last executing test programs: 7m25.627613299s ago: executing program 2 (id=705): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x4, 0x0, 0x3, 0x2000, r0, 0x5, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000025c0)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x18) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, 0x0, 0x1000, &(0x7f0000001540)=""/4096}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r6}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001d00)={{r2}, &(0x7f0000001c80), &(0x7f0000001cc0)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m24.499884712s ago: executing program 2 (id=706): keyctl$chown(0x1f, 0x0, 0xee00, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000200000008500000086"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffefff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r5}, 0x10) clock_getres(0x9, 0x0) 7m23.397706961s ago: executing program 2 (id=707): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000048000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000316c1255ce3fceecab80c9991c54716be9ce3470a0e95703085f5c934eeac16ab1eb7031244d61844719555d6bc621273f347c30db5e958f4a8c79f5493838d4ea43b80e083aa7d3554ddf1b289fa6eb41aac27c33e37266b3dc8fc5f88383b7f0d4e9a193aa5f5f0a2b0d9360e63e08c26e03fc43b2f107868a46208425b9e2db3a99d6cd9dfc292f4a9b73f0a120691af1db4da6e8fcefd4a335437df04e7155da51675a88174d58f03d70ec31cde5983503308098ea61000000000000000000"], 0x48) r0 = memfd_secret(0x80000) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x810, r0, 0xd000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x2, 0x0, &(0x7f00000000c0)=[{}, {}], 0x4, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000000)=[{}, {}], 0x1, 0x0, &(0x7f0000000040)=[{}]}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1216440, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f00000001c0)={0x0, 0x5, 0x8}, 0x8) prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000640)={0x8, 0xffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000003b00), 0x0, 0x4004800) ioprio_get$pid(0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0x0, 0x0, 0x0, 0x774a953b, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast6-avx\x00'}, 0x58) 7m20.486689033s ago: executing program 2 (id=714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x400, 0x103) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) 7m19.918705238s ago: executing program 2 (id=716): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000200)={0x100, r4}, 0x0) close(r3) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffeb4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r1], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r7, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 7m6.215684802s ago: executing program 2 (id=736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x400, 0x103) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 6m50.630800624s ago: executing program 32 (id=736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x400, 0x103) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 2m51.062608738s ago: executing program 1 (id=1173): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) r1 = open(&(0x7f0000000100)='./bus\x00', 0x121243, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x10000, 0x4, 0x4, 0x100000001, 0x4, 0x8, 0xa0c, 0x6, 0x100, 0xda9, 0x7fff, 0x3, 0x9, 0xfffffffffffffff9, 0xb]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400)={r2, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}}}, &(0x7f0000000080)=0x84) (async) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000240)=ANY=[@ANYBLOB="0413"], 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x20010, r1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1}, 0x10) (async) sendmsg$tipc(r3, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xffffffff, @loopback, 0x5}, 0x1c) (async) r4 = dup3(r0, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 2m49.630683967s ago: executing program 1 (id=1175): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x800, "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"}, &(0x7f00000012c0)=0x808) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001300)={r1, 0x81}, &(0x7f0000001340)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000001380)={r2, 0x6}, &(0x7f00000013c0)=0x8) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, 0xc, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0xc110) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001500), &(0x7f0000001540)=0x4) pread64(r0, &(0x7f0000001580)=""/4096, 0x1000, 0x7) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000002880)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002840)={&(0x7f00000025c0)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x9, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x1}, 0x5f, 0x6e, 0xfd4a, 0x7, 0x5, 'syz0\x00', "9620a72d106af8ec569702729350d5e69e2a696ddef5316938d4e1210d6f87cb", "da9d7fd28a44d6f08e75a0d0db5dfd3adab80e03626aa6329d6f5bd01f96bf80", [{0x5, 0x0, {0x0, 0x2}}, {0x8c, 0x5, {0xe44314336f74afa5, 0x6}}, {0x3, 0x5, {0x3, 0x8}}, {0x3, 0x7, {0x2}}, {0x6, 0xb3, {0x1, 0x8}}, {0xd, 0x8000, {0x1, 0x9}}, {0x6, 0xfffb, {0x2, 0x4}}, {0x943, 0x10, {0x2, 0xb689}}, {0xffff, 0xd, {0x0, 0x1}}, {0x1, 0x7, {0x2, 0xfffffffb}}, {0x81, 0xfff, {0x0, 0x7f}}, {0x7, 0x9, {0x3, 0x3}}, {0x5, 0xc, {0x3, 0x9}}, {0xfffe, 0x5, {0x1, 0x3}}, {0x3ff, 0x3, {0x0, 0x7}}, {0x991, 0xa0, {0x0, 0x2}}, {0xe5de, 0x0, {0x2}}, {0x9dc, 0x89, {0x3, 0x58cea0a2}}, {0x4, 0x8, {0x2, 0x6}}, {0x8000, 0x3, {0x1, 0x80}}, {0xfff8, 0x6, {0x0, 0x267}}, {0xff, 0x1765, {0x1, 0x1}}, {0x2, 0xbb, {0x3}}, {0x5, 0x1e0, {0x3, 0x3}}, {0x0, 0x7, {0x0, 0x98c}}, {0x400, 0x3, {0x1, 0x7}}, {0x4, 0x7f, {0x0, 0x8}}, {0x9aa, 0x8, {0x3, 0xa11}}, {0x1, 0x93, {0x1, 0x24000}}, {0x0, 0x8000, {0x2, 0x2}}, {0x1, 0x5, {0x2, 0x9}}, {0x4, 0xfffd, {0x0, 0xa}}, {0x6, 0xcbeb, {0x2, 0xf8e7}}, {0x6, 0x6, {0x3, 0x2}}, {0x9, 0x4, {0x1, 0x7}}, {0x5, 0x1, {0x0, 0x1940}}, {0x40, 0x8, {0x2, 0x7}}, {0xfffe, 0x400, {0x3, 0x1}}, {0x3, 0x7, {0x3, 0x3}}, {0x9, 0x356, {0x1, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20008020}, 0x801) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000028c0)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x10}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x5}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0xfd5, @dev={0xfe, 0x80, '\x00', 0x27}}], 0xb4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000002980)='bic\x00', 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000029c0)={0xd, 0x6, 0x8, 0x6, 0x0, 0x80000000, 0x9, 0x5, r2}, 0x20) r4 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r0, &(0x7f0000003e40)=[{&(0x7f0000002a00)="502f2865261fbc53bf67ddf9a1c09de18cd616e2277c28dcf870552510ab099216fce3ca6ea7b69b1e952536a8d26361e00f6d0e20891cf22fb869d48bff47f28720a9aea0be02a26f52251cdf5ee12a9ad98225a117b3def1e497fb8c23c0223a80", 0x62}, {&(0x7f0000002a80)="c970443807b3347ab491545ab4de85a5f1610afa9a1cf2986e676905659d1011cfb2c38c9df907a34f63dcda58a61725a40f83fc6628760116b751ac8e3a4f1a3723914119f5355311fea3c59050fed79e987ecc5f5bcac71b", 0x59}, {&(0x7f0000002b00)="7ed568bf8281bf2115c3d6bef64c693059ee6af85cbe175e089272056592f2c53475ba3bdff5dd7c750cb4dd19c241f96e17ad84cb85c14d3f039138021f660d6d292408fadf0ca53c62efb828630cce319f1ab96557d4f9da7774ace1fc57df43e13e89fbcb6775e2b5c2db547cc7adc1faf7fbe076a2e77b1903743eac9f3e8deb742d340259ffa28bcd84478a95506fc3446087ef7f2c9df13f98edc33e013d82d32690d6e4f54704bfc68c21e786f0f827143ae14e1c365837483814a7844c3747567a650bd54076d9a51e085fd4486fce2a09d5baac64e94ac02864f9631203922c55213e4db91dc88d35", 0xed}, {&(0x7f0000002c00)="13bac928f25c4a6ae9bcb8540a4030ded5a7987caa9313d345e240f09a42187dbab1713e2e4c540c9feb2c500b135efdfc18ead5156c662d375b40cec26d15684b19e3cf382ba5813224d62cf7b355528bce67ed3abdbeb22f696bd6cec7da78adf20cdca6f8279006851617a0ed4738229a48160d7093a5efead9bfa6d1fc8abee44ac8985be1ff1eb62b7aab4cf99979747665", 0x94}, {&(0x7f0000002cc0)="04d7b54f9c8dc0f397960b5c04bbfc17f66df12b838eaadac478d4e9631ddaafe70a9692ff36cf4f151720a94f4e6cce544b6c146ad01f38e469ba67cecad6ffe4426d0109ac9af5b7f25b58d1736c94c33f1501d8ec11907f7ef70f8d2dab450dd281c9a8a152ffd2e537a5a9e0331223e5b5a9eb4d58863b655f1392993694511e1d366ce55e9ae5bd5b4c8a", 0x8d}, {&(0x7f0000002d80)="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", 0x1000}, {&(0x7f0000003d80)="bd2b91ae23d9eebd10305f697eb8666dd156cfd18f01ecbc5f22be36bfea65c2c1d2a1af06b3c4f310ab1e5596d1679b3c17efeee47c34a70232ccd461b7a875a6e65c16627a50e907f8ba565aa13763dac5c8a4a800b6445ce8cc109b0d50fa4d373dc95e30ffe401", 0x69}, {&(0x7f0000003e00)="5539932e8c1785fdeb16dbe70a56864d7df0284b541766", 0x17}], 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000003f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000003fc0)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003f80)={&(0x7f0000003f40)={0x28, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008054}, 0x48000) r7 = dup3(r4, r4, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(r3, 0x5523) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004080)={&(0x7f0000004040)={0x1c, r6, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44092}, 0x4004000) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000004100)={r2, 0x4}, 0x8) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004180), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000041c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000042c0)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004280)={&(0x7f0000004200)={0x48, r9, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x61}}}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0xc854) 2m49.163711581s ago: executing program 1 (id=1177): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0x20003, 0xfffffffffffffffe}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)={0x310, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2d47}, @TIPC_NLA_NODE_ID={0xad, 0x3, "1b47a8a7c2954bc24d4d266b65b1a82693125d1fe4850d7a09ffa477a702abf0524cdb0d094e8930f472da7dc4782382fa7467a9099233a8780141afec915542d5cee5452b9e74d000d4d8b1c5448f5fe97410e3ec957c64e6177e3ea760d61caa7672b4cc68722c04b3c0973dd66e40991aa8ffc2ff7170097f0fd5056c8829bda1acfe99fb0c06a99124f8bdb76c561e87bbc630fe94edc3f8fa648a9836137606c0f88b1aab4cd9"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "123393b9d7e0432f32c1bdb7b13a17c45cb4cbc07a410b35472a08afdd7602b88eb118"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x99e}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3cb1}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "3d3adbd315ea7f0f243a308d3fbfb16a8dd6d5a01a56"}}, @TIPC_NLA_NODE_ID={0xd6, 0x3, "1a3327839cdfda6eff41764d740a7dbb5c51936be48eba356050c5ea77a2de714bf310108174618408125c35c692af4ff0ddebd6e3eb84863d689608c1d9981afa3e9ce4965d282c4e02cb0cd8fb41e4374eddc7409e002a164931815c7a2a008fb10ea0cf6df15d892a4f1226f41d7e8bc931fb447bb221625f998cfe41d7449b1d3dfe34b946944efdb035a044990ae2b437f12a3daae20977c58f38ff4bcf7e7de2156a39e989aab0277cbd0d579ed4a6cb99fb49ada839999c47e1a90e502cde0d0493373133fcad90f642295320e595"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2d3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xbf8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1c}}}}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x4c000}, 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r1, 0x0, &(0x7f00007fd000/0x800000)=nil, 0x800000, 0x80}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000b0095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x18c400, 0x0) read$smackfs_cipsonum(r4, &(0x7f0000000140), 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socket(0x1f, 0x2, 0xa) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) syz_io_uring_setup(0x3480, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000680)) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000100)={r9, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10) 2m47.299776396s ago: executing program 1 (id=1180): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @random="a538f3ff4632", @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4}, @generic={0xa, 0x2}]}}, {0x17, 0x7c, 0x0, @multicast1}}}}}, 0x0) 2m44.263802993s ago: executing program 1 (id=1184): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, 0x0, 0x0, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r3, &(0x7f0000000680)={0x2020}, 0x2020) (fail_nth: 1) 2m42.763176812s ago: executing program 1 (id=1186): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x800, "bef36616cf90e2e349a9feaf0233e02a48e0b172701e7a62b65bd6c346c1a915bd0f084171fc6177de016c71cf49ed4f0ec615140f34e9961f47d170911184dc52b5986f0eb77901e7caa528451ad48b1904e12ca7d6e7fa26af0dba90ea98a7dffe2e3b1e1ae62dcfd9659991f21a6339d452ae5548bff87008de290d0a04ea19965b3b90c418044e2647df333d0d9fb88c6d72a65166515c74e4f934678289a98b80e5e936568d5e3e09f13837d7382ae7b0955ae8372652715fe778538b2933cc7d49eeb5850d61a2e57ab5e14f97917d6fbaddd468cb7118754c50d31fe674c38aafd8658fc276f34ea12ce6d0d208ad1cd50c94da0e40e99a992f73cce1e6c3e0fafbe9f98179cbef1af10d913fe50544ae369455f76cb735cdd5d08d061c6b01c110550ef72194f8c59c8f788dc74bb4c9eb79444ec2e113d82b4dfd6a1e9f2632716580bc351e74440a947805d607dbe34ab0772c664e90b2467730b80698bf97ada8e3f17218056acf2d55ab1711dfd3da28b634ec21a7f77df973d6d5867f3624b94950975eb96ed0d01b03f50bdb62dc57284a11304b5dc81210cc4e40c04926301283bd2e441c724a77a55435a27779046618521b7ec7732128da49eb2310704cd77e6c62d3dca6356b5f0f203869b69fe5d92adf724f37850c260203b4063d0eaee16972987ad5cc3efc0b21370c77191ec40957a514a124f915cece00200413c13fa6f1faaeb86f02acf1b77a91ee79bf2c56e006803e46c4754e663d5e3e9c4c0da10893c925f9ae3e6b3c8995b158a5f5c3a12bb1c69213c010990162fbe61b795d9a71ed1ad74ae7b742c72fb8731fc172f4e37c9e0a8837f93c1eaa732c93c0d564fd92e626a27998b70b2fb5280a994c49dc4b2b794312bb205250d03ba09535599276406a49819deb9b8e6b0e4f689868cf4b8054ac6db98d7bea1a55581014b75891789d9d29d0306c68200e2a3933cbe9d4070af157a38370c1915f3136f2b8b410b98d8562ae9c9a7958304547864a8ce1e6aa1f85f56b5cc82ecfa4330072bea68c4425c5b36f755b57a4600b554e6ccde25756e7888b072142cda77d021249dd4b795c23fd7e645a083b3913b106d87302439836786f016947738721ce3b5bbb628edd56f3bd201a32a667bd261755e49d45e02301f5ec61fa411b1be91243589897641b6d2d6e0ef6d5f55b62f733a161e7b830ab973cc319b2f4988c620fd48a30496d3c3deb543ec92300780b32d362732cbee499781b85c3202c2e450e78daa4070a5e6fe93eca148a62774932bdc43dd56720c41d0cf4ebcb85870cacd9dff95a82759471c59a9182bf5fa5699e08a855a3c28fc71a1103ff9d513835b8015cb5096883564aea48931e5799af310a2d645ae92ed3be32a180dca53fb95cb101ae1591d1ce381f5719b5634bd087b89c11740674b89c8b6a281e3a996adf1759fcab1c2b038025a9e6fa9881d9bcff7453a50f218ed5a7dfbaa57585e27ea86ea2a856b1d9b7092c4db200408a92416fb4df5aa8c35e29e188d130be922ab0db42eb453902637b180624738f26e57c91ac33ea6d4d7221b7159b4d5ca6ec116494aae726292b3cd8de4b7992e24e1a4ea697d37a9c2af18ad7c5090bd457cc11b198fa6d2f2a732ab9e3ce5af6d50aed6417a35fd2e524e58de7fde9374c940e258caae7f3d68013ac3e796a884be3673053bf933ee4f22d5258245c374fc5ab21ee5acdbf7d431b9d4be72d846132456f7129bbd326858addc978e910ef9c53ae014584bc3ecd820a1845748b39b15e6f68a20cbbe88e78672e6cbcdc482455c6e1a473dcd9aab6a45ce9236e71e909b0a02e8dec95e057dfd8b24d91934984d70242a99be705ec2740f00166c829c8f49813b2790786ad5f4d24bfe617d76735684fd0031b0389edde1f9d8c748107c2ca774d5a443122950936bc6c725ed8b5aab14fc755ae5acbc6a226cfa82fa99a0c19e88f709fc4faad86d54e45dcf8a59955f494cfd15848fddc5ef0729cad34b38ee7cf296c8e46a3f611b28f6c6f09d244116dc8ba1941f0df308a98344c3fd024e7ab0c8874ac38a0893e127c2dd56d91abe87dae152eca63562f9ac2f1690688d3e944416347cb90f6a55f063a4fcde013f99e3b0fed5513aaa7d42d71bacfc56391b02a99079124f24e6b320be1e4fd14d2557a1038c6d3d65be5f17af989716c8eeddca954f5941fdc70cd9f13192385d7d6dd74753772617e9bc0aedfc0301568cd8986c9cc7fa95e17cad8dd8569e1ea995fa062c298f5479fb3e8db3cdc086c8e862ca82878897ca3cd7db2dff67acd7fed171d2e8a0f786ce7b27ec5cb40246f356800404c84a57716d251f0bef3a0989cec76faed106890b591d8ff411953bdb1592a78bc6e89a14dde987aec904a4a4272b2b9321df72f2019a2f43f91848f80d0b58e4c851c9bfcc8f626f64d12e7e567c026cb83d7596122c4a9e72ed5d90785db37d638adfcab74896474b7fe5c6ffa47162587cbb04d6a51f22db3f81d83c9f7ea3e4af73be353fe65b7b93911c4d7d781fbad3d32d2635fa0773bf8c483cd695c230b2620901368535631e9d10979f53b2219810fb53c103cd4f7ac5d61bb3eee2182511bee6eaf2545ed54364f949f0e410be210763940809224ca7912c6cfcf7f753d6bf57aca80afb8e116452a88924be6fb66ad7e1ee16ce20faed7cdf0cf7b1ba3c2f1beb5c16e66282a5c5ca8f142b24dcf400a6b64a337fa2745fb399bbad42840f7eaf927d0453456479e374a1648e30ba810a910c747d47b6dd87ce9759f8f5608d5c3544307e733ea4b9757b41b2d4c4597d5100f85bdb1abdf1446fb1ac8b35107bc1a9d7bfda6324f82b896c6aa4aa9e02717"}, &(0x7f00000012c0)=0x808) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001300)={r1, 0x81}, &(0x7f0000001340)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000001380)={r2, 0x6}, &(0x7f00000013c0)=0x8) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, 0xc, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0xc110) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001500), &(0x7f0000001540)=0x4) pread64(r0, &(0x7f0000001580)=""/4096, 0x1000, 0x7) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000002880)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002840)={&(0x7f00000025c0)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x9, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x1}, 0x5f, 0x6e, 0xfd4a, 0x7, 0x5, 'syz0\x00', "9620a72d106af8ec569702729350d5e69e2a696ddef5316938d4e1210d6f87cb", "da9d7fd28a44d6f08e75a0d0db5dfd3adab80e03626aa6329d6f5bd01f96bf80", [{0x5, 0x0, {0x0, 0x2}}, {0x8c, 0x5, {0xe44314336f74afa5, 0x6}}, {0x3, 0x5, {0x3, 0x8}}, {0x3, 0x7, {0x2}}, {0x6, 0xb3, {0x1, 0x8}}, {0xd, 0x8000, {0x1, 0x9}}, {0x6, 0xfffb, {0x2, 0x4}}, {0x943, 0x10, {0x2, 0xb689}}, {0xffff, 0xd, {0x0, 0x1}}, {0x1, 0x7, {0x2, 0xfffffffb}}, {0x81, 0xfff, {0x0, 0x7f}}, {0x7, 0x9, {0x3, 0x3}}, {0x5, 0xc, {0x3, 0x9}}, {0xfffe, 0x5, {0x1, 0x3}}, {0x3ff, 0x3, {0x0, 0x7}}, {0x991, 0xa0, {0x0, 0x2}}, {0xe5de, 0x0, {0x2}}, {0x9dc, 0x89, {0x3, 0x58cea0a2}}, {0x4, 0x8, {0x2, 0x6}}, {0x8000, 0x3, {0x1, 0x80}}, {0xfff8, 0x6, {0x0, 0x267}}, {0xff, 0x1765, {0x1, 0x1}}, {0x2, 0xbb, {0x3}}, {0x5, 0x1e0, {0x3, 0x3}}, {0x0, 0x7, {0x0, 0x98c}}, {0x400, 0x3, {0x1, 0x7}}, {0x4, 0x7f, {0x0, 0x8}}, {0x9aa, 0x8, {0x3, 0xa11}}, {0x1, 0x93, {0x1, 0x24000}}, {0x0, 0x8000, {0x2, 0x2}}, {0x1, 0x5, {0x2, 0x9}}, {0x4, 0xfffd, {0x0, 0xa}}, {0x6, 0xcbeb, {0x2, 0xf8e7}}, {0x6, 0x6, {0x3, 0x2}}, {0x9, 0x4, {0x1, 0x7}}, {0x5, 0x1, {0x0, 0x1940}}, {0x40, 0x8, {0x2, 0x7}}, {0xfffe, 0x400, {0x3, 0x1}}, {0x3, 0x7, {0x3, 0x3}}, {0x9, 0x356, {0x1, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20008020}, 0x801) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000028c0)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x10}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x5}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0xfd5, @dev={0xfe, 0x80, '\x00', 0x27}}], 0xb4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000002980)='bic\x00', 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000029c0)={0xd, 0x6, 0x8, 0x6, 0x0, 0x80000000, 0x9, 0x5, r2}, 0x20) r4 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r0, &(0x7f0000003e40)=[{&(0x7f0000002a00)="502f2865261fbc53bf67ddf9a1c09de18cd616e2277c28dcf870552510ab099216fce3ca6ea7b69b1e952536a8d26361e00f6d0e20891cf22fb869d48bff47f28720a9aea0be02a26f52251cdf5ee12a9ad98225a117b3def1e497fb8c23c0223a80", 0x62}, {&(0x7f0000002a80)="c970443807b3347ab491545ab4de85a5f1610afa9a1cf2986e676905659d1011cfb2c38c9df907a34f63dcda58a61725a40f83fc6628760116b751ac8e3a4f1a3723914119f5355311fea3c59050fed79e987ecc5f5bcac71b", 0x59}, {&(0x7f0000002b00)="7ed568bf8281bf2115c3d6bef64c693059ee6af85cbe175e089272056592f2c53475ba3bdff5dd7c750cb4dd19c241f96e17ad84cb85c14d3f039138021f660d6d292408fadf0ca53c62efb828630cce319f1ab96557d4f9da7774ace1fc57df43e13e89fbcb6775e2b5c2db547cc7adc1faf7fbe076a2e77b1903743eac9f3e8deb742d340259ffa28bcd84478a95506fc3446087ef7f2c9df13f98edc33e013d82d32690d6e4f54704bfc68c21e786f0f827143ae14e1c365837483814a7844c3747567a650bd54076d9a51e085fd4486fce2a09d5baac64e94ac02864f9631203922c55213e4db91dc88d35", 0xed}, {&(0x7f0000002c00)="13bac928f25c4a6ae9bcb8540a4030ded5a7987caa9313d345e240f09a42187dbab1713e2e4c540c9feb2c500b135efdfc18ead5156c662d375b40cec26d15684b19e3cf382ba5813224d62cf7b355528bce67ed3abdbeb22f696bd6cec7da78adf20cdca6f8279006851617a0ed4738229a48160d7093a5efead9bfa6d1fc8abee44ac8985be1ff1eb62b7aab4cf99979747665", 0x94}, {&(0x7f0000002cc0)="04d7b54f9c8dc0f397960b5c04bbfc17f66df12b838eaadac478d4e9631ddaafe70a9692ff36cf4f151720a94f4e6cce544b6c146ad01f38e469ba67cecad6ffe4426d0109ac9af5b7f25b58d1736c94c33f1501d8ec11907f7ef70f8d2dab450dd281c9a8a152ffd2e537a5a9e0331223e5b5a9eb4d58863b655f1392993694511e1d366ce55e9ae5bd5b4c8a", 