last executing test programs: 6m18.182785653s ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000280012800b0001006d616373656300001800028005000900010000000c0001000d0000000000000008000500", @ANYRES32=r1, @ANYBLOB="3483649feb1b8632f8130a89ccc9465be71ddbd9871864d930"], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001c00)=@newsa={0x1fc, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@local}, {@in=@loopback, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0xc4, 0x14, {{'sha256\x00'}, 0x3c0, 0x0, "b97fa6232e62312e0b2d2148531d788598b8c068bac8b739fd6236beda561665b179a7e09a5f696cf607236b428c30832a8a9a464125a696df8266a88448383a8443bec518c0b347cad5e50fcfdf2b9fc617071b81ed76592d6e6796a902a765401ede5e0bf84353bb0dd355beffd4a8db8d6853e007dea3"}}]}, 0x1fc}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200040d1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bca) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) get_robust_list(0x0, &(0x7f0000003780)=0x0, 0x0) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000280)=0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpriority(0x3, 0x0, 0xfffffffd) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/128, 0x80) 6m16.407698395s ago: executing program 0 (id=7): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x9, @empty, 0x2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000e7ffffff00000000001000008583c6"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r2) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r8, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x8}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040014}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000880)={0x4, &(0x7f0000000840)=[{0x2, 0xf4, 0x9, 0x5}, {0xfff9, 0xb2, 0x4, 0xf613}, {0x4, 0x6, 0xf3, 0x8}, {0x4, 0xde, 0xe, 0x8}]}) splice(r4, 0x0, r6, 0x0, 0x7, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000007c0)={'ip6_vti0\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) 6m13.260356384s ago: executing program 0 (id=16): io_setup(0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0x6, @output={0x1000, 0x0, {0x82a, 0xbc}, 0x180001, 0xd}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) stat(&(0x7f0000000280)='./file1\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) write$snddsp(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) fstat(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000001c80)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000440)="b367985a6d06e4d90b7d40a8d59c6b3d177cfd448c14a07af9670c8e8823856515ad5628f0f15ec7664ba0a525fc41ea8e17a2aaf14bd321e11c1690fc9fa5982c247c3a976d8e6d65102eeea6d81fad66dfac543d5ec4c9d2fe57364c1f7219c9c6207ede1edb831b9dda6f3d05593ac8b40e1ceef06764b25aeb333641693649952e7ee7fc0dbf21", 0x89}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="0a106e2e8b9ac8a925ef19eee3398836ebf49c25785c0a6e934ce2026da095eb81980ca595727c14e7e2b5b376d338e68af7947db814aa49a642e916863fb5db07003beb5616dca581b12857e4401f3ec85586d4d84aae795b2e2ae4e3282a1080383c7a91050142a393", 0x6a}, {&(0x7f0000001580)="860fa560a168d21f71553c11796d9d1402eaa61bf4c163062898a71bc5dbbea7005b1cece510ece5854177aa271297d7fb0e8fa9cfcac2f116225ab845714874a0dda275fabea31f624f57b62fd0debe9ea6c8b29c957312907acf5583c24bbaf33fd19d751b168e490290a8b365f01abfb47dcb5c1594cdc0d34635d99ac73e45c1f101039037a5e267f0e0d3651eaf86c8fa61f9797e5e271f61e7a053992e352e015d1278e80f3be6d24db64c35d82eacab02e2d5b0ffd069eda2c2081d45dc8583adde64a9bf6945c4a68f51e44fb999", 0xd2}, {&(0x7f0000000340)="59699a32305c6809d9c82c80cf2e63f518c60c519f43bb60981eb6809beda0695634e5c4c1a988460765104b8cb1", 0x2e}, {&(0x7f0000001680)="b0b6b3dd592a687f6e5be89fdaef8dd907d10bb1ac64ff271ecdfe52a900472f03bb84dd7d339df3c3391535f70a2558ad13a5c71eb25376d2a3fef4ebb4acc26d7394ca86e1685c8a916eb17c2ce92918e03dca4ea29163e34005c51143f852b3e341f28b70f7443bc5ad73f8bd1ab722897302892210d6916b978ce2ca48ba1cc409da21f141f98d4b9062f6ef31a994aa601d14b946c9254f9468931fc43efad1205e273d91528fb99d2f3a8cb302c4942878be", 0xb5}, {&(0x7f0000001740)="d9cd8461f7f807fc2236ca8a4a4d5228f05c21e9a4c6b093f9e47b1b75473cc6be13016e79cfc7f5d5855db9fa161313eb5ad4ebda3fd223a461d4fbc433d54f7b583fb787e23d8fcf90ef3254f66a487405a6360d4a95714b2233c7c53be01cf64293cf29d1840b921b7b5457ee4e15ad5d83d95aa93b32851a972a5f2e5bf5d8045954fd4d91", 0x87}, {&(0x7f0000001800)="c21e224cdd3859facd0f7524f127547275d76d199de32f11a013111e94bc48893679dcc7102f78e52aace106045b58db7be90e514bb6eb3b21ca60ddce079ca7cbeaacb035a7ad8c792735b1940aac33e764926662896e2e2833d8f1add4c9f7fab7d344892587c4f65d1a2fb537508a4cefb3ab00dc0c82f86fcdb0a7ca910e97b92071b846a19881012c540d9cc9e20a11bf24e71a67351d13eaa756e839dc4c6cfc48ad5a7545dcfcd073494653fca5bea19b6aac412189d648edb7bb33df47a7487b800a27aa04ebb969b8ed8e9ffaddd417ff878e508b29e3ecaf3e31b467f76d558dc56bb0dbfaec572aeea6c44cd7bc61c71641", 0xf7}, {&(0x7f0000001900)="3d4fc1023ed7badbe6c0c779ac58a047f466a3c5dff5b96ba668534248a4867f9741d9a1de0750ce01d6990c3f17b07a039ff79b8d533be2dedbef2efc7638d3ac28350716ddb9f81cac450ff0017018d485357c1a426eea9d0027074aac8165dbe274017e41fd6e45fac3ed1bdce0a560c21ac6b406c2485a64a86d658d8908a01381681b927dd85fabf03ba2baf5f02de867ca54041021dc314749b1392564cb750f2a61d2bc2b03011d7566f79814021c", 0xb2}], 0x9, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3, r5, r6}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x90, 0x800}, 0x800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 6m11.754604656s ago: executing program 0 (id=20): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000100000000000000000000e0bf0000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xa, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) (async) dup(r0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) (async, rerun: 32) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) (async, rerun: 64) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) (rerun: 64) 6m10.267637886s ago: executing program 0 (id=26): setuid(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) writev(r4, &(0x7f0000002680)=[{&(0x7f00000025c0)='8', 0x1}, {&(0x7f0000000700)='\x00', 0x1}], 0x2) 6m8.949905187s ago: executing program 32 (id=26): setuid(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) writev(r4, &(0x7f0000002680)=[{&(0x7f00000025c0)='8', 0x1}, {&(0x7f0000000700)='\x00', 0x1}], 0x2) 2m31.21392464s ago: executing program 1 (id=629): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x7540, &(0x7f0000000240)={0x0, 0x0, 0x40, 0x0, 0xfffffffc, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x18ec, &(0x7f0000000400)={0x0, 0x0, 0x2}, &(0x7f00000003c0), &(0x7f0000001480)) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) write(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x4000000009, 0x0) semtimedop(r2, &(0x7f0000000080)=[{0x2, 0x69, 0x800}, {0x2, 0x0, 0x1000}], 0x2, 0x0) semop(r2, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2) 2m30.345826143s ago: executing program 1 (id=632): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x800, 0x15) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[], 0x101000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x3}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfbc, 0x20000008b}, 0x0) getrlimit(0xb, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=ANY=[@ANYBLOB="000000c2", @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b000600650003000000"], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = gettid() r7 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000014c0)=ANY=[], 0x36) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup/file0\x00', &(0x7f0000000280), 0x48008, &(0x7f0000000a00)={[{@usrquota_block_hardlimit}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38]}}, {@size={'size', 0x3d, [0x25, 0x2d, 0x35, 0x36, 0x31, 0x67]}}, {@mode={'mode', 0x3d, 0xffff}}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x67, 0x70, 0x38, 0x32, 0x0, 0x39, 0x2d, 0xd429378ec506f862]}}, {@gid}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x25, 0x0, 0x0, 0x4b, 0x78, 0x39, 0x2d, 0x36]}}, {@huge_within_size}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsname={'fsname', 0x3d, 'wlan1\x00'}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@hash}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '[{-^*'}}]}) waitid(0x1, r6, &(0x7f0000000200), 0x80000002, &(0x7f00000003c0)) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa1065672a3e705cc7fa"], 0x11) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x7f, 0x5}, 0x3e, [0x9, 0x2, 0x9, 0xa, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x8, 0x3, 0x4, 0xf252, 0xa, 0x800, 0x300000, 0x7, 0x4000000e, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x1, 0x3, 0xd, 0x4, 0x3a9, 0x8da8, 0x7834, 0x200, 0x3959, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x5, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc2e, 0x3, 0x9, 0x40010000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x10003, 0x379, 0x9, 0xe, 0x5, 0x8, 0x6, 0x2, 0x4, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc594, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x10, 0x7, 0x7, 0xe8b, 0x1, 0x80000001, 0x7, 0xffffffff, 0xffd, 0x2, 0x3, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x49, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x4, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x2, 0x4, 0x0, 0x9, 0x5, 0x6, 0xd9, 0xc81c, 0x8, 0x401, 0x100005], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0x2, 0x402, 0x40, 0x4, 0x6, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x81, 0x3, 0x4, 0x102, 0x1000, 0x3b, 0x2, 0x4, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x8000, 0x7, 0x2, 0x4, 0x4, 0x10, 0x2, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4ee1, 0xfffffffd, 0x7, 0xe, 0xe, 0xe, 0x2000b, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r9, 0x5501) write$input_event(r9, &(0x7f0000000000)={{}, 0x15}, 0x18) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc2604111, &(0x7f0000002040)={0x0, [[0x0, 0x20], [0x0, 0xfffffffc]]}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) 2m28.644532475s ago: executing program 1 (id=635): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x800, 0x15) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[], 0x101000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x3}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfbc, 0x20000008b}, 0x0) getrlimit(0xb, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=ANY=[@ANYBLOB="000000c2", @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b000600650003000000"], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = gettid() r7 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000014c0)=ANY=[], 0x36) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup/file0\x00', &(0x7f0000000280), 0x48008, &(0x7f0000000a00)={[{@usrquota_block_hardlimit}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38]}}, {@size={'size', 0x3d, [0x25, 0x2d, 0x35, 0x36, 0x31, 0x67]}}, {@mode={'mode', 0x3d, 0xffff}}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x67, 0x70, 0x38, 0x32, 0x0, 0x39, 0x2d, 0xd429378ec506f862]}}, {@gid}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x25, 0x0, 0x0, 0x4b, 0x78, 0x39, 0x2d, 0x36]}}, {@huge_within_size}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsname={'fsname', 0x3d, 'wlan1\x00'}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@hash}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '[{-^*'}}]}) waitid(0x1, r6, &(0x7f0000000200), 0x80000002, &(0x7f00000003c0)) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa1065672a3e705cc7fa"], 0x11) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x7f, 0x5}, 0x3e, [0x9, 0x2, 0x9, 0xa, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x8, 0x3, 0x4, 0xf252, 0xa, 0x800, 0x300000, 0x7, 0x4000000e, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x1, 0x3, 0xd, 0x4, 0x3a9, 0x8da8, 0x7834, 0x200, 0x3959, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x5, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc2e, 0x3, 0x9, 0x40010000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x10003, 0x379, 0x9, 0xe, 0x5, 0x8, 0x6, 0x2, 0x4, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc594, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x10, 0x7, 0x7, 0xe8b, 0x1, 0x80000001, 0x7, 0xffffffff, 0xffd, 0x2, 0x3, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x49, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x4, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x2, 0x4, 0x0, 0x9, 0x5, 0x6, 0xd9, 0xc81c, 0x8, 0x401, 0x100005], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0x2, 0x402, 0x40, 0x4, 0x6, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x81, 0x3, 0x4, 0x102, 0x1000, 0x3b, 0x2, 0x4, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x8000, 0x7, 0x2, 0x4, 0x4, 0x10, 0x2, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4ee1, 0xfffffffd, 0x7, 0xe, 0xe, 0xe, 0x2000b, 0x133, 0x6]}, 0x45c) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{}, 0x15}, 0x18) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc2604111, &(0x7f0000002040)={0x0, [[0x0, 0x20], [0x0, 0xfffffffc]]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) 2m27.506438401s ago: executing program 1 (id=640): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000700), 0x80880) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="1eb67d00000045d77cab0f6b00005ea914"], 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m27.019436315s ago: executing program 1 (id=644): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x800, 0x15) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[], 0x101000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x3}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfbc, 0x20000008b}, 0x0) getrlimit(0xb, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=ANY=[@ANYBLOB="000000c2", @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b000600650003000000"], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = gettid() r7 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000014c0)=ANY=[], 0x36) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup/file0\x00', &(0x7f0000000280), 0x48008, &(0x7f0000000a00)={[{@usrquota_block_hardlimit}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38]}}, {@size={'size', 0x3d, [0x25, 0x2d, 0x35, 0x36, 0x31, 0x67]}}, {@mode={'mode', 0x3d, 0xffff}}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x67, 0x70, 0x38, 0x32, 0x0, 0x39, 0x2d, 0xd429378ec506f862]}}, {@gid}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x25, 0x0, 0x0, 0x4b, 0x78, 0x39, 0x2d, 0x36]}}, {@huge_within_size}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsname={'fsname', 0x3d, 'wlan1\x00'}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@hash}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '[{-^*'}}]}) waitid(0x1, r6, &(0x7f0000000200), 0x80000002, &(0x7f00000003c0)) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa1065672a3e705cc7fa"], 0x11) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x7f, 0x5}, 0x3e, [0x9, 0x2, 0x9, 0xa, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x8, 0x3, 0x4, 0xf252, 0xa, 0x800, 0x300000, 0x7, 0x4000000e, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x1, 0x3, 0xd, 0x4, 0x3a9, 0x8da8, 0x7834, 0x200, 0x3959, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x5, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc2e, 0x3, 0x9, 0x40010000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x10003, 0x379, 0x9, 0xe, 0x5, 0x8, 0x6, 0x2, 0x4, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc594, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x10, 0x7, 0x7, 0xe8b, 0x1, 0x80000001, 0x7, 0xffffffff, 0xffd, 0x2, 0x3, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x49, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x4, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x2, 0x4, 0x0, 0x9, 0x5, 0x6, 0xd9, 0xc81c, 0x8, 0x401, 0x100005], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0x2, 0x402, 0x40, 0x4, 0x6, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x81, 0x3, 0x4, 0x102, 0x1000, 0x3b, 0x2, 0x4, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x8000, 0x7, 0x2, 0x4, 0x4, 0x10, 0x2, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4ee1, 0xfffffffd, 0x7, 0xe, 0xe, 0xe, 0x2000b, 0x133, 0x6]}, 0x45c) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{}, 0x15}, 0x18) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc2604111, &(0x7f0000002040)={0x0, [[0x0, 0x20], [0x0, 0xfffffffc]]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) 2m26.027147807s ago: executing program 1 (id=650): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x0, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x21, 'ERROR\x00', 0x0, "3a537b450c25a0d9e65fb2a76c2f5b27fa25ae06f96d2e05b07e54af9b51"}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bridge0\x00', 'team0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@ip={@dev, @private, 0x0, 0x0, 'caif0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="180d000000000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$admmidi(&(0x7f0000000000), 0x7f, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) 2m10.712698498s ago: executing program 33 (id=650): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x0, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x21, 'ERROR\x00', 0x0, "3a537b450c25a0d9e65fb2a76c2f5b27fa25ae06f96d2e05b07e54af9b51"}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bridge0\x00', 'team0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@ip={@dev, @private, 0x0, 0x0, 'caif0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="180d000000000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$admmidi(&(0x7f0000000000), 0x7f, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) 19.170310235s ago: executing program 6 (id=1078): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20008030) 18.937824112s ago: executing program 6 (id=1082): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RLOPEN(r0, &(0x7f0000000740)={0x18, 0xd, 0x1, {{0x20, 0x2, 0x2}, 0x5}}, 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="1eb67d00000045d77cab0f6b00005ea914"], 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 18.769304451s ago: executing program 6 (id=1084): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000700), 0x80880) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="1eb67d00000045d77cab0f6b00005ea914"], 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 18.328096121s ago: executing program 6 (id=1086): io_setup(0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0x6, @output={0x1000, 0x0, {0x82a, 0xbc}, 0x180001, 0xd}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) fstat(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000001c80)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000440)="b367985a6d06e4d90b7d40a8d59c6b3d177cfd448c14a07af9670c8e8823856515ad5628f0f15ec7664ba0a525fc41ea8e17a2aaf14bd321e11c1690fc9fa5982c247c3a976d8e6d65102eeea6d81fad66dfac543d5ec4c9d2fe57364c1f7219c9c6207ede1edb831b9dda6f3d05593ac8b40e1ceef06764b25aeb333641693649952e7ee7fc0dbf21", 0x89}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="0a106e2e8b9ac8a925ef19eee3398836ebf49c25785c0a6e934ce2026da095eb81980ca595727c14e7e2b5b376d338e68af7947db814aa49a642e916863fb5db07003beb5616dca581b12857e4401f3ec85586d4d84aae795b2e2ae4e3282a1080383c7a91050142a393", 0x6a}, {&(0x7f0000001580)="860fa560a168d21f71553c11796d9d1402eaa61bf4c163062898a71bc5dbbea7005b1cece510ece5854177aa271297d7fb0e8fa9cfcac2f116225ab845714874a0dda275fabea31f624f57b62fd0debe9ea6c8b29c957312907acf5583c24bbaf33fd19d751b168e490290a8b365f01abfb47dcb5c1594cdc0d34635d99ac73e45c1f101039037a5e267f0e0d3651eaf86c8fa61f9797e5e271f61e7a053992e352e015d1278e80f3be6d24db64c35d82eacab02e2d5b0ffd069eda2c2081d45dc8583adde64a9bf6945c4a68f51e44fb999", 0xd2}, {&(0x7f0000000340)="59699a32305c6809d9c82c80cf2e63f518c60c519f43bb60981eb6809beda0695634e5c4c1a988460765104b8cb1", 0x2e}, {&(0x7f0000001680)="b0b6b3dd592a687f6e5be89fdaef8dd907d10bb1ac64ff271ecdfe52a900472f03bb84dd7d339df3c3391535f70a2558ad13a5c71eb25376d2a3fef4ebb4acc26d7394ca86e1685c8a916eb17c2ce92918e03dca4ea29163e34005c51143f852b3e341f28b70f7443bc5ad73f8bd1ab722897302892210d6916b978ce2ca48ba1cc409da21f141f98d4b9062f6ef31a994aa601d14b946c9254f9468931fc43efad1205e273d91528fb99d2f3a8cb302c4942878be", 0xb5}, {&(0x7f0000001740)="d9cd8461f7f807fc2236ca8a4a4d5228f05c21e9a4c6b093f9e47b1b75473cc6be13016e79cfc7f5d5855db9fa161313eb5ad4ebda3fd223a461d4fbc433d54f7b583fb787e23d8fcf90ef3254f66a487405a6360d4a95714b2233c7c53be01cf64293cf29d1840b921b7b5457ee4e15ad5d83d95aa93b32851a972a5f2e5bf5d8045954fd4d91", 0x87}, {&(0x7f0000001800)="c21e224cdd3859facd0f7524f127547275d76d199de32f11a013111e94bc48893679dcc7102f78e52aace106045b58db7be90e514bb6eb3b21ca60ddce079ca7cbeaacb035a7ad8c792735b1940aac33e764926662896e2e2833d8f1add4c9f7fab7d344892587c4f65d1a2fb537508a4cefb3ab00dc0c82f86fcdb0a7ca910e97b92071b846a19881012c540d9cc9e20a11bf24e71a67351d13eaa756e839dc4c6cfc48ad5a7545dcfcd073494653fca5bea19b6aac412189d648edb7bb33df47a7487b800a27aa04ebb969b8ed8e9ffaddd417ff878e508b29e3ecaf3e31b467f76d558dc56bb0dbfaec572aeea6c44cd7bc61c71641", 0xf7}, {&(0x7f0000001900)="3d4fc1023ed7badbe6c0c779ac58a047f466a3c5dff5b96ba668534248a4867f9741d9a1de0750ce01d6990c3f17b07a039ff79b8d533be2dedbef2efc7638d3ac28350716ddb9f81cac450ff0017018d485357c1a426eea9d0027074aac8165dbe274017e41fd6e45fac3ed1bdce0a560c21ac6b406c2485a64a86d658d8908a01381681b927dd85fabf03ba2baf5f02de867ca54041021dc314749b1392564cb750f2a61d2bc2b03011d7566f79814021c", 0xb2}], 0x9, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90, 0x800}, 0x800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 17.105807774s ago: executing program 6 (id=1089): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x3ff, @empty, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x100000000000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xfffe, @broadcast}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x11) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200), 0x4) (fail_nth: 1) socket$inet6(0xa, 0x4, 0x8) 16.710599783s ago: executing program 6 (id=1093): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x2, 0x0, 0x0, 0xe, 