last executing test programs: 11.669007207s ago: executing program 0 (id=1105): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.118805815s ago: executing program 0 (id=1107): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = getpid() r2 = syz_clone3(&(0x7f000000a8c0)={0x120040200, &(0x7f0000000380)=0xffffffffffffffff, &(0x7f000000a6c0), &(0x7f000000a700), {0x14}, &(0x7f000000a740)=""/117, 0x75, &(0x7f000000a7c0)=""/170, &(0x7f000000a880)=[r1, r1], 0x2, {r0}}, 0x58) fcntl$getown(r3, 0x9) sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000009f80)=[{&(0x7f0000000240)="c495", 0x2}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x20, 0xccad6aa4445d80af}, 0x4a8d1) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="170000"], 0x48) r4 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r4, 0x82000000) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r4, 0x40044103, &(0x7f0000000040)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000000000)={0x0, "e60b420128cbdcc057e94b37cf4c56303f2315a69452daf1b2d55300", 0x6, 0x1, 0x8, 0x8, 0x4, 0x1, 0x92, 0xfffffffe}) recvmmsg(r0, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000000140)=""/84, 0x54}, {&(0x7f00000001c0)=""/125, 0x7d}], 0x4}, 0x4}, {{&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000500)=""/101, 0x65}, {&(0x7f0000000580)=""/129, 0x81}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000000640)=""/230, 0xe6}, {&(0x7f0000000740)=""/140, 0x8c}], 0x6, &(0x7f0000000880)=""/188, 0xbc}, 0x5117}, {{&(0x7f0000000940)=@isdn, 0x80, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/15, 0xf}], 0x1, &(0x7f0000000a00)=""/46, 0x2e}, 0x8}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/27, 0x1b}], 0x1, &(0x7f0000000ac0)=""/209, 0xd1}, 0x2}, {{&(0x7f0000000bc0)=@can, 0x80, &(0x7f0000001100)=[{&(0x7f0000000c40)=""/214, 0xd6}, {&(0x7f0000000e80)=""/194, 0xc2}, {&(0x7f0000000d40)=""/70, 0x46}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000000f80)=""/71, 0x47}, {&(0x7f0000001000)=""/227, 0xe3}], 0x6, &(0x7f0000001180)=""/206, 0xce}, 0x43}, {{&(0x7f0000001280)=@nfc, 0x80, &(0x7f0000005500)=[{&(0x7f0000001300)=""/211, 0xd3}, {&(0x7f0000005440)=""/141, 0x8d}, {&(0x7f0000000dc0)=""/42, 0x2a}], 0x3, &(0x7f0000005540)=""/16, 0x10}, 0x9f9}, {{&(0x7f0000005580)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000006980)=[{&(0x7f0000005600)=""/84, 0x54}, {&(0x7f0000005680)=""/4096, 0x1000}, {&(0x7f0000006680)=""/75, 0x4b}, {&(0x7f0000006700)=""/248, 0xf8}, {&(0x7f0000006800)=""/134, 0x86}, {&(0x7f00000068c0)=""/134, 0x86}], 0x6, &(0x7f0000006a00)=""/53, 0x35}, 0x3}, {{&(0x7f0000006a40)=@isdn, 0x80, &(0x7f0000006d40)=[{&(0x7f0000006ac0)=""/17, 0x11}, {&(0x7f0000006b00)=""/60, 0x3c}, {&(0x7f0000006b40)=""/236, 0xec}, {&(0x7f0000006c40)=""/9, 0x9}, {&(0x7f0000006c80)=""/79, 0x4f}, {&(0x7f0000006d00)=""/13, 0xd}], 0x6, &(0x7f0000006dc0)=""/4096, 0x1000}, 0xd}, {{&(0x7f0000007dc0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000007e40)=""/4096, 0x1000}, {&(0x7f0000008e40)=""/4096, 0x1000}, {&(0x7f0000009e40)=""/22, 0x16}, {&(0x7f0000009e80)=""/200, 0xc8}, {&(0x7f0000009f80)}, {&(0x7f0000009fc0)=""/205, 0xcd}, {&(0x7f000000a0c0)=""/116, 0x74}], 0x7}, 0x800}, {{&(0x7f000000a1c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f000000a380)=[{&(0x7f000000a240)=""/39, 0x27}, {&(0x7f000000a280)=""/70, 0x46}, {&(0x7f000000a300)=""/96, 0x60}], 0x3, &(0x7f000000a3c0)=""/118, 0x76}}], 0xa, 0x40002120, 0x0) 9.64149395s ago: executing program 0 (id=1115): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001600210927bd7000000000000a3f"], 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004094) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="07000000040000000001000001", @ANYBLOB], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000040000000000000040000000c00018008000100", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) r3 = getpid() r4 = fsopen(&(0x7f00000006c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='#! ', &(0x7f0000000240)='\'!$[)\x00', 0x0) sched_getattr(r3, &(0x7f0000000100)={0x38}, 0x38, 0x0) 9.444984866s ago: executing program 0 (id=1117): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = syz_open_dev$video(&(0x7f0000000180), 0x7, 0x100442) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket(0xa, 0x5, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={r8, 0x42}, &(0x7f0000000040)=0x8) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000001c0)={0xf0200e7, 0x40, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @value=0xfffffffb}}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) sendto$inet(r9, 0x0, 0x0, 0x4004001, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x4000010, r0, 0x4aa62000) fchdir(r1) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r10, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 6.108934969s ago: executing program 4 (id=1131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x463af000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000080000000f"], 0x50) close(0x3) ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, 0xfffffffffffffffd) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000640), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x4000000006, 0x4, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x3, 0xa, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @empty}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c60133", 0x7}, {&(0x7f0000000180)="9e91d91a92dc7c8fff5c8bb539e2ffb332c99223a7dfe50900000000000000fd2a", 0x21}], 0x2}, 0x20008b88) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000040000000100000000110000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c64baf515071916c8bfbd6d9cd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.866775178s ago: executing program 4 (id=1134): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000200)="b9ff03076003008cb89e0ff086dde9fa7c830ccb54ae85f9f9f9c560733bf0f171a636c4ca185794d90cf8122fa241870e2ec5e619a1", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYRES32=r3], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x29, 0x2, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x40, 0x1010, r4, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r4, 0x8080583a, &(0x7f0000000000)={0x3, 0x26d, 0x89, 0x5, 0x800, 0x0, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 4.626334697s ago: executing program 0 (id=1139): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r1 = socket$caif_stream(0x25, 0x1, 0x3) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r1], 0x232) syz_open_dev$mouse(0x0, 0x0, 0x2042) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000004010000f8ffffffb702000008000000b70300000000002885000000cb00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x2c, &(0x7f00000001c0)=""/152, 0x41000, 0x5a}, 0x23) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, 0x0, 0x0) bind$can_raw(r3, &(0x7f0000000480), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) close(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0x0, 0xd6, "e2132ee5208c0d05eb8ed8269f43ff9fcd35abaadac2687f0cd6f2f66964891a5dd429920fb6213a9c89997f4d153db5ac21c78d1bcd3eb370e26ffcb57593411fd86554d4ddbfc829c78333979078550d78969315f7bb2d878785ad28e597fdd7bb4fd8ff2e49e735d10918752a8b7a398868b4ba229cfca5f94b2353e5673b4ebd0d20979d738e350545dc48490e88e24e507a36943343c8b9e36180ec33ca3a000000000000000069b8153b24b288602ca49820d908db096457ee3b9ab251257d8532c5d34f0f1c4b8ec22c7b34c524a69d811e7d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000003c0)={0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="2011010000ff180b6031f37b1ac985a800dbd4d9e6577cb7b21964d9764fa8ec393aa7e8b20fc44f2f2d2f8d25346d7db232cd50ffd4727d172ee7e484ceb03d638fee279bdb6574ea08e6cd9276da3cbec623b027abbb34237f6623a7782e373af22d21776e4abc74af3b36779b1c6d6ae747d4f48e3472a091cc350bf98feec071ed231c4cb4b7a0fcbd1819613ff798d9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000001200)=ANY=[@ANYBLOB="001367"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000980)={0x0, &(0x7f0000000940)=""/44}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="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"/948, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0], 0x3c3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) 3.701213218s ago: executing program 2 (id=1144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000006}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="91103c000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 3.406633491s ago: executing program 4 (id=1149): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, 0x0, 0x51b0b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b0500000000004c0012800b00010069703667726500003c0002800800", @ANYRES32=r2], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f0000000a40)="06", 0x1, 0x40015, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0xf9, 0x6, @local}, 0x14) (fail_nth: 2) 3.324902334s ago: executing program 2 (id=1150): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="3078303030303030303030303030303030373a3078303030303030303030303030303030383a3078303030303030303030303030303430313a307830303030303030303030303030302c7433a02cac39642c3030303030303030303030643a3078303030303030303030303030303030383a30783030303030303030303030303a3078303030303030303030303030303766662f303030303030303030303030303030303030303520544950437632000000000000"], 0xb5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x38}}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r2, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRES16=0x0, @ANYRES8=r1, @ANYRESOCT=r2, @ANYRES64=r0, @ANYRESHEX=r2, @ANYRES8=r2], 0x10) write$9p(r2, &(0x7f0000000100)="d5", 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe8000000000000000000000000000aab0000280090001800c00"], 0xec}}, 0x0) 3.136929719s ago: executing program 4 (id=1152): r0 = socket$kcm(0x10, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$evdev(0x0, 0xf, 0x200040) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) (async) recvmsg(r2, &(0x7f0000000480)={&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000bc0)=""/140, 0x8c}, 0x40000002) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100000001}}, './file0\x00'}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2}) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009201100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.939855567s ago: executing program 2 (id=1154): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = getpgrp(0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r1, &(0x7f0000000200)=[{0x0, 0xea}, {&(0x7f0000002500)="91", 0x1}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000140000001c0007800c0003"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000580)=ANY=[@ANYBLOB="2d10655cb0379c3f31a902a699a0fe2b93cf5a3e5ccc7a6a07", @ANYRES16=r5, @ANYRES64, @ANYRES32=r6, @ANYBLOB="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"], 0x138}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a0409020000002dbd7000fbdbd7259a0c106c5bb8355e350855c77932609e056e0262404bbc756efae71bb5c81f225d4449ed7c76c666a2f8025b0b797aac828ecc6b30d53e412d8b48daeb0b91"], 0x4e}}, 0x4040090) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pidfd_send_signal(0xffffffffffffffff, 0x8, 0x0, 0xf8) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000005ff070000000000000300000d"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0xa, 0x32e}, 0x28) 2.528773308s ago: executing program 3 (id=1157): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {0x7, 0x8}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000805}, 0x40004) (fail_nth: 2) 2.477730225s ago: executing program 3 (id=1158): setuid(0x0) (fail_nth: 2) 2.376493519s ago: executing program 3 (id=1159): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008890) listen(r1, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f00000000c0)=""/206, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c044) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x2}}, @TCA_FW_MASK={0x8, 0x5, 0xb08}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = fsopen(&(0x7f0000000000)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x86) futex(&(0x7f0000004000)=0x2, 0x8d, 0x2, 0x0, 0x0, 0x82) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @remote}}, [0x7f, 0x0, 0x2f, 0x5, 0x9, 0xfffffffffffffff8, 0x4, 0x6, 0x5, 0x19, 0x800, 0x9, 0xffff, 0x623, 0x1eb2]}, &(0x7f0000000180)=0x100) 2.212612577s ago: executing program 4 (id=1160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x38, 0x0, 0x0) 1.895674046s ago: executing program 3 (id=1162): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x44}) r0 = socket$inet6(0xa, 0x802, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x6, 0x31, 0x5, 0x9, 0x5, 0x42, 0x1, 0x7, 0x3, 0x4, 0x7, 0x3, 0x8}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r4, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x1e61, 0x9296, 0x1, 0x0, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r5, 0x9}, 0x8) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000000)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.891844858s ago: executing program 2 (id=1163): write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x3f}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xb4}, 0x2) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) fsetxattr$smack_xattr_label(r1, &(0x7f00000000c0)='security.SMACK64\x00', &(0x7f0000000100)={']^-\x1c\',{-'}, 0x9, 0x1) write$proc_mixer(r0, &(0x7f0000000140)=[{'DIGITAL1', @void}, {'LINE1', @void}, {'CD', @void}], 0x12) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000180), 0x2) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)={0x800, {{0x2, 0x4e24, @empty}}, 0x0, 0x1, [{{0x2, 0x4e24, @local}}]}, 0x110) r2 = io_uring_setup(0x72fb, &(0x7f0000000300)={0x0, 0xf0bb, 0x200, 0x3, 0x2a0, 0x0, r1}) r3 = syz_io_uring_setup(0x5651, &(0x7f0000000380)={0x0, 0xa9c3, 0x200, 0x3, 0x275, 0x0, r2}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, &(0x7f0000000480)={0x100000001, 0x57}) io_uring_enter(r0, 0xe4d, 0x7cb5, 0x80, &(0x7f00000004c0)={[0x5]}, 0x8) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x50200, 0x0) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f0000000540)) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000580)={0xff7, 0x100000000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f000001a680)={&(0x7f000001a600)="24a75bde20e5f46a4c60fd839bf17e39df1e496c2f08614839475759c18cede5d8a98214840498103b200377a8bde53a5f5679e265419b1f84cf055d6508ad1a36a1bf2897940f9e533de14c902604d1d3c47afd10dd381450f4583a40832a304ce1cf7be9c4c9a0e0148ab5c9a59bddef16bd60119ed54e", 0x78, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f000001a700)={r7, 0x0, &(0x7f000001a6c0)}) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f000001a740), &(0x7f000001a780)=0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f000001a7c0)={0x0, 'vcan0\x00', {}, 0xfffe}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f000001a800)) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f000001a840)={0x4, 0x2, 0x3}, 0x18, 0x2) landlock_restrict_self(r8, 0x0) landlock_restrict_self(r8, 0x0) syz_emit_vhci(&(0x7f000001a880)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0xff01}}}}, 0xf) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f000001abc0)=@IORING_OP_SENDMSG={0x9, 0x60, 0x0, r1, 0x0, &(0x7f000001ab80)={&(0x7f000001a8c0)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x40, "b6d49a72ac7801ab38d62c034d79b9d0480e0a6f4734566cca8e54feb1f84b6741502a7d65464e796c1ea941db0ca59dace5ce75c032630ab23e9ed3b3b1bf", 0x20}, 0x80, &(0x7f000001ab40)=[{&(0x7f000001a940)="dced9a277f509c1cd9229bb7c02b5c5e72436c7a740cd3c850da0b835b38e07919624f222818f0478c69a56faa4988a96b841d1a9e48e4033037ee466c422d0907bfacb663101fda425fd2efc6d1dae8e24b22cc30564918c55df1", 0x5b}, {&(0x7f000001a9c0)="919e0e49d238ec53c2ee551251d065d46091f5e4cc1bc2eae7d56346bdd5dd4867ec83b63e18b69a8bf092f8ab14f7583538d11997406edb706e48d3cb60214ab28049dbb708d6edd185f6250bb301a5fb85c30620444daa33ee00c478669068a39993a6f848adf1f59eea5535e7e6982da6e5b3ba54efccde0fcdac3d0486002f1326498c5a05958d0bcaf66c524b40e3233eebe9ddb2fcd926b001b68e3aff1f6e4e9d7689a6d0241a6a466cf3ac67f7d0bbee8c707618b2f65f1c7c712e4039a91c60d336f56adca96787a3ba6df5a5301761", 0xd4}, {&(0x7f000001aac0)="78726e255cd17257266e25d0b6c6f4b8bf4b5d5b9edf7a7ba59d9e3f7be291038cc18752c21fb206e4716db77dc64d9d5409ffa89291eb1ffa410d52245f6a960a124dd776634ade362b4bf2d433d5a86fe4570cefb179b6f29d", 0x5a}], 0x3}, 0x0, 0x40010, 0x0, {0x0, r9}}) ioctl$F2FS_IOC_GET_FEATURES(r8, 0x8004f50c, &(0x7f000001ac00)) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f000001ae00)={&(0x7f000001ac40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f000001adc0)={&(0x7f000001ac80)={0x104, 0x17, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xdc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x1) 1.816704152s ago: executing program 1 (id=1164): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="3078303030303030303030303030303030373a3078303030303030303030303030303030383a3078303030303030303030303030303430313a307830303030303030303030303030302c7433a02cac39642c3030303030303030303030643a3078303030303030303030303030303030383a30783030303030303030303030303a3078303030303030303030303030303766662f303030303030303030303030303030303030303520544950437632000000000000"], 0xb5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x38}}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r2, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRES16=0x0, @ANYRES8=r1, @ANYRESOCT=r2, @ANYRES64=r0, @ANYRESHEX=r2, @ANYRES8=r2], 0x10) write$9p(r2, &(0x7f0000000100)="d5", 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe8000000000000000000000000000aab0000280090001800c00"], 0xec}}, 0x0) 1.764474594s ago: executing program 2 (id=1165): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x3) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000200)={[{0x400, 0x0, 0x5, 0x9, 0x3, 0x5, 0x2, 0x4, 0x7, 0x9, 0x0, 0x80, 0x6}, {0x7fff, 0x6, 0xaa, 0x9, 0x4, 0x5, 0xdb, 0x4, 0x5, 0x8c, 0x1}, {0x2, 0x1a1c, 0x7, 0x0, 0x3, 0x1, 0x3, 0x5, 0x5, 0x7, 0x7, 0x0, 0x5ab}], 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000580)=0xfc) sendto$inet(r3, &(0x7f0000000080)="3ef363f11f9bb8", 0x7, 0xc010, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000000)={0x7, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}]}) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x4000, 