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.9.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fed6a83cfce code=0x7ffc0000 [ 512.933716][ T37] audit: type=1326 audit(1772313842.443:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.9.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fed6a87c799 code=0x7ffc0000 [ 513.366556][T12591] bridge_slave_1: left allmulticast mode [ 513.366589][T12591] bridge_slave_1: left promiscuous mode [ 513.380515][T12591] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.485142][T12591] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 514.807403][T12619] /dev/nullb0: Can't lookup blockdev [ 515.574533][ T61] Bluetooth: hci1: command tx timeout [ 515.989740][T12617] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 516.039005][T12617] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 516.043236][T12617] kAFS: unable to lookup cell '(,c¾Ì' [ 516.093043][T12617] overlayfs: inode number too big (/cpu.stat, ino=4611686018427387913, xinobits=3) [ 516.145771][ T5117] Bluetooth: hci5: unexpected event for opcode 0x2005 [ 516.387992][T12626] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2107'. [ 516.808463][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.936059][T12631] netlink: 'syz.8.2108': attribute type 1 has an invalid length. [ 516.936086][T12631] netlink: 'syz.8.2108': attribute type 2 has an invalid length. [ 517.388966][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.890675][ T5117] Bluetooth: hci1: command tx timeout [ 518.210137][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.039226][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.159986][T12579] chnl_net:caif_netlink_parms(): no params data found [ 519.968287][ T5117] Bluetooth: hci1: command tx timeout [ 520.150676][T12579] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.165700][T12579] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.165959][T12579] bridge_slave_0: entered allmulticast mode [ 520.208255][T12579] bridge_slave_0: entered promiscuous mode [ 520.221036][T12579] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.221180][T12579] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.221435][T12579] bridge_slave_1: entered allmulticast mode [ 520.224044][T12579] bridge_slave_1: entered promiscuous mode [ 520.491480][T12579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.779980][T12579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.027093][ T5117] Bluetooth: hci1: command tx timeout [ 522.073269][ T5117] Bluetooth: hci9: unexpected event for opcode 0x2005 [ 522.624610][T12579] team0: Port device team_slave_0 added [ 522.638472][T12579] team0: Port device team_slave_1 added [ 522.817604][T12579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.817622][T12579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.817646][T12579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.819762][T12579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.819776][T12579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.819801][T12579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.432890][T12716] overlayfs: failed to clone upperpath [ 523.703017][T12579] hsr_slave_0: entered promiscuous mode [ 523.704779][T12579] hsr_slave_1: entered promiscuous mode [ 523.705857][T12579] debugfs: 'hsr0' already exists in 'hsr' [ 523.705885][T12579] Cannot create hsr debugfs directory [ 523.707350][ T12] bridge_slave_1: left allmulticast mode [ 523.707377][ T12] bridge_slave_1: left promiscuous mode [ 523.710685][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.126797][ T12] bridge_slave_0: left allmulticast mode [ 524.126828][ T12] bridge_slave_0: left promiscuous mode [ 524.127098][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.310411][T12748] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2146'. [ 525.310460][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2146'. [ 528.854534][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.937596][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.979485][ T12] bond0 (unregistering): Released all slaves [ 529.062910][T12752] dummy0: entered promiscuous mode [ 529.366836][T12752] dummy0: left promiscuous mode [ 529.617049][ T5888] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 529.807060][ T5888] usb 9-1: Using ep0 maxpacket: 16 [ 529.816024][ T5888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.816059][ T5888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.816083][ T5888] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 529.816129][ T5888] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 529.816152][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.832259][ T5888] usb 9-1: config 0 descriptor?? [ 530.980466][ T5888] usbhid 9-1:0.0: can't add hid device: -71 [ 530.980597][ T5888] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 531.007849][ T5888] usb 9-1: USB disconnect, device number 47 [ 531.995614][T12813] FAULT_INJECTION: forcing a failure. [ 531.995614][T12813] name failslab, interval 1, probability 0, space 0, times 0 [ 531.995644][T12813] CPU: 0 UID: 0 PID: 12813 Comm: syz.8.2164 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 531.995666][T12813] Tainted: [L]=SOFTLOCKUP [ 531.995672][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.995682][T12813] Call Trace: [ 531.995689][T12813] [ 531.995696][T12813] dump_stack_lvl+0xe8/0x150 [ 531.995725][T12813] should_fail_ex+0x46b/0x600 [ 531.995757][T12813] should_failslab+0xa8/0x100 [ 531.995784][T12813] __kmalloc_noprof+0xdf/0x7b0 [ 531.995816][T12813] ? tomoyo_encode+0x28b/0x550 [ 531.995846][T12813] tomoyo_encode+0x28b/0x550 [ 531.995875][T12813] tomoyo_realpath_from_path+0x58d/0x5d0 [ 531.995909][T12813] ? tomoyo_path_number_perm+0x219/0x630 [ 531.995930][T12813] tomoyo_path_number_perm+0x246/0x630 [ 531.995953][T12813] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 531.995977][T12813] ? __lock_acquire+0x6b5/0x2cf0 [ 531.996019][T12813] ? __fget_files+0x2a/0x420 [ 531.996040][T12813] ? __fget_files+0x2a/0x420 [ 531.996060][T12813] ? __fget_files+0x3a6/0x420 [ 531.996078][T12813] ? __fget_files+0x2a/0x420 [ 531.996100][T12813] security_file_ioctl+0xc3/0x2a0 [ 531.996124][T12813] __se_sys_ioctl+0x47/0x170 [ 531.996180][T12813] do_syscall_64+0x14d/0xf80 [ 531.996209][T12813] ? trace_irq_disable+0x3b/0x150 [ 531.996234][T12813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.996257][T12813] ? clear_bhb_loop+0x40/0x90 [ 531.996290][T12813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.996306][T12813] RIP: 0033:0x7fb0e777c799 [ 531.996322][T12813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.996337][T12813] RSP: 002b:00007fb0e59ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.996354][T12813] RAX: ffffffffffffffda RBX: 00007fb0e79f5fa0 RCX: 00007fb0e777c799 [ 531.996367][T12813] RDX: 0000000000000000 RSI: 000000004004550d RDI: 0000000000000003 [ 531.996376][T12813] RBP: 00007fb0e59ce090 R08: 0000000000000000 R09: 0000000000000000 [ 531.996386][T12813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.996396][T12813] R13: 00007fb0e79f6038 R14: 00007fb0e79f5fa0 R15: 00007ffd625cdf88 [ 531.996422][T12813] [ 531.996437][T12813] ERROR: Out of memory at tomoyo_realpath_from_path. [ 532.609336][T12822] netlink: 'syz.9.2166': attribute type 3 has an invalid length. [ 533.936966][ T12] hsr_slave_0: left promiscuous mode [ 534.037735][ T12] hsr_slave_1: left promiscuous mode [ 534.053963][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.053992][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.691752][ T12] batadv0: left allmulticast mode [ 534.692020][ T12] batadv0: left promiscuous mode [ 534.692176][ T12] veth1_macvtap: left promiscuous mode [ 534.692274][ T12] veth0_macvtap: left promiscuous mode [ 534.692668][ T12] veth1_vlan: left promiscuous mode [ 534.692854][ T12] veth0_vlan: left promiscuous mode [ 535.201516][T12851] 9p: Unknown access argument ffffffffffffffff: -22 [ 536.037811][T12859] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2179'. [ 536.046757][T12859] fuse: Bad value for 'fd' [ 536.071327][ T12] team0 (unregistering): Port device team_slave_1 removed [ 536.130832][ T12] team0 (unregistering): Port device team_slave_0 removed [ 537.005611][T12869] binder: 12868:12869 ioctl 4018620d 0 returned -22 [ 537.287079][ T5922] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 537.459292][ T5922] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 537.459323][ T5922] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.459346][ T5922] usb 9-1: config 0 has no interface number 0 [ 537.462356][ T5922] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 537.462388][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.462411][ T5922] usb 9-1: Product: syz [ 537.462427][ T5922] usb 9-1: Manufacturer: syz [ 537.462444][ T5922] usb 9-1: SerialNumber: syz [ 537.484204][ T5922] usb 9-1: config 0 descriptor?? [ 537.827861][ T5922] uvcvideo 9-1:0.64: probe with driver uvcvideo failed with error -22 [ 537.848876][ T5922] usb 9-1: USB disconnect, device number 48 [ 538.896812][ T5922] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 539.046918][ T5922] usb 9-1: Using ep0 maxpacket: 32 [ 539.050337][ T5922] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.050390][ T5922] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 539.050417][ T5922] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.065196][ T5922] usb 9-1: config 0 descriptor?? [ 539.085707][ T5922] hub 9-1:0.0: bad descriptor, ignoring hub [ 539.085752][ T5922] hub 9-1:0.0: probe with driver hub failed with error -5 [ 539.112994][ T5922] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 539.342979][ T12] IPVS: stop unused estimator thread 0... [ 539.413364][T12905] /dev/nullb0: Can't lookup blockdev [ 540.828016][T12916] 9p: Bad value for 'wfdno' [ 540.888347][ T5117] Bluetooth: hci6: unexpected event for opcode 0x2005 [ 542.038422][ T10] usb 9-1: USB disconnect, device number 49 [ 542.156472][T12579] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 542.232244][T12579] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 542.359588][T12579] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 542.427365][T12579] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 542.805137][T12967] 9p: Bad value for 'wfdno' [ 542.961786][T12579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.047518][T12579] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.209202][T12579] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 543.209229][T12579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.676348][ T2866] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.676569][ T2866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.703657][ T2866] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.703805][ T2866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.578820][T12579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.722220][T13014] 9p: Bad value for 'wfdno' [ 544.772955][T12579] veth0_vlan: entered promiscuous mode [ 544.837887][T12579] veth1_vlan: entered promiscuous mode [ 544.951190][ T5117] Bluetooth: hci5: unexpected event for opcode 0x2005 [ 544.974845][T12579] veth0_macvtap: entered promiscuous mode [ 545.017125][T12579] veth1_macvtap: entered promiscuous mode [ 545.155932][T12579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.237174][T12579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.290515][ T1120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.297662][ T1120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.286664][ T159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.305399][ T159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.608861][ T10] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 546.836882][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 546.840704][ T10] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 546.840737][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.908527][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 546.911670][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.911691][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.300566][ T10] gspca_nw80x: reg_r err -32 [ 547.300665][ T10] nw80x 9-1:3.0: probe with driver nw80x failed with error -32 [ 547.412685][ T5922] usb 9-1: USB disconnect, device number 50 [ 547.476210][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.476236][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.428024][T13070] FAULT_INJECTION: forcing a failure. [ 549.428024][T13070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.428065][T13070] CPU: 1 UID: 0 PID: 13070 Comm: syz.0.2087 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 549.428096][T13070] Tainted: [L]=SOFTLOCKUP [ 549.428104][T13070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 549.428118][T13070] Call Trace: [ 549.428127][T13070] [ 549.428138][T13070] dump_stack_lvl+0xe8/0x150 [ 549.428175][T13070] should_fail_ex+0x46b/0x600 [ 549.428217][T13070] _copy_from_user+0x2d/0xb0 [ 549.428246][T13070] ___sys_sendmsg+0x1c6/0x360 [ 549.428292][T13070] ? __pfx____sys_sendmsg+0x10/0x10 [ 549.428356][T13070] ? __fget_files+0x2a/0x420 [ 549.428382][T13070] ? __fget_files+0x3a6/0x420 [ 549.428418][T13070] __x64_sys_sendmsg+0x1c3/0x2a0 [ 549.428451][T13070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 549.428491][T13070] ? __pfx_ksys_write+0x10/0x10 [ 549.428534][T13070] do_syscall_64+0x14d/0xf80 [ 549.428565][T13070] ? trace_irq_disable+0x3b/0x150 [ 549.428591][T13070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.428614][T13070] ? clear_bhb_loop+0x40/0x90 [ 549.428641][T13070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.428663][T13070] RIP: 0033:0x7f505ca1c799 [ 549.428685][T13070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.428703][T13070] RSP: 002b:00007f505ac6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.428726][T13070] RAX: ffffffffffffffda RBX: 00007f505cc95fa0 RCX: 00007f505ca1c799 [ 549.428743][T13070] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 549.428758][T13070] RBP: 00007f505ac6e090 R08: 0000000000000000 R09: 0000000000000000 [ 549.428771][T13070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.428785][T13070] R13: 00007f505cc96038 R14: 00007f505cc95fa0 R15: 00007ffdcaa18f88 [ 549.428819][T13070] [ 551.296145][T13088] program syz.0.2231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 553.020920][ T5117] Bluetooth: hci5: Unable to find connection for big 0x00 [ 553.145717][T13122] overlayfs: failed to clone upperpath [ 554.876750][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 555.041870][T13113] FAULT_INJECTION: forcing a failure. [ 555.041870][T13113] name failslab, interval 1, probability 0, space 0, times 0 [ 555.041913][T13113] CPU: 0 UID: 0 PID: 13113 Comm: syz.0.2241 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 555.041948][T13113] Tainted: [L]=SOFTLOCKUP [ 555.041957][T13113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 555.041972][T13113] Call Trace: [ 555.041982][T13113] [ 555.041992][T13113] dump_stack_lvl+0xe8/0x150 [ 555.042031][T13113] should_fail_ex+0x46b/0x600 [ 555.042073][T13113] should_failslab+0xa8/0x100 [ 555.042109][T13113] __kmalloc_noprof+0xdf/0x7b0 [ 555.042143][T13113] ? tomoyo_encode+0x28b/0x550 [ 555.042184][T13113] tomoyo_encode+0x28b/0x550 [ 555.042225][T13113] tomoyo_realpath_from_path+0x58d/0x5d0 [ 555.042271][T13113] ? tomoyo_path_number_perm+0x219/0x630 [ 555.042300][T13113] tomoyo_path_number_perm+0x246/0x630 [ 555.042335][T13113] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 555.042368][T13113] ? __lock_acquire+0x6b5/0x2cf0 [ 555.042427][T13113] ? __fget_files+0x2a/0x420 [ 555.042466][T13113] ? __fget_files+0x2a/0x420 [ 555.042492][T13113] ? __fget_files+0x3a6/0x420 [ 555.042518][T13113] ? __fget_files+0x2a/0x420 [ 555.042549][T13113] security_file_ioctl+0xc3/0x2a0 [ 555.042582][T13113] __se_sys_ioctl+0x47/0x170 [ 555.042619][T13113] do_syscall_64+0x14d/0xf80 [ 555.042652][T13113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.042675][T13113] ? clear_bhb_loop+0x40/0x90 [ 555.042704][T13113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.042728][T13113] RIP: 0033:0x7f505ca1c799 [ 555.042749][T13113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.042770][T13113] RSP: 002b:00007f505ac6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.042794][T13113] RAX: ffffffffffffffda RBX: 00007f505cc95fa0 RCX: 00007f505ca1c799 [ 555.042811][T13113] RDX: 0000200000000040 RSI: 00000000c0085508 RDI: 0000000000000003 [ 555.042827][T13113] RBP: 00007f505ac6e090 R08: 0000000000000000 R09: 0000000000000000 [ 555.042842][T13113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.042856][T13113] R13: 00007f505cc96038 R14: 00007f505cc95fa0 R15: 00007ffdcaa18f88 [ 555.042893][T13113] [ 555.154497][T13113] ERROR: Out of memory at tomoyo_realpath_from_path. [ 555.333099][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 555.340497][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 555.340541][ T10] usb 1-1: can't read configurations, error -71 [ 556.614319][T13158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 558.207537][T13185] gretap0: entered allmulticast mode [ 558.237211][T13187] overlayfs: missing 'lowerdir' [ 558.497011][T13194] FAULT_INJECTION: forcing a failure. [ 558.497011][T13194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.497053][T13194] CPU: 1 UID: 0 PID: 13194 Comm: syz.8.2265 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 558.497105][T13194] Tainted: [L]=SOFTLOCKUP [ 558.497115][T13194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 558.497128][T13194] Call Trace: [ 558.497138][T13194] [ 558.497156][T13194] dump_stack_lvl+0xe8/0x150 [ 558.497194][T13194] should_fail_ex+0x46b/0x600 [ 558.497233][T13194] _copy_to_user+0x31/0xb0 [ 558.497261][T13194] simple_read_from_buffer+0xe1/0x170 [ 558.497290][T13194] proc_fail_nth_read+0x1be/0x230 [ 558.497317][T13194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 558.497343][T13194] ? rw_verify_area+0x2ac/0x4e0 [ 558.497371][T13194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 558.497396][T13194] vfs_read+0x212/0xa80 [ 558.497437][T13194] ? __pfx_vfs_read+0x10/0x10 [ 558.497470][T13194] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 558.497502][T13194] ? lockdep_hardirqs_on+0x7a/0x110 [ 558.497534][T13194] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 558.497565][T13194] ? mutex_lock_nested+0x152/0x1d0 [ 558.497588][T13194] ? fdget_pos+0x252/0x320 [ 558.497625][T13194] ksys_read+0x156/0x270 [ 558.497661][T13194] ? __pfx_ksys_read+0x10/0x10 [ 558.497706][T13194] do_syscall_64+0x14d/0xf80 [ 558.497734][T13194] ? trace_irq_disable+0x3b/0x150 [ 558.497759][T13194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.497782][T13194] ? clear_bhb_loop+0x40/0x90 [ 558.497810][T13194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.497833][T13194] RIP: 0033:0x7fb0e773cfce [ 558.497854][T13194] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 558.497873][T13194] RSP: 002b:00007fb0e59cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 558.497899][T13194] RAX: ffffffffffffffda RBX: 00007fb0e59ce6c0 RCX: 00007fb0e773cfce [ 558.497922][T13194] RDX: 000000000000000f RSI: 00007fb0e59ce0a0 RDI: 0000000000000003 [ 558.497937][T13194] RBP: 00007fb0e59ce090 R08: 0000000000000000 R09: 0000000000000000 [ 558.497953][T13194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.497967][T13194] R13: 00007fb0e79f6038 R14: 00007fb0e79f5fa0 R15: 00007ffd625cdf88 [ 558.498005][T13194] [ 558.504166][ T5117] Bluetooth: Frame is too long (len 12, expected len 4) [ 559.029060][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2270'. [ 559.435652][T13213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.642332][T13217] FAULT_INJECTION: forcing a failure. [ 559.642332][T13217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.642375][T13217] CPU: 1 UID: 0 PID: 13217 Comm: syz.0.2272 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 559.642406][T13217] Tainted: [L]=SOFTLOCKUP [ 559.642415][T13217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 559.642431][T13217] Call Trace: [ 559.642441][T13217] [ 559.642451][T13217] dump_stack_lvl+0xe8/0x150 [ 559.642492][T13217] should_fail_ex+0x46b/0x600 [ 559.642535][T13217] _copy_from_iter+0x1d3/0x1670 [ 559.642574][T13217] ? __pfx__copy_from_iter+0x10/0x10 [ 559.642597][T13217] ? trace_kmalloc+0x2a/0x110 [ 559.642634][T13217] ? rcu_is_watching+0x15/0xb0 [ 559.642670][T13217] file_tty_write+0x4ca/0xa30 [ 559.642710][T13217] vfs_write+0x629/0xba0 [ 559.642750][T13217] ? __pfx_vfs_write+0x10/0x10 [ 559.642793][T13217] ? __fget_files+0x2a/0x420 [ 559.642831][T13217] ksys_write+0x156/0x270 [ 559.642864][T13217] ? __pfx_ksys_write+0x10/0x10 [ 559.642910][T13217] do_syscall_64+0x14d/0xf80 [ 559.642939][T13217] ? trace_irq_disable+0x3b/0x150 [ 559.642964][T13217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.642988][T13217] ? clear_bhb_loop+0x40/0x90 [ 559.643016][T13217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.643039][T13217] RIP: 0033:0x7f505ca1c799 [ 559.643061][T13217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.643081][T13217] RSP: 002b:00007f505ac6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 559.643105][T13217] RAX: ffffffffffffffda RBX: 00007f505cc95fa0 RCX: 00007f505ca1c799 [ 559.643123][T13217] RDX: 0000000000001006 RSI: 0000200000000080 RDI: 0000000000000004 [ 559.643138][T13217] RBP: 00007f505ac6e090 R08: 0000000000000000 R09: 0000000000000000 [ 559.643152][T13217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.643165][T13217] R13: 00007f505cc96038 R14: 00007f505cc95fa0 R15: 00007ffdcaa18f88 [ 559.643203][T13217] [ 560.259294][T13243] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 560.259325][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.259325][T13243] [ 560.259601][T13243] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 560.259986][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.259986][T13243] [ 560.260003][T13243] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 560.260323][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.260323][T13243] [ 560.260339][T13243] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 560.264706][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.264706][T13243] [ 560.264729][T13243] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 560.265099][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.265099][T13243] [ 560.265116][T13243] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 560.265437][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.265437][T13243] [ 560.265453][T13243] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 