0x2}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xfff}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) 16.070353384s ago: executing program 34 (id=1093): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x2, 0x0, 0x0, 0xe, 0x2}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a81", 0xfff}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) 11.90398395s ago: executing program 3 (id=1106): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000000000001706001d00fffe0000"], 0x24}}, 0x0) 11.877072808s ago: executing program 4 (id=1107): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RLOPEN(r0, &(0x7f0000000740)={0x18, 0xd, 0x1, {{0x20, 0x2, 0x2}, 0x5}}, 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="1eb67d00000045d77cab0f6b00005ea914"], 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11.709802973s ago: executing program 5 (id=1109): syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000000c0)="7d9c", 0x2}], 0x1}}], 0x3, 0x40080) shutdown(r0, 0x1) (fail_nth: 1) 11.675211605s ago: executing program 3 (id=1110): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x6}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 11.169769914s ago: executing program 5 (id=1111): io_setup(0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0x6, @output={0x1000, 0x0, {0x82a, 0xbc}, 0x180001, 0xd}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) fstat(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000001c80)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000440)="b367985a6d06e4d90b7d40a8d59c6b3d177cfd448c14a07af9670c8e8823856515ad5628f0f15ec7664ba0a525fc41ea8e17a2aaf14bd321e11c1690fc9fa5982c247c3a976d8e6d65102eeea6d81fad66dfac543d5ec4c9d2fe57364c1f7219c9c6207ede1edb831b9dda6f3d05593ac8b40e1ceef06764b25aeb333641693649952e7ee7fc0dbf21", 0x89}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="0a106e2e8b9ac8a925ef19eee3398836ebf49c25785c0a6e934ce2026da095eb81980ca595727c14e7e2b5b376d338e68af7947db814aa49a642e916863fb5db07003beb5616dca581b12857e4401f3ec85586d4d84aae795b2e2ae4e3282a1080383c7a91050142a393", 0x6a}, {&(0x7f0000001580)="860fa560a168d21f71553c11796d9d1402eaa61bf4c163062898a71bc5dbbea7005b1cece510ece5854177aa271297d7fb0e8fa9cfcac2f116225ab845714874a0dda275fabea31f624f57b62fd0debe9ea6c8b29c957312907acf5583c24bbaf33fd19d751b168e490290a8b365f01abfb47dcb5c1594cdc0d34635d99ac73e45c1f101039037a5e267f0e0d3651eaf86c8fa61f9797e5e271f61e7a053992e352e015d1278e80f3be6d24db64c35d82eacab02e2d5b0ffd069eda2c2081d45dc8583adde64a9bf6945c4a68f51e44fb999", 0xd2}, {&(0x7f0000000340)="59699a32305c6809d9c82c80cf2e63f518c60c519f43bb60981eb6809beda0695634e5c4c1a988460765104b8cb1", 0x2e}, {&(0x7f0000001680)="b0b6b3dd592a687f6e5be89fdaef8dd907d10bb1ac64ff271ecdfe52a900472f03bb84dd7d339df3c3391535f70a2558ad13a5c71eb25376d2a3fef4ebb4acc26d7394ca86e1685c8a916eb17c2ce92918e03dca4ea29163e34005c51143f852b3e341f28b70f7443bc5ad73f8bd1ab722897302892210d6916b978ce2ca48ba1cc409da21f141f98d4b9062f6ef31a994aa601d14b946c9254f9468931fc43efad1205e273d91528fb99d2f3a8cb302c4942878be", 0xb5}, {&(0x7f0000001740)="d9cd8461f7f807fc2236ca8a4a4d5228f05c21e9a4c6b093f9e47b1b75473cc6be13016e79cfc7f5d5855db9fa161313eb5ad4ebda3fd223a461d4fbc433d54f7b583fb787e23d8fcf90ef3254f66a487405a6360d4a95714b2233c7c53be01cf64293cf29d1840b921b7b5457ee4e15ad5d83d95aa93b32851a972a5f2e5bf5d8045954fd4d91", 0x87}, {&(0x7f0000001800)="c21e224cdd3859facd0f7524f127547275d76d199de32f11a013111e94bc48893679dcc7102f78e52aace106045b58db7be90e514bb6eb3b21ca60ddce079ca7cbeaacb035a7ad8c792735b1940aac33e764926662896e2e2833d8f1add4c9f7fab7d344892587c4f65d1a2fb537508a4cefb3ab00dc0c82f86fcdb0a7ca910e97b92071b846a19881012c540d9cc9e20a11bf24e71a67351d13eaa756e839dc4c6cfc48ad5a7545dcfcd073494653fca5bea19b6aac412189d648edb7bb33df47a7487b800a27aa04ebb969b8ed8e9ffaddd417ff878e508b29e3ecaf3e31b467f76d558dc56bb0dbfaec572aeea6c44cd7bc61c71641", 0xf7}, {&(0x7f0000001900)="3d4fc1023ed7badbe6c0c779ac58a047f466a3c5dff5b96ba668534248a4867f9741d9a1de0750ce01d6990c3f17b07a039ff79b8d533be2dedbef2efc7638d3ac28350716ddb9f81cac450ff0017018d485357c1a426eea9d0027074aac8165dbe274017e41fd6e45fac3ed1bdce0a560c21ac6b406c2485a64a86d658d8908a01381681b927dd85fabf03ba2baf5f02de867ca54041021dc314749b1392564cb750f2a61d2bc2b03011d7566f79814021c", 0xb2}], 0x9, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90, 0x800}, 0x800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 10.229426845s ago: executing program 3 (id=1112): r0 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) r3 = io_uring_setup(0x6c95, &(0x7f0000000100)={0x0, 0xf354, 0x10, 0x5, 0x3c5}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r4, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x700}, 0x1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000200000000000086dd60cb800000383afffc000000000000000000000000000001ff020000000000000000000000000001040090786000000060fd902300003a00fe8000000000000000000000000000aafc020000000000000000002069162baf34"], 0x0) recvmmsg(r7, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, 0x0, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x48, 0x30, 0x51b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x48}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e24000000440040000000002d2d000000000000004c37160000200002"], 0x6c}}, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0xeffd) 9.906615051s ago: executing program 5 (id=1113): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) fcntl$setlease(r0, 0x400, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f00000024c0)=ANY=[@ANYBLOB="12010000c166a01083043412767f010203010902120001000000000904"], 0x0) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x4}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="82dac696fc9e337dbd2077f6e9982bc51cf0764c822268b184095c4b5e6eeeead547afbc2da14e7785660f3e1ed1d8af1fdaf4e67a73ae798610", 0x3a}, {&(0x7f0000000240)="e9ebc1ed08125154bb5217d7cf86f6141b9370298e12cc01e0f89cfb1bcd0ee975271b5f8f9c28e9618c4485e46f149867b159efacbb257dde7ad68c8b63e0aade78d2557d5bed1d0d22351e173e8f80d3252add1004c0ff1c699d2ee566ac665e6b9956d57eea619b80b550eff4c58995c659831b75d644d967563d9bce79f6418e3dda0bd8b564d8d4b87da1bb1b08af25ecfd5a4d3b610a8e1b45526de880674de8dc680406cdce2aa506925d9a5537e42da789ef83c6908353efcc06be4d10cd40d7d6eacf8b238bd449d355c8c260fa26bb1e9a04de790524a020ffa5", 0xdf}, {&(0x7f0000000340)="fe65584267005772e5fbe4e37e4cdfb2dedfcf1b4f9a642753790c1cd11caa2e12058dd4e6ae68beb6bea8d4e8644c09ab35ad0395f940d13e864b8c44d1a359559036452e33fd8614ce52b659c6aa517aa0b851b119fa0b967b0b906dcb41d12465aefca73419a442e889e9453946a096b37006d8d005b554f58d184897af70fcbead0a5ef0d144245cc01ee7fbc3d35478a690f3a8834b519c4a3da987ef970d367c05f9c5d2c96f", 0xa9}, {&(0x7f00000001c0)="0cb3fbf57a3666baf5057432841bc7bd4e5648f25e7cb8097dcdb9e66b124059", 0x20}], 0x4}}], 0x2, 0x400c800) getpgrp(0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r1) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r2, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7030000200000007910300000000000070000000100000095000000000000001cc56fbad4e5756058a081283654fcf115029232109ea547f4b0410749548298a8cd7890378780df4c4971c84e179ab11776f5aeb9a95f37c063b126f28dee87354090ab8c3587d88e940857236bcf8e48257f60fe82b47dbdd05670ab671007f819798539cb7eadfe9772113755ab5461d067e14d881a9ea0c2c66e7b80693b07e80f7b318a"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000580)=r4, 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x2e, 0x3, 0x0, "fff600f40f000000000000b967351bca40ba3e27ff7eefad00000000ffffffff", 0x56555959}) syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r6 = creat(&(0x7f0000000040)='./file0\x00', 0x10) close(r6) getpid() r7 = epoll_create1(0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) acct(0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x68, r9, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20000020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r10, &(0x7f0000000100)={0x20000014}) 9.72984409s ago: executing program 2 (id=1114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20008030) 9.729449433s ago: executing program 4 (id=1115): socket$kcm(0x11, 0x200000000000002, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) openat$userio(0xffffffffffffff9c, 0x0, 0x80000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x207}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x0, 0x204, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lseek(r3, 0xfffffffffffffffc, 0x4) sendmmsg$inet6(r2, &(0x7f0000006140), 0x0, 0x20000080) 9.623246652s ago: executing program 2 (id=1116): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) socket$kcm(0x2, 0x200000000000001, 0x0) socket(0x10, 0x3, 0x0) write$snddsp(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x10000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000680)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0), 0x0, 0x8010) shutdown(r0, 0x1) 8.467097792s ago: executing program 4 (id=1117): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4004, r0, 0x2}) ppoll(&(0x7f0000000280)=[{r2, 0x88}, {0xffffffffffffffff, 0x640}, {r2, 0xa005}, {r2, 0x20}], 0x4, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0x8]}, 0x8) 8.383976612s ago: executing program 2 (id=1118): ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000001780)={0x9, @pix_mp}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(0x0, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000080)=' ']}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6967d0cddca5c19298ac54a76e6f725a71762c00"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 8.382654797s ago: executing program 4 (id=1119): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x800, 0x15) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[], 0x101000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x3}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfbc, 0x20000008b}, 0x0) getrlimit(0xb, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=ANY=[@ANYBLOB="000000c2", @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b000600650003000000"], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = gettid() syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup/file0\x00', &(0x7f0000000280), 0x48008, &(0x7f0000000a00)={[{@usrquota_block_hardlimit}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38]}}, {@size={'size', 0x3d, [0x25, 0x2d, 0x35, 0x36, 0x31, 0x67]}}, {@mode={'mode', 0x3d, 0xffff}}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x67, 0x70, 0x38, 0x32, 0x0, 0x39, 0x2d, 0xd429378ec506f862]}}, {@gid}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x25, 0x0, 0x0, 0x4b, 0x78, 0x39, 0x2d, 0x36]}}, {@huge_within_size}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsname={'fsname', 0x3d, 'wlan1\x00'}}, {@fowner_eq}, {@hash}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '[{-^*'}}]}) waitid(0x1, r6, &(0x7f0000000200), 0x80000002, &(0x7f00000003c0)) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa1065672a3e705cc7fa"], 0x11) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) write$input_event(r7, &(0x7f0000000000)={{}, 0x15}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) 7.053625784s ago: executing program 4 (id=1120): socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getresuid(&(0x7f0000005780), &(0x7f0000003240), &(0x7f0000005700)) fchdir(r0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x40) syz_usb_connect(0x4, 0x534, &(0x7f0000000700)={{0x12, 0x1, 0x110, 0xc0, 0x7f, 0x5c, 0xff, 0x46d, 0x8b0, 0x64d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x522, 0x1, 0xe, 0x6c, 0x0, 0x3, [{{0x9, 0x4, 0xd7, 0x3, 0x10, 0xfd, 0x58, 0xc9, 0x9, [], [{{0x9, 0x5, 0x8, 0x1, 0x200, 0xff, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x66}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x26}]}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0x3, 0xfd, 0xfb}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x20, 0x4, 0x5, [@generic={0x7e, 0x7, "be232c9aa78df2b0c39510d1a456f9f98a902081c47cf340076658cca3408648486dbb0ae51ac928096bdf3b63e01bee8eee39895d8ee1fb2560524a2b564bfa5434044264ebfea2f0815d7944378d5f3b3a00056c0969aa96ace50b26ae63a6dc91a22eee98222e70fe15905e214e781a73942708fdb40667c6df09"}, @generic={0xf5, 0x3, "b017d45b8e2bd21f943a18985c18f5bff8b6a425796f468df9da0ba4a7606eae9a87ec5df9fc20d934ceb6dc6e7897c65d9c97e463c026b2fa885035d8285ba5f36385d91b182b6aef6ea0ba84b3909076f9daa96a4f1bd6237cc173f2dff3a1495cd5c8311d6978c3f0f50ea483ff050a799fb2f35874409e066c02a04ccec9da0069d4ab4e84e24f7af5cf95b9f7666f1d06bc6dc79b8da071d539a6f0feb60fc4a0e027ded0f488812c503953730c0cd6881f0138fb0bad581f7bf9062af86c33e9307ed7af7fd557f01b13d530a45e2bed875584adabb2c05d043f3c9716322f3ca0c2a8abff2c73c3d4bfe1d1b654736f"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0x9, 0xa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x43, 0x1ff}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x6, 0xf}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x70, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x40}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xb9, 0xd, 0x9, [@generic={0x30, 0x2, "80edadd3ec51d10498768878d99510d3b88b96d827ba000760fcc9fa0e581a0d6f604ac46c4bdb93b2c7515251dd"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x6, 0x7f, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9}, @generic={0x7b, 0x3a, "d9160a166e495b381663eb5a4e2e755456112c17f884705c4dcfccaaf25cd1dd19ce81491ed71abced92c609c4e5da9ddb24cdd1a0ae471244604df43d2949176843f0f5b4b26f8000b1dfa02509e7886904f31a299c1a3119134bd3bce1cd548154c5c3f870faa7e793759019dc78a0ca558917d36752beff"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x1, 0xb, 0x6}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x0, 0xc9, 0x5c, [@generic={0x3, 0x23, "d8"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x2, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x33, 0x6}, @generic={0x6f, 0xb, "0019ba902af51d048e7fc152a7db7a3a4d0d5f781ac54388bb7ed0e91e9d972164fb1e5fee24967dd71727fbcbb18e6156c4ff9ffe454f5c8ac28905a2378f91f1401e8d91b706f9e6915fb42d7c1d966dfc9de0a700c45d3af27fd3b5dbd13eb3f1ec5aac779c3fb0c46b36b9"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0x9, 0xf, 0xfa}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x7b, 0x7, 0x21, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1ff}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x7, 0x9, 0x8, [@generic={0x94, 0x4, "b8d09568eda40209fdc6d3e977f5c3addf386a8b9560e2a646e82535d3d870b6306426de7cf3facb0616a5e2eaa1e76fc69e9cb4715dc2ac9e445db74a8b03cd94914b58e8864fada31dc77d1e794bad79a480fb7a0634ce387fcf933a02814af926e3b867f0169883b5abaa5a8e34f8fe096caac0c167ac69d1c2e6795769781257bb7191c96e805548d6a29a407310df24"}, @generic={0x4a, 0x24, "7af67a76f807889bb65bcd21eb62314b86265828d4abf96487f69185ce73bd24242c85db08b224f2e7f5eab847efdb2ef78a361eb2bec9bbf3896b84c7bb3b0270cd53cd52d38614"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0xff, 0x1, 0x9, [@generic={0xe1, 0xa, "f985511b8941a65d105a5fecc56bb3befcd97dc74a787b8594bed0ba09809abb9c14c9bb3feab8558d1ea59685373aecdacd6bee7a7bf16940df52050fe7fabc5632f8c4b1c30d3e86c72695cda1db3cbae666fc699776018d0a866551eb5cca6d6042a8cbff44f34ca4c8d10ae434c4dd045572845f11a80188e5c657d005a5dcbd34675d6fbdea24c975799679bc4764125d3f6070597af3228ca4b4e9dfdba5e0f5e6abbe01ec092b21c20c2ddccc0f5ee466c89f93192e8f1fe4e5e3964ffd797f5fc02410efcc2d8acd9cbe3bbb70ce97c5f959f9fd7b095c546478e1"}]}}, {{0x9, 0x5, 0x8f, 0x3, 0x200, 0x5, 0x6, 0xaa}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x1, 0xf9, 0xa8, 0x20, 0x5}, 0x7e, &(0x7f0000000400)={0x5, 0xf, 0x7e, 0x5, [@generic={0x58, 0x10, 0xa, "3501bfc34460b1285b29d4cb75b3e7b52de3e28b06d13567f371646544199099a7f1e29dd007e4d85e149e427be427fd8aa12725aacdab9993d63fa58d4e21b787518c5b22cfbe32d8b629fc03ebfb250885746ff8"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x8, 0x759}, @ss_container_id={0x14, 0x10, 0x4, 0x50, "65142f4aad5190ce8576d9c2c73cbc84"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0x3e, &(0x7f0000000280)=ANY=[]}]}) r2 = socket$netlink(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x147a, 0x73}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x10) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') r6 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x8000002) 6.894742537s ago: executing program 2 (id=1121): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xff}]}]}, 0xa8}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000240)=@ethtool_rxfh_indir={0x39}}) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000280)=0x9, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xa7c}, 0x38) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "a0c807803934c67c", "3b0a49666859b962f9fc2d6f26b65c14ba1f82254ae5a563416d4a03b5d66afe", "1bad68fe", "ef7b1c3985e3e7db"}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000200001002cbd7000fbdbdf25050000005c89c7fa4788b5f7058a7dc5"], 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x24000100) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x9, 0x80000001, {0x0}, {0xee00}, 0x5, 0x9}) sched_getattr(r6, &(0x7f0000000240)={0x38}, 0x38, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, 0x0, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002a40)=[@text16={0x10, 0x0}], 0x1, 0x4, &(0x7f0000002a80), 0x0) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) 5.699630314s ago: executing program 5 (id=1122): io_setup(0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0x6, @output={0x1000, 0x0, {0x82a, 0xbc}, 0x180001, 0xd}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) fstat(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000001c80)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000440)="b367985a6d06e4d90b7d40a8d59c6b3d177cfd448c14a07af9670c8e8823856515ad5628f0f15ec7664ba0a525fc41ea8e17a2aaf14bd321e11c1690fc9fa5982c247c3a976d8e6d65102eeea6d81fad66dfac543d5ec4c9d2fe57364c1f7219c9c6207ede1edb831b9dda6f3d05593ac8b40e1ceef06764b25aeb333641693649952e7ee7fc0dbf21", 0x89}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="0a106e2e8b9ac8a925ef19eee3398836ebf49c25785c0a6e934ce2026da095eb81980ca595727c14e7e2b5b376d338e68af7947db814aa49a642e916863fb5db07003beb5616dca581b12857e4401f3ec85586d4d84aae795b2e2ae4e3282a1080383c7a91050142a393", 0x6a}, {&(0x7f0000001580)="860fa560a168d21f71553c11796d9d1402eaa61bf4c163062898a71bc5dbbea7005b1cece510ece5854177aa271297d7fb0e8fa9cfcac2f116225ab845714874a0dda275fabea31f624f57b62fd0debe9ea6c8b29c957312907acf5583c24bbaf33fd19d751b168e490290a8b365f01abfb47dcb5c1594cdc0d34635d99ac73e45c1f101039037a5e267f0e0d3651eaf86c8fa61f9797e5e271f61e7a053992e352e015d1278e80f3be6d24db64c35d82eacab02e2d5b0ffd069eda2c2081d45dc8583adde64a9bf6945c4a68f51e44fb999", 0xd2}, {&(0x7f0000000340)="59699a32305c6809d9c82c80cf2e63f518c60c519f43bb60981eb6809beda0695634e5c4c1a988460765104b8cb1", 0x2e}, {&(0x7f0000001680)="b0b6b3dd592a687f6e5be89fdaef8dd907d10bb1ac64ff271ecdfe52a900472f03bb84dd7d339df3c3391535f70a2558ad13a5c71eb25376d2a3fef4ebb4acc26d7394ca86e1685c8a916eb17c2ce92918e03dca4ea29163e34005c51143f852b3e341f28b70f7443bc5ad73f8bd1ab722897302892210d6916b978ce2ca48ba1cc409da21f141f98d4b9062f6ef31a994aa601d14b946c9254f9468931fc43efad1205e273d91528fb99d2f3a8cb302c4942878be", 0xb5}, {&(0x7f0000001740)="d9cd8461f7f807fc2236ca8a4a4d5228f05c21e9a4c6b093f9e47b1b75473cc6be13016e79cfc7f5d5855db9fa161313eb5ad4ebda3fd223a461d4fbc433d54f7b583fb787e23d8fcf90ef3254f66a487405a6360d4a95714b2233c7c53be01cf64293cf29d1840b921b7b5457ee4e15ad5d83d95aa93b32851a972a5f2e5bf5d8045954fd4d91", 0x87}, {&(0x7f0000001800)="c21e224cdd3859facd0f7524f127547275d76d199de32f11a013111e94bc48893679dcc7102f78e52aace106045b58db7be90e514bb6eb3b21ca60ddce079ca7cbeaacb035a7ad8c792735b1940aac33e764926662896e2e2833d8f1add4c9f7fab7d344892587c4f65d1a2fb537508a4cefb3ab00dc0c82f86fcdb0a7ca910e97b92071b846a19881012c540d9cc9e20a11bf24e71a67351d13eaa756e839dc4c6cfc48ad5a7545dcfcd073494653fca5bea19b6aac412189d648edb7bb33df47a7487b800a27aa04ebb969b8ed8e9ffaddd417ff878e508b29e3ecaf3e31b467f76d558dc56bb0dbfaec572aeea6c44cd7bc61c71641", 0xf7}, {&(0x7f0000001900)="3d4fc1023ed7badbe6c0c779ac58a047f466a3c5dff5b96ba668534248a4867f9741d9a1de0750ce01d6990c3f17b07a039ff79b8d533be2dedbef2efc7638d3ac28350716ddb9f81cac450ff0017018d485357c1a426eea9d0027074aac8165dbe274017e41fd6e45fac3ed1bdce0a560c21ac6b406c2485a64a86d658d8908a01381681b927dd85fabf03ba2baf5f02de867ca54041021dc314749b1392564cb750f2a61d2bc2b03011d7566f79814021c", 0xb2}], 0x9, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90, 0x800}, 0x800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 5.658518496s ago: executing program 3 (id=1123): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xff}]}]}, 0xa8}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000240)=@ethtool_rxfh_indir={0x39}}) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000280)=0x9, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xa7c}, 0x38) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "a0c807803934c67c", "3b0a49666859b962f9fc2d6f26b65c14ba1f82254ae5a563416d4a03b5d66afe", "1bad68fe", "ef7b1c3985e3e7db"}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000200001002cbd7000fbdbdf25050000005c89c7fa4788b5f7058a7dc5"], 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x24000100) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x9, 0x80000001, {0x0}, {0xee00}, 0x5, 0x9}) sched_getattr(r6, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f00000012c0)=[@in6={0xa, 0x4e24, 0xe, @mcast2, 0x2}], 0xd71ac51343ea870c) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002a40)=[@text16={0x10, 0x0}], 0x1, 0x4, &(0x7f0000002a80), 0x0) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) 4.414397108s ago: executing program 5 (id=1124): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (fail_nth: 1) 3.352425997s ago: executing program 2 (id=1125): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x2) chdir(&(0x7f0000000100)='./file0\x00') openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x28) ioperm(0x0, 0xd, 0x4000000000000020) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18) ioperm(0x0, 0x6, 0xa51b) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) 3.308435978s ago: executing program 3 (id=1126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000181100", @ANYRES32=r1, @ANYRES8=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r6, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r6, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000}) close_range(r4, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3.277454968s ago: executing program 4 (id=1127): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) socket$kcm(0x2, 0x200000000000001, 0x0) socket(0x10, 0x3, 0x0) write$snddsp(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x10000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000680)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="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", 0x541}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)="0349ee47070c03607b5bae292ac8b762044157dd1ea30758ca9a7bfbd23efe5ba3cf173f0478438cbae7a57fe81ae074996dfd64d0c8db1c53c331a33a95a0d2cb94d0cd09f710c11df6be5cc730821bae016a0ea4073e7e4bd62cc1aff09c799d1ebe2a8388a02e50dd19c4b7b1e91a0a1d8904b32b45710d16dc796b719e7adabac89602c834ff01f6b5839643d5a2d8edb9d77af834a7fb82c2fdbdedbab80f961971ed25e2cee13220d342969544a6ce40ead993604e38deb309b330177ed7d23f919596f483ece2d540a95568272a0e879281d83615f589c89e1a7b0cea2a2fac406dbe67256f354a79cb99de0f7e1f4aa617405f284bca8cea6048f1155a89e98746e6912a7509caca768fd2b1ae942cce6a29d848f660b18ca860f9e5f9d95562c4a19fdd9b59932a453a934f0b98fa91129d29dfa2f8f21424c590ed8fe31a79ba09ef72c497ddd5ce7826e096e30746772e34cfc47e9eb5b56187132d87702b56e40d6751a58f9e6aa732d610f7aa631759a3afa266f730a0ee4a8d93555ba710d1bfb9ea4d633faee1529b8565af53eb34cfaca3e31dda587c2be2df3fe5a5a0e2a500eb8cc40db50854a6ec225fca2900148eb7a83c9189cedd69b7eb874f92f00f7635510d2dc062cfcfd8c9a473ac15c7ffbcc56399f6150750d7090917358870f16f684528a9d69bac3046256ad4e101073115712a89b0dd76fe5e8648696ce8dfe82b3220807dd7a446cd158fdf9426b7ddab8584eefb4152d25757e2642b77a21b364327ea38e911f60e6e6718730942c1db47cf80f16aac0950a5c2d412c620b526dca7f601a25b0089f69652889f0ac0667980d074e48dd8d20096097b772317cb8ba11531bd353d584f278e5b2565456f4997f73541add2e336a9beba29baeea7df3bbc5ad5f00c7c6f3c1ba93fbc1dba159497752eefa611d14f26b7c9a07aacda2e9b7572ea3fa66f67c04ee30f0e8f94038c01de81689c12fc44c71ed2b93b31ddc0d9acf62e6e9d71699d0d987ae87c529fcd79ab48433a43ed86d09095bf8d9798f80bbdd36d4ddeb90e752ac9e96079cfa4595daaed34df23e3771b791f3a54f86be3fe4a41f41c8d0f3a28cac2bf926eb95c8badf9fd2d0eb767664872417a08dade17937cadc00a8e3afe349d0e7a3cdfc1b1af108a7a5142a2b5832e99aff5ef27b525d4ea83d1523210c6cc673bcf42cc2e4561d2e8abad128992074d0aaa467eae584f62d347b70fa4f282f463ea0c916ec2e5b8490c87347bc70a11e9748a844d45cc744847e89acbb2e0bc03014c4865d426f52a460b1c0354fb90e4b882e23b674606737e5b878d1f18628f8f2389a071b0d2c64bcdb634b59e2effaabed7ee7812002956e776c039b16bd1cb0b663f4c8a16ad422856f7e6de282b33f268ff11f7972678bd337373b399e514c4dbebfcb812edc05f0e60b68df71682244b458009b85ee038722fc4b6b0c322d6d59ae9d290870d9c86707ad7f080f53d883454526ca942d6b6232cac0b378f0f2bb5209d93e2487a80a9677ac6b850d88cf1f8d47a5f5b534ad4cbf459235fd3662513ac1c53f0ba321b3cf9ede7b9a7e712fc5bf0b17cd164ef34178b3b06ec995106af31c7ffbe5a2bda35a9df9cd31d877d304dd1bd16caf5560ed991dadf378d9deb8f495b0d084ff28f87b305a3a849efcabd48b3e515dc6acd7b61589c10bb0e68dc10eef57e9e59aaba78c04c59c6f8c1d860227133fca4ff352634eb6caad1afbbbfe47fa2646819ec282ca1fb73bcbbc7315782", 0x4f6}, {&(0x7f0000000200)="8fd26291dc7d67b112d3e8b82fa2c2c44486653b44834d66239fa66393c45a6031f6c1bd07000000000000000903e1c5863cc58490e29936da789cff4b90234d9c63654eaf2fac23d471ff", 0x4b}], 0x2}}], 0x2, 0x8010) shutdown(r0, 0x1) 3.174023291s ago: executing program 5 (id=1128): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4004, r0, 0x2}) ppoll(&(0x7f0000000280)=[{r2, 0x88}, {0xffffffffffffffff, 0x640}, {r2, 0xa005}, {r2, 0x20}], 0x4, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0x8]}, 0x8) 23.538568ms ago: executing program 35 (id=1128): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4004, r0, 0x2}) ppoll(&(0x7f0000000280)=[{r2, 0x88}, {0xffffffffffffffff, 0x640}, {r2, 0xa005}, {r2, 0x20}], 0x4, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0x8]}, 0x8) 4.434428ms ago: executing program 2 (id=1130): ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000001780)={0x9, @pix_mp}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mknod$loop(0x0, 0xfff, 0x0) execve(0x0, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000080)=' ']}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6967d0cddca5c19298ac54a76e6f725a71762c00"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 0s ago: executing program 3 (id=1131): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) fcntl$setlease(r0, 0x400, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000580)={0x24, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0003040000000403da520783c8509caf0b1e2a9d14c7b494270baf757e52677191fd8b4aae3ea4f0f1fe5995761ae2922a52a039c92f24088e9fc5c15a93221d8c237c842c632a20998bd17a0b3ee86e404029ce075d22de33e415cf795434c8d1350c5fd510394986b9f2a282"], 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x4}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="82dac696fc9e337dbd2077f6e9982bc51cf0764c822268b184095c4b5e6eeeead547afbc2da14e7785660f3e1ed1d8af1fdaf4e67a73ae798610", 0x3a}, {&(0x7f0000000240)="e9ebc1ed08125154bb5217d7cf86f6141b9370298e12cc01e0f89cfb1bcd0ee975271b5f8f9c28e9618c4485e46f149867b159efacbb257dde7ad68c8b63e0aade78d2557d5bed1d0d22351e173e8f80d3252add1004c0ff1c699d2ee566ac665e6b9956d57eea619b80b550eff4c58995c659831b75d644d967563d9bce79f6418e3dda0bd8b564d8d4b87da1bb1b08af25ecfd5a4d3b610a8e1b45526de880674de8dc680406cdce2aa506925d9a5537e42da789ef83c6908353efcc06be4d10cd40d7d6eacf8b238bd449d355c8c260fa26bb1e9a04de790524a020ffa5", 0xdf}, {&(0x7f0000000340)="fe65584267005772e5fbe4e37e4cdfb2dedfcf1b4f9a642753790c1cd11caa2e12058dd4e6ae68beb6bea8d4e8644c09ab35ad0395f940d13e864b8c44d1a359559036452e33fd8614ce52b659c6aa517aa0b851b119fa0b967b0b906dcb41d12465aefca73419a442e889e9453946a096b37006d8d005b554f58d184897af70fcbead0a5ef0d144245cc01ee7fbc3d35478a690f3a8834b519c4a3da987ef970d367c05f9c5d2c96f", 0xa9}, {&(0x7f00000001c0)="0cb3fbf57a3666baf5057432841bc7bd4e5648f25e7cb8097dcdb9e66b124059", 0x20}], 0x4}}], 0x2, 0x400c800) getpgrp(0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r1) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r2, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7030000200000007910300000000000070000000100000095000000000000001cc56fbad4e5756058a081283654fcf115029232109ea547f4b0410749548298a8cd7890378780df4c4971c84e179ab11776f5aeb9a95f37c063b126f28dee87354090ab8c3587d88e940857236bcf8e48257f60fe82b47dbdd05670ab671007f819798539cb7eadfe9772113755ab5461d067e14d881a9ea0c2c66e7b80693b07e80f7b318a"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000580)=r4, 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x2e, 0x3, 0x0, "fff600f40f000000000000b967351bca40ba3e27ff7eefad00000000ffffffff", 0x56555959}) syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r6 = creat(&(0x7f0000000040)='./file0\x00', 0x10) close(r6) getpid() r7 = epoll_create1(0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) acct(0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x68, r9, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20000020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r10, &(0x7f0000000100)={0x20000014}) kernel console output (not intermixed with test programs): are+0x3a2/0x8c0 [ 251.604324][ T7652] ? ksys_write+0x22a/0x250 [ 251.604349][ T7652] ? __pfx_ksys_unshare+0x10/0x10 [ 251.604373][ T7652] ? __pfx_ksys_write+0x10/0x10 [ 251.604410][ T7652] __x64_sys_unshare+0x38/0x50 [ 251.604432][ T7652] do_syscall_64+0xfa/0x3b0 [ 251.604466][ T7652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.604487][ T7652] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 251.604509][ T7652] ? clear_bhb_loop+0x60/0xb0 [ 251.604535][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.604556][ T7652] RIP: 0033:0x7f8cc058e969 [ 251.604576][ T7652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.604595][ T7652] RSP: 002b:00007f8cc1468038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 251.604618][ T7652] RAX: ffffffffffffffda RBX: 00007f8cc07b6160 RCX: 00007f8cc058e969 [ 251.604635][ T7652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 251.604649][ T7652] RBP: 00007f8cc1468090 R08: 0000000000000000 R09: 0000000000000000 [ 251.604663][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.604675][ T7652] R13: 0000000000000000 R14: 00007f8cc07b6160 R15: 00007fff424a61e8 [ 251.604709][ T7652] [ 251.816607][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.829026][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 252.255609][ T5888] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 252.286286][ T7629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.375921][ T7629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.438216][ T7629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.469030][ T5888] dm9601 4-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, ae:72:ca:d0:59:3d [ 252.567286][ T2156] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 252.642297][ T5888] usb 4-1: USB disconnect, device number 9 [ 252.681799][ T5888] dm9601 4-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 252.831175][ T2156] usb 6-1: Using ep0 maxpacket: 16 [ 252.872788][ T2156] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=7f.76 [ 252.900455][ T2156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.919869][ T2156] usb 6-1: Product: syz [ 252.924251][ T2156] usb 6-1: Manufacturer: syz [ 252.929717][ T2156] usb 6-1: SerialNumber: syz [ 252.944262][ T2156] usb 6-1: config 0 descriptor?? [ 253.169310][ T5888] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 253.177813][ T2156] usb 6-1: ignoring: not an USB2CAN converter [ 253.369491][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 253.395190][ T5888] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 253.415064][ T5888] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.457294][ T5888] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 253.480265][ T5888] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 253.504170][ T5888] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.526942][ T5888] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 253.554410][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.763677][ T2156] usb 6-1: USB disconnect, device number 6 [ 253.873197][ T5888] usb 4-1: GET_CAPABILITIES returned 0 [ 253.901701][ T5888] usbtmc 4-1:16.0: can't read capabilities [ 254.271557][ T7676] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 254.474046][ T7681] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 254.886769][ T7688] input: syz1 as /devices/virtual/input/input11 [ 255.094864][ T6058] usb 4-1: USB disconnect, device number 10 [ 255.105060][ T7692] binder: 7691:7692 ioctl 400c620e 200000000140 returned -22 [ 255.418180][ T5878] usbhid 5-1:0.0: can't add hid device: -71 [ 255.530113][ T5878] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 255.617541][ T5878] usb 5-1: USB disconnect, device number 10 [ 255.841156][ T7695] FAULT_INJECTION: forcing a failure. [ 255.841156][ T7695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.970830][ T7695] CPU: 1 UID: 0 PID: 7695 Comm: syz.1.420 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 255.970862][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.970875][ T7695] Call Trace: [ 255.970883][ T7695] [ 255.970893][ T7695] dump_stack_lvl+0x189/0x250 [ 255.970928][ T7695] ? __pfx____ratelimit+0x10/0x10 [ 255.970956][ T7695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.970984][ T7695] ? __pfx__printk+0x10/0x10 [ 255.971018][ T7695] should_fail_ex+0x414/0x560 [ 255.971057][ T7695] _copy_to_user+0x31/0xb0 [ 255.971085][ T7695] simple_read_from_buffer+0xe1/0x170 [ 255.971119][ T7695] proc_fail_nth_read+0x1df/0x250 [ 255.971155][ T7695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.971191][ T7695] ? rw_verify_area+0x258/0x650 [ 255.971215][ T7695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.971248][ T7695] vfs_read+0x1fd/0x980 [ 255.971287][ T7695] ? __pfx___mutex_lock+0x10/0x10 [ 255.971320][ T7695] ? __pfx_vfs_read+0x10/0x10 [ 255.971346][ T7695] ? __fget_files+0x2a/0x420 [ 255.971382][ T7695] ? __fget_files+0x3a0/0x420 [ 255.971410][ T7695] ? __fget_files+0x2a/0x420 [ 255.971450][ T7695] ksys_read+0x145/0x250 [ 255.971477][ T7695] ? __pfx_ksys_read+0x10/0x10 [ 255.971509][ T7695] ? do_syscall_64+0xbe/0x3b0 [ 255.971545][ T7695] do_syscall_64+0xfa/0x3b0 [ 255.971575][ T7695] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.971604][ T7695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.971626][ T7695] ? clear_bhb_loop+0x60/0xb0 [ 255.971653][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.971674][ T7695] RIP: 0033:0x7f8cc058d37c [ 255.971693][ T7695] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 255.971713][ T7695] RSP: 002b:00007f8cc14aa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.971736][ T7695] RAX: ffffffffffffffda RBX: 00007f8cc07b5fa0 RCX: 00007f8cc058d37c [ 255.971752][ T7695] RDX: 000000000000000f RSI: 00007f8cc14aa0a0 RDI: 0000000000000007 [ 255.971766][ T7695] RBP: 00007f8cc14aa090 R08: 0000000000000000 R09: 0000000000000000 [ 255.971779][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.971792][ T7695] R13: 0000000000000000 R14: 00007f8cc07b5fa0 R15: 00007fff424a61e8 [ 255.971826][ T7695] [ 259.437493][ T7740] vivid-000: kernel_thread() failed [ 260.017076][ T7751] FAULT_INJECTION: forcing a failure. [ 260.017076][ T7751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.076925][ T7751] CPU: 1 UID: 0 PID: 7751 Comm: syz.4.432 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 260.076956][ T7751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.076970][ T7751] Call Trace: [ 260.076978][ T7751] [ 260.076988][ T7751] dump_stack_lvl+0x189/0x250 [ 260.077025][ T7751] ? __pfx____ratelimit+0x10/0x10 [ 260.077056][ T7751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.077088][ T7751] ? __pfx__printk+0x10/0x10 [ 260.077110][ T7751] ? __might_fault+0xb0/0x130 [ 260.077148][ T7751] should_fail_ex+0x414/0x560 [ 260.077185][ T7751] _copy_from_user+0x2d/0xb0 [ 260.077213][ T7751] ___sys_sendmsg+0x158/0x2a0 [ 260.077242][ T7751] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.077307][ T7751] ? __fget_files+0x2a/0x420 [ 260.077335][ T7751] ? __fget_files+0x3a0/0x420 [ 260.077376][ T7751] __x64_sys_sendmsg+0x19b/0x260 [ 260.077405][ T7751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.077441][ T7751] ? __pfx_ksys_write+0x10/0x10 [ 260.077463][ T7751] ? rcu_is_watching+0x15/0xb0 [ 260.077500][ T7751] ? do_syscall_64+0xbe/0x3b0 [ 260.077535][ T7751] do_syscall_64+0xfa/0x3b0 [ 260.077564][ T7751] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.077593][ T7751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.077613][ T7751] ? clear_bhb_loop+0x60/0xb0 [ 260.077638][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.077658][ T7751] RIP: 0033:0x7f6ab938e969 [ 260.077676][ T7751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.077694][ T7751] RSP: 002b:00007f6aba138038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.077717][ T7751] RAX: ffffffffffffffda RBX: 00007f6ab95b5fa0 RCX: 00007f6ab938e969 [ 260.077733][ T7751] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 260.077746][ T7751] RBP: 00007f6aba138090 R08: 0000000000000000 R09: 0000000000000000 [ 260.077759][ T7751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.077772][ T7751] R13: 0000000000000000 R14: 00007f6ab95b5fa0 R15: 00007fffc1636498 [ 260.077820][ T7751] [ 261.259524][ T5941] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 261.296489][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.303031][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.474484][ T7762] ipt_rpfilter: unknown options [ 261.576995][ T7762] ipt_rpfilter: unknown options [ 261.586534][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.650591][ T7762] ipt_rpfilter: unknown options [ 261.692125][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.743274][ T7762] ipt_rpfilter: unknown options [ 261.823894][ T5941] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 261.872280][ T7762] ipt_rpfilter: unknown options [ 261.980497][ T7762] ipt_rpfilter: unknown options [ 261.991366][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.032814][ T7762] ipt_rpfilter: unknown options [ 262.038558][ T7762] ipt_rpfilter: unknown options [ 262.044387][ T7762] ipt_rpfilter: unknown options [ 262.050134][ T7762] ipt_rpfilter: unknown options [ 262.105947][ T5941] usb 6-1: config 0 descriptor?? [ 262.364698][ T7756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.584645][ T7756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.905325][ T7756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.922511][ T7780] netlink: 10 bytes leftover after parsing attributes in process `syz.2.441'. [ 262.942859][ T7756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.961665][ T7756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.974145][ T7756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.049478][ T7788] vivid-000: kernel_thread() failed [ 264.108301][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 264.217268][ T7791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.594448][ T5941] usbhid 6-1:0.0: can't add hid device: -71 [ 264.632793][ T5941] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 264.647733][ T5816] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 264.706727][ T5941] usb 6-1: USB disconnect, device number 7 [ 264.904048][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 264.915880][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 264.926618][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 264.940087][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 264.952728][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 264.966944][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 264.981730][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 264.996971][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 265.117065][ T5816] usb 5-1: Using ep0 maxpacket: 32 [ 265.326981][ T7802] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.337048][ T5816] usb 5-1: unable to get BOS descriptor or descriptor too short [ 265.372625][ T5816] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 265.441412][ T5816] usb 5-1: config 7 has no interface number 0 [ 265.479485][ T5816] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 265.654838][ T5816] usb 5-1: config 7 interface 187 has no altsetting 0 [ 266.378273][ T7809] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 266.418818][ T5816] usb 5-1: string descriptor 0 read error: -71 [ 266.452141][ T5816] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 266.502111][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.551006][ T7818] netlink: 'syz.1.451': attribute type 178 has an invalid length. [ 266.921552][ T7815] 9pnet: p9_errstr2errno: server reported unknown error @íÎÇpî‘AçÁ›¬ž;KZì44§/@®qæžkøp [ 266.921552][ T7815] éC<+¨¦³P5…"kÜÔö­¦ôÎÿ [ 267.017513][ T5816] usb 5-1: can't set config #7, error -71 [ 267.105047][ T5816] usb 5-1: USB disconnect, device number 11 [ 269.853762][ T7847] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 269.860360][ T7847] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 269.868384][ T7847] vhci_hcd vhci_hcd.0: Device attached [ 269.877002][ T7850] vhci_hcd: connection closed [ 269.951766][ T1168] vhci_hcd: stop threads [ 269.998492][ T1168] vhci_hcd: release socket [ 270.002995][ T1168] vhci_hcd: disconnect device [ 270.111002][ T7856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.584348][ T7865] veth0: entered promiscuous mode [ 271.008385][ T7858] veth0: left promiscuous mode [ 271.102194][ T7873] lo speed is unknown, defaulting to 1000 [ 271.109092][ T7873] lo speed is unknown, defaulting to 1000 [ 271.125185][ T7873] lo speed is unknown, defaulting to 1000 [ 271.177587][ T7873] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 271.242482][ T7873] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 271.464254][ T7873] lo speed is unknown, defaulting to 1000 [ 271.473860][ T7873] lo speed is unknown, defaulting to 1000 [ 271.482874][ T7873] lo speed is unknown, defaulting to 1000 [ 271.491774][ T7873] lo speed is unknown, defaulting to 1000 [ 271.500104][ T7873] lo speed is unknown, defaulting to 1000 [ 274.009159][ T7893] veth0: entered promiscuous mode [ 274.713943][ T7889] veth0: left promiscuous mode [ 275.932648][ T7901] input: syz1 as /devices/virtual/input/input12 [ 276.731641][ T5881] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 276.928505][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.954288][ T5881] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 276.971528][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.015340][ T5881] usb 4-1: config 0 descriptor?? [ 277.817748][ T5881] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 277.928282][ T5881] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input13 [ 278.074750][ T7934] veth0: entered promiscuous mode [ 278.727961][ T7915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.743289][ T7930] veth0: left promiscuous mode [ 278.757329][ T7915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.927016][ T5881] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 279.021836][ T5881] usb 4-1: USB disconnect, device number 11 [ 280.227158][ T7944] fido_id[7944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 280.360713][ T7957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.167201][ T7958] __nla_validate_parse: 46 callbacks suppressed [ 281.167219][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'. [ 282.642124][ T7969] delete_channel: no stack [ 283.093378][ T30] audit: type=1326 audit(1749027259.259:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7981 comm="syz.4.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab938e969 code=0x7ffc0000 [ 283.286301][ T30] audit: type=1326 audit(1749027259.259:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7981 comm="syz.4.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab938e969 code=0x7ffc0000 [ 283.296717][ T7968] lo speed is unknown, defaulting to 1000 [ 283.329508][ T30] audit: type=1326 audit(1749027259.259:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7981 comm="syz.4.