0x8d}, {&(0x7f0000002d80)="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", 0x1000}, {&(0x7f0000003d80)="bd2b91ae23d9eebd10305f697eb8666dd156cfd18f01ecbc5f22be36bfea65c2c1d2a1af06b3c4f310ab1e5596d1679b3c17efeee47c34a70232ccd461b7a875a6e65c16627a50e907f8ba565aa13763dac5c8a4a800b6445ce8cc109b0d50fa4d373dc95e30ffe401", 0x69}, {&(0x7f0000003e00)="5539932e8c1785fdeb16dbe70a56864d7df0284b541766", 0x17}], 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000003f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000003fc0)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003f80)={&(0x7f0000003f40)={0x28, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008054}, 0x48000) r7 = dup3(r4, r4, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(r3, 0x5523) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004080)={&(0x7f0000004040)={0x1c, r6, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44092}, 0x4004000) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000004100)={r2, 0x4}, 0x8) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004180), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000041c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000042c0)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004280)={&(0x7f0000004200)={0x48, r9, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x61}}}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0xc854) 2m26.616293917s ago: executing program 33 (id=1186): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x800, "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"}, &(0x7f00000012c0)=0x808) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001300)={r1, 0x81}, &(0x7f0000001340)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000001380)={r2, 0x6}, &(0x7f00000013c0)=0x8) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, 0xc, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0xc110) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001500), &(0x7f0000001540)=0x4) pread64(r0, &(0x7f0000001580)=""/4096, 0x1000, 0x7) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000002880)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002840)={&(0x7f00000025c0)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x9, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x1}, 0x5f, 0x6e, 0xfd4a, 0x7, 0x5, 'syz0\x00', "9620a72d106af8ec569702729350d5e69e2a696ddef5316938d4e1210d6f87cb", "da9d7fd28a44d6f08e75a0d0db5dfd3adab80e03626aa6329d6f5bd01f96bf80", [{0x5, 0x0, {0x0, 0x2}}, {0x8c, 0x5, {0xe44314336f74afa5, 0x6}}, {0x3, 0x5, {0x3, 0x8}}, {0x3, 0x7, {0x2}}, {0x6, 0xb3, {0x1, 0x8}}, {0xd, 0x8000, {0x1, 0x9}}, {0x6, 0xfffb, {0x2, 0x4}}, {0x943, 0x10, {0x2, 0xb689}}, {0xffff, 0xd, {0x0, 0x1}}, {0x1, 0x7, {0x2, 0xfffffffb}}, {0x81, 0xfff, {0x0, 0x7f}}, {0x7, 0x9, {0x3, 0x3}}, {0x5, 0xc, {0x3, 0x9}}, {0xfffe, 0x5, {0x1, 0x3}}, {0x3ff, 0x3, {0x0, 0x7}}, {0x991, 0xa0, {0x0, 0x2}}, {0xe5de, 0x0, {0x2}}, {0x9dc, 0x89, {0x3, 0x58cea0a2}}, {0x4, 0x8, {0x2, 0x6}}, {0x8000, 0x3, {0x1, 0x80}}, {0xfff8, 0x6, {0x0, 0x267}}, {0xff, 0x1765, {0x1, 0x1}}, {0x2, 0xbb, {0x3}}, {0x5, 0x1e0, {0x3, 0x3}}, {0x0, 0x7, {0x0, 0x98c}}, {0x400, 0x3, {0x1, 0x7}}, {0x4, 0x7f, {0x0, 0x8}}, {0x9aa, 0x8, {0x3, 0xa11}}, {0x1, 0x93, {0x1, 0x24000}}, {0x0, 0x8000, {0x2, 0x2}}, {0x1, 0x5, {0x2, 0x9}}, {0x4, 0xfffd, {0x0, 0xa}}, {0x6, 0xcbeb, {0x2, 0xf8e7}}, {0x6, 0x6, {0x3, 0x2}}, {0x9, 0x4, {0x1, 0x7}}, {0x5, 0x1, {0x0, 0x1940}}, {0x40, 0x8, {0x2, 0x7}}, {0xfffe, 0x400, {0x3, 0x1}}, {0x3, 0x7, {0x3, 0x3}}, {0x9, 0x356, {0x1, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20008020}, 0x801) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000028c0)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x10}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x5}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0xfd5, @dev={0xfe, 0x80, '\x00', 0x27}}], 0xb4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000002980)='bic\x00', 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000029c0)={0xd, 0x6, 0x8, 0x6, 0x0, 0x80000000, 0x9, 0x5, r2}, 0x20) r4 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r0, &(0x7f0000003e40)=[{&(0x7f0000002a00)="502f2865261fbc53bf67ddf9a1c09de18cd616e2277c28dcf870552510ab099216fce3ca6ea7b69b1e952536a8d26361e00f6d0e20891cf22fb869d48bff47f28720a9aea0be02a26f52251cdf5ee12a9ad98225a117b3def1e497fb8c23c0223a80", 0x62}, {&(0x7f0000002a80)="c970443807b3347ab491545ab4de85a5f1610afa9a1cf2986e676905659d1011cfb2c38c9df907a34f63dcda58a61725a40f83fc6628760116b751ac8e3a4f1a3723914119f5355311fea3c59050fed79e987ecc5f5bcac71b", 0x59}, {&(0x7f0000002b00)="7ed568bf8281bf2115c3d6bef64c693059ee6af85cbe175e089272056592f2c53475ba3bdff5dd7c750cb4dd19c241f96e17ad84cb85c14d3f039138021f660d6d292408fadf0ca53c62efb828630cce319f1ab96557d4f9da7774ace1fc57df43e13e89fbcb6775e2b5c2db547cc7adc1faf7fbe076a2e77b1903743eac9f3e8deb742d340259ffa28bcd84478a95506fc3446087ef7f2c9df13f98edc33e013d82d32690d6e4f54704bfc68c21e786f0f827143ae14e1c365837483814a7844c3747567a650bd54076d9a51e085fd4486fce2a09d5baac64e94ac02864f9631203922c55213e4db91dc88d35", 0xed}, {&(0x7f0000002c00)="13bac928f25c4a6ae9bcb8540a4030ded5a7987caa9313d345e240f09a42187dbab1713e2e4c540c9feb2c500b135efdfc18ead5156c662d375b40cec26d15684b19e3cf382ba5813224d62cf7b355528bce67ed3abdbeb22f696bd6cec7da78adf20cdca6f8279006851617a0ed4738229a48160d7093a5efead9bfa6d1fc8abee44ac8985be1ff1eb62b7aab4cf99979747665", 0x94}, {&(0x7f0000002cc0)="04d7b54f9c8dc0f397960b5c04bbfc17f66df12b838eaadac478d4e9631ddaafe70a9692ff36cf4f151720a94f4e6cce544b6c146ad01f38e469ba67cecad6ffe4426d0109ac9af5b7f25b58d1736c94c33f1501d8ec11907f7ef70f8d2dab450dd281c9a8a152ffd2e537a5a9e0331223e5b5a9eb4d58863b655f1392993694511e1d366ce55e9ae5bd5b4c8a", 0x8d}, {&(0x7f0000002d80)="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", 0x1000}, {&(0x7f0000003d80)="bd2b91ae23d9eebd10305f697eb8666dd156cfd18f01ecbc5f22be36bfea65c2c1d2a1af06b3c4f310ab1e5596d1679b3c17efeee47c34a70232ccd461b7a875a6e65c16627a50e907f8ba565aa13763dac5c8a4a800b6445ce8cc109b0d50fa4d373dc95e30ffe401", 0x69}, {&(0x7f0000003e00)="5539932e8c1785fdeb16dbe70a56864d7df0284b541766", 0x17}], 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000003f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000003fc0)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003f80)={&(0x7f0000003f40)={0x28, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008054}, 0x48000) r7 = dup3(r4, r4, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(r3, 0x5523) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004080)={&(0x7f0000004040)={0x1c, r6, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44092}, 0x4004000) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000004100)={r2, 0x4}, 0x8) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004180), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000041c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000042c0)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004280)={&(0x7f0000004200)={0x48, r9, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x61}}}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0xc854) 2m2.866139879s ago: executing program 3 (id=1246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r7, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0xa, 0x0, 0x749bc}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002100090788000"], 0x0) 2m1.108542413s ago: executing program 3 (id=1248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x400, 0x103) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) fallocate(r2, 0x10, 0x0, 0x72000) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3, 0xbc2, 0x40, {}, {0x77359400}, {0x4, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "ac2c1c951ac034d6"}}, 0x48}, 0x1, 0x0, 0x0, 0x6}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='rootfs\x00', 0x264008c, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) 2m0.444103461s ago: executing program 3 (id=1249): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="38000000010001", 0x7) 2m0.180990634s ago: executing program 3 (id=1250): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e30080677fb60000ec67d4d888a8", 0x0, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (fail_nth: 1) 1m59.859842972s ago: executing program 3 (id=1252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000002d80)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x80, 0x4}, 0xc) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2}}, &(0x7f00000014c0)=""/218, 0x1a, 0xda, 0x1}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x6, 0x30}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={r3, 0x6, 0x401, 0x8, 0x81, 0x8001}, 0x14) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f00000000c0)=0x11) 1m59.714549165s ago: executing program 3 (id=1254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x0, 0x2, 0x21}]}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6004000000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aae638005b"], 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4040) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) 1m44.065606261s ago: executing program 34 (id=1254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x0, 0x2, 0x21}]}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6004000000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aae638005b"], 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4040) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) 15.955916487s ago: executing program 0 (id=1424): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x4, 0x5, 0x0, 0x23}, 0xe) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000540)="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", 0x144}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000440)=0x7) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000480)={r2, @in6={{0xa, 0x4e22, 0x8bcf, @local, 0x7}}}, &(0x7f0000000040)=0x84) 13.676524504s ago: executing program 0 (id=1425): setreuid(0xee01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = getuid() setreuid(0xffffffffffffffff, r1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) 13.431783418s ago: executing program 0 (id=1427): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ffc094010ebc000000000000008000f0fffeff0300000000fff5dd000000100001000c0810000c00000000040000", 0x58}], 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x1d, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000700)={"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"}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.191533308s ago: executing program 0 (id=1433): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002180)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x50, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 10.635483907s ago: executing program 0 (id=1436): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @random="a538f3ff4632", @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4}, @generic={0xa, 0x2}]}}, {0x17, 0x7c, 0x0, @multicast1}}}}}, 0x0) 10.238403731s ago: executing program 4 (id=1437): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0x20003, 0xfffffffffffffffe}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)={0x310, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2d47}, @TIPC_NLA_NODE_ID={0xad, 0x3, "1b47a8a7c2954bc24d4d266b65b1a82693125d1fe4850d7a09ffa477a702abf0524cdb0d094e8930f472da7dc4782382fa7467a9099233a8780141afec915542d5cee5452b9e74d000d4d8b1c5448f5fe97410e3ec957c64e6177e3ea760d61caa7672b4cc68722c04b3c0973dd66e40991aa8ffc2ff7170097f0fd5056c8829bda1acfe99fb0c06a99124f8bdb76c561e87bbc630fe94edc3f8fa648a9836137606c0f88b1aab4cd9"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "123393b9d7e0432f32c1bdb7b13a17c45cb4cbc07a410b35472a08afdd7602b88eb118"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x99e}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3cb1}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "3d3adbd315ea7f0f243a308d3fbfb16a8dd6d5a01a56"}}, @TIPC_NLA_NODE_ID={0xd6, 0x3, "1a3327839cdfda6eff41764d740a7dbb5c51936be48eba356050c5ea77a2de714bf310108174618408125c35c692af4ff0ddebd6e3eb84863d689608c1d9981afa3e9ce4965d282c4e02cb0cd8fb41e4374eddc7409e002a164931815c7a2a008fb10ea0cf6df15d892a4f1226f41d7e8bc931fb447bb221625f998cfe41d7449b1d3dfe34b946944efdb035a044990ae2b437f12a3daae20977c58f38ff4bcf7e7de2156a39e989aab0277cbd0d579ed4a6cb99fb49ada839999c47e1a90e502cde0d0493373133fcad90f642295320e595"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2d3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xbf8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1c}}}}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x4c000}, 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r1, 0x0, &(0x7f00007fd000/0x800000)=nil, 0x800000, 0x80}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000b0095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x18c400, 0x0) read$smackfs_cipsonum(r4, &(0x7f0000000140), 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socket(0x1f, 0x2, 0xa) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) syz_io_uring_setup(0x3480, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000680)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10) 8.632908328s ago: executing program 4 (id=1439): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@generic={0x82}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8}]}, @CTA_TIMEOUT_L4PROTO={0xffffffbc, 0x3, 0x84}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) signalfd(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e20, 0x3, 'fo\x00', 0x34, 0x7f, 0x5}, {@rand_addr=0x64010101, 0x4e23, 0x0, 0xce, 0x12d5c, 0x12d5c}}, 0x44) getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, 0x0, 0x0) 6.853158291s ago: executing program 0 (id=1441): r0 = syz_open_dev$mouse(&(0x7f0000000300), 0x3, 0x40b82) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x9, 0x9, 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000600)={0x1, 0x0, &(0x7f00000005c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000680)={0x4, r1, r2, 0xcccccccc}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x140d, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r9, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r6, 0x28543634fae43ad, 0x70bd2b, 0x0, {0xd}}, 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca14"], 0x1000f) 6.716247178s ago: executing program 6 (id=1442): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x5, 0x0, &(0x7f0000000100)="b9ff030f60", 0x0, 0x34e152f7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x7, 0x83, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0xc}], 0x10}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0) mq_notify(r5, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080018"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="cd45041b6bd176e64ce13b6fbc35171e7ccaf3e2925cb726c69e18f3f4cf2370f08bcdfde07785942896df6b62c9cac85d772e52e80a6d6d5d57f7446345b9df016263b988971222150c566f", 0x4c}, {&(0x7f0000000340)="c02363de3c7fb649b433ad32398ffd492716df469ea80ca7c0b379d76f5e70abd846bb551d42a4a4b5c00d04aa0dcf4a08503a9452499a5284631fab667bc5807a9181f2d3149b8816570a039fbcf83993772711af2452094bc758113d76a0defae7499aff6a95", 0x67}, {&(0x7f0000000400)="10bb39057a5d6cc9ac32d2bf62d50ad909db90fba107c5f9de10f6ff080e51a94f4b9769303fa356c8749b3878514fdb00fd6ac31e2a04525422cd22cc56175b56103cff0b7b1b671d61e95b541bc80bc6b3163c7bd55b7b8e935198d2b4270857e0e2f64f2e8ca83cdca6469423e4162811a550be1d97c78a851ab8be59", 0x7e}], 0x3, 0x0, 0x0, 0x2c}, 0x4044004) 6.456793901s ago: executing program 4 (id=1443): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca14"], 0x1000f) 5.593534815s ago: executing program 4 (id=1444): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002180)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x50, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 5.420901647s ago: executing program 6 (id=1445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x68, r7, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x10) getpeername(r4, 0x0, &(0x7f00000000c0)) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x9, 0x1) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x6, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 4.137685745s ago: executing program 6 (id=1446): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x12, 0xfffffffffffffffc, &(0x7f0000000000)) 4.002974632s ago: executing program 6 (id=1447): socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r0 = io_uring_setup(0x58fb, &(0x7f0000000140)={0x0, 0x3fc6, 0x2000, 0x3, 0x3ce}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) fcntl$setstatus(r2, 0x4, 0x42800) (async) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r3}) (async) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r3}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="0424f5"], 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x8, 0x3}, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x0, 0x4}, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="a0a1dc94d4d5e0417e8102010000776e"], 0x0, &(0x7f0000000400)={0x20, 0x83, 0x3, "9b6a3b"}, &(0x7f0000000440)={0x20, 0x84, 0x3, "8974dc"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "56a79a"}}) 887.871786ms ago: executing program 6 (id=1448): mkdir(&(0x7f0000000140)='./bus\x00', 0x0) write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='0x0000000000000005:0x0000000000000098:0x0080000000000000:0x0000000000007421:0x00000000000001af:0x0000000000000000:0x0000000000000004:0x0000000000000101 r'], 0x9f) 822.497333ms ago: executing program 6 (id=1449): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @random="a538f3ff4632", @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4}, @generic={0xa, 0x2}]}}, {0x17, 0x7c, 0x0, @multicast1}}}}}, 0x0) 128.227955ms ago: executing program 4 (id=1450): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000001380)='fd/4\x00') r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000025c0)="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", 0x800, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000040)={r1, 0x1000, &(0x7f00000015c0)=""/4096}) 0s ago: executing program 4 (id=1451): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x34e152f7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$igmp6(0xa, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2, &(0x7f0000000000)=0x2, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x7, 0x83, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0xc}], 0x10}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0) mq_notify(r5, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00030008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="cd45041b6bd176e64ce13b6fbc35171e7ccaf3e2925cb726c69e18f3f4cf2370f08bcdfde07785942896df6b62c9cac85d772e52e80a6d6d5d57f7446345b9df016263b988971222150c566f", 0x4c}, {0x0}], 0x2, 0x0, 0x0, 0x2c}, 0x4044004) kernel console output (not intermixed with test programs): ][T10378] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.366034][T10378] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.366272][T10378] bridge_slave_0: entered allmulticast mode [ 653.552126][ T5903] usb 4-1: Firmware version (0.0) predates our first public release. [ 653.552156][ T5903] usb 4-1: Please update to version 0.2 or newer [ 653.560424][T10378] bridge_slave_0: entered promiscuous mode [ 653.591631][T10378] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.591803][T10378] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.592042][T10378] bridge_slave_1: entered allmulticast mode [ 653.635835][T10378] bridge_slave_1: entered promiscuous mode [ 654.306966][ T5903] usb 4-1: USB disconnect, device number 38 [ 655.104302][ T5948] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 656.183888][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 656.186731][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.186764][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.186788][ T5948] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 656.186833][ T5948] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 656.186857][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.205244][ T5948] usb 1-1: config 0 descriptor?? [ 656.992538][T10594] FAULT_INJECTION: forcing a failure. [ 656.992538][T10594] name failslab, interval 1, probability 0, space 0, times 0 [ 656.992607][T10594] CPU: 1 UID: 0 PID: 10594 Comm: syz.4.1125 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 