last executing test programs: 7m22.853653075s ago: executing program 1 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000106000342000200000800074000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a000005440002802c00018014000300ff01000000000000000000000000000114000400ff020000000000b70b000000000000010c000280050001000000000006000340000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001"], 0xa0}}, 0x0) 7m22.775503354s ago: executing program 1 (id=8): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000cb0a00fe1001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 1) 7m22.463557106s ago: executing program 1 (id=10): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a440000102030109"], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x73, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x3, 0x90, 0x62, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "090058e22a"}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x180, 0x3, 0x6}, {0x6, 0x24, 0x1a, 0xa18, 0x12}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x0, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0xf7, 0x1}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x0, 0x5, 0xa, 0x40}, 0x10c, &(0x7f0000000140)={0x5, 0xf, 0x10c, 0x4, [@ptm_cap={0x3}, @generic={0xee, 0x10, 0x4, "e05ba021d0e47f563406bb3f91819887e6df8c7fa5f917c243d4fb06b2a7248509bfe26b3501fa661061d1650c7227c8396370a30e32303180034f5523cf70dc3047d4ab1dc9e8994cee286e2c768acec20b251a34dcaa360d1b568916ad00c9c3808604b6094a59d99bc98fa2b048285d1fe4bef06d6d95e6d4ceaa769436eee13d4edd8b2977dfa1fbd0e5b7fc52075d2b2bdf21084b226e908fc3d199d28d0239f19cc38ca9207ad7b8cb5bf74bc4d08fa3601bf0336080f1a59e33ce9dbf0e1c239b8bcb062f2882f0f35934166a478e90f4c0e2902bff073a144f3092bd8b572ba16ae1ac4b3cf044"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xf0, 0xf, 0x19, 0x9, 0xf}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x1, 0x80, 0x0, 0x2}]}, 0x2, [{0xf9, &(0x7f0000000280)=@string={0xf9, 0x3, "d3e50fecb425128ce778b233db0e1f667a9cb86ccf2a6745ba3c3fe425c15b65215b96b4b1fff87fa11e79cedc16e9a8cee1a9769a22e918ff8338bbf6c32f51121a99c5ae77cccae9c263fdddd6ca04dce137e86107a212f0509d9734e079eb756f01e85e258eb6e700f547b72f5770b6c97b47df9113bdabdfae4d432730ee2ec6d7d4b417fb0940ff2dd5ac5ef64ccde32b99318d454b48985f3b20bea20e53d2da0056d91e4c0ea8f397c9e53a37bafbdeb969b06ce9651e6ebcba7c74348b1a7c17cd548486ff7be95d71d6cd4b46307efe87c8e4cac4761021774f5f8f41018ba123acfd9d4984e929fd1b8cd5ea097fc6de05b1"}}, {0x2e, &(0x7f0000000380)=@string={0x2e, 0x3, "478e0ef2245230b9e26b25a22bdaa871be55cb3691d09b7e8fe1504f6d4319d304c08d769b8158f8fe50c2ee"}}]}) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) 7m19.784439039s ago: executing program 1 (id=16): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$smackfs_netlabel(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="31383434363734343037333730393535313630382e30303034353033353939363237333730343936302e30393232333337323033363835343737353830382e30303030303030303030303030303030303030372e205d00cfc5b3230ba7c9c8f503e264c0a3658a0bd4da442830471f3a0b39e66ddf0a5316655794665281affdacbe8ba292e6c1d77bea7590e9342966829f18443e34d1f0723b7735ec877d7140d7fd29e698250351be291c947309b69720cf3f647864592f996e57c718980af05dee783f44c0515de3b43db0ad16553fdc27bfbb26bc163e1911dfd4c7c1a5146d44509f00f6142258a7486d0db2d63db1f720cd4a5e7b8e57b26ed33b13aef008663f06d45653d72674802d9e"], 0x57) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0xc00, 0x0) syz_io_uring_setup(0x71d1, 0x0, 0x0, &(0x7f00000001c0)) bind$alg(0xffffffffffffffff, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={0x30, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x20}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) socket$igmp6(0xa, 0x3, 0x2) 7m15.379463723s ago: executing program 1 (id=21): r0 = socket$kcm(0x2, 0x3, 0x84) sched_setscheduler(0x0, 0x1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0xc0000042) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000899000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f00000000c0)={0x39, 0x0, 0x1, 0x0, 0x0, 0xa6f8, 0x800000000000000c, 0x0}) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000740)={0xfffffffc, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0xffffffffffffffff) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x4, &(0x7f0000000240)={0x2, 0x3, 0x0, 0xec, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$TCSETSF(r4, 0x5432, 0x0) socket$inet6(0xa, 0x2, 0x3a) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f87552", 0x6}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 7m14.42940258s ago: executing program 1 (id=24): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r6 = msgget$private(0x0, 0x1c0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r8, r8, r8) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000140)={{0x3, 0xffffffffffffffff, 0x0, r8, 0x0, 0x50, 0x40}, 0x0, 0x0, 0x7, 0x81, 0x4000, 0xfffffff8, 0x3468696f, 0x6, 0x3fc7, 0xf801}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6m59.168702868s ago: executing program 32 (id=24): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r6 = msgget$private(0x0, 0x1c0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r8, r8, r8) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000140)={{0x3, 0xffffffffffffffff, 0x0, r8, 0x0, 0x50, 0x40}, 0x0, 0x0, 0x7, 0x81, 0x4000, 0xfffffff8, 0x3468696f, 0x6, 0x3fc7, 0xf801}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 14.376451498s ago: executing program 2 (id=1032): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6120, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(0xffffffffffffffff) tee(r1, r2, 0x6, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200844d, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c02006f7570deb0d865", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000ac40)={0x2020}, 0x2020) 14.167137139s ago: executing program 2 (id=1035): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r0, 0x0, 0x0, 0x7, 0x7, 0x12) r1 = syz_open_dev$vim2m(&(0x7f0000001580), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405668, &(0x7f0000000000)={0x0, 0x0, 0xa, "3a8e00000000b29634b52b865066c27891ca55e21f00"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x2040400) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x9, 0x0, &(0x7f0000000040)) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) sendfile(r5, r5, 0x0, 0x280000) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0xfffc, 0x0, @remote, 0x52b}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e24, @empty}}, 0x3f, 0x2}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r8, 0x48, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0xfff, @empty, 0x2}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x5ee, @private2, 0x40000000}]}, &(0x7f0000000280)=0x10) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0x6) 12.643177036s ago: executing program 0 (id=1037): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="90030000", @ANYRES16=r3, @ANYBLOB="04002abd7000fbdbdf256500000008000300", @ANYRES32=0x0, @ANYBLOB="5c0003800c00008008000300ffff0000400000803c0002001958675a6d55c1b4e5ba35df2a57813aaf6626eb834864868881f7696f882a6a6c2626091cde05e42365dcd77d12ef1a1cea4db25e3baea30c000080080003004000000008000100ff030000080002000100000008000100dec20000"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe80, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x7, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0xffffffff, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x8b44, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0xd}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x7, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x10008, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0x80, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x7}, {0x1b, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x1, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x2, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x8, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x85c, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x101, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x3ff}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x3, 0x3, 0x5, 0xfffffffb}, {0x3ed, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0x1, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x7279, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x6, 0x7, 0x2d239f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x1, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x5, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r6 = inotify_init1(0x80800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) socket$nl_generic(0x10, 0x3, 0x10) 11.426179667s ago: executing program 2 (id=1040): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xd41}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="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", 0xd8a}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 10.235581545s ago: executing program 4 (id=1043): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) socket$kcm(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x9f4cad143e2713d, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000004) 9.217843776s ago: executing program 2 (id=1046): syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0xa0080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x12, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r2, &(0x7f0000002100)=[{&(0x7f0000002080)='T01', 