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f6ab938e969 code=0x7ffc0000 [ 284.077396][ T30] audit: type=1326 audit(1749027259.259:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7981 comm="syz.4.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab938e969 code=0x7ffc0000 [ 284.143287][ T30] audit: type=1326 audit(1749027259.259:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7981 comm="syz.4.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab938e969 code=0x7ffc0000 [ 284.246148][ T30] audit: type=1326 audit(1749027259.259:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7981 comm="syz.4.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ab938e969 code=0x7ffc0000 [ 284.844516][ T30] audit: type=1326 audit(1749027259.259:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7981 comm="syz.4.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab938e969 code=0x7ffc0000 [ 285.459788][ T30] audit: type=1326 audit(1749027259.259:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7981 comm="syz.4.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab938e969 code=0x7ffc0000 [ 285.544548][ T30] audit: type=1326 audit(1749027259.269:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7981 comm="syz.4.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6ab938e969 code=0x7ffc0000 [ 285.576076][ T30] audit: type=1326 audit(1749027259.269:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7981 comm="syz.4.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab938e969 code=0x7ffc0000 [ 287.771651][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.503'. [ 288.181933][ T8021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.578594][ T5816] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 289.260068][ T5816] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.339726][ T8019] sctp: failed to load transform for md5: -2 [ 289.370850][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 289.473134][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 289.529634][ T5816] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 289.635716][ T5816] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.705852][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.746016][ T5816] usb 2-1: config 0 descriptor?? [ 290.204362][ T5816] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 290.233311][ T5816] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 290.345857][ T5816] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 291.113130][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 291.245312][ T8043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.265603][ T8043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.716231][ T5816] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 291.972329][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.515'. [ 292.453976][ T5816] usb 2-1: device descriptor read/64, error -32 [ 292.767182][ T8059] : Can't lookup blockdev [ 292.935180][ T5816] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 292.999200][ T8061] netlink: 56 bytes leftover after parsing attributes in process `syz.2.517'. [ 293.753943][ T5816] usb 2-1: device descriptor read/64, error -32 [ 294.015766][ T5816] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 294.590028][ T8086] netlink: 88 bytes leftover after parsing attributes in process `syz.5.522'. [ 294.599108][ T8086] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 294.900366][ T5816] usb 2-1: device not accepting address 5, error -71 [ 295.842199][ T6058] usb 2-1: USB disconnect, device number 5 [ 297.376166][ T5834] Bluetooth: hci4: unexpected event for opcode 0x041b [ 297.801147][ T8122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.025981][ T5878] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 299.206912][ T5878] usb 4-1: too many configurations: 79, using maximum allowed: 8 [ 299.234936][ T5878] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 299.244433][ T5878] usb 4-1: can't read configurations, error -61 [ 299.420963][ T5878] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 300.536423][ T5878] usb 4-1: too many configurations: 79, using maximum allowed: 8 [ 300.570803][ T5878] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 300.586224][ T5878] usb 4-1: can't read configurations, error -61 [ 300.625804][ T5878] usb usb4-port1: attempt power cycle [ 301.180154][ T8148] veth0: entered promiscuous mode [ 301.544610][ T8141] veth0: left promiscuous mode [ 301.605091][ T8159] netlink: 104 bytes leftover after parsing attributes in process `syz.5.548'. [ 303.245938][ T5816] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 303.380219][ T8177] input: syz1 as /devices/virtual/input/input14 [ 303.846637][ T5816] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 303.878156][ T5816] usb 2-1: config 54 has 0 interfaces, different from the descriptor's value: 1 [ 303.921960][ T5816] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 303.938412][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.984188][ T5816] usb 2-1: Product: syz [ 304.002447][ T5816] usb 2-1: Manufacturer: syz [ 304.015296][ T5816] usb 2-1: SerialNumber: syz [ 304.350024][ T8182] netlink: 'syz.2.556': attribute type 1 has an invalid length. [ 304.357881][ T8182] netlink: 'syz.2.556': attribute type 3 has an invalid length. [ 304.365913][ T8182] netlink: 224 bytes leftover after parsing attributes in process `syz.2.556'. [ 305.046912][ T2156] usb 2-1: USB disconnect, device number 6 [ 307.605018][ T8209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.983861][ T8216] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 307.990541][ T8216] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 308.000291][ T8216] vhci_hcd vhci_hcd.0: Device attached [ 308.245899][ T6058] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 309.007568][ T8219] vhci_hcd: connection reset by peer [ 309.069801][ T6047] vhci_hcd: stop threads [ 309.159175][ T6047] vhci_hcd: release socket [ 309.241345][ T6047] vhci_hcd: disconnect device [ 311.123663][ T8244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.927056][ T8253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.267050][ T8245] netlink: 88 bytes leftover after parsing attributes in process `syz.1.578'. [ 313.602569][ T8245] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 313.645792][ T6058] vhci_hcd: vhci_device speed not set [ 314.150806][ T8275] FAULT_INJECTION: forcing a failure. [ 314.150806][ T8275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.169561][ T8275] CPU: 0 UID: 0 PID: 8275 Comm: syz.5.587 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 314.169593][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.169607][ T8275] Call Trace: [ 314.169616][ T8275] [ 314.169626][ T8275] dump_stack_lvl+0x189/0x250 [ 314.169665][ T8275] ? __pfx____ratelimit+0x10/0x10 [ 314.169697][ T8275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.169729][ T8275] ? __pfx__printk+0x10/0x10 [ 314.169766][ T8275] should_fail_ex+0x414/0x560 [ 314.169805][ T8275] _copy_to_user+0x31/0xb0 [ 314.169835][ T8275] simple_read_from_buffer+0xe1/0x170 [ 314.169871][ T8275] proc_fail_nth_read+0x1df/0x250 [ 314.169908][ T8275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 314.169944][ T8275] ? rw_verify_area+0x258/0x650 [ 314.169970][ T8275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 314.170004][ T8275] vfs_read+0x1fd/0x980 [ 314.170036][ T8275] ? __pfx___mutex_lock+0x10/0x10 [ 314.170070][ T8275] ? __pfx_vfs_read+0x10/0x10 [ 314.170098][ T8275] ? __fget_files+0x2a/0x420 [ 314.170134][ T8275] ? __fget_files+0x3a0/0x420 [ 314.170163][ T8275] ? __fget_files+0x2a/0x420 [ 314.170204][ T8275] ksys_read+0x145/0x250 [ 314.170233][ T8275] ? __pfx_ksys_read+0x10/0x10 [ 314.170260][ T8275] ? rcu_is_watching+0x15/0xb0 [ 314.170293][ T8275] ? trace_sys_enter+0x25/0x120 [ 314.170335][ T8275] do_syscall_64+0xfa/0x3b0 [ 314.170367][ T8275] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.170398][ T8275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.170420][ T8275] ? clear_bhb_loop+0x60/0xb0 [ 314.170447][ T8275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.170469][ T8275] RIP: 0033:0x7fbfa518d37c [ 314.170488][ T8275] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 314.170508][ T8275] RSP: 002b:00007fbfa5fb9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 314.170531][ T8275] RAX: ffffffffffffffda RBX: 00007fbfa53b5fa0 RCX: 00007fbfa518d37c [ 314.170547][ T8275] RDX: 000000000000000f RSI: 00007fbfa5fb90a0 RDI: 0000000000000006 [ 314.170561][ T8275] RBP: 00007fbfa5fb9090 R08: 0000000000000000 R09: 0000000000000000 [ 314.170575][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.170588][ T8275] R13: 0000000000000000 R14: 00007fbfa53b5fa0 R15: 00007ffd4a85dd28 [ 314.170622][ T8275] [ 314.631348][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 315.668023][ T8293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.655215][ T8305] delete_channel: no stack [ 317.700711][ T8299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.714908][ T8303] delete_channel: no stack [ 318.777191][ T8312] netlink: 88 bytes leftover after parsing attributes in process `syz.3.596'. [ 318.786154][ T8312] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 320.364548][ T8313] lo speed is unknown, defaulting to 1000 [ 320.388769][ T8323] fuse: Bad value for 'fd' [ 320.801624][ T8342] input: syz0 as /devices/virtual/input/input15 [ 320.925705][ T8343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.676784][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.690752][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.019707][ T8355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.539526][ T8366] lo speed is unknown, defaulting to 1000 [ 324.415957][ T838] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 324.761226][ T8390] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 324.802966][ T8390] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 324.833653][ T8393] FAULT_INJECTION: forcing a failure. [ 324.833653][ T8393] name failslab, interval 1, probability 0, space 0, times 0 [ 324.835562][ T8390] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 324.846969][ T8393] CPU: 1 UID: 0 PID: 8393 Comm: syz.4.619 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 324.847005][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.847020][ T8393] Call Trace: [ 324.847029][ T8393] [ 324.847040][ T8393] dump_stack_lvl+0x189/0x250 [ 324.847083][ T8393] ? __pfx____ratelimit+0x10/0x10 [ 324.847119][ T8393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.847154][ T8393] ? __pfx__printk+0x10/0x10 [ 324.847179][ T8393] ? __pfx___might_resched+0x10/0x10 [ 324.847217][ T8393] ? fs_reclaim_acquire+0x7d/0x100 [ 324.847258][ T8393] should_fail_ex+0x414/0x560 [ 324.847301][ T8393] should_failslab+0xa8/0x100 [ 324.847336][ T8393] __kmalloc_noprof+0xcb/0x4f0 [ 324.847363][ T8393] ? tomoyo_encode+0x28b/0x550 [ 324.847395][ T8393] tomoyo_encode+0x28b/0x550 [ 324.847427][ T8393] tomoyo_realpath_from_path+0x58d/0x5d0 [ 324.847467][ T8393] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 324.847503][ T8393] tomoyo_path_number_perm+0x1e8/0x5a0 [ 324.847542][ T8393] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 324.847600][ T8393] ? __lock_acquire+0xab9/0xd20 [ 324.847657][ T8393] ? __fget_files+0x2a/0x420 [ 324.847692][ T8393] ? __fget_files+0x2a/0x420 [ 324.847725][ T8393] ? __fget_files+0x3a0/0x420 [ 324.847756][ T8393] ? __fget_files+0x2a/0x420 [ 324.847795][ T8393] security_file_ioctl+0xcb/0x2d0 [ 324.847836][ T8393] __se_sys_ioctl+0x47/0x170 [ 324.847866][ T8393] do_syscall_64+0xfa/0x3b0 [ 324.847900][ T8393] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.847945][ T8393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.847969][ T8393] ? clear_bhb_loop+0x60/0xb0 [ 324.847999][ T8393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.848023][ T8393] RIP: 0033:0x7f6ab938e969 [ 324.848044][ T8393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.848066][ T8393] RSP: 002b:00007f6aba138038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.848092][ T8393] RAX: ffffffffffffffda RBX: 00007f6ab95b5fa0 RCX: 00007f6ab938e969 [ 324.848109][ T8393] RDX: 0000200000000280 RSI: 00000000c004510e RDI: 0000000000000003 [ 324.848126][ T8393] RBP: 00007f6aba138090 R08: 0000000000000000 R09: 0000000000000000 [ 324.848142][ T8393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.848157][ T8393] R13: 0000000000000000 R14: 00007f6ab95b5fa0 R15: 00007fffc1636498 [ 324.848192][ T8393] [ 324.848218][ T8393] ERROR: Out of memory at tomoyo_realpath_from_path. [ 324.950355][ T838] usb 2-1: config 128 has an invalid interface number: 147 but max is 0 [ 324.965879][ T8390] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 324.981362][ T838] usb 2-1: config 128 has no interface number 0 [ 324.981406][ T838] usb 2-1: config 128 interface 147 has no altsetting 0 [ 324.991155][ T838] usb 2-1: New USB device found, idVendor=0af0, idProduct=d033, bcdDevice=13.dc [ 325.023362][ T8394] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 325.040236][ T838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.066604][ T8394] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 325.100179][ T838] usb 2-1: Product: syz [ 325.178557][ T838] usb 2-1: Manufacturer: syz [ 325.183289][ T838] usb 2-1: SerialNumber: syz [ 325.192403][ T8394] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 325.280249][ T8394] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 325.412042][ T8381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.464877][ T8381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.579125][ T8380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.648045][ T8402] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 325.654755][ T8402] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 325.662681][ T8402] vhci_hcd vhci_hcd.0: Device attached [ 325.838785][ T8380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.931440][ T5941] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 326.636149][ T8403] vhci_hcd: connection reset by peer [ 326.747400][ T838] usb 2-1: USB disconnect, device number 7 [ 326.846090][ T6373] vhci_hcd: stop threads [ 326.900416][ T6373] vhci_hcd: release socket [ 327.009186][ T6373] vhci_hcd: disconnect device [ 327.151186][ T8410] bond0: entered allmulticast mode [ 327.190757][ T8410] bond_slave_0: entered allmulticast mode [ 327.218969][ T8410] bond_slave_1: entered allmulticast mode [ 327.247975][ T8410] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 327.454306][ T8414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.756465][ T8437] FAULT_INJECTION: forcing a failure. [ 329.756465][ T8437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.991835][ T8439] input: syz1 as /devices/virtual/input/input17 [ 330.210800][ T8437] CPU: 1 UID: 0 PID: 8437 Comm: syz.4.631 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 330.210832][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 330.210845][ T8437] Call Trace: [ 330.210858][ T8437] [ 330.210867][ T8437] dump_stack_lvl+0x189/0x250 [ 330.210903][ T8437] ? __pfx____ratelimit+0x10/0x10 [ 330.210934][ T8437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.210965][ T8437] ? __pfx__printk+0x10/0x10 [ 330.210987][ T8437] ? __might_fault+0xb0/0x130 [ 330.211025][ T8437] should_fail_ex+0x414/0x560 [ 330.211062][ T8437] _copy_from_user+0x2d/0xb0 [ 330.211090][ T8437] smc_setsockopt+0x3b8/0xab0 [ 330.211127][ T8437] ? __pfx_smc_setsockopt+0x10/0x10 [ 330.211162][ T8437] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 330.211188][ T8437] ? __pfx_smc_setsockopt+0x10/0x10 [ 330.211218][ T8437] do_sock_setsockopt+0x257/0x3e0 [ 330.211247][ T8437] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 330.211276][ T8437] ? __fget_files+0x2a/0x420 [ 330.211315][ T8437] __x64_sys_setsockopt+0x18b/0x220 [ 330.211347][ T8437] do_syscall_64+0xfa/0x3b0 [ 330.211377][ T8437] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.211407][ T8437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.211428][ T8437] ? clear_bhb_loop+0x60/0xb0 [ 330.211454][ T8437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.211475][ T8437] RIP: 0033:0x7f6ab938e969 [ 330.211494][ T8437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.211513][ T8437] RSP: 002b:00007f6aba138038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 330.211536][ T8437] RAX: ffffffffffffffda RBX: 00007f6ab95b5fa0 RCX: 00007f6ab938e969 [ 330.211552][ T8437] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000003 [ 330.211564][ T8437] RBP: 00007f6aba138090 R08: 000000000000ff07 R09: 0000000000000000 [ 330.211578][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.211598][ T8437] R13: 0000000000000000 R14: 00007f6ab95b5fa0 R15: 00007fffc1636498 [ 330.211631][ T8437] [ 331.421452][ T5941] vhci_hcd: vhci_device speed not set [ 331.611827][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.4.636'. [ 331.724916][ T8458] FAULT_INJECTION: forcing a failure. [ 331.724916][ T8458] name failslab, interval 1, probability 0, space 0, times 0 [ 331.760838][ T8458] CPU: 1 UID: 0 PID: 8458 Comm: syz.3.638 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 331.760871][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.760885][ T8458] Call Trace: [ 331.760893][ T8458] [ 331.760902][ T8458] dump_stack_lvl+0x189/0x250 [ 331.760937][ T8458] ? __pfx____ratelimit+0x10/0x10 [ 331.760969][ T8458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.761000][ T8458] ? __pfx__printk+0x10/0x10 [ 331.761027][ T8458] ? __pfx___might_resched+0x10/0x10 [ 331.761064][ T8458] should_fail_ex+0x414/0x560 [ 331.761100][ T8458] should_failslab+0xa8/0x100 [ 331.761130][ T8458] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 331.761157][ T8458] ? __alloc_skb+0x112/0x2d0 [ 331.761184][ T8458] __alloc_skb+0x112/0x2d0 [ 331.761208][ T8458] netlink_sendmsg+0x5c6/0xb30 [ 331.761244][ T8458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.761276][ T8458] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.761303][ T8458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.761328][ T8458] __sock_sendmsg+0x219/0x270 [ 331.761369][ T8458] ____sys_sendmsg+0x505/0x830 [ 331.761400][ T8458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.761444][ T8458] ? import_iovec+0x74/0xa0 [ 331.761474][ T8458] ___sys_sendmsg+0x21f/0x2a0 [ 331.761503][ T8458] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.761569][ T8458] ? __fget_files+0x2a/0x420 [ 331.761598][ T8458] ? __fget_files+0x3a0/0x420 [ 331.761639][ T8458] __x64_sys_sendmsg+0x19b/0x260 [ 331.761668][ T8458] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.761705][ T8458] ? __pfx_ksys_write+0x10/0x10 [ 331.761737][ T8458] ? do_syscall_64+0xbe/0x3b0 [ 331.761773][ T8458] do_syscall_64+0xfa/0x3b0 [ 331.761803][ T8458] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.761833][ T8458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.761853][ T8458] ? clear_bhb_loop+0x60/0xb0 [ 331.761880][ T8458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.761901][ T8458] RIP: 0033:0x7f6df7f8e969 [ 331.761920][ T8458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.761939][ T8458] RSP: 002b:00007f6df8dc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.761963][ T8458] RAX: ffffffffffffffda RBX: 00007f6df81b5fa0 RCX: 00007f6df7f8e969 [ 331.761979][ T8458] RDX: 0000000024040800 RSI: 0000200000000280 RDI: 0000000000000003 [ 331.761993][ T8458] RBP: 00007f6df8dc5090 R08: 0000000000000000 R09: 0000000000000000 [ 331.762006][ T8458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.762019][ T8458] R13: 0000000000000000 R14: 00007f6df81b5fa0 R15: 00007ffe45708848 [ 331.762051][ T8458] [ 332.070804][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.637'. [ 332.110522][ T8465] FAULT_INJECTION: forcing a failure. [ 332.110522][ T8465] name failslab, interval 1, probability 0, space 0, times 0 [ 332.123928][ T8465] CPU: 1 UID: 0 PID: 8465 Comm: syz.4.639 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 332.123957][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.123970][ T8465] Call Trace: [ 332.123979][ T8465] [ 332.123988][ T8465] dump_stack_lvl+0x189/0x250 [ 332.124025][ T8465] ? __pfx____ratelimit+0x10/0x10 [ 332.124056][ T8465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.124088][ T8465] ? __pfx__printk+0x10/0x10 [ 332.124123][ T8465] ? __pfx___might_resched+0x10/0x10 [ 332.124153][ T8465] ? fs_reclaim_acquire+0x7d/0x100 [ 332.124190][ T8465] should_fail_ex+0x414/0x560 [ 332.124226][ T8465] should_failslab+0xa8/0x100 [ 332.124257][ T8465] __kmalloc_cache_noprof+0x70/0x3d0 [ 332.124283][ T8465] ? xdp_umem_create+0x58/0x8e0 [ 332.124315][ T8465] xdp_umem_create+0x58/0x8e0 [ 332.124353][ T8465] xsk_setsockopt+0x62a/0x710 [ 332.124379][ T8465] ? __pfx_xsk_setsockopt+0x10/0x10 [ 332.124404][ T8465] ? __lock_acquire+0xab9/0xd20 [ 332.124445][ T8465] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 332.124471][ T8465] ? __pfx_xsk_setsockopt+0x10/0x10 [ 332.124500][ T8465] do_sock_setsockopt+0x257/0x3e0 [ 332.124529][ T8465] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 332.124559][ T8465] ? __fget_files+0x2a/0x420 [ 332.124599][ T8465] __x64_sys_setsockopt+0x18b/0x220 [ 332.124631][ T8465] do_syscall_64+0xfa/0x3b0 [ 332.124661][ T8465] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.124691][ T8465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.124712][ T8465] ? clear_bhb_loop+0x60/0xb0 [ 332.124739][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.124760][ T8465] RIP: 0033:0x7f6ab938e969 [ 332.124779][ T8465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.124798][ T8465] RSP: 002b:00007f6aba138038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 332.124821][ T8465] RAX: ffffffffffffffda RBX: 00007f6ab95b5fa0 RCX: 00007f6ab938e969 [ 332.124837][ T8465] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 332.124850][ T8465] RBP: 00007f6aba138090 R08: 000000000000001c R09: 0000000000000000 [ 332.124863][ T8465] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 332.124876][ T8465] R13: 0000000000000000 R14: 00007f6ab95b5fa0 R15: 00007fffc1636498 [ 332.124908][ T8465] [ 332.485690][ T5881] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 332.645787][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 332.678322][ T5881] usb 6-1: unable to get BOS descriptor or descriptor too short [ 332.702844][ T5881] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 332.716960][ T5881] usb 6-1: config 7 has no interface number 0 [ 332.724135][ T5881] usb 6-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 332.824557][ T5881] usb 6-1: config 7 interface 187 has no altsetting 0 [ 332.992097][ T5881] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 333.065155][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.357766][ T5881] usb 6-1: Product: syz [ 333.384030][ T5881] usb 6-1: Manufacturer: syz [ 333.396365][ T5881] usb 6-1: SerialNumber: syz [ 333.433902][ T8460] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 333.684335][ T5881] usb 6-1: Limiting number of CPorts to U8_MAX [ 333.825225][ T5881] usb 6-1: Unknown endpoint type found, address 0x07 [ 333.856270][ T5881] usb 6-1: Not enough endpoints found in device, aborting! [ 334.058746][ T5881] usb 6-1: USB disconnect, device number 8 [ 334.118777][ T8485] nbd1: detected capacity change from 0 to 8589934592 [ 334.456185][ T5834] block nbd1: Receive control failed (result -104) [ 334.533126][ T8497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.725569][ T8514] FAULT_INJECTION: forcing a failure. [ 336.725569][ T8514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.755932][ T8514] CPU: 1 UID: 0 PID: 8514 Comm: syz.4.659 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 336.755965][ T8514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.755978][ T8514] Call Trace: [ 336.755987][ T8514] [ 336.755997][ T8514] dump_stack_lvl+0x189/0x250 [ 336.756033][ T8514] ? __pfx____ratelimit+0x10/0x10 [ 336.756064][ T8514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.756095][ T8514] ? __pfx__printk+0x10/0x10 [ 336.756116][ T8514] ? __might_fault+0xb0/0x130 [ 336.756156][ T8514] should_fail_ex+0x414/0x560 [ 336.756194][ T8514] _copy_from_user+0x2d/0xb0 [ 336.756220][ T8514] __sys_bpf+0x1ed/0x860 [ 336.756252][ T8514] ? __pfx___sys_bpf+0x10/0x10 [ 336.756294][ T8514] ? ksys_write+0x22a/0x250 [ 336.756322][ T8514] ? __pfx_ksys_write+0x10/0x10 [ 336.756357][ T8514] __x64_sys_bpf+0x7c/0x90 [ 336.756382][ T8514] do_syscall_64+0xfa/0x3b0 [ 336.756414][ T8514] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.756443][ T8514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.756464][ T8514] ? clear_bhb_loop+0x60/0xb0 [ 336.756490][ T8514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.756510][ T8514] RIP: 0033:0x7f6ab938e969 [ 336.756529][ T8514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.756547][ T8514] RSP: 002b:00007f6aba138038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 336.756570][ T8514] RAX: ffffffffffffffda RBX: 00007f6ab95b5fa0 RCX: 00007f6ab938e969 [ 336.756586][ T8514] RDX: 0000000000000020 RSI: 00002000000018c0 RDI: 0000000000000008 [ 336.756599][ T8514] RBP: 00007f6aba138090 R08: 0000000000000000 R09: 0000000000000000 [ 336.756613][ T8514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.756625][ T8514] R13: 0000000000000001 R14: 00007f6ab95b5fa0 R15: 00007fffc1636498 [ 336.756658][ T8514] [ 337.132882][ T8518] lo speed is unknown, defaulting to 1000 [ 338.476800][ T8531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.338967][ T8551] FAULT_INJECTION: forcing a failure. [ 340.338967][ T8551] name failslab, interval 1, probability 0, space 0, times 0 [ 340.366023][ T8551] CPU: 1 UID: 0 PID: 8551 Comm: syz.3.671 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 340.366053][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.366067][ T8551] Call Trace: [ 340.366076][ T8551] [ 340.366085][ T8551] dump_stack_lvl+0x189/0x250 [ 340.366124][ T8551] ? __pfx____ratelimit+0x10/0x10 [ 340.366155][ T8551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.366186][ T8551] ? __pfx__printk+0x10/0x10 [ 340.366214][ T8551] ? __pfx___might_resched+0x10/0x10 [ 340.366244][ T8551] ? fs_reclaim_acquire+0x7d/0x100 [ 340.366289][ T8551] should_fail_ex+0x414/0x560 [ 340.366326][ T8551] should_failslab+0xa8/0x100 [ 340.366356][ T8551] __kmalloc_noprof+0xcb/0x4f0 [ 340.366381][ T8551] ? kfree+0x4d/0x440 [ 340.366402][ T8551] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 340.366430][ T8551] tomoyo_realpath_from_path+0xe3/0x5d0 [ 340.366456][ T8551] ? tomoyo_domain+0xda/0x130 [ 340.366485][ T8551] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 340.366516][ T8551] tomoyo_path_number_perm+0x1e8/0x5a0 [ 340.366550][ T8551] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 340.366601][ T8551] ? __lock_acquire+0xab9/0xd20 [ 340.366652][ T8551] ? __fget_files+0x2a/0x420 [ 340.366686][ T8551] ? __fget_files+0x2a/0x420 [ 340.366714][ T8551] ? __fget_files+0x3a0/0x420 [ 340.366742][ T8551] ? __fget_files+0x2a/0x420 [ 340.366776][ T8551] security_file_ioctl+0xcb/0x2d0 [ 340.366813][ T8551] __se_sys_ioctl+0x47/0x170 [ 340.366838][ T8551] do_syscall_64+0xfa/0x3b0 [ 340.366868][ T8551] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.366897][ T8551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.366918][ T8551] ? clear_bhb_loop+0x60/0xb0 [ 340.366944][ T8551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.366966][ T8551] RIP: 0033:0x7f6df7f8e969 [ 340.366986][ T8551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.367005][ T8551] RSP: 002b:00007f6df8dc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.367028][ T8551] RAX: ffffffffffffffda RBX: 00007f6df81b5fa0 RCX: 00007f6df7f8e969 [ 340.367044][ T8551] RDX: 0000200000000280 RSI: 00000000c0cc5616 RDI: 0000000000000003 [ 340.367058][ T8551] RBP: 00007f6df8dc5090 R08: 0000000000000000 R09: 0000000000000000 [ 340.367072][ T8551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.367084][ T8551] R13: 0000000000000000 R14: 00007f6df81b5fa0 R15: 00007ffe45708848 [ 340.367117][ T8551] [ 340.367178][ T8551] ERROR: Out of memory at tomoyo_realpath_from_path. [ 341.162520][ T8559] lo speed is unknown, defaulting to 1000 [ 341.279747][ T8565] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 341.286521][ T8565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 341.294511][ T8565] vhci_hcd vhci_hcd.0: Device attached [ 341.775795][ T10] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 342.096096][ T8566] vhci_hcd: connection reset by peer [ 342.148639][ T12] vhci_hcd: stop threads [ 342.194914][ T12] vhci_hcd: release socket [ 342.238676][ T12] vhci_hcd: disconnect device [ 342.991036][ T8574] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 343.038285][ T8574] 9pnet_fd: Insufficient options for proto=fd [ 343.949328][ T8593] input: syz1 as /devices/virtual/input/input18 [ 345.465183][ T5834] Bluetooth: hci0: command 0x0405 tx timeout [ 346.020187][ T8626] lo speed is unknown, defaulting to 1000 [ 346.802475][ T8650] FAULT_INJECTION: forcing a failure. [ 346.802475][ T8650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.844650][ T8650] CPU: 0 UID: 0 PID: 8650 Comm: syz.3.697 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 346.844681][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 346.844694][ T8650] Call Trace: [ 346.844702][ T8650] [ 346.844712][ T8650] dump_stack_lvl+0x189/0x250 [ 346.844749][ T8650] ? __pfx____ratelimit+0x10/0x10 [ 346.844789][ T8650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.844822][ T8650] ? __pfx__printk+0x10/0x10 [ 346.844844][ T8650] ? __might_fault+0xb0/0x130 [ 346.844883][ T8650] should_fail_ex+0x414/0x560 [ 346.844921][ T8650] _copy_from_user+0x2d/0xb0 [ 346.844948][ T8650] ___sys_sendmsg+0x158/0x2a0 [ 346.844978][ T8650] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.845043][ T8650] ? __fget_files+0x2a/0x420 [ 346.845072][ T8650] ? __fget_files+0x3a0/0x420 [ 346.845113][ T8650] __x64_sys_sendmsg+0x19b/0x260 [ 346.845140][ T8650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.845176][ T8650] ? __pfx_ksys_write+0x10/0x10 [ 346.845198][ T8650] ? rcu_is_watching+0x15/0xb0 [ 346.845235][ T8650] ? do_syscall_64+0xbe/0x3b0 [ 346.845269][ T8650] do_syscall_64+0xfa/0x3b0 [ 346.845299][ T8650] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.845328][ T8650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.845348][ T8650] ? clear_bhb_loop+0x60/0xb0 [ 346.845374][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.845395][ T8650] RIP: 0033:0x7f6df7f8e969 [ 346.845422][ T8650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.845441][ T8650] RSP: 002b:00007f6df8dc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.845465][ T8650] RAX: ffffffffffffffda RBX: 00007f6df81b5fa0 RCX: 00007f6df7f8e969 [ 346.845481][ T8650] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 346.845494][ T8650] RBP: 00007f6df8dc5090 R08: 0000000000000000 R09: 0000000000000000 [ 346.845507][ T8650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.845520][ T8650] R13: 0000000000000000 R14: 00007f6df81b5fa0 R15: 00007ffe45708848 [ 346.845551][ T8650] [ 347.445668][ T10] vhci_hcd: vhci_device speed not set [ 347.779867][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'. [ 348.075848][ T5941] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 348.356620][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 348.548983][ T5941] usb 5-1: unable to get BOS descriptor or descriptor too short [ 348.620787][ T5941] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 348.648365][ T5941] usb 5-1: config 7 has no interface number 0 [ 348.717171][ T5941] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 348.742189][ T5941] usb 5-1: config 7 interface 187 has no altsetting 0 [ 348.769999][ T5941] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 348.789673][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.814543][ T5941] usb 5-1: Product: syz [ 348.824050][ T5941] usb 5-1: Manufacturer: syz [ 348.830586][ T5941] usb 5-1: SerialNumber: syz [ 348.893177][ T8661] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 349.289984][ T5941] usb 5-1: Limiting number of CPorts to U8_MAX [ 349.308522][ T5941] usb 5-1: Unknown endpoint type found, address 0x07 [ 349.315301][ T5941] usb 5-1: Not enough endpoints found in device, aborting! [ 349.401672][ T5941] usb 5-1: USB disconnect, device number 12 [ 350.807552][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 350.825903][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 350.835265][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 350.845357][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 350.854367][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 350.915802][ T5878] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 350.980430][ T8693] lo speed is unknown, defaulting to 1000 [ 351.092245][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 351.126738][ T5878] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=7f.76 [ 351.149084][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.171889][ T5878] usb 4-1: Product: syz [ 351.186230][ T5878] usb 4-1: Manufacturer: syz [ 351.207940][ T5878] usb 4-1: SerialNumber: syz [ 351.228607][ T5878] usb 4-1: config 0 descriptor?? [ 351.579327][ T5878] usb 4-1: ignoring: not an USB2CAN converter [ 352.172671][ T8693] chnl_net:caif_netlink_parms(): no params data found [ 352.194997][ T838] usb 4-1: USB disconnect, device number 15 [ 352.903078][ T5828] Bluetooth: hci5: command tx timeout [ 352.998539][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'. [ 353.095704][ T5878] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 353.296509][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 353.346223][ T5878] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=7f.76 [ 353.346256][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.346278][ T5878] usb 3-1: Product: syz [ 353.346294][ T5878] usb 3-1: Manufacturer: syz [ 353.346307][ T5878] usb 3-1: SerialNumber: syz [ 353.366555][ T5878] usb 3-1: config 0 descriptor?? [ 353.525031][ T5881] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 353.726150][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 353.747511][ T5881] usb 5-1: unable to get BOS descriptor or descriptor too short [ 353.764694][ T5881] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 353.774605][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.774629][ T5881] usb 5-1: config 7 has no interface number 0 [ 353.788516][ T5881] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 353.790224][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.798879][ T5881] usb 5-1: config 7 interface 187 has no altsetting 0 [ 353.821443][ T8693] bridge_slave_0: entered allmulticast mode [ 353.830429][ T8693] bridge_slave_0: entered promiscuous mode [ 353.846987][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.853063][ T5881] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 353.895997][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.920878][ T5878] usb 3-1: ignoring: not an USB2CAN converter [ 353.928097][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.930501][ T5881] usb 5-1: Product: syz [ 353.958283][ T8693] bridge_slave_1: entered allmulticast mode [ 353.970384][ T5881] usb 5-1: Manufacturer: syz [ 353.978966][ T5881] usb 5-1: SerialNumber: syz [ 353.985186][ T8693] bridge_slave_1: entered promiscuous mode [ 353.991996][ T8728] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 354.279937][ T5881] usb 5-1: Limiting number of CPorts to U8_MAX [ 354.305344][ T8693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.335435][ T8693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.336579][ T5881] usb 5-1: Unknown endpoint type found, address 0x07 [ 354.480364][ T5881] usb 5-1: Not enough endpoints found in device, aborting! [ 354.488289][ T838] usb 3-1: USB disconnect, device number 14 [ 354.601424][ T5881] usb 5-1: USB disconnect, device number 13 [ 354.637131][ T8693] team0: Port device team_slave_0 added [ 354.654436][ T8693] team0: Port device team_slave_1 added [ 354.747462][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.754528][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.784213][ T8693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.798253][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.805290][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.832576][ T8693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.976147][ T5828] Bluetooth: hci5: command tx timeout [ 355.354154][ T8749] input: syz1 as /devices/virtual/input/input21 [ 355.441582][ T8693] hsr_slave_0: entered promiscuous mode [ 355.568645][ T8693] hsr_slave_1: entered promiscuous mode [ 355.635852][ T8693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.643504][ T8693] Cannot create hsr debugfs directory [ 355.769534][ T8747] lo speed is unknown, defaulting to 1000 [ 356.722323][ T8761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.055719][ T5828] Bluetooth: hci5: command tx timeout [ 358.271811][ T8768] serio: Serial port ttynull [ 358.361069][ T8773] CUSE: DEVNAME unspecified [ 358.983373][ T8693] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 359.048418][ T8693] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 359.084318][ T8693] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 359.119171][ T8693] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 359.138266][ T5828] Bluetooth: hci5: command tx timeout [ 359.263689][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.734'. [ 359.341960][ T8693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.404213][ T8693] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.428547][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.435828][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.454908][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.462225][ T6373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.556422][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 359.735757][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 359.750362][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 359.777314][ T10] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 359.792634][ T10] usb 6-1: config 7 has no interface number 0 [ 359.811922][ T8693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.820135][ T10] usb 6-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 359.832564][ T10] usb 6-1: config 7 interface 187 has no altsetting 0 [ 359.842213][ T10] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 359.852114][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.861879][ T10] usb 6-1: Product: syz [ 359.866472][ T10] usb 6-1: Manufacturer: syz [ 359.871189][ T10] usb 6-1: SerialNumber: syz [ 359.881958][ T8780] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 360.099228][ T10] usb 6-1: Limiting number of CPorts to U8_MAX [ 360.125555][ T10] usb 6-1: Unknown endpoint type found, address 0x07 [ 360.154510][ T10] usb 6-1: Not enough endpoints found in device, aborting! [ 360.378211][ T2156] usb 6-1: USB disconnect, device number 9 [ 360.714974][ T8791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.453314][ T8693] veth0_vlan: entered promiscuous mode [ 362.469817][ T8693] veth1_vlan: entered promiscuous mode [ 363.054269][ T8693] veth0_macvtap: entered promiscuous mode [ 363.106375][ T5881] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 363.125392][ T8693] veth1_macvtap: entered promiscuous mode [ 363.197076][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.251166][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.278338][ T5881] usb 6-1: config 0 has an invalid interface number: 228 but max is 0 [ 363.283235][ T8693] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.301770][ T5881] usb 6-1: config 0 has no interface number 0 [ 363.330098][ T5881] usb 6-1: config 0 interface 228 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 363.425740][ T5881] usb 6-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=34.b1 [ 363.526726][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.263487][ T8693] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.272800][ T8693] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.282780][ T8693] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.340670][ T5881] usb 6-1: Product: syz [ 364.466232][ T5881] usb 6-1: Manufacturer: syz [ 364.471039][ T5881] usb 6-1: SerialNumber: syz [ 364.846984][ T5881] usb 6-1: config 0 descriptor?? [ 364.895515][ T5881] usb 6-1: can't set config #0, error -71 [ 364.922967][ T25] block nbd1: Possible stuck request ffff888025740000: control (read@0,4096B). Runtime 30 seconds [ 364.962928][ T5881] usb 6-1: USB disconnect, device number 10 [ 365.162080][ T6373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.188028][ T6373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.257139][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.265093][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.559983][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.6.750'. [ 366.049673][ T8843] bridge0: port 3(veth0_to_bridge) entered blocking state [ 366.057709][ T8843] bridge0: port 3(veth0_to_bridge) entered disabled state [ 366.066142][ T8843] veth0_to_bridge: entered allmulticast mode [ 366.083702][ T8843] veth0_to_bridge: entered promiscuous mode [ 366.091019][ T8843] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.113511][ T8843] bridge0: port 3(veth0_to_bridge) entered blocking state [ 366.122405][ T8843] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 366.585792][ T5881] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 366.795672][ T5881] usb 7-1: Using ep0 maxpacket: 32 [ 366.832632][ T5881] usb 7-1: unable to get BOS descriptor or descriptor too short [ 366.877749][ T8846] input: syz1 as /devices/virtual/input/input22 [ 366.954187][ T5881] usb 7-1: config 7 has an invalid interface number: 187 but max is 0 [ 367.021716][ T5881] usb 7-1: config 7 has no interface number 0 [ 367.134690][ T5881] usb 7-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 367.233458][ T5881] usb 7-1: config 7 interface 187 has no altsetting 0 [ 367.335342][ T5881] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 367.379955][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.416281][ T5881] usb 7-1: Product: syz [ 367.423744][ T5881] usb 7-1: Manufacturer: syz [ 367.456172][ T5881] usb 7-1: SerialNumber: syz [ 367.477200][ T8837] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 367.741450][ T8858] input: syz1 as /devices/virtual/input/input23 [ 367.968845][ T5881] usb 7-1: Limiting number of CPorts to U8_MAX [ 368.026087][ T5881] usb 7-1: Unknown endpoint type found, address 0x07 [ 368.049602][ T5881] usb 7-1: Not enough endpoints found in device, aborting! [ 368.189124][ T5881] usb 7-1: USB disconnect, device number 2 [ 368.247422][ T8865] CUSE: DEVNAME unspecified [ 370.829141][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'. [ 372.345789][ T838] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 372.507010][ T838] usb 5-1: Using ep0 maxpacket: 32 [ 372.619852][ T838] usb 5-1: unable to get BOS descriptor or descriptor too short [ 372.636753][ T838] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 372.637992][ T8923] CUSE: DEVNAME unspecified [ 372.645068][ T838] usb 5-1: config 7 has no interface number 0 [ 372.645135][ T838] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 372.698643][ T838] usb 5-1: config 7 interface 187 has no altsetting 0 [ 372.718861][ T838] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 372.745704][ T838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.770471][ T838] usb 5-1: Product: syz [ 372.777302][ T8920] lo speed is unknown, defaulting to 1000 [ 372.796024][ T838] usb 5-1: Manufacturer: syz [ 372.807349][ T838] usb 5-1: SerialNumber: syz [ 372.851123][ T8900] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 373.092595][ T838] usb 5-1: Limiting number of CPorts to U8_MAX [ 373.151808][ T838] usb 5-1: Unknown endpoint type found, address 0x07 [ 373.183747][ T838] usb 5-1: Not enough endpoints found in device, aborting! [ 373.304460][ T838] usb 5-1: USB disconnect, device number 