0x1}) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r5, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480d4) syz_usb_connect(0x3, 0x2d, &(0x7f0000002380)={{0x12, 0x1, 0x300, 0xc8, 0x5b, 0x56, 0x40, 0xeb1a, 0xe323, 0x9e3c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf, 0xff, 0x20, 0x3, "", [{{0x9, 0x4, 0x2f, 0x9, 0x1, 0xf8, 0x73, 0x7d, 0x8, [], [{{0x9, 0x5, 0x90a8fbadf7f2b89f, 0x10, 0x8, 0x8, 0x1, 0x78}}]}}]}}]}}, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x902, 0x0) ioctl$PTP_PIN_SETFUNC(r7, 0x40603d07, 0x0) 1.764159151s ago: executing program 1 (id=1166): syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) 1.67831763s ago: executing program 1 (id=1167): r0 = semget(0x1, 0x4, 0x69c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) semop(r0, &(0x7f00000000c0)=[{0x0, 0x400, 0x1000}, {0x0, 0xbbdd, 0x1000}], 0x2) (async) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a700000000000905", @ANYRES32], 0x0) 1.516726125s ago: executing program 1 (id=1168): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x89, 0x6, @link_local}, 0x14) (fail_nth: 2) 1.247155007s ago: executing program 3 (id=1169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x463af000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000080000000f"], 0x50) close(0x3) ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, 0xfffffffffffffffd) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x4000000006, 0x4, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x3, 0xa, 0x0, 0xf, 0x80000006}, 0x0, 0x0) memfd_secret(0x80000) 1.179124735s ago: executing program 4 (id=1170): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="85d4c5bc930e2713c0f018ae7818326704858313eedc59dafc7ce0abfc44f42296585f0c847909ad3949b6fb06000000f4f8360dae47c74f46692048f86062f1f0164b197ebbd9927510f5e19b2fdb29d17b4ac3f2d894ae4e4b55c26658c53ae252c74a79957f96c3da463cf24a018d1d8209e775f1b062e96a"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="080e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "020a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="001602"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x20, 0xd, 0x1, "db"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.122582446s ago: executing program 0 (id=1171): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4054) fstat(0xffffffffffffffff, &(0x7f0000000380)) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x800000, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) capset(0x0, &(0x7f0000000300)={0x200002, 0x200003, 0x801, 0x4, 0x7}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x87, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) 1.122268136s ago: executing program 1 (id=1172): fanotify_init(0x1, 0x400) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 957.17658ms ago: executing program 1 (id=1173): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x1) (async) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) pread64(r1, 0x0, 0x0, 0x8) (async) write$ppp(r1, &(0x7f0000000200)="bc72", 0x2) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 886.00066ms ago: executing program 2 (id=1174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = msgget$private(0x0, 0x193) msgsnd(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2a, 0x0, &(0x7f0000000100)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904fcee14db4241544716b9e9b2231e6", 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100d}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0xc0000) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) msgsnd(r4, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x3f9, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r6 = msgget$private(0x0, 0x18) msgrcv(r6, &(0x7f00000002c0), 0x8, 0x1, 0x800) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1400000016000b43d27a", 0xa}], 0x1, 0x0, 0x0, 0x600}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="549c000000", @ANYRES16=0x0, @ANYBLOB="110127bd7000fddbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000d5000b000900000006001600faff00000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) 0s ago: executing program 3 (id=1175): write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x3f}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xb4}, 0x2) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) fsetxattr$smack_xattr_label(r1, &(0x7f00000000c0)='security.SMACK64\x00', &(0x7f0000000100)={']^-\x1c\',{-'}, 0x9, 0x1) write$proc_mixer(r0, &(0x7f0000000140)=[{'DIGITAL1', @void}, {'LINE1', @void}, {'CD', @void}], 0x12) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000180), 0x2) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)={0x800, {{0x2, 0x4e24, @empty}}, 0x0, 0x1, [{{0x2, 0x4e24, @local}}]}, 0x110) r2 = io_uring_setup(0x72fb, &(0x7f0000000300)={0x0, 0xf0bb, 0x200, 0x3, 0x2a0, 0x0, r1}) r3 = syz_io_uring_setup(0x5651, &(0x7f0000000380)={0x0, 0xa9c3, 0x200, 0x3, 0x275, 0x0, r2}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, &(0x7f0000000480)={0x100000001, 0x57}) io_uring_enter(r0, 0xe4d, 0x7cb5, 0x80, &(0x7f00000004c0)={[0x5]}, 0x8) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x50200, 0x0) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f0000000540)) recvmmsg(r1, &(0x7f000001a4c0)=[{{&(0x7f00000184c0)=@hci, 0x80, &(0x7f0000019640)=[{&(0x7f0000018540)=""/4096, 0x1000}, {&(0x7f0000019540)=""/222, 0xde}], 0x2, &(0x7f0000019680)=""/101, 0x65}, 0x5b4}, {{&(0x7f0000019700)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000019bc0)=[{&(0x7f0000019780)=""/224, 0xe0}, {&(0x7f0000019880)=""/2, 0x2}, {&(0x7f00000198c0)=""/35, 0x23}, {&(0x7f0000019900)=""/39, 0x27}, {&(0x7f0000019940)=""/38, 0x26}, {&(0x7f0000019980)=""/155, 0x9b}, {&(0x7f0000019a40)=""/128, 0x80}, {&(0x7f0000019ac0)=""/205, 0xcd}], 0x8}, 0x7fff}, {{&(0x7f0000019c40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f000001a100)=[{&(0x7f0000019cc0)=""/183, 0xb7}, {&(0x7f0000019d80)=""/133, 0x85}, {&(0x7f0000019e40)=""/179, 0xb3}, {&(0x7f0000019f00)=""/198, 0xc6}, {&(0x7f000001a000)=""/7, 0x7}, {&(0x7f000001a040)=""/35, 0x23}, {&(0x7f000001a080)=""/109, 0x6d}], 0x7, &(0x7f000001a180)=""/12, 0xc}, 0x81}, {{&(0x7f000001a1c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f000001a3c0)=[{&(0x7f000001a240)=""/208, 0xd0}, {&(0x7f000001a340)=""/128, 0x80}], 0x2, &(0x7f000001a400)=""/164, 0xa4}, 0xb9}], 0x4, 0x2002, &(0x7f000001a5c0)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f000001a680)={&(0x7f000001a600)="24a75bde20e5f46a4c60fd839bf17e39df1e496c2f08614839475759c18cede5d8a98214840498103b200377a8bde53a5f5679e265419b1f84cf055d6508ad1a36a1bf2897940f9e533de14c902604d1d3c47afd10dd381450f4583a40832a304ce1cf7be9c4c9a0e0148ab5c9a59bddef16bd60119ed54e", 0x78, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f000001a700)={r7, 0x0, &(0x7f000001a6c0)}) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f000001a740), &(0x7f000001a780)=0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f000001a7c0)={0x0, 'vcan0\x00', {}, 0xfffe}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f000001a800)) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f000001a840)={0x4, 0x2, 0x3}, 0x18, 0x2) landlock_restrict_self(r8, 0x0) landlock_restrict_self(r8, 0x0) syz_emit_vhci(&(0x7f000001a880)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0xff01}}}}, 0xf) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f000001abc0)=@IORING_OP_SENDMSG={0x9, 0x60, 0x0, r1, 0x0, &(0x7f000001ab80)={&(0x7f000001a8c0)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x40, "b6d49a72ac7801ab38d62c034d79b9d0480e0a6f4734566cca8e54feb1f84b6741502a7d65464e796c1ea941db0ca59dace5ce75c032630ab23e9ed3b3b1bf", 0x20}, 0x80, &(0x7f000001ab40)=[{&(0x7f000001a940)="dced9a277f509c1cd9229bb7c02b5c5e72436c7a740cd3c850da0b835b38e07919624f222818f0478c69a56faa4988a96b841d1a9e48e4033037ee466c422d0907bfacb663101fda425fd2efc6d1dae8e24b22cc30564918c55df1", 0x5b}, {&(0x7f000001a9c0)="919e0e49d238ec53c2ee551251d065d46091f5e4cc1bc2eae7d56346bdd5dd4867ec83b63e18b69a8bf092f8ab14f7583538d11997406edb706e48d3cb60214ab28049dbb708d6edd185f6250bb301a5fb85c30620444daa33ee00c478669068a39993a6f848adf1f59eea5535e7e6982da6e5b3ba54efccde0fcdac3d0486002f1326498c5a05958d0bcaf66c524b40e3233eebe9ddb2fcd926b001b68e3aff1f6e4e9d7689a6d0241a6a466cf3ac67f7d0bbee8c707618b2f65f1c7c712e4039a91c60d336f56adca96787a3ba6df5a5301761", 0xd4}, {&(0x7f000001aac0)="78726e255cd17257266e25d0b6c6f4b8bf4b5d5b9edf7a7ba59d9e3f7be291038cc18752c21fb206e4716db77dc64d9d5409ffa89291eb1ffa410d52245f6a960a124dd776634ade362b4bf2d433d5a86fe4570cefb179b6f29d", 0x5a}], 0x3}, 0x0, 0x40010, 0x0, {0x0, r9}}) ioctl$F2FS_IOC_GET_FEATURES(r8, 0x8004f50c, &(0x7f000001ac00)) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f000001ae00)={&(0x7f000001ac40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f000001adc0)={&(0x7f000001ac80)={0x104, 0x17, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xdc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x1) kernel console output (not intermixed with test programs): 64.027323][ T7066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.027343][ T7066] ? clear_bhb_loop+0x40/0x90 [ 164.027366][ T7066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.027385][ T7066] RIP: 0033:0x7fd39a95c799 [ 164.027404][ T7066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.027420][ T7066] RSP: 002b:00007fd398bae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.027492][ T7066] RAX: ffffffffffffffda RBX: 00007fd39abd5fa0 RCX: 00007fd39a95c799 [ 164.027505][ T7066] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000004 [ 164.027516][ T7066] RBP: 00007fd398bae090 R08: 0000000000000000 R09: 0000000000000000 [ 164.027528][ T7066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.027539][ T7066] R13: 00007fd39abd6038 R14: 00007fd39abd5fa0 R15: 00007ffe5c9498e8 [ 164.027568][ T7066] [ 164.344911][ T1836] usb 3-1: string descriptor 0 read error: -71 [ 164.345559][ T1836] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 164.345632][ T1836] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 164.345650][ T1836] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 164.345707][ T1836] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 164.391091][ T1836] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 164.432993][ T1836] usb 3-1: USB disconnect, device number 3 [ 164.651007][ C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 165.229805][ T7087] loop2: detected capacity change from 0 to 7 [ 165.358741][ T7087] Dev loop2: unable to read RDB block 7 [ 165.358791][ T7087] loop2: AHDI p1 p2 p3 [ 165.358823][ T7087] loop2: partition table partially beyond EOD, truncated [ 165.400649][ T7087] loop2: p1 start 1601398130 is beyond EOD, truncated [ 165.400678][ T7087] loop2: p2 start 1702059890 is beyond EOD, truncated [ 167.461982][ T7116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.403'. [ 167.479765][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.492125][ T5932] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 167.537844][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.586505][ T7118] FAULT_INJECTION: forcing a failure. [ 167.586505][ T7118] name failslab, interval 1, probability 0, space 0, times 0 [ 167.586531][ T7118] CPU: 0 UID: 0 PID: 7118 Comm: syz.1.405 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 167.586547][ T7118] Tainted: [L]=SOFTLOCKUP [ 167.586551][ T7118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 167.586558][ T7118] Call Trace: [ 167.586562][ T7118] [ 167.586567][ T7118] dump_stack_lvl+0xe8/0x150 [ 167.586588][ T7118] should_fail_ex+0x46b/0x600 [ 167.586605][ T7118] should_failslab+0xa8/0x100 [ 167.586617][ T7118] __kmalloc_noprof+0xdf/0x7b0 [ 167.586634][ T7118] ? tomoyo_encode+0x28b/0x550 [ 167.586648][ T7118] tomoyo_encode+0x28b/0x550 [ 167.586663][ T7118] tomoyo_realpath_from_path+0x58d/0x5d0 [ 167.586680][ T7118] ? tomoyo_path_number_perm+0x219/0x630 [ 167.586696][ T7118] tomoyo_path_number_perm+0x246/0x630 [ 167.586713][ T7118] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 167.586730][ T7118] ? __lock_acquire+0x6b5/0x2cf0 [ 167.586757][ T7118] ? __fget_files+0x2a/0x420 [ 167.586772][ T7118] ? __fget_files+0x2a/0x420 [ 167.586783][ T7118] ? __fget_files+0x3a6/0x420 [ 167.586799][ T7118] ? __fget_files+0x2a/0x420 [ 167.586824][ T7118] security_file_ioctl+0xc3/0x2a0 [ 167.586854][ T7118] __se_sys_ioctl+0x47/0x170 [ 167.586885][ T7118] do_syscall_64+0x14d/0xf80 [ 167.586912][ T7118] ? trace_irq_disable+0x3b/0x150 [ 167.586925][ T7118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.586937][ T7118] ? clear_bhb_loop+0x40/0x90 [ 167.586950][ T7118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.586960][ T7118] RIP: 0033:0x7fc21d06c799 [ 167.586972][ T7118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.586981][ T7118] RSP: 002b:00007fc21b2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.586993][ T7118] RAX: ffffffffffffffda RBX: 00007fc21d2e5fa0 RCX: 00007fc21d06c799 [ 167.587001][ T7118] RDX: 0000000000000000 RSI: 0000000040046208 RDI: 0000000000000005 [ 167.587007][ T7118] RBP: 00007fc21b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 167.587014][ T7118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.587020][ T7118] R13: 00007fc21d2e6038 R14: 00007fc21d2e5fa0 R15: 00007ffc207a4548 [ 167.587044][ T7118] [ 167.587056][ T7118] ERROR: Out of memory at tomoyo_realpath_from_path. [ 167.635958][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 167.639714][ T5932] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 190, changing to 7 [ 167.644626][ T5932] usb 4-1: string descriptor 0 read error: -22 [ 167.644765][ T5932] usb 4-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.40 [ 167.644789][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.746409][ T5932] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 167.790708][ T5932] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 169.089593][ T5932] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 169.169159][ T5932] usb 4-1: USB disconnect, device number 11 [ 169.243832][ T7138] FAULT_INJECTION: forcing a failure. [ 169.243832][ T7138] name failslab, interval 1, probability 0, space 0, times 0 [ 169.243870][ T7138] CPU: 0 UID: 0 PID: 7138 Comm: syz.1.411 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 169.243917][ T7138] Tainted: [L]=SOFTLOCKUP [ 169.243930][ T7138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 169.243950][ T7138] Call Trace: [ 169.243959][ T7138] [ 169.243967][ T7138] dump_stack_lvl+0xe8/0x150 [ 169.243997][ T7138] should_fail_ex+0x46b/0x600 [ 169.244027][ T7138] should_failslab+0xa8/0x100 [ 169.244048][ T7138] __kmalloc_noprof+0xdf/0x7b0 [ 169.244077][ T7138] ? tomoyo_encode+0x28b/0x550 [ 169.244104][ T7138] tomoyo_encode+0x28b/0x550 [ 169.244171][ T7138] tomoyo_realpath_from_path+0x58d/0x5d0 [ 169.244204][ T7138] ? tomoyo_path_number_perm+0x219/0x630 [ 169.244234][ T7138] tomoyo_path_number_perm+0x246/0x630 [ 169.244265][ T7138] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 169.244298][ T7138] ? __lock_acquire+0x6b5/0x2cf0 [ 169.244351][ T7138] ? __fget_files+0x2a/0x420 [ 169.244378][ T7138] ? __fget_files+0x2a/0x420 [ 169.244398][ T7138] ? __fget_files+0x3a6/0x420 [ 169.244419][ T7138] ? __fget_files+0x2a/0x420 [ 169.244445][ T7138] security_file_ioctl+0xc3/0x2a0 [ 169.244484][ T7138] __se_sys_ioctl+0x47/0x170 [ 169.244516][ T7138] do_syscall_64+0x14d/0xf80 [ 169.244543][ T7138] ? trace_irq_disable+0x3b/0x150 [ 169.244564][ T7138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.244584][ T7138] ? clear_bhb_loop+0x40/0x90 [ 169.244607][ T7138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.244627][ T7138] RIP: 0033:0x7fc21d06c799 [ 169.244644][ T7138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.244661][ T7138] RSP: 002b:00007fc21b2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.244681][ T7138] RAX: ffffffffffffffda RBX: 00007fc21d2e5fa0 RCX: 00007fc21d06c799 [ 169.244695][ T7138] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 169.244707][ T7138] RBP: 00007fc21b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 169.244719][ T7138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.244731][ T7138] R13: 00007fc21d2e6038 R14: 00007fc21d2e5fa0 R15: 00007ffc207a4548 [ 169.244762][ T7138] [ 169.270791][ T7138] ERROR: Out of memory at tomoyo_realpath_from_path. [ 171.082229][ T7153] vlan2: entered promiscuous mode [ 171.082277][ T7153] bridge0: entered promiscuous mode [ 172.150640][ T7164] FAULT_INJECTION: forcing a failure. [ 172.150640][ T7164] name failslab, interval 1, probability 0, space 0, times 0 [ 172.150676][ T7164] CPU: 0 UID: 0 PID: 7164 Comm: syz.4.420 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 172.150700][ T7164] Tainted: [L]=SOFTLOCKUP [ 172.150707][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 172.150720][ T7164] Call Trace: [ 172.150734][ T7164] [ 172.150741][ T7164] dump_stack_lvl+0xe8/0x150 [ 172.150774][ T7164] should_fail_ex+0x46b/0x600 [ 172.150803][ T7164] should_failslab+0xa8/0x100 [ 172.150824][ T7164] __kmalloc_noprof+0xdf/0x7b0 [ 172.150854][ T7164] ? tomoyo_encode+0x28b/0x550 [ 172.150881][ T7164] tomoyo_encode+0x28b/0x550 [ 172.150924][ T7164] tomoyo_realpath_from_path+0x58d/0x5d0 [ 172.150956][ T7164] ? tomoyo_path_number_perm+0x219/0x630 [ 172.150985][ T7164] tomoyo_path_number_perm+0x246/0x630 [ 172.151013][ T7164] ? irqentry_exit+0x59e/0x620 [ 172.151043][ T7164] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 172.151086][ T7164] ? hook_file_ioctl+0x10e/0x590 [ 172.151129][ T7164] ? __rcu_read_unlock+0x83/0xe0 [ 172.151155][ T7164] ? __fget_files+0x2a/0x420 [ 172.151177][ T7164] ? __fget_files+0x3a6/0x420 [ 172.151200][ T7164] ? __fget_files+0x2a/0x420 [ 172.151226][ T7164] security_file_ioctl+0xc3/0x2a0 [ 172.151259][ T7164] __se_sys_ioctl+0x47/0x170 [ 172.151291][ T7164] do_syscall_64+0x14d/0xf80 [ 172.151318][ T7164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.151338][ T7164] ? clear_bhb_loop+0x40/0x90 [ 172.151365][ T7164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.151384][ T7164] RIP: 0033:0x7fa260a3c799 [ 172.151402][ T7164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.151419][ T7164] RSP: 002b:00007fa25ec6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.151439][ T7164] RAX: ffffffffffffffda RBX: 00007fa260cb6090 RCX: 00007fa260a3c799 [ 172.151453][ T7164] RDX: 0000200000000540 RSI: 00000000c05064a7 RDI: 0000000000000004 [ 172.151466][ T7164] RBP: 00007fa25ec6d090 R08: 0000000000000000 R09: 0000000000000000 [ 172.151478][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.151490][ T7164] R13: 00007fa260cb6128 R14: 00007fa260cb6090 R15: 00007ffee1a27408 [ 172.151521][ T7164] [ 172.312575][ T7164] ERROR: Out of memory at tomoyo_realpath_from_path. [ 172.759225][ T7167] veth0: entered promiscuous mode [ 172.759444][ T7167] macsec1: entered allmulticast mode [ 172.759459][ T7167] veth0: entered allmulticast mode [ 172.826842][ T7167] veth0: left allmulticast mode [ 172.826952][ T7167] veth0: left promiscuous mode [ 174.048717][ T7194] FAULT_INJECTION: forcing a failure. [ 174.048717][ T7194] name failslab, interval 1, probability 0, space 0, times 0 [ 174.048753][ T7194] CPU: 0 UID: 0 PID: 7194 Comm: syz.0.433 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 174.048780][ T7194] Tainted: [L]=SOFTLOCKUP [ 174.048786][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 174.048798][ T7194] Call Trace: [ 174.048805][ T7194] [ 174.048814][ T7194] dump_stack_lvl+0xe8/0x150 [ 174.048916][ T7194] should_fail_ex+0x46b/0x600 [ 174.048955][ T7194] should_failslab+0xa8/0x100 [ 174.048978][ T7194] __kmalloc_noprof+0xdf/0x7b0 [ 174.049007][ T7194] ? tomoyo_encode+0x28b/0x550 [ 174.049035][ T7194] tomoyo_encode+0x28b/0x550 [ 174.049062][ T7194] tomoyo_realpath_from_path+0x58d/0x5d0 [ 174.049104][ T7194] ? tomoyo_path_number_perm+0x219/0x630 [ 174.049136][ T7194] tomoyo_path_number_perm+0x246/0x630 [ 174.049167][ T7194] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 174.049199][ T7194] ? __lock_acquire+0x6b5/0x2cf0 [ 174.049252][ T7194] ? __fget_files+0x2a/0x420 [ 174.049288][ T7194] ? __fget_files+0x2a/0x420 [ 174.049323][ T7194] ? __fget_files+0x3a6/0x420 [ 174.049345][ T7194] ? __fget_files+0x2a/0x420 [ 174.049380][ T7194] security_file_ioctl+0xc3/0x2a0 [ 174.049412][ T7194] __se_sys_ioctl+0x47/0x170 [ 174.049445][ T7194] do_syscall_64+0x14d/0xf80 [ 174.049472][ T7194] ? trace_irq_disable+0x3b/0x150 [ 174.049495][ T7194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.049515][ T7194] ? clear_bhb_loop+0x40/0x90 [ 174.049539][ T7194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.049559][ T7194] RIP: 0033:0x7fd39a95c799 [ 174.049578][ T7194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.049595][ T7194] RSP: 002b:00007fd398bae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.049616][ T7194] RAX: ffffffffffffffda RBX: 00007fd39abd5fa0 RCX: 00007fd39a95c799 [ 174.049630][ T7194] RDX: 0000000000000000 RSI: 0000000080105013 RDI: 0000000000000003 [ 174.049642][ T7194] RBP: 00007fd398bae090 R08: 0000000000000000 R09: 0000000000000000 [ 174.049655][ T7194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.049667][ T7194] R13: 00007fd39abd6038 R14: 00007fd39abd5fa0 R15: 00007ffe5c9498e8 [ 174.049696][ T7194] [ 174.049717][ T7194] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.343149][ T7198] nbd: must specify at least one socket [ 174.354099][ T7198] netlink: 'syz.0.439': attribute type 3 has an invalid length. [ 174.354121][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.439'. [ 177.304773][ T7218] FAULT_INJECTION: forcing a failure. [ 177.304773][ T7218] name failslab, interval 1, probability 0, space 0, times 0 [ 177.304809][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.1.442 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 177.304835][ T7218] Tainted: [L]=SOFTLOCKUP [ 177.304842][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 177.304854][ T7218] Call Trace: [ 177.304862][ T7218] [ 177.304870][ T7218] dump_stack_lvl+0xe8/0x150 [ 177.304904][ T7218] should_fail_ex+0x46b/0x600 [ 177.304933][ T7218] should_failslab+0xa8/0x100 [ 177.304955][ T7218] __kmalloc_noprof+0xdf/0x7b0 [ 177.304983][ T7218] ? percpu_ref_get_many+0x21/0x1e0 [ 177.305010][ T7218] ? io_cache_alloc_new+0x40/0x100 [ 177.305043][ T7218] io_cache_alloc_new+0x40/0x100 [ 177.305072][ T7218] __io_prep_rw+0x2bd/0xed0 [ 177.305099][ T7218] ? __pfx___io_prep_rw+0x10/0x10 [ 177.305119][ T7218] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 177.305157][ T7218] io_prep_write+0x36/0x110 [ 177.305183][ T7218] ? io_task_refs_refill+0xba/0x180 [ 177.305213][ T7218] io_submit_sqes+0xb35/0x2370 [ 177.305265][ T7218] __se_sys_io_uring_enter+0x2d2/0x18c0 [ 177.305283][ T7218] ? lockdep_hardirqs_on+0x7a/0x110 [ 177.305316][ T7218] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 177.305348][ T7218] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 177.305368][ T7218] ? fput+0xa0/0xd0 [ 177.305393][ T7218] ? ksys_write+0x248/0x270 [ 177.305422][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 177.305455][ T7218] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 177.305478][ T7218] do_syscall_64+0x14d/0xf80 [ 177.305505][ T7218] ? trace_irq_disable+0x3b/0x150 [ 177.305527][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.305546][ T7218] ? clear_bhb_loop+0x40/0x90 [ 177.305570][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.305589][ T7218] RIP: 0033:0x7fc21d06c799 [ 177.305607][ T7218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.305624][ T7218] RSP: 002b:00007fc21b2be028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 177.305651][ T7218] RAX: ffffffffffffffda RBX: 00007fc21d2e5fa0 RCX: 00007fc21d06c799 [ 177.305665][ T7218] RDX: 0000000000000000 RSI: 0000000000007a98 RDI: 0000000000000004 [ 177.305678][ T7218] RBP: 00007fc21b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 177.305690][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.305702][ T7218] R13: 00007fc21d2e6038 R14: 00007fc21d2e5fa0 R15: 00007ffc207a4548 [ 177.305733][ T7218] [ 180.390423][ T7252] FAULT_INJECTION: forcing a failure. [ 180.390423][ T7252] name failslab, interval 1, probability 0, space 0, times 0 [ 180.390498][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: syz.1.456 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 180.390525][ T7252] Tainted: [L]=SOFTLOCKUP [ 180.390532][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 180.390543][ T7252] Call Trace: [ 180.390551][ T7252] [ 180.390559][ T7252] dump_stack_lvl+0xe8/0x150 [ 180.390604][ T7252] should_fail_ex+0x46b/0x600 [ 180.390637][ T7252] should_failslab+0xa8/0x100 [ 180.390659][ T7252] __kmalloc_noprof+0xdf/0x7b0 [ 180.390688][ T7252] ? sock_kmalloc+0xd6/0x160 [ 180.390713][ T7252] sock_kmalloc+0xd6/0x160 [ 180.390735][ T7252] skcipher_recvmsg+0x54f/0x1140 [ 180.390774][ T7252] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 180.390797][ T7252] ? __fget_files+0x3a6/0x420 [ 180.390819][ T7252] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 180.390847][ T7252] ? security_socket_recvmsg+0x7e/0x2c0 [ 180.390874][ T7252] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 180.390894][ T7252] sock_recvmsg+0x172/0x1b0 [ 180.390922][ T7252] __sys_recvfrom+0x23f/0x3d0 [ 180.390956][ T7252] ? __pfx___sys_recvfrom+0x10/0x10 [ 180.391009][ T7252] ? ksys_write+0x248/0x270 [ 180.391039][ T7252] ? __pfx_ksys_write+0x10/0x10 [ 180.391072][ T7252] __x64_sys_recvfrom+0xde/0x100 [ 180.391103][ T7252] do_syscall_64+0x14d/0xf80 [ 180.391131][ T7252] ? trace_irq_disable+0x3b/0x150 [ 180.391154][ T7252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.391174][ T7252] ? clear_bhb_loop+0x40/0x90 [ 180.391198][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.391217][ T7252] RIP: 0033:0x7fc21d06c799 [ 180.391241][ T7252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.391262][ T7252] RSP: 002b:00007fc21b2be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 180.391289][ T7252] RAX: ffffffffffffffda RBX: 00007fc21d2e5fa0 RCX: 00007fc21d06c799 [ 180.391304][ T7252] RDX: 0000000000000ff4 RSI: 0000200000000000 RDI: 0000000000000004 [ 180.391316][ T7252] RBP: 00007fc21b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 180.391328][ T7252] R10: 0000000000012023 R11: 0000000000000246 R12: 0000000000000001 [ 180.391340][ T7252] R13: 00007fc21d2e6038 R14: 00007fc21d2e5fa0 R15: 00007ffc207a4548 [ 180.391501][ T7252] [ 181.103822][ T7265] FAULT_INJECTION: forcing a failure. [ 181.103822][ T7265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.103881][ T7265] CPU: 0 UID: 0 PID: 7265 Comm: syz.1.458 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 181.103908][ T7265] Tainted: [L]=SOFTLOCKUP [ 181.103915][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 181.103926][ T7265] Call Trace: [ 181.103935][ T7265] [ 181.103944][ T7265] dump_stack_lvl+0xe8/0x150 [ 181.103979][ T7265] should_fail_ex+0x46b/0x600 [ 181.104009][ T7265] _copy_to_iter+0x1e4/0x17d0 [ 181.104034][ T7265] ? lockdep_hardirqs_on+0x7a/0x110 [ 181.104075][ T7265] ? seq_write+0xd8/0x140 [ 181.104096][ T7265] ? __pfx__copy_to_iter+0x10/0x10 [ 181.104119][ T7265] ? __asan_memcpy+0x40/0x70 [ 181.104152][ T7265] ? seq_write+0xd8/0x140 [ 181.104177][ T7265] ? show_cpuinfo+0xa4b/0xce0 [ 181.104197][ T7265] ? c_next+0x17f/0x1f0 [ 181.104219][ T7265] seq_read_iter+0xbf6/0xe20 [ 181.104258][ T7265] vfs_read+0x58b/0xa80 [ 181.104294][ T7265] ? __pfx_vfs_read+0x10/0x10 [ 181.104324][ T7265] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 181.104353][ T7265] ? lockdep_hardirqs_on+0x7a/0x110 [ 181.104383][ T7265] ? mutex_lock_nested+0x152/0x1d0 [ 181.104405][ T7265] ? fdget_pos+0x252/0x320 [ 181.104438][ T7265] ksys_read+0x156/0x270 [ 181.104468][ T7265] ? __pfx_ksys_read+0x10/0x10 [ 181.104507][ T7265] do_syscall_64+0x14d/0xf80 [ 181.104536][ T7265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.104556][ T7265] ? clear_bhb_loop+0x40/0x90 [ 181.104579][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.104599][ T7265] RIP: 0033:0x7fc21d06c799 [ 181.104618][ T7265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.104634][ T7265] RSP: 002b:00007fc21b27c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.104654][ T7265] RAX: ffffffffffffffda RBX: 00007fc21d2e6180 RCX: 00007fc21d06c799 [ 181.104668][ T7265] RDX: 0000000000002020 RSI: 0000200000000200 RDI: 0000000000000006 [ 181.104681][ T7265] RBP: 00007fc21b27c090 R08: 0000000000000000 R09: 0000000000000000 [ 181.104693][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.104704][ T7265] R13: 00007fc21d2e6218 R14: 00007fc21d2e6180 R15: 00007ffc207a4548 [ 181.104737][ T7265] [ 183.016642][ T7302] vlan2: entered promiscuous mode [ 183.643131][ T7303] FAULT_INJECTION: forcing a failure. [ 183.643131][ T7303] name failslab, interval 1, probability 0, space 0, times 0 [ 183.643166][ T7303] CPU: 1 UID: 0 PID: 7303 Comm: syz.4.474 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 183.643192][ T7303] Tainted: [L]=SOFTLOCKUP [ 183.643199][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 183.643210][ T7303] Call Trace: [ 183.643217][ T7303] [ 183.643226][ T7303] dump_stack_lvl+0xe8/0x150 [ 183.643260][ T7303] should_fail_ex+0x46b/0x600 [ 183.643289][ T7303] should_failslab+0xa8/0x100 [ 183.643311][ T7303] __kmalloc_cache_noprof+0x84/0x690 [ 183.643339][ T7303] ? alloc_pipe_info+0xe8/0x4d0 [ 183.643371][ T7303] alloc_pipe_info+0xe8/0x4d0 [ 183.643401][ T7303] splice_direct_to_actor+0xa19/0xc80 [ 183.643435][ T7303] ? __pfx_direct_splice_actor+0x10/0x10 [ 183.643460][ T7303] ? get_pid_task+0x20/0x1f0 [ 183.643494][ T7303] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 183.643517][ T7303] ? __lock_acquire+0x6b5/0x2cf0 [ 183.643545][ T7303] do_splice_direct+0x19b/0x2a0 [ 183.643571][ T7303] ? __pfx_do_splice_direct+0x10/0x10 [ 183.643595][ T7303] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 183.643627][ T7303] ? rw_verify_area+0x25b/0x4e0 [ 183.643668][ T7303] do_sendfile+0x547/0x7e0 [ 183.643689][ T7303] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 183.643725][ T7303] ? __pfx_do_sendfile+0x10/0x10 [ 183.643759][ T7303] __se_sys_sendfile64+0x144/0x1a0 [ 183.643783][ T7303] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 183.643815][ T7303] do_syscall_64+0x14d/0xf80 [ 183.643842][ T7303] ? trace_irq_disable+0x3b/0x150 [ 183.643864][ T7303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.643883][ T7303] ? clear_bhb_loop+0x40/0x90 [ 183.643907][ T7303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.643926][ T7303] RIP: 0033:0x7fa260a3c799 [ 183.643945][ T7303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.643961][ T7303] RSP: 002b:00007fa25ec4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 183.643982][ T7303] RAX: ffffffffffffffda RBX: 00007fa260cb6180 RCX: 00007fa260a3c799 [ 183.643995][ T7303] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 183.644007][ T7303] RBP: 00007fa25ec4c090 R08: 0000000000000000 R09: 0000000000000000 [ 183.644019][ T7303] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 183.644031][ T7303] R13: 00007fa260cb6218 R14: 00007fa260cb6180 R15: 00007ffee1a27408 [ 183.644061][ T7303] [ 185.009898][ T5114] Bluetooth: hci4: unexpected event 0x20 length: 4 < 7 [ 186.556046][ T36] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 186.718468][ T36] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 186.718498][ T36] usb 2-1: config 0 has no interface number 0 [ 186.718538][ T36] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 186.720182][ T36] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 186.720208][ T36] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 186.720219][ T36] usb 2-1: Manufacturer: syz [ 186.720226][ T36] usb 2-1: SerialNumber: syz [ 186.728050][ T36] usb 2-1: config 0 descriptor?? [ 188.199887][ T7379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.201627][ T7379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.290480][ T36] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input6 [ 189.866145][ T996] usb 2-1: USB disconnect, device number 4 [ 193.529331][ T7451] FAULT_INJECTION: forcing a failure. [ 193.529331][ T7451] name failslab, interval 1, probability 0, space 0, times 0 [ 193.529366][ T7451] CPU: 0 UID: 0 PID: 7451 Comm: syz.1.528 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 193.529392][ T7451] Tainted: [L]=SOFTLOCKUP [ 193.529399][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 193.529410][ T7451] Call Trace: [ 193.529418][ T7451] [ 193.529426][ T7451] dump_stack_lvl+0xe8/0x150 [ 193.529459][ T7451] should_fail_ex+0x46b/0x600 [ 193.529489][ T7451] should_failslab+0xa8/0x100 [ 193.529510][ T7451] __kmalloc_noprof+0xdf/0x7b0 [ 193.529538][ T7451] ? tomoyo_encode+0x28b/0x550 [ 193.529565][ T7451] tomoyo_encode+0x28b/0x550 [ 193.529591][ T7451] tomoyo_realpath_from_path+0x58d/0x5d0 [ 193.529624][ T7451] ? tomoyo_path_number_perm+0x219/0x630 [ 193.529652][ T7451] tomoyo_path_number_perm+0x246/0x630 [ 193.529683][ T7451] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 193.529714][ T7451] ? __lock_acquire+0x6b5/0x2cf0 [ 193.529767][ T7451] ? __fget_files+0x2a/0x420 [ 193.529794][ T7451] ? __fget_files+0x2a/0x420 [ 193.529816][ T7451] ? __fget_files+0x3a6/0x420 [ 193.529840][ T7451] ? __fget_files+0x2a/0x420 [ 193.529865][ T7451] security_file_ioctl+0xc3/0x2a0 [ 193.529898][ T7451] __se_sys_ioctl+0x47/0x170 [ 193.529930][ T7451] do_syscall_64+0x14d/0xf80 [ 193.529957][ T7451] ? trace_irq_disable+0x3b/0x150 [ 193.529980][ T7451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.529999][ T7451] ? clear_bhb_loop+0x40/0x90 [ 193.530023][ T7451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.530050][ T7451] RIP: 0033:0x7fc21d06c799 [ 193.530068][ T7451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.530085][ T7451] RSP: 002b:00007fc21b2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.530105][ T7451] RAX: ffffffffffffffda RBX: 00007fc21d2e5fa0 RCX: 00007fc21d06c799 [ 193.530119][ T7451] RDX: 0000200000000280 RSI: 00000000000089ed RDI: 0000000000000004 [ 193.530132][ T7451] RBP: 00007fc21b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 193.530144][ T7451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.530156][ T7451] R13: 00007fc21d2e6038 R14: 00007fc21d2e5fa0 R15: 00007ffc207a4548 [ 193.530187][ T7451] [ 193.534996][ T7451] ERROR: Out of memory at tomoyo_realpath_from_path. [ 194.496679][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.496745][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.938105][ T7477] FAULT_INJECTION: forcing a failure. [ 194.938105][ T7477] name failslab, interval 1, probability 0, space 0, times 0 [ 194.938141][ T7477] CPU: 1 UID: 0 PID: 7477 Comm: syz.1.540 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 194.938167][ T7477] Tainted: [L]=SOFTLOCKUP [ 194.938173][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 194.938184][ T7477] Call Trace: [ 194.938192][ T7477] [ 194.938200][ T7477] dump_stack_lvl+0xe8/0x150 [ 194.938232][ T7477] should_fail_ex+0x46b/0x600 [ 194.938262][ T7477] should_failslab+0xa8/0x100 [ 194.938283][ T7477] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 194.938311][ T7477] ? __alloc_skb+0x1d0/0x7d0 [ 194.938336][ T7477] ? lockdep_hardirqs_on+0x7a/0x110 [ 194.938370][ T7477] __alloc_skb+0x1d0/0x7d0 [ 194.938398][ T7477] netlink_sendmsg+0x5d4/0xb40 [ 194.938433][ T7477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.938459][ T7477] ? unwind_get_return_address+0x4d/0x90 [ 194.938482][ T7477] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.938513][ T7477] ____sys_sendmsg+0x94c/0x9c0 [ 194.938538][ T7477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.938566][ T7477] ? import_iovec+0x73/0xa0 [ 194.938595][ T7477] ___sys_sendmsg+0x2a5/0x360 [ 194.938620][ T7477] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.938675][ T7477] ? __fget_files+0x2a/0x420 [ 194.938697][ T7477] ? __fget_files+0x3a6/0x420 [ 194.938730][ T7477] __x64_sys_sendmsg+0x1c3/0x2a0 [ 194.938752][ T7477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.938780][ T7477] ? __pfx_ksys_write+0x10/0x10 [ 194.938817][ T7477] do_syscall_64+0x14d/0xf80 [ 194.938844][ T7477] ? trace_irq_disable+0x3b/0x150 [ 194.938877][ T7477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.938902][ T7477] ? clear_bhb_loop+0x40/0x90 [ 194.938926][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.938946][ T7477] RIP: 0033:0x7fc21d06c799 [ 194.938964][ T7477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.938981][ T7477] RSP: 002b:00007fc21b2be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.939001][ T7477] RAX: ffffffffffffffda RBX: 00007fc21d2e5fa0 RCX: 00007fc21d06c799 [ 194.939015][ T7477] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000004 [ 194.939027][ T7477] RBP: 00007fc21b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 194.939039][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.939050][ T7477] R13: 00007fc21d2e6038 R14: 00007fc21d2e5fa0 R15: 00007ffc207a4548 [ 194.939080][ T7477] [ 195.194900][ T7479] netlink: 'syz.1.541': attribute type 1 has an invalid length. [ 195.262980][ T7479] bond1: entered promiscuous mode [ 195.263414][ T7479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.567421][ T7528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.555'. [ 198.567499][ T7528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.555'. [ 199.275007][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 199.416707][ T7546] bond0: (slave bond_slave_0): Releasing backup interface [ 199.581926][ T7555] smc: net device bond0 applied user defined pnetid SYZ2 [ 200.354595][ T7581] warning: `syz.3.581' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 201.771607][ T7614] FAULT_INJECTION: forcing a failure. [ 201.771607][ T7614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.771643][ T7614] CPU: 0 UID: 0 PID: 7614 Comm: syz.4.592 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 201.771669][ T7614] Tainted: [L]=SOFTLOCKUP [ 201.771676][ T7614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 201.771687][ T7614] Call Trace: [ 201.771694][ T7614] [ 201.771703][ T7614] dump_stack_lvl+0xe8/0x150 [ 201.771737][ T7614] should_fail_ex+0x46b/0x600 [ 201.771767][ T7614] _copy_from_user+0x2d/0xb0 [ 201.771794][ T7614] __copy_msghdr+0x3c5/0x5b0 [ 201.771818][ T7614] ___sys_sendmsg+0x213/0x360 [ 201.771841][ T7614] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.771865][ T7614] ? kstrtouint+0x6e/0xe0 [ 201.771909][ T7614] ? __fget_files+0x2a/0x420 [ 201.771933][ T7614] ? __fget_files+0x3a6/0x420 [ 201.771964][ T7614] __sys_sendmmsg+0x282/0x4e0 [ 201.771989][ T7614] ? __pfx___sys_sendmmsg+0x10/0x10 [ 201.772016][ T7614] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 201.772061][ T7614] ? ksys_write+0x248/0x270 [ 201.772090][ T7614] ? __pfx_ksys_write+0x10/0x10 [ 201.772123][ T7614] __x64_sys_sendmmsg+0xa0/0xc0 [ 201.772145][ T7614] do_syscall_64+0x14d/0xf80 [ 201.772172][ T7614] ? trace_irq_disable+0x3b/0x150 [ 201.772194][ T7614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.772215][ T7614] ? clear_bhb_loop+0x40/0x90 [ 201.772239][ T7614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.772258][ T7614] RIP: 0033:0x7fa260a3c799 [ 201.772277][ T7614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.772293][ T7614] RSP: 002b:00007fa25ec8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 201.772314][ T7614] RAX: ffffffffffffffda RBX: 00007fa260cb5fa0 RCX: 00007fa260a3c799 [ 201.772326][ T7614] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000004 [ 201.772338][ T7614] RBP: 00007fa25ec8e090 R08: 0000000000000000 R09: 0000000000000000 [ 201.772350][ T7614] R10: 0000000004004800 R11: 0000000000000246 R12: 0000000000000001 [ 201.772362][ T7614] R13: 00007fa260cb6038 R14: 00007fa260cb5fa0 R15: 00007ffee1a27408 [ 201.772394][ T7614] [ 204.311113][ T37] audit: type=1326 audit(1773407181.371:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7658 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21d06c799 code=0x7ffc0000 [ 204.336605][ T37] audit: type=1326 audit(1773407181.371:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7658 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc21d06c799 code=0x7ffc0000 [ 204.336685][ T37] audit: type=1326 audit(1773407181.381:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7658 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21d06c799 code=0x7ffc0000 [ 204.350100][ T37] audit: type=1326 audit(1773407181.381:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7658 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc21d02cfce code=0x7ffc0000 [ 204.351516][ T7661] FAULT_INJECTION: forcing a failure. [ 204.351516][ T7661] name failslab, interval 1, probability 0, space 0, times 0 [ 204.351561][ T7661] CPU: 0 UID: 0 PID: 7661 Comm: syz.1.607 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 204.351589][ T7661] Tainted: [L]=SOFTLOCKUP [ 204.351596][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 204.351607][ T7661] Call Trace: [ 204.351615][ T7661] [ 204.351623][ T7661] dump_stack_lvl+0xe8/0x150 [ 204.351657][ T7661] should_fail_ex+0x46b/0x600 [ 204.351686][ T7661] should_failslab+0xa8/0x100 [ 204.351708][ T7661] kmem_cache_alloc_noprof+0x87/0x680 [ 204.351736][ T7661] ? audit_log_start+0x367/0xa40 [ 204.351760][ T7661] audit_log_start+0x367/0xa40 [ 204.351783][ T7661] ? __pfx_audit_log_start+0x10/0x10 [ 204.351804][ T7661] ? __lock_acquire+0x6b5/0x2cf0 [ 204.351836][ T7661] audit_seccomp+0x63/0x190 [ 204.351869][ T7661] __seccomp_filter+0xd48/0x1ef0 [ 204.351908][ T7661] ? __pfx___seccomp_filter+0x10/0x10 [ 204.351934][ T7661] ? lockdep_hardirqs_on+0x7a/0x110 [ 204.351963][ T7661] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 204.351992][ T7661] ? rt_mutex_slowunlock+0x1cb/0x300 [ 204.352014][ T7661] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 204.352046][ T7661] ? fput+0xa0/0xd0 [ 204.352082][ T7661] ? __secure_computing+0xe1/0x2a0 [ 204.352112][ T7661] do_syscall_64+0xf4/0xf80 [ 204.352140][ T7661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.352159][ T7661] ? clear_bhb_loop+0x40/0x90 [ 204.352186][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.352205][ T7661] RIP: 0033:0x7fc21d06c799 [ 204.352224][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.352240][ T7661] RSP: 002b:00007fc21b27c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 204.352260][ T7661] RAX: ffffffffffffffda RBX: 00007fc21d2e6180 RCX: 00007fc21d06c799 [ 204.352274][ T7661] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 000000000000000a [ 204.352287][ T7661] RBP: 00007fc21b27c090 R08: 0000200000000400 R09: 0000000000000000 [ 204.352300][ T7661] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 204.352312][ T7661] R13: 00007fc21d2e6218 R14: 00007fc21d2e6180 R15: 00007ffc207a4548 [ 204.352342][ T7661] [ 204.352493][ T7661] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 204.352570][ T7661] audit: out of memory in audit_log_start [ 204.367317][ T37] audit: type=1326 audit(1773407181.431:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7658 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc21d02cfce code=0x7ffc0000 [ 204.367378][ T37] audit: type=1326 audit(1773407181.461:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7658 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc21d02cfce code=0x7ffc0000 [ 204.392102][ T37] audit: type=1326 audit(1773407181.461:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7658 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc21d02cfce code=0x7ffc0000 [ 204.392189][ T37] audit: type=1326 audit(1773407181.481:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7658 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc21d02cfce code=0x7ffc0000 [ 206.008434][ T7687] FAULT_INJECTION: forcing a failure. [ 206.008434][ T7687] name failslab, interval 1, probability 0, space 0, times 0 [ 206.008457][ T7687] CPU: 0 UID: 0 PID: 7687 Comm: syz.1.617 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 206.008472][ T7687] Tainted: [L]=SOFTLOCKUP [ 206.008476][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 206.008483][ T7687] Call Trace: [ 206.008487][ T7687] [ 206.008493][ T7687] dump_stack_lvl+0xe8/0x150 [ 206.008513][ T7687] should_fail_ex+0x46b/0x600 [ 206.008530][ T7687] should_failslab+0xa8/0x100 [ 206.008542][ T7687] __kvmalloc_node_noprof+0x170/0x8e0 [ 206.008554][ T7687] ? seq_read_iter+0x203/0xe20 [ 206.008565][ T7687] ? mutex_lock_nested+0x152/0x1d0 [ 206.008578][ T7687] ? seq_read_iter+0xb8/0xe20 [ 206.008589][ T7687] seq_read_iter+0x203/0xe20 [ 206.008600][ T7687] ? kstrtoull+0x12f/0x1d0 [ 206.008614][ T7687] ? __asan_memset+0x22/0x50 [ 206.008639][ T7687] seq_read+0x36a/0x490 [ 206.008657][ T7687] ? __pfx_seq_read+0x10/0x10 [ 206.008685][ T7687] ? proc_reg_read+0x168/0x2f0 [ 206.008708][ T7687] ? __pfx_proc_reg_read+0x10/0x10 [ 206.008734][ T7687] vfs_read+0x212/0xa80 [ 206.008768][ T7687] ? __pfx_vfs_read+0x10/0x10 [ 206.008793][ T7687] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 206.008809][ T7687] ? lockdep_hardirqs_on+0x7a/0x110 [ 206.008825][ T7687] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 206.008840][ T7687] ? mutex_lock_nested+0x152/0x1d0 [ 206.008851][ T7687] ? fdget_pos+0x252/0x320 [ 206.008871][ T7687] ksys_read+0x156/0x270 [ 206.008888][ T7687] ? __pfx_ksys_read+0x10/0x10 [ 206.008908][ T7687] do_syscall_64+0x14d/0xf80 [ 206.008923][ T7687] ? trace_irq_disable+0x3b/0x150 [ 206.008936][ T7687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.008947][ T7687] ? clear_bhb_loop+0x40/0x90 [ 206.008960][ T7687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.008970][ T7687] RIP: 0033:0x7fc21d06c799 [ 206.008981][ T7687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.008990][ T7687] RSP: 002b:00007fc21b2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.009003][ T7687] RAX: ffffffffffffffda RBX: 00007fc21d2e5fa0 RCX: 00007fc21d06c799 [ 206.009011][ T7687] RDX: 0000000000002020 RSI: 00002000000021c0 RDI: 0000000000000003 [ 206.009017][ T7687] RBP: 00007fc21b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 206.009024][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.009030][ T7687] R13: 00007fc21d2e6038 R14: 00007fc21d2e5fa0 R15: 00007ffc207a4548 [ 206.009047][ T7687] [ 206.748040][ T7701] FAULT_INJECTION: forcing a failure. [ 206.748040][ T7701] name failslab, interval 1, probability 0, space 0, times 0 [ 206.748076][ T7701] CPU: 0 UID: 0 PID: 7701 Comm: syz.1.623 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 206.748102][ T7701] Tainted: [L]=SOFTLOCKUP [ 206.748109][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 206.748120][ T7701] Call Trace: [ 206.748128][ T7701] [ 206.748136][ T7701] dump_stack_lvl+0xe8/0x150 [ 206.748169][ T7701] should_fail_ex+0x46b/0x600 [ 206.748198][ T7701] should_failslab+0xa8/0x100 [ 206.748219][ T7701] __kmalloc_noprof+0xdf/0x7b0 [ 206.748248][ T7701] ? tomoyo_encode+0x28b/0x550 [ 206.748275][ T7701] tomoyo_encode+0x28b/0x550 [ 206.748301][ T7701] tomoyo_realpath_from_path+0x58d/0x5d0 [ 206.748333][ T7701] ? tomoyo_path_number_perm+0x219/0x630 [ 206.748362][ T7701] tomoyo_path_number_perm+0x246/0x630 [ 206.748393][ T7701] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 206.748424][ T7701] ? __lock_acquire+0x6b5/0x2cf0 [ 206.748476][ T7701] ? __fget_files+0x2a/0x420 [ 206.748502][ T7701] ? __fget_files+0x2a/0x420 [ 206.748532][ T7701] ? __fget_files+0x3a6/0x420 [ 206.748553][ T7701] ? __fget_files+0x2a/0x420 [ 206.748577][ T7701] security_file_ioctl+0xc3/0x2a0 [ 206.748608][ T7701] __se_sys_ioctl+0x47/0x170 [ 206.748639][ T7701] do_syscall_64+0x14d/0xf80 [ 206.748666][ T7701] ? trace_irq_disable+0x3b/0x150 [ 206.748688][ T7701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.748707][ T7701] ? clear_bhb_loop+0x40/0x90 [ 206.748730][ T7701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.748746][ T7701] RIP: 0033:0x7fc21d06c799 [ 206.748764][ T7701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.748781][ T7701] RSP: 002b:00007fc21b2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.748801][ T7701] RAX: ffffffffffffffda RBX: 00007fc21d2e5fa0 RCX: 00007fc21d06c799 [ 206.748815][ T7701] RDX: 00002000000004c0 RSI: 0000000040a85321 RDI: 0000000000000003 [ 206.748826][ T7701] RBP: 00007fc21b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 206.748838][ T7701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.748849][ T7701] R13: 00007fc21d2e6038 R14: 00007fc21d2e5fa0 R15: 00007ffc207a4548 [ 206.748881][ T7701] [ 206.748898][ T7701] ERROR: Out of memory at tomoyo_realpath_from_path. [ 206.966039][ T7662] Bluetooth: hci0: command 0x0406 tx timeout [ 206.966074][ T7662] Bluetooth: hci1: command 0x0406 tx timeout [ 206.966096][ T7662] Bluetooth: hci3: command 0x0406 tx timeout [ 206.966116][ T7662] Bluetooth: hci4: command 0x0406 tx timeout [ 207.137107][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 208.002517][ T7725] FAULT_INJECTION: forcing a failure. [ 208.002517][ T7725] name failslab, interval 1, probability 0, space 0, times 0 [ 208.002575][ T7725] CPU: 0 UID: 0 PID: 7725 Comm: syz.1.630 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 208.002604][ T7725] Tainted: [L]=SOFTLOCKUP [ 208.002611][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 208.002622][ T7725] Call Trace: [ 208.002631][ T7725] [ 208.002638][ T7725] dump_stack_lvl+0xe8/0x150 [ 208.002659][ T7725] should_fail_ex+0x46b/0x600 [ 208.002675][ T7725] should_failslab+0xa8/0x100 [ 208.002687][ T7725] __kmalloc_node_noprof+0xe7/0x7f0 [ 208.002704][ T7725] ? crypto_create_tfm_node+0x83/0x3f0 [ 208.002720][ T7725] crypto_create_tfm_node+0x83/0x3f0 [ 208.002736][ T7725] crypto_alloc_tfm_node+0x172/0x3f0 [ 208.002755][ T7725] alg_bind+0x2fa/0x570 [ 208.002773][ T7725] __sys_bind+0x2e9/0x410 [ 208.002789][ T7725] ? __pfx___sys_bind+0x10/0x10 [ 208.002801][ T7725] ? lockdep_hardirqs_on+0x7a/0x110 [ 208.002827][ T7725] __x64_sys_bind+0x7a/0x90 [ 208.002841][ T7725] do_syscall_64+0x14d/0xf80 [ 208.002856][ T7725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.002867][ T7725] ? clear_bhb_loop+0x40/0x90 [ 208.002880][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.002891][ T7725] RIP: 0033:0x7fc21d06c799 [ 208.002903][ T7725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.002912][ T7725] RSP: 002b:00007fc21b29d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 208.002924][ T7725] RAX: ffffffffffffffda RBX: 00007fc21d2e6090 RCX: 00007fc21d06c799 [ 208.002932][ T7725] RDX: 0000000000000058 RSI: 00002000000004c0 RDI: 0000000000000004 [ 208.002938][ T7725] RBP: 00007fc21b29d090 R08: 0000000000000000 R09: 0000000000000000 [ 208.002945][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.002951][ T7725] R13: 00007fc21d2e6128 R14: 00007fc21d2e6090 R15: 00007ffc207a4548 [ 208.002967][ T7725] [ 213.953487][ T7771] syz.1.644 uses obsolete (PF_INET,SOCK_PACKET) [ 214.025311][ T7770] FAULT_INJECTION: forcing a failure. [ 214.025311][ T7770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.025338][ T7770] CPU: 1 UID: 0 PID: 7770 Comm: syz.1.644 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 214.025353][ T7770] Tainted: [L]=SOFTLOCKUP [ 214.025357][ T7770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 214.025363][ T7770] Call Trace: [ 214.025368][ T7770] [ 214.025373][ T7770] dump_stack_lvl+0xe8/0x150 [ 214.025394][ T7770] should_fail_ex+0x46b/0x600 [ 214.025411][ T7770] _copy_to_user+0x31/0xb0 [ 214.025427][ T7770] llc_ui_getsockopt+0x3cf/0x4c0 [ 214.025444][ T7770] ? __pfx_llc_ui_getsockopt+0x10/0x10 [ 214.025464][ T7770] ? __pfx_llc_ui_getsockopt+0x10/0x10 [ 214.025479][ T7770] do_sock_getsockopt+0x2d3/0x3f0 [ 214.025496][ T7770] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 214.025512][ T7770] ? __fget_files+0x3a6/0x420 [ 214.025525][ T7770] ? __fget_files+0x2a/0x420 [ 214.025541][ T7770] __x64_sys_getsockopt+0x1aa/0x250 [ 214.025562][ T7770] do_syscall_64+0x14d/0xf80 [ 214.025577][ T7770] ? trace_irq_disable+0x3b/0x150 [ 214.025589][ T7770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.025599][ T7770] ? clear_bhb_loop+0x40/0x90 [ 214.025612][ T7770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.025623][ T7770] RIP: 0033:0x7fc21d06c799 [ 214.025634][ T7770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.025644][ T7770] RSP: 002b:00007fc21b2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 214.025658][ T7770] RAX: ffffffffffffffda RBX: 00007fc21d2e5fa0 RCX: 00007fc21d06c799 [ 214.025669][ T7770] RDX: 0000000000000001 RSI: 000000000000010c RDI: 000000000000000e [ 214.025676][ T7770] RBP: 00007fc21b2be090 R08: 0000200000000340 R09: 0000000000000000 [ 214.025682][ T7770] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.025689][ T7770] R13: 00007fc21d2e6038 R14: 00007fc21d2e5fa0 R15: 00007ffc207a4548 [ 214.025705][ T7770] [ 214.586081][ T5878] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 214.639723][ T7783] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 215.829544][ T5878] usb 1-1: config 12 has an invalid interface number: 24 but max is 0 [ 215.829573][ T5878] usb 1-1: config 12 has no interface number 0 [ 215.829604][ T5878] usb 1-1: config 12 interface 24 has no altsetting 0 [ 215.832142][ T5878] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ae6, bcdDevice=a0.54 [ 215.832171][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.832185][ T5878] usb 1-1: Product: syz [ 215.832193][ T5878] usb 1-1: Manufacturer: syz [ 215.832200][ T5878] usb 1-1: SerialNumber: syz [ 218.722112][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 218.722159][ T7806] openvswitch: netlink: Invalid VLAN frame [ 218.920250][ T7808] FAULT_INJECTION: forcing a failure. [ 218.920250][ T7808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.920274][ T7808] CPU: 1 UID: 0 PID: 7808 Comm: syz.4.656 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 218.920290][ T7808] Tainted: [L]=SOFTLOCKUP [ 218.920295][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 218.920301][ T7808] Call Trace: [ 218.920306][ T7808] [ 218.920311][ T7808] dump_stack_lvl+0xe8/0x150 [ 218.920332][ T7808] should_fail_ex+0x46b/0x600 [ 218.920349][ T7808] _copy_to_user+0x31/0xb0 [ 218.920365][ T7808] simple_read_from_buffer+0xe1/0x170 [ 218.920381][ T7808] proc_fail_nth_read+0x1be/0x230 [ 218.920399][ T7808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.920413][ T7808] ? rw_verify_area+0x2ac/0x4e0 [ 218.920427][ T7808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.920440][ T7808] vfs_read+0x212/0xa80 [ 218.920458][ T7808] ? __pfx_vfs_read+0x10/0x10 [ 218.920474][ T7808] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 218.920491][ T7808] ? lockdep_hardirqs_on+0x7a/0x110 [ 218.920507][ T7808] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 218.920522][ T7808] ? mutex_lock_nested+0x152/0x1d0 [ 218.920534][ T7808] ? fdget_pos+0x252/0x320 [ 218.920551][ T7808] ksys_read+0x156/0x270 [ 218.920567][ T7808] ? __pfx_ksys_read+0x10/0x10 [ 218.920593][ T7808] do_syscall_64+0x14d/0xf80 [ 218.920607][ T7808] ? trace_irq_disable+0x3b/0x150 [ 218.920620][ T7808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.920631][ T7808] ? clear_bhb_loop+0x40/0x90 [ 218.920646][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.920657][ T7808] RIP: 0033:0x7fa2609fcfce [ 218.920668][ T7808] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 218.920678][ T7808] RSP: 002b:00007fa25ec8dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 218.920690][ T7808] RAX: ffffffffffffffda RBX: 00007fa25ec8e6c0 RCX: 00007fa2609fcfce [ 218.920698][ T7808] RDX: 000000000000000f RSI: 00007fa25ec8e0a0 RDI: 0000000000000004 [ 218.920705][ T7808] RBP: 00007fa25ec8e090 R08: 0000000000000000 R09: 0000000000000000 [ 218.920711][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.920717][ T7808] R13: 00007fa260cb6038 R14: 00007fa260cb5fa0 R15: 00007ffee1a27408 [ 218.920733][ T7808] [ 219.352324][ T5878] option 1-1:12.24: GSM modem (1-port) converter detected [ 219.366241][ T5878] usb 1-1: USB disconnect, device number 5 [ 219.450877][ T5878] option 1-1:12.24: device disconnected [ 222.444037][ T7867] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.677'. [ 225.341769][ T7905] hsr0: entered promiscuous mode [ 226.576280][ T7918] usb usb9: usbfs: process 7918 (syz.0.700) did not claim interface 0 before use [ 226.847655][ T7929] tmpfs: Bad value for 'mpol' [ 229.416154][ T996] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 229.422666][ T60] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 229.452789][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'. [ 229.452830][ T7967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.720'. [ 229.571167][ T996] usb 2-1: Using ep0 maxpacket: 16 [ 229.576707][ T996] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.576736][ T996] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 229.576760][ T996] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 229.576782][ T996] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 229.578834][ T996] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.578859][ T996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 229.578879][ T996] usb 2-1: SerialNumber: syz [ 229.653520][ T996] cdc_acm 2-1:1.0: skipping garbage [ 229.654416][ T996] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 229.808472][ T5797] usb 2-1: USB disconnect, device number 5 [ 230.335976][ T5878] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 230.493992][ T5878] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 230.494024][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.494044][ T5878] usb 1-1: Product: syz [ 230.494057][ T5878] usb 1-1: Manufacturer: syz [ 230.494071][ T5878] usb 1-1: SerialNumber: syz [ 230.575018][ T7986] netlink: 'syz.3.729': attribute type 4 has an invalid length. [ 230.575691][ T7986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.729'. [ 230.925482][ T5878] rtl8150 1-1:1.0: couldn't reset the device [ 230.926020][ T5878] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 230.976454][ T5878] usb 1-1: USB disconnect, device number 6 [ 231.138911][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 231.138942][ T7998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.733'. [ 231.189708][ T7998] ipip0: entered promiscuous mode [ 234.026163][ T5797] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 234.196751][ T5797] usb 5-1: config 12 has an invalid interface number: 24 but max is 0 [ 234.196782][ T5797] usb 5-1: config 12 has no interface number 0 [ 234.196813][ T5797] usb 5-1: config 12 interface 24 has no altsetting 0 [ 234.200718][ T5797] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ae6, bcdDevice=a0.54 [ 234.200747][ T5797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.200765][ T5797] usb 5-1: Product: syz [ 234.200773][ T5797] usb 5-1: Manufacturer: syz [ 234.200780][ T5797] usb 5-1: SerialNumber: syz [ 235.405610][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 235.405643][ T8036] netlink: 40 bytes leftover after parsing attributes in process `syz.2.748'. [ 237.239489][ T8056] FAULT_INJECTION: forcing a failure. [ 237.239489][ T8056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.239710][ T8056] CPU: 1 UID: 0 PID: 8056 Comm: syz.0.753 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 237.239739][ T8056] Tainted: [L]=SOFTLOCKUP [ 237.239746][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 237.239757][ T8056] Call Trace: [ 237.239766][ T8056] [ 237.239775][ T8056] dump_stack_lvl+0xe8/0x150 [ 237.239808][ T8056] should_fail_ex+0x46b/0x600 [ 237.239836][ T8056] _copy_from_iter+0x1d3/0x1670 [ 237.239860][ T8056] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 237.239886][ T8056] ? __pfx_policy_nodemask+0x10/0x10 [ 237.239908][ T8056] ? __pfx__copy_from_iter+0x10/0x10 [ 237.239936][ T8056] ? set_page_refcounted+0xa0/0x1e0 [ 237.239955][ T8056] ? page_copy_sane+0x4e/0x270 [ 237.239980][ T8056] copy_page_from_iter+0xdd/0x170 [ 237.240008][ T8056] tun_get_user+0x1d4b/0x3de0 [ 237.240042][ T8056] ? tun_get_user+0x6ff/0x3de0 [ 237.240085][ T8056] ? __pfx_tun_get_user+0x10/0x10 [ 237.240127][ T8056] ? ref_tracker_alloc+0x332/0x4a0 [ 237.240161][ T8056] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 237.240189][ T8056] ? tun_get+0x1c/0x2f0 [ 237.240220][ T8056] ? tun_get+0x1c/0x2f0 [ 237.240244][ T8056] ? tun_get+0x1c/0x2f0 [ 237.240274][ T8056] tun_chr_write_iter+0x119/0x200 [ 237.240303][ T8056] vfs_write+0x629/0xba0 [ 237.240353][ T8056] ? __pfx_vfs_write+0x10/0x10 [ 237.240388][ T8056] ? __fget_files+0x2a/0x420 [ 237.240419][ T8056] ksys_write+0x156/0x270 [ 237.240447][ T8056] ? __pfx_ksys_write+0x10/0x10 [ 237.240485][ T8056] do_syscall_64+0x14d/0xf80 [ 237.240663][ T8056] ? trace_irq_disable+0x3b/0x150 [ 237.240695][ T8056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.240718][ T8056] ? clear_bhb_loop+0x40/0x90 [ 237.240743][ T8056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.240801][ T8056] RIP: 0033:0x7fd39a91cfce [ 237.240822][ T8056] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 237.240840][ T8056] RSP: 002b:00007fd398b6bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.240863][ T8056] RAX: ffffffffffffffda RBX: 00007fd398b6c6c0 RCX: 00007fd39a91cfce [ 237.240878][ T8056] RDX: 000000000000004e RSI: 0000200000000000 RDI: 00000000000000c8 [ 237.240891][ T8056] RBP: 00007fd398b6c090 R08: 0000000000000000 R09: 0000000000000000 [ 237.240903][ T8056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.240915][ T8056] R13: 00007fd39abd6218 R14: 00007fd39abd6180 R15: 00007ffe5c9498e8 [ 237.240946][ T8056] [ 238.547427][ T5797] option 5-1:12.24: GSM modem (1-port) converter detected [ 238.633178][ T5797] usb 5-1: USB disconnect, device number 6 [ 238.696272][ T5797] option 5-1:12.24: device disconnected [ 241.743738][ T8098] FAULT_INJECTION: forcing a failure. [ 241.743738][ T8098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.743781][ T8098] CPU: 0 UID: 0 PID: 8098 Comm: syz.0.770 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 241.743807][ T8098] Tainted: [L]=SOFTLOCKUP [ 241.743815][ T8098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 241.743833][ T8098] Call Trace: [ 241.743840][ T8098] [ 241.743852][ T8098] dump_stack_lvl+0xe8/0x150 [ 241.743887][ T8098] should_fail_ex+0x46b/0x600 [ 241.743918][ T8098] _copy_to_user+0x31/0xb0 [ 241.743948][ T8098] simple_read_from_buffer+0xe1/0x170 [ 241.743977][ T8098] proc_fail_nth_read+0x1be/0x230 [ 241.744005][ T8098] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.744032][ T8098] ? rw_verify_area+0x2ac/0x4e0 [ 241.744064][ T8098] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.744089][ T8098] vfs_read+0x212/0xa80 [ 241.744125][ T8098] ? __pfx_vfs_read+0x10/0x10 [ 241.744154][ T8098] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 241.744184][ T8098] ? lockdep_hardirqs_on+0x7a/0x110 [ 241.744212][ T8098] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 241.744240][ T8098] ? mutex_lock_nested+0x152/0x1d0 [ 241.744262][ T8098] ? fdget_pos+0x252/0x320 [ 241.744295][ T8098] ksys_read+0x156/0x270 [ 241.744325][ T8098] ? __pfx_ksys_read+0x10/0x10 [ 241.744364][ T8098] do_syscall_64+0x14d/0xf80 [ 241.744391][ T8098] ? trace_irq_disable+0x3b/0x150 [ 241.744415][ T8098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.744435][ T8098] ? clear_bhb_loop+0x40/0x90 [ 241.744459][ T8098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.744479][ T8098] RIP: 0033:0x7fd39a91cfce [ 241.744502][ T8098] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 241.744518][ T8098] RSP: 002b:00007fd398b6bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.744539][ T8098] RAX: ffffffffffffffda RBX: 00007fd398b6c6c0 RCX: 00007fd39a91cfce [ 241.744554][ T8098] RDX: 000000000000000f RSI: 00007fd398b6c0a0 RDI: 0000000000000008 [ 241.744566][ T8098] RBP: 00007fd398b6c090 R08: 0000000000000000 R09: 0000000000000000 [ 241.744578][ T8098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.744590][ T8098] R13: 00007fd39abd6218 R14: 00007fd39abd6180 R15: 00007ffe5c9498e8 [ 241.744622][ T8098] [ 246.693289][ T8170] fuse: Bad value for 'fd' [ 246.946037][ T36] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 246.983860][ T8176] netlink: 104 bytes leftover after parsing attributes in process `syz.3.797'. [ 247.208098][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 247.208134][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.208172][ T36] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 247.208196][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.245610][ T36] usb 1-1: config 0 descriptor?? [ 248.104633][ T8155] FAULT_INJECTION: forcing a failure. [ 248.104633][ T8155] name failslab, interval 1, probability 0, space 0, times 0 [ 248.104657][ T8155] CPU: 1 UID: 0 PID: 8155 Comm: syz.1.791 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 248.104672][ T8155] Tainted: [L]=SOFTLOCKUP [ 248.104676][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 248.104683][ T8155] Call Trace: [ 248.104688][ T8155] [ 248.104693][ T8155] dump_stack_lvl+0xe8/0x150 [ 248.104713][ T8155] should_fail_ex+0x46b/0x600 [ 248.104729][ T8155] should_failslab+0xa8/0x100 [ 248.104741][ T8155] __kmalloc_noprof+0xdf/0x7b0 [ 248.104758][ T8155] ? sock_kmalloc+0xd6/0x160 [ 248.104768][ T8155] ? __local_bh_enable+0x1e1/0x2f0 [ 248.104785][ T8155] sock_kmalloc+0xd6/0x160 [ 248.104797][ T8155] af_alg_alloc_areq+0x99/0x200 [ 248.104814][ T8155] skcipher_recvmsg+0x332/0x1140 [ 248.104834][ T8155] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 248.104847][ T8155] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 248.104862][ T8155] ? security_socket_recvmsg+0x7e/0x2c0 [ 248.104877][ T8155] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 248.104887][ T8155] sock_recvmsg+0x172/0x1b0 [ 248.104903][ T8155] ____sys_recvmsg+0x1f2/0x4b0 [ 248.104921][ T8155] ? __pfx_____sys_recvmsg+0x10/0x10 [ 248.104940][ T8155] ? import_iovec+0x73/0xa0 [ 248.104957][ T8155] ___sys_recvmsg+0x215/0x590 [ 248.104970][ T8155] ? __pfx____sys_recvmsg+0x10/0x10 [ 248.104993][ T8155] ? __fget_files+0x3a6/0x420 [ 248.105011][ T8155] __x64_sys_recvmsg+0x1c0/0x2a0 [ 248.105024][ T8155] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 248.105039][ T8155] ? __pfx_ksys_write+0x10/0x10 [ 248.105060][ T8155] do_syscall_64+0x14d/0xf80 [ 248.105074][ T8155] ? trace_irq_disable+0x3b/0x150 [ 248.105087][ T8155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.105097][ T8155] ? clear_bhb_loop+0x40/0x90 [ 248.105110][ T8155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.105121][ T8155] RIP: 0033:0x7fc21d06c799 [ 248.105132][ T8155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.105141][ T8155] RSP: 002b:00007fc21b2be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 248.105152][ T8155] RAX: ffffffffffffffda RBX: 00007fc21d2e5fa0 RCX: 00007fc21d06c799 [ 248.105160][ T8155] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000005 [ 248.105167][ T8155] RBP: 00007fc21b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 248.105173][ T8155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.105179][ T8155] R13: 00007fc21d2e6038 R14: 00007fc21d2e5fa0 R15: 00007ffc207a4548 [ 248.105196][ T8155] [ 248.475335][ T36] usbhid 1-1:0.0: can't add hid device: -71 [ 248.475464][ T36] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 248.500646][ T36] usb 1-1: USB disconnect, device number 7 [ 251.880453][ T8213] overlayfs: failed to clone upperpath [ 251.969857][ T8213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.066143][ T5797] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 252.625988][ T5797] usb 5-1: Using ep0 maxpacket: 8 [ 252.631555][ T5797] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.631610][ T5797] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 252.631633][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.686290][ T5797] usb 5-1: config 0 descriptor?? [ 252.694092][ T5797] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 253.295637][ T8231] netlink: 232 bytes leftover after parsing attributes in process `syz.2.819'. [ 253.407676][ T5797] gspca_vc032x: reg_w err -110 [ 253.407779][ T5797] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 253.536102][ T5877] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 253.699086][ T5877] usb 1-1: config 12 has an invalid interface number: 24 but max is 0 [ 253.699116][ T5877] usb 1-1: config 12 has no interface number 0 [ 253.699148][ T5877] usb 1-1: config 12 interface 24 has no altsetting 0 [ 253.732076][ T5877] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ae6, bcdDevice=a0.54 [ 253.732109][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.732129][ T5877] usb 1-1: Product: syz [ 253.732144][ T5877] usb 1-1: Manufacturer: syz [ 253.732157][ T5877] usb 1-1: SerialNumber: syz [ 253.902221][ T8253] FAULT_INJECTION: forcing a failure. [ 253.902221][ T8253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.902258][ T8253] CPU: 1 UID: 0 PID: 8253 Comm: syz.1.826 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 253.902285][ T8253] Tainted: [L]=SOFTLOCKUP [ 253.902291][ T8253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 253.902302][ T8253] Call Trace: [ 253.902310][ T8253] [ 253.902318][ T8253] dump_stack_lvl+0xe8/0x150 [ 253.902351][ T8253] should_fail_ex+0x46b/0x600 [ 253.902380][ T8253] _copy_from_user+0x2d/0xb0 [ 253.902408][ T8253] ___sys_sendmsg+0x1c6/0x360 [ 253.902433][ T8253] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.902456][ T8253] ? kstrtouint+0x6e/0xe0 [ 253.902500][ T8253] ? __fget_files+0x2a/0x420 [ 253.902523][ T8253] ? __fget_files+0x3a6/0x420 [ 253.902556][ T8253] __sys_sendmmsg+0x282/0x4e0 [ 253.902581][ T8253] ? __pfx___sys_sendmmsg+0x10/0x10 [ 253.902608][ T8253] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 253.902644][ T8253] ? ksys_write+0x248/0x270 [ 253.902673][ T8253] ? __pfx_ksys_write+0x10/0x10 [ 253.902707][ T8253] __x64_sys_sendmmsg+0xa0/0xc0 [ 253.902728][ T8253] do_syscall_64+0x14d/0xf80 [ 253.902752][ T8253] ? trace_irq_disable+0x3b/0x150 [ 253.902773][ T8253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.902792][ T8253] ? clear_bhb_loop+0x40/0x90 [ 253.902815][ T8253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.902842][ T8253] RIP: 0033:0x7fc21d06c799 [ 253.902861][ T8253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.902877][ T8253] RSP: 002b:00007fc21b2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 253.902897][ T8253] RAX: ffffffffffffffda RBX: 00007fc21d2e5fa0 RCX: 00007fc21d06c799 [ 253.902911][ T8253] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000004 [ 253.902923][ T8253] RBP: 00007fc21b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 253.902934][ T8253] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000001 [ 253.902945][ T8253] R13: 00007fc21d2e6038 R14: 00007fc21d2e5fa0 R15: 00007ffc207a4548 [ 253.902974][ T8253] [ 254.634063][ T8260] 9p: Bad value for 'rfdno' [ 255.254676][ T36] usb 5-1: USB disconnect, device number 7 [ 255.555312][ T8282] ªªªªªª: renamed from vlan0 (while UP) [ 255.662203][ T8287] ªªªªªª: renamed from vlan0 (while UP) [ 255.678610][ T8286] FAULT_INJECTION: forcing a failure. [ 255.678610][ T8286] name failslab, interval 1, probability 0, space 0, times 0 [ 255.678645][ T8286] CPU: 1 UID: 0 PID: 8286 Comm: syz.1.836 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 255.678671][ T8286] Tainted: [L]=SOFTLOCKUP [ 255.678677][ T8286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 255.678687][ T8286] Call Trace: [ 255.678693][ T8286] [ 255.678700][ T8286] dump_stack_lvl+0xe8/0x150 [ 255.678727][ T8286] should_fail_ex+0x46b/0x600 [ 255.678749][ T8286] should_failslab+0xa8/0x100 [ 255.678769][ T8286] kmem_cache_alloc_noprof+0x87/0x680 [ 255.678793][ T8286] ? io_submit_one+0x130/0x14c0 [ 255.678818][ T8286] io_submit_one+0x130/0x14c0 [ 255.678840][ T8286] ? irqentry_exit+0x59e/0x620 [ 255.678861][ T8286] ? lockdep_hardirqs_on+0x7a/0x110 [ 255.678881][ T8286] ? irqentry_exit+0x59e/0x620 [ 255.678900][ T8286] ? trace_irq_disable+0x3b/0x150 [ 255.678920][ T8286] ? __pfx_io_submit_one+0x10/0x10 [ 255.678951][ T8286] ? __might_fault+0xaf/0x130 [ 255.678975][ T8286] __se_sys_io_submit+0x195/0x340 [ 255.678997][ T8286] ? __pfx___se_sys_io_submit+0x10/0x10 [ 255.679015][ T8286] ? ksys_write+0x248/0x270 [ 255.679047][ T8286] do_syscall_64+0x14d/0xf80 [ 255.679076][ T8286] ? trace_irq_disable+0x3b/0x150 [ 255.679092][ T8286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.679107][ T8286] ? clear_bhb_loop+0x40/0x90 [ 255.679125][ T8286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.679140][ T8286] RIP: 0033:0x7fc21d06c799 [ 255.679155][ T8286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.679168][ T8286] RSP: 002b:00007fc21b29d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 255.679184][ T8286] RAX: ffffffffffffffda RBX: 00007fc21d2e6090 RCX: 00007fc21d06c799 [ 255.679195][ T8286] RDX: 0000200000001300 RSI: 0000000000000001 RDI: 00007fc21de1e000 [ 255.679205][ T8286] RBP: 00007fc21b29d090 R08: 0000000000000000 R09: 0000000000000000 [ 255.679214][ T8286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.679223][ T8286] R13: 00007fc21d2e6128 R14: 00007fc21d2e6090 R15: 00007ffc207a4548 [ 255.679245][ T8286] [ 