0x3}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x2f) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) inotify_init1(0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) unshare(0x40000000) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x200) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x7fff) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'erspan0\x00', 0x0}) 8.66842542s ago: executing program 0 (id=1048): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0}, &(0x7f0000000400)=0x14) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb25bdabb", 0x48) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0xfffc, @empty}}, 0x0, 0x84, 0x0, 0x6}, 0x9c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r5, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)=[0x7, 0x5, 0x2c, 0x5], &(0x7f0000000240)=[0x2], 0x0, 0x4}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='mmap_lock_acquire_returned\x00', r8}, 0x18) r9 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) 7.922307545s ago: executing program 5 (id=1049): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1, 0x0, 0x0, 0xffffffff}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0) readv(r7, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f00000002c0)=""/7, 0x7}], 0x3) fcntl$setstatus(r6, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x1411, 0x1, 0x4, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) write$uinput_user_dev(r6, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40], [0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, &(0x7f0000006480)) 6.975921899s ago: executing program 4 (id=1050): mkdir(&(0x7f0000000040)='./file0\x00', 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x8002, 0x0) read$msr(r2, &(0x7f0000019540)=""/102400, 0x19000) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newae={0x64, 0x1e, 0x101, 0x70bd2b, 0x25dfdbfb, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x2, 0xff}, @in=@loopback, 0xb414, 0x34ff}, [@lifetime_val={0x24, 0x9, {0x786, 0x1, 0xffff7ffffffffe00, 0xc}}]}, 0x64}}, 0x20008000) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) socketpair(0x1a, 0xa, 0x0, &(0x7f00000012c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x65, &(0x7f0000000040), &(0x7f0000000180)=""/101, 0x0, 0x0, 0x0, 0xca, &(0x7f0000000400), &(0x7f0000000600)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee52331adb9d616a64f39743ee9ca768878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5a", 0x0, 0x8000}, 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x23, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800) fchdir(r5) close(r5) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) 6.155237155s ago: executing program 3 (id=1051): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xd40}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) openat$autofs(0xffffffffffffff9c, 0x0, 0x1, 0x0) 5.858235713s ago: executing program 4 (id=1052): userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semget$private(0x0, 0x3, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x300, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x64202202}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400d0}, 0x20048082) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) fadvise64(r5, 0x18, 0x0, 0x4) 5.437698888s ago: executing program 2 (id=1053): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00'}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000040b4550182195f57584520e3bed23"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) 5.375670317s ago: executing program 0 (id=1054): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x59fa, 0x400, 0x8, 0x3, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000000000000209}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000440)={0xc, @dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x3, 'lc\x00', 0x4, 0x0, 0x1a}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0x81, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x20040810}, 0x850) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x53, &(0x7f0000000000)=[{0x68b, 0xf, 0x6, 0x6}, {0x2, 0x1, 0x2, 0x40}, {0x8040, 0xbc, 0x9, 0x4}, {0x8, 0x9, 0xe8, 0x7fff}]}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[], 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000400)=ANY=[@ANYRES64=r7], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0xfffffffc}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 5.073152748s ago: executing program 3 (id=1055): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)="f2", 0x1) 4.912722004s ago: executing program 5 (id=1056): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xd41}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="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", 0xda6}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 4.852747067s ago: executing program 3 (id=1057): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r4 = open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$netlink(0x10, 0x3, 0x8000000004) mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500), 0xc8030, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',dfltuid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6e6f657874656e642c63616368653d300858a59590c70e73696f6e3d3970323030302e4c2c70726976706f72742c657569643e", @ANYRESDEC, @ANYBLOB=',\x00']) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01", 0x53}], 0x1) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa0000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r7, 0x4) 4.661055896s ago: executing program 4 (id=1058): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040810, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x13}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'ip6tnl0\x00', {0x2, 0x0, @private=0xfffffffe}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0xfcff, &(0x7f0000000700)='V'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f00005bd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/209, 0xd1, 0x1, &(0x7f0000000000)=""/137, 0x89}, &(0x7f0000000240)=0x40) 4.383852317s ago: executing program 4 (id=1059): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 4.271141598s ago: executing program 0 (id=1060): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x578, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x548, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x170, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x64, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147ba"}}, @TCF_EM_META={0x8c, 0x2, 0x0, 0x0, {{0xbe0, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x9, 0x2}, {0x1000, 0x3, 0x1}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7, 0x1}, {0x7, 0x97, 0x2}}}, @TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="230fb355f7156343", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="c3f4be5ef3de514e", @TCF_META_TYPE_VAR="b78850fcae", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="bd5577acf3", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="7e181233dc49", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="80e1d0"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x3ac, 0x9, 0x0, 0x1, [@m_gact={0x140, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2ca8b8d7ec1784b0, 0x2680, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0xed, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342cb38a9e544eb6f4e0148acb294b877f68eb4b6b13e38196c311c9ebb06d7a5ee9ead5689128fa35472611715963d35fb43d3014ff74e144932866ca97f5c001aab6053dd7ce7d38a407074614c2a21063cc49a687085d3ab9d042fcc913d8377863381be46ad8fade1f71945e9d5053fd5d1123d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb4, 0x1b, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xffff}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0xd0, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xa1, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xe4, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0xb9, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6048cdd4ebfc8b92c63ac0f4245eecd529108a46a7eaf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x578}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.03557835s ago: executing program 0 (id=1061): syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0xa0080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x12, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r2, &(0x7f0000002100)=[{&(0x7f0000002080)='T0', 0x2}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x2f) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) inotify_init1(0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) unshare(0x40000000) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x200) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x7fff) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'erspan0\x00', 0x0}) 3.189796954s ago: executing program 5 (id=1062): socket$inet(0x2, 0x3, 0x7f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000200)=""/247, 0xf7}], 0x1, 0x1000a2, 0x0) (fail_nth: 2) 2.277349053s ago: executing program 5 (id=1063): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271c, 0x0, 0x0) (fail_nth: 2) 2.271863156s ago: executing program 2 (id=1064): syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0xa0080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x12, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r2, &(0x7f0000002100)=[{&(0x7f0000002080)='T01', 