14 [ 374.441118][ T8947] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 374.448012][ T8947] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 374.457627][ T8947] vhci_hcd vhci_hcd.0: Device attached [ 374.756063][ T838] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 375.166184][ T8954] FAULT_INJECTION: forcing a failure. [ 375.166184][ T8954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.398324][ T8954] CPU: 0 UID: 0 PID: 8954 Comm: syz.4.787 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 375.398358][ T8954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 375.398372][ T8954] Call Trace: [ 375.398382][ T8954] [ 375.398392][ T8954] dump_stack_lvl+0x189/0x250 [ 375.398433][ T8954] ? __pfx____ratelimit+0x10/0x10 [ 375.398464][ T8954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.398497][ T8954] ? __pfx__printk+0x10/0x10 [ 375.398539][ T8954] should_fail_ex+0x414/0x560 [ 375.398579][ T8954] _copy_to_user+0x31/0xb0 [ 375.398608][ T8954] simple_read_from_buffer+0xe1/0x170 [ 375.398644][ T8954] proc_fail_nth_read+0x1df/0x250 [ 375.398680][ T8954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 375.398717][ T8954] ? rw_verify_area+0x258/0x650 [ 375.398741][ T8954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 375.398775][ T8954] vfs_read+0x1fd/0x980 [ 375.398806][ T8954] ? __pfx___mutex_lock+0x10/0x10 [ 375.398839][ T8954] ? __pfx_vfs_read+0x10/0x10 [ 375.398866][ T8954] ? __fget_files+0x2a/0x420 [ 375.398902][ T8954] ? __fget_files+0x3a0/0x420 [ 375.398931][ T8954] ? __fget_files+0x2a/0x420 [ 375.398971][ T8954] ksys_read+0x145/0x250 [ 375.399000][ T8954] ? __pfx_ksys_read+0x10/0x10 [ 375.399031][ T8954] ? do_syscall_64+0xbe/0x3b0 [ 375.399068][ T8954] do_syscall_64+0xfa/0x3b0 [ 375.399102][ T8954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.399123][ T8954] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 375.399144][ T8954] ? clear_bhb_loop+0x60/0xb0 [ 375.399170][ T8954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.399195][ T8954] RIP: 0033:0x7f6ab938d37c [ 375.399215][ T8954] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 375.399235][ T8954] RSP: 002b:00007f6ab71f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 375.399259][ T8954] RAX: ffffffffffffffda RBX: 00007f6ab95b6160 RCX: 00007f6ab938d37c [ 375.399275][ T8954] RDX: 000000000000000f RSI: 00007f6ab71f60a0 RDI: 0000000000000005 [ 375.399288][ T8954] RBP: 00007f6ab71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 375.399302][ T8954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.399320][ T8954] R13: 0000000000000001 R14: 00007f6ab95b6160 R15: 00007fffc1636498 [ 375.399355][ T8954] [ 375.846541][ T8948] vhci_hcd: connection reset by peer [ 375.868706][ T6047] vhci_hcd: stop threads [ 375.873550][ T6047] vhci_hcd: release socket [ 376.221461][ T6047] vhci_hcd: disconnect device [ 377.495527][ T8967] CUSE: DEVNAME unspecified [ 379.655247][ T8992] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 379.891627][ T8995] FAULT_INJECTION: forcing a failure. [ 379.891627][ T8995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.910679][ T8995] CPU: 1 UID: 0 PID: 8995 Comm: syz.4.800 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 379.910716][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.910730][ T8995] Call Trace: [ 379.910739][ T8995] [ 379.910749][ T8995] dump_stack_lvl+0x189/0x250 [ 379.910787][ T8995] ? __pfx____ratelimit+0x10/0x10 [ 379.910818][ T8995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.910851][ T8995] ? __pfx__printk+0x10/0x10 [ 379.910872][ T8995] ? __might_fault+0xb0/0x130 [ 379.910913][ T8995] should_fail_ex+0x414/0x560 [ 379.910951][ T8995] _copy_from_user+0x2d/0xb0 [ 379.910978][ T8995] ___sys_recvmsg+0x12e/0x510 [ 379.911013][ T8995] ? __pfx____sys_recvmsg+0x10/0x10 [ 379.911076][ T8995] ? __fget_files+0x3a0/0x420 [ 379.911119][ T8995] do_recvmmsg+0x307/0x770 [ 379.911156][ T8995] ? __pfx_do_recvmmsg+0x10/0x10 [ 379.911197][ T8995] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 379.911251][ T8995] __x64_sys_recvmmsg+0x190/0x240 [ 379.911283][ T8995] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 379.911309][ T8995] ? rcu_is_watching+0x15/0xb0 [ 379.911347][ T8995] ? do_syscall_64+0xbe/0x3b0 [ 379.911384][ T8995] do_syscall_64+0xfa/0x3b0 [ 379.911414][ T8995] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.911444][ T8995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.911465][ T8995] ? clear_bhb_loop+0x60/0xb0 [ 379.911492][ T8995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.911513][ T8995] RIP: 0033:0x7f6ab938e969 [ 379.911532][ T8995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.911551][ T8995] RSP: 002b:00007f6aba117038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 379.911575][ T8995] RAX: ffffffffffffffda RBX: 00007f6ab95b6080 RCX: 00007f6ab938e969 [ 379.911591][ T8995] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003 [ 379.911604][ T8995] RBP: 00007f6aba117090 R08: 0000000000000000 R09: 0000000000000000 [ 379.911618][ T8995] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000001 [ 379.911631][ T8995] R13: 0000000000000000 R14: 00007f6ab95b6080 R15: 00007fffc1636498 [ 379.911664][ T8995] [ 380.138538][ T838] vhci_hcd: vhci_device speed not set [ 381.569682][ T2156] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 381.597894][ T9009] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 381.604864][ T9009] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.615295][ T9009] vhci_hcd vhci_hcd.0: Device attached [ 381.931246][ T2156] usb 3-1: Using ep0 maxpacket: 16 [ 382.031788][ T9010] vhci_hcd: connection closed [ 382.045657][ T2156] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.135534][ T36] vhci_hcd: stop threads [ 382.180925][ T36] vhci_hcd: release socket [ 382.196300][ T5880] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 382.247333][ T36] vhci_hcd: disconnect device [ 382.286593][ T2156] usb 3-1: config 0 interface 0 has no altsetting 0 [ 382.388674][ T2156] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 382.490414][ T2156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.565231][ T2156] usb 3-1: config 0 descriptor?? [ 384.102796][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.109534][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.217484][ T9025] netlink: 'syz.5.810': attribute type 10 has an invalid length. [ 384.245829][ T2156] usbhid 3-1:0.0: can't add hid device: -71 [ 384.267207][ T9025] team0: Port device ip6gretap0 added [ 384.274302][ T2156] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 384.324212][ T2156] usb 3-1: USB disconnect, device number 15 [ 385.190759][ T9043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.366703][ T5880] vhci_hcd: vhci_device speed not set [ 388.055664][ T5941] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 388.354092][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 388.354114][ T30] audit: type=1800 audit(1749027364.529:63): pid=9066 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.822" name="dmabuf" dev="dmabuf" ino=1 res=0 errno=0 [ 388.411334][ T5941] usb 4-1: device descriptor read/64, error -71 [ 388.760985][ T9075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.363248][ T5941] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 389.557934][ T5941] usb 4-1: device descriptor read/64, error -71 [ 390.074746][ T5941] usb usb4-port1: attempt power cycle [ 390.350228][ T9087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.556975][ T9090] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 390.563739][ T9090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 390.572444][ T9090] vhci_hcd vhci_hcd.0: Device attached [ 390.897802][ T5816] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 391.555502][ T9091] vhci_hcd: connection reset by peer [ 391.736583][ T12] vhci_hcd: stop threads [ 391.804281][ T12] vhci_hcd: release socket [ 391.868495][ T12] vhci_hcd: disconnect device [ 392.046173][ T9100] netlink: 32 bytes leftover after parsing attributes in process `syz.4.833'. [ 392.429236][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 392.639513][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.715805][ T9110] lo speed is unknown, defaulting to 1000 [ 392.769151][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.035979][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 393.057246][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.092487][ T24] usb 5-1: config 0 descriptor?? [ 393.341056][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.346605][ T9123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.356992][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.383997][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.420359][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.487070][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.519929][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.125549][ T25] block nbd1: Possible stuck request ffff888025740000: control (read@0,4096B). Runtime 60 seconds [ 395.887260][ T9167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.985839][ T9168] lo speed is unknown, defaulting to 1000 [ 396.169007][ T5816] vhci_hcd: vhci_device speed not set [ 396.271016][ T9172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.118633][ T30] audit: type=1800 audit(1749027374.289:64): pid=9179 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.858" name="dmabuf" dev="dmabuf" ino=2 res=0 errno=0 [ 398.215781][ T24] usbhid 5-1:0.0: can't add hid device: -32 [ 398.222203][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 398.383256][ T5941] usb 5-1: USB disconnect, device number 15 [ 398.939539][ T9202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.046186][ T5941] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 399.225730][ T5941] usb 5-1: Using ep0 maxpacket: 16 [ 399.254195][ T5941] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=7f.76 [ 399.268505][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.280670][ T5941] usb 5-1: Product: syz [ 399.284924][ T5941] usb 5-1: Manufacturer: syz [ 399.367939][ T9209] 9pnet_fd: Insufficient options for proto=fd [ 400.205716][ T5941] usb 5-1: SerialNumber: syz [ 400.218337][ T5941] usb 5-1: config 0 descriptor?? [ 400.597596][ T5941] usb 5-1: ignoring: not an USB2CAN converter [ 400.959284][ T30] audit: type=1800 audit(1749027377.119:65): pid=9213 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.871" name="dmabuf" dev="dmabuf" ino=3 res=0 errno=0 [ 401.375383][ T9227] FAULT_INJECTION: forcing a failure. [ 401.375383][ T9227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.417304][ T9227] CPU: 1 UID: 0 PID: 9227 Comm: syz.2.874 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 401.417336][ T9227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.417350][ T9227] Call Trace: [ 401.417359][ T9227] [ 401.417368][ T9227] dump_stack_lvl+0x189/0x250 [ 401.417405][ T9227] ? __pfx____ratelimit+0x10/0x10 [ 401.417436][ T9227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.417468][ T9227] ? __pfx__printk+0x10/0x10 [ 401.417490][ T9227] ? __might_fault+0xb0/0x130 [ 401.417529][ T9227] should_fail_ex+0x414/0x560 [ 401.417566][ T9227] _copy_from_user+0x2d/0xb0 [ 401.417595][ T9227] ___sys_sendmsg+0x158/0x2a0 [ 401.417624][ T9227] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.417700][ T9227] ? __fget_files+0x2a/0x420 [ 401.417731][ T9227] ? __fget_files+0x3a0/0x420 [ 401.417772][ T9227] __x64_sys_sendmsg+0x19b/0x260 [ 401.417801][ T9227] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.417837][ T9227] ? __pfx_ksys_write+0x10/0x10 [ 401.417860][ T9227] ? rcu_is_watching+0x15/0xb0 [ 401.417898][ T9227] ? do_syscall_64+0xbe/0x3b0 [ 401.417934][ T9227] do_syscall_64+0xfa/0x3b0 [ 401.417963][ T9227] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.417993][ T9227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.418014][ T9227] ? clear_bhb_loop+0x60/0xb0 [ 401.418040][ T9227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.418061][ T9227] RIP: 0033:0x7f4eb5d8e969 [ 401.418079][ T9227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.418098][ T9227] RSP: 002b:00007f4eb6b8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.418121][ T9227] RAX: ffffffffffffffda RBX: 00007f4eb5fb5fa0 RCX: 00007f4eb5d8e969 [ 401.418137][ T9227] RDX: 0000000020000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 401.418151][ T9227] RBP: 00007f4eb6b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 401.418164][ T9227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.418177][ T9227] R13: 0000000000000000 R14: 00007f4eb5fb5fa0 R15: 00007ffd9fcfe838 [ 401.418210][ T9227] [ 401.725928][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 401.865680][ T24] usb 7-1: device descriptor read/64, error -71 [ 401.958572][ T9232] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 401.965407][ T9232] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 401.973246][ T9232] vhci_hcd vhci_hcd.0: Device attached [ 401.992271][ T9233] vhci_hcd: connection closed [ 401.993995][ T12] vhci_hcd: stop threads [ 402.021247][ T12] vhci_hcd: release socket [ 402.030496][ T12] vhci_hcd: disconnect device [ 402.106367][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 402.185853][ T5880] usb 5-1: USB disconnect, device number 16 [ 402.242000][ T24] usb 7-1: device descriptor read/64, error -71 [ 402.367342][ T24] usb usb7-port1: attempt power cycle [ 402.568634][ T9245] 9pnet_fd: Insufficient options for proto=fd [ 403.095326][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 403.406291][ T24] usb 7-1: device descriptor read/8, error -71 [ 403.459283][ T30] audit: type=1800 audit(1749027379.639:66): pid=9248 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.883" name="dmabuf" dev="dmabuf" ino=4 res=0 errno=0 [ 403.646070][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 403.783540][ T24] usb 7-1: device descriptor read/8, error -71 [ 403.963782][ T24] usb usb7-port1: unable to enumerate USB device [ 404.551727][ T9264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 405.028566][ T9267] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 406.887686][ T9273] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 406.894465][ T9273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 406.904497][ T9273] vhci_hcd vhci_hcd.0: Device attached [ 406.926401][ T9278] vhci_hcd: connection closed [ 406.927025][ T6047] vhci_hcd: stop threads [ 406.944683][ T6047] vhci_hcd: release socket [ 406.951134][ T6047] vhci_hcd: disconnect device [ 407.194192][ T9284] 9pnet_fd: Insufficient options for proto=fd [ 408.201793][ T9292] FAULT_INJECTION: forcing a failure. [ 408.201793][ T9292] name failslab, interval 1, probability 0, space 0, times 0 [ 408.276212][ T9292] CPU: 0 UID: 0 PID: 9292 Comm: syz.6.898 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 408.276248][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.276261][ T9292] Call Trace: [ 408.276270][ T9292] [ 408.276280][ T9292] dump_stack_lvl+0x189/0x250 [ 408.276318][ T9292] ? __pfx____ratelimit+0x10/0x10 [ 408.276349][ T9292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.276380][ T9292] ? __pfx__printk+0x10/0x10 [ 408.276409][ T9292] ? __pfx___might_resched+0x10/0x10 [ 408.276441][ T9292] ? fs_reclaim_acquire+0x7d/0x100 [ 408.276479][ T9292] should_fail_ex+0x414/0x560 [ 408.276517][ T9292] should_failslab+0xa8/0x100 [ 408.276549][ T9292] __kmalloc_noprof+0xcb/0x4f0 [ 408.276574][ T9292] ? kfree+0x4d/0x440 [ 408.276595][ T9292] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 408.276626][ T9292] tomoyo_realpath_from_path+0xe3/0x5d0 [ 408.276652][ T9292] ? tomoyo_domain+0xda/0x130 [ 408.276683][ T9292] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 408.276715][ T9292] tomoyo_path_number_perm+0x1e8/0x5a0 [ 408.276751][ T9292] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 408.276803][ T9292] ? __lock_acquire+0xab9/0xd20 [ 408.276857][ T9292] ? __fget_files+0x2a/0x420 [ 408.276892][ T9292] ? __fget_files+0x2a/0x420 [ 408.276920][ T9292] ? __fget_files+0x3a0/0x420 [ 408.276950][ T9292] ? __fget_files+0x2a/0x420 [ 408.276985][ T9292] security_file_ioctl+0xcb/0x2d0 [ 408.277021][ T9292] __se_sys_ioctl+0x47/0x170 [ 408.277048][ T9292] do_syscall_64+0xfa/0x3b0 [ 408.277079][ T9292] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.277110][ T9292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.277132][ T9292] ? clear_bhb_loop+0x60/0xb0 [ 408.277169][ T9292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.277191][ T9292] RIP: 0033:0x7f8e1038e969 [ 408.277210][ T9292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.277230][ T9292] RSP: 002b:00007f8e0e1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.277253][ T9292] RAX: ffffffffffffffda RBX: 00007f8e105b6080 RCX: 00007f8e1038e969 [ 408.277268][ T9292] RDX: 00002000000010c0 RSI: 00000000c0606610 RDI: 0000000000000003 [ 408.277282][ T9292] RBP: 00007f8e0e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 408.277296][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.277308][ T9292] R13: 0000000000000000 R14: 00007f8e105b6080 R15: 00007ffd89784db8 [ 408.277343][ T9292] [ 408.277482][ T9292] ERROR: Out of memory at tomoyo_realpath_from_path. [ 408.816164][ T5942] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 408.842510][ T9297] netlink: 80 bytes leftover after parsing attributes in process `syz.3.900'. [ 408.978953][ T5942] usb 5-1: Using ep0 maxpacket: 32 [ 409.002015][ T5942] usb 5-1: unable to get BOS descriptor or descriptor too short [ 409.027233][ T5942] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 409.068947][ T5942] usb 5-1: can't read configurations, error -71 [ 409.111481][ T9309] nfs4: Bad value for 'source' [ 410.176015][ T9324] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 410.182631][ T9324] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.191643][ T9324] vhci_hcd vhci_hcd.0: Device attached [ 410.201911][ T9325] vhci_hcd: connection closed [ 410.207133][ T1168] vhci_hcd: stop threads [ 410.236953][ T1168] vhci_hcd: release socket [ 410.242050][ T1168] vhci_hcd: disconnect device [ 410.499629][ T9331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 411.351097][ T9334] netlink: 132 bytes leftover after parsing attributes in process `syz.5.913'. [ 411.363156][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.913'. [ 411.372761][ T9334] netlink: 40 bytes leftover after parsing attributes in process `syz.5.913'. [ 412.484937][ T9346] netlink: 'syz.4.916': attribute type 1 has an invalid length. [ 412.755649][ T5942] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 412.906116][ T5942] usb 7-1: Using ep0 maxpacket: 32 [ 412.943808][ T5942] usb 7-1: unable to get BOS descriptor or descriptor too short [ 412.967198][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'. [ 412.984770][ T5942] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 413.041704][ T5942] usb 7-1: can't read configurations, error -71 [ 413.171314][ T9337] overlay: ./file0 is not a directory [ 413.767004][ T9374] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 413.773791][ T9374] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 413.781898][ T9374] vhci_hcd vhci_hcd.0: Device attached [ 413.909091][ T9375] vhci_hcd: connection closed [ 413.909825][ T6047] vhci_hcd: stop threads [ 413.923182][ T6047] vhci_hcd: release socket [ 413.928664][ T6047] vhci_hcd: disconnect device [ 413.938864][ T9379] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 413.954490][ T9379] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 414.494265][ T5941] vhci_hcd: vhci_device speed not set [ 414.541721][ T9378] netlink: 88 bytes leftover after parsing attributes in process `syz.4.922'. [ 414.551104][ T9378] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 414.581993][ T9379] FAULT_INJECTION: forcing a failure. [ 414.581993][ T9379] name failslab, interval 1, probability 0, space 0, times 0 [ 414.608864][ T9379] CPU: 1 UID: 0 PID: 9379 Comm: syz.2.926 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 414.608897][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 414.608910][ T9379] Call Trace: [ 414.608920][ T9379] [ 414.608929][ T9379] dump_stack_lvl+0x189/0x250 [ 414.608972][ T9379] ? __pfx____ratelimit+0x10/0x10 [ 414.609003][ T9379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.609036][ T9379] ? __pfx__printk+0x10/0x10 [ 414.609066][ T9379] ? __pfx___might_resched+0x10/0x10 [ 414.609098][ T9379] ? fs_reclaim_acquire+0x7d/0x100 [ 414.609137][ T9379] should_fail_ex+0x414/0x560 [ 414.609176][ T9379] should_failslab+0xa8/0x100 [ 414.609207][ T9379] __kmalloc_noprof+0xcb/0x4f0 [ 414.609233][ T9379] ? kfree+0x4d/0x440 [ 414.609254][ T9379] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 414.609285][ T9379] tomoyo_realpath_from_path+0xe3/0x5d0 [ 414.609312][ T9379] ? tomoyo_domain+0xda/0x130 [ 414.609355][ T9379] tomoyo_path_perm+0x213/0x4b0 [ 414.609388][ T9379] ? tomoyo_path_perm+0x1e3/0x4b0 [ 414.609419][ T9379] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 414.609447][ T9379] ? __kasan_check_byte+0x12/0x40 [ 414.609483][ T9379] ? rcu_is_watching+0x15/0xb0 [ 414.609513][ T9379] ? __kasan_check_byte+0x12/0x40 [ 414.609561][ T9379] ? rcu_is_watching+0x15/0xb0 [ 414.609595][ T9379] ? lock_release+0x4b/0x3e0 [ 414.609622][ T9379] ? lock_release+0x4b/0x3e0 [ 414.609658][ T9379] ? is_bpf_text_address+0x292/0x2b0 [ 414.609689][ T9379] ? is_bpf_text_address+0x26/0x2b0 [ 414.609727][ T9379] security_inode_getattr+0x12f/0x330 [ 414.609761][ T9379] vfs_getattr+0x23/0x70 [ 414.609795][ T9379] ovl_iterate+0xbc7/0x1f40 [ 414.609825][ T9379] ? check_noncircular+0xe0/0x160 [ 414.609881][ T9379] ? __pfx_ovl_iterate+0x10/0x10 [ 414.610013][ T9379] ? __pfx_ovl_fill_real+0x10/0x10 [ 414.610076][ T9379] ? down_write+0x162/0x1f0 [ 414.610097][ T9379] ? __pfx_down_write+0x10/0x10 [ 414.610125][ T9379] ? __pfx_ovl_iterate+0x10/0x10 [ 414.610159][ T9379] wrap_directory_iterator+0x93/0xe0 [ 414.610191][ T9379] iterate_dir+0x5ac/0x770 [ 414.610224][ T9379] __se_sys_getdents+0xe4/0x250 [ 414.610254][ T9379] ? __pfx___se_sys_getdents+0x10/0x10 [ 414.610278][ T9379] ? ksys_write+0x22a/0x250 [ 414.610301][ T9379] ? __pfx_filldir+0x10/0x10 [ 414.610329][ T9379] ? __pfx_ksys_write+0x10/0x10 [ 414.610431][ T9379] ? rcu_is_watching+0x15/0xb0 [ 414.610471][ T9379] ? do_syscall_64+0xbe/0x3b0 [ 414.610509][ T9379] do_syscall_64+0xfa/0x3b0 [ 414.610540][ T9379] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.610571][ T9379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.610593][ T9379] ? clear_bhb_loop+0x60/0xb0 [ 414.610619][ T9379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.610640][ T9379] RIP: 0033:0x7f4eb5d8e969 [ 414.610662][ T9379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.610682][ T9379] RSP: 002b:00007f4eb6b8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 414.610705][ T9379] RAX: ffffffffffffffda RBX: 00007f4eb5fb5fa0 RCX: 00007f4eb5d8e969 [ 414.610721][ T9379] RDX: 00000000000000c2 RSI: 0000200000000140 RDI: 0000000000000003 [ 414.610736][ T9379] RBP: 00007f4eb6b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 414.610749][ T9379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.610762][ T9379] R13: 0000000000000000 R14: 00007f4eb5fb5fa0 R15: 00007ffd9fcfe838 [ 414.610798][ T9379] [ 414.612526][ T9379] ERROR: Out of memory at tomoyo_realpath_from_path. [ 415.192714][ T9385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.519242][ T5941] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 418.715721][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 418.733252][ T5941] usb 4-1: config index 0 descriptor too short (expected 216, got 185) [ 418.747842][ T5941] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1608, setting to 1024 [ 418.765754][ T5878] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 418.765754][ T5941] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 49, changing to 7 [ 418.768801][ T5941] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.795788][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.804153][ T5941] usb 4-1: Product: syz [ 418.808515][ T5941] usb 4-1: Manufacturer: syz [ 418.813228][ T5941] usb 4-1: SerialNumber: syz [ 418.930324][ T9407] netlink: 96 bytes leftover after parsing attributes in process `syz.6.933'. [ 418.967672][ T5878] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 418.992490][ T5878] usb 3-1: config 0 has no interface number 0 [ 419.013340][ T5878] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 419.035759][ T5878] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 419.054379][ T5941] usb 4-1: found format II with max.bitrate = 10, frame size=6 [ 419.071914][ T5878] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 419.090334][ T5941] usb 4-1: found format II with max.bitrate = 10, frame size=6 [ 419.113640][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.162427][ T5878] usb 3-1: Product: syz [ 419.174083][ T5878] usb 3-1: Manufacturer: syz [ 419.189817][ T5878] usb 3-1: SerialNumber: syz [ 419.211551][ T5878] usb 3-1: config 0 descriptor?? [ 419.225697][ T5941] usb 4-1: USB disconnect, device number 19 [ 419.229968][ T9398] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 419.247486][ T5878] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 419.364865][ T5873] udevd[5873]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.496223][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 419.838261][ T5878] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 419.931267][ T5878] usb 3-1: USB disconnect, device number 16 [ 419.983396][ T5878] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 420.103498][ T9423] 9pnet_fd: Insufficient options for proto=fd [ 420.816746][ T5878] cyberjack 3-1:0.69: device disconnected [ 421.165701][ T5878] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 421.181115][ T9435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.235667][ T5878] usb 3-1: device not accepting address 17, error -71 [ 424.028790][ T9463] netlink: 'syz.2.947': attribute type 1 has an invalid length. [ 424.182745][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.947'. [ 424.230214][ T9468] 9pnet_fd: Insufficient options for proto=fd [ 425.387559][ T9464] bond1 (unregistering): Released all slaves [ 425.708702][ T25] block nbd1: Possible stuck request ffff888025740000: control (read@0,4096B). Runtime 90 seconds [ 425.754702][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.953'. [ 426.406365][ T5941] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 426.664924][ T5941] usb 5-1: device descriptor read/64, error -71 [ 427.088486][ T5941] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 427.438913][ T5941] usb 5-1: device descriptor read/64, error -71 [ 427.656466][ T5941] usb usb5-port1: attempt power cycle [ 427.896558][ T9497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.128463][ T5941] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 428.280810][ T5941] usb 5-1: device descriptor read/8, error -71 [ 428.897825][ T5941] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 429.006117][ T5941] usb 5-1: device descriptor read/8, error -71 [ 429.059420][ T9507] FAULT_INJECTION: forcing a failure. [ 429.059420][ T9507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.106543][ T9507] CPU: 1 UID: 0 PID: 9507 Comm: syz.6.961 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 429.106575][ T9507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.106592][ T9507] Call Trace: [ 429.106605][ T9507] [ 429.106614][ T9507] dump_stack_lvl+0x189/0x250 [ 429.106651][ T9507] ? __pfx____ratelimit+0x10/0x10 [ 429.106682][ T9507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.106713][ T9507] ? __pfx__printk+0x10/0x10 [ 429.106735][ T9507] ? __might_fault+0xb0/0x130 [ 429.106782][ T9507] should_fail_ex+0x414/0x560 [ 429.106819][ T9507] _copy_from_user+0x2d/0xb0 [ 429.106845][ T9507] rds_setsockopt+0x5af/0xc40 [ 429.106876][ T9507] ? __pfx_rds_setsockopt+0x10/0x10 [ 429.106910][ T9507] ? __lock_acquire+0xab9/0xd20 [ 429.106950][ T9507] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 429.106976][ T9507] ? __pfx_rds_setsockopt+0x10/0x10 [ 429.107004][ T9507] do_sock_setsockopt+0x257/0x3e0 [ 429.107032][ T9507] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 429.107061][ T9507] ? __fget_files+0x2a/0x420 [ 429.107099][ T9507] __x64_sys_setsockopt+0x18b/0x220 [ 429.107131][ T9507] do_syscall_64+0xfa/0x3b0 [ 429.107162][ T9507] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.107192][ T9507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.107212][ T9507] ? clear_bhb_loop+0x60/0xb0 [ 429.107239][ T9507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.107260][ T9507] RIP: 0033:0x7f8e1038e969 [ 429.107278][ T9507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.107297][ T9507] RSP: 002b:00007f8e1112b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 429.107319][ T9507] RAX: ffffffffffffffda RBX: 00007f8e105b5fa0 RCX: 00007f8e1038e969 [ 429.107335][ T9507] RDX: 0000000000000006 RSI: 0000000000000114 RDI: 0000000000000003 [ 429.107348][ T9507] RBP: 00007f8e1112b090 R08: 0000000000000004 R09: 0000000000000000 [ 429.107362][ T9507] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 429.107375][ T9507] R13: 0000000000000000 R14: 00007f8e105b5fa0 R15: 00007ffd89784db8 [ 429.107407][ T9507] [ 429.136179][ T5941] usb usb5-port1: unable to enumerate USB device [ 429.423610][ T9514] 9pnet_fd: Insufficient options for proto=fd [ 430.761499][ T9519] FAULT_INJECTION: forcing a failure. [ 430.761499][ T9519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.801522][ T9519] CPU: 0 UID: 0 PID: 9519 Comm: syz.6.966 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 430.801554][ T9519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.801567][ T9519] Call Trace: [ 430.801575][ T9519] [ 430.801584][ T9519] dump_stack_lvl+0x189/0x250 [ 430.801621][ T9519] ? __pfx____ratelimit+0x10/0x10 [ 430.801650][ T9519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.801682][ T9519] ? __pfx__printk+0x10/0x10 [ 430.801704][ T9519] ? __might_fault+0xb0/0x130 [ 430.801744][ T9519] should_fail_ex+0x414/0x560 [ 430.801781][ T9519] _copy_from_user+0x2d/0xb0 [ 430.801815][ T9519] do_sock_getsockopt+0x1cd/0x650 [ 430.801844][ T9519] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 430.801868][ T9519] ? __pfx_do_syscall_64+0x10/0x10 [ 430.801899][ T9519] ? __fget_files+0x3a0/0x420 [ 430.801929][ T9519] ? __fget_files+0x2a/0x420 [ 430.801967][ T9519] __x64_sys_getsockopt+0x1a5/0x250 [ 430.801991][ T9519] ? __pfx_do_syscall_64+0x10/0x10 [ 430.802024][ T9519] ? __pfx_do_syscall_64+0x10/0x10 [ 430.802061][ T9519] do_syscall_64+0xfa/0x3b0 [ 430.802091][ T9519] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.802120][ T9519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.802141][ T9519] ? clear_bhb_loop+0x60/0xb0 [ 430.802167][ T9519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.802188][ T9519] RIP: 0033:0x7f8e1038e969 [ 430.802208][ T9519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.802227][ T9519] RSP: 002b:00007f8e1112b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 430.802249][ T9519] RAX: ffffffffffffffda RBX: 00007f8e105b5fa0 RCX: 00007f8e1038e969 [ 430.802265][ T9519] RDX: 000000000000000a RSI: 0000000000000084 RDI: 0000000000000003 [ 430.802278][ T9519] RBP: 00007f8e1112b090 R08: 0000200000000040 R09: 0000000000000000 [ 430.802292][ T9519] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.802306][ T9519] R13: 0000000000000000 R14: 00007f8e105b5fa0 R15: 00007ffd89784db8 [ 430.802339][ T9519] [ 431.011666][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.895737][ T5941] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 432.098392][ T5941] usb 5-1: Using ep0 maxpacket: 16 [ 432.169474][ T5941] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.205661][ T5941] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.254544][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 432.275668][ T5941] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 432.295078][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.296787][ T9540] FAULT_INJECTION: forcing a failure. [ 432.296787][ T9540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.326386][ T9540] CPU: 1 UID: 0 PID: 9540 Comm: syz.2.974 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 432.326418][ T9540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 432.326431][ T9540] Call Trace: [ 432.326440][ T9540] [ 432.326449][ T9540] dump_stack_lvl+0x189/0x250 [ 432.326486][ T9540] ? __pfx____ratelimit+0x10/0x10 [ 432.326516][ T9540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.326548][ T9540] ? __pfx__printk+0x10/0x10 [ 432.326570][ T9540] ? __might_fault+0xb0/0x130 [ 432.326621][ T9540] should_fail_ex+0x414/0x560 [ 432.326660][ T9540] _copy_from_user+0x2d/0xb0 [ 432.326687][ T9540] ___sys_sendmsg+0x158/0x2a0 [ 432.326716][ T9540] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.326782][ T9540] ? __fget_files+0x2a/0x420 [ 432.326812][ T9540] ? __fget_files+0x3a0/0x420 [ 432.326852][ T9540] __x64_sys_sendmsg+0x19b/0x260 [ 432.326881][ T9540] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.326918][ T9540] ? __pfx_ksys_write+0x10/0x10 [ 432.326941][ T9540] ? rcu_is_watching+0x15/0xb0 [ 432.326979][ T9540] ? do_syscall_64+0xbe/0x3b0 [ 432.327015][ T9540] do_syscall_64+0xfa/0x3b0 [ 432.327045][ T9540] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.327074][ T9540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.327095][ T9540] ? clear_bhb_loop+0x60/0xb0 [ 432.327121][ T9540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.327142][ T9540] RIP: 0033:0x7f4eb5d8e969 [ 432.327160][ T9540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.327179][ T9540] RSP: 002b:00007f4eb6b8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.327202][ T9540] RAX: ffffffffffffffda RBX: 00007f4eb5fb5fa0 RCX: 00007f4eb5d8e969 [ 432.327218][ T9540] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 432.327230][ T9540] RBP: 00007f4eb6b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 432.327243][ T9540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.327255][ T9540] R13: 0000000000000000 R14: 00007f4eb5fb5fa0 R15: 00007ffd9fcfe838 [ 432.327286][ T9540] [ 432.328491][ T5941] usb 5-1: config 0 descriptor?? [ 432.708702][ T9548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.711436][ T9558] 9pnet_fd: Insufficient options for proto=fd [ 433.985073][ T5941] usb 5-1: can't set config #0, error -71 [ 434.007661][ T5941] usb 5-1: USB disconnect, device number 23 [ 435.117441][ T9566] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 435.124587][ T9566] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 435.133328][ T9566] vhci_hcd vhci_hcd.0: Device attached [ 435.406153][ T5941] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 436.514932][ T9567] vhci_hcd: connection reset by peer [ 436.553664][ T1325] vhci_hcd: stop threads [ 436.579478][ T1325] vhci_hcd: release socket [ 436.666348][ T1325] vhci_hcd: disconnect device [ 436.822522][ T9569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.479146][ T9593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.656830][ T9594] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 438.598861][ T9604] 9pnet_fd: Insufficient options for proto=fd [ 439.518680][ T9599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 440.731556][ T5941] vhci_hcd: vhci_device speed not set [ 440.812087][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 441.193904][ T24] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 441.233715][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.277142][ T24] usb 7-1: config 0 descriptor?? [ 441.285485][ T24] cp210x 7-1:0.0: cp210x converter detected [ 441.498622][ T24] usb 7-1: cp210x converter now attached to ttyUSB0 [ 441.576978][ T9633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.766028][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 441.874936][ T9638] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 442.005201][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 442.044055][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 442.060981][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 442.095524][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 442.154471][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.167556][ T10] usb 6-1: config 0 descriptor?? [ 442.176112][ T9621] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 442.223875][ T9642] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 442.269640][ T9645] FAULT_INJECTION: forcing a failure. [ 442.269640][ T9645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.284241][ T9645] CPU: 1 UID: 0 PID: 9645 Comm: syz.2.1008 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 442.284272][ T9645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 442.284286][ T9645] Call Trace: [ 442.284295][ T9645] [ 442.284305][ T9645] dump_stack_lvl+0x189/0x250 [ 442.284341][ T9645] ? __pfx____ratelimit+0x10/0x10 [ 442.284382][ T9645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.284415][ T9645] ? __pfx__printk+0x10/0x10 [ 442.284436][ T9645] ? __might_fault+0xb0/0x130 [ 442.284476][ T9645] should_fail_ex+0x414/0x560 [ 442.284515][ T9645] _copy_from_user+0x2d/0xb0 [ 442.284541][ T9645] io_sync_cancel+0x19e/0x8d0 [ 442.284576][ T9645] ? trace_contention_end+0x39/0x120 [ 442.284601][ T9645] ? __pfx_io_sync_cancel+0x10/0x10 [ 442.284643][ T9645] ? __se_sys_io_uring_register+0x1e1/0x11b0 [ 442.284672][ T9645] ? __fget_files+0x2a/0x420 [ 442.284704][ T9645] ? __pfx_autoremove_wake_function+0x10/0x10 [ 442.284729][ T9645] ? __fget_files+0x2a/0x420 [ 442.284757][ T9645] ? __fget_files+0x3a0/0x420 [ 442.284785][ T9645] ? __fget_files+0x2a/0x420 [ 442.284816][ T9645] ? io_is_uring_fops+0xd/0x50 [ 442.284849][ T9645] __se_sys_io_uring_register+0x925/0x11b0 [ 442.284877][ T9645] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 442.284897][ T9645] ? ksys_write+0x22a/0x250 [ 442.284925][ T9645] ? __pfx_ksys_write+0x10/0x10 [ 442.284946][ T9645] ? rcu_is_watching+0x15/0xb0 [ 442.284985][ T9645] ? do_syscall_64+0xbe/0x3b0 [ 442.285022][ T9645] do_syscall_64+0xfa/0x3b0 [ 442.285051][ T9645] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.285079][ T9645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.285099][ T9645] ? clear_bhb_loop+0x60/0xb0 [ 442.285127][ T9645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.285146][ T9645] RIP: 0033:0x7f4eb5d8e969 [ 442.285166][ T9645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.285184][ T9645] RSP: 002b:00007f4eb6b8c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 442.285207][ T9645] RAX: ffffffffffffffda RBX: 00007f4eb5fb5fa0 RCX: 00007f4eb5d8e969 [ 442.285220][ T9645] RDX: 0000200000000000 RSI: 0000000000000018 RDI: 0000000000000005 [ 442.285233][ T9645] RBP: 00007f4eb6b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 442.285247][ T9645] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 442.285260][ T9645] R13: 0000000000000000 R14: 00007f4eb5fb5fa0 R15: 00007ffd9fcfe838 [ 442.285294][ T9645] [ 442.827845][ T10] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 443.286896][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 443.385509][ T24] usb 7-1: USB disconnect, device number 9 [ 443.395424][ T10] usb 6-1: USB disconnect, device number 11 [ 443.448623][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 443.596188][ T24] cp210x 7-1:0.0: device disconnected [ 443.911466][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1013'. [ 445.244197][ T9680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.599987][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.627405][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.829144][ T9690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.211613][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 447.335649][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 447.556904][ T10] usb 5-1: device descriptor read/64, error -71 [ 448.011928][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 448.356286][ T10] usb 5-1: device descriptor read/64, error -71 [ 448.507274][ T10] usb usb5-port1: attempt power cycle [ 448.828967][ T9726] capability: warning: `syz.3.1032' uses 32-bit capabilities (legacy support in use) [ 448.927166][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 448.956570][ T10] usb 5-1: device descriptor read/8, error -71 [ 449.195767][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 450.429673][ T10] usb 5-1: device descriptor read/8, error -71 [ 450.556189][ T10] usb usb5-port1: unable to enumerate USB device [ 450.800717][ T9756] xt_hashlimit: max too large, truncated to 1048576 [ 450.812210][ T9756] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 452.973176][ T9773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.017251][ T9778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.727734][ T9782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.795678][ T5880] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 455.108632][ T5880] usb 4-1: device descriptor read/64, error -71 [ 455.436018][ T5880] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 455.578057][ T5880] usb 4-1: device descriptor read/64, error -71 [ 455.690404][ T5880] usb usb4-port1: attempt power cycle [ 455.776332][ T25] block nbd1: Possible stuck request ffff888025740000: control (read@0,4096B). Runtime 120 seconds [ 456.125932][ T5880] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 456.213563][ T5880] usb 4-1: device descriptor read/8, error -71 [ 456.565740][ T5880] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 456.616469][ T5880] usb 4-1: device descriptor read/8, error -71 [ 456.798953][ T5880] usb usb4-port1: unable to enumerate USB device [ 458.313475][ T9821] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 458.735703][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 459.109196][ T9841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.233517][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 459.242027][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 459.259984][ T10] usb 6-1: config 7 has an invalid interface number: 67 but max is 0 [ 459.281108][ T10] usb 6-1: config 7 has no interface number 0 [ 459.291923][ T10] usb 6-1: string descriptor 0 read error: -22 [ 459.307862][ T10] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 459.317903][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.564405][ T9827] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1066'. [ 459.575987][ T9827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.586595][ T9827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.601020][ T24] usb 6-1: USB disconnect, device number 12 [ 459.755875][ T5880] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 459.905805][ T5880] usb 4-1: device descriptor read/64, error -71 [ 460.186375][ T5880] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 460.367948][ T5880] usb 4-1: device descriptor read/64, error -71 [ 460.476203][ T5880] usb usb4-port1: attempt power cycle [ 460.703842][ T9879] FAULT_INJECTION: forcing a failure. [ 460.703842][ T9879] name failslab, interval 1, probability 0, space 0, times 0 [ 460.716925][ T9879] CPU: 0 UID: 0 PID: 9879 Comm: syz.2.1083 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 460.716955][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.716968][ T9879] Call Trace: [ 460.716978][ T9879] [ 460.716987][ T9879] dump_stack_lvl+0x189/0x250 [ 460.717024][ T9879] ? __pfx____ratelimit+0x10/0x10 [ 460.717055][ T9879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.717086][ T9879] ? __pfx__printk+0x10/0x10 [ 460.717114][ T9879] ? __pfx___might_resched+0x10/0x10 [ 460.717146][ T9879] ? fs_reclaim_acquire+0x7d/0x100 [ 460.717183][ T9879] should_fail_ex+0x414/0x560 [ 460.717220][ T9879] should_failslab+0xa8/0x100 [ 460.717251][ T9879] __kmalloc_noprof+0xcb/0x4f0 [ 460.717276][ T9879] ? kfree+0x4d/0x440 [ 460.717297][ T9879] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 460.717326][ T9879] tomoyo_realpath_from_path+0xe3/0x5d0 [ 460.717361][ T9879] ? tomoyo_domain+0xda/0x130 [ 460.717392][ T9879] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 460.717423][ T9879] tomoyo_path_number_perm+0x1e8/0x5a0 [ 460.717459][ T9879] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 