255.944372][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.944442][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.267651][ T5877] option 1-1:12.24: GSM modem (1-port) converter detected [ 256.287216][ T5877] usb 1-1: USB disconnect, device number 8 [ 256.291898][ T5877] option 1-1:12.24: device disconnected [ 257.035236][ T8318] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.751187][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 257.751208][ T37] audit: type=1326 audit(1773407234.841:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8322 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21d06c799 code=0x7ffc0000 [ 257.766445][ T37] audit: type=1326 audit(1773407234.851:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8322 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21d06c799 code=0x7ffc0000 [ 257.766495][ T37] audit: type=1326 audit(1773407234.851:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8322 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21d06c799 code=0x7ffc0000 [ 257.766536][ T37] audit: type=1326 audit(1773407234.851:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8322 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc21d06c799 code=0x7ffc0000 [ 257.766586][ T37] audit: type=1326 audit(1773407234.861:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8322 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21d06c799 code=0x7ffc0000 [ 257.766623][ T37] audit: type=1326 audit(1773407234.861:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8322 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21d06c799 code=0x7ffc0000 [ 257.770402][ T37] audit: type=1326 audit(1773407234.851:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8322 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21d06c799 code=0x7ffc0000 [ 257.770451][ T37] audit: type=1326 audit(1773407234.861:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8322 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21d06c799 code=0x7ffc0000 [ 257.770492][ T37] audit: type=1326 audit(1773407234.861:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8322 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21d06c799 code=0x7ffc0000 [ 257.770531][ T37] audit: type=1326 audit(1773407234.861:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8322 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc21d06c799 code=0x7ffc0000 [ 258.031260][ T8324] fuse: Bad value for 'fd' [ 258.298501][ T36] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 258.452639][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.452673][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.452712][ T36] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 258.452735][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.510368][ T36] usb 5-1: config 0 descriptor?? [ 258.989474][ T36] usbhid 5-1:0.0: can't add hid device: -71 [ 258.989592][ T36] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 259.119230][ T36] usb 5-1: USB disconnect, device number 8 [ 259.175351][ T5797] IPVS: starting estimator thread 0... [ 259.245707][ T8361] FAULT_INJECTION: forcing a failure. [ 259.245707][ T8361] name failslab, interval 1, probability 0, space 0, times 0 [ 259.245742][ T8361] CPU: 0 UID: 0 PID: 8361 Comm: syz.1.863 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 259.245769][ T8361] Tainted: [L]=SOFTLOCKUP [ 259.245786][ T8361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 259.245798][ T8361] Call Trace: [ 259.245808][ T8361] [ 259.245815][ T8361] dump_stack_lvl+0xe8/0x150 [ 259.245846][ T8361] should_fail_ex+0x46b/0x600 [ 259.245874][ T8361] should_failslab+0xa8/0x100 [ 259.245894][ T8361] __kmalloc_noprof+0xdf/0x7b0 [ 259.245921][ T8361] ? tomoyo_encode+0x28b/0x550 [ 259.245946][ T8361] tomoyo_encode+0x28b/0x550 [ 259.245971][ T8361] tomoyo_realpath_from_path+0x58d/0x5d0 [ 259.246002][ T8361] ? tomoyo_path_number_perm+0x219/0x630 [ 259.246030][ T8361] tomoyo_path_number_perm+0x246/0x630 [ 259.246058][ T8361] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 259.246085][ T8361] ? __lock_acquire+0x6b5/0x2cf0 [ 259.246135][ T8361] ? __fget_files+0x2a/0x420 [ 259.246161][ T8361] ? __fget_files+0x2a/0x420 [ 259.246181][ T8361] ? __fget_files+0x3a6/0x420 [ 259.246202][ T8361] ? __fget_files+0x2a/0x420 [ 259.246227][ T8361] security_file_ioctl+0xc3/0x2a0 [ 259.246259][ T8361] __se_sys_ioctl+0x47/0x170 [ 259.246288][ T8361] do_syscall_64+0x14d/0xf80 [ 259.246314][ T8361] ? trace_irq_disable+0x3b/0x150 [ 259.246336][ T8361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.246357][ T8361] ? clear_bhb_loop+0x40/0x90 [ 259.246379][ T8361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.246398][ T8361] RIP: 0033:0x7fc21d06c799 [ 259.246416][ T8361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.246430][ T8361] RSP: 002b:00007fc21b2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.246450][ T8361] RAX: ffffffffffffffda RBX: 00007fc21d2e5fa0 RCX: 00007fc21d06c799 [ 259.246464][ T8361] RDX: 0000200000000400 RSI: 0000000000004c0a RDI: 0000000000000003 [ 259.246476][ T8361] RBP: 00007fc21b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 259.246489][ T8361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.246501][ T8361] R13: 00007fc21d2e6038 R14: 00007fc21d2e5fa0 R15: 00007ffc207a4548 [ 259.246533][ T8361] [ 259.246832][ T8361] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.247552][ T8361] loop1: detected capacity change from 0 to 4 [ 259.276169][ T8359] IPVS: using max 15 ests per chain, 36000 per kthread [ 259.342959][ T6082] Dev loop1: unable to read RDB block 4 [ 259.343004][ T6082] loop1: unable to read partition table [ 259.343234][ T6082] loop1: partition table beyond EOD, truncated [ 259.358148][ T8361] Dev loop1: unable to read RDB block 4 [ 259.358201][ T8361] loop1: unable to read partition table [ 259.358406][ T8361] loop1: partition table beyond EOD, truncated [ 259.358422][ T8361] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 261.840672][ T8397] syz_tun: entered allmulticast mode [ 261.970356][ T8397] dvmrp1: entered allmulticast mode [ 261.973091][ T8397] syz_tun: left allmulticast mode [ 261.973214][ T8397] dvmrp1: left allmulticast mode [ 262.652195][ T8421] FAULT_INJECTION: forcing a failure. [ 262.652195][ T8421] name failslab, interval 1, probability 0, space 0, times 0 [ 262.652230][ T8421] CPU: 1 UID: 0 PID: 8421 Comm: syz.4.884 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 262.652257][ T8421] Tainted: [L]=SOFTLOCKUP [ 262.652264][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 262.652275][ T8421] Call Trace: [ 262.652283][ T8421] [ 262.652291][ T8421] dump_stack_lvl+0xe8/0x150 [ 262.652324][ T8421] should_fail_ex+0x46b/0x600 [ 262.652353][ T8421] should_failslab+0xa8/0x100 [ 262.652375][ T8421] __kmalloc_noprof+0xdf/0x7b0 [ 262.652403][ T8421] ? tomoyo_encode+0x28b/0x550 [ 262.652431][ T8421] tomoyo_encode+0x28b/0x550 [ 262.652458][ T8421] tomoyo_realpath_from_path+0x58d/0x5d0 [ 262.652500][ T8421] ? tomoyo_path_number_perm+0x219/0x630 [ 262.652529][ T8421] tomoyo_path_number_perm+0x246/0x630 [ 262.652560][ T8421] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 262.652591][ T8421] ? __lock_acquire+0x6b5/0x2cf0 [ 262.652643][ T8421] ? __fget_files+0x2a/0x420 [ 262.652670][ T8421] ? __fget_files+0x2a/0x420 [ 262.652690][ T8421] ? __fget_files+0x3a6/0x420 [ 262.652711][ T8421] ? __fget_files+0x2a/0x420 [ 262.652736][ T8421] security_file_ioctl+0xc3/0x2a0 [ 262.652767][ T8421] __se_sys_ioctl+0x47/0x170 [ 262.652797][ T8421] do_syscall_64+0x14d/0xf80 [ 262.652822][ T8421] ? trace_irq_disable+0x3b/0x150 [ 262.652844][ T8421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.652864][ T8421] ? clear_bhb_loop+0x40/0x90 [ 262.652888][ T8421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.652907][ T8421] RIP: 0033:0x7fa260a3c799 [ 262.652925][ T8421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.652941][ T8421] RSP: 002b:00007fa25ec8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.652960][ T8421] RAX: ffffffffffffffda RBX: 00007fa260cb5fa0 RCX: 00007fa260a3c799 [ 262.653044][ T8421] RDX: 0000200000000500 RSI: 0000000040946400 RDI: 0000000000000003 [ 262.653062][ T8421] RBP: 00007fa25ec8e090 R08: 0000000000000000 R09: 0000000000000000 [ 262.653074][ T8421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.653086][ T8421] R13: 00007fa260cb6038 R14: 00007fa260cb5fa0 R15: 00007ffee1a27408 [ 262.653117][ T8421] [ 262.653141][ T8421] ERROR: Out of memory at tomoyo_realpath_from_path. [ 264.186036][ T5878] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 264.338583][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 264.340906][ T5878] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 264.340928][ T5878] usb 5-1: config 0 has no interface number 0 [ 264.340979][ T5878] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 264.341000][ T5878] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 264.345466][ T5878] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 264.345497][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.345518][ T5878] usb 5-1: Product: syz [ 264.345532][ T5878] usb 5-1: Manufacturer: syz [ 264.345547][ T5878] usb 5-1: SerialNumber: syz [ 264.430849][ T5878] usb 5-1: config 0 descriptor?? [ 264.434883][ T8433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.435065][ T8433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.690749][ T8433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.691493][ T8433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.715972][ T5797] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 264.870068][ T5797] usb 1-1: Using ep0 maxpacket: 16 [ 264.874387][ T5797] usb 1-1: config 0 has no interfaces? [ 264.894726][ T5878] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 264.894999][ T5878] asix 5-1:0.34: probe with driver asix failed with error -71 [ 264.897542][ T5797] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.897570][ T5797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 264.897589][ T5797] usb 1-1: SerialNumber: syz [ 264.959484][ T5797] usb 1-1: config 0 descriptor?? [ 264.966253][ T5878] usb 5-1: USB disconnect, device number 9 [ 265.205471][ T5878] usb 1-1: USB disconnect, device number 9 [ 265.232282][ T8458] bridge0: entered promiscuous mode [ 265.243840][ T8458] macvlan2: entered allmulticast mode [ 265.243861][ T8458] bridge0: entered allmulticast mode [ 265.262861][ T8458] bridge0: port 3(macvlan2) entered blocking state [ 265.263259][ T8458] bridge0: port 3(macvlan2) entered disabled state [ 265.447293][ T8458] bridge0: left allmulticast mode [ 265.447351][ T8458] bridge0: left promiscuous mode [ 268.107227][ T8483] netlink: 160 bytes leftover after parsing attributes in process `syz.0.910'. [ 268.113648][ T8483] netlink: 160 bytes leftover after parsing attributes in process `syz.0.910'. [ 268.888712][ T8491] openvswitch: netlink: Flow actions attr not present in new flow. [ 268.895511][ T8489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.923038][ T8492] FAULT_INJECTION: forcing a failure. [ 268.923038][ T8492] name failslab, interval 1, probability 0, space 0, times 0 [ 268.923075][ T8492] CPU: 1 UID: 0 PID: 8492 Comm: syz.0.913 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 268.923102][ T8492] Tainted: [L]=SOFTLOCKUP [ 268.923109][ T8492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 268.923119][ T8492] Call Trace: [ 268.923127][ T8492] [ 268.923134][ T8492] dump_stack_lvl+0xe8/0x150 [ 268.923166][ T8492] should_fail_ex+0x46b/0x600 [ 268.923194][ T8492] should_failslab+0xa8/0x100 [ 268.923214][ T8492] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 268.923242][ T8492] ? __alloc_skb+0x1d0/0x7d0 [ 268.923266][ T8492] ? lockdep_hardirqs_on+0x7a/0x110 [ 268.923305][ T8492] __alloc_skb+0x1d0/0x7d0 [ 268.923333][ T8492] netlink_sendmsg+0x5d4/0xb40 [ 268.923368][ T8492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.923401][ T8492] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.923431][ T8492] ____sys_sendmsg+0x94c/0x9c0 [ 268.923453][ T8492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.923478][ T8492] ? import_iovec+0x73/0xa0 [ 268.923508][ T8492] ___sys_sendmsg+0x2a5/0x360 [ 268.923533][ T8492] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.923585][ T8492] ? __fget_files+0x2a/0x420 [ 268.923608][ T8492] ? __fget_files+0x3a6/0x420 [ 268.923641][ T8492] __x64_sys_sendmsg+0x1c3/0x2a0 [ 268.923664][ T8492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.923692][ T8492] ? rcu_is_watching+0x15/0xb0 [ 268.923725][ T8492] do_syscall_64+0x14d/0xf80 [ 268.923751][ T8492] ? trace_irq_disable+0x3b/0x150 [ 268.923773][ T8492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.923793][ T8492] ? clear_bhb_loop+0x40/0x90 [ 268.923816][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.923835][ T8492] RIP: 0033:0x7fd39a95c799 [ 268.923853][ T8492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.923871][ T8492] RSP: 002b:00007fd398bae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.923892][ T8492] RAX: ffffffffffffffda RBX: 00007fd39abd5fa0 RCX: 00007fd39a95c799 [ 268.923905][ T8492] RDX: 0000000020040054 RSI: 00002000000001c0 RDI: 0000000000000004 [ 268.923918][ T8492] RBP: 00007fd398bae090 R08: 0000000000000000 R09: 0000000000000000 [ 268.923930][ T8492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.923942][ T8492] R13: 00007fd39abd6038 R14: 00007fd39abd5fa0 R15: 00007ffe5c9498e8 [ 268.923972][ T8492] [ 268.959869][ T8496] FAULT_INJECTION: forcing a failure. [ 268.959869][ T8496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.959903][ T8496] CPU: 0 UID: 0 PID: 8496 Comm: syz.1.916 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 268.959929][ T8496] Tainted: [L]=SOFTLOCKUP [ 268.959936][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 268.959946][ T8496] Call Trace: [ 268.959954][ T8496] [ 268.959961][ T8496] dump_stack_lvl+0xe8/0x150 [ 268.959993][ T8496] should_fail_ex+0x46b/0x600 [ 268.960021][ T8496] _copy_from_user+0x2d/0xb0 [ 268.960048][ T8496] ___sys_sendmsg+0x1c6/0x360 [ 268.960073][ T8496] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.960096][ T8496] ? kstrtouint+0x6e/0xe0 [ 268.960140][ T8496] ? __fget_files+0x2a/0x420 [ 268.960163][ T8496] ? __fget_files+0x3a6/0x420 [ 268.960194][ T8496] __sys_sendmmsg+0x282/0x4e0 [ 268.960217][ T8496] ? __pfx___sys_sendmmsg+0x10/0x10 [ 268.960244][ T8496] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 268.960280][ T8496] ? ksys_write+0x248/0x270 [ 268.960308][ T8496] ? __pfx_ksys_write+0x10/0x10 [ 268.960340][ T8496] __x64_sys_sendmmsg+0xa0/0xc0 [ 268.960361][ T8496] do_syscall_64+0x14d/0xf80 [ 268.960396][ T8496] ? trace_irq_disable+0x3b/0x150 [ 268.960416][ T8496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.960435][ T8496] ? clear_bhb_loop+0x40/0x90 [ 268.960458][ T8496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.960477][ T8496] RIP: 0033:0x7fc21d06c799 [ 268.960495][ T8496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.960511][ T8496] RSP: 002b:00007fc21b2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 268.960531][ T8496] RAX: ffffffffffffffda RBX: 00007fc21d2e5fa0 RCX: 00007fc21d06c799 [ 268.960544][ T8496] RDX: 0000000000000001 RSI: 0000200000000e00 RDI: 0000000000000004 [ 268.960557][ T8496] RBP: 00007fc21b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 268.960572][ T8496] R10: 0000000004004001 R11: 0000000000000246 R12: 0000000000000001 [ 268.960584][ T8496] R13: 00007fc21d2e6038 R14: 00007fc21d2e5fa0 R15: 00007ffc207a4548 [ 268.960614][ T8496] [ 269.650993][ T8506] binder: Bad value for 'stats' [ 269.882958][ T8511] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:19998 [ 270.480089][ T8516] FAULT_INJECTION: forcing a failure. [ 270.480089][ T8516] name failslab, interval 1, probability 0, space 0, times 0 [ 270.480111][ T8516] CPU: 1 UID: 0 PID: 8516 Comm: syz.0.923 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 270.480127][ T8516] Tainted: [L]=SOFTLOCKUP [ 270.480131][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 270.480138][ T8516] Call Trace: [ 270.480142][ T8516] [ 270.480148][ T8516] dump_stack_lvl+0xe8/0x150 [ 270.480168][ T8516] should_fail_ex+0x46b/0x600 [ 270.480184][ T8516] should_failslab+0xa8/0x100 [ 270.480196][ T8516] __kmalloc_cache_noprof+0x84/0x690 [ 270.480212][ T8516] ? l2tp_tunnel_create+0x92/0x410 [ 270.480226][ T8516] ? __pfx_l2tp_tunnel_get+0x10/0x10 [ 270.480240][ T8516] l2tp_tunnel_create+0x92/0x410 [ 270.480255][ T8516] pppol2tp_connect+0x826/0x17c0 [ 270.480274][ T8516] ? __pfx_pppol2tp_connect+0x10/0x10 [ 270.480295][ T8516] ? hook_socket_connect+0x107/0x190 [ 270.480312][ T8516] ? bpf_lsm_socket_connect+0x9/0x20 [ 270.480329][ T8516] __sys_connect+0x315/0x450 [ 270.480345][ T8516] ? __pfx___sys_connect+0x10/0x10 [ 270.480365][ T8516] ? __pfx_ksys_write+0x10/0x10 [ 270.480384][ T8516] __x64_sys_connect+0x7a/0x90 [ 270.480399][ T8516] do_syscall_64+0x14d/0xf80 [ 270.480414][ T8516] ? trace_irq_disable+0x3b/0x150 [ 270.480426][ T8516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.480436][ T8516] ? clear_bhb_loop+0x40/0x90 [ 270.480449][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.480459][ T8516] RIP: 0033:0x7fd39a95c799 [ 270.480470][ T8516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.480479][ T8516] RSP: 002b:00007fd398bae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 270.480491][ T8516] RAX: ffffffffffffffda RBX: 00007fd39abd5fa0 RCX: 00007fd39a95c799 [ 270.480499][ T8516] RDX: 0000000000000026 RSI: 0000200000000440 RDI: 0000000000000005 [ 270.480505][ T8516] RBP: 00007fd398bae090 R08: 0000000000000000 R09: 0000000000000000 [ 270.480512][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.480518][ T8516] R13: 00007fd39abd6038 R14: 00007fd39abd5fa0 R15: 00007ffe5c9498e8 [ 270.480534][ T8516] [ 272.778018][ T8556] FAULT_INJECTION: forcing a failure. [ 272.778018][ T8556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.778150][ T8556] CPU: 0 UID: 0 PID: 8556 Comm: syz.0.938 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 272.778175][ T8556] Tainted: [L]=SOFTLOCKUP [ 272.778182][ T8556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 272.778192][ T8556] Call Trace: [ 272.778200][ T8556] [ 272.778219][ T8556] dump_stack_lvl+0xe8/0x150 [ 272.778251][ T8556] should_fail_ex+0x46b/0x600 [ 272.778278][ T8556] _copy_to_user+0x31/0xb0 [ 272.778308][ T8556] simple_read_from_buffer+0xe1/0x170 [ 272.778334][ T8556] proc_fail_nth_read+0x1be/0x230 [ 272.778362][ T8556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.778389][ T8556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.778411][ T8556] vfs_read+0x212/0xa80 [ 272.778443][ T8556] ? preempt_schedule_thunk+0x16/0x30 [ 272.778469][ T8556] ? __pfx_vfs_read+0x10/0x10 [ 272.778495][ T8556] ? preempt_schedule_thunk+0x16/0x30 [ 272.778522][ T8556] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 272.778551][ T8556] ? mutex_lock_nested+0x152/0x1d0 [ 272.778572][ T8556] ? fdget_pos+0x252/0x320 [ 272.778601][ T8556] ksys_read+0x156/0x270 [ 272.778629][ T8556] ? __pfx_ksys_read+0x10/0x10 [ 272.778665][ T8556] do_syscall_64+0x14d/0xf80 [ 272.778696][ T8556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.778714][ T8556] ? clear_bhb_loop+0x40/0x90 [ 272.778739][ T8556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.778759][ T8556] RIP: 0033:0x7fd39a91cfce [ 272.778779][ T8556] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 272.778813][ T8556] RSP: 002b:00007fd398b8cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.778834][ T8556] RAX: ffffffffffffffda RBX: 00007fd398b8d6c0 RCX: 00007fd39a91cfce [ 272.778849][ T8556] RDX: 000000000000000f RSI: 00007fd398b8d0a0 RDI: 0000000000000006 [ 272.778862][ T8556] RBP: 00007fd398b8d090 R08: 0000000000000000 R09: 0000000000000000 [ 272.778873][ T8556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.778885][ T8556] R13: 00007fd39abd6128 R14: 00007fd39abd6090 R15: 00007ffe5c9498e8 [ 272.779041][ T8556] [ 274.429340][ T8579] FAULT_INJECTION: forcing a failure. [ 274.429340][ T8579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.429376][ T8579] CPU: 1 UID: 0 PID: 8579 Comm: syz.4.947 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 274.429404][ T8579] Tainted: [L]=SOFTLOCKUP [ 274.429411][ T8579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 274.429422][ T8579] Call Trace: [ 274.429430][ T8579] [ 274.429438][ T8579] dump_stack_lvl+0xe8/0x150 [ 274.429471][ T8579] should_fail_ex+0x46b/0x600 [ 274.429499][ T8579] _copy_to_iter+0x589/0x17d0 [ 274.429536][ T8579] ? __pfx__copy_to_iter+0x10/0x10 [ 274.429557][ T8579] ? do_raw_spin_lock+0x12b/0x2f0 [ 274.429587][ T8579] ? __lock_acquire+0x6b5/0x2cf0 [ 274.429609][ T8579] ? __skb_checksum_complete+0x13d/0x3d0 [ 274.429637][ T8579] udpv6_recvmsg+0x98f/0x15e0 [ 274.429663][ T8579] ? __lock_acquire+0x6b5/0x2cf0 [ 274.429696][ T8579] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 274.429733][ T8579] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 274.429758][ T8579] inet6_recvmsg+0x1fe/0x6c0 [ 274.429788][ T8579] ? __pfx_inet6_recvmsg+0x10/0x10 [ 274.429819][ T8579] ? is_bpf_text_address+0x26/0x2b0 [ 274.429847][ T8579] ? kernel_text_address+0xa5/0xe0 [ 274.429868][ T8579] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 274.429893][ T8579] ? security_socket_recvmsg+0x7e/0x2c0 [ 274.429920][ T8579] ? __pfx_inet6_recvmsg+0x10/0x10 [ 274.429944][ T8579] sock_recvmsg+0xfa/0x1b0 [ 274.429971][ T8579] sock_read_iter+0x25a/0x330 [ 274.429996][ T8579] ? __pfx_sock_read_iter+0x10/0x10 [ 274.430037][ T8579] do_iter_readv_writev+0x62b/0x8d0 [ 274.430070][ T8579] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 274.430107][ T8579] ? rw_verify_area+0x2ac/0x4e0 [ 274.430136][ T8579] vfs_readv+0x292/0x850 [ 274.430166][ T8579] ? __pfx_vfs_readv+0x10/0x10 [ 274.430201][ T8579] ? __fget_files+0x2a/0x420 [ 274.430228][ T8579] ? __fget_files+0x3a6/0x420 [ 274.430250][ T8579] ? __fget_files+0x2a/0x420 [ 274.430280][ T8579] do_readv+0x15a/0x2e0 [ 274.430302][ T8579] ? __pfx_do_readv+0x10/0x10 [ 274.430334][ T8579] do_syscall_64+0x14d/0xf80 [ 274.430361][ T8579] ? trace_irq_disable+0x3b/0x150 [ 274.430383][ T8579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.430402][ T8579] ? clear_bhb_loop+0x40/0x90 [ 274.430426][ T8579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.430444][ T8579] RIP: 0033:0x7fa260a3c799 [ 274.430463][ T8579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.430479][ T8579] RSP: 002b:00007fa25ec8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 274.430499][ T8579] RAX: ffffffffffffffda RBX: 00007fa260cb5fa0 RCX: 00007fa260a3c799 [ 274.430513][ T8579] RDX: 0000000000000003 RSI: 0000200000002680 RDI: 0000000000000003 [ 274.430525][ T8579] RBP: 00007fa25ec8e090 R08: 0000000000000000 R09: 0000000000000000 [ 274.430537][ T8579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.430549][ T8579] R13: 00007fa260cb6038 R14: 00007fa260cb5fa0 R15: 00007ffee1a27408 [ 274.430584][ T8579] [ 274.942982][ T8599] CUSE: unknown device info "" [ 274.942999][ T8599] CUSE: unknown device info "" [ 274.943008][ T8599] CUSE: unknown device info "" [ 274.943016][ T8599] CUSE: unknown device info "" [ 274.943024][ T8599] CUSE: unknown device info "ÿ" [ 274.943032][ T8599] CUSE: unknown device info "" [ 274.943040][ T8599] CUSE: unknown device info "" [ 274.943048][ T8599] CUSE: unknown device info "ÿ" [ 274.943056][ T8599] CUSE: DEVNAME unspecified [ 278.208390][ T8632] dvmrp1: entered allmulticast mode [ 278.222534][ T8632] dvmrp1: left allmulticast mode [ 278.678412][ T8652] FAULT_INJECTION: forcing a failure. [ 278.678412][ T8652] name failslab, interval 1, probability 0, space 0, times 0 [ 278.678448][ T8652] CPU: 0 UID: 0 PID: 8652 Comm: syz.0.973 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 278.678475][ T8652] Tainted: [L]=SOFTLOCKUP [ 278.678482][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 278.678493][ T8652] Call Trace: [ 278.678501][ T8652] [ 278.678510][ T8652] dump_stack_lvl+0xe8/0x150 [ 278.678544][ T8652] should_fail_ex+0x46b/0x600 [ 278.678574][ T8652] should_failslab+0xa8/0x100 [ 278.678596][ T8652] __kmalloc_noprof+0xdf/0x7b0 [ 278.678624][ T8652] ? tomoyo_encode+0x28b/0x550 [ 278.678651][ T8652] tomoyo_encode+0x28b/0x550 [ 278.678678][ T8652] tomoyo_realpath_from_path+0x58d/0x5d0 [ 278.678711][ T8652] ? tomoyo_path_number_perm+0x219/0x630 [ 278.678740][ T8652] tomoyo_path_number_perm+0x246/0x630 [ 278.678771][ T8652] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 278.678802][ T8652] ? __lock_acquire+0x6b5/0x2cf0 [ 278.678855][ T8652] ? __fget_files+0x2a/0x420 [ 278.678889][ T8652] ? __fget_files+0x2a/0x420 [ 278.678912][ T8652] ? __fget_files+0x3a6/0x420 [ 278.678933][ T8652] ? __fget_files+0x2a/0x420 [ 278.678961][ T8652] security_file_ioctl+0xc3/0x2a0 [ 278.678994][ T8652] __se_sys_ioctl+0x47/0x170 [ 278.679026][ T8652] do_syscall_64+0x14d/0xf80 [ 278.679053][ T8652] ? trace_irq_disable+0x3b/0x150 [ 278.679075][ T8652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.679095][ T8652] ? clear_bhb_loop+0x40/0x90 [ 278.679119][ T8652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.679138][ T8652] RIP: 0033:0x7fd39a95c799 [ 278.679155][ T8652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.679171][ T8652] RSP: 002b:00007fd398bae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.679191][ T8652] RAX: ffffffffffffffda RBX: 00007fd39abd5fa0 RCX: 00007fd39a95c799 [ 278.679205][ T8652] RDX: 00002000000002c0 RSI: 0000000040045701 RDI: 0000000000000004 [ 278.679217][ T8652] RBP: 00007fd398bae090 R08: 0000000000000000 R09: 0000000000000000 [ 278.679230][ T8652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.679241][ T8652] R13: 00007fd39abd6038 R14: 00007fd39abd5fa0 R15: 00007ffe5c9498e8 [ 278.679273][ T8652] [ 278.679292][ T8652] ERROR: Out of memory at tomoyo_realpath_from_path. [ 281.316881][ T8687] FAULT_INJECTION: forcing a failure. [ 281.316881][ T8687] name failslab, interval 1, probability 0, space 0, times 0 [ 281.316906][ T8687] CPU: 1 UID: 0 PID: 8687 Comm: syz.0.988 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 281.316921][ T8687] Tainted: [L]=SOFTLOCKUP [ 281.316925][ T8687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 281.316931][ T8687] Call Trace: [ 281.316936][ T8687] [ 281.316941][ T8687] dump_stack_lvl+0xe8/0x150 [ 281.316961][ T8687] should_fail_ex+0x46b/0x600 [ 281.316977][ T8687] should_failslab+0xa8/0x100 [ 281.316989][ T8687] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 281.317005][ T8687] ? __alloc_skb+0x1d0/0x7d0 [ 281.317018][ T8687] ? lockdep_hardirqs_on+0x7a/0x110 [ 281.317041][ T8687] __alloc_skb+0x1d0/0x7d0 [ 281.317057][ T8687] netlink_sendmsg+0x5d4/0xb40 [ 281.317076][ T8687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.317091][ T8687] ? unwind_get_return_address+0x4d/0x90 [ 281.317103][ T8687] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 281.317120][ T8687] ____sys_sendmsg+0x94c/0x9c0 [ 281.317134][ T8687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.317148][ T8687] ? import_iovec+0x73/0xa0 [ 281.317165][ T8687] ___sys_sendmsg+0x2a5/0x360 [ 281.317177][ T8687] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.317204][ T8687] ? __fget_files+0x2a/0x420 [ 281.317216][ T8687] ? __fget_files+0x3a6/0x420 [ 281.317234][ T8687] __x64_sys_sendmsg+0x1c3/0x2a0 [ 281.317245][ T8687] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.317260][ T8687] ? __pfx_ksys_write+0x10/0x10 [ 281.317281][ T8687] do_syscall_64+0x14d/0xf80 [ 281.317295][ T8687] ? trace_irq_disable+0x3b/0x150 [ 281.317307][ T8687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.317318][ T8687] ? clear_bhb_loop+0x40/0x90 [ 281.317330][ T8687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.317340][ T8687] RIP: 0033:0x7fd39a95c799 [ 281.317352][ T8687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.317361][ T8687] RSP: 002b:00007fd398bae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.317374][ T8687] RAX: ffffffffffffffda RBX: 00007fd39abd5fa0 RCX: 00007fd39a95c799 [ 281.317381][ T8687] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 281.317388][ T8687] RBP: 00007fd398bae090 R08: 0000000000000000 R09: 0000000000000000 [ 281.317394][ T8687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.317400][ T8687] R13: 00007fd39abd6038 R14: 00007fd39abd5fa0 R15: 00007ffe5c9498e8 [ 281.317415][ T8687] [ 283.996219][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 284.188227][ T31] usb 1-1: config 12 has an invalid interface number: 24 but max is 0 [ 284.188255][ T31] usb 1-1: config 12 has no interface number 0 [ 284.188287][ T31] usb 1-1: config 12 interface 24 has no altsetting 0 [ 284.193348][ T31] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ae6, bcdDevice=a0.54 [ 284.193458][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.193479][ T31] usb 1-1: Product: syz [ 284.193493][ T31] usb 1-1: Manufacturer: syz [ 284.193505][ T31] usb 1-1: SerialNumber: syz [ 286.105377][ T31] option 1-1:12.24: GSM modem (1-port) converter detected [ 286.118186][ T31] usb 1-1: USB disconnect, device number 10 [ 286.120580][ T31] option 1-1:12.24: device disconnected [ 286.451068][ T8781] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1020'. [ 286.452061][ T8781] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1020'. [ 286.608452][ T8786] netlink: 'syz.4.1023': attribute type 61 has an invalid length. [ 286.608474][ T8786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1023'. [ 286.700234][ T8788] syz_tun: entered allmulticast mode [ 286.767938][ T8792] FAULT_INJECTION: forcing a failure. [ 286.767938][ T8792] name failslab, interval 1, probability 0, space 0, times 0 [ 286.767974][ T8792] CPU: 0 UID: 0 PID: 8792 Comm: syz.1.1026 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 286.768001][ T8792] Tainted: [L]=SOFTLOCKUP [ 286.768008][ T8792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 286.768019][ T8792] Call Trace: [ 286.768027][ T8792] [ 286.768036][ T8792] dump_stack_lvl+0xe8/0x150 [ 286.768069][ T8792] should_fail_ex+0x46b/0x600 [ 286.768098][ T8792] should_failslab+0xa8/0x100 [ 286.768120][ T8792] __kmalloc_noprof+0xdf/0x7b0 [ 286.768149][ T8792] ? tomoyo_encode+0x28b/0x550 [ 286.768176][ T8792] tomoyo_encode+0x28b/0x550 [ 286.768204][ T8792] tomoyo_realpath_from_path+0x58d/0x5d0 [ 286.768235][ T8792] ? tomoyo_path_number_perm+0x219/0x630 [ 286.768264][ T8792] tomoyo_path_number_perm+0x246/0x630 [ 286.768295][ T8792] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 286.768327][ T8792] ? __lock_acquire+0x6b5/0x2cf0 [ 286.768379][ T8792] ? __fget_files+0x2a/0x420 [ 286.768406][ T8792] ? __fget_files+0x2a/0x420 [ 286.768428][ T8792] ? __fget_files+0x3a6/0x420 [ 286.768450][ T8792] ? __fget_files+0x2a/0x420 [ 286.768477][ T8792] security_file_ioctl+0xc3/0x2a0 [ 286.768510][ T8792] __se_sys_ioctl+0x47/0x170 [ 286.768541][ T8792] do_syscall_64+0x14d/0xf80 [ 286.768568][ T8792] ? trace_irq_disable+0x3b/0x150 [ 286.768590][ T8792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.768610][ T8792] ? clear_bhb_loop+0x40/0x90 [ 286.768634][ T8792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.768653][ T8792] RIP: 0033:0x7fc21d06c799 [ 286.768672][ T8792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.768688][ T8792] RSP: 002b:00007fc21b2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.768708][ T8792] RAX: ffffffffffffffda RBX: 00007fc21d2e5fa0 RCX: 00007fc21d06c799 [ 286.768722][ T8792] RDX: 0000200000000480 RSI: 0000000040103e05 RDI: 0000000000000007 [ 286.768735][ T8792] RBP: 00007fc21b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 286.768748][ T8792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.768759][ T8792] R13: 00007fc21d2e6038 R14: 00007fc21d2e5fa0 R15: 00007ffc207a4548 [ 286.768788][ T8792] [ 286.768807][ T8792] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.924316][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 287.117550][ T1441] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.169764][ T1441] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.176621][ T1441] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.176665][ T1441] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.333503][ T8801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.337729][ T8801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.227313][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 290.816875][ T8850] FAULT_INJECTION: forcing a failure. [ 290.816875][ T8850] name failslab, interval 1, probability 0, space 0, times 0 [ 290.816916][ T8850] CPU: 1 UID: 0 PID: 8850 Comm: syz.1.1048 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 290.816974][ T8850] Tainted: [L]=SOFTLOCKUP [ 290.816980][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 290.816992][ T8850] Call Trace: [ 290.817000][ T8850] [ 290.817008][ T8850] dump_stack_lvl+0xe8/0x150 [ 290.817042][ T8850] should_fail_ex+0x46b/0x600 [ 290.817070][ T8850] should_failslab+0xa8/0x100 [ 290.817090][ T8850] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 290.817128][ T8850] ? __alloc_skb+0x1d0/0x7d0 [ 290.817152][ T8850] ? lockdep_hardirqs_on+0x7a/0x110 [ 290.817182][ T8850] __alloc_skb+0x1d0/0x7d0 [ 290.817212][ T8850] netlink_sendmsg+0x5d4/0xb40 [ 290.817246][ T8850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.817273][ T8850] ? unwind_get_return_address+0x4d/0x90 [ 290.817296][ T8850] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 290.817326][ T8850] ____sys_sendmsg+0x94c/0x9c0 [ 290.817351][ T8850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.817378][ T8850] ? import_iovec+0x73/0xa0 [ 290.817408][ T8850] ___sys_sendmsg+0x2a5/0x360 [ 290.817432][ T8850] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.817484][ T8850] ? __fget_files+0x2a/0x420 [ 290.817507][ T8850] ? __fget_files+0x3a6/0x420 [ 290.817539][ T8850] __x64_sys_sendmsg+0x1c3/0x2a0 [ 290.817561][ T8850] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 290.817588][ T8850] ? __pfx_ksys_write+0x10/0x10 [ 290.817624][ T8850] do_syscall_64+0x14d/0xf80 [ 290.817650][ T8850] ? trace_irq_disable+0x3b/0x150 [ 290.817671][ T8850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.817691][ T8850] ? clear_bhb_loop+0x40/0x90 [ 290.817714][ T8850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.817733][ T8850] RIP: 0033:0x7fc21d06c799 [ 290.817751][ T8850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.817768][ T8850] RSP: 002b:00007fc21b2be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.817788][ T8850] RAX: ffffffffffffffda RBX: 00007fc21d2e5fa0 RCX: 00007fc21d06c799 [ 290.817802][ T8850] RDX: 0000000020000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 290.817815][ T8850] RBP: 00007fc21b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 290.817826][ T8850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.817837][ T8850] R13: 00007fc21d2e6038 R14: 00007fc21d2e5fa0 R15: 00007ffc207a4548 [ 290.817867][ T8850] [ 291.203859][ T36] libceph: connect (1)[c::]:6789 error -101 [ 291.204208][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 291.293075][ T8862] ceph: No mds server is up or the cluster is laggy [ 291.876587][ T5797] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 292.030653][ T5797] usb 5-1: config 12 has an invalid interface number: 24 but max is 0 [ 292.030681][ T5797] usb 5-1: config 12 has no interface number 0 [ 292.030712][ T5797] usb 5-1: config 12 interface 24 has no altsetting 0 [ 292.032996][ T5797] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ae6, bcdDevice=a0.54 [ 292.033025][ T5797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.033045][ T5797] usb 5-1: Product: syz [ 292.033059][ T5797] usb 5-1: Manufacturer: syz [ 292.033073][ T5797] usb 5-1: SerialNumber: syz [ 294.570040][ T8940] FAULT_INJECTION: forcing a failure. [ 294.570040][ T8940] name failslab, interval 1, probability 0, space 0, times 0 [ 294.570098][ T8940] CPU: 1 UID: 0 PID: 8940 Comm: syz.1.1080 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 294.570125][ T8940] Tainted: [L]=SOFTLOCKUP [ 294.570132][ T8940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 294.570144][ T8940] Call Trace: [ 294.570152][ T8940] [ 294.570160][ T8940] dump_stack_lvl+0xe8/0x150 [ 294.570194][ T8940] should_fail_ex+0x46b/0x600 [ 294.570222][ T8940] should_failslab+0xa8/0x100 [ 294.570244][ T8940] __kmalloc_noprof+0xdf/0x7b0 [ 294.570270][ T8940] ? tomoyo_encode+0x28b/0x550 [ 294.570294][ T8940] tomoyo_encode+0x28b/0x550 [ 294.570314][ T8940] tomoyo_realpath_from_path+0x58d/0x5d0 [ 294.570338][ T8940] ? tomoyo_path_number_perm+0x219/0x630 [ 294.570360][ T8940] tomoyo_path_number_perm+0x246/0x630 [ 294.570383][ T8940] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 294.570407][ T8940] ? do_raw_spin_lock+0x12b/0x2f0 [ 294.570435][ T8940] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 294.570473][ T8940] ? __rcu_read_unlock+0x83/0xe0 [ 294.570493][ T8940] ? __fget_files+0x2a/0x420 [ 294.570510][ T8940] ? __fget_files+0x3a6/0x420 [ 294.570526][ T8940] ? __fget_files+0x2a/0x420 [ 294.570547][ T8940] security_file_ioctl+0xc3/0x2a0 [ 294.570571][ T8940] __se_sys_ioctl+0x47/0x170 [ 294.570603][ T8940] do_syscall_64+0x14d/0xf80 [ 294.570625][ T8940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.570639][ T8940] ? clear_bhb_loop+0x40/0x90 [ 294.570657][ T8940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.570671][ T8940] RIP: 0033:0x7fc21d06c799 [ 294.570686][ T8940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.570698][ T8940] RSP: 002b:00007fc21b27c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.570715][ T8940] RAX: ffffffffffffffda RBX: 00007fc21d2e6180 RCX: 00007fc21d06c799 [ 294.570726][ T8940] RDX: 00002000000002c0 RSI: 00000000c06864a2 RDI: 0000000000000008 [ 294.570736][ T8940] RBP: 00007fc21b27c090 R08: 0000000000000000 R09: 0000000000000000 [ 294.570745][ T8940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.570754][ T8940] R13: 00007fc21d2e6218 R14: 00007fc21d2e6180 R15: 00007ffc207a4548 [ 294.570777][ T8940] [ 294.570847][ T8940] ERROR: Out of memory at tomoyo_realpath_from_path. [ 295.494928][ T5797] option 5-1:12.24: GSM modem (1-port) converter detected [ 295.607672][ T5797] usb 5-1: USB disconnect, device number 11 [ 296.576332][ T5797] option 5-1:12.24: device disconnected [ 296.894610][ T8964] FAULT_INJECTION: forcing a failure. [ 296.894610][ T8964] name failslab, interval 1, probability 0, space 0, times 0 [ 296.894646][ T8964] CPU: 0 UID: 0 PID: 8964 Comm: syz.1.1086 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 296.894673][ T8964] Tainted: [L]=SOFTLOCKUP [ 296.894681][ T8964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 296.894692][ T8964] Call Trace: [ 296.894699][ T8964] [ 296.894708][ T8964] dump_stack_lvl+0xe8/0x150 [ 296.894742][ T8964] should_fail_ex+0x46b/0x600 [ 296.894771][ T8964] should_failslab+0xa8/0x100 [ 296.894793][ T8964] __kmalloc_noprof+0xdf/0x7b0 [ 296.894822][ T8964] ? tomoyo_encode+0x28b/0x550 [ 296.894850][ T8964] tomoyo_encode+0x28b/0x550 [ 296.894876][ T8964] tomoyo_realpath_from_path+0x58d/0x5d0 [ 296.894909][ T8964] ? tomoyo_path_number_perm+0x219/0x630 [ 296.894939][ T8964] tomoyo_path_number_perm+0x246/0x630 [ 296.894970][ T8964] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 296.895002][ T8964] ? __lock_acquire+0x6b5/0x2cf0 [ 296.895055][ T8964] ? __fget_files+0x2a/0x420 [ 296.895083][ T8964] ? __fget_files+0x2a/0x420 [ 296.895105][ T8964] ? __fget_files+0x3a6/0x420 [ 296.895127][ T8964] ? __fget_files+0x2a/0x420 [ 296.895155][ T8964] security_file_ioctl+0xc3/0x2a0 [ 296.895187][ T8964] __se_sys_ioctl+0x47/0x170 [ 296.895219][ T8964] do_syscall_64+0x14d/0xf80 [ 296.895247][ T8964] ? trace_irq_disable+0x3b/0x150 [ 296.895269][ T8964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.895289][ T8964] ? clear_bhb_loop+0x40/0x90 [ 296.895313][ T8964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.895332][ T8964] RIP: 0033:0x7fc21d06c799 [ 296.895350][ T8964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.895373][ T8964] RSP: 002b:00007fc21b27c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.895395][ T8964] RAX: ffffffffffffffda RBX: 00007fc21d2e6180 RCX: 00007fc21d06c799 [ 296.895409][ T8964] RDX: 00002000000003c0 RSI: 00000000c01864c6 RDI: 0000000000000008 [ 296.895422][ T8964] RBP: 00007fc21b27c090 R08: 0000000000000000 R09: 0000000000000000 [ 296.895434][ T8964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.895445][ T8964] R13: 00007fc21d2e6218 R14: 00007fc21d2e6180 R15: 00007ffc207a4548 [ 296.895477][ T8964] [ 296.895496][ T8964] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.129704][ T8976] program syz.0.1085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.466146][ T5797] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 298.615938][ T5797] usb 5-1: Using ep0 maxpacket: 8 [ 298.622720][ T5797] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 298.622752][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.687387][ T5797] usb 5-1: config 0 descriptor?? [ 298.704115][ T5797] pwc: Logitech QuickCam Zoom USB webcam detected. [ 298.704130][ T5797] pwc: Warning: more than 1 configuration available. [ 299.074797][ T5932] IPVS: starting estimator thread 0... [ 299.082209][ T8997] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 299.186241][ T9000] IPVS: using max 9 ests per chain, 21600 per kthread [ 299.462179][ T9004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1101'. [ 299.859708][ T1836] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 300.006133][ T1836] usb 2-1: Using ep0 maxpacket: 8 [ 300.010788][ T1836] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 300.010845][ T1836] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 300.010870][ T1836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 300.010895][ T1836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 300.015012][ T1836] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 300.015042][ T1836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.015062][ T1836] usb 2-1: Product: syz [ 300.015076][ T1836] usb 2-1: Manufacturer: syz [ 300.015089][ T1836] usb 2-1: SerialNumber: syz [ 300.103122][ T1836] usb 2-1: config 0 descriptor?? [ 300.119805][ T1836] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 300.324178][ T1836] usb 2-1: USB disconnect, device number 6 [ 301.206542][ T5797] pwc: Failed to set LED on/off time (-71) [ 301.210621][ T5797] pwc: send_video_command error -71 [ 301.210638][ T5797] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 301.210752][ T5797] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 301.216383][ T5797] usb 5-1: USB disconnect, device number 12 [ 301.876029][ T5797] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 301.882927][ T9037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1114'. [ 302.837540][ T5797] usb 5-1: config 12 has an invalid interface number: 24 but max is 0 [ 302.837568][ T5797] usb 5-1: config 12 has no interface number 0 [ 302.837598][ T5797] usb 5-1: config 12 interface 24 has no altsetting 0 [ 302.840947][ T5797] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ae6, bcdDevice=a0.54 [ 302.840977][ T5797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.840997][ T5797] usb 5-1: Product: syz [ 302.841011][ T5797] usb 5-1: Manufacturer: syz [ 302.841026][ T5797] usb 5-1: SerialNumber: syz [ 303.113523][ T9046] 9p: Bad value for 'rfdno' [ 303.126029][ T9046] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 303.457933][ T5797] option 5-1:12.24: GSM modem (1-port) converter detected [ 303.496741][ T5797] usb 5-1: USB disconnect, device number 13 [ 303.526941][ T5797] option 5-1:12.24: device disconnected [ 305.341558][ T9077] fuse: Bad value for 'fd' [ 307.695972][ T5878] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 307.846453][ T9116] Driver unsupported XDP return value 0 on prog (id 72) dev N/A, expect packet loss! [ 307.870246][ T5878] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 307.870275][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.870431][ T5878] usb 1-1: Product: syz [ 307.870445][ T5878] usb 1-1: Manufacturer: syz [ 307.870460][ T5878] usb 1-1: SerialNumber: syz [ 307.914318][ T5878] usb 1-1: config 0 descriptor?? [ 308.087851][ T9125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1149'. [ 308.122704][ T9125] ip6gre1: entered promiscuous mode [ 308.122728][ T9125] ip6gre1: entered allmulticast mode [ 308.154958][ T9128] FAULT_INJECTION: forcing a failure. [ 308.154958][ T9128] name failslab, interval 1, probability 0, space 0, times 0 [ 308.154996][ T9128] CPU: 1 UID: 0 PID: 9128 Comm: syz.4.1149 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 308.155020][ T9128] Tainted: [L]=SOFTLOCKUP [ 308.155027][ T9128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 308.155039][ T9128] Call Trace: [ 308.155046][ T9128] [ 308.155056][ T9128] dump_stack_lvl+0xe8/0x150 [ 308.155088][ T9128] should_fail_ex+0x46b/0x600 [ 308.155113][ T9128] should_failslab+0xa8/0x100 [ 308.155132][ T9128] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 308.155159][ T9128] ? __alloc_skb+0x1d0/0x7d0 [ 308.155200][ T9128] ? lockdep_hardirqs_on+0x7a/0x110 [ 308.155230][ T9128] __alloc_skb+0x1d0/0x7d0 [ 308.155259][ T9128] alloc_skb_with_frags+0xca/0x890 [ 308.155300][ T9128] ? __lock_acquire+0x6b5/0x2cf0 [ 308.155322][ T9128] sock_alloc_send_pskb+0x884/0x9a0 [ 308.155344][ T9128] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 308.155368][ T9128] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 308.155387][ T9128] ? dev_get_by_index+0x22/0x2e0 [ 308.155403][ T9128] ? dev_get_by_index+0x22/0x2e0 [ 308.155422][ T9128] packet_sendmsg+0x33e5/0x50f0 [ 308.155453][ T9128] ? __lock_acquire+0x6b5/0x2cf0 [ 308.155472][ T9128] ? __lock_acquire+0x6b5/0x2cf0 [ 308.155488][ T9128] ? smack_socket_sendmsg+0x1f8/0x590 [ 308.155506][ T9128] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 308.155520][ T9128] ? get_pid_task+0x20/0x1f0 [ 308.155538][ T9128] ? __pfx_packet_sendmsg+0x10/0x10 [ 308.155562][ T9128] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 308.155586][ T9128] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.155606][ T9128] ? __pfx_packet_sendmsg+0x10/0x10 [ 308.155625][ T9128] __sys_sendto+0x67f/0x710 [ 308.155649][ T9128] ? __pfx___sys_sendto+0x10/0x10 [ 308.155686][ T9128] ? ksys_write+0x248/0x270 [ 308.155708][ T9128] ? __pfx_ksys_write+0x10/0x10 [ 308.155731][ T9128] __x64_sys_sendto+0xde/0x100 [ 308.155753][ T9128] do_syscall_64+0x14d/0xf80 [ 308.155773][ T9128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.155788][ T9128] ? clear_bhb_loop+0x40/0x90 [ 308.155808][ T9128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.155822][ T9128] RIP: 0033:0x7fa260a3c799 [ 308.155836][ T9128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.155849][ T9128] RSP: 002b:00007fa25ec6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 308.155864][ T9128] RAX: ffffffffffffffda RBX: 00007fa260cb6090 RCX: 00007fa260a3c799 [ 308.155875][ T9128] RDX: 0000000000000001 RSI: 0000200000000a40 RDI: 0000000000000003 [ 308.155883][ T9128] RBP: 00007fa25ec6d090 R08: 0000200000000000 R09: 0000000000000014 [ 308.155892][ T9128] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000001 [ 308.155901][ T9128] R13: 00007fa260cb6128 R14: 00007fa260cb6090 R15: 00007ffee1a27408 [ 308.155923][ T9128] [ 308.342885][ T9130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1148'. [ 308.393863][ T9130] ip6gre3: entered promiscuous mode [ 308.393890][ T9130] ip6gre3: entered allmulticast mode [ 308.546141][ T5878] usb 1-1: Firmware: major: 226, minor: 19, hardware type: UNKNOWN (46) [ 308.717870][ T9142] program syz.1.1153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.786398][ T5878] usb 1-1: Firmware: build [ 308.865627][ T9149] CIFS: iocharset name too long [ 308.882722][ T9150] CIFS: iocharset name too long [ 309.233622][ T5878] usb 1-1: no permanent extended address found, random address set [ 309.233736][ T5878] usb 1-1: atusb_probe: initialization failed, error = -524 [ 309.234510][ T5878] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 309.517563][ T5877] usb 1-1: USB disconnect, device number 11 [ 309.728149][ T9170] kAFS: unable to lookup cell 'ÿ' [ 309.912623][ T9181] FAULT_INJECTION: forcing a failure. [ 309.912623][ T9181] name failslab, interval 1, probability 0, space 0, times 0 [ 309.912657][ T9181] CPU: 0 UID: 0 PID: 9181 Comm: syz.1.1168 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 309.912686][ T9181] Tainted: [L]=SOFTLOCKUP [ 309.912693][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 309.912705][ T9181] Call Trace: [ 309.912712][ T9181] [ 309.912720][ T9181] dump_stack_lvl+0xe8/0x150 [ 309.912752][ T9181] should_fail_ex+0x46b/0x600 [ 309.912792][ T9181] should_failslab+0xa8/0x100 [ 309.912813][ T9181] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 309.912840][ T9181] ? __alloc_skb+0x1d0/0x7d0 [ 309.912864][ T9181] ? lockdep_hardirqs_on+0x7a/0x110 [ 309.912897][ T9181] __alloc_skb+0x1d0/0x7d0 [ 309.912928][ T9181] alloc_skb_with_frags+0xca/0x890 [ 309.912961][ T9181] ? __lock_acquire+0x6b5/0x2cf0 [ 309.912986][ T9181] sock_alloc_send_pskb+0x884/0x9a0 [ 309.913012][ T9181] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 309.913045][ T9181] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 309.913071][ T9181] ? dev_get_by_index+0x22/0x2e0 [ 309.913091][ T9181] ? dev_get_by_index+0x22/0x2e0 [ 309.913119][ T9181] packet_sendmsg+0x33e5/0x50f0 [ 309.913159][ T9181] ? __lock_acquire+0x6b5/0x2cf0 [ 309.913184][ T9181] ? __lock_acquire+0x6b5/0x2cf0 [ 309.913207][ T9181] ? smack_socket_sendmsg+0x1f8/0x590 [ 309.913240][ T9181] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 309.913260][ T9181] ? get_pid_task+0x20/0x1f0 [ 309.913283][ T9181] ? __pfx_packet_sendmsg+0x10/0x10 [ 309.913316][ T9181] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 309.913348][ T9181] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 309.913376][ T9181] ? __pfx_packet_sendmsg+0x10/0x10 [ 309.913402][ T9181] __sys_sendto+0x67f/0x710 [ 309.913432][ T9181] ? __pfx___sys_sendto+0x10/0x10 [ 309.913481][ T9181] ? ksys_write+0x248/0x270 [ 309.913510][ T9181] ? __pfx_ksys_write+0x10/0x10 [ 309.913542][ T9181] __x64_sys_sendto+0xde/0x100 [ 309.913571][ T9181] do_syscall_64+0x14d/0xf80 [ 309.913597][ T9181] ? trace_irq_disable+0x3b/0x150 [ 309.913619][ T9181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.913639][ T9181] ? clear_bhb_loop+0x40/0x90 [ 309.913662][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.913681][ T9181] RIP: 0033:0x7fc21d06c799 [ 309.913700][ T9181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.913716][ T9181] RSP: 002b:00007fc21b2be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 309.913737][ T9181] RAX: ffffffffffffffda RBX: 00007fc21d2e5fa0 RCX: 00007fc21d06c799 [ 309.913751][ T9181] RDX: 000000000000000e RSI: 0000200000000100 RDI: 0000000000000003 [ 309.913762][ T9181] RBP: 00007fc21b2be090 R08: 0000200000000200 R09: 0000000000000014 [ 309.913775][ T9181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.913806][ T9181] R13: 00007fc21d2e6038 R14: 00007fc21d2e5fa0 R15: 00007ffc207a4548 [ 309.913837][ T9181] [ 310.601858][ T9194] program syz.0.1171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.626125][ T5877] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 311.485185][ T60] 512-page[ 311.485185][ T60] 512-page vmalloc region starting at 0xffffc9001586a000 allocated at pcpu_create_chunk+0x34c/0xbe0 [ 311.485214][ T60] list_del corruption. next->prev should be ffffc9001cc80000, but was 0000000000000000. (next=ffffc9001586a000) [ 311.485490][ T60] ------------[ cut here ]------------ [ 311.485494][ T60] kernel BUG at lib/list_debug.c:67! [ 311.485522][ T60] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 311.485538][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 311.485552][ T60] Tainted: [L]=SOFTLOCKUP [ 311.485556][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 311.485563][ T60] Workqueue: hci4 hci_rx_work [ 311.485580][ T60] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 311.485594][ T60] Code: 7c 6d 61 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 3d 9a 82 fd 49 8b 56 08 48 c7 c7 40 6a a6 8b 48 89 de 4c 89 f1 e8 a7 99 7f fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 311.485603][ T60] RSP: 0018:ffffc9000126fa00 EFLAGS: 00010246 [ 311.485612][ T60] RAX: 000000000000006d RBX: ffffc9001cc80000 RCX: 138878eccf87a200 [ 311.485620][ T60] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.485626][ T60] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 311.485632][ T60] R10: dffffc0000000000 R11: ffffed1017124923 R12: 1ffff92002b0d401 [ 311.485640][ T60] R13: dffffc0000000000 R14: ffffc9001586a000 R15: ffffc9001586a008 [ 311.485648][ T60] FS: 0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 311.485656][ T60] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.485663][ T60] CR2: 0000200000019640 CR3: 000000003cdf8000 CR4: 00000000003526f0 [ 311.485673][ T60] Call Trace: [ 311.485678][ T60] [ 311.485684][ T60] kcov_remote_start+0x2af/0x710 [ 311.485697][ T60] hci_rx_work+0x10f/0x1030 [ 311.485712][ T60] ? process_scheduled_works+0xa25/0x1830 [ 311.485726][ T60] process_scheduled_works+0xb02/0x1830 [ 311.485745][ T60] ? __pfx_process_scheduled_works+0x10/0x10 [ 311.485759][ T60] ? assign_work+0x3d5/0x5e0 [ 311.485773][ T60] worker_thread+0xa50/0xfc0 [ 311.485792][ T60] kthread+0x388/0x470 [ 311.485805][ T60] ? __pfx_worker_thread+0x10/0x10 [ 311.485825][ T60] ? __pfx_kthread+0x10/0x10 [ 311.485841][ T60] ret_from_fork+0x51e/0xb90 [ 311.485864][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 311.485884][ T60] ? __switch_to+0xc7d/0x1450 [ 311.485906][ T60] ? __pfx_kthread+0x10/0x10 [ 311.485925][ T60] ret_from_fork_asm+0x1a/0x30 [ 311.485948][ T60] [ 311.485960][ T60] Modules linked in: [ 311.485998][ T60] ---[ end trace 0000000000000000 ]--- [ 311.488289][ T60] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 311.488321][ T60] Code: 7c 6d 61 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 3d 9a 82 fd 49 8b 56 08 48 c7 c7 40 6a a6 8b 48 89 de 4c 89 f1 e8 a7 99 7f fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 311.488337][ T60] RSP: 0018:ffffc9000126fa00 EFLAGS: 00010246 [ 311.488354][ T60] RAX: 000000000000006d RBX: ffffc9001cc80000 RCX: 138878eccf87a200 [ 311.488368][ T60] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.488378][ T60] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 311.488389][ T60] R10: dffffc0000000000 R11: ffffed1017124923 R12: 1ffff92002b0d401 [ 311.488403][ T60] R13: dffffc0000000000 R14: ffffc9001586a000 R15: ffffc9001586a008 [ 311.488417][ T60] FS: 0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 311.488432][ T60] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.488445][ T60] CR2: 0000200000019640 CR3: 0000000037f68000 CR4: 00000000003526f0 [ 311.488463][ T60] Kernel panic - not syncing: Fatal exception [ 311.488738][ T60] Kernel Offset: disabled