0x3}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x2f) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) inotify_init1(0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) unshare(0x40000000) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x200) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x7fff) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'erspan0\x00', 0x0}) 2.111554905s ago: executing program 5 (id=1065): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffffcd8b, 0xac14140c}, 0xff000000}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="8933ccfa85", 0x5}, {&(0x7f00000000c0)="406a65af96ac3cf90b82ecc391f9773d53542537f73640b6c4706cd387ee0887ba0b41", 0x23}], 0x2, 0x0, 0x0, 0x900}, 0x60) r2 = socket(0x40000000015, 0x5, 0x0) exit(0x7) getsockopt(r2, 0x200000000114, 0x271c, 0x0, 0x0) 2.011276875s ago: executing program 4 (id=1066): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1, 0x0, 0x0, 0xffffffff}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0) readv(r7, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f00000002c0)=""/7, 0x7}], 0x3) fcntl$setstatus(r6, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x1411, 0x1, 0x4, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) write$uinput_user_dev(r6, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40], [0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, &(0x7f0000006480)) 745.031282ms ago: executing program 3 (id=1067): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)="f2", 0x1) 720.94369ms ago: executing program 5 (id=1068): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1, 0x0, 0x0, 0xffffffff}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0) readv(r7, &(0x7f0000000380)=[{&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f00000002c0)=""/7, 0x7}], 0x2) fcntl$setstatus(r6, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x1411, 0x1, 0x4, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) write$uinput_user_dev(r6, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40], [0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, &(0x7f0000006480)) 220.278249ms ago: executing program 3 (id=1069): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/if_inet6\x00') pread64(r0, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) 117.312822ms ago: executing program 0 (id=1070): syz_io_uring_setup(0x4a9, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xffffffbc}, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x0) r2 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000180)={{0x33d8f59d358d3316, 0x2, 0x6, 0x1, 0x9}, 0x7fffffff, 0x4}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f0000000740)=0xe8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x40041, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',cache=loose,cache=mmap,mmap,fscache,cache=mmap,msize=0x0000000000000002,mmap,access=client,directio,fsuuid=82efe7c5-cc4f-c639-c863-76394a2V,smackfsdef=,fowner=', @ANYRESDEC=r5, @ANYBLOB=',fowner<', @ANYRESDEC=r9, @ANYBLOB=',subj_role=\x00,obj_type=/dev/bus/usb/00#/00#\x00,ro,\x00']) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd0002800800034000000120140000001000010000000000000000000084000a"], 0xe4}}, 0x20050800) ftruncate(r2, 0x0) (fail_nth: 2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet_smc(0x2b, 0x1, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x740, 0x140) close(r10) socket$kcm(0x29, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 0s ago: executing program 3 (id=1071): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) r4 = getpid() r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r4, 0x0, 0x7fff, 'syz1\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1}) (fail_nth: 2) kernel console output (not intermixed with test programs): xd20 [ 391.321539][ T8971] ? __might_fault+0xb0/0x130 [ 391.321574][ T8971] tcp_getsockopt+0x83/0x130 [ 391.321606][ T8971] ? sock_recv_errqueue+0x470/0x510 [ 391.321633][ T8971] ? sock_recv_errqueue+0x470/0x510 [ 391.321659][ T8971] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 391.321690][ T8971] do_sock_getsockopt+0x36f/0x450 [ 391.321727][ T8971] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 391.321759][ T8971] ? do_syscall_64+0x20/0x3b0 [ 391.321782][ T8971] ? __fget_files+0x3a0/0x420 [ 391.321806][ T8971] ? __fget_files+0x2a/0x420 [ 391.321839][ T8971] __x64_sys_getsockopt+0x1a5/0x250 [ 391.321872][ T8971] ? do_syscall_64+0x20/0x3b0 [ 391.321898][ T8971] ? do_syscall_64+0x20/0x3b0 [ 391.321927][ T8971] do_syscall_64+0xfa/0x3b0 [ 391.321951][ T8971] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.321974][ T8971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.322001][ T8971] ? clear_bhb_loop+0x60/0xb0 [ 391.322028][ T8971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.322050][ T8971] RIP: 0033:0x7f7c0158ebe9 [ 391.322069][ T8971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.322088][ T8971] RSP: 002b:00007f7c02481038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 391.322112][ T8971] RAX: ffffffffffffffda RBX: 00007f7c017b5fa0 RCX: 00007f7c0158ebe9 [ 391.322128][ T8971] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 391.322141][ T8971] RBP: 00007f7c02481090 R08: 0000200000000000 R09: 0000000000000000 [ 391.322156][ T8971] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 391.322170][ T8971] R13: 00007f7c017b6038 R14: 00007f7c017b5fa0 R15: 00007ffddf74ce28 [ 391.322206][ T8971] [ 393.460067][ T8985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.475402][ T8990] FAULT_INJECTION: forcing a failure. [ 393.475402][ T8990] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 393.556933][ T8990] CPU: 1 UID: 0 PID: 8990 Comm: syz.4.679 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 393.556965][ T8990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 393.556979][ T8990] Call Trace: [ 393.556988][ T8990] [ 393.556999][ T8990] dump_stack_lvl+0x189/0x250 [ 393.557029][ T8990] ? __pfx____ratelimit+0x10/0x10 [ 393.557053][ T8990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.557090][ T8990] ? __pfx__printk+0x10/0x10 [ 393.557120][ T8990] ? fs_reclaim_acquire+0x7d/0x100 [ 393.557157][ T8990] should_fail_ex+0x414/0x560 [ 393.557186][ T8990] prepare_alloc_pages+0x213/0x610 [ 393.557222][ T8990] __alloc_frozen_pages_noprof+0x123/0x370 [ 393.557255][ T8990] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 393.557293][ T8990] ? policy_nodemask+0x27c/0x720 [ 393.557322][ T8990] alloc_pages_mpol+0x232/0x4a0 [ 393.557352][ T8990] folio_alloc_mpol_noprof+0x39/0x70 [ 393.557379][ T8990] shmem_alloc_and_add_folio+0x447/0xf60 [ 393.557405][ T8990] ? filemap_get_entry+0xad/0x2f0 [ 393.557437][ T8990] ? filemap_get_entry+0xad/0x2f0 [ 393.557467][ T8990] ? filemap_get_entry+0xad/0x2f0 [ 393.557500][ T8990] ? filemap_get_entry+0x28f/0x2f0 [ 393.557536][ T8990] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 393.557563][ T8990] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 393.557604][ T8990] shmem_get_folio_gfp+0x59d/0x1660 [ 393.557650][ T8990] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 393.557686][ T8990] shmem_write_begin+0xf7/0x2b0 [ 393.557715][ T8990] generic_perform_write+0x2c4/0x910 [ 393.557754][ T8990] ? __pfx_generic_perform_write+0x10/0x10 [ 393.557776][ T8990] ? down_write+0x162/0x1f0 [ 393.557810][ T8990] ? file_update_time+0x2da/0x490 [ 393.557845][ T8990] shmem_file_write_iter+0xf8/0x120 [ 393.557872][ T8990] vfs_write+0x54b/0xa90 [ 393.557897][ T8990] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 393.557921][ T8990] ? __pfx_vfs_write+0x10/0x10 [ 393.557954][ T8990] ? __fget_files+0x2a/0x420 [ 393.557989][ T8990] ksys_write+0x145/0x250 [ 393.558013][ T8990] ? __pfx_ksys_write+0x10/0x10 [ 393.558030][ T8990] ? rcu_is_watching+0x15/0xb0 [ 393.558060][ T8990] ? do_syscall_64+0xbe/0x3b0 [ 393.558095][ T8990] do_syscall_64+0xfa/0x3b0 [ 393.558117][ T8990] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.558140][ T8990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.558161][ T8990] ? clear_bhb_loop+0x60/0xb0 [ 393.558189][ T8990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.558210][ T8990] RIP: 0033:0x7f0eaf98ebe9 [ 393.558229][ T8990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.558248][ T8990] RSP: 002b:00007f0eb0837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 393.558271][ T8990] RAX: ffffffffffffffda RBX: 00007f0eafbb5fa0 RCX: 00007f0eaf98ebe9 [ 393.558287][ T8990] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000003 [ 393.558301][ T8990] RBP: 00007f0eb0837090 R08: 0000000000000000 R09: 0000000000000000 [ 393.558314][ T8990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.558328][ T8990] R13: 00007f0eafbb6038 R14: 00007f0eafbb5fa0 R15: 00007fff634ee9f8 [ 393.558364][ T8990] [ 393.934924][ T8995] netlink: 'syz.5.680': attribute type 13 has an invalid length. [ 394.370579][ T8995] gretap0: refused to change device tx_queue_len [ 394.734600][ T8995] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 395.173256][ T8998] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 395.776152][ T5899] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 397.075997][ T5899] usb 3-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 397.122057][ T5899] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 127, setting to 64 [ 397.168605][ T5899] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 397.213507][ T5899] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 397.264282][ T5899] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bf.9d [ 397.285518][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.421436][ T9017] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 397.500120][ T5899] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 397.687482][ T9017] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 397.712492][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.855885][ T5899] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 397.914859][ T5899] usb 3-1: USB disconnect, device number 11 [ 399.333586][ T9051] 9p: Unknown Cache mode or invalid value fs [ 403.853793][ T9075] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.861538][ T9075] IPv6: NLM_F_CREATE should be set when creating new route [ 403.868940][ T9075] IPv6: NLM_F_CREATE should be set when creating new route [ 404.638678][ T9081] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 404.650853][ T9081] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 406.873952][ T30] audit: type=1326 audit(1755585828.322:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9083 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 406.953888][ T30] audit: type=1326 audit(1755585828.322:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9083 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 407.050023][ T30] audit: type=1326 audit(1755585828.372:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9083 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 407.154598][ T30] audit: type=1326 audit(1755585828.372:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9083 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 407.180608][ T30] audit: type=1326 audit(1755585828.372:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9083 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 407.187634][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 407.222832][ T30] audit: type=1326 audit(1755585828.392:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9083 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 407.275455][ T30] audit: type=1326 audit(1755585828.392:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9083 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 407.470447][ T30] audit: type=1326 audit(1755585828.392:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9083 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 407.496008][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 407.506709][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.517493][ T30] audit: type=1326 audit(1755585828.432:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9083 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 407.545072][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 407.565158][ T30] audit: type=1326 audit(1755585828.432:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9083 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 408.476568][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 408.491565][ T24] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 408.500851][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.508977][ T24] usb 4-1: Product: syz [ 408.513201][ T24] usb 4-1: Manufacturer: syz [ 408.517882][ T24] usb 4-1: SerialNumber: syz [ 408.525645][ T24] usb 4-1: config 0 descriptor?? [ 408.539770][ T9093] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 409.558139][ T5847] usb 4-1: USB disconnect, device number 18 [ 411.027302][ T5980] IPVS: starting estimator thread 0... [ 411.050054][ T9121] ======================================================= [ 411.050054][ T9121] WARNING: The mand mount option has been deprecated and [ 411.050054][ T9121] and is ignored by this kernel. Remove the mand [ 411.050054][ T9121] option from the mount to silence this warning. [ 411.050054][ T9121] ======================================================= [ 411.118410][ T9128] IPVS: using max 23 ests per chain, 55200 per kthread [ 411.128100][ T9121] Invalid source name [ 411.356024][ T9121] UBIFS error (pid: 9121): cannot open "./file0", error -22 [ 411.981133][ T5980] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 412.249017][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 412.298103][ T5980] usb 4-1: unable to get BOS descriptor or descriptor too short [ 412.380192][ T5980] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.405933][ T24] usb 3-1: device descriptor read/64, error -71 [ 413.472758][ T5980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.531429][ T5980] usb 4-1: string descriptor 0 read error: -71 [ 413.597883][ T5980] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.790605][ T5980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.943096][ T5980] usb 4-1: can't set config #1, error -71 [ 413.985992][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 414.005549][ T5980] usb 4-1: USB disconnect, device number 19 [ 414.100083][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 414.100102][ T30] audit: type=1326 audit(1755585835.542:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 414.137323][ T24] usb 3-1: device descriptor read/64, error -71 [ 414.140722][ T30] audit: type=1326 audit(1755585835.542:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 414.171306][ T30] audit: type=1326 audit(1755585835.542:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 414.205646][ T30] audit: type=1326 audit(1755585835.542:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 414.235113][ T30] audit: type=1326 audit(1755585835.542:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 414.246346][ T24] usb usb3-port1: attempt power cycle [ 414.268332][ T30] audit: type=1326 audit(1755585835.552:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 414.296735][ T30] audit: type=1326 audit(1755585835.552:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 414.476120][ T30] audit: type=1326 audit(1755585835.552:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 414.501784][ T30] audit: type=1326 audit(1755585835.552:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 414.509081][ T5980] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 414.523845][ T30] audit: type=1326 audit(1755585835.552:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb0918d550 code=0x7ffc0000 [ 415.243367][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.725'. [ 415.499380][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.525115][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.577609][ T5980] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 415.650778][ T5980] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 415.715522][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.822113][ T9161] netlink: 96 bytes leftover after parsing attributes in process `syz.5.728'. [ 416.537626][ T5980] usb 4-1: config 0 descriptor?? [ 416.692064][ T9167] FAULT_INJECTION: forcing a failure. [ 416.692064][ T9167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.729585][ T9167] CPU: 1 UID: 0 PID: 9167 Comm: syz.5.731 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 416.729616][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.729630][ T9167] Call Trace: [ 416.729640][ T9167] [ 416.729650][ T9167] dump_stack_lvl+0x189/0x250 [ 416.729683][ T9167] ? __pfx____ratelimit+0x10/0x10 [ 416.729707][ T9167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.729732][ T9167] ? __pfx__printk+0x10/0x10 [ 416.729761][ T9167] ? __might_fault+0xb0/0x130 [ 416.729797][ T9167] should_fail_ex+0x414/0x560 [ 416.729827][ T9167] _copy_from_user+0x2d/0xb0 [ 416.729860][ T9167] get_itimerspec64+0x19e/0x2f0 [ 416.729899][ T9167] ? __pfx_get_itimerspec64+0x10/0x10 [ 416.729938][ T9167] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 416.729974][ T9167] __x64_sys_timer_settime+0x142/0x240 [ 416.730010][ T9167] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 416.730060][ T9167] ? do_syscall_64+0xbe/0x3b0 [ 416.730091][ T9167] do_syscall_64+0xfa/0x3b0 [ 416.730115][ T9167] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.730137][ T9167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.730160][ T9167] ? clear_bhb_loop+0x60/0xb0 [ 416.730187][ T9167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.730208][ T9167] RIP: 0033:0x7f7c0158ebe9 [ 416.730229][ T9167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.730249][ T9167] RSP: 002b:00007f7c02481038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 416.730273][ T9167] RAX: ffffffffffffffda RBX: 00007f7c017b5fa0 RCX: 00007f7c0158ebe9 [ 416.730289][ T9167] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 416.730303][ T9167] RBP: 00007f7c02481090 R08: 0000000000000000 R09: 0000000000000000 [ 416.730317][ T9167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.730330][ T9167] R13: 00007f7c017b6038 R14: 00007f7c017b5fa0 R15: 00007ffddf74ce28 [ 416.730372][ T9167] [ 418.077571][ T5980] usbhid 4-1:0.0: can't add hid device: -71 [ 418.131149][ T5980] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 418.892832][ T9181] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 418.903618][ T9181] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 418.916998][ T9181] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 418.924966][ T9181] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 419.190142][ T5980] usb 4-1: USB disconnect, device number 20 [ 422.086677][ T9193] netlink: 76 bytes leftover after parsing attributes in process `syz.3.739'. [ 425.485470][ T5155] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 425.955973][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 425.955992][ T30] audit: type=1326 