560.265779][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.265779][T13243] [ 560.265795][T13243] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 560.266117][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.266117][T13243] [ 560.266134][T13243] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 560.266459][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.266459][T13243] [ 560.266475][T13243] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 560.276720][ T5888] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 560.291536][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.291536][T13243] [ 560.291591][T13243] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 560.292463][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.292463][T13243] [ 560.296096][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.296096][T13243] [ 560.300026][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.300026][T13243] [ 560.301434][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.301434][T13243] [ 560.302588][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.302588][T13243] [ 560.303844][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.303844][T13243] [ 560.304819][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.304819][T13243] [ 560.306141][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.306141][T13243] [ 560.313899][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.313899][T13243] [ 560.315023][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.315023][T13243] [ 560.316326][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.316326][T13243] [ 560.330645][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.330645][T13243] [ 560.332841][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.332841][T13243] [ 560.334221][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.334221][T13243] [ 560.342753][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.342753][T13243] [ 560.344261][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.344261][T13243] [ 560.345240][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.345240][T13243] [ 560.346556][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.346556][T13243] [ 560.366968][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.366968][T13243] [ 560.368579][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.368579][T13243] [ 560.375473][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.375473][T13243] [ 560.378843][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.378843][T13243] [ 560.382317][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.382317][T13243] [ 560.386047][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.386047][T13243] [ 560.391022][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.391022][T13243] [ 560.393090][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.393090][T13243] [ 560.394334][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.394334][T13243] [ 560.402677][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.402677][T13243] [ 560.403975][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.403975][T13243] [ 560.405065][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.405065][T13243] [ 560.405689][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.405689][T13243] [ 560.412023][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.412023][T13243] [ 560.414693][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.414693][T13243] [ 560.416224][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.416224][T13243] [ 560.420952][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.420952][T13243] [ 560.424050][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.424050][T13243] [ 560.432478][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.432478][T13243] [ 560.434528][ T5888] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 560.434562][ T5888] usb 1-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 560.442563][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.442563][T13243] [ 560.445517][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.445517][T13243] [ 560.455085][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.455085][T13243] [ 560.455449][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.455449][T13243] [ 560.472681][ T5888] usb 1-1: New USB device found, idVendor=813a, idProduct=22fe, bcdDevice=89.9c [ 560.472768][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.472831][ T5888] usb 1-1: Product: syz [ 560.472873][ T5888] usb 1-1: Manufacturer: syz [ 560.472916][ T5888] usb 1-1: SerialNumber: syz [ 560.488137][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.488137][T13243] [ 560.493815][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.493815][T13243] [ 560.495017][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.495017][T13243] [ 560.503389][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.503389][T13243] [ 560.504583][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.504583][T13243] [ 560.522423][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.522423][T13243] [ 560.525789][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.525789][T13243] [ 560.540165][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.540165][T13243] [ 560.555241][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.555241][T13243] [ 560.556548][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.556548][T13243] [ 560.598499][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.598499][T13243] [ 560.599395][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.599395][T13243] [ 560.609023][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.609023][T13243] [ 560.610197][T13243] CIFS mount error: No usable UNC path provided in device string! [ 560.610197][T13243] [ 560.813060][T13231] FAULT_INJECTION: forcing a failure. [ 560.813060][T13231] name failslab, interval 1, probability 0, space 0, times 0 [ 560.813101][T13231] CPU: 0 UID: 0 PID: 13231 Comm: syz.0.2275 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 560.813131][T13231] Tainted: [L]=SOFTLOCKUP [ 560.813141][T13231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 560.813155][T13231] Call Trace: [ 560.813163][T13231] [ 560.813174][T13231] dump_stack_lvl+0xe8/0x150 [ 560.813214][T13231] should_fail_ex+0x46b/0x600 [ 560.813257][T13231] should_failslab+0xa8/0x100 [ 560.813294][T13231] __kmalloc_noprof+0xdf/0x7b0 [ 560.813328][T13231] ? tomoyo_encode+0x28b/0x550 [ 560.813370][T13231] tomoyo_encode+0x28b/0x550 [ 560.813411][T13231] tomoyo_realpath_from_path+0x58d/0x5d0 [ 560.813460][T13231] ? tomoyo_path_number_perm+0x219/0x630 [ 560.813490][T13231] tomoyo_path_number_perm+0x246/0x630 [ 560.813525][T13231] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 560.813558][T13231] ? __lock_acquire+0x6b5/0x2cf0 [ 560.813619][T13231] ? __fget_files+0x2a/0x420 [ 560.813649][T13231] ? __fget_files+0x2a/0x420 [ 560.813675][T13231] ? __fget_files+0x3a6/0x420 [ 560.813701][T13231] ? __fget_files+0x2a/0x420 [ 560.813733][T13231] security_file_ioctl+0xc3/0x2a0 [ 560.813766][T13231] __se_sys_ioctl+0x47/0x170 [ 560.813803][T13231] do_syscall_64+0x14d/0xf80 [ 560.813833][T13231] ? trace_irq_disable+0x3b/0x150 [ 560.813859][T13231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.813883][T13231] ? clear_bhb_loop+0x40/0x90 [ 560.813920][T13231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.813944][T13231] RIP: 0033:0x7f505ca1c799 [ 560.813967][T13231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.813988][T13231] RSP: 002b:00007f505ac6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.814012][T13231] RAX: ffffffffffffffda RBX: 00007f505cc95fa0 RCX: 00007f505ca1c799 [ 560.814029][T13231] RDX: 0000200000000040 RSI: 0000000000004b52 RDI: 0000000000000004 [ 560.814044][T13231] RBP: 00007f505ac6e090 R08: 0000000000000000 R09: 0000000000000000 [ 560.814058][T13231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.814072][T13231] R13: 00007f505cc96038 R14: 00007f505cc95fa0 R15: 00007ffdcaa18f88 [ 560.814109][T13231] [ 560.814130][T13231] ERROR: Out of memory at tomoyo_realpath_from_path. [ 560.999399][ T5922] usb 1-1: USB disconnect, device number 23 [ 561.760031][T13251] FAULT_INJECTION: forcing a failure. [ 561.760031][T13251] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 561.760077][T13251] CPU: 1 UID: 0 PID: 13251 Comm: syz.8.2284 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 561.760107][T13251] Tainted: [L]=SOFTLOCKUP [ 561.760117][T13251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.760130][T13251] Call Trace: [ 561.760140][T13251] [ 561.760150][T13251] dump_stack_lvl+0xe8/0x150 [ 561.760191][T13251] should_fail_ex+0x46b/0x600 [ 561.760233][T13251] prepare_alloc_pages+0x22a/0x6b0 [ 561.760281][T13251] __alloc_frozen_pages_noprof+0x12f/0x380 [ 561.760309][T13251] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 561.760336][T13251] ? __pfx_policy_nodemask+0x10/0x10 [ 561.760368][T13251] ? __lock_acquire+0x6b5/0x2cf0 [ 561.760399][T13251] alloc_pages_mpol+0xd1/0x380 [ 561.760440][T13251] vma_alloc_folio_noprof+0xea/0x290 [ 561.760480][T13251] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 561.760528][T13251] do_pte_missing+0x810/0x2d30 [ 561.760567][T13251] handle_mm_fault+0xd0a/0x13c0 [ 561.760605][T13251] ? handle_mm_fault+0xe7/0x13c0 [ 561.760639][T13251] ? __pfx_handle_mm_fault+0x10/0x10 [ 561.760692][T13251] ? lock_mm_and_find_vma+0xa7/0x340 [ 561.760718][T13251] do_user_addr_fault+0x75b/0x1340 [ 561.760768][T13251] exc_page_fault+0x6a/0xc0 [ 561.760800][T13251] asm_exc_page_fault+0x26/0x30 [ 561.760821][T13251] RIP: 0010:put_cmsg+0x1d8/0x5d0 [ 561.760856][T13251] Code: 63 f3 0f 84 9e 00 00 00 49 8d 6e f0 0f 1f 44 00 00 e8 bc 33 d3 f8 48 b8 00 f0 ff ff ff 7f 00 00 49 39 c5 4c 0f 47 e8 0f 01 cb <4d> 89 75 00 8b 44 24 08 41 89 45 08 8b 44 24 0c 41 89 45 0c 49 83 [ 561.760874][T13251] RSP: 0018:ffffc90010f4f680 EFLAGS: 00050283 [ 561.760895][T13251] RAX: 00007ffffffff000 RBX: 0000000000000018 RCX: ffff888039058000 [ 561.760911][T13251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.760924][T13251] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 561.760937][T13251] R10: ffffc90010f4f760 R11: fffff520021e9eed R12: dffffc0000000000 [ 561.760954][T13251] R13: 0000200000002f40 R14: 0000000000000018 R15: ffffc90010f4f760 [ 561.761001][T13251] tipc_sk_anc_data_recv+0x31d/0x6b0 [ 561.761037][T13251] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 561.761069][T13251] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 561.761096][T13251] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 561.761126][T13251] ? lockdep_hardirqs_on+0x7a/0x110 [ 561.761162][T13251] tipc_recvmsg+0x72c/0x1430 [ 561.761206][T13251] ? __pfx_tipc_recvmsg+0x10/0x10 [ 561.761258][T13251] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 561.761287][T13251] ? security_socket_recvmsg+0x7e/0x2c0 [ 561.761314][T13251] ? __pfx_tipc_recvmsg+0x10/0x10 [ 561.761341][T13251] sock_recvmsg+0x22c/0x270 [ 561.761369][T13251] ____sys_recvmsg+0x1f2/0x4b0 [ 561.761411][T13251] ? __pfx_____sys_recvmsg+0x10/0x10 [ 561.761461][T13251] ? import_iovec+0x73/0xa0 [ 561.761493][T13251] ___sys_recvmsg+0x215/0x590 [ 561.761530][T13251] ? __pfx____sys_recvmsg+0x10/0x10 [ 561.761590][T13251] ? __fget_files+0x3a6/0x420 [ 561.761628][T13251] __x64_sys_recvmsg+0x1c0/0x2a0 [ 