656.992631][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 656.992643][T10594] Call Trace: [ 656.992652][T10594] [ 656.992663][T10594] dump_stack_lvl+0x189/0x250 [ 656.992698][T10594] ? __pfx____ratelimit+0x10/0x10 [ 656.992729][T10594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.992759][T10594] ? __pfx__printk+0x10/0x10 [ 656.992790][T10594] ? __pfx___might_resched+0x10/0x10 [ 656.992812][T10594] ? fs_reclaim_acquire+0x7d/0x100 [ 656.992836][T10594] should_fail_ex+0x46c/0x600 [ 656.992871][T10594] ? sock_alloc_inode+0x28/0xc0 [ 656.992896][T10594] should_failslab+0xa8/0x100 [ 656.992925][T10594] ? sock_alloc_inode+0x28/0xc0 [ 656.992955][T10594] kmem_cache_alloc_lru_noprof+0x73/0x310 [ 656.992989][T10594] ? __pfx_sock_alloc_inode+0x10/0x10 [ 656.993013][T10594] sock_alloc_inode+0x28/0xc0 [ 656.993037][T10594] alloc_inode+0x6a/0x1b0 [ 656.993067][T10594] do_accept+0x117/0x680 [ 656.993095][T10594] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 656.993127][T10594] ? __pfx_do_accept+0x10/0x10 [ 656.993182][T10594] __sys_accept4+0x11c/0x1c0 [ 656.993214][T10594] ? __pfx___sys_accept4+0x10/0x10 [ 656.993247][T10594] ? __secure_computing+0xe2/0x2a0 [ 656.993283][T10594] __x64_sys_accept4+0x9a/0xb0 [ 656.993314][T10594] do_syscall_64+0xfa/0x3b0 [ 656.993336][T10594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.993356][T10594] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 656.993376][T10594] ? clear_bhb_loop+0x60/0xb0 [ 656.993402][T10594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.993422][T10594] RIP: 0033:0x7ff8641aeba9 [ 656.993442][T10594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.993460][T10594] RSP: 002b:00007ff8623cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 656.993484][T10594] RAX: ffffffffffffffda RBX: 00007ff8643f6180 RCX: 00007ff8641aeba9 [ 656.993500][T10594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 656.993512][T10594] RBP: 00007ff8623cc090 R08: 0000000000000000 R09: 0000000000000000 [ 656.993525][T10594] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 656.993538][T10594] R13: 00007ff8643f6218 R14: 00007ff8643f6180 R15: 00007ffc57c83758 [ 656.993573][T10594] [ 657.636271][T10378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.863670][ T5838] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 657.865462][ T5838] Bluetooth: hci1: Injecting HCI hardware error event [ 657.866329][ T5838] Bluetooth: hci1: hardware error 0x00 [ 657.936440][ T5948] usbhid 1-1:0.0: can't add hid device: -71 [ 657.936587][ T5948] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 657.946942][ T5948] usb 1-1: USB disconnect, device number 21 [ 657.952998][T10378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.166599][T10378] team0: Port device team_slave_0 added [ 661.196225][T10378] team0: Port device team_slave_1 added [ 661.517910][ T5838] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 663.026666][T10623] netlink: 'syz.3.1133': attribute type 1 has an invalid length. [ 663.026683][T10623] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1133'. [ 663.146071][T10378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.146090][T10378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.146121][T10378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.173383][T10378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.173401][T10378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.173425][T10378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.333938][ T31] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 663.496834][ T31] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 663.496866][ T31] usb 4-1: config 0 has no interface number 0 [ 663.500429][ T31] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 663.500480][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.500502][ T31] usb 4-1: Product: syz [ 663.500516][ T31] usb 4-1: Manufacturer: syz [ 663.500530][ T31] usb 4-1: SerialNumber: syz [ 663.606116][ T31] usb 4-1: config 0 descriptor?? [ 663.813872][ T31] usb 4-1: Firmware version (0.0) predates our first public release. [ 663.813913][ T31] usb 4-1: Please update to version 0.2 or newer [ 664.522501][T10629] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.523210][T10629] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.822249][T10629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.835573][T10629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.994893][T10664] FAULT_INJECTION: forcing a failure. [ 667.994893][T10664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.994962][T10664] CPU: 1 UID: 0 PID: 10664 Comm: syz.4.1139 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 667.994986][T10664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 667.994999][T10664] Call Trace: [ 667.995008][T10664] [ 667.995018][T10664] dump_stack_lvl+0x189/0x250 [ 667.995054][T10664] ? __pfx____ratelimit+0x10/0x10 [ 667.995085][T10664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.995116][T10664] ? __pfx__printk+0x10/0x10 [ 667.995139][T10664] ? __might_fault+0xb0/0x130 [ 667.995183][T10664] should_fail_ex+0x46c/0x600 [ 667.995220][T10664] _copy_from_user+0x2d/0xb0 [ 667.995247][T10664] ___sys_sendmsg+0x158/0x2a0 [ 667.995273][T10664] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.995339][T10664] ? __fget_files+0x2a/0x420 [ 667.995368][T10664] ? __fget_files+0x3a6/0x420 [ 667.995410][T10664] __sys_sendmmsg+0x22d/0x430 [ 667.995439][T10664] ? __pfx___sys_sendmmsg+0x10/0x10 [ 667.995473][T10664] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 667.995539][T10664] __x64_sys_sendmmsg+0xa0/0xc0 [ 667.995563][T10664] do_syscall_64+0xfa/0x3b0 [ 667.995584][T10664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.995604][T10664] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 667.995623][T10664] ? clear_bhb_loop+0x60/0xb0 [ 667.995649][T10664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.995668][T10664] RIP: 0033:0x7ff8641aeba9 [ 667.995686][T10664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.995704][T10664] RSP: 002b:00007ff8623cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 667.995728][T10664] RAX: ffffffffffffffda RBX: 00007ff8643f6180 RCX: 00007ff8641aeba9 [ 667.995743][T10664] RDX: 0000000000000001 RSI: 0000200000002440 RDI: 0000000000000008 [ 667.995756][T10664] RBP: 00007ff8623cc090 R08: 0000000000000000 R09: 0000000000000000 [ 667.995769][T10664] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 667.995782][T10664] R13: 00007ff8643f6218 R14: 00007ff8643f6180 R15: 00007ffc57c83758 [ 667.995824][T10664] [ 670.498298][ T6807] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.567824][ T6807] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.706324][ T31] usb 4-1: USB disconnect, device number 39 [ 671.101335][ T6807] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.818617][ T6807] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.881707][T10378] hsr_slave_0: entered promiscuous mode [ 671.883436][T10378] hsr_slave_1: entered promiscuous mode [ 671.984741][T10697] FAULT_INJECTION: forcing a failure. [ 671.984741][T10697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.984825][T10697] CPU: 1 UID: 0 PID: 10697 Comm: syz.4.1148 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 671.984849][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 671.984861][T10697] Call Trace: [ 671.984869][T10697] [ 671.984879][T10697] dump_stack_lvl+0x189/0x250 [ 671.984912][T10697] ? __pfx____ratelimit+0x10/0x10 [ 671.984942][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.984971][T10697] ? __pfx__printk+0x10/0x10 [ 671.985011][T10697] should_fail_ex+0x46c/0x600 [ 671.985046][T10697] _copy_to_user+0x31/0xb0 [ 671.985075][T10697] simple_read_from_buffer+0xe1/0x170 [ 671.985110][T10697] proc_fail_nth_read+0x1b6/0x220 [ 671.985136][T10697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 671.985162][T10697] ? rw_verify_area+0x2ac/0x4e0 [ 671.985187][T10697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 671.985211][T10697] vfs_read+0x203/0xa30 [ 671.985248][T10697] ? __pfx_vfs_read+0x10/0x10 [ 671.985269][T10697] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 671.985307][T10697] ? mutex_lock_nested+0x154/0x1d0 [ 671.985330][T10697] ? fdget_pos+0x253/0x320 [ 671.985371][T10697] ksys_read+0x14b/0x260 [ 671.985399][T10697] ? __pfx_ksys_read+0x10/0x10 [ 671.985440][T10697] do_syscall_64+0xfa/0x3b0 [ 671.985462][T10697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.985481][T10697] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 671.985501][T10697] ? clear_bhb_loop+0x60/0xb0 [ 671.985527][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.985548][T10697] RIP: 0033:0x7ff8641ad5bc [ 671.985566][T10697] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 671.985585][T10697] RSP: 002b:00007ff86240e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 671.985608][T10697] RAX: ffffffffffffffda RBX: 00007ff8643f5fa0 RCX: 00007ff8641ad5bc [ 671.985624][T10697] RDX: 000000000000000f RSI: 00007ff86240e0a0 RDI: 0000000000000006 [ 671.985638][T10697] RBP: 00007ff86240e090 R08: 0000000000000000 R09: 0000000000000000 [ 671.985651][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.985663][T10697] R13: 00007ff8643f6038 R14: 00007ff8643f5fa0 R15: 00007ffc57c83758 [ 671.985699][T10697] [ 672.179604][T10700] netlink: 'syz.1.1147': attribute type 1 has an invalid length. [ 672.179718][T10700] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1147'. [ 672.485674][ T31] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 672.650983][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 672.663893][ T31] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 672.665561][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 672.665591][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 672.665612][ T31] usb 4-1: SerialNumber: syz [ 672.758278][ T9] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 673.020959][ T9] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 673.020976][ T9] usb 2-1: config 0 has no interface number 0 [ 673.027049][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 673.027077][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.027095][ T9] usb 2-1: Product: syz [ 673.027108][ T9] usb 2-1: Manufacturer: syz [ 673.027121][ T9] usb 2-1: SerialNumber: syz [ 673.043881][ T9] usb 2-1: config 0 descriptor?? [ 674.250189][ T8356] usb 4-1: USB disconnect, device number 40 [ 674.421773][ T9] usb 2-1: Firmware version (0.0) predates our first public release. [ 674.421813][ T9] usb 2-1: Please update to version 0.2 or newer [ 675.068587][T10716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 676.200877][ T9] usb 2-1: USB disconnect, device number 27 [ 680.469514][ T989] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 680.531409][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 680.623919][ T989] usb 1-1: Using ep0 maxpacket: 8 [ 680.627156][ T989] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 680.627185][ T989] usb 1-1: config 0 has no interface number 0 [ 680.627576][ T989] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 680.627601][ T989] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 680.627627][ T989] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 680.627663][ T989] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 680.627705][ T989] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 680.627728][ T989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.713764][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 680.727795][ T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 680.727824][ T9] usb 2-1: config 0 has no interface number 0 [ 680.727876][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 680.727901][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 680.727927][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 680.727955][ T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 680.727998][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 680.728022][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.821400][ T989] usb 1-1: config 0 descriptor?? [ 680.836811][ T9] usb 2-1: config 0 descriptor?? [ 680.884145][ T9] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 680.891159][ T989] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 680.983345][ T989] usb 2-1: USB disconnect, device number 28 [ 681.037664][T10735] FAULT_INJECTION: forcing a failure. [ 681.037664][T10735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.037701][T10735] CPU: 0 UID: 0 PID: 10735 Comm: syz.0.1157 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 681.037724][T10735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 681.037736][T10735] Call Trace: [ 681.037744][T10735] [ 681.037754][T10735] dump_stack_lvl+0x189/0x250 [ 681.037789][T10735] ? __pfx____ratelimit+0x10/0x10 [ 681.037821][T10735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 681.037850][T10735] ? __pfx__printk+0x10/0x10 [ 681.037890][T10735] should_fail_ex+0x46c/0x600 [ 681.037927][T10735] _copy_to_user+0x31/0xb0 [ 681.037955][T10735] simple_read_from_buffer+0xe1/0x170 [ 681.037987][T10735] proc_fail_nth_read+0x1b6/0x220 [ 681.038011][T10735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 681.038035][T10735] ? rw_verify_area+0x2ac/0x4e0 [ 681.038057][T10735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 681.038080][T10735] vfs_read+0x203/0xa30 [ 681.038116][T10735] ? __pfx_vfs_read+0x10/0x10 [ 681.038137][T10735] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 681.038174][T10735] ? mutex_lock_nested+0x154/0x1d0 [ 681.038196][T10735] ? fdget_pos+0x253/0x320 [ 681.038236][T10735] ksys_read+0x14b/0x260 [ 681.038266][T10735] ? __pfx_ksys_read+0x10/0x10 [ 681.038287][T10735] ? rcu_is_watching+0x15/0xb0 [ 681.038325][T10735] ? do_syscall_64+0xbe/0x3b0 [ 681.038349][T10735] do_syscall_64+0xfa/0x3b0 [ 681.038367][T10735] ? lockdep_hardirqs_on+0x9c/0x150 [ 681.038396][T10735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.038417][T10735] ? clear_bhb_loop+0x60/0xb0 [ 681.038443][T10735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.038476][T10735] RIP: 0033:0x7f26a3a6d5bc [ 681.038495][T10735] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 681.038511][T10735] RSP: 002b:00007f26a1cce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 681.038535][T10735] RAX: ffffffffffffffda RBX: 00007f26a3cb5fa0 RCX: 00007f26a3a6d5bc [ 681.038550][T10735] RDX: 000000000000000f RSI: 00007f26a1cce0a0 RDI: 0000000000000008 [ 681.038563][T10735] RBP: 00007f26a1cce090 R08: 0000000000000000 R09: 0000000000000000 [ 681.038576][T10735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.038588][T10735] R13: 00007f26a3cb6038 R14: 00007f26a3cb5fa0 R15: 00007ffd9003c158 [ 681.038623][T10735] [ 681.041807][ T989] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 681.366754][ T9] usb 1-1: USB disconnect, device number 22 [ 681.524769][ T9] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 683.100409][T10762] sctp: [Deprecated]: syz.1.1164 (pid 10762) Use of int in max_burst socket option. [ 683.100409][T10762] Use struct sctp_assoc_value instead [ 685.229400][T10782] 9pnet_fd: Insufficient options for proto=fd [ 685.765117][ T989] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 685.923785][ T989] usb 1-1: Using ep0 maxpacket: 16 [ 685.932120][ T989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.932156][ T989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.932179][ T989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 685.932224][ T989] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 685.932247][ T989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.000220][ T989] usb 1-1: config 0 descriptor?? [ 686.327320][ T989] usbhid 1-1:0.0: can't add hid device: -71 [ 686.327465][ T989] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 686.426823][ T989] usb 1-1: USB disconnect, device number 23 [ 687.717072][T10803] FAULT_INJECTION: forcing a failure. [ 687.717072][T10803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.717107][T10803] CPU: 0 UID: 0 PID: 10803 Comm: syz.3.1170 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 687.717127][T10803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 687.717137][T10803] Call Trace: [ 687.717144][T10803] [ 687.717151][T10803] dump_stack_lvl+0x189/0x250 [ 687.717182][T10803] ? __pfx____ratelimit+0x10/0x10 [ 687.717206][T10803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 687.717230][T10803] ? __pfx__printk+0x10/0x10 [ 687.717248][T10803] ? __might_fault+0xb0/0x130 [ 687.717284][T10803] should_fail_ex+0x46c/0x600 [ 687.717314][T10803] _copy_from_user+0x2d/0xb0 [ 687.717345][T10803] rfkill_fop_write+0x139/0x580 [ 687.717365][T10803] ? __pfx_rfkill_fop_write+0x10/0x10 [ 687.717385][T10803] ? rw_verify_area+0x25b/0x4e0 [ 687.717404][T10803] ? __lock_acquire+0xab9/0xd20 [ 687.717423][T10803] ? __pfx_rfkill_fop_write+0x10/0x10 [ 687.717441][T10803] vfs_write+0x287/0xb40 [ 687.717469][T10803] ? __pfx_vfs_write+0x10/0x10 [ 687.717492][T10803] ? __fget_files+0x2a/0x420 [ 687.717516][T10803] ? __fget_files+0x2a/0x420 [ 687.717537][T10803] ? __fget_files+0x3a6/0x420 [ 687.717563][T10803] ? __fget_files+0x2a/0x420 [ 687.717596][T10803] ksys_write+0x14b/0x260 [ 687.717619][T10803] ? __pfx_ksys_write+0x10/0x10 [ 687.717636][T10803] ? rcu_is_watching+0x15/0xb0 [ 687.717667][T10803] ? do_syscall_64+0xbe/0x3b0 [ 687.717687][T10803] do_syscall_64+0xfa/0x3b0 [ 687.717701][T10803] ? lockdep_hardirqs_on+0x9c/0x150 [ 687.717724][T10803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.717741][T10803] ? clear_bhb_loop+0x60/0xb0 [ 687.717762][T10803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.717777][T10803] RIP: 0033:0x7fb35653eba9 [ 687.717793][T10803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.717808][T10803] RSP: 002b:00007fb3547a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 687.717828][T10803] RAX: ffffffffffffffda RBX: 00007fb356785fa0 RCX: 00007fb35653eba9 [ 687.717840][T10803] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000003 [ 687.717850][T10803] RBP: 00007fb3547a6090 R08: 0000000000000000 R09: 0000000000000000 [ 687.717860][T10803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.717870][T10803] R13: 00007fb356786038 R14: 00007fb356785fa0 R15: 00007ffc4e58c658 [ 687.717899][T10803] [ 689.849630][T10822] sctp: [Deprecated]: syz.1.1175 (pid 10822) Use of int in max_burst socket option. [ 689.849630][T10822] Use struct sctp_assoc_value instead [ 691.482474][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.918259][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.529052][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.613116][ T989] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 693.782412][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.829167][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 693.943830][ T989] usb 2-1: Using ep0 maxpacket: 16 [ 693.946534][ T989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.946564][ T989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.946578][ T989] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 693.946605][ T989] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 693.946618][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.967376][ T989] usb 2-1: config 0 descriptor?? [ 694.233819][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.261184][ T989] usbhid 2-1:0.0: can't add hid device: -71 [ 694.261334][ T989] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 694.289468][ T989] usb 2-1: USB disconnect, device number 29 [ 694.509549][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.942923][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.169316][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.382294][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.527647][T10876] netfs: Couldn't get user pages (rc=-14) [ 696.527669][T10876] netfs: Zero-sized read [R=1] [ 696.677370][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 696.699316][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 696.702731][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 696.719731][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 696.720684][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 699.283365][ T5833] Bluetooth: hci4: command tx timeout [ 699.758817][T10900] new mount options do not match the existing superblock, will be ignored [ 699.793388][T10900] option changes via remount are deprecated (pid=10896 comm=syz.3.1188) [ 701.568211][ C0] vkms_vblank_simulate: vblank