460.717511][ T9879] ? __lock_acquire+0xab9/0xd20 [ 460.717563][ T9879] ? __fget_files+0x2a/0x420 [ 460.717597][ T9879] ? __fget_files+0x2a/0x420 [ 460.717630][ T9879] ? __fget_files+0x3a0/0x420 [ 460.717659][ T9879] ? __fget_files+0x2a/0x420 [ 460.717693][ T9879] security_file_ioctl+0xcb/0x2d0 [ 460.717734][ T9879] __se_sys_ioctl+0x47/0x170 [ 460.717761][ T9879] do_syscall_64+0xfa/0x3b0 [ 460.717791][ T9879] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.717821][ T9879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.717843][ T9879] ? clear_bhb_loop+0x60/0xb0 [ 460.717869][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.717890][ T9879] RIP: 0033:0x7f4eb5d8e969 [ 460.717909][ T9879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.717929][ T9879] RSP: 002b:00007f4eb6b8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.717951][ T9879] RAX: ffffffffffffffda RBX: 00007f4eb5fb5fa0 RCX: 00007f4eb5d8e969 [ 460.717967][ T9879] RDX: 0000200000000080 RSI: 00000000800448d5 RDI: 0000000000000006 [ 460.717981][ T9879] RBP: 00007f4eb6b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 460.717994][ T9879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.718006][ T9879] R13: 0000000000000000 R14: 00007f4eb5fb5fa0 R15: 00007ffd9fcfe838 [ 460.718041][ T9879] [ 460.718049][ T9879] ERROR: Out of memory at tomoyo_realpath_from_path. [ 460.845972][ T5880] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 461.146583][ T5880] usb 4-1: device descriptor read/8, error -71 [ 461.466046][ T5880] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 461.525903][ T5880] usb 4-1: device descriptor read/8, error -71 [ 461.562630][ T9890] batadv_slave_0: entered allmulticast mode [ 462.356241][ T5880] usb usb4-port1: unable to enumerate USB device [ 462.367923][ T9890] batadv_slave_0: left allmulticast mode [ 463.006653][ T77] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.175228][ T77] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.295938][ T5880] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 463.316189][ T77] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.473045][ T77] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.489186][ T5880] usb 6-1: Using ep0 maxpacket: 16 [ 463.517142][ T5880] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=7f.76 [ 463.544593][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.594322][ T5880] usb 6-1: Product: syz [ 463.628830][ T5880] usb 6-1: Manufacturer: syz [ 463.652960][ T5880] usb 6-1: SerialNumber: syz [ 463.663061][ T5880] usb 6-1: config 0 descriptor?? [ 464.595798][ T5941] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 464.749005][ T5941] usb 4-1: device descriptor read/64, error -71 [ 465.026190][ T5941] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 465.137459][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 465.137932][ T5880] usb_8dev 6-1:0.0 can0: sending command message failed [ 465.154301][ T5880] usb_8dev 6-1:0.0 can0: can't get firmware version [ 465.154400][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 465.170975][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 465.179249][ T5941] usb 4-1: device descriptor read/64, error -71 [ 465.186285][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 465.203743][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 465.320199][ T5941] usb usb4-port1: attempt power cycle [ 465.771364][ T5941] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 466.467812][ T77] bridge_slave_1: left allmulticast mode [ 466.473544][ T77] bridge_slave_1: left promiscuous mode [ 466.487464][ T5880] usb_8dev 6-1:0.0: probe with driver usb_8dev failed with error -22 [ 466.502671][ T5941] usb 4-1: device descriptor read/8, error -71 [ 466.522713][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.529477][ T5880] usb 6-1: USB disconnect, device number 13 [ 466.563098][ T77] bridge_slave_0: left allmulticast mode [ 466.581151][ T77] bridge_slave_0: left promiscuous mode [ 466.654755][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.838673][ T5941] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 467.595189][ T5941] usb 4-1: device descriptor read/8, error -71 [ 467.603141][ T5144] Bluetooth: hci5: command tx timeout [ 467.716347][ T5941] usb usb4-port1: unable to enumerate USB device [ 467.942332][ T9949] FAULT_INJECTION: forcing a failure. [ 467.942332][ T9949] name failslab, interval 1, probability 0, space 0, times 0 [ 467.956562][ T9949] CPU: 0 UID: 0 PID: 9949 Comm: syz.5.1109 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 467.956590][ T9949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.956617][ T9949] Call Trace: [ 467.956626][ T9949] [ 467.956636][ T9949] dump_stack_lvl+0x189/0x250 [ 467.956673][ T9949] ? __pfx____ratelimit+0x10/0x10 [ 467.956705][ T9949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.956743][ T9949] ? __pfx__printk+0x10/0x10 [ 467.956779][ T9949] should_fail_ex+0x414/0x560 [ 467.956817][ T9949] should_failslab+0xa8/0x100 [ 467.956848][ T9949] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 467.956876][ T9949] ? __alloc_skb+0x112/0x2d0 [ 467.956904][ T9949] __alloc_skb+0x112/0x2d0 [ 467.956929][ T9949] _sctp_make_chunk+0x5e/0x430 [ 467.956957][ T9949] sctp_make_sack+0x186/0x730 [ 467.956997][ T9949] ? __pfx_sctp_make_sack+0x10/0x10 [ 467.957039][ T9949] ? sctp_packet_config+0x5b6/0xd90 [ 467.957067][ T9949] ? sctp_packet_config+0x5b6/0xd90 [ 467.957092][ T9949] ? sctp_packet_config+0xa16/0xd90 [ 467.957121][ T9949] sctp_packet_append_chunk+0x76b/0xfe0 [ 467.957164][ T9949] sctp_packet_transmit_chunk+0x3e/0x1c0 [ 467.957190][ T9949] ? sctp_outq_flush+0x1452/0x3140 [ 467.957220][ T9949] sctp_outq_flush+0x146b/0x3140 [ 467.957253][ T9949] ? __might_fault+0xb0/0x130 [ 467.957283][ T9949] ? _parse_integer_limit+0x1ae/0x1f0 [ 467.957325][ T9949] ? __pfx_sctp_outq_flush+0x10/0x10 [ 467.957360][ T9949] ? sctp_outq_is_empty+0x4d/0xf0 [ 467.957394][ T9949] ? sctp_outq_uncork+0x62/0xa0 [ 467.957426][ T9949] sctp_do_sm+0x3ea7/0x5a20 [ 467.957475][ T9949] ? __pfx_sctp_do_sm+0x10/0x10 [ 467.957551][ T9949] ? rcu_is_watching+0x15/0xb0 [ 467.957602][ T9949] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 467.957631][ T9949] ? __pfx_sctp_shutdown+0x10/0x10 [ 467.957653][ T9949] inet_shutdown+0x26e/0x390 [ 467.957690][ T9949] __x64_sys_shutdown+0x13c/0x1a0 [ 467.957720][ T9949] do_syscall_64+0xfa/0x3b0 [ 467.957750][ T9949] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.957781][ T9949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.957802][ T9949] ? clear_bhb_loop+0x60/0xb0 [ 467.957829][ T9949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.957849][ T9949] RIP: 0033:0x7fbfa518e969 [ 467.957870][ T9949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.957888][ T9949] RSP: 002b:00007fbfa5fb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 467.957911][ T9949] RAX: ffffffffffffffda RBX: 00007fbfa53b5fa0 RCX: 00007fbfa518e969 [ 467.957926][ T9949] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 467.957938][ T9949] RBP: 00007fbfa5fb9090 R08: 0000000000000000 R09: 0000000000000000 [ 467.957952][ T9949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.957965][ T9949] R13: 0000000000000000 R14: 00007fbfa53b5fa0 R15: 00007ffd4a85dd28 [ 467.957997][ T9949] [ 469.227015][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.251459][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.285347][ T77] bond0 (unregistering): Released all slaves [ 469.631339][ T5828] Bluetooth: hci5: command tx timeout [ 469.747994][ T9926] lo speed is unknown, defaulting to 1000 [ 469.925930][ T5880] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 470.168952][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 470.621345][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 471.037584][ T10] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=7f.76 [ 471.053820][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.084745][ T10] usb 6-1: Product: syz [ 471.104476][ T10] usb 6-1: Manufacturer: syz [ 471.118537][ T10] usb 6-1: SerialNumber: syz [ 471.146168][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 471.157811][ T10] usb 6-1: config 0 descriptor?? [ 471.171348][ T5880] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 471.204023][ T5880] usb 4-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 471.220160][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.228487][ T5880] usb 4-1: Product: syz [ 471.232700][ T5880] usb 4-1: Manufacturer: syz [ 471.237781][ T5880] usb 4-1: SerialNumber: syz [ 471.257461][ T5880] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input33 [ 471.718637][ T5828] Bluetooth: hci5: command tx timeout [ 472.539439][ T77] hsr_slave_0: left promiscuous mode [ 472.554605][ T5179] bcm5974 4-1:1.0: could not read from device [ 472.567028][ T77] hsr_slave_1: left promiscuous mode [ 472.573645][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.583988][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.594047][ T5880] usb 4-1: USB disconnect, device number 32 [ 472.601278][ T5179] bcm5974 4-1:1.0: could not read from device [ 472.618082][ T5179] bcm5974 4-1:1.0: could not read from device [ 472.630986][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.642834][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.701618][ T77] veth1_macvtap: left promiscuous mode [ 472.708378][ T77] veth0_macvtap: left promiscuous mode [ 472.714336][ T77] veth1_vlan: left promiscuous mode [ 472.727207][ T77] veth0_vlan: left promiscuous mode [ 473.783634][ T5828] Bluetooth: hci5: command tx timeout [ 475.551774][ T77] team0 (unregistering): Port device team_slave_1 removed [ 475.604143][ T77] team0 (unregistering): Port device team_slave_0 removed [ 476.090073][ T10] usb_8dev 6-1:0.0 can0: sending command message failed [ 476.126091][ T10] usb_8dev 6-1:0.0 can0: can't get firmware version [ 476.341875][ T10] usb_8dev 6-1:0.0: probe with driver usb_8dev failed with error -22 [ 476.397154][ T10] usb 6-1: USB disconnect, device number 14 [ 476.588545][T10007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.817390][ T9926] chnl_net:caif_netlink_parms(): no params data found [ 479.455937][ T31] INFO: task syz.1.650:8488 blocked for more than 144 seconds. [ 479.475596][ T31] Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 [ 479.483061][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 479.583059][ T31] task:syz.1.650 state:D stack:26200 pid:8488 tgid:8484 ppid:5827 task_flags:0x400140 flags:0x00004006 [ 479.608847][T10016] FAULT_INJECTION: forcing a failure. [ 479.608847][T10016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.632264][ T31] Call Trace: [ 479.641286][ T31] [ 479.644296][ T31] __schedule+0x16a2/0x4cb0 [ 479.682758][ T31] ? schedule+0x165/0x360 [ 479.682826][T10016] CPU: 1 UID: 0 PID: 10016 Comm: syz.4.1132 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 479.682852][T10016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 479.682865][T10016] Call Trace: [ 479.682874][T10016] [ 479.682883][T10016] dump_stack_lvl+0x189/0x250 [ 479.682923][T10016] ? __pfx____ratelimit+0x10/0x10 [ 479.682960][T10016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.682994][T10016] ? __pfx__printk+0x10/0x10 [ 479.683020][T10016] ? __might_fault+0xb0/0x130 [ 479.683064][T10016] should_fail_ex+0x414/0x560 [ 479.683106][T10016] _copy_from_user+0x2d/0xb0 [ 479.683138][T10016] ___sys_recvmsg+0x12e/0x510 [ 479.683176][T10016] ? __pfx____sys_recvmsg+0x10/0x10 [ 479.683235][T10016] ? __fget_files+0x3a0/0x420 [ 479.683282][T10016] do_recvmmsg+0x307/0x770 [ 479.683323][T10016] ? __pfx_do_recvmmsg+0x10/0x10 [ 479.683377][T10016] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 479.683436][T10016] __x64_sys_recvmmsg+0x190/0x240 [ 479.683470][T10016] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 479.683499][T10016] ? rcu_is_watching+0x15/0xb0 [ 479.683541][T10016] ? do_syscall_64+0xbe/0x3b0 [ 479.683580][T10016] do_syscall_64+0xfa/0x3b0 [ 479.683615][T10016] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.683648][T10016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.683672][T10016] ? clear_bhb_loop+0x60/0xb0 [ 479.683702][T10016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.683726][T10016] RIP: 0033:0x7f6ab938e969 [ 479.683747][T10016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.683770][T10016] RSP: 002b:00007f6aba138038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 479.683797][T10016] RAX: ffffffffffffffda RBX: 00007f6ab95b5fa0 RCX: 00007f6ab938e969 [ 479.683815][T10016] RDX: 0000000000000001 RSI: 0000200000001e00 RDI: 0000000000000003 [ 479.683830][T10016] RBP: 00007f6aba138090 R08: 0000000000000000 R09: 0000000000000000 [ 479.683845][T10016] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 479.683861][T10016] R13: 0000000000000000 R14: 00007f6ab95b5fa0 R15: 00007fffc1636498 [ 479.683898][T10016] [ 480.123947][ T31] ? __pfx___schedule+0x10/0x10 [ 480.129285][ T31] ? schedule+0x91/0x360 [ 480.133689][ T31] schedule+0x165/0x360 [ 480.165636][ T31] schedule_preempt_disabled+0x13/0x30 [ 480.171215][ T31] __mutex_lock+0x724/0xe80 [ 480.175861][ T31] ? __mutex_lock+0x51b/0xe80 [ 480.180619][ T31] ? bdev_release+0x1a9/0x650 [ 480.185350][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 480.190502][ T31] ? __asan_memset+0x22/0x50 [ 480.195170][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 480.200778][ T31] ? do_raw_spin_lock+0x121/0x290 [ 480.205895][ T31] bdev_release+0x1a9/0x650 [ 480.210458][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 480.215771][ T31] blkdev_release+0x15/0x20 [ 480.220338][ T31] __fput+0x44c/0xa70 [ 480.225494][ T31] task_work_run+0x1d4/0x260 [ 480.230244][ T31] ? __pfx_task_work_run+0x10/0x10 [ 480.235399][ T31] get_signal+0x11c5/0x1310 [ 480.240225][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 480.245889][ T31] ? __pfx_task_work_add+0x10/0x10 [ 480.251049][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 480.257611][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 480.262727][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 480.268318][ T31] exit_to_user_mode_loop+0x75/0x110 [ 480.274183][ T31] do_syscall_64+0x2bd/0x3b0 [ 480.278921][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.284190][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.290544][ T31] ? clear_bhb_loop+0x60/0xb0 [ 480.295279][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.301402][ T31] RIP: 0033:0x7f8cc058e969 [ 480.307035][ T31] RSP: 002b:00007f8cc1489038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.315788][ T31] RAX: 0000000000000000 RBX: 00007f8cc07b6080 RCX: 00007f8cc058e969 [ 480.324737][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 480.334041][ T31] RBP: 00007f8cc0610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 480.342324][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.350618][ T31] R13: 0000000000000001 R14: 00007f8cc07b6080 R15: 00007fff424a61e8 [ 480.359025][ T31] [ 480.362208][ T31] [ 480.362208][ T31] Showing all locks held in the system: [ 480.370312][ T31] 4 locks held by rcu_exp_gp_kthr/18: [ 480.426279][ T31] #0: ffff8880b863b798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 480.455833][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 480.506017][ T31] #2: ffff888025224628 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x6e/0x1290 [ 480.515459][ T31] #3: ffff8880b863b798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 480.565624][ T31] 1 lock held by khungtaskd/31: [ 480.570552][ T31] #0: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 480.595666][ T31] 5 locks held by kworker/u8:4/77: [ 480.600856][ T31] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 480.635598][ T31] #1: ffffc9000215fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 480.695605][ T31] #2: ffffffff8f4efd50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 480.705128][ T31] #3: ffff88805914d4e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0 [ 480.780427][ T31] #4: ffffffff8e144b78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 480.805612][ T31] 2 locks held by getty/5588: [ 480.810543][ T31] #0: ffff8880309ab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 480.825972][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 480.838373][ T31] 1 lock held by udevd/5978: [ 480.843027][ T31] #0: ffff88802564b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 480.852662][ T31] 1 lock held by syz.1.650/8488: [ 480.857783][ T31] #0: ffff88802564b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 480.867535][ T31] 1 lock held by syz-executor/9926: [ 480.872764][ T31] #0: ffffffff8e144b78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 480.884067][ T31] 3 locks held by syz.3.1131/10017: [ 480.889452][ T31] #0: ffff8880339e4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 480.899945][ T31] #1: ffff8880339e4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 480.909847][ T31] #2: ffffffff8f664968 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 480.920194][ T31] 4 locks held by syz.2.1130/10019: [ 480.925583][ T31] #0: ffff888033278d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 480.935796][ T31] #1: ffff888033278078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 480.946598][ T31] #2: ffffffff8f664968 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 480.957189][ T31] #3: ffff8880273b8338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 480.966766][ T31] [ 480.971092][ T31] ============================================= [ 480.971092][ T31] [ 480.982139][ T31] NMI backtrace for cpu 0 [ 480.982165][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 480.982190][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 480.982203][ T31] Call Trace: [ 480.982212][ T31] [ 480.982222][ T31] dump_stack_lvl+0x189/0x250 [ 480.982257][ T31] ? __wake_up_klogd+0xd9/0x110 [ 480.982284][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.982316][ T31] ? __pfx__printk+0x10/0x10 [ 480.982352][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 480.982381][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 480.982404][ T31] ? _printk+0xcf/0x120 [ 480.982431][ T31] ? __pfx__printk+0x10/0x10 [ 480.982454][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 480.982484][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 480.982513][ T31] watchdog+0xfee/0x1030 [ 480.982542][ T31] ? watchdog+0x1de/0x1030 [ 480.982579][ T31] kthread+0x711/0x8a0 [ 480.982605][ T31] ? __pfx_watchdog+0x10/0x10 [ 480.982632][ T31] ? __pfx_kthread+0x10/0x10 [ 480.982656][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 480.982684][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.982711][ T31] ? __pfx_kthread+0x10/0x10 [ 480.982735][ T31] ret_from_fork+0x3f9/0x770 [ 480.982767][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 480.982802][ T31] ? __switch_to_asm+0x39/0x70 [ 480.982821][ T31] ? __switch_to_asm+0x33/0x70 [ 480.982839][ T31] ? __pfx_kthread+0x10/0x10 [ 480.982863][ T31] ret_from_fork_asm+0x1a/0x30 [ 480.982901][ T31] [ 480.982909][ T31] Sending NMI from CPU 0 to CPUs 1: [ 481.152270][ C1] NMI backtrace for cpu 1 [ 481.152287][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 481.152308][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.152319][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 481.152349][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 a5 2a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 481.152364][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 481.152381][ C1] RAX: 6132db1e4f1d2700 RBX: ffffffff81974f88 RCX: 6132db1e4f1d2700 [ 481.152395][ C1] RDX: 0000000000000001 RSI: ffffffff8d966643 RDI: ffffffff8be19e80 [ 481.152407][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 481.152420][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8f9fcbf0 [ 481.152434][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a52b40 [ 481.152446][ C1] FS: 0000000000000000(0000) GS:ffff888125d90000(0000) knlGS:0000000000000000 [ 481.152460][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.152472][ C1] CR2: 0000200000036000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 481.152488][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 481.152498][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 481.152509][ C1] Call Trace: [ 481.152516][ C1] [ 481.152522][ C1] default_idle+0x13/0x20 [ 481.152539][ C1] default_idle_call+0x74/0xb0 [ 481.152557][ C1] do_idle+0x1e8/0x510 [ 481.152588][ C1] ? __pfx_do_idle+0x10/0x10 [ 481.152625][ C1] cpu_startup_entry+0x44/0x60 [ 481.152652][ C1] start_secondary+0x101/0x110 [ 481.152673][ C1] common_startup_64+0x13e/0x147 [ 481.152700][ C1] [ 481.373424][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 481.380653][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 481.392502][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.402606][ T31] Call Trace: [ 481.405926][ T31] [ 481.408890][ T31] dump_stack_lvl+0x99/0x250 [ 481.413533][ T31] ? __asan_memcpy+0x40/0x70 [ 481.418257][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.423514][ T31] ? __pfx__printk+0x10/0x10 [ 481.428257][ T31] panic+0x2db/0x790 [ 481.432206][ T31] ? __pfx_panic+0x10/0x10 [ 481.436754][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 481.442800][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 481.448304][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 481.454520][ T31] watchdog+0x102d/0x1030 [ 481.458904][ T31] ? watchdog+0x1de/0x1030 [ 481.463472][ T31] kthread+0x711/0x8a0 [ 481.467588][ T31] ? __pfx_watchdog+0x10/0x10 [ 481.472420][ T31] ? __pfx_kthread+0x10/0x10 [ 481.477059][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 481.482304][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.487812][ T31] ? __pfx_kthread+0x10/0x10 [ 481.492536][ T31] ret_from_fork+0x3f9/0x770 [ 481.497361][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 481.502611][ T31] ? __switch_to_asm+0x39/0x70 [ 481.507424][ T31] ? __switch_to_asm+0x33/0x70 [ 481.512230][ T31] ? __pfx_kthread+0x10/0x10 [ 481.516947][ T31] ret_from_fork_asm+0x1a/0x30 [ 481.521766][ T31] [ 481.525068][ T31] Kernel Offset: disabled [ 481.529412][ T31] Rebooting in 86400 seconds..