audit(1755585847.402:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 426.069322][ T30] audit: type=1326 audit(1755585847.442:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 426.127552][ T9205] mkiss: ax0: crc mode is auto. [ 426.201939][ T30] audit: type=1326 audit(1755585847.442:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 426.236043][ T1211] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 426.264530][ T30] audit: type=1326 audit(1755585847.442:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 426.311645][ T30] audit: type=1326 audit(1755585847.442:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 426.565104][ T30] audit: type=1326 audit(1755585847.442:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 426.620329][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.637146][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.667910][ T1211] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 426.683335][ T30] audit: type=1326 audit(1755585847.442:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 426.725107][ T30] audit: type=1326 audit(1755585847.442:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d3898d550 code=0x7ffc0000 [ 426.861776][ T1211] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 426.871552][ T1211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.882138][ T30] audit: type=1326 audit(1755585847.442:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d3898e7eb code=0x7ffc0000 [ 426.908442][ T30] audit: type=1326 audit(1755585847.442:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d3898e7eb code=0x7ffc0000 [ 428.256373][ T1211] usb 3-1: config 0 descriptor?? [ 428.593864][ T9244] netlink: 6 bytes leftover after parsing attributes in process `syz.3.753'. [ 428.703598][ T1211] usbhid 3-1:0.0: can't add hid device: -71 [ 428.861538][ T9249] FAULT_INJECTION: forcing a failure. [ 428.861538][ T9249] name failslab, interval 1, probability 0, space 0, times 0 [ 428.886840][ T9249] CPU: 0 UID: 0 PID: 9249 Comm: syz.4.755 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 428.886870][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.886884][ T9249] Call Trace: [ 428.886893][ T9249] [ 428.886911][ T9249] dump_stack_lvl+0x189/0x250 [ 428.886940][ T9249] ? __pfx____ratelimit+0x10/0x10 [ 428.886962][ T9249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.886986][ T9249] ? __pfx__printk+0x10/0x10 [ 428.887021][ T9249] ? __pfx___might_resched+0x10/0x10 [ 428.887050][ T9249] should_fail_ex+0x414/0x560 [ 428.887077][ T9249] should_failslab+0xa8/0x100 [ 428.887102][ T9249] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 428.887123][ T9249] ? __alloc_skb+0x112/0x2d0 [ 428.887157][ T9249] __alloc_skb+0x112/0x2d0 [ 428.887190][ T9249] netlink_sendmsg+0x5c6/0xb30 [ 428.887229][ T9249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.887267][ T9249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.887288][ T9249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.887320][ T9249] __sock_sendmsg+0x21c/0x270 [ 428.887349][ T9249] ____sys_sendmsg+0x505/0x830 [ 428.887389][ T9249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.887432][ T9249] ? import_iovec+0x74/0xa0 [ 428.887465][ T9249] ___sys_sendmsg+0x21f/0x2a0 [ 428.887506][ T9249] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.887575][ T9249] ? __fget_files+0x2a/0x420 [ 428.887600][ T9249] ? __fget_files+0x3a0/0x420 [ 428.887635][ T9249] __x64_sys_sendmsg+0x19b/0x260 [ 428.887671][ T9249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.887713][ T9249] ? __pfx_ksys_write+0x10/0x10 [ 428.887731][ T9249] ? rcu_is_watching+0x15/0xb0 [ 428.887754][ T9249] ? do_syscall_64+0xbe/0x3b0 [ 428.887775][ T9249] do_syscall_64+0xfa/0x3b0 [ 428.887791][ T9249] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.887807][ T9249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.887823][ T9249] ? clear_bhb_loop+0x60/0xb0 [ 428.887842][ T9249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.887857][ T9249] RIP: 0033:0x7f0eaf98ebe9 [ 428.887871][ T9249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.887885][ T9249] RSP: 002b:00007f0eb0837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.887902][ T9249] RAX: ffffffffffffffda RBX: 00007f0eafbb5fa0 RCX: 00007f0eaf98ebe9 [ 428.887922][ T9249] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 428.887932][ T9249] RBP: 00007f0eb0837090 R08: 0000000000000000 R09: 0000000000000000 [ 428.887941][ T9249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.887950][ T9249] R13: 00007f0eafbb6038 R14: 00007f0eafbb5fa0 R15: 00007fff634ee9f8 [ 428.887974][ T9249] [ 428.916192][ T1211] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 429.264790][ T1211] usb 3-1: USB disconnect, device number 15 [ 429.331063][ T9256] FAULT_INJECTION: forcing a failure. [ 429.331063][ T9256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.383717][ T9256] CPU: 1 UID: 0 PID: 9256 Comm: syz.4.758 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 429.383748][ T9256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.383762][ T9256] Call Trace: [ 429.383771][ T9256] [ 429.383781][ T9256] dump_stack_lvl+0x189/0x250 [ 429.383811][ T9256] ? __pfx____ratelimit+0x10/0x10 [ 429.383835][ T9256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.383861][ T9256] ? __pfx__printk+0x10/0x10 [ 429.383903][ T9256] should_fail_ex+0x414/0x560 [ 429.383932][ T9256] _copy_from_user+0x2d/0xb0 [ 429.383964][ T9256] __copy_msghdr+0x3c5/0x5b0 [ 429.384003][ T9256] ___sys_sendmsg+0x1a5/0x2a0 [ 429.384040][ T9256] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.384113][ T9256] ? __fget_files+0x2a/0x420 [ 429.384137][ T9256] ? __fget_files+0x3a0/0x420 [ 429.384184][ T9256] __x64_sys_sendmsg+0x19b/0x260 [ 429.384221][ T9256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.384266][ T9256] ? __pfx_ksys_write+0x10/0x10 [ 429.384284][ T9256] ? rcu_is_watching+0x15/0xb0 [ 429.384316][ T9256] ? do_syscall_64+0xbe/0x3b0 [ 429.384345][ T9256] do_syscall_64+0xfa/0x3b0 [ 429.384367][ T9256] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.384390][ T9256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.384415][ T9256] ? clear_bhb_loop+0x60/0xb0 [ 429.384443][ T9256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.384464][ T9256] RIP: 0033:0x7f0eaf98ebe9 [ 429.384484][ T9256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.384503][ T9256] RSP: 002b:00007f0eb0837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.384527][ T9256] RAX: ffffffffffffffda RBX: 00007f0eafbb5fa0 RCX: 00007f0eaf98ebe9 [ 429.384543][ T9256] RDX: 0000000000000010 RSI: 0000200000000540 RDI: 0000000000000004 [ 429.384557][ T9256] RBP: 00007f0eb0837090 R08: 0000000000000000 R09: 0000000000000000 [ 429.384571][ T9256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.384584][ T9256] R13: 00007f0eafbb6038 R14: 00007f0eafbb5fa0 R15: 00007fff634ee9f8 [ 429.384619][ T9256] [ 430.643822][ T9271] sp0: Synchronizing with TNC [ 430.959806][ T9273] sctp: [Deprecated]: syz.3.762 (pid 9273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.959806][ T9273] Use struct sctp_sack_info instead [ 432.185995][ T5847] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 432.397089][ T5847] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.426028][ T5847] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 432.460999][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.509085][ T5847] usb 4-1: config 0 descriptor?? [ 432.532429][ T5847] usb 4-1: bad CDC descriptors [ 432.619098][ T9278] syz.2.763: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 432.642097][ T9278] CPU: 0 UID: 0 PID: 9278 Comm: syz.2.763 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 432.642128][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.642138][ T9278] Call Trace: [ 432.642145][ T9278] [ 432.642151][ T9278] dump_stack_lvl+0x189/0x250 [ 432.642177][ T9278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.642195][ T9278] ? __pfx__printk+0x10/0x10 [ 432.642217][ T9278] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 432.642238][ T9278] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 432.642259][ T9278] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 432.642281][ T9278] warn_alloc+0x214/0x310 [ 432.642305][ T9278] ? __pfx_warn_alloc+0x10/0x10 [ 432.642331][ T9278] ? __get_vm_area_node+0x28f/0x300 [ 432.642348][ T9278] ? packet_set_ring+0x6f4/0x2380 [ 432.642375][ T9278] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 432.642416][ T9278] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 432.642435][ T9278] ? alloc_pages_mpol+0x3c4/0x4a0 [ 432.642455][ T9278] ? packet_set_ring+0x6f4/0x2380 [ 432.642479][ T9278] vzalloc_noprof+0xb2/0xf0 [ 432.642496][ T9278] ? packet_set_ring+0x6f4/0x2380 [ 432.642521][ T9278] packet_set_ring+0x6f4/0x2380 [ 432.642561][ T9278] ? __pfx_packet_set_ring+0x10/0x10 [ 432.642600][ T9278] ? _copy_from_user+0x94/0xb0 [ 432.642634][ T9278] packet_setsockopt+0xc5a/0x12c0 [ 432.642658][ T9278] ? mpol_set_nodemask+0x311/0x3f0 [ 432.642675][ T9278] ? __pfx_packet_setsockopt+0x10/0x10 [ 432.642703][ T9278] ? __lock_acquire+0xab9/0xd20 [ 432.642735][ T9278] ? __fget_files+0x2a/0x420 [ 432.642756][ T9278] ? __fget_files+0x2a/0x420 [ 432.642772][ T9278] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 432.642788][ T9278] ? __pfx_packet_setsockopt+0x10/0x10 [ 432.642813][ T9278] do_sock_setsockopt+0x179/0x1b0 [ 432.642841][ T9278] __x64_sys_setsockopt+0x13f/0x1b0 [ 432.642870][ T9278] do_syscall_64+0xfa/0x3b0 [ 432.642896][ T9278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.642912][ T9278] ? asm_sysvec_call_function_single+0x1a/0x20 [ 432.642928][ T9278] ? clear_bhb_loop+0x60/0xb0 [ 432.642948][ T9278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.642963][ T9278] RIP: 0033:0x7f2d3898ebe9 [ 432.642978][ T9278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.642993][ T9278] RSP: 002b:00007f2d36bbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 432.643010][ T9278] RAX: ffffffffffffffda RBX: 00007f2d38bb6090 RCX: 00007f2d3898ebe9 [ 432.643022][ T9278] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000009 [ 432.643032][ T9278] RBP: 00007f2d38a11e19 R08: 000000000000001c R09: 0000000000000000 [ 432.643042][ T9278] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 432.643052][ T9278] R13: 00007f2d38bb6128 R14: 00007f2d38bb6090 R15: 00007ffecfcbd148 [ 432.643076][ T9278] [ 432.643112][ T9278] Mem-Info: [ 432.958221][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.967428][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.976022][ T9278] active_anon:5563 inactive_anon:4878 isolated_anon:0 [ 432.976022][ T9278] active_file:6840 inactive_file:45505 isolated_file:0 [ 432.976022][ T9278] unevictable:768 dirty:320 writeback:0 [ 432.976022][ T9278] slab_reclaimable:10353 slab_unreclaimable:99295 [ 432.976022][ T9278] mapped:32863 shmem:6666 pagetables:1114 [ 432.976022][ T9278] sec_pagetables:0 bounce:0 [ 432.976022][ T9278] kernel_misc_reclaimable:0 [ 432.976022][ T9278] free:1306599 free_pcp:15834 free_cma:0 [ 433.022707][ T9278] Node 0 active_anon:19644kB inactive_anon:19524kB active_file:27104kB inactive_file:182020kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131436kB dirty:1356kB writeback:0kB shmem:22584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11536kB pagetables:4392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 433.101601][ T1211] usb 4-1: USB disconnect, device number 21 [ 433.126054][ T9278] Node 1 active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 433.218626][ T9278] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 433.358838][ T9278] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 433.424641][ T9278] Node 0 DMA32 free:1317460kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12624kB inactive_anon:19684kB active_file:25332kB inactive_file:181952kB unevictable:1536kB writepending:1356kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:55928kB local_pcp:32076kB free_cma:0kB [ 433.456828][ T9292] netlink: 6 bytes leftover after parsing attributes in process `syz.4.767'. [ 433.519599][ T9292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.549786][ T9278] lowmem_reserve[]: 0 0 1 1 1 [ 433.554574][ T9278] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 433.592728][ T9278] lowmem_reserve[]: 0 0 0 0 0 [ 433.600444][ T9278] Node 1 Normal free:3894820kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15636kB local_pcp:5520kB free_cma:0kB [ 433.637580][ T9278] lowmem_reserve[]: 0 0 0 0 0 [ 433.643378][ T9295] FAULT_INJECTION: forcing a failure. [ 433.643378][ T9295] name failslab, interval 1, probability 0, space 0, times 0 [ 433.675999][ T9295] CPU: 0 UID: 0 PID: 9295 Comm: syz.0.769 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 433.676029][ T9295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.676043][ T9295] Call Trace: [ 433.676053][ T9295] [ 433.676062][ T9295] dump_stack_lvl+0x189/0x250 [ 433.676093][ T9295] ? __pfx____ratelimit+0x10/0x10 [ 433.676116][ T9295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.676141][ T9295] ? __pfx__printk+0x10/0x10 [ 433.676176][ T9295] ? __pfx___might_resched+0x10/0x10 [ 433.676205][ T9295] should_fail_ex+0x414/0x560 [ 433.676233][ T9295] should_failslab+0xa8/0x100 [ 433.676259][ T9295] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 433.676281][ T9295] ? __alloc_skb+0x112/0x2d0 [ 433.676316][ T9295] __alloc_skb+0x112/0x2d0 [ 433.676350][ T9295] netlink_sendmsg+0x5c6/0xb30 [ 433.676392][ T9295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.676432][ T9295] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.676453][ T9295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.676484][ T9295] __sock_sendmsg+0x21c/0x270 [ 433.676514][ T9295] ____sys_sendmsg+0x505/0x830 [ 433.676561][ T9295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.676605][ T9295] ? import_iovec+0x74/0xa0 [ 433.676639][ T9295] ___sys_sendmsg+0x21f/0x2a0 [ 433.676675][ T9295] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.676749][ T9295] ? __fget_files+0x2a/0x420 [ 433.676772][ T9295] ? __fget_files+0x3a0/0x420 [ 433.676808][ T9295] __x64_sys_sendmsg+0x19b/0x260 [ 433.676845][ T9295] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 433.676893][ T9295] ? __pfx_ksys_write+0x10/0x10 [ 433.676910][ T9295] ? rcu_is_watching+0x15/0xb0 [ 433.676939][ T9295] ? do_syscall_64+0xbe/0x3b0 [ 433.676968][ T9295] do_syscall_64+0xfa/0x3b0 [ 433.676990][ T9295] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.677013][ T9295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.677034][ T9295] ? clear_bhb_loop+0x60/0xb0 [ 433.677060][ T9295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.677081][ T9295] RIP: 0033:0x7fcc8598ebe9 [ 433.677100][ T9295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.677119][ T9295] RSP: 002b:00007fcc86769038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.677143][ T9295] RAX: ffffffffffffffda RBX: 00007fcc85bb5fa0 RCX: 00007fcc8598ebe9 [ 433.677159][ T9295] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 433.677173][ T9295] RBP: 00007fcc86769090 R08: 0000000000000000 R09: 0000000000000000 [ 433.677186][ T9295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.677198][ T9295] R13: 00007fcc85bb6038 R14: 00007fcc85bb5fa0 R15: 00007ffec2e123f8 [ 433.677233][ T9295] [ 433.965952][ T9278] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 434.130641][ T9278] Node 0 DMA32: 683*4kB (UME) 86*8kB (UME) 2*16kB (ME) 498*32kB (UME) 306*64kB (UME) 63*128kB (UM) 38*256kB (UM) 23*512kB (UME) 11*1024kB (UME) 3*2048kB (M) 301*4096kB (M) = 1318844kB [ 434.151785][ T9278] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 434.221994][ T9278] Node 1 Normal: 3*4kB (ME) 5*8kB (UE) 7*16kB (UE) 4*32kB (UE) 8*64kB (ME) 4*128kB (ME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (M) = 3894820kB [ 434.262435][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 434.262455][ T30] audit: type=1326 audit(1755585855.712:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9296 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 434.296484][ T30] audit: type=1326 audit(1755585855.712:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9296 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 434.302295][ T9278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 434.337641][ T9278] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 434.350621][ T9278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 434.353287][ T30] audit: type=1326 audit(1755585855.712:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9296 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 434.451019][ T9278] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 434.485953][ T30] audit: type=1326 audit(1755585855.712:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9296 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 434.506301][ T1211] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 434.516859][ T9278] 59071 total pagecache pages [ 434.521581][ T9278] 0 pages in swap cache [ 434.535945][ T9278] Free swap = 124996kB [ 434.540731][ T9278] Total swap = 124996kB [ 434.544932][ T9278] 2097051 pages RAM [ 434.556298][ T30] audit: type=1326 audit(1755585855.712:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9296 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 434.604604][ T9278] 0 pages HighMem/MovableOnly [ 434.614549][ T9278] 424695 pages reserved [ 434.636228][ T9278] 0 pages cma reserved [ 434.648675][ T30] audit: type=1326 audit(1755585855.722:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9296 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 434.677865][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.700591][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.977160][ T1211] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 434.990224][ T1211] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 434.999712][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.012048][ T30] audit: type=1326 audit(1755585855.722:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9296 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 435.034572][ T1211] usb 4-1: config 0 descriptor?? [ 435.260698][ T30] audit: type=1326 audit(1755585855.722:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9296 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb0918d550 code=0x7ffc0000 [ 435.365463][ T30] audit: type=1326 audit(1755585855.722:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9296 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb0918e7eb code=0x7ffc0000 [ 435.473544][ T30] audit: type=1326 audit(1755585855.722:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9296 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb0918e7eb code=0x7ffc0000 [ 435.539076][ T1211] usbhid 4-1:0.0: can't add hid device: -71 [ 435.545152][ T1211] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 435.556756][ T9309] fuse: root generation should be zero [ 435.600935][ T1211] usb 4-1: USB disconnect, device