561.761663][T13251] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 561.761705][T13251] ? __pfx_ksys_write+0x10/0x10 [ 561.761749][T13251] do_syscall_64+0x14d/0xf80 [ 561.761778][T13251] ? trace_irq_disable+0x3b/0x150 [ 561.761803][T13251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.761825][T13251] ? clear_bhb_loop+0x40/0x90 [ 561.761853][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.761875][T13251] RIP: 0033:0x7fb0e777c799 [ 561.761896][T13251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.761914][T13251] RSP: 002b:00007fb0e59ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 561.761936][T13251] RAX: ffffffffffffffda RBX: 00007fb0e79f5fa0 RCX: 00007fb0e777c799 [ 561.761953][T13251] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 561.761967][T13251] RBP: 00007fb0e59ce090 R08: 0000000000000000 R09: 0000000000000000 [ 561.761982][T13251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.761996][T13251] R13: 00007fb0e79f6038 R14: 00007fb0e79f5fa0 R15: 00007ffd625cdf88 [ 561.762038][T13251] [ 562.226874][T13260] MTD: Attempt to mount non-MTD device "./file0" [ 562.228202][T13260] ./file0: Can't open blockdev [ 562.232101][T13260] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2287'. [ 562.276164][T13265] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 562.365786][T13270] FAULT_INJECTION: forcing a failure. [ 562.365786][T13270] name failslab, interval 1, probability 0, space 0, times 0 [ 562.365816][T13270] CPU: 0 UID: 0 PID: 13270 Comm: syz.8.2290 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 562.365840][T13270] Tainted: [L]=SOFTLOCKUP [ 562.365845][T13270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.365856][T13270] Call Trace: [ 562.365862][T13270] [ 562.365869][T13270] dump_stack_lvl+0xe8/0x150 [ 562.365899][T13270] should_fail_ex+0x46b/0x600 [ 562.365931][T13270] should_failslab+0xa8/0x100 [ 562.365958][T13270] __kmalloc_noprof+0xdf/0x7b0 [ 562.365982][T13270] ? tomoyo_encode+0x28b/0x550 [ 562.366014][T13270] tomoyo_encode+0x28b/0x550 [ 562.366043][T13270] tomoyo_realpath_from_path+0x58d/0x5d0 [ 562.366076][T13270] ? tomoyo_path_number_perm+0x219/0x630 [ 562.366098][T13270] tomoyo_path_number_perm+0x246/0x630 [ 562.366122][T13270] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 562.366145][T13270] ? __lock_acquire+0x6b5/0x2cf0 [ 562.366186][T13270] ? __fget_files+0x2a/0x420 [ 562.366208][T13270] ? __fget_files+0x2a/0x420 [ 562.366226][T13270] ? __fget_files+0x3a6/0x420 [ 562.366244][T13270] ? __fget_files+0x2a/0x420 [ 562.366265][T13270] security_file_ioctl+0xc3/0x2a0 [ 562.366290][T13270] __se_sys_ioctl+0x47/0x170 [ 562.366345][T13270] do_syscall_64+0x14d/0xf80 [ 562.366375][T13270] ? trace_irq_disable+0x3b/0x150 [ 562.366402][T13270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.366425][T13270] ? clear_bhb_loop+0x40/0x90 [ 562.366459][T13270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.366477][T13270] RIP: 0033:0x7fb0e777c799 [ 562.366493][T13270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.366508][T13270] RSP: 002b:00007fb0e59ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.366524][T13270] RAX: ffffffffffffffda RBX: 00007fb0e79f5fa0 RCX: 00007fb0e777c799 [ 562.366536][T13270] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000003 [ 562.366547][T13270] RBP: 00007fb0e59ce090 R08: 0000000000000000 R09: 0000000000000000 [ 562.366557][T13270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.366567][T13270] R13: 00007fb0e79f6038 R14: 00007fb0e79f5fa0 R15: 00007ffd625cdf88 [ 562.366620][T13270] [ 562.403596][T13270] ERROR: Out of memory at tomoyo_realpath_from_path. [ 563.015869][T13289] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 563.098612][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.098689][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.198123][T13293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 564.197085][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 564.349252][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 564.352616][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.352666][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 564.352693][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.394311][ T10] usb 1-1: config 0 descriptor?? [ 564.421712][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 564.421757][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 564.457648][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 564.983109][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2306'. [ 565.947259][ T31] usb 9-1: new full-speed USB device number 51 using dummy_hcd [ 566.111593][ T31] usb 9-1: config index 0 descriptor too short (expected 92, got 60) [ 566.111625][ T31] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.111645][ T31] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 566.111696][ T31] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 566.173749][ T31] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 566.173782][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.173805][ T31] usb 9-1: Product: syz [ 566.173821][ T31] usb 9-1: Manufacturer: syz [ 566.173837][ T31] usb 9-1: SerialNumber: syz [ 567.793143][ T31] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 567.793193][ T31] cdc_ncm 9-1:1.0: bind() failure [ 567.847580][ T31] usb 9-1: USB disconnect, device number 51 [ 569.250050][T13392] tipc: Started in network mode [ 569.250077][T13392] tipc: Node identity 4, cluster identity 4711 [ 569.250093][T13392] tipc: Node number set to 4 [ 569.426912][ T10] usb 1-1: reset high-speed USB device number 24 using dummy_hcd [ 569.452405][ T10] usb 1-1: device reset changed ep0 maxpacket size! [ 569.502380][ T10] usb 1-1: USB disconnect, device number 24 [ 569.664719][T13402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.816794][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 569.981884][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.981913][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.984434][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 569.984467][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 569.984490][ T10] usb 1-1: SerialNumber: syz [ 570.724830][ T10] usb 1-1: skipping empty audio interface (v1) [ 571.242068][T13420] /dev/nullb0: Can't lookup blockdev [ 571.333333][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 571.388026][ T10] usb 1-1: USB disconnect, device number 25 [ 571.446250][T13245] udevd[13245]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.555315][T13428] netlink: 'syz.5.2347': attribute type 21 has an invalid length. [ 571.622439][T13430] ptrace attach of "./syz-executor exec"[6357] was attempted by ""[13430] [ 571.673059][T13430] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2345'. [ 572.856383][T13460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2353'. [ 573.966829][ T5922] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 574.120594][ T5922] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.120626][ T5922] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.122689][ T5922] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 574.122720][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 574.122742][ T5922] usb 1-1: SerialNumber: syz [ 574.414044][ T5922] usb 1-1: 0:2 : does not exist [ 574.534040][ T5922] usb 1-1: USB disconnect, device number 26 [ 574.662207][T13245] udevd[13245]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.741395][T13484] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.2366'. [ 574.772014][T13484] IPv6: addrconf: prefix option has invalid lifetime [ 574.773460][T13485] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2367'. [ 574.798940][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 576.639340][T13522] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2379'. [ 576.641897][T13521] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2377'. [ 577.178335][T13541] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2384'. [ 577.356735][ T6341] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 577.487031][ T6341] usb 9-1: device descriptor read/64, error -71 [ 577.729771][T13549] FAULT_INJECTION: forcing a failure. [ 577.729771][T13549] name failslab, interval 1, probability 0, space 0, times 0 [ 577.729814][T13549] CPU: 1 UID: 0 PID: 13549 Comm: syz.0.2388 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 577.729845][T13549] Tainted: [L]=SOFTLOCKUP [ 577.729854][T13549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 577.729869][T13549] Call Trace: [ 577.729879][T13549] [ 577.729890][T13549] dump_stack_lvl+0xe8/0x150 [ 577.729931][T13549] should_fail_ex+0x46b/0x600 [ 577.729975][T13549] should_failslab+0xa8/0x100 [ 577.730013][T13549] __kmalloc_noprof+0xdf/0x7b0 [ 577.730047][T13549] ? tomoyo_encode2+0x27f/0x530 [ 577.730087][T13549] tomoyo_encode2+0x27f/0x530 [ 577.730130][T13549] tomoyo_check_unix_address+0x3d9/0x7f0 [ 577.730173][T13549] ? tomoyo_check_unix_address+0x167/0x7f0 [ 577.730222][T13549] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 577.730285][T13549] tomoyo_socket_bind_permission+0x1ae/0x290 [ 577.730333][T13549] security_socket_bind+0xc0/0x280 [ 577.730363][T13549] __sys_bind+0x276/0x410 [ 577.730393][T13549] ? __pfx___sys_bind+0x10/0x10 [ 577.730433][T13549] ? __pfx_ksys_write+0x10/0x10 [ 577.730491][T13549] __x64_sys_bind+0x7a/0x90 [ 577.730519][T13549] do_syscall_64+0x14d/0xf80 [ 577.730549][T13549] ? trace_irq_disable+0x3b/0x150 [ 577.730582][T13549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.730605][T13549] ? clear_bhb_loop+0x40/0x90 [ 577.730633][T13549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.730656][T13549] RIP: 0033:0x7f505ca1c799 [ 577.730678][T13549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.730698][T13549] RSP: 002b:00007f505ac6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 577.730723][T13549] RAX: ffffffffffffffda RBX: 00007f505cc95fa0 RCX: 00007f505ca1c799 [ 577.730741][T13549] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000006 [ 577.730756][T13549] RBP: 00007f505ac6e090 R08: 0000000000000000 R09: 0000000000000000 [ 577.730771][T13549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.730785][T13549] R13: 00007f505cc96038 R14: 00007f505cc95fa0 R15: 00007ffdcaa18f88 [ 577.730823][T13549] [ 578.116818][ T6341] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 578.247096][ T6341] usb 9-1: device descriptor read/64, error -71 [ 578.357439][ T6341] usb usb9-port1: attempt power cycle [ 578.686907][T13562] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2391'. [ 578.709228][ T6341] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 578.730349][ T6341] usb 9-1: device descriptor read/8, error -71 [ 578.928451][T13572] netlink: 'syz.5.2392': attribute type 10 has an invalid length. [ 578.969391][ T6341] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 578.988849][ T6341] usb 9-1: device descriptor read/8, error -71 [ 579.037860][T13572] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.070331][T13572] bond0: (slave team0): Enslaving as an active interface with an up link [ 579.100043][ T6341] usb usb9-port1: unable to enumerate USB device [ 579.777111][ T5922] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 579.930865][ T5922] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 579.930900][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.974246][ T5922] usb 1-1: config 0 descriptor?? [ 579.984409][ T5922] cp210x 1-1:0.0: cp210x converter detected [ 580.232641][T13603] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2404'. [ 580.326381][T13606] gretap1: entered allmulticast mode [ 580.383734][ T5922] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 580.417281][ T5922] usb 1-1: cp210x converter now attached to ttyUSB0 [ 580.601715][T13611] overlay: ./file0 is not a directory [ 581.037285][ T5922] usb 1-1: USB disconnect, device number 27 [ 581.070894][ T5922] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 581.197305][ T5922] cp210x 1-1:0.0: device disconnected [ 581.884518][T13631] FAULT_INJECTION: forcing a failure. [ 581.884518][T13631] name failslab, interval 1, probability 0, space 0, times 0 [ 581.884558][T13631] CPU: 0 UID: 0 PID: 13631 Comm: syz.8.2413 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 581.884588][T13631] Tainted: [L]=SOFTLOCKUP [ 581.884597][T13631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 581.884610][T13631] Call Trace: [ 581.884620][T13631] [ 581.884630][T13631] dump_stack_lvl+0xe8/0x150 [ 581.884668][T13631] should_fail_ex+0x46b/0x600 [ 581.884712][T13631] should_failslab+0xa8/0x100 [ 581.884749][T13631] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 581.884783][T13631] ? __alloc_skb+0x1d0/0x7d0 [ 581.884808][T13631] ? lockdep_hardirqs_on+0x7a/0x110 [ 581.884845][T13631] __alloc_skb+0x1d0/0x7d0 [ 581.884878][T13631] netlink_sendmsg+0x5d4/0xb40 [ 581.884913][T13631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.884946][T13631] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 581.884982][T13631] ____sys_sendmsg+0xa4e/0xac0 [ 581.885023][T13631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 581.885094][T13631] ? import_iovec+0x73/0xa0 [ 581.885124][T13631] ___sys_sendmsg+0x2a5/0x360 [ 581.885161][T13631] ? __pfx____sys_sendmsg+0x10/0x10 [ 581.885228][T13631] ? __fget_files+0x2a/0x420 [ 581.885254][T13631] ? __fget_files+0x3a6/0x420 [ 581.885292][T13631] __x64_sys_sendmsg+0x1c3/0x2a0 [ 581.885325][T13631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 581.885367][T13631] ? __pfx_ksys_write+0x10/0x10 [ 581.885411][T13631] do_syscall_64+0x14d/0xf80 [ 581.885441][T13631] ? trace_irq_disable+0x3b/0x150 [ 581.885467][T13631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.885489][T13631] ? clear_bhb_loop+0x40/0x90 [ 581.885518][T13631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.885541][T13631] RIP: 0033:0x7fb0e777c799 [ 581.885562][T13631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.885582][T13631] RSP: 002b:00007fb0e59ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.885606][T13631] RAX: ffffffffffffffda RBX: 00007fb0e79f5fa0 RCX: 00007fb0e777c799 [ 581.885623][T13631] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000005 [ 581.885637][T13631] RBP: 00007fb0e59ce090 R08: 0000000000000000 R09: 0000000000000000 [ 581.885652][T13631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.885665][T13631] R13: 00007fb0e79f6038 R14: 00007fb0e79f5fa0 R15: 00007ffd625cdf88 [ 581.885701][T13631] [ 582.222595][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2412'. [ 582.450312][T13641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2417'. [ 582.573783][T13645] No control pipe specified [ 583.538369][ T5873] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 583.799238][ T5873] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 583.799271][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.826246][ T5873] usb 1-1: config 0 descriptor?? [ 583.841327][ T5873] pegasus 1-1:0.0: Missing or invalid endpoints [ 583.969280][T13668] ptrace attach of "./syz-executor exec"[6362] was attempted by ""[13668] [ 584.051910][T13653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.052519][T13653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.134590][ T31] usb 1-1: USB disconnect, device number 28 [ 584.750895][T13689] FAULT_INJECTION: forcing a failure. [ 584.750895][T13689] name failslab, interval 1, probability 0, space 0, times 0 [ 584.750941][T13689] CPU: 1 UID: 0 PID: 13689 Comm: syz.8.2434 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 584.750984][T13689] Tainted: [L]=SOFTLOCKUP [ 584.750994][T13689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 584.751008][T13689] Call Trace: [ 584.751019][T13689] [ 584.751029][T13689] dump_stack_lvl+0xe8/0x150 [ 584.751069][T13689] should_fail_ex+0x46b/0x600 [ 584.751112][T13689] should_failslab+0xa8/0x100 [ 584.751149][T13689] __kvmalloc_node_noprof+0x170/0x8e0 [ 584.751186][T13689] ? fanout_add+0x73d/0x12c0 [ 584.751216][T13689] ? mutex_lock_nested+0x152/0x1d0 [ 584.751239][T13689] ? fanout_add+0x146/0x12c0 [ 584.751274][T13689] fanout_add+0x73d/0x12c0 [ 584.751311][T13689] ? _copy_from_user+0x94/0xb0 [ 584.751344][T13689] packet_setsockopt+0xc34/0x1510 [ 584.751376][T13689] ? __pfx_packet_setsockopt+0x10/0x10 [ 584.751414][T13689] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 584.751447][T13689] ? lockdep_hardirqs_on+0x7a/0x110 [ 584.751495][T13689] ? __fget_files+0x2a/0x420 [ 584.751525][T13689] ? __fget_files+0x2a/0x420 [ 584.751551][T13689] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 584.751582][T13689] ? __pfx_packet_setsockopt+0x10/0x10 [ 584.751611][T13689] do_sock_setsockopt+0x17c/0x1b0 [ 584.751647][T13689] __x64_sys_setsockopt+0x143/0x1b0 [ 584.751689][T13689] do_syscall_64+0x14d/0xf80 [ 584.751744][T13689] ? trace_irq_disable+0x3b/0x150 [ 584.751770][T13689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.751795][T13689] ? clear_bhb_loop+0x40/0x90 [ 584.751824][T13689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.751847][T13689] RIP: 0033:0x7fb0e777c799 [ 584.751869][T13689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.751889][T13689] RSP: 002b:00007fb0e598c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 584.751914][T13689] RAX: ffffffffffffffda RBX: 00007fb0e79f6180 RCX: 00007fb0e777c799 [ 584.751931][T13689] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000007 [ 584.751945][T13689] RBP: 00007fb0e598c090 R08: 0000000000000008 R09: 0000000000000000 [ 584.751960][T13689] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.751974][T13689] R13: 00007fb0e79f6218 R14: 00007fb0e79f6180 R15: 00007ffd625cdf88 [ 584.752010][T13689] [ 587.845640][T13716] ptrace attach of "./syz-executor exec"[6362] was attempted by ""[13716] [ 587.968808][ T6341] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 588.842609][ T6341] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 588.842644][ T6341] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.870954][ T6341] usb 9-1: config 0 descriptor?? [ 588.882040][ T6341] cp210x 9-1:0.0: cp210x converter detected [ 588.912829][ T37] audit: type=1326 audit(1772313918.423:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13701 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505ca1c799 code=0x7fc00000 [ 588.914309][ T37] audit: type=1326 audit(1772313918.423:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13701 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f505ca1c799 code=0x7fc00000 [ 588.916272][ T37] audit: type=1326 audit(1772313918.423:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13701 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505ca1c799 code=0x7fc00000 [ 588.923521][ T37] audit: type=1326 audit(1772313918.423:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13701 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505ca1c799 code=0x7fc00000 [ 588.923584][ T37] audit: type=1326 audit(1772313918.433:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13701 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505ca1c799 code=0x7fc00000 [ 590.570680][ T6341] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 590.631693][ T6341] cp210x 9-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 590.631725][ T6341] cp210x 9-1:0.0: GPIO initialisation failed: -71 [ 590.662424][ T6341] usb 9-1: cp210x converter now attached to ttyUSB0 [ 590.684642][ T6341] usb 9-1: USB disconnect, device number 56 [ 590.724270][ T6341] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 590.725023][ T6341] cp210x 9-1:0.0: device disconnected [ 590.792535][T13742] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2451'. [ 592.130795][T13757] ptrace attach of "./syz-executor exec"[12579] was attempted by ""[13757] [ 592.355450][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2458'. [ 592.826961][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2457'. [ 592.899452][T13779] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2464'. [ 595.242136][T13826] FAULT_INJECTION: forcing a failure. [ 595.242136][T13826] name failslab, interval 1, probability 0, space 0, times 0 [ 595.242179][T13826] CPU: 1 UID: 0 PID: 13826 Comm: syz.8.2480 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 595.242210][T13826] Tainted: [L]=SOFTLOCKUP [ 595.242219][T13826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 595.242235][T13826] Call Trace: [ 595.242244][T13826] [ 595.242255][T13826] dump_stack_lvl+0xe8/0x150 [ 595.242294][T13826] should_fail_ex+0x46b/0x600 [ 595.242338][T13826] should_failslab+0xa8/0x100 [ 595.242375][T13826] __kmalloc_noprof+0xdf/0x7b0 [ 595.242409][T13826] ? tomoyo_encode+0x28b/0x550 [ 595.242449][T13826] tomoyo_encode+0x28b/0x550 [ 595.242492][T13826] tomoyo_realpath_from_path+0x58d/0x5d0 [ 595.242540][T13826] ? tomoyo_path_number_perm+0x219/0x630 [ 595.242571][T13826] tomoyo_path_number_perm+0x246/0x630 [ 595.242604][T13826] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 595.242638][T13826] ? __lock_acquire+0x6b5/0x2cf0 [ 595.242697][T13826] ? __fget_files+0x2a/0x420 [ 595.242736][T13826] ? __fget_files+0x2a/0x420 [ 595.242761][T13826] ? __fget_files+0x3a6/0x420 [ 595.242786][T13826] ? __fget_files+0x2a/0x420 [ 595.242819][T13826] security_file_ioctl+0xc3/0x2a0 [ 595.242852][T13826] __se_sys_ioctl+0x47/0x170 [ 595.242889][T13826] do_syscall_64+0x14d/0xf80 [ 595.242920][T13826] ? trace_irq_disable+0x3b/0x150 [ 595.242945][T13826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.242969][T13826] ? clear_bhb_loop+0x40/0x90 [ 595.242999][T13826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.243022][T13826] RIP: 0033:0x7fb0e777c799 [ 595.243044][T13826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.243063][T13826] RSP: 002b:00007fb0e59ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.243089][T13826] RAX: ffffffffffffffda RBX: 00007fb0e79f5fa0 RCX: 00007fb0e777c799 [ 595.243105][T13826] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000004 [ 595.243121][T13826] RBP: 00007fb0e59ce090 R08: 0000000000000000 R09: 0000000000000000 [ 595.243135][T13826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.243148][T13826] R13: 00007fb0e79f6038 R14: 00007fb0e79f5fa0 R15: 00007ffd625cdf88 [ 595.243184][T13826] [ 595.243205][T13826] ERROR: Out of memory at tomoyo_realpath_from_path. [ 595.690517][T13829] FAULT_INJECTION: forcing a failure. [ 595.690517][T13829] name failslab, interval 1, probability 0, space 0, times 0 [ 595.690559][T13829] CPU: 1 UID: 0 PID: 13829 Comm: syz.8.2482 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 595.690592][T13829] Tainted: [L]=SOFTLOCKUP [ 595.690601][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 595.690615][T13829] Call Trace: [ 595.690625][T13829] [ 595.690636][T13829] dump_stack_lvl+0xe8/0x150 [ 