timer overrun [ 701.569486][ T5833] Bluetooth: hci4: command tx timeout [ 701.924030][ C0] vkms_vblank_simulate: vblank timer overrun [ 701.993862][ T31] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 702.150096][ T31] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 702.150130][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.182255][ T31] usb 4-1: config 0 descriptor?? [ 702.200955][ T31] cp210x 4-1:0.0: cp210x converter detected [ 702.445679][ C0] vkms_vblank_simulate: vblank timer overrun [ 703.568452][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.013954][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.020238][ T5833] Bluetooth: hci4: command tx timeout [ 704.062815][ T6034] bridge_slave_1: left allmulticast mode [ 704.062855][ T6034] bridge_slave_1: left promiscuous mode [ 704.063175][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.676038][ T31] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 704.676073][ T31] cp210x 4-1:0.0: querying part number failed [ 704.684381][ T31] usb 4-1: cp210x converter now attached to ttyUSB0 [ 704.755505][ T6034] bridge_slave_0: left allmulticast mode [ 704.755541][ T6034] bridge_slave_0: left promiscuous mode [ 704.755846][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.876162][T10940] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 704.876187][T10940] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 704.985728][T10945] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 704.985750][T10945] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 704.991107][T10945] vhci_hcd vhci_hcd.0: Device attached [ 705.033335][T10940] vhci_hcd vhci_hcd.0: Device attached [ 705.142863][ C0] vkms_vblank_simulate: vblank timer overrun [ 705.284844][ T9] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 705.603751][T10942] vhci_hcd: connection reset by peer [ 705.612848][T10946] vhci_hcd: connection closed [ 705.653751][ T1164] vhci_hcd: stop threads [ 705.670955][ T1164] vhci_hcd: release socket [ 705.702764][ T1164] vhci_hcd: disconnect device [ 705.707999][ T1164] vhci_hcd: stop threads [ 705.708019][ T1164] vhci_hcd: release socket [ 705.713742][ T1164] vhci_hcd: disconnect device [ 705.814737][ T6034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.939045][ T6034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.963756][ T5896] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 706.029964][ T6034] bond0 (unregistering): Released all slaves [ 706.073978][ T5833] Bluetooth: hci4: command tx timeout [ 706.093959][ T5896] usb 1-1: device descriptor read/64, error -71 [ 706.134280][ T5903] usb 4-1: USB disconnect, device number 41 [ 706.187606][ T5903] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 706.188536][ T5903] cp210x 4-1:0.0: device disconnected [ 706.340728][ T5896] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 706.633936][ T5896] usb 1-1: device descriptor read/64, error -71 [ 706.744460][ T5896] usb usb1-port1: attempt power cycle [ 707.195898][ T5896] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 707.324059][ T5896] usb 1-1: device descriptor read/8, error -71 [ 707.793946][ T5896] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 707.814829][ T5896] usb 1-1: device descriptor read/8, error -71 [ 707.924348][ T5896] usb usb1-port1: unable to enumerate USB device [ 708.033878][ T6034] hsr_slave_0: left promiscuous mode [ 708.054152][ T6034] hsr_slave_1: left promiscuous mode [ 708.055247][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.106506][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.048457][T10983] new mount options do not match the existing superblock, will be ignored [ 709.069462][T10983] option changes via remount are deprecated (pid=10979 comm=syz.3.1199) [ 710.144493][T10989] FAULT_INJECTION: forcing a failure. [ 710.144493][T10989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.144526][T10989] CPU: 1 UID: 0 PID: 10989 Comm: syz.0.1200 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 710.144546][T10989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 710.144556][T10989] Call Trace: [ 710.144563][T10989] [ 710.144570][T10989] dump_stack_lvl+0x189/0x250 [ 710.144598][T10989] ? __pfx____ratelimit+0x10/0x10 [ 710.144622][T10989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 710.144645][T10989] ? __pfx__printk+0x10/0x10 [ 710.144664][T10989] ? __might_fault+0xb0/0x130 [ 710.144700][T10989] should_fail_ex+0x46c/0x600 [ 710.144729][T10989] _copy_from_user+0x2d/0xb0 [ 710.144751][T10989] ___sys_sendmsg+0x158/0x2a0 [ 710.144771][T10989] ? __pfx____sys_sendmsg+0x10/0x10 [ 710.144828][T10989] ? __fget_files+0x2a/0x420 [ 710.144861][T10989] ? __fget_files+0x3a6/0x420 [ 710.144896][T10989] __x64_sys_sendmsg+0x1a1/0x260 [ 710.144916][T10989] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 710.144942][T10989] ? __pfx_ksys_write+0x10/0x10 [ 710.144959][T10989] ? rcu_is_watching+0x15/0xb0 [ 710.144988][T10989] ? do_syscall_64+0xbe/0x3b0 [ 710.145008][T10989] do_syscall_64+0xfa/0x3b0 [ 710.145022][T10989] ? lockdep_hardirqs_on+0x9c/0x150 [ 710.145046][T10989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.145063][T10989] ? clear_bhb_loop+0x60/0xb0 [ 710.145083][T10989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.145100][T10989] RIP: 0033:0x7f26a3a6eba9 [ 710.145116][T10989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.145132][T10989] RSP: 002b:00007f26a1cce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.145151][T10989] RAX: ffffffffffffffda RBX: 00007f26a3cb5fa0 RCX: 00007f26a3a6eba9 [ 710.145164][T10989] RDX: 0000000004004010 RSI: 0000200000000200 RDI: 0000000000000003 [ 710.145175][T10989] RBP: 00007f26a1cce090 R08: 0000000000000000 R09: 0000000000000000 [ 710.145186][T10989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.145198][T10989] R13: 00007f26a3cb6038 R14: 00007f26a3cb5fa0 R15: 00007ffd9003c158 [ 710.145227][T10989] [ 710.463863][ T9] vhci_hcd: vhci_device speed not set [ 710.828822][T11004] FAULT_INJECTION: forcing a failure. [ 710.828822][T11004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.828859][T11004] CPU: 1 UID: 0 PID: 11004 Comm: syz.4.1206 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 710.828884][T11004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 710.828896][T11004] Call Trace: [ 710.828904][T11004] [ 710.828913][T11004] dump_stack_lvl+0x189/0x250 [ 710.828947][T11004] ? __pfx____ratelimit+0x10/0x10 [ 710.828977][T11004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 710.829015][T11004] ? __pfx__printk+0x10/0x10 [ 710.829054][T11004] should_fail_ex+0x46c/0x600 [ 710.829088][T11004] _copy_to_user+0x31/0xb0 [ 710.829116][T11004] simple_read_from_buffer+0xe1/0x170 [ 710.829149][T11004] proc_fail_nth_read+0x1b6/0x220 [ 710.829174][T11004] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 710.829198][T11004] ? rw_verify_area+0x2ac/0x4e0 [ 710.829221][T11004] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 710.829243][T11004] vfs_read+0x203/0xa30 [ 710.829284][T11004] ? __pfx_vfs_read+0x10/0x10 [ 710.829311][T11004] ? do_sys_openat2+0x154/0x1c0 [ 710.829329][T11004] ? kmem_cache_free+0x195/0x510 [ 710.829355][T11004] ? kcm_setsockopt+0xdb/0x520 [ 710.829391][T11004] ksys_read+0x14b/0x260 [ 710.829418][T11004] ? __pfx_ksys_read+0x10/0x10 [ 710.829449][T11004] ? do_syscall_64+0xbe/0x3b0 [ 710.829472][T11004] do_syscall_64+0xfa/0x3b0 [ 710.829489][T11004] ? lockdep_hardirqs_on+0x9c/0x150 [ 710.829522][T11004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.829542][T11004] ? clear_bhb_loop+0x60/0xb0 [ 710.829566][T11004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.829586][T11004] RIP: 0033:0x7ff8641ad5bc [ 710.829605][T11004] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 710.829622][T11004] RSP: 002b:00007ff86240e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 710.829644][T11004] RAX: ffffffffffffffda RBX: 00007ff8643f5fa0 RCX: 00007ff8641ad5bc [ 710.829660][T11004] RDX: 000000000000000f RSI: 00007ff86240e0a0 RDI: 0000000000000004 [ 710.829672][T11004] RBP: 00007ff86240e090 R08: 0000000000000000 R09: 0000000000000000 [ 710.829685][T11004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.829698][T11004] R13: 00007ff8643f6038 R14: 00007ff8643f5fa0 R15: 00007ffc57c83758 [ 710.829731][T11004] [ 710.831968][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.083805][ T5903] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 711.425970][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.443159][ T6034] team0 (unregistering): Port device team_slave_1 removed [ 711.463726][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 711.469918][ T5903] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 711.469950][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.469970][ T5903] usb 4-1: Product: syz [ 711.469984][ T5903] usb 4-1: Manufacturer: syz [ 711.469998][ T5903] usb 4-1: SerialNumber: syz [ 712.477898][ T5903] usb 4-1: config 0 descriptor?? [ 712.551495][ C0] vkms_vblank_simulate: vblank timer overrun [ 712.714196][ C0] vkms_vblank_simulate: vblank timer overrun [ 712.897331][T11005] new mount options do not match the existing superblock, will be ignored [ 712.898522][T11005] option changes via remount are deprecated (pid=11002 comm=syz.0.1205) [ 713.430587][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.609271][ T5948] usb 4-1: USB disconnect, device number 42 [ 713.622858][ T6034] team0 (unregistering): Port device team_slave_0 removed [ 713.833177][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.914806][T11020] FAULT_INJECTION: forcing a failure. [ 713.914806][T11020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.914844][T11020] CPU: 1 UID: 0 PID: 11020 Comm: syz.3.1210 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 713.914874][T11020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 713.914886][T11020] Call Trace: [ 713.914894][T11020] [ 713.914903][T11020] dump_stack_lvl+0x189/0x250 [ 713.914937][T11020] ? __pfx____ratelimit+0x10/0x10 [ 713.914978][T11020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 713.915007][T11020] ? __pfx__printk+0x10/0x10 [ 713.915029][T11020] ? __might_fault+0xb0/0x130 [ 713.915071][T11020] should_fail_ex+0x46c/0x600 [ 713.915107][T11020] _copy_from_user+0x2d/0xb0 [ 713.915134][T11020] __sys_connect+0x124/0x450 [ 713.915168][T11020] ? __pfx___sys_connect+0x10/0x10 [ 713.915211][T11020] ? __pfx_ksys_write+0x10/0x10 [ 713.915233][T11020] ? rcu_is_watching+0x15/0xb0 [ 713.915271][T11020] __x64_sys_connect+0x7a/0x90 [ 713.915299][T11020] do_syscall_64+0xfa/0x3b0 [ 713.915316][T11020] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.915346][T11020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.915366][T11020] ? clear_bhb_loop+0x60/0xb0 [ 713.915392][T11020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.915412][T11020] RIP: 0033:0x7fb35653eba9 [ 713.915431][T11020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.915451][T11020] RSP: 002b:00007fb3547a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 713.915475][T11020] RAX: ffffffffffffffda RBX: 00007fb356785fa0 RCX: 00007fb35653eba9 [ 713.915491][T11020] RDX: 0000000000000080 RSI: 00002000000018c0 RDI: 0000000000000004 [ 713.915505][T11020] RBP: 00007fb3547a6090 R08: 0000000000000000 R09: 0000000000000000 [ 713.915518][T11020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.915531][T11020] R13: 00007fb356786038 R14: 00007fb356785fa0 R15: 00007ffc4e58c658 [ 713.915566][T11020] [ 714.178017][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.281535][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 714.300439][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 714.323910][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 714.330940][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 714.358357][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 714.568071][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.756088][ C0] vkms_vblank_simulate: vblank timer overrun [ 716.804222][ T5833] Bluetooth: hci5: command tx timeout [ 717.096574][ C1] vkms_vblank_simulate: vblank timer overrun [ 717.301681][ C1] vkms_vblank_simulate: vblank timer overrun [ 717.462665][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.249507][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.444372][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.737946][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.870565][T11049] veth0: entered promiscuous mode [ 719.149888][T11054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.203150][ T5833] Bluetooth: hci5: command tx timeout [ 720.066002][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.089114][T11051] veth0: left promiscuous mode [ 720.471802][T10885] chnl_net:caif_netlink_parms(): no params data found [ 720.541156][ C1] vkms_vblank_simulate: vblank timer overrun [ 721.117499][T11070] new mount options do not match the existing superblock, will be ignored [ 721.118697][T11070] option changes via remount are deprecated (pid=11063 comm=syz.4.1222) [ 721.273734][ T5833] Bluetooth: hci5: command tx timeout [ 721.514767][ C1] vkms_vblank_simulate: vblank timer overrun [ 721.558378][ C1] vkms_vblank_simulate: vblank timer overrun [ 721.641151][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.183487][T10885] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.183920][T10885] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.184159][T10885] bridge_slave_0: entered allmulticast mode [ 722.189714][T10885] bridge_slave_0: entered promiscuous mode [ 722.196869][T10885] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.197111][T10885] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.197304][T10885] bridge_slave_1: entered allmulticast mode [ 722.204472][T10885] bridge_slave_1: entered promiscuous mode [ 722.224764][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 723.101242][T11086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.659786][ T5833] Bluetooth: hci5: command tx timeout [ 724.502544][T11096] siw: device registration error -23 [ 725.097500][T10885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.138343][T10885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.598610][T11103] FAULT_INJECTION: forcing a failure. [ 725.598610][T11103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.598650][T11103] CPU: 0 UID: 0 PID: 11103 Comm: syz.3.1229 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 725.598674][T11103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 725.598687][T11103] Call Trace: [ 725.598695][T11103] [ 725.598705][T11103] dump_stack_lvl+0x189/0x250 [ 725.598741][T11103] ? __pfx____ratelimit+0x10/0x10 [ 725.598773][T11103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 725.598803][T11103] ? __pfx__printk+0x10/0x10 [ 725.598827][T11103] ? __might_fault+0xb0/0x130 [ 725.598881][T11103] should_fail_ex+0x46c/0x600 [ 725.598918][T11103] _copy_from_user+0x2d/0xb0 [ 725.598946][T11103] __sys_bpf+0x1ed/0x870 [ 725.598976][T11103] ? __pfx___sys_bpf+0x10/0x10 [ 725.599017][T11103] ? ksys_write+0x230/0x260 [ 725.599046][T11103] ? __pfx_ksys_write+0x10/0x10 [ 725.599068][T11103] ? rcu_is_watching+0x15/0xb0 [ 725.599106][T11103] __x64_sys_bpf+0x7c/0x90 [ 725.599131][T11103] do_syscall_64+0xfa/0x3b0 [ 725.599148][T11103] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.599176][T11103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.599197][T11103] ? clear_bhb_loop+0x60/0xb0 [ 725.599223][T11103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.599242][T11103] RIP: 0033:0x7fb35653eba9 [ 725.599262][T11103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.599280][T11103] RSP: 002b:00007fb3547a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 725.599303][T11103] RAX: ffffffffffffffda RBX: 00007fb356785fa0 RCX: 00007fb35653eba9 [ 725.599319][T11103] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 725.599333][T11103] RBP: 00007fb3547a6090 R08: 0000000000000000 R09: 0000000000000000 [ 725.599346][T11103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.599358][T11103] R13: 00007fb356786038 R14: 00007fb356785fa0 R15: 00007ffc4e58c658 [ 725.599393][T11103] [ 726.154022][T11106] siw: device registration error -23 [ 727.165467][T10885] team0: Port device team_slave_0 added [ 727.186601][T10885] team0: Port device team_slave_1 added [ 727.736762][T11021] chnl_net:caif_netlink_parms(): no params data found [ 728.854299][T10885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.854310][T10885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.854323][T10885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.945014][T10885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.945034][T10885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.945064][T10885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.026398][T11130] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1236'. [ 729.081277][T11131] new mount options do not match the existing superblock, will be ignored [ 729.082417][T11131] option changes via remount are deprecated (pid=11126 comm=syz.4.1235) [ 730.074792][T11141] siw: device registration error -23 [ 731.175759][T11144] veth0: entered promiscuous mode [ 731.247524][T10885] hsr_slave_0: entered promiscuous mode [ 731.260015][T10885] hsr_slave_1: entered promiscuous mode [ 731.262886][T11142] veth0: left promiscuous mode [ 731.667017][T11021] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.667189][T11021] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.667422][T11021] bridge_slave_0: entered allmulticast mode [ 731.672844][T11021] bridge_slave_0: entered promiscuous mode [ 733.054539][T11021] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.054714][T11021] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.054988][T11021] bridge_slave_1: entered allmulticast mode [ 733.063885][T11021] bridge_slave_1: entered promiscuous mode [ 733.067088][T11149] syzkaller1: entered promiscuous mode [ 733.067117][T11149] syzkaller1: entered allmulticast mode [ 734.688411][T11171] FAULT_INJECTION: forcing a failure. [ 734.688411][T11171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.688449][T11171] CPU: 1 UID: 0 PID: 11171 Comm: syz.0.1242 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 734.688474][T11171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 734.688487][T11171] Call Trace: [ 734.688495][T11171] [ 734.688505][T11171] dump_stack_lvl+0x189/0x250 [ 734.688541][T11171] ? __pfx____ratelimit+0x10/0x10 [ 734.688574][T11171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.688604][T11171] ? __pfx__printk+0x10/0x10 [ 734.688645][T11171] should_fail_ex+0x46c/0x600 [ 734.688681][T11171] _copy_to_user+0x31/0xb0 [ 734.688719][T11171] simple_read_from_buffer+0xe1/0x170 [ 734.688753][T11171] proc_fail_nth_read+0x1b6/0x220 [ 734.688779][T11171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.688805][T11171] ? rw_verify_area+0x2ac/0x4e0 [ 734.688829][T11171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.688853][T11171] vfs_read+0x203/0xa30 [ 734.688888][T11171] ? __pfx_vfs_read+0x10/0x10 [ 734.688917][T11171] ? tipc_setsockopt+0x2d0/0x970 [ 734.688944][T11171] ? kmem_cache_free+0x195/0x510 [ 734.688976][T11171] ? __pfx_tipc_setsockopt+0x10/0x10 [ 734.689012][T11171] ksys_read+0x14b/0x260 [ 734.689041][T11171] ? __pfx_ksys_read+0x10/0x10 [ 734.689073][T11171] ? do_syscall_64+0xbe/0x3b0 [ 734.689096][T11171] do_syscall_64+0xfa/0x3b0 [ 734.689114][T11171] ? lockdep_hardirqs_on+0x9c/0x150 [ 734.689143][T11171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.689164][T11171] ? clear_bhb_loop+0x60/0xb0 [ 734.689190][T11171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.689210][T11171] RIP: 0033:0x7f26a3a6d5bc [ 734.689229][T11171] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 734.689247][T11171] RSP: 002b:00007f26a1cce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 734.689269][T11171] RAX: ffffffffffffffda RBX: 00007f26a3cb5fa0 RCX: 00007f26a3a6d5bc [ 734.689284][T11171] RDX: 000000000000000f RSI: 00007f26a1cce0a0 RDI: 0000000000000004 [ 734.689297][T11171] RBP: 00007f26a1cce090 R08: 0000000000000000 R09: 0000000000000000 [ 734.689310][T11171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.689322][T11171] R13: 00007f26a3cb6038 R14: 00007f26a3cb5fa0 R15: 00007ffd9003c158 [ 734.689357][T11171] [ 736.937071][T11187] netlink: 'syz.0.1245': attribute type 1 has an invalid length. [ 736.937192][T11187] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1245'. [ 737.287005][T11021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.290561][T11021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.432438][T11192] siw: device registration error -23 [ 738.698713][T11194] new mount options do not match the existing superblock, will be ignored [ 738.699866][T11194] option changes via remount are deprecated (pid=11193 comm=syz.3.1248) [ 739.279119][T11021] team0: Port device team_slave_0 added [ 739.333115][T11021] team0: Port device team_slave_1 added [ 739.338190][T11204] FAULT_INJECTION: forcing a failure. [ 739.338190][T11204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.338224][T11204] CPU: 1 UID: 0 PID: 11204 Comm: syz.3.1250 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 739.338245][T11204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 739.338255][T11204] Call Trace: [ 739.338262][T11204] [ 739.338270][T11204] dump_stack_lvl+0x189/0x250 [ 739.338300][T11204] ? __pfx____ratelimit+0x10/0x10 [ 739.338327][T11204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.338353][T11204] ? __pfx__printk+0x10/0x10 [ 739.338373][T11204] ? __might_fault+0xb0/0x130 [ 739.338409][T11204] should_fail_ex+0x46c/0x600 [ 739.338441][T11204] _copy_from_user+0x2d/0xb0 [ 739.338464][T11204] __sys_bpf+0x1ed/0x870 [ 739.338489][T11204] ? __pfx___sys_bpf+0x10/0x10 [ 739.338525][T11204] ? ksys_write+0x230/0x260 [ 739.338549][T11204] ? __pfx_ksys_write+0x10/0x10 [ 739.338569][T11204] ? rcu_is_watching+0x15/0xb0 [ 739.338602][T11204] __x64_sys_bpf+0x7c/0x90 [ 739.338623][T11204] do_syscall_64+0xfa/0x3b0 [ 739.338639][T11204] ? lockdep_hardirqs_on+0x9c/0x150 [ 739.338663][T11204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.338681][T11204] ? clear_bhb_loop+0x60/0xb0 [ 739.338703][T11204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.338719][T11204] RIP: 0033:0x7fb35653eba9 [ 739.338735][T11204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.338751][T11204] RSP: 002b:00007fb3547a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 739.338772][T11204] RAX: ffffffffffffffda RBX: 00007fb356785fa0 RCX: 00007fb35653eba9 [ 739.338785][T11204] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 739.338798][T11204] RBP: 00007fb3547a6090 R08: 0000000000000000 R09: 0000000000000000 [ 739.338809][T11204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.338820][T11204] R13: 00007fb356786038 R14: 00007fb356785fa0 R15: 00007ffc4e58c658 [ 739.338851][T11204] [ 742.701887][T11224] siw: device registration error -23 [ 743.666764][T11021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.666784][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.666815][T11021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.774219][T11021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.774239][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.774269][T11021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.295289][T11225] new mount options do not match the existing superblock, will be ignored [ 744.296406][T11225] option changes via remount are deprecated (pid=11223 comm=syz.0.1257) [ 744.353845][T11021] hsr_slave_0: entered promiscuous mode [ 744.356424][T11021] hsr_slave_1: entered promiscuous mode [ 744.357463][T11021] debugfs: 'hsr0' already exists in 'hsr' [ 744.357490][T11021] Cannot create hsr debugfs directory [ 745.050929][T10885] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 745.172723][T11234] FAULT_INJECTION: forcing a failure. [ 745.172723][T11234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.172760][T11234] CPU: 1 UID: 0 PID: 11234 Comm: syz.0.1260 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 745.172784][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 745.172796][T11234] Call Trace: [ 745.172804][T11234] [ 745.172814][T11234] dump_stack_lvl+0x189/0x250 [ 745.172849][T11234] ? __pfx____ratelimit+0x10/0x10 [ 745.172878][T11234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 745.172906][T11234] ? __pfx__printk+0x10/0x10 [ 745.172944][T11234] should_fail_ex+0x46c/0x600 [ 745.172981][T11234] _copy_from_user+0x2d/0xb0 [ 745.173008][T11234] copy_from_sockptr+0x5e/0xa0 [ 745.173036][T11234] packet_setsockopt+0x333/0x12c0 [ 745.173062][T11234] ? __pfx_packet_setsockopt+0x10/0x10 [ 745.173083][T11234] ? vfs_write+0x965/0xb40 [ 745.173118][T11234] ? __pfx_vfs_write+0x10/0x10 [ 745.173148][T11234] ? do_sys_openat2+0x154/0x1c0 [ 745.173167][T11234] ? kmem_cache_free+0x195/0x510 [ 745.173214][T11234] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 745.173235][T11234] ? __pfx_packet_setsockopt+0x10/0x10 [ 745.173259][T11234] do_sock_setsockopt+0x179/0x1b0 [ 745.173298][T11234] __x64_sys_setsockopt+0x145/0x1b0 [ 745.173335][T11234] do_syscall_64+0xfa/0x3b0 [ 745.173353][T11234] ? lockdep_hardirqs_on+0x9c/0x150 [ 745.173381][T11234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.173402][T11234] ? clear_bhb_loop+0x60/0xb0 [ 745.173427][T11234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.173446][T11234] RIP: 0033:0x7f26a3a6eba9 [ 745.173465][T11234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.173484][T11234] RSP: 002b:00007f26a1cce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 745.173507][T11234] RAX: ffffffffffffffda RBX: 00007f26a3cb5fa0 RCX: 00007f26a3a6eba9 [ 745.173523][T11234] RDX: 0000000000000007 RSI: 0000000000000107 RDI: 0000000000000003 [ 745.173535][T11234] RBP: 00007f26a1cce090 R08: 0000000000000004 R09: 0000000000000000 [ 745.173549][T11234] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 745.173562][T11234] R13: 00007f26a3cb6038 R14: 00007f26a3cb5fa0 R15: 00007ffd9003c158 [ 745.173600][T11234] [ 745.422739][T10885] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 745.555388][T10885] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 745.643907][T10885] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 747.538449][T11021] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 747.558005][ T8356] psmouse serio2: Failed to reset mouse on : -5 [ 747.598972][T11021] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 747.674159][T11021] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 747.737908][T11021] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 748.030631][T10885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.207977][T10885] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.270573][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.270838][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.317916][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.318748][ T6036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.449383][T11021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.581433][T11021] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.642631][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.643904][ T6808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.711414][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.711599][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.286572][T10885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.794160][T11021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.308985][T10885] veth0_vlan: entered promiscuous mode [ 750.359147][T10885] veth1_vlan: entered promiscuous mode [ 750.500761][T10885] veth0_macvtap: entered promiscuous mode [ 750.547122][T10885] veth1_macvtap: entered promiscuous mode [ 750.636888][T10885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.680538][T10885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.766608][ T6036] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.766949][ T6036] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.777175][ T6036] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.778312][ T6036] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.323977][ T8356] misc userio: Buffer overflowed, userio client isn't keeping up [ 752.905835][T11021] veth0_vlan: entered promiscuous mode [ 752.957621][T11021] veth1_vlan: entered promiscuous mode [ 753.180109][T11021] veth0_macvtap: entered promiscuous mode [ 753.218242][T11021] veth1_macvtap: entered promiscuous mode [ 753.279829][T11021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.364852][T11021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.403851][ T6096] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.406642][ T6808] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.406712][ T6808] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.406770][ T6808] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.467427][ T8356] input: PS/2 Generic Mouse as /devices/serio2/input/input17 [ 754.096739][ T8356] psmouse serio2: Failed to enable mouse on [ 755.369429][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 755.468037][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 755.484988][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 755.519558][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 755.521688][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 756.165244][T11298] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 756.580092][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 756.592165][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 756.618934][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 756.623444][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 756.638708][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 757.060034][ T5840] syz_tun (unregistering): left allmulticast mode [ 757.518168][ T5840] team0: Port device macvlan3 removed [ 757.673847][ T5838] Bluetooth: hci6: command tx timeout [ 757.714648][T11314] FAULT_INJECTION: forcing a failure. [ 757.714648][T11314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.714693][T11314] CPU: 0 UID: 0 PID: 11314 Comm: syz.0.1272 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 757.714716][T11314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 757.714728][T11314] Call Trace: [ 757.714736][T11314] [ 757.714745][T11314] dump_stack_lvl+0x189/0x250 [ 757.714780][T11314] ? __pfx____ratelimit+0x10/0x10 [ 757.714811][T11314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 757.714839][T11314] ? __pfx__printk+0x10/0x10 [ 757.714861][T11314] ? __might_fault+0xb0/0x130 [ 757.714902][T11314] should_fail_ex+0x46c/0x600 [ 757.714937][T11314] _copy_from_user+0x2d/0xb0 [ 757.714963][T11314] do_ipv6_setsockopt+0x23e/0x2eb0 [ 757.715002][T11314] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 757.715028][T11314] ? __lock_acquire+0xab9/0xd20 [ 757.715065][T11314] ? do_raw_spin_lock+0x121/0x290 [ 757.715100][T11314] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 757.715130][T11314] ? lockdep_hardirqs_on+0x9c/0x150 [ 757.715166][T11314] ? __lock_acquire+0xab9/0xd20 [ 757.715214][T11314] ? __fget_files+0x2a/0x420 [ 757.715248][T11314] ipv6_setsockopt+0x59/0x170 [ 757.715273][T11314] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 757.715303][T11314] do_sock_setsockopt+0x179/0x1b0 [ 757.715339][T11314] __x64_sys_setsockopt+0x145/0x1b0 [ 757.715377][T11314] do_syscall_64+0xfa/0x3b0 [ 757.715393][T11314] ? lockdep_hardirqs_on+0x9c/0x150 [ 757.715421][T11314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.715441][T11314] ? clear_bhb_loop+0x60/0xb0 [ 757.715465][T11314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.715484][T11314] RIP: 0033:0x7f26a3a6eba9 [ 757.715501][T11314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.715518][T11314] RSP: 002b:00007f26a1cad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 757.715540][T11314] RAX: ffffffffffffffda RBX: 00007f26a3cb6090 RCX: 00007f26a3a6eba9 [ 757.715555][T11314] RDX: 0000000000000002 RSI: 0000000000000029 RDI: 0000000000000003 [ 757.715567][T11314] RBP: 00007f26a1cad090 R08: 0000000000000004 R09: 0000000000000000 [ 757.715579][T11314] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.715592][T11314] R13: 00007f26a3cb6128 R14: 00007f26a3cb6090 R15: 00007ffd9003c158 [ 757.715624][T11314] [ 758.210124][ T3202] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.251591][ T4449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.251613][ T4449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.713797][ T5838] Bluetooth: hci4: command tx timeout [ 758.983344][ T3202] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.525159][ T5838] Bluetooth: hci6: command tx timeout [ 760.667316][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.667341][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.793707][ T5838] Bluetooth: hci4: command tx timeout [ 760.961242][ C1] vkms_vblank_simulate: vblank timer overrun [ 763.376175][ T5838] Bluetooth: hci6: command tx timeout [ 763.376218][ T5838] Bluetooth: hci4: command tx timeout [ 763.509673][ C1] vkms_vblank_simulate: vblank timer overrun [ 763.604295][ C1] vkms_vblank_simulate: vblank timer overrun [ 763.719660][ T3202] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.844142][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.474412][ T3202] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.749885][T11344] FAULT_INJECTION: forcing a failure. [ 764.749885][T11344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.749923][T11344] CPU: 1 UID: 0 PID: 11344 Comm: syz.0.1281 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 764.749946][T11344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 764.749960][T11344] Call Trace: [ 764.749969][T11344] [ 764.749978][T11344] dump_stack_lvl+0x189/0x250 [ 764.750013][T11344] ? __pfx____ratelimit+0x10/0x10 [ 764.750044][T11344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.750074][T11344] ? __pfx__printk+0x10/0x10 [ 764.750098][T11344] ? __might_fault+0xb0/0x130 [ 764.750142][T11344] should_fail_ex+0x46c/0x600 [ 764.750178][T11344] _copy_from_user+0x2d/0xb0 [ 764.750206][T11344] __sys_bpf+0x1ed/0x870 [ 764.750235][T11344] ? __pfx___sys_bpf+0x10/0x10 [ 764.750277][T11344] ? ksys_write+0x230/0x260 [ 764.750306][T11344] ? __pfx_ksys_write+0x10/0x10 [ 764.750329][T11344] ? rcu_is_watching+0x15/0xb0 [ 764.750369][T11344] __x64_sys_bpf+0x7c/0x90 [ 764.750394][T11344] do_syscall_64+0xfa/0x3b0 [ 764.750415][T11344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.750435][T11344] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 764.750465][T11344] ? clear_bhb_loop+0x60/0xb0 [ 764.750491][T11344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.750511][T11344] RIP: 0033:0x7f26a3a6eba9 [ 764.750530][T11344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.750549][T11344] RSP: 002b:00007f26a1cce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 764.750572][T11344] RAX: ffffffffffffffda RBX: 00007f26a3cb5fa0 RCX: 00007f26a3a6eba9 [ 764.750588][T11344] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 764.750602][T11344] RBP: 00007f26a1cce090 R08: 0000000000000000 R09: 0000000000000000 [ 764.750615][T11344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.750627][T11344] R13: 00007f26a3cb6038 R14: 00007f26a3cb5fa0 R15: 00007ffd9003c158 [ 764.750662][T11344] [ 765.434435][ T5833] Bluetooth: hci4: command tx timeout [ 765.434473][ T5833] Bluetooth: hci6: command tx timeout [ 765.651833][T11354] TCP: TCP_TX_DELAY enabled [ 765.747051][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'. [ 768.317904][ C0] vkms_vblank_simulate: vblank timer overrun [ 768.364306][T11294] chnl_net:caif_netlink_parms(): no params data found [ 768.995803][ T3202] bridge_slave_1: left allmulticast mode [ 768.995841][ T3202] bridge_slave_1: left promiscuous mode [ 768.996142][ T3202] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.019216][T11375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.446584][ C0] vkms_vblank_simulate: vblank timer overrun [ 769.451022][ T3202] bridge_slave_0: left allmulticast mode [ 769.451060][ T3202] bridge_slave_0: left promiscuous mode [ 769.451391][ T3202] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.530810][ C0] vkms_vblank_simulate: vblank timer overrun [ 772.342332][ C0] vkms_vblank_simulate: vblank timer overrun [ 773.023330][T11402] netlink: 'syz.0.1295': attribute type 1 has an invalid length. [ 773.023359][T11402] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1295'. [ 774.323882][ T31] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 774.455593][ T31] usb 1-1: device descriptor read/64, error -71 [ 774.747193][ T31] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 774.883973][ T31] usb 1-1: device descriptor read/64, error -71 [ 775.027042][ T31] usb usb1-port1: attempt power cycle [ 775.423730][ T31] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 775.447721][ T31] usb 1-1: device descriptor read/8, error -71 [ 775.733745][ T31] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 775.953731][ T31] usb 1-1: device not accepting address 31, error -71 [ 775.954246][ T31] usb usb1-port1: unable to enumerate USB device [ 778.239344][ T3202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.327393][ T3202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.381338][ T3202] bond0 (unregistering): Released all slaves [ 778.537022][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1304'. [ 778.673213][T11304] chnl_net:caif_netlink_parms(): no params data found [ 778.988988][T11449] FAULT_INJECTION: forcing a failure. [ 778.988988][T11449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.989025][T11449] CPU: 0 UID: 0 PID: 11449 Comm: syz.6.1307 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 778.989048][T11449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 778.989057][T11449] Call Trace: [ 778.989063][T11449] [ 778.989070][T11449] dump_stack_lvl+0x189/0x250 [ 778.989098][T11449] ? __pfx____ratelimit+0x10/0x10 [ 778.989121][T11449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.989143][T11449] ? __pfx__printk+0x10/0x10 [ 778.989173][T11449] should_fail_ex+0x46c/0x600 [ 778.989200][T11449] _copy_to_user+0x31/0xb0 [ 778.989222][T11449] simple_read_from_buffer+0xe1/0x170 [ 778.989247][T11449] proc_fail_nth_read+0x1b6/0x220 [ 778.989267][T11449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 778.989285][T11449] ? rw_verify_area+0x2ac/0x4e0 [ 778.989304][T11449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 778.989320][T11449] vfs_read+0x203/0xa30 [ 778.989347][T11449] ? __pfx_vfs_read+0x10/0x10 [ 778.989362][T11449] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 778.989388][T11449] ? mutex_lock_nested+0x154/0x1d0 [ 778.989405][T11449] ? fdget_pos+0x253/0x320 [ 778.989441][T11449] ksys_read+0x14b/0x260 [ 778.989458][T11449] ? __fget_files+0x3a6/0x420 [ 778.989480][T11449] ? __pfx_ksys_read+0x10/0x10 [ 778.989503][T11449] ? do_syscall_64+0xbe/0x3b0 [ 778.989522][T11449] do_syscall_64+0xfa/0x3b0 [ 778.989535][T11449] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.989556][T11449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.989570][T11449] ? clear_bhb_loop+0x60/0xb0 [ 778.989590][T11449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.989604][T11449] RIP: 0033:0x7f011242d5bc [ 778.989619][T11449] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 778.989632][T11449] RSP: 002b:00007f0110675030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 778.989650][T11449] RAX: ffffffffffffffda RBX: 00007f0112676090 RCX: 00007f011242d5bc [ 778.989661][T11449] RDX: 000000000000000f RSI: 00007f01106750a0 RDI: 0000000000000005 [ 778.989671][T11449] RBP: 00007f0110675090 R08: 0000000000000000 R09: 0000000000000000 [ 778.989680][T11449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.989689][T11449] R13: 00007f0112676128 R14: 00007f0112676090 R15: 00007ffd5441c5d8 [ 778.989715][T11449] [ 779.929695][T11454] netlink: 'syz.6.1309': attribute type 1 has an invalid length. [ 779.929818][T11454] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1309'. [ 780.503762][ T3202] hsr_slave_0: left promiscuous mode [ 780.523732][ T9246] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 780.580065][ T3202] hsr_slave_1: left promiscuous mode [ 780.582693][ T3202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.582726][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.635314][ T3202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.635351][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.653697][ T9246] usb 7-1: device descriptor read/64, error -71 [ 780.867445][ T3202] veth1_macvtap: left promiscuous mode [ 780.867587][ T3202] veth0_macvtap: left promiscuous mode [ 780.867933][ T3202] veth1_vlan: left promiscuous mode [ 780.868157][ T3202] veth0_vlan: left promiscuous mode [ 780.893892][ T9246] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 781.023921][ T9246] usb 7-1: device descriptor read/64, error -71 [ 781.137191][ T9246] usb usb7-port1: attempt power cycle [ 781.303379][T11464] FAULT_INJECTION: forcing a failure. [ 781.303379][T11464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.303425][T11464] CPU: 0 UID: 0 PID: 11464 Comm: syz.0.1313 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 781.303450][T11464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 781.303463][T11464] Call Trace: [ 781.303471][T11464] [ 781.303488][T11464] dump_stack_lvl+0x189/0x250 [ 781.303522][T11464] ? __pfx____ratelimit+0x10/0x10 [ 781.303556][T11464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 781.303583][T11464] ? __pfx__printk+0x10/0x10 [ 781.303604][T11464] ? __might_fault+0xb0/0x130 [ 781.303655][T11464] should_fail_ex+0x46c/0x600 [ 781.303698][T11464] _copy_from_user+0x2d/0xb0 [ 781.303733][T11464] ___sys_recvmsg+0x12e/0x510 [ 781.303762][T11464] ? __pfx____sys_recvmsg+0x10/0x10 [ 781.303821][T11464] ? __fget_files+0x3a6/0x420 [ 781.303863][T11464] do_recvmmsg+0x30d/0x770 [ 781.303895][T11464] ? __pfx_do_recvmmsg+0x10/0x10 [ 781.303924][T11464] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 781.303963][T11464] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 781.304007][T11464] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 781.304051][T11464] __x64_sys_recvmmsg+0x190/0x240 [ 781.304077][T11464] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 781.304097][T11464] ? rcu_is_watching+0x15/0xb0 [ 781.304133][T11464] ? do_syscall_64+0xbe/0x3b0 [ 781.304157][T11464] do_syscall_64+0xfa/0x3b0 [ 781.304182][T11464] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.304211][T11464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.304238][T11464] ? clear_bhb_loop+0x60/0xb0 [ 781.304262][T11464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.304282][T11464] RIP: 0033:0x7f26a3a6eba9 [ 781.304299][T11464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.304317][T11464] RSP: 002b:00007f26a1cce038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 781.304339][T11464] RAX: ffffffffffffffda RBX: 00007f26a3cb5fa0 RCX: 00007f26a3a6eba9 [ 781.304353][T11464] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000003 [ 781.304367][T11464] RBP: 00007f26a1cce090 R08: 0000000000000000 R09: 0000000000000000 [ 781.304380][T11464] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 781.304399][T11464] R13: 00007f26a3cb6038 R14: 00007f26a3cb5fa0 R15: 00007ffd9003c158 [ 781.304431][T11464] [ 781.613739][ T9246] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 781.634695][ T9246] usb 7-1: device descriptor read/8, error -71 [ 781.873894][ T9246] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 781.908451][ T9246] usb 7-1: device descriptor read/8, error -71 [ 782.029039][ T9246] usb usb7-port1: unable to enumerate USB device [ 782.567691][T11471] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1315'. [ 788.735418][T11507] netlink: 'syz.6.1325': attribute type 1 has an invalid length. [ 788.735445][T11507] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1325'. [ 788.735462][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1325'. [ 789.410890][T11509] netlink: 'syz.6.1326': attribute type 1 has an invalid length. [ 789.410904][T11509] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1326'. [ 789.448127][ T3202] team0 (unregistering): Port device team_slave_1 removed [ 789.967869][ T992] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 790.193892][ T992] usb 7-1: device descriptor read/64, error -71 [ 790.212597][ T3202] team0 (unregistering): Port device team_slave_0 removed [ 790.483921][ T992] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 791.411411][ T992] usb 7-1: device descriptor read/64, error -71 [ 791.514770][ T992] usb usb7-port1: attempt power cycle [ 791.873994][ T992] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 791.894640][ T992] usb 7-1: device descriptor read/8, error -71 [ 793.161706][T11542] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1334'. [ 793.913879][ T31] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 794.063713][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 794.070480][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.070512][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.070550][ T31] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 794.070572][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.136654][ T31] usb 7-1: config 0 descriptor?? [ 794.835151][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 794.835302][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 794.842289][ T31] usb 7-1: USB disconnect, device number 10 [ 795.505980][T11294] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.506230][T11294] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.506492][T11294] bridge_slave_0: entered allmulticast mode [ 795.511687][T11294] bridge_slave_0: entered promiscuous mode [ 796.050560][T11555] qrtr: Invalid version 2 [ 796.342860][T11294] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.343034][T11294] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.343344][T11294] bridge_slave_1: entered allmulticast mode [ 796.347543][T11294] bridge_slave_1: entered promiscuous mode [ 797.006128][T11564] netlink: 'syz.4.1340': attribute type 1 has an invalid length. [ 797.006150][T11564] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1340'. [ 797.216140][T11294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.677483][T11294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.697437][T11304] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.697705][T11304] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.698043][T11304] bridge_slave_0: entered allmulticast mode [ 797.715889][T11304] bridge_slave_0: entered promiscuous mode [ 797.895649][T11304] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.895840][T11304] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.896110][T11304] bridge_slave_1: entered allmulticast mode [ 797.899379][T11304] bridge_slave_1: entered promiscuous mode [ 798.449872][T11294] team0: Port device team_slave_0 added [ 800.016756][T11294] team0: Port device team_slave_1 added [ 800.221788][T11304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.313004][T11582] FAULT_INJECTION: forcing a failure. [ 800.313004][T11582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.313042][T11582] CPU: 0 UID: 0 PID: 11582 Comm: syz.6.1344 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 800.313066][T11582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 800.313078][T11582] Call Trace: [ 800.313086][T11582] [ 800.313095][T11582] dump_stack_lvl+0x189/0x250 [ 800.313132][T11582] ? __pfx____ratelimit+0x10/0x10 [ 800.313172][T11582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 800.313202][T11582] ? __pfx__printk+0x10/0x10 [ 800.313226][T11582] ? __might_fault+0xb0/0x130 [ 800.313269][T11582] should_fail_ex+0x46c/0x600 [ 800.313306][T11582] _copy_from_user+0x2d/0xb0 [ 800.313333][T11582] ucma_write+0x161/0x2f0 [ 800.313367][T11582] ? __pfx_ucma_write+0x10/0x10 [ 800.313400][T11582] ? rw_verify_area+0x25b/0x4e0 [ 800.313424][T11582] ? __lock_acquire+0xab9/0xd20 [ 800.313449][T11582] ? __pfx_ucma_write+0x10/0x10 [ 800.313481][T11582] vfs_write+0x287/0xb40 [ 800.313517][T11582] ? __pfx_vfs_write+0x10/0x10 [ 800.313549][T11582] ? __fget_files+0x2a/0x420 [ 800.313577][T11582] ? __fget_files+0x2a/0x420 [ 800.313601][T11582] ? __fget_files+0x3a6/0x420 [ 800.313626][T11582] ? __fget_files+0x2a/0x420 [ 800.313665][T11582] ksys_write+0x14b/0x260 [ 800.313693][T11582] ? __pfx_ksys_write+0x10/0x10 [ 800.313716][T11582] ? rcu_is_watching+0x15/0xb0 [ 800.313753][T11582] ? do_syscall_64+0xbe/0x3b0 [ 800.313778][T11582] do_syscall_64+0xfa/0x3b0 [ 800.313796][T11582] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.313825][T11582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.313846][T11582] ? clear_bhb_loop+0x60/0xb0 [ 800.313872][T11582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.313892][T11582] RIP: 0033:0x7f011242eba9 [ 800.313909][T11582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.313929][T11582] RSP: 002b:00007f0110696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 800.313953][T11582] RAX: ffffffffffffffda RBX: 00007f0112675fa0 RCX: 00007f011242eba9 [ 800.313969][T11582] RDX: 0000000000000030 RSI: 00002000000003c0 RDI: 0000000000000003 [ 800.313983][T11582] RBP: 00007f0110696090 R08: 0000000000000000 R09: 0000000000000000 [ 800.313996][T11582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.314009][T11582] R13: 00007f0112676038 R14: 00007f0112675fa0 R15: 00007ffd5441c5d8 [ 800.314044][T11582] [ 801.947875][T11304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.626417][T11294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.626436][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.626465][T11294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.874731][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.974198][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.002429][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.058913][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.144186][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.247302][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.277313][T11608] netlink: 'syz.4.1353': attribute type 1 has an invalid length. [ 803.277330][T11608] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1353'. [ 803.364341][T11294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.364361][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.364390][T11294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.380939][T11304] team0: Port device team_slave_0 added [ 803.472707][T11304] team0: Port device team_slave_1 added [ 804.068413][ C0] vkms_vblank_simulate: vblank timer overrun [ 804.311677][T11627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.229517][ C0] vkms_vblank_simulate: vblank timer overrun [ 805.385269][ C0] vkms_vblank_simulate: vblank timer overrun [ 805.935886][T11294] hsr_slave_0: entered promiscuous mode [ 805.945089][T11294] hsr_slave_1: entered promiscuous mode [ 805.950281][T11304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.950297][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.950321][T11304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.976158][T11304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.976176][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.976201][T11304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.006392][T11640] FAULT_INJECTION: forcing a failure. [ 806.006392][T11640] name failslab, interval 1, probability 0, space 0, times 0 [ 806.006427][T11640] CPU: 0 UID: 0 PID: 11640 Comm: syz.4.1360 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 806.006448][T11640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 806.006459][T11640] Call Trace: [ 806.006466][T11640] [ 806.006474][T11640] dump_stack_lvl+0x189/0x250 [ 806.006504][T11640] ? __pfx____ratelimit+0x10/0x10 [ 806.006530][T11640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 806.006556][T11640] ? __pfx__printk+0x10/0x10 [ 806.006582][T11640] ? __pfx___might_resched+0x10/0x10 [ 806.006602][T11640] ? fs_reclaim_acquire+0x7d/0x100 [ 806.006625][T11640] should_fail_ex+0x46c/0x600 [ 806.006655][T11640] ? vm_area_dup+0x2b/0x670 [ 806.006672][T11640] should_failslab+0xa8/0x100 [ 806.006696][T11640] ? vm_area_dup+0x2b/0x670 [ 806.006712][T11640] kmem_cache_alloc_noprof+0x6e/0x310 [ 806.006742][T11640] vm_area_dup+0x2b/0x670 [ 806.006765][T11640] __split_vma+0x1ad/0x9e0 [ 806.006789][T11640] ? mas_next_slot+0xc23/0xd00 [ 806.006819][T11640] ? __pfx___split_vma+0x10/0x10 [ 806.006852][T11640] ? mas_find+0xb0e/0xd30 [ 806.006883][T11640] vms_gather_munmap_vmas+0x4ce/0x12f0 [ 806.006903][T11640] ? __lock_acquire+0xab9/0xd20 [ 806.006945][T11640] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 806.006977][T11640] ? mas_find+0xa7d/0xd30 [ 806.007007][T11640] mmap_region+0x729/0x20a0 [ 806.007046][T11640] ? __lock_acquire+0xab9/0xd20 [ 806.007068][T11640] ? __pfx_mmap_region+0x10/0x10 [ 806.007108][T11640] ? is_bpf_text_address+0x26/0x2b0 [ 806.007197][T11640] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 806.007229][T11640] ? do_raw_spin_lock+0x121/0x290 [ 806.007253][T11640] ? cap_mmap_addr+0xb0/0x100 [ 806.007276][T11640] ? bpf_lsm_mmap_addr+0x9/0x20 [ 806.007294][T11640] ? security_mmap_addr+0x71/0x270 [ 806.007318][T11640] ? shmem_mapping+0xd/0x50 [ 806.007339][T11640] ? memfd_check_seals_mmap+0xcb/0x210 [ 806.007361][T11640] do_mmap+0xc23/0x10c0 [ 806.007395][T11640] ? __pfx_do_mmap+0x10/0x10 [ 806.007415][T11640] ? rwbase_write_lock+0x56f/0x750 [ 806.007449][T11640] vm_mmap_pgoff+0x2a9/0x4d0 [ 806.007481][T11640] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 806.007512][T11640] ? __fget_files+0x2a/0x420 [ 806.007535][T11640] ? __fget_files+0x3a6/0x420 [ 806.007558][T11640] ? __fget_files+0x2a/0x420 [ 806.007586][T11640] ksys_mmap_pgoff+0x4e9/0x720 [ 806.007611][T11640] ? __x64_sys_mmap+0x7f/0x140 [ 806.007638][T11640] do_syscall_64+0xfa/0x3b0 [ 806.007654][T11640] ? lockdep_hardirqs_on+0x9c/0x150 [ 806.007678][T11640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.007695][T11640] ? clear_bhb_loop+0x60/0xb0 [ 806.007718][T11640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.007734][T11640] RIP: 0033:0x7ff8641aeba9 [ 806.007751][T11640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 806.007766][T11640] RSP: 002b:00007ff86240e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 806.007786][T11640] RAX: ffffffffffffffda RBX: 00007ff8643f5fa0 RCX: 00007ff8641aeba9 [ 806.007800][T11640] RDX: 0000000002000001 RSI: 0000000000003000 RDI: 0000200000000000 [ 806.007813][T11640] RBP: 00007ff86240e090 R08: 0000000000000003 R09: 0000000000000000 [ 806.007824][T11640] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 806.007835][T11640] R13: 00007ff8643f6038 R14: 00007ff8643f5fa0 R15: 00007ffc57c83758 [ 806.007866][T11640] [ 807.616473][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.760381][ T3202] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.855883][T11670] FAULT_INJECTION: forcing a failure. [ 807.855883][T11670] name failslab, interval 1, probability 0, space 0, times 0 [ 807.855921][T11670] CPU: 0 UID: 0 PID: 11670 Comm: syz.6.1367 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 807.855945][T11670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 807.855957][T11670] Call Trace: [ 807.855965][T11670] [ 807.855974][T11670] dump_stack_lvl+0x189/0x250 [ 807.856009][T11670] ? __pfx____ratelimit+0x10/0x10 [ 807.856041][T11670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.856079][T11670] ? __pfx__printk+0x10/0x10 [ 807.856109][T11670] ? __pfx___might_resched+0x10/0x10 [ 807.856133][T11670] ? fs_reclaim_acquire+0x7d/0x100 [ 807.856158][T11670] should_fail_ex+0x46c/0x600 [ 807.856196][T11670] should_failslab+0xa8/0x100 [ 807.856226][T11670] __kmalloc_noprof+0xcb/0x430 [ 807.856252][T11670] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 807.856290][T11670] tomoyo_realpath_from_path+0xe3/0x5d0 [ 807.856322][T11670] ? tomoyo_domain+0xda/0x130 [ 807.856358][T11670] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 807.856383][T11670] tomoyo_path_number_perm+0x1e8/0x5a0 [ 807.856412][T11670] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 807.856443][T11670] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 807.856474][T11670] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.856514][T11670] ? __lock_acquire+0xab9/0xd20 [ 807.856568][T11670] ? __fget_files+0x2a/0x420 [ 807.856600][T11670] ? __fget_files+0x2a/0x420 [ 807.856627][T11670] ? __fget_files+0x3a6/0x420 [ 807.856653][T11670] ? __fget_files+0x2a/0x420 [ 807.856687][T11670] security_file_ioctl+0xcb/0x2d0 [ 807.856717][T11670] __se_sys_ioctl+0x47/0x170 [ 807.856745][T11670] do_syscall_64+0xfa/0x3b0 [ 807.856762][T11670] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.856792][T11670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.856812][T11670] ? clear_bhb_loop+0x60/0xb0 [ 807.856838][T11670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.856858][T11670] RIP: 0033:0x7f011242eba9 [ 807.856877][T11670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.856895][T11670] RSP: 002b:00007f0110696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 807.856918][T11670] RAX: ffffffffffffffda RBX: 00007f0112675fa0 RCX: 00007f011242eba9 [ 807.856933][T11670] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 807.856946][T11670] RBP: 00007f0110696090 R08: 0000000000000000 R09: 0000000000000000 [ 807.856959][T11670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.856972][T11670] R13: 00007f0112676038 R14: 00007f0112675fa0 R15: 00007ffd5441c5d8 [ 807.857009][T11670] [ 807.857017][T11670] ERROR: Out of memory at tomoyo_realpath_from_path. [ 808.610983][ T3202] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.714573][T11304] hsr_slave_0: entered promiscuous mode [ 808.716284][T11304] hsr_slave_1: entered promiscuous mode [ 808.727807][T11304] debugfs: 'hsr0' already exists in 'hsr' [ 808.727835][T11304] Cannot create hsr debugfs directory [ 809.009324][ T3202] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.123780][ T9246] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 809.253785][ T9246] usb 1-1: device descriptor read/64, error -71 [ 809.361746][ C0] vkms_vblank_simulate: vblank timer overrun [ 809.407708][ T3202] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.494115][ T9246] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 809.570134][T11682] ALSA: mixer_oss: invalid OSS volume '' [ 809.633722][ T9246] usb 1-1: device descriptor read/64, error -71 [ 809.744373][ T9246] usb usb1-port1: attempt power cycle [ 810.093902][ T9246] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 810.114906][ T9246] usb 1-1: device descriptor read/8, error -71 [ 810.211305][ C0] vkms_vblank_simulate: vblank timer overrun [ 810.573594][ C0] vkms_vblank_simulate: vblank timer overrun [ 810.756908][ C0] vkms_vblank_simulate: vblank timer overrun [ 810.931691][T11693] FAULT_INJECTION: forcing a failure. [ 810.931691][T11693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.931730][T11693] CPU: 0 UID: 0 PID: 11693 Comm: syz.4.1375 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 810.931754][T11693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 810.931766][T11693] Call Trace: [ 810.931782][T11693] [ 810.931791][T11693] dump_stack_lvl+0x189/0x250 [ 810.931827][T11693] ? __pfx____ratelimit+0x10/0x10 [ 810.931858][T11693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 810.931889][T11693] ? __pfx__printk+0x10/0x10 [ 810.931912][T11693] ? __might_fault+0xb0/0x130 [ 810.931956][T11693] should_fail_ex+0x46c/0x600 [ 810.931993][T11693] _copy_from_user+0x2d/0xb0 [ 810.932020][T11693] ___sys_sendmsg+0x158/0x2a0 [ 810.932045][T11693] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.932111][T11693] ? __fget_files+0x2a/0x420 [ 810.932138][T11693] ? __fget_files+0x3a6/0x420 [ 810.932180][T11693] __x64_sys_sendmsg+0x1a1/0x260 [ 810.932205][T11693] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 810.932239][T11693] ? __pfx_ksys_write+0x10/0x10 [ 810.932262][T11693] ? rcu_is_watching+0x15/0xb0 [ 810.932299][T11693] ? do_syscall_64+0xbe/0x3b0 [ 810.932323][T11693] do_syscall_64+0xfa/0x3b0 [ 810.932341][T11693] ? lockdep_hardirqs_on+0x9c/0x150 [ 810.932371][T11693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.932392][T11693] ? clear_bhb_loop+0x60/0xb0 [ 810.932417][T11693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.932437][T11693] RIP: 0033:0x7ff8641aeba9 [ 810.932456][T11693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.932473][T11693] RSP: 002b:00007ff86240e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.932497][T11693] RAX: ffffffffffffffda RBX: 00007ff8643f5fa0 RCX: 00007ff8641aeba9 [ 810.932513][T11693] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 810.932526][T11693] RBP: 00007ff86240e090 R08: 0000000000000000 R09: 0000000000000000 [ 810.932539][T11693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.932551][T11693] R13: 00007ff8643f6038 R14: 00007ff8643f5fa0 R15: 00007ffc57c83758 [ 810.932587][T11693] [ 811.187679][ T9246] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 811.212764][ T9246] usb 1-1: device descriptor read/8, error -71 [ 811.314455][ T9246] usb usb1-port1: unable to enumerate USB device [ 812.545586][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.889090][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.569265][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.505774][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.822669][T11728] (syz.0.1379,11728,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 