number 22 [ 435.878882][ T9315] fuseblk: Unknown parameter '' [ 438.058026][ T9336] FAULT_INJECTION: forcing a failure. [ 438.058026][ T9336] name failslab, interval 1, probability 0, space 0, times 0 [ 438.070980][ T9336] CPU: 0 UID: 0 PID: 9336 Comm: syz.4.781 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 438.071007][ T9336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.071021][ T9336] Call Trace: [ 438.071030][ T9336] [ 438.071039][ T9336] dump_stack_lvl+0x189/0x250 [ 438.071070][ T9336] ? __pfx____ratelimit+0x10/0x10 [ 438.071120][ T9336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.071145][ T9336] ? __pfx__printk+0x10/0x10 [ 438.071176][ T9336] ? __pfx___might_resched+0x10/0x10 [ 438.071201][ T9336] ? fs_reclaim_acquire+0x7d/0x100 [ 438.071230][ T9336] should_fail_ex+0x414/0x560 [ 438.071262][ T9336] should_failslab+0xa8/0x100 [ 438.071289][ T9336] __kmalloc_cache_noprof+0x70/0x3d0 [ 438.071310][ T9336] ? alloc_pipe_info+0xe9/0x4d0 [ 438.071338][ T9336] alloc_pipe_info+0xe9/0x4d0 [ 438.071363][ T9336] splice_direct_to_actor+0xa5d/0xcc0 [ 438.071388][ T9336] ? __lock_acquire+0xab9/0xd20 [ 438.071423][ T9336] ? __lock_acquire+0xab9/0xd20 [ 438.071443][ T9336] ? __pfx_direct_splice_actor+0x10/0x10 [ 438.071466][ T9336] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 438.071501][ T9336] do_splice_direct+0x181/0x270 [ 438.071527][ T9336] ? __pfx_do_splice_direct+0x10/0x10 [ 438.071551][ T9336] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 438.071583][ T9336] ? rw_verify_area+0x258/0x650 [ 438.071621][ T9336] do_sendfile+0x4da/0x7e0 [ 438.071658][ T9336] ? __pfx_do_sendfile+0x10/0x10 [ 438.071699][ T9336] __se_sys_sendfile64+0xd9/0x190 [ 438.071728][ T9336] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 438.071751][ T9336] ? rcu_is_watching+0x15/0xb0 [ 438.071781][ T9336] ? do_syscall_64+0xbe/0x3b0 [ 438.071809][ T9336] do_syscall_64+0xfa/0x3b0 [ 438.071832][ T9336] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.071855][ T9336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.071877][ T9336] ? clear_bhb_loop+0x60/0xb0 [ 438.071904][ T9336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.071924][ T9336] RIP: 0033:0x7f0eaf98ebe9 [ 438.071945][ T9336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.071964][ T9336] RSP: 002b:00007f0eb0816038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 438.071987][ T9336] RAX: ffffffffffffffda RBX: 00007f0eafbb6090 RCX: 00007f0eaf98ebe9 [ 438.072004][ T9336] RDX: 0000200000002080 RSI: 0000000000000005 RDI: 0000000000000006 [ 438.072018][ T9336] RBP: 00007f0eb0816090 R08: 0000000000000000 R09: 0000000000000000 [ 438.072032][ T9336] R10: 000000000000023b R11: 0000000000000246 R12: 0000000000000001 [ 438.072045][ T9336] R13: 00007f0eafbb6128 R14: 00007f0eafbb6090 R15: 00007fff634ee9f8 [ 438.072079][ T9336] [ 439.599097][ T9350] block nbd4: NBD_DISCONNECT [ 439.613765][ T9351] FAULT_INJECTION: forcing a failure. [ 439.613765][ T9351] name failslab, interval 1, probability 0, space 0, times 0 [ 439.630608][ T9351] CPU: 0 UID: 0 PID: 9351 Comm: syz.5.787 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 439.630638][ T9351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.630652][ T9351] Call Trace: [ 439.630662][ T9351] [ 439.630671][ T9351] dump_stack_lvl+0x189/0x250 [ 439.630703][ T9351] ? __pfx____ratelimit+0x10/0x10 [ 439.630727][ T9351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.630752][ T9351] ? __pfx__printk+0x10/0x10 [ 439.630788][ T9351] ? __pfx___might_resched+0x10/0x10 [ 439.630811][ T9351] ? fs_reclaim_acquire+0x7d/0x100 [ 439.630842][ T9351] should_fail_ex+0x414/0x560 [ 439.630871][ T9351] should_failslab+0xa8/0x100 [ 439.630899][ T9351] __kmalloc_noprof+0xcb/0x4f0 [ 439.630920][ T9351] ? bpf_test_init+0xc2/0x170 [ 439.630980][ T9351] bpf_test_init+0xc2/0x170 [ 439.631015][ T9351] bpf_prog_test_run_skb+0x1e9/0x1560 [ 439.631044][ T9351] ? __fget_files+0x2a/0x420 [ 439.631073][ T9351] ? __fget_files+0x2a/0x420 [ 439.631106][ T9351] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 439.631138][ T9351] bpf_prog_test_run+0x2c7/0x340 [ 439.631178][ T9351] __sys_bpf+0x4a4/0x860 [ 439.631220][ T9351] ? __pfx___sys_bpf+0x10/0x10 [ 439.631267][ T9351] ? ksys_write+0x22a/0x250 [ 439.631291][ T9351] ? __pfx_ksys_write+0x10/0x10 [ 439.631309][ T9351] ? rcu_is_watching+0x15/0xb0 [ 439.631342][ T9351] __x64_sys_bpf+0x7c/0x90 [ 439.631372][ T9351] do_syscall_64+0xfa/0x3b0 [ 439.631396][ T9351] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.631419][ T9351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.631441][ T9351] ? clear_bhb_loop+0x60/0xb0 [ 439.631468][ T9351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.631489][ T9351] RIP: 0033:0x7f7c0158ebe9 [ 439.631509][ T9351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.631528][ T9351] RSP: 002b:00007f7c02481038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.631551][ T9351] RAX: ffffffffffffffda RBX: 00007f7c017b5fa0 RCX: 00007f7c0158ebe9 [ 439.631567][ T9351] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 439.631581][ T9351] RBP: 00007f7c02481090 R08: 0000000000000000 R09: 0000000000000000 [ 439.631595][ T9351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.631609][ T9351] R13: 00007f7c017b6038 R14: 00007f7c017b5fa0 R15: 00007ffddf74ce28 [ 439.631644][ T9351] [ 439.912997][ T9357] FAULT_INJECTION: forcing a failure. [ 439.912997][ T9357] name failslab, interval 1, probability 0, space 0, times 0 [ 439.926286][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 439.926304][ T30] audit: type=1326 audit(1755585861.342:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 439.979640][ T9357] CPU: 0 UID: 0 PID: 9357 Comm: syz.0.788 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 439.979670][ T9357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.979683][ T9357] Call Trace: [ 439.979692][ T9357] [ 439.979701][ T9357] dump_stack_lvl+0x189/0x250 [ 439.979731][ T9357] ? __pfx____ratelimit+0x10/0x10 [ 439.979755][ T9357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.979779][ T9357] ? __pfx__printk+0x10/0x10 [ 439.979814][ T9357] ? __pfx___might_resched+0x10/0x10 [ 439.979843][ T9357] should_fail_ex+0x414/0x560 [ 439.979871][ T9357] should_failslab+0xa8/0x100 [ 439.979898][ T9357] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 439.979920][ T9357] ? __alloc_skb+0x112/0x2d0 [ 439.979954][ T9357] __alloc_skb+0x112/0x2d0 [ 439.980003][ T9357] tcp_stream_alloc_skb+0x3d/0x340 [ 439.980033][ T9357] tcp_sendmsg_locked+0xf3c/0x5650 [ 439.980082][ T9357] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 439.980141][ T9357] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 439.980165][ T9357] ? __local_bh_enable_ip+0x12d/0x1c0 [ 439.980200][ T9357] ? __local_bh_enable_ip+0x12d/0x1c0 [ 439.980238][ T9357] tcp_sendmsg+0x2f/0x50 [ 439.980264][ T9357] __sock_sendmsg+0x19c/0x270 [ 439.980293][ T9357] ____sys_sendmsg+0x52d/0x830 [ 439.980333][ T9357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.980377][ T9357] ? import_iovec+0x74/0xa0 [ 439.980412][ T9357] ___sys_sendmsg+0x21f/0x2a0 [ 439.980448][ T9357] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.980542][ T9357] ? __fget_files+0x2a/0x420 [ 439.980567][ T9357] ? __fget_files+0x3a0/0x420 [ 439.980604][ T9357] __sys_sendmmsg+0x227/0x430 [ 439.980646][ T9357] ? __pfx___sys_sendmmsg+0x10/0x10 [ 439.980682][ T9357] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 439.980738][ T9357] ? ksys_write+0x22a/0x250 [ 439.980762][ T9357] ? __pfx_ksys_write+0x10/0x10 [ 439.980779][ T9357] ? rcu_is_watching+0x15/0xb0 [ 439.980812][ T9357] __x64_sys_sendmmsg+0xa0/0xc0 [ 439.980849][ T9357] do_syscall_64+0xfa/0x3b0 [ 439.980872][ T9357] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.980895][ T9357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.980916][ T9357] ? clear_bhb_loop+0x60/0xb0 [ 439.980943][ T9357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.980963][ T9357] RIP: 0033:0x7fcc8598ebe9 [ 439.980983][ T9357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.981002][ T9357] RSP: 002b:00007fcc86769038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 439.981025][ T9357] RAX: ffffffffffffffda RBX: 00007fcc85bb5fa0 RCX: 00007fcc8598ebe9 [ 439.981041][ T9357] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 439.981054][ T9357] RBP: 00007fcc86769090 R08: 0000000000000000 R09: 0000000000000000 [ 439.981068][ T9357] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 439.981080][ T9357] R13: 00007fcc85bb6038 R14: 00007fcc85bb5fa0 R15: 00007ffec2e123f8 [ 439.981116][ T9357] [ 439.981286][ T30] audit: type=1326 audit(1755585861.342:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 440.148689][ T1211] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 440.154614][ T30] audit: type=1326 audit(1755585861.342:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 440.383951][ T30] audit: type=1326 audit(1755585861.342:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 441.048622][ T30] audit: type=1326 audit(1755585861.342:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 441.072796][ T30] audit: type=1326 audit(1755585861.342:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 441.095150][ T30] audit: type=1326 audit(1755585861.342:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 441.148680][ T30] audit: type=1326 audit(1755585861.342:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 441.172908][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.199394][ T30] audit: type=1326 audit(1755585861.342:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 441.452914][ T30] audit: type=1326 audit(1755585861.342:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.2.