595.690676][T13829] should_fail_ex+0x46b/0x600 [ 595.690720][T13829] should_failslab+0xa8/0x100 [ 595.690758][T13829] __kmalloc_noprof+0xdf/0x7b0 [ 595.690791][T13829] ? io_cache_alloc_new+0x40/0x100 [ 595.690826][T13829] io_cache_alloc_new+0x40/0x100 [ 595.690856][T13829] __io_prep_rw+0x2bd/0xed0 [ 595.690898][T13829] ? __pfx___io_prep_rw+0x10/0x10 [ 595.690926][T13829] ? percpu_ref_get_many+0x21/0x1e0 [ 595.690954][T13829] ? percpu_ref_get_many+0x21/0x1e0 [ 595.690996][T13829] io_prep_rwv+0x8e/0x440 [ 595.691025][T13829] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 595.691061][T13829] ? __pfx_io_prep_rwv+0x10/0x10 [ 595.691097][T13829] ? __asan_memset+0x22/0x50 [ 595.691124][T13829] ? blk_start_plug_nr_ios+0x7e/0x1c0 [ 595.691163][T13829] io_submit_sqes+0xb35/0x2370 [ 595.691229][T13829] __se_sys_io_uring_enter+0x2d2/0x18c0 [ 595.691261][T13829] ? lockdep_hardirqs_on+0x7a/0x110 [ 595.691298][T13829] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 595.691331][T13829] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 595.691364][T13829] ? fput+0xa0/0xd0 [ 595.691390][T13829] ? ksys_write+0x248/0x270 [ 595.691426][T13829] ? __pfx_ksys_write+0x10/0x10 [ 595.691471][T13829] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 595.691506][T13829] do_syscall_64+0x14d/0xf80 [ 595.691536][T13829] ? trace_irq_disable+0x3b/0x150 [ 595.691562][T13829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.691585][T13829] ? clear_bhb_loop+0x40/0x90 [ 595.691615][T13829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.691638][T13829] RIP: 0033:0x7fb0e777c799 [ 595.691659][T13829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.691681][T13829] RSP: 002b:00007fb0e59ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 595.691707][T13829] RAX: ffffffffffffffda RBX: 00007fb0e79f5fa0 RCX: 00007fb0e777c799 [ 595.691724][T13829] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 595.691739][T13829] RBP: 00007fb0e59ce090 R08: 0000000000000000 R09: 0000000000000000 [ 595.691754][T13829] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 595.691769][T13829] R13: 00007fb0e79f6038 R14: 00007fb0e79f5fa0 R15: 00007ffd625cdf88 [ 595.691806][T13829] [ 596.176174][T13831] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2479'. [ 596.796686][T13854] ODEBUG: Out of memory. ODEBUG disabled [ 597.983017][T13869] tipc: Enabled bearer , priority 10 [ 598.754262][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2495'. [ 601.573388][ T5117] Bluetooth: hci9: unexpected event for opcode 0x2005 [ 602.178631][T13921] /dev/nullb0: Can't lookup blockdev [ 604.446700][ T31] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 604.619408][ T31] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 604.619438][ T31] usb 1-1: config 0 has no interface number 0 [ 604.619484][ T31] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 604.619516][ T31] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 604.619551][ T31] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 604.619579][ T31] usb 1-1: config 0 interface 2 has no altsetting 0 [ 604.627363][ T31] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 604.627454][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.627510][ T31] usb 1-1: Product: syz [ 604.627562][ T31] usb 1-1: Manufacturer: syz [ 604.627603][ T31] usb 1-1: SerialNumber: syz [ 604.666408][ T31] usb 1-1: config 0 descriptor?? [ 604.691234][T13952] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 604.692365][T13952] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 604.813722][ T5117] Bluetooth: hci9: unexpected event for opcode 0x2005 [ 605.023299][ T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 605.390082][T13973] /dev/nullb0: Can't lookup blockdev [ 605.397113][ T1232] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 605.566093][ T1232] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.566122][ T1232] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.566162][ T1232] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 605.566185][ T1232] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 605.582279][ T1232] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 605.582366][ T1232] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 605.582429][ T1232] usb 9-1: SerialNumber: syz [ 605.666812][T13970] sctp: [Deprecated]: syz.0.2521 (pid 13970) Use of int in max_burst socket option. [ 605.666812][T13970] Use struct sctp_assoc_value instead [ 605.871757][ T1232] usb 9-1: 0:2 : does not exist [ 605.871871][ T1232] usb 9-1: unit 5 not found! [ 606.014889][ T1232] usb 9-1: USB disconnect, device number 58 [ 606.174660][T13988] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2533'. [ 606.252863][T13979] udevd[13979]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 607.323932][ T6341] usb 1-1: USB disconnect, device number 29 [ 608.207308][T14012] FAULT_INJECTION: forcing a failure. [ 608.207308][T14012] name failslab, interval 1, probability 0, space 0, times 0 [ 608.207381][T14012] CPU: 0 UID: 0 PID: 14012 Comm: syz.0.2539 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 608.207415][T14012] Tainted: [L]=SOFTLOCKUP [ 608.207423][T14012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 608.207437][T14012] Call Trace: [ 608.207446][T14012] [ 608.207456][T14012] dump_stack_lvl+0xe8/0x150 [ 608.207495][T14012] should_fail_ex+0x46b/0x600 [ 608.207526][T14012] should_failslab+0xa8/0x100 [ 608.207553][T14012] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 608.207577][T14012] ? __alloc_skb+0x1d0/0x7d0 [ 608.207595][T14012] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 608.207623][T14012] __alloc_skb+0x1d0/0x7d0 [ 608.207645][T14012] netlink_sendmsg+0x5d4/0xb40 [ 608.207662][T14012] ? irqentry_exit+0x59e/0x620 [ 608.207683][T14012] ? trace_irq_disable+0x3b/0x150 [ 608.207708][T14012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.207735][T14012] ____sys_sendmsg+0xa4e/0xac0 [ 608.207764][T14012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 608.207792][T14012] ? import_iovec+0x73/0xa0 [ 608.207814][T14012] ___sys_sendmsg+0x2a5/0x360 [ 608.207840][T14012] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.207877][T14012] ? lockdep_hardirqs_on+0x7a/0x110 [ 608.207910][T14012] ? __x64_sys_sendmsg+0x1a8/0x2a0 [ 608.207937][T14012] __x64_sys_sendmsg+0x1c3/0x2a0 [ 608.207958][T14012] ? irqentry_exit+0x59e/0x620 [ 608.207980][T14012] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 608.208020][T14012] do_syscall_64+0x14d/0xf80 [ 608.208042][T14012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.208059][T14012] ? clear_bhb_loop+0x40/0x90 [ 608.208079][T14012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.208095][T14012] RIP: 0033:0x7f505ca1c799 [ 608.208111][T14012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.208126][T14012] RSP: 002b:00007f505ac4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.208143][T14012] RAX: ffffffffffffffda RBX: 00007f505cc96090 RCX: 00007f505ca1c799 [ 608.208155][T14012] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 608.208166][T14012] RBP: 00007f505ac4d090 R08: 0000000000000000 R09: 0000000000000000 [ 608.208176][T14012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.208185][T14012] R13: 00007f505cc96128 R14: 00007f505cc96090 R15: 00007ffdcaa18f88 [ 608.208210][T14012] [ 609.557490][ T5117] Bluetooth: hci6: unexpected event for opcode 0x2005 [ 613.556730][ T1232] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 613.979418][ T1232] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.979447][ T1232] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 613.979487][ T1232] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 613.979525][ T1232] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 613.981049][ T1232] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 613.981079][ T1232] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 613.981103][ T1232] usb 9-1: SerialNumber: syz [ 614.254956][ T1232] usb 9-1: 0:2 : does not exist [ 614.255047][ T1232] usb 9-1: unit 5 not found! [ 614.591269][ T1232] usb 9-1: USB disconnect, device number 59 [ 614.766056][T13979] udevd[13979]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.948352][T14059] netlink: 'syz.6.2555': attribute type 10 has an invalid length. [ 614.970338][T14059] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.973897][T14059] bond0: (slave team0): Enslaving as an active interface with an up link [ 615.415917][ T5117] Bluetooth: hci5: unexpected event for opcode 0x2005 [ 615.507099][ T5888] usb 9-1: new full-speed USB device number 60 using dummy_hcd [ 615.921038][ T5888] usb 9-1: unable to get BOS descriptor or descriptor too short [ 615.921706][ T5888] usb 9-1: not running at top speed; connect to a high speed hub [ 615.923016][ T5888] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.923070][ T5888] usb 9-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.923101][ T5888] usb 9-1: config 1 interface 0 has no altsetting 0 [ 615.925676][ T5888] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 615.925707][ T5888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.925729][ T5888] usb 9-1: Product: syz [ 615.925745][ T5888] usb 9-1: Manufacturer: syz [ 615.925761][ T5888] usb 9-1: SerialNumber: syz [ 617.088329][ T5888] usb 9-1: bad CDC descriptors [ 617.119519][ T5888] usb 9-1: USB disconnect, device number 60 [ 617.346393][T14092] usb usb8: usbfs: process 14092 (syz.0.2566) did not claim interface 0 before use [ 617.356730][T14092] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2566'. [ 617.843142][T14098] ufs: You didn't specify the type of your ufs filesystem [ 617.843142][T14098] [ 617.843142][T14098] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 617.843142][T14098] [ 617.843142][T14098] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 617.843195][T14098] ufs: ufstype=old is supported read-only [ 617.845489][T14098] ufs: ufs_fill_super(): bad magic number [ 618.111736][T14114] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 619.447078][ T5873] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 619.608801][ T5873] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 619.608824][ T5873] usb 1-1: config 150 has no interface number 0 [ 619.608857][ T5873] usb 1-1: config 150 interface 204 has no altsetting 0 [ 619.611086][ T5873] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 619.611116][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.611132][ T5873] usb 1-1: Product: syz [ 619.611143][ T5873] usb 1-1: Manufacturer: syz [ 619.611154][ T5873] usb 1-1: SerialNumber: syz [ 619.687023][ T1232] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 619.880165][ T1232] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.880195][ T1232] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.882299][ T1232] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 619.882403][ T1232] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 619.882428][ T1232] usb 9-1: SerialNumber: syz [ 620.101240][T14142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.102474][T14142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.639536][ T5873] xr_serial 1-1:150.204: xr_serial converter detected [ 620.681969][ T1232] usb 9-1: 0:2 : does not exist [ 620.682938][ T1232] usb 9-1: unit 5 not found! [ 620.794444][ T5873] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 