814.822775][T11728] (syz.0.1379,11728,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 815.889084][ T3202] bridge_slave_1: left allmulticast mode [ 815.889122][ T3202] bridge_slave_1: left promiscuous mode [ 815.889433][ T3202] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.188612][ T3202] bridge_slave_0: left allmulticast mode [ 816.188652][ T3202] bridge_slave_0: left promiscuous mode [ 816.188999][ T3202] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.301839][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 816.331553][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 816.333287][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 816.367809][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 816.370246][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 817.121259][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 817.142744][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 817.156600][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 817.192111][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 817.196980][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 817.528232][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.809662][ C0] vkms_vblank_simulate: vblank timer overrun [ 818.360680][ C0] vkms_vblank_simulate: vblank timer overrun [ 818.393971][ T5833] Bluetooth: hci3: command tx timeout [ 818.858665][ C0] vkms_vblank_simulate: vblank timer overrun [ 818.931298][ C0] vkms_vblank_simulate: vblank timer overrun [ 818.974594][ C0] vkms_vblank_simulate: vblank timer overrun [ 819.260843][ C0] vkms_vblank_simulate: vblank timer overrun [ 819.273773][ T5833] Bluetooth: hci7: command tx timeout [ 819.310741][ C0] vkms_vblank_simulate: vblank timer overrun [ 819.425551][ C0] vkms_vblank_simulate: vblank timer overrun [ 819.492964][ C0] vkms_vblank_simulate: vblank timer overrun [ 819.569728][ T3202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.634739][ T3202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.694478][ T3202] bond0 (unregistering): Released all slaves [ 819.747653][ T3202] bond1 (unregistering): Released all slaves [ 819.780563][ T3202] bond2 (unregistering): Released all slaves [ 819.817521][ T3202] bond3 (unregistering): Released all slaves [ 819.878246][T11760] FAULT_INJECTION: forcing a failure. [ 819.878246][T11760] name failslab, interval 1, probability 0, space 0, times 0 [ 819.878283][T11760] CPU: 1 UID: 0 PID: 11760 Comm: syz.6.1386 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 819.878307][T11760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 819.878320][T11760] Call Trace: [ 819.878329][T11760] [ 819.878338][T11760] dump_stack_lvl+0x189/0x250 [ 819.878372][T11760] ? __pfx____ratelimit+0x10/0x10 [ 819.878400][T11760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 819.878428][T11760] ? __pfx__printk+0x10/0x10 [ 819.878457][T11760] ? __pfx___might_resched+0x10/0x10 [ 819.878480][T11760] ? fs_reclaim_acquire+0x7d/0x100 [ 819.878506][T11760] should_fail_ex+0x46c/0x600 [ 819.878564][T11760] should_failslab+0xa8/0x100 [ 819.878595][T11760] __kmalloc_noprof+0xcb/0x430 [ 819.878621][T11760] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 819.878657][T11760] tomoyo_realpath_from_path+0xe3/0x5d0 [ 819.878688][T11760] ? tomoyo_domain+0xda/0x130 [ 819.878724][T11760] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 819.878749][T11760] tomoyo_path_number_perm+0x1e8/0x5a0 [ 819.878778][T11760] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 819.878808][T11760] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 819.878839][T11760] ? lockdep_hardirqs_on+0x9c/0x150 [ 819.878878][T11760] ? __lock_acquire+0xab9/0xd20 [ 819.878938][T11760] ? __fget_files+0x2a/0x420 [ 819.878969][T11760] ? __fget_files+0x2a/0x420 [ 819.878994][T11760] ? __fget_files+0x3a6/0x420 [ 819.879018][T11760] ? __fget_files+0x2a/0x420 [ 819.879052][T11760] security_file_ioctl+0xcb/0x2d0 [ 819.879080][T11760] __se_sys_ioctl+0x47/0x170 [ 819.879106][T11760] do_syscall_64+0xfa/0x3b0 [ 819.879122][T11760] ? lockdep_hardirqs_on+0x9c/0x150 [ 819.879146][T11760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.879165][T11760] ? clear_bhb_loop+0x60/0xb0 [ 819.879190][T11760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.879208][T11760] RIP: 0033:0x7f011242eba9 [ 819.879225][T11760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.879240][T11760] RSP: 002b:00007f0110696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 819.879263][T11760] RAX: ffffffffffffffda RBX: 00007f0112675fa0 RCX: 00007f011242eba9 [ 819.879278][T11760] RDX: 0000200000000f00 RSI: 0000000000008946 RDI: 0000000000000003 [ 819.879291][T11760] RBP: 00007f0110696090 R08: 0000000000000000 R09: 0000000000000000 [ 819.879304][T11760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.879316][T11760] R13: 00007f0112676038 R14: 00007f0112675fa0 R15: 00007ffd5441c5d8 [ 819.879352][T11760] [ 819.879360][T11760] ERROR: Out of memory at tomoyo_realpath_from_path. [ 820.262863][ C0] vkms_vblank_simulate: vblank timer overrun [ 820.474354][ T5833] Bluetooth: hci3: command tx timeout [ 820.594227][ C0] vkms_vblank_simulate: vblank timer overrun [ 820.650785][ C0] vkms_vblank_simulate: vblank timer overrun [ 820.694506][T11766] FAULT_INJECTION: forcing a failure. [ 820.694506][T11766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.694543][T11766] CPU: 0 UID: 0 PID: 11766 Comm: syz.4.1389 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 820.694566][T11766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 820.694579][T11766] Call Trace: [ 820.694587][T11766] [ 820.694596][T11766] dump_stack_lvl+0x189/0x250 [ 820.694632][T11766] ? __pfx____ratelimit+0x10/0x10 [ 820.694663][T11766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 820.694692][T11766] ? __pfx__printk+0x10/0x10 [ 820.694716][T11766] ? __might_fault+0xb0/0x130 [ 820.694760][T11766] should_fail_ex+0x46c/0x600 [ 820.694795][T11766] _copy_from_user+0x2d/0xb0 [ 820.694823][T11766] __sys_bpf+0x1ed/0x870 [ 820.694851][T11766] ? __pfx___sys_bpf+0x10/0x10 [ 820.694893][T11766] ? ksys_write+0x230/0x260 [ 820.694936][T11766] ? __pfx_ksys_write+0x10/0x10 [ 820.694958][T11766] ? rcu_is_watching+0x15/0xb0 [ 820.694998][T11766] __x64_sys_bpf+0x7c/0x90 [ 820.695021][T11766] do_syscall_64+0xfa/0x3b0 [ 820.695039][T11766] ? lockdep_hardirqs_on+0x9c/0x150 [ 820.695068][T11766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.695089][T11766] ? clear_bhb_loop+0x60/0xb0 [ 820.695115][T11766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.695136][T11766] RIP: 0033:0x7ff8641aeba9 [ 820.695155][T11766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.695172][T11766] RSP: 002b:00007ff86240e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 820.695196][T11766] RAX: ffffffffffffffda RBX: 00007ff8643f5fa0 RCX: 00007ff8641aeba9 [ 820.695212][T11766] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 820.695225][T11766] RBP: 00007ff86240e090 R08: 0000000000000000 R09: 0000000000000000 [ 820.695239][T11766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.695251][T11766] R13: 00007ff8643f6038 R14: 00007ff8643f5fa0 R15: 00007ffc57c83758 [ 820.695286][T11766] [ 821.569045][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.569794][ T5833] Bluetooth: hci7: command tx timeout [ 822.337003][T11789] FAULT_INJECTION: forcing a failure. [ 822.337003][T11789] name failslab, interval 1, probability 0, space 0, times 0 [ 822.337041][T11789] CPU: 1 UID: 0 PID: 11789 Comm: syz.0.1394 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 822.337064][T11789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 822.337076][T11789] Call Trace: [ 822.337085][T11789] [ 822.337094][T11789] dump_stack_lvl+0x189/0x250 [ 822.337130][T11789] ? __pfx____ratelimit+0x10/0x10 [ 822.337160][T11789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.337190][T11789] ? __pfx__printk+0x10/0x10 [ 822.337220][T11789] ? __pfx___might_resched+0x10/0x10 [ 822.337242][T11789] ? fs_reclaim_acquire+0x7d/0x100 [ 822.337267][T11789] should_fail_ex+0x46c/0x600 [ 822.337304][T11789] should_failslab+0xa8/0x100 [ 822.337334][T11789] __kvmalloc_node_noprof+0x15a/0x550 [ 822.337362][T11789] ? traverse+0xd9/0x570 [ 822.337391][T11789] traverse+0xd9/0x570 [ 822.337421][T11789] ? seq_read_iter+0xb8/0xe10 [ 822.337447][T11789] seq_read_iter+0xcff/0xe10 [ 822.337469][T11789] ? _parse_integer_limit+0x1ae/0x1f0 [ 822.337511][T11789] ? __asan_memset+0x22/0x50 [ 822.337539][T11789] seq_read+0x36c/0x480 [ 822.337574][T11789] ? __pfx_seq_read+0x10/0x10 [ 822.337620][T11789] ? __pfx_seq_read+0x10/0x10 [ 822.337638][T11789] proc_reg_read+0x1f6/0x2f0 [ 822.337661][T11789] ? __pfx_proc_reg_read+0x10/0x10 [ 822.337688][T11789] vfs_read+0x203/0xa30 [ 822.337725][T11789] ? __pfx_vfs_read+0x10/0x10 [ 822.337752][T11789] ? __fget_files+0x2a/0x420 [ 822.337784][T11789] ? __fget_files+0x2a/0x420 [ 822.337809][T11789] ? __fget_files+0x3a6/0x420 [ 822.337836][T11789] ? __fget_files+0x2a/0x420 [ 822.337876][T11789] __x64_sys_pread64+0x196/0x220 [ 822.337916][T11789] ? __pfx___x64_sys_pread64+0x10/0x10 [ 822.337938][T11789] ? rcu_is_watching+0x15/0xb0 [ 822.337976][T11789] ? do_syscall_64+0xbe/0x3b0 [ 822.338001][T11789] do_syscall_64+0xfa/0x3b0 [ 822.338019][T11789] ? lockdep_hardirqs_on+0x9c/0x150 [ 822.338049][T11789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.338071][T11789] ? clear_bhb_loop+0x60/0xb0 [ 822.338097][T11789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.338116][T11789] RIP: 0033:0x7f26a3a6eba9 [ 822.338135][T11789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.338153][T11789] RSP: 002b:00007f26a1c8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 822.338176][T11789] RAX: ffffffffffffffda RBX: 00007f26a3cb6180 RCX: 00007f26a3a6eba9 [ 822.338192][T11789] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000004 [ 822.338206][T11789] RBP: 00007f26a1c8c090 R08: 0000000000000000 R09: 0000000000000000 [ 822.338218][T11789] R10: 000000000000005e R11: 0000000000000246 R12: 0000000000000001 [ 822.338231][T11789] R13: 00007f26a3cb6218 R14: 00007f26a3cb6180 R15: 00007ffd9003c158 [ 822.338266][T11789] [ 822.449816][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.553794][ T5833] Bluetooth: hci3: command tx timeout [ 822.684018][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.711468][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.000074][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.593963][ T5833] Bluetooth: hci7: command tx timeout [ 823.700775][T11795] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1397'. [ 823.700941][T11795] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1397'. [ 823.786845][ C0] vkms_vblank_simulate: vblank timer overrun [ 824.569285][ C0] vkms_vblank_simulate: vblank timer overrun [ 824.880689][ C0] vkms_vblank_simulate: vblank timer overrun [ 824.885013][ T5833] Bluetooth: hci3: command tx timeout [ 825.534423][ C0] vkms_vblank_simulate: vblank timer overrun [ 825.806503][ C0] vkms_vblank_simulate: vblank timer overrun [ 825.807220][ T5833] Bluetooth: hci7: command tx timeout [ 826.202184][T11805] FAULT_INJECTION: forcing a failure. [ 826.202184][T11805] name failslab, interval 1, probability 0, space 0, times 0 [ 826.202220][T11805] CPU: 0 UID: 0 PID: 11805 Comm: syz.6.1399 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 826.202239][T11805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 826.202249][T11805] Call Trace: [ 826.202256][T11805] [ 826.202263][T11805] dump_stack_lvl+0x189/0x250 [ 826.202294][T11805] ? __pfx____ratelimit+0x10/0x10 [ 826.202319][T11805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 826.202344][T11805] ? __pfx__printk+0x10/0x10 [ 826.202368][T11805] ? __pfx___might_resched+0x10/0x10 [ 826.202390][T11805] ? fs_reclaim_acquire+0x7d/0x100 [ 826.202413][T11805] should_fail_ex+0x46c/0x600 [ 826.202448][T11805] should_failslab+0xa8/0x100 [ 826.202476][T11805] __kmalloc_noprof+0xcb/0x430 [ 826.202500][T11805] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 826.202535][T11805] tomoyo_realpath_from_path+0xe3/0x5d0 [ 826.202569][T11805] ? tomoyo_domain+0xda/0x130 [ 826.202606][T11805] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 826.202629][T11805] tomoyo_path_number_perm+0x1e8/0x5a0 [ 826.202658][T11805] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 826.202688][T11805] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 826.202719][T11805] ? lockdep_hardirqs_on+0x9c/0x150 [ 826.202758][T11805] ? __lock_acquire+0xab9/0xd20 [ 826.202809][T11805] ? __fget_files+0x2a/0x420 [ 826.202839][T11805] ? __fget_files+0x2a/0x420 [ 826.202865][T11805] ? __fget_files+0x3a6/0x420 [ 826.202900][T11805] ? __fget_files+0x2a/0x420 [ 826.202933][T11805] security_file_ioctl+0xcb/0x2d0 [ 826.202962][T11805] __se_sys_ioctl+0x47/0x170 [ 826.202989][T11805] do_syscall_64+0xfa/0x3b0 [ 826.203010][T11805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.203030][T11805] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 826.203049][T11805] ? clear_bhb_loop+0x60/0xb0 [ 826.203074][T11805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.203094][T11805] RIP: 0033:0x7f011242eba9 [ 826.203112][T11805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.203129][T11805] RSP: 002b:00007f0110675038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 826.203151][T11805] RAX: ffffffffffffffda RBX: 00007f0112676090 RCX: 00007f011242eba9 [ 826.203166][T11805] RDX: 0000200000000040 RSI: 000000004068aea3 RDI: 0000000000000006 [ 826.203179][T11805] RBP: 00007f0110675090 R08: 0000000000000000 R09: 0000000000000000 [ 826.203192][T11805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.203204][T11805] R13: 00007f0112676128 R14: 00007f0112676090 R15: 00007ffd5441c5d8 [ 826.203240][T11805] [ 826.220405][T11805] ERROR: Out of memory at tomoyo_realpath_from_path. [ 830.566238][ T989] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 830.789312][ T989] usb 1-1: device descriptor read/64, error -71 [ 831.154352][ T989] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 831.284053][ T989] usb 1-1: device descriptor read/64, error -71 [ 831.402204][ T989] usb usb1-port1: attempt power cycle [ 831.837427][ T989] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 831.856643][ T989] usb 1-1: device descriptor read/8, error -71 [ 832.110031][ T989] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 832.127704][ T989] usb 1-1: device descriptor read/8, error -71 [ 832.236246][ T989] usb usb1-port1: unable to enumerate USB device [ 832.769853][T11822] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1403'. [ 832.813787][ T9246] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 832.966398][ T9246] usb 7-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 832.966433][ T9246] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.009557][ T9246] ums-freecom 7-1:127.0: USB Mass Storage device detected [ 833.044453][ T3202] hsr_slave_0: left promiscuous mode [ 833.089391][ T3202] hsr_slave_1: left promiscuous mode [ 833.090522][ T3202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.090562][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.171361][ T3202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.171398][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.257714][ T9246] usb 7-1: USB disconnect, device number 11 [ 833.496664][ T3202] veth1_macvtap: left promiscuous mode [ 833.496803][ T3202] veth0_macvtap: left promiscuous mode [ 833.499933][ T3202] veth1_vlan: left promiscuous mode [ 833.500186][ T3202] veth0_vlan: left promiscuous mode [ 835.107817][T11852] new mount options do not match the existing superblock, will be ignored [ 835.109571][T11852] option changes via remount are deprecated (pid=11850 comm=syz.6.1408) [ 835.271750][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.589024][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.739085][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.939989][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.251791][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.428108][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.443777][ T989] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 836.640821][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.640937][ T989] usb 7-1: Using ep0 maxpacket: 8 [ 836.659330][ T989] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 836.659362][ T989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.659383][ T989] usb 7-1: Product: syz [ 836.659398][ T989] usb 7-1: Manufacturer: syz [ 836.659413][ T989] usb 7-1: SerialNumber: syz [ 836.700135][ T989] usb 7-1: config 0 descriptor?? [ 836.760088][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.802247][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.922307][ T989] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 837.754392][ T989] gspca_sunplus: reg_w_riv err -71 [ 837.754504][ T989] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 837.794198][ T989] usb 7-1: USB disconnect, device number 12 [ 838.068800][ C0] vkms_vblank_simulate: vblank timer overrun [ 838.144495][ T3202] team0 (unregistering): Port device team_slave_1 removed [ 838.176543][ C0] vkms_vblank_simulate: vblank timer overrun [ 838.524130][ T3202] team0 (unregistering): Port device team_slave_0 removed [ 839.020247][ C0] vkms_vblank_simulate: vblank timer overrun [ 839.189944][ C0] vkms_vblank_simulate: vblank timer overrun [ 839.459229][ C0] vkms_vblank_simulate: vblank timer overrun [ 839.809875][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.890593][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.041052][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 841.085702][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.695394][T11869] FAULT_INJECTION: forcing a failure. [ 841.695394][T11869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.695434][T11869] CPU: 0 UID: 0 PID: 11869 Comm: syz.4.1416 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 841.695458][T11869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 841.695471][T11869] Call Trace: [ 841.695480][T11869] [ 841.695491][T11869] dump_stack_lvl+0x189/0x250 [ 841.695527][T11869] ? __pfx____ratelimit+0x10/0x10 [ 841.695560][T11869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 841.695591][T11869] ? __pfx__printk+0x10/0x10 [ 841.695632][T11869] should_fail_ex+0x46c/0x600 [ 841.695670][T11869] _copy_to_user+0x31/0xb0 [ 841.695709][T11869] simple_read_from_buffer+0xe1/0x170 [ 841.695744][T11869] proc_fail_nth_read+0x1b6/0x220 [ 841.695771][T11869] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 841.695797][T11869] ? rw_verify_area+0x2ac/0x4e0 [ 841.695822][T11869] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 841.695846][T11869] vfs_read+0x203/0xa30 [ 841.695882][T11869] ? __pfx_vfs_read+0x10/0x10 [ 841.695903][T11869] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 841.695940][T11869] ? mutex_lock_nested+0x154/0x1d0 [ 841.695962][T11869] ? fdget_pos+0x253/0x320 [ 841.696003][T11869] ksys_read+0x14b/0x260 [ 841.696032][T11869] ? __pfx_ksys_read+0x10/0x10 [ 841.696056][T11869] ? rcu_is_watching+0x15/0xb0 [ 841.696086][T11869] ? trace_sys_enter+0x25/0x100 [ 841.696121][T11869] do_syscall_64+0xfa/0x3b0 [ 841.696139][T11869] ? lockdep_hardirqs_on+0x9c/0x150 [ 841.696168][T11869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.696187][T11869] ? clear_bhb_loop+0x60/0xb0 [ 841.696212][T11869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.696232][T11869] RIP: 0033:0x7ff8641ad5bc [ 841.696251][T11869] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 841.696269][T11869] RSP: 002b:00007ff86240e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 841.696293][T11869] RAX: ffffffffffffffda RBX: 00007ff8643f5fa0 RCX: 00007ff8641ad5bc [ 841.696309][T11869] RDX: 000000000000000f RSI: 00007ff86240e0a0 RDI: 0000000000000006 [ 841.696323][T11869] RBP: 00007ff86240e090 R08: 0000000000000000 R09: 0000000000000000 [ 841.696336][T11869] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 841.696349][T11869] R13: 00007ff8643f6038 R14: 00007ff8643f5fa0 R15: 00007ffc57c83758 [ 841.696386][T11869] [ 842.907392][T11893] FAULT_INJECTION: forcing a failure. [ 842.907392][T11893] name failslab, interval 1, probability 0, space 0, times 0 [ 842.907415][T11893] CPU: 1 UID: 0 PID: 11893 Comm: syz.0.1422 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 842.907427][T11893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 