620.794512][ T5873] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 620.850422][ T5873] usb 1-1: USB disconnect, device number 30 [ 620.957119][ T5873] xr_serial 1-1:150.204: device disconnected [ 621.126980][ T1232] usb 9-1: USB disconnect, device number 61 [ 621.155209][ T5117] Bluetooth: hci6: unexpected event for opcode 0x2005 [ 621.366660][T13979] udevd[13979]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.517145][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 622.767062][ T1232] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 622.862439][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 622.927349][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 622.927383][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.927405][ T10] usb 1-1: Product: syz [ 622.927421][ T10] usb 1-1: Manufacturer: syz [ 622.927438][ T10] usb 1-1: SerialNumber: syz [ 622.972366][ T10] usb 1-1: config 0 descriptor?? [ 622.985416][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 623.047096][ T1232] usb 9-1: Using ep0 maxpacket: 32 [ 623.049439][ T1232] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.049467][ T1232] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 623.072540][ T1232] usb 9-1: New USB device found, idVendor=1bc7, idProduct=1201, bcdDevice=55.67 [ 623.072575][ T1232] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.072598][ T1232] usb 9-1: Product: syz [ 623.072615][ T1232] usb 9-1: Manufacturer: syz [ 623.072632][ T1232] usb 9-1: SerialNumber: syz [ 623.158237][ T1232] usb 9-1: config 0 descriptor?? [ 623.698086][T14175] FAULT_INJECTION: forcing a failure. [ 623.698086][T14175] name failslab, interval 1, probability 0, space 0, times 0 [ 623.698129][T14175] CPU: 1 UID: 0 PID: 14175 Comm: syz.8.2596 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 623.698161][T14175] Tainted: [L]=SOFTLOCKUP [ 623.698170][T14175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.698186][T14175] Call Trace: [ 623.698196][T14175] [ 623.698207][T14175] dump_stack_lvl+0xe8/0x150 [ 623.698248][T14175] should_fail_ex+0x46b/0x600 [ 623.698292][T14175] should_failslab+0xa8/0x100 [ 623.698329][T14175] __kmalloc_noprof+0xdf/0x7b0 [ 623.698363][T14175] ? tomoyo_encode+0x28b/0x550 [ 623.698404][T14175] tomoyo_encode+0x28b/0x550 [ 623.698446][T14175] tomoyo_realpath_from_path+0x58d/0x5d0 [ 623.698494][T14175] ? tomoyo_path_number_perm+0x219/0x630 [ 623.698524][T14175] tomoyo_path_number_perm+0x246/0x630 [ 623.698558][T14175] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 623.698591][T14175] ? __lock_acquire+0x6b5/0x2cf0 [ 623.698658][T14175] ? __fget_files+0x2a/0x420 [ 623.698690][T14175] ? __fget_files+0x2a/0x420 [ 623.698716][T14175] ? __fget_files+0x3a6/0x420 [ 623.698742][T14175] ? __fget_files+0x2a/0x420 [ 623.698772][T14175] security_file_ioctl+0xc3/0x2a0 [ 623.698806][T14175] __se_sys_ioctl+0x47/0x170 [ 623.698843][T14175] do_syscall_64+0x14d/0xf80 [ 623.698872][T14175] ? trace_irq_disable+0x3b/0x150 [ 623.698898][T14175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.698923][T14175] ? clear_bhb_loop+0x40/0x90 [ 623.698950][T14175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.698974][T14175] RIP: 0033:0x7fb0e777c799 [ 623.698995][T14175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.699016][T14175] RSP: 002b:00007fb0e59ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.699040][T14175] RAX: ffffffffffffffda RBX: 00007fb0e79f5fa0 RCX: 00007fb0e777c799 [ 623.699058][T14175] RDX: 0000200000000380 RSI: 000000008038550a RDI: 0000000000000004 [ 623.699073][T14175] RBP: 00007fb0e59ce090 R08: 0000000000000000 R09: 0000000000000000 [ 623.699086][T14175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.699100][T14175] R13: 00007fb0e79f6038 R14: 00007fb0e79f5fa0 R15: 00007ffd625cdf88 [ 623.699136][T14175] [ 623.699157][T14175] ERROR: Out of memory at tomoyo_realpath_from_path. [ 623.699698][T14175] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 623.705120][ T5873] usb 9-1: USB disconnect, device number 62 [ 624.540008][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.540144][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.888321][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2603'. [ 624.947157][T14201] bond6: entered allmulticast mode [ 624.949574][T14201] 8021q: adding VLAN 0 to HW filter on device bond6 [ 625.515037][T14223] binder: Bad value for 'stats' [ 625.776874][ T10] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 626.712221][ T1232] usb 1-1: USB disconnect, device number 31 [ 626.974538][ T10] usb 9-1: config 0 has an invalid interface number: 113 but max is 0 [ 626.974571][ T10] usb 9-1: config 0 has no interface number 0 [ 626.974617][ T10] usb 9-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 626.974648][ T10] usb 9-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 626.974678][ T10] usb 9-1: config 0 interface 113 has no altsetting 0 [ 626.987168][ T10] usb 9-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 626.987204][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.987227][ T10] usb 9-1: Product: syz [ 626.987243][ T10] usb 9-1: Manufacturer: syz [ 626.987259][ T10] usb 9-1: SerialNumber: syz [ 627.065002][ T10] usb 9-1: config 0 descriptor?? [ 627.089741][T14223] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 627.124790][ C0] usb 9-1: NFC: Urb failure (status -71) [ 627.136616][ C0] usb 9-1: NFC: Urb failure (status -71) [ 627.144287][ T10] usb 9-1: NFC: Unable to get FW version [ 627.196899][ T10] pn533_usb 9-1:0.113: probe with driver pn533_usb failed with error -71 [ 627.319624][ T10] usb 9-1: USB disconnect, device number 63 [ 627.476807][ T5888] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 627.635877][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.635910][ T5888] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 627.635961][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 627.684973][ T5888] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 627.685008][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.685029][ T5888] usb 1-1: Product: syz [ 627.685044][ T5888] usb 1-1: Manufacturer: syz [ 627.685059][ T5888] usb 1-1: SerialNumber: syz [ 627.708395][ T5888] usb 1-1: config 0 descriptor?? [ 627.952474][ T5888] uvcvideo 1-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 627.952511][ T5888] uvcvideo 1-1:0.0: No valid video chain found. [ 628.187904][ T5888] usb 1-1: USB disconnect, device number 32 [ 628.718008][ T37] audit: type=1800 audit(1772313958.213:514): pid=14275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.9.2630" name="/" dev="sockfs" ino=40142 res=0 errno=0 [ 628.957963][T14288] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 628.957994][T14288] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 628.962607][T14288] vhci_hcd vhci_hcd.0: Device attached [ 628.991763][T14288] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 628.991794][T14288] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 628.991865][T14288] vhci_hcd vhci_hcd.0: Device attached [ 629.017858][T14288] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17) [ 629.017901][T14288] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 629.017959][T14288] vhci_hcd vhci_hcd.0: Device attached [ 629.027755][T14288] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(19) [ 629.027839][T14288] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 629.027990][T14288] vhci_hcd vhci_hcd.0: Device attached [ 629.050913][T14288] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 629.053441][T14288] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 629.056328][T14288] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 629.121496][T14296] vhci_hcd: connection closed [ 629.124851][T14294] vhci_hcd: connection closed [ 629.124889][T14292] vhci_hcd: connection closed [ 629.125902][T14290] vhci_hcd: connection closed [ 629.145354][ T1133] vhci_hcd vhci_hcd.0: stop threads [ 629.145373][ T1133] vhci_hcd vhci_hcd.0: release socket [ 629.145431][ T1133] vhci_hcd vhci_hcd.0: disconnect device [ 629.145590][ T1133] vhci_hcd vhci_hcd.0: stop threads [ 629.145605][ T1133] vhci_hcd vhci_hcd.0: release socket [ 629.145672][ T1133] vhci_hcd vhci_hcd.0: disconnect device [ 629.152576][ T1133] vhci_hcd vhci_hcd.0: stop threads [ 629.152597][ T1133] vhci_hcd vhci_hcd.0: release socket [ 629.152676][ T1133] vhci_hcd vhci_hcd.0: disconnect device [ 629.174247][ T1133] vhci_hcd vhci_hcd.0: stop threads [ 629.174275][ T1133] vhci_hcd vhci_hcd.0: release socket [ 629.174363][ T1133] vhci_hcd vhci_hcd.0: disconnect device [ 629.208219][ T1232] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 629.211218][ T1232] usb 33-1: enqueue for inactive port 0 [ 629.277049][ T1232] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 630.698463][T14319] netlink: 'syz.0.2640': attribute type 10 has an invalid length. [ 630.729154][T14319] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.749134][T14319] bond0: (slave team0): Enslaving as an active interface with an up link [ 633.530438][ T5963] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 633.682677][ T5963] usb 1-1: Using ep0 maxpacket: 32 [ 633.685342][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.685377][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.685418][ T5963] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 633.685443][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.776138][ T5963] usb 1-1: config 0 descriptor?? [ 634.797528][ T5963] hub 1-1:0.0: USB hub found [ 635.077885][ T5963] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 635.382949][ T5963] usbhid 1-1:0.0: can't add hid device: -71 [ 635.383076][ T5963] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 635.413585][ T5963] usb 1-1: USB disconnect, device number 33 [ 637.703650][T14348] Bluetooth: hci1: command 0x0406 tx timeout [ 640.587055][ T808] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 640.741908][ T808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.741941][ T808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 640.743423][ T808] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 640.743454][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 640.743477][ T808] usb 1-1: SerialNumber: syz [ 640.873415][T14404] netlink: 'syz.5.2667': attribute type 32 has an invalid length. [ 641.073825][ T808] usb 1-1: 0:2 : does not exist [ 641.253061][ T808] usb 1-1: USB disconnect, device number 34 [ 641.352409][T14391] udevd[14391]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.647010][T14449] ptrace attach of "./syz-executor exec"[6355] was attempted by ""[14449] [ 644.999267][T14463] macsec0: entered allmulticast mode [ 644.999290][T14463] veth1_macvtap: entered allmulticast mode [ 645.157235][ T5963] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 645.326720][ T5963] usb 1-1: Using ep0 maxpacket: 32 [ 645.329233][ T5963] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 645.329264][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.378201][ T5963] usb 1-1: config 0 descriptor?? [ 645.384702][ T5963] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 646.985377][T14509] FAULT_INJECTION: forcing a failure. [ 646.985377][T14509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.985419][T14509] CPU: 0 UID: 0 PID: 14509 Comm: syz.8.2702 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 