842.907441][T11893] Call Trace: [ 842.907446][T11893] [ 842.907451][T11893] dump_stack_lvl+0x189/0x250 [ 842.907471][T11893] ? __pfx____ratelimit+0x10/0x10 [ 842.907485][T11893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 842.907498][T11893] ? __pfx__printk+0x10/0x10 [ 842.907512][T11893] ? __pfx___might_resched+0x10/0x10 [ 842.907523][T11893] ? fs_reclaim_acquire+0x7d/0x100 [ 842.907535][T11893] should_fail_ex+0x46c/0x600 [ 842.907552][T11893] should_failslab+0xa8/0x100 [ 842.907566][T11893] __kmalloc_noprof+0xcb/0x430 [ 842.907589][T11893] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 842.907618][T11893] tomoyo_realpath_from_path+0xe3/0x5d0 [ 842.907640][T11893] ? tomoyo_domain+0xda/0x130 [ 842.907667][T11893] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 842.907691][T11893] tomoyo_path_number_perm+0x1e8/0x5a0 [ 842.907716][T11893] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 842.907746][T11893] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 842.907769][T11893] ? lockdep_hardirqs_on+0x9c/0x150 [ 842.907791][T11893] ? __lock_acquire+0xab9/0xd20 [ 842.907821][T11893] ? __fget_files+0x2a/0x420 [ 842.907839][T11893] ? __fget_files+0x2a/0x420 [ 842.907855][T11893] ? __fget_files+0x3a6/0x420 [ 842.907870][T11893] ? __fget_files+0x2a/0x420 [ 842.907889][T11893] security_file_ioctl+0xcb/0x2d0 [ 842.907907][T11893] __se_sys_ioctl+0x47/0x170 [ 842.907922][T11893] do_syscall_64+0xfa/0x3b0 [ 842.907933][T11893] ? lockdep_hardirqs_on+0x9c/0x150 [ 842.907955][T11893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.907967][T11893] ? clear_bhb_loop+0x60/0xb0 [ 842.907981][T11893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.907992][T11893] RIP: 0033:0x7f26a3a6eba9 [ 842.908004][T11893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.908015][T11893] RSP: 002b:00007f26a1cce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 842.908029][T11893] RAX: ffffffffffffffda RBX: 00007f26a3cb5fa0 RCX: 00007f26a3a6eba9 [ 842.908038][T11893] RDX: 0000200000000040 RSI: 000000000000541a RDI: 0000000000000003 [ 842.908046][T11893] RBP: 00007f26a1cce090 R08: 0000000000000000 R09: 0000000000000000 [ 842.908054][T11893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.908061][T11893] R13: 00007f26a3cb6038 R14: 00007f26a3cb5fa0 R15: 00007ffd9003c158 [ 842.908084][T11893] [ 842.908091][T11893] ERROR: Out of memory at tomoyo_realpath_from_path. [ 843.380781][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.508906][T11902] Device name cannot be null; rc = [-22] [ 843.510424][T11902] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1424'. [ 843.642209][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.935438][ C0] vkms_vblank_simulate: vblank timer overrun [ 844.865090][ C0] vkms_vblank_simulate: vblank timer overrun [ 844.914295][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.031868][T11902] bridge_slave_0 (unregistering): left allmulticast mode [ 845.031890][T11902] bridge_slave_0 (unregistering): left promiscuous mode [ 845.031960][T11902] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.086306][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.154180][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.281019][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.500337][T11749] chnl_net:caif_netlink_parms(): no params data found [ 845.529876][T11743] chnl_net:caif_netlink_parms(): no params data found [ 845.893457][T11918] netlink: 'syz.4.1426': attribute type 39 has an invalid length. [ 845.911559][T11919] netlink: 'syz.4.1426': attribute type 39 has an invalid length. [ 846.184498][T11918] veth0_macvtap: left promiscuous mode [ 846.230955][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.728966][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.774492][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.864655][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.365763][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.770343][T11743] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.786681][T11743] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.786970][T11743] bridge_slave_0: entered allmulticast mode [ 848.800843][T11743] bridge_slave_0: entered promiscuous mode [ 848.828046][T11749] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.828205][T11749] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.828461][T11749] bridge_slave_0: entered allmulticast mode [ 848.855678][T11749] bridge_slave_0: entered promiscuous mode [ 848.858207][T11743] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.858376][T11743] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.858612][T11743] bridge_slave_1: entered allmulticast mode [ 848.861834][T11743] bridge_slave_1: entered promiscuous mode [ 848.903030][ T3202] bridge_slave_1: left allmulticast mode [ 848.903066][ T3202] bridge_slave_1: left promiscuous mode [ 848.903360][ T3202] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.039865][ T3202] bridge_slave_0: left allmulticast mode [ 849.039905][ T3202] bridge_slave_0: left promiscuous mode [ 849.040204][ T3202] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.102760][ T3202] bridge_slave_1: left allmulticast mode [ 849.102797][ T3202] bridge_slave_1: left promiscuous mode [ 849.103096][ T3202] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.192845][ T3202] bridge_slave_0: left allmulticast mode [ 849.192883][ T3202] bridge_slave_0: left promiscuous mode [ 849.193181][ T3202] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.233781][ T9246] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 849.365415][ T9246] usb 1-1: device descriptor read/64, error -71 [ 849.511687][T11967] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1438'. [ 849.613779][ T9246] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 849.753800][ T9246] usb 1-1: device descriptor read/64, error -71 [ 849.774700][ T3202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.869303][ T9246] usb usb1-port1: attempt power cycle [ 849.882639][ T3202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.947085][ T3202] bond0 (unregistering): Released all slaves [ 850.203877][ T9246] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 850.225984][ T9246] usb 1-1: device descriptor read/8, error -71 [ 850.264827][ T3202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.344593][ T3202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.428644][ T3202] bond0 (unregistering): Released all slaves [ 850.463783][ T9246] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 850.484908][ T9246] usb 1-1: device descriptor read/8, error -71 [ 850.488769][T11749] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.488928][T11749] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.489248][T11749] bridge_slave_1: entered allmulticast mode [ 850.492174][T11749] bridge_slave_1: entered promiscuous mode [ 850.607907][ T9246] usb usb1-port1: unable to enumerate USB device [ 850.868124][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.017777][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1439'. [ 851.358426][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.418597][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.688837][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.871210][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.963075][T11743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.981061][T11749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.019466][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.158055][T11743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.176075][T11749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.536891][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.959502][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.638200][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.680505][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.987073][ C0] vkms_vblank_simulate: vblank timer overrun [ 855.257214][ T3202] hsr_slave_0: left promiscuous mode [ 855.310689][ T3202] hsr_slave_1: left promiscuous mode [ 855.314873][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.376436][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.445749][T12015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.446519][T12015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.575911][ T3202] hsr_slave_0: left promiscuous mode [ 855.589091][ T3202] hsr_slave_1: left promiscuous mode [ 855.590035][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.634727][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.674115][ T9246] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 855.803812][ T9246] usb 7-1: device descriptor read/64, error -71 [ 856.043777][ T9246] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 856.173781][ T9246] usb 7-1: device descriptor read/64, error -71 [ 856.285195][ T9246] usb usb7-port1: attempt power cycle [ 856.314711][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.567124][ T3202] team0 (unregistering): Port device team_slave_1 removed [ 856.605065][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.623827][ T9246] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 856.658291][ T9246] usb 7-1: device descriptor read/8, error -71 [ 856.717738][ T3202] team0 (unregistering): Port device team_slave_0 removed [ 856.894989][ T9246] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 856.914637][ T9246] usb 7-1: device descriptor read/8, error -71 [ 857.024266][ T9246] usb usb7-port1: unable to enumerate USB device [ 858.114613][ T3202] team0 (unregistering): Port device team_slave_1 removed [ 858.292995][ T3202] team0 (unregistering): Port device team_slave_0 removed [ 858.893793][ T992] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 859.033762][ T992] usb 7-1: device descriptor read/64, error -71 [ 859.283785][ T992] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 859.423755][ T992] usb 7-1: device descripto[ 859.423755][ T992] usb 7-1: device descriptor read/64, error -71 [ 859.434523][ T38] INFO: task syz-executor:5835 blocked for more than 143 seconds. [ 859.434549][ T38] Not tainted syzkaller #0 [ 859.434560][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 859.434570][ T38] task:syz-executor state:D stack:21192 pid:5835 tgid:5835 ppid:1 task_flags:0x400140 flags:0x00004004 [ 859.434631][ T38] Call Trace: [ 859.434641][ T38] [ 859.434656][ T38] __schedule+0x16f3/0x4c20 [ 859.434703][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 859.434747][ T38] ? __lock_acquire+0xab9/0xd20 [ 859.434774][ T38] ? __pfx___schedule+0x10/0x10 [ 859.434823][ T38] ? schedule+0x91/0x360 [ 859.434858][ T38] schedule+0x165/0x360 [ 859.434887][ T38] v9fs_evict_inode+0x170/0x320 [ 859.434923][ T38] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 859.434947][ T38] ? reacquire_held_locks+0x127/0x1d0 [ 859.434977][ T38] ? __pfx_var_wake_function+0x10/0x10 [ 859.435014][ T38] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 859.435038][ T38] evict+0x504/0x9c0 [ 859.435071][ T38] ? __pfx_evict+0x10/0x10 [ 859.435097][ T38] ? iput+0x6d8/0x9d0 [ 859.435132][ T38] __dentry_kill+0x209/0x660 [ 859.435159][ T38] ? dput+0x37/0x2b0 [ 859.435185][ T38] dput+0x19f/0x2b0 [ 859.435218][ T38] shrink_dcache_for_umount+0xa0/0x170 [ 859.435242][ T38] generic_shutdown_super+0x67/0x2c0 [ 859.435267][ T38] kill_anon_super+0x3b/0x70 [ 859.435289][ T38] v9fs_kill_super+0x4c/0x90 [ 859.435317][ T38] deactivate_locked_super+0xbc/0x130 [ 859.435340][ T38] cleanup_mnt+0x425/0x4c0 [ 859.435361][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 859.435390][ T38] task_work_run+0x1d4/0x260 [ 859.435415][ T38] ? __pfx_task_work_run+0x10/0x10 [ 859.435432][ T38] ? __x64_sys_umount+0x122/0x160 [ 859.435460][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 859.435489][ T38] exit_to_user_mode_loop+0xec/0x110 [ 859.435514][ T38] do_syscall_64+0x2bd/0x3b0 [ 859.435532][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 859.435556][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.435575][ T38] ? clear_bhb_loop+0x60/0xb0 [ 859.435599][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.435618][ T38] RIP: 0033:0x7f14b0c4fed7 [ 859.435635][ T38] RSP: 002b:00007ffcdff47678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 859.435655][ T38] RAX: 0000000000000000 RBX: 00007f14b0cd1c05 RCX: 00007f14b0c4fed7 [ 859.435669][ T38] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdff47730 [ 859.435682][ T38] RBP: 00007ffcdff47730 R08: 0000000000000000 R09: 0000000000000000 [ 859.435694][ T38] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcdff487c0 [ 859.435707][ T38] R13: 00007f14b0cd1c05 R14: 00000000000aa01c R15: 00007ffcdff48800 [ 859.435739][ T38] [ 859.435788][ T38] [ 859.435788][ T38] Showing all locks held in the system: [ 859.435797][ T38] 4 locks held by pr/legacy/17: [ 859.435811][ T38] 1 lock held by khungtaskd/38: [ 859.435822][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 859.435875][ T38] 5 locks held by kworker/1:2/992: [ 859.435886][ T38] #0: ffff888019ff5138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 859.435933][ T38] #1: ffffc90004827bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 859.435980][ T38] #2: ffff888145bd4188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 859.436026][ T38] #3: ffff888145bd75b8 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 859.436070][ T38] #4: ffff888143726e58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 859.436118][ T38] 2 locks held by kworker/u8:8/1364: [ 859.436139][ T38] 4 locks held by kworker/u8:9/3202: [ 859.436150][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 859.436195][ T38] #1: ffffc9000dd8fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 859.436248][ T38] #2: ffffffff8ecc6700 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 859.436298][ T38] #3: ffff888039cc57b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0 [ 859.436346][ T38] 2 locks held by dhcpcd/5499: [ 859.436356][ T38] #0: ffff88802a87e910 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xbd/0xe90 [ 859.436404][ T38] #1: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 859.436451][ T38] 2 locks held by getty/5592: [ 859.436461][ T38] #0: ffff88823bec08a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 859.436512][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 859.436560][ T38] 10 locks held by syz-executor/5827: [ 859.436571][ T38] 1 lock held by syz-executor/5835: [ 859.436582][ T38] #0: ffff8880620880d0 (&type->s_umount_key#82){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 859.436637][ T38] 1 lock held by syz-executor/11743: [ 859.436648][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 859.436695][ T38] 3 locks held by syz-executor/11749: [ 859.436707][ T38] 3 locks held by syz.0.1441/11985: [ 859.436718][ T38] #0: ffffffff8ed39600 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 859.436760][ T38] #1: ffff888028b36910 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 859.436807][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_dump_one+0x151/0x7e0 [ 859.436858][ T38] [ 859.436864][ T38] ============================================= [ 859.436864][ T38] [ 859.436873][ T38] NMI backtrace for cpu 0 [ 859.436886][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 859.436907][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 859.436918][ T38] Call Trace: [ 859.436926][ T38] [ 859.436934][ T38] dump_stack_lvl+0x189/0x250 [ 859.436963][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 859.436988][ T38] ? __pfx__printk+0x10/0x10 [ 859.437021][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 859.437047][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 859.437072][ T38] ? __pfx__printk+0x10/0x10 [ 859.437096][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 859.437121][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 859.437146][ T38] watchdog+0xf93/0xfe0 [ 859.437175][ T38] ? watchdog+0x1de/0xfe0 [ 859.437210][ T38] kthread+0x70e/0x8a0 [ 859.437239][ T38] ? __pfx_watchdog+0x10/0x10 [ 859.437261][ T38] ? __pfx_kthread+0x10/0x10 [ 859.437291][ T38] ? __pfx_kthread+0x10/0x10 [ 859.437318][ T38] ret_from_fork+0x439/0x7d0 [ 859.437344][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 859.437373][ T38] ? __switch_to_asm+0x39/0x70 [ 859.437390][ T38] ? __switch_to_asm+0x33/0x70 [ 859.437406][ T38] ? __pfx_kthread+0x10/0x10 [ 859.437433][ T38] ret_from_fork_asm+0x1a/0x30 [ 859.437466][ T38] [ 859.437474][ T38] Sending NMI from CPU 0 to CPUs 1: [ 859.437501][ C1] NMI backtrace for cpu 1 [ 859.437517][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 859.437536][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 859.437546][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 859.437568][ C1] Code: e8 ae 4e 7f fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4f 89 de fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 0a 81 bb 05 cc 44 89 f9 80 e1 07 [ 859.437583][ C1] RSP: 0018:ffffc90000167890 EFLAGS: 00000202 [ 859.437598][ C1] RAX: 1ffffffff3275c00 RBX: 00000000000003fd RCX: 0000000000000000 [ 859.437611][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 859.437622][ C1] RBP: ffffffff993ae870 R08: 0000000000000000 R09: 0000000000000000 [ 859.437633][ C1] R10: dffffc0000000000 R11: ffffffff853f1f10 R12: dffffc0000000000 [ 859.437645][ C1] R13: 0000000000000000 R14: ffffffff993ae5e0 R15: 0000000000000000 [ 859.437657][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 859.437671][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 859.437683][ C1] CR2: 00007f0112411fe0 CR3: 000000003f256000 CR4: 00000000003526f0 [ 859.437701][ C1] Call Trace: [ 859.437708][ C1] [ 859.437717][ C1] wait_for_lsr+0x1a7/0x2f0 [ 859.437742][ C1] serial8250_console_write+0x11bd/0x1b40 [ 859.437767][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 859.437786][ C1] ? console_flush_all+0x13a/0xcd0 [ 859.437806][ C1] ? console_flush_all+0x476/0xcd0 [ 859.437826][ C1] console_flush_all+0x695/0xcd0 [ 859.437845][ C1] ? console_flush_all+0x13a/0xcd0 [ 859.437865][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 859.437884][ C1] ? __lock_acquire+0xab9/0xd20 [ 859.437910][ C1] __console_flush_and_unlock+0xa4/0x240 [ 859.437930][ C1] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 859.437953][ C1] legacy_kthread_func+0x13b/0x1a0 [ 859.437973][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 859.437993][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 859.438014][ C1] ? __kthread_parkme+0x7b/0x200 [ 859.438034][ C1] ? __kthread_parkme+0x1a1/0x200 [ 859.438080][ C1] kthread+0x70e/0x8a0 [ 859.438104][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 859.438124][ C1] ? __pfx_kthread+0x10/0x10 [ 859.438149][ C1] ? __pfx_kthread+0x10/0x10 [ 859.438171][ C1] ret_from_fork+0x439/0x7d0 [ 859.438192][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 859.438215][ C1] ? __switch_to_asm+0x39/0x70 [ 859.438230][ C1] ? __switch_to_asm+0x33/0x70 [ 859.438245][ C1] ? __pfx_kthread+0x10/0x10 [ 859.438267][ C1] ret_from_fork_asm+0x1a/0x30 [ 859.438291][ C1] [ 859.438496][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 859.438510][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 859.438530][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 859.438540][ T38] Call Trace: [ 859.438548][ T38] [ 859.438556][ T38] dump_stack_lvl+0x99/0x250 [ 859.438582][ T38] ? __asan_memcpy+0x40/0x70 [ 859.438602][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 859.438627][ T38] ? __pfx__printk+0x10/0x10 [ 859.438660][ T38] vpanic+0x281/0x750 [ 859.438688][ T38] ? __pfx_vpanic+0x10/0x10 [ 859.438711][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 859.438730][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 859.438765][ T38] panic+0xb9/0xc0 [ 859.438790][ T38] ? __pfx_panic+0x10/0x10 [ 859.438817][ T38] ? irq_work_queue+0xc3/0x140 [ 859.438844][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 859.438869][ T38] watchdog+0xfd2/0xfe0 [ 859.438897][ T38] ? watchdog+0x1de/0xfe0 [ 859.438925][ T38] kthread+0x70e/0x8a0 [ 859.438954][ T38] ? __pfx_watchdog+0x10/0x10 [ 859.438977][ T38] ? __pfx_kthread+0x10/0x10 [ 859.439007][ T38] ? __pfx_kthread+0x10/0x10 [ 859.439035][ T38] ret_from_fork+0x439/0x7d0 [ 859.439060][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 859.439089][ T38] ? __switch_to_asm+0x39/0x70 [ 859.439106][ T38] ? __switch_to_asm+0x33/0x70 [ 859.439122][ T38] ? __pfx_kthread+0x10/0x10 [ 859.439149][ T38] ret_from_fork_asm+0x1a/0x30 [ 859.439182][ T38] [ 859.439527][ T38] Kernel Offset: disabled