646.985452][T14509] Tainted: [L]=SOFTLOCKUP [ 646.985462][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 646.985476][T14509] Call Trace: [ 646.985486][T14509] [ 646.985496][T14509] dump_stack_lvl+0xe8/0x150 [ 646.985534][T14509] should_fail_ex+0x46b/0x600 [ 646.985577][T14509] _copy_from_iter+0x1d3/0x1670 [ 646.985602][T14509] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 646.985632][T14509] ? __pfx_policy_nodemask+0x10/0x10 [ 646.985670][T14509] ? __pfx__copy_from_iter+0x10/0x10 [ 646.985700][T14509] ? set_page_refcounted+0xa0/0x1e0 [ 646.985736][T14509] ? page_copy_sane+0x4e/0x270 [ 646.985770][T14509] copy_page_from_iter+0xdd/0x170 [ 646.985800][T14509] tun_get_user+0x1d4b/0x3de0 [ 646.985826][T14509] ? tun_get_user+0x6ff/0x3de0 [ 646.985873][T14509] ? __pfx_tun_get_user+0x10/0x10 [ 646.985920][T14509] ? ref_tracker_alloc+0x332/0x4a0 [ 646.985948][T14509] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 646.985978][T14509] ? tun_get+0x1c/0x2f0 [ 646.986008][T14509] ? tun_get+0x1c/0x2f0 [ 646.986033][T14509] ? tun_get+0x1c/0x2f0 [ 646.986063][T14509] tun_chr_write_iter+0x119/0x200 [ 646.986092][T14509] vfs_write+0x629/0xba0 [ 646.986133][T14509] ? __pfx_vfs_write+0x10/0x10 [ 646.986175][T14509] ? __fget_files+0x2a/0x420 [ 646.986211][T14509] ksys_write+0x156/0x270 [ 646.986247][T14509] ? __pfx_ksys_write+0x10/0x10 [ 646.986291][T14509] do_syscall_64+0x14d/0xf80 [ 646.986330][T14509] ? trace_irq_disable+0x3b/0x150 [ 646.986355][T14509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.986379][T14509] ? clear_bhb_loop+0x40/0x90 [ 646.986408][T14509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.986432][T14509] RIP: 0033:0x7fb0e773cfce [ 646.986453][T14509] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 646.986472][T14509] RSP: 002b:00007fb0e59cdfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 646.986496][T14509] RAX: ffffffffffffffda RBX: 00007fb0e59ce6c0 RCX: 00007fb0e773cfce [ 646.986513][T14509] RDX: 000000000000005e RSI: 0000200000000440 RDI: 00000000000000c8 [ 646.986528][T14509] RBP: 00007fb0e59ce090 R08: 0000000000000000 R09: 0000000000000000 [ 646.986547][T14509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.986561][T14509] R13: 00007fb0e79f6038 R14: 00007fb0e79f5fa0 R15: 00007ffd625cdf88 [ 646.986596][T14509] [ 647.018345][T14457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.019172][T14457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.339068][ T5963] gspca_vc032x: reg_w err -71 [ 647.339087][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339099][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339110][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339120][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339131][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339142][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339152][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339162][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339173][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339182][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339192][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339201][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339212][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339222][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339232][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339243][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339253][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339263][ T5963] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.339274][ T5963] gspca_vc032x: Unknown sensor... [ 647.339356][ T5963] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 647.344495][ T5963] usb 1-1: USB disconnect, device number 35 [ 647.526414][T14507] sctp: [Deprecated]: syz.5.2703 (pid 14507) Use of int in max_burst socket option. [ 647.526414][T14507] Use struct sctp_assoc_value instead [ 647.645791][T14520] ptrace attach of "./syz-executor exec"[6362] was attempted by ""[14520] [ 647.687907][T14520] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2706'. [ 648.555904][T14551] macsec1: entered promiscuous mode [ 648.555929][T14551] macsec1: entered allmulticast mode [ 649.716231][T14572] netlink: 'syz.0.2719': attribute type 83 has an invalid length. [ 649.743692][T14572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.775701][T14572] loop8: detected capacity change from 0 to 8 [ 649.830380][T14458] Dev loop8: unable to read RDB block 8 [ 649.830446][T14458] loop8: unable to read partition table [ 649.830680][T14458] loop8: partition table beyond EOD, truncated [ 649.882162][T14572] Dev loop8: unable to read RDB block 8 [ 649.882212][T14572] loop8: unable to read partition table [ 649.882418][T14572] loop8: partition table beyond EOD, truncated [ 649.882453][T14572] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 651.796999][ T1231] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 651.923096][T14625] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2739'. [ 651.949711][ T1231] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 651.949745][ T1231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.975714][ T1231] usb 1-1: config 0 descriptor?? [ 651.989826][ T1231] cp210x 1-1:0.0: cp210x converter detected [ 652.027120][ C0] ------------[ cut here ]------------ [ 652.027136][ C0] 1 [ 652.027152][ C0] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#0: ktimers/0/16 [ 652.027196][ C0] Modules linked in: [ 652.027220][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 652.027252][ C0] Tainted: [L]=SOFTLOCKUP [ 652.027258][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 652.027269][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 652.027303][ C0] Code: 0f 94 c0 5b 41 5e e9 05 1d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 652.027324][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 652.027346][ C0] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801caa8000 [ 652.027365][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 652.027380][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 652.027395][ C0] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000000 [ 652.027417][ C0] R13: 00000001000088c0 R14: 1ffff9200002af4c R15: ffff88806251df38 [ 652.027429][ C0] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 652.027443][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 652.027469][ C0] CR2: 00007fb0e85256b8 CR3: 0000000040120000 CR4: 00000000003526f0 [ 652.027490][ C0] Call Trace: [ 652.027500][ C0] [ 652.027510][ C0] call_timer_fn+0x192/0x640 [ 652.027536][ C0] ? __pfx_stub_timer+0x10/0x10 [ 652.027555][ C0] ? call_timer_fn+0xd4/0x640 [ 652.027577][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 652.027599][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 652.027646][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 652.027681][ C0] ? __pfx_stub_timer+0x10/0x10 [ 652.027735][ C0] __run_timer_base+0x6a3/0x9f0 [ 652.027790][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 652.027831][ C0] ? rt_spin_lock+0x1e0/0x400 [ 652.027878][ C0] run_timer_softirq+0xb7/0x170 [ 652.027915][ C0] handle_softirqs+0x1de/0x6f0 [ 652.027960][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 652.027997][ C0] run_ktimerd+0x69/0x100 [ 652.028035][ C0] smpboot_thread_fn+0x541/0xa50 [ 652.028072][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 652.028114][ C0] kthread+0x388/0x470 [ 652.028150][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 652.028185][ C0] ? __pfx_kthread+0x10/0x10 [ 652.028213][ C0] ret_from_fork+0x51e/0xb90 [ 652.028250][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 652.028280][ C0] ? __switch_to+0xc7d/0x1450 [ 652.028320][ C0] ? __pfx_kthread+0x10/0x10 [ 652.028349][ C0] ret_from_fork_asm+0x1a/0x30 [ 652.028392][ C0] [ 652.028413][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 652.028436][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 652.028459][ C0] Tainted: [L]=SOFTLOCKUP [ 652.028465][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 652.028489][ C0] Call Trace: [ 652.028500][ C0] [ 652.028510][ C0] vpanic+0x56c/0xa60 [ 652.028549][ C0] ? __pfx__printk+0x10/0x10 [ 652.028574][ C0] ? __pfx_vpanic+0x10/0x10 [ 652.028613][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 652.028641][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 652.028700][ C0] panic+0xc5/0xd0 [ 652.028735][ C0] ? __pfx_panic+0x10/0x10 [ 652.028790][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 652.028811][ C0] __warn+0x315/0x4f0 [ 652.028853][ C0] ? stub_timer+0xa/0x20 [ 652.028876][ C0] ? stub_timer+0xa/0x20 [ 652.028900][ C0] __report_bug+0x29a/0x540 [ 652.028939][ C0] ? stub_timer+0xa/0x20 [ 652.028964][ C0] ? __pfx___report_bug+0x10/0x10 [ 652.028985][ C0] ? add_lock_to_list+0xc7/0x100 [ 652.029024][ C0] ? lockdep_unlock+0x5d/0xd0 [ 652.029057][ C0] ? __lock_acquire+0x146e/0x2cf0 [ 652.029086][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 652.029111][ C0] ? stub_timer+0xa/0x20 [ 652.029131][ C0] report_bug+0x16a/0x220 [ 652.029160][ C0] ? stub_timer+0xa/0x20 [ 652.029173][ C0] ? stub_timer+0xc/0x20 [ 652.029203][ C0] handle_bug+0x98/0x200 [ 652.029242][ C0] exc_invalid_op+0x1a/0x50 [ 652.029278][ C0] asm_exc_invalid_op+0x1a/0x20 [ 652.029300][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 652.029323][ C0] Code: 0f 94 c0 5b 41 5e e9 05 1d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 652.029338][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 652.029353][ C0] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801caa8000 [ 652.029385][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 652.029400][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 652.029416][ C0] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000000 [ 652.029433][ C0] R13: 00000001000088c0 R14: 1ffff9200002af4c R15: ffff88806251df38 [ 652.029456][ C0] ? __pfx_stub_timer+0x10/0x10 [ 652.029478][ C0] ? stub_timer+0x9/0x20 [ 652.029504][ C0] ? stub_timer+0x9/0x20 [ 652.029517][ C0] call_timer_fn+0x192/0x640 [ 652.029550][ C0] ? __pfx_stub_timer+0x10/0x10 [ 652.029570][ C0] ? call_timer_fn+0xd4/0x640 [ 652.029593][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 652.029614][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 652.029661][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 652.029684][ C0] ? __pfx_stub_timer+0x10/0x10 [ 652.029701][ C0] __run_timer_base+0x6a3/0x9f0 [ 652.029772][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 652.029804][ C0] ? rt_spin_lock+0x1e0/0x400 [ 652.029847][ C0] run_timer_softirq+0xb7/0x170 [ 652.029874][ C0] handle_softirqs+0x1de/0x6f0 [ 652.029932][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 652.029968][ C0] run_ktimerd+0x69/0x100 [ 652.030005][ C0] smpboot_thread_fn+0x541/0xa50 [ 652.030038][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 652.030093][ C0] kthread+0x388/0x470 [ 652.030120][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 652.030153][ C0] ? __pfx_kthread+0x10/0x10 [ 652.030185][ C0] ret_from_fork+0x51e/0xb90 [ 652.030211][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 652.030251][ C0] ? __switch_to+0xc7d/0x1450 [ 652.030287][ C0] ? __pfx_kthread+0x10/0x10 [ 652.030313][ C0] ret_from_fork_asm+0x1a/0x30 [ 652.030359][ C0] [ 652.030968][ C0] Kernel Offset: disabled