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d3898d550 code=0x7ffc0000 [ 441.484639][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.504931][ T1211] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 441.536081][ T1211] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.594236][ T1211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.699273][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 442.724963][ T24] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 442.820149][ T1211] usb 3-1: config 0 descriptor?? [ 443.087409][ T1211] usbhid 3-1:0.0: can't add hid device: -71 [ 443.093504][ T1211] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 443.203258][ T1211] usb 3-1: USB disconnect, device number 16 [ 443.265089][ T9376] fido_id[9376]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 443.775765][ T9384] netlink: 292 bytes leftover after parsing attributes in process `syz.2.794'. [ 443.916036][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 444.579726][ T24] usb 6-1: device descriptor read/64, error -71 [ 444.845988][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 444.934784][ T9392] xt_CT: No such helper "snmp" [ 444.996060][ T24] usb 6-1: device descriptor read/64, error -71 [ 445.108555][ T24] usb usb6-port1: attempt power cycle [ 445.155267][ T9400] FAULT_INJECTION: forcing a failure. [ 445.155267][ T9400] name failslab, interval 1, probability 0, space 0, times 0 [ 445.168149][ T9400] CPU: 0 UID: 0 PID: 9400 Comm: syz.2.801 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 445.168169][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.168178][ T9400] Call Trace: [ 445.168185][ T9400] [ 445.168191][ T9400] dump_stack_lvl+0x189/0x250 [ 445.168212][ T9400] ? __pfx____ratelimit+0x10/0x10 [ 445.168229][ T9400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.168246][ T9400] ? __pfx__printk+0x10/0x10 [ 445.168268][ T9400] ? __pfx___might_resched+0x10/0x10 [ 445.168286][ T9400] ? fs_reclaim_acquire+0x7d/0x100 [ 445.168308][ T9400] should_fail_ex+0x414/0x560 [ 445.168328][ T9400] should_failslab+0xa8/0x100 [ 445.168346][ T9400] __kmalloc_noprof+0xcb/0x4f0 [ 445.168361][ T9400] ? tomoyo_encode+0x28b/0x550 [ 445.168384][ T9400] tomoyo_encode+0x28b/0x550 [ 445.168409][ T9400] tomoyo_realpath_from_path+0x58d/0x5d0 [ 445.168438][ T9400] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 445.168457][ T9400] tomoyo_path_number_perm+0x1e8/0x5a0 [ 445.168484][ T9400] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 445.168529][ T9400] ? __lock_acquire+0xab9/0xd20 [ 445.168570][ T9400] ? __fget_files+0x2a/0x420 [ 445.168591][ T9400] ? __fget_files+0x2a/0x420 [ 445.168607][ T9400] ? __fget_files+0x3a0/0x420 [ 445.168623][ T9400] ? __fget_files+0x2a/0x420 [ 445.168644][ T9400] security_file_ioctl+0xcb/0x2d0 [ 445.168663][ T9400] __se_sys_ioctl+0x47/0x170 [ 445.168689][ T9400] do_syscall_64+0xfa/0x3b0 [ 445.168705][ T9400] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.168728][ T9400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.168743][ T9400] ? clear_bhb_loop+0x60/0xb0 [ 445.168762][ T9400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.168777][ T9400] RIP: 0033:0x7f2d3898ebe9 [ 445.168791][ T9400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.168804][ T9400] RSP: 002b:00007f2d36bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 445.168820][ T9400] RAX: ffffffffffffffda RBX: 00007f2d38bb5fa0 RCX: 00007f2d3898ebe9 [ 445.168832][ T9400] RDX: 0000200000000200 RSI: 00000000c03064b7 RDI: 0000000000000005 [ 445.168842][ T9400] RBP: 00007f2d36bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 445.168851][ T9400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.168861][ T9400] R13: 00007f2d38bb6038 R14: 00007f2d38bb5fa0 R15: 00007ffecfcbd148 [ 445.168885][ T9400] [ 445.168907][ T9400] ERROR: Out of memory at tomoyo_realpath_from_path. [ 445.422066][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.429240][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.446953][ T9403] FAULT_INJECTION: forcing a failure. [ 445.446953][ T9403] name failslab, interval 1, probability 0, space 0, times 0 [ 445.460963][ T9403] CPU: 1 UID: 0 PID: 9403 Comm: syz.0.800 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 445.460992][ T9403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.461006][ T9403] Call Trace: [ 445.461015][ T9403] [ 445.461024][ T9403] dump_stack_lvl+0x189/0x250 [ 445.461054][ T9403] ? __pfx____ratelimit+0x10/0x10 [ 445.461078][ T9403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.461102][ T9403] ? __pfx__printk+0x10/0x10 [ 445.461137][ T9403] ? __pfx___might_resched+0x10/0x10 [ 445.461166][ T9403] should_fail_ex+0x414/0x560 [ 445.461195][ T9403] should_failslab+0xa8/0x100 [ 445.461220][ T9403] __kmalloc_noprof+0xcb/0x4f0 [ 445.461240][ T9403] ? sock_kmalloc+0xd6/0x160 [ 445.461266][ T9403] sock_kmalloc+0xd6/0x160 [ 445.461291][ T9403] af_alg_alloc_areq+0x8d/0x260 [ 445.461312][ T9403] skcipher_recvmsg+0x356/0x11c0 [ 445.461356][ T9403] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 445.461381][ T9403] ? __lock_acquire+0xab9/0xd20 [ 445.461401][ T9403] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 445.461421][ T9403] ? security_socket_recvmsg+0x7e/0x2e0 [ 445.461436][ T9403] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 445.461462][ T9403] sock_recvmsg+0x22c/0x270 [ 445.461484][ T9403] ____sys_recvmsg+0x1c9/0x460 [ 445.461505][ T9403] ? __pfx_____sys_recvmsg+0x10/0x10 [ 445.461533][ T9403] ? import_iovec+0x74/0xa0 [ 445.461557][ T9403] ___sys_recvmsg+0x1b5/0x510 [ 445.461576][ T9403] ? __pfx____sys_recvmsg+0x10/0x10 [ 445.461610][ T9403] ? __fget_files+0x3a0/0x420 [ 445.461636][ T9403] __x64_sys_recvmsg+0x198/0x260 [ 445.461653][ T9403] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 445.461676][ T9403] ? __pfx_ksys_write+0x10/0x10 [ 445.461689][ T9403] ? rcu_is_watching+0x15/0xb0 [ 445.461715][ T9403] ? do_syscall_64+0xbe/0x3b0 [ 445.461736][ T9403] do_syscall_64+0xfa/0x3b0 [ 445.461753][ T9403] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.461769][ T9403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.461784][ T9403] ? clear_bhb_loop+0x60/0xb0 [ 445.461803][ T9403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.461818][ T9403] RIP: 0033:0x7fcc8598ebe9 [ 445.461832][ T9403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.461846][ T9403] RSP: 002b:00007fcc86727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 445.461862][ T9403] RAX: ffffffffffffffda RBX: 00007fcc85bb6180 RCX: 00007fcc8598ebe9 [ 445.461874][ T9403] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 445.461884][ T9403] RBP: 00007fcc86727090 R08: 0000000000000000 R09: 0000000000000000 [ 445.461894][ T9403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.461903][ T9403] R13: 00007fcc85bb6218 R14: 00007fcc85bb6180 R15: 00007ffec2e123f8 [ 445.461927][ T9403] [ 445.805941][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 445.826615][ T24] usb 6-1: device descriptor read/8, error -71 [ 446.076063][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 446.117730][ T24] usb 6-1: device descriptor read/8, error -71 [ 446.389249][ T24] usb usb6-port1: unable to enumerate USB device [ 446.906019][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 446.906040][ T30] audit: type=1326 audit(1755585868.282:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9408 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaf98ebe9 code=0x7ffc0000 [ 446.941809][ T30] audit: type=1326 audit(1755585868.282:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9408 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaf98ebe9 code=0x7ffc0000 [ 446.964156][ T30] audit: type=1326 audit(1755585868.282:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9408 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaf98ebe9 code=0x7ffc0000 [ 446.986182][ T30] audit: type=1326 audit(1755585868.282:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9408 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaf98ebe9 code=0x7ffc0000 [ 447.007576][ C0] vkms_vblank_simulate: vblank timer overrun [ 447.014220][ T30] audit: type=1326 audit(1755585868.292:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9408 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f0eaf98ebe9 code=0x7ffc0000 [ 447.035894][ T30] audit: type=1326 audit(1755585868.292:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9408 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaf98ebe9 code=0x7ffc0000 [ 447.057296][ C0] vkms_vblank_simulate: vblank timer overrun [ 447.064342][ T30] audit: type=1326 audit(1755585868.292:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9408 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaf98ebe9 code=0x7ffc0000 [ 447.098453][ T30] audit: type=1326 audit(1755585868.302:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9408 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaf98ebe9 code=0x7ffc0000 [ 447.137435][ T9412] netem: incorrect ge model size [ 447.142879][ T9412] netem: change failed [ 447.147284][ T30] audit: type=1326 audit(1755585868.302:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9408 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaf98ebe9 code=0x7ffc0000 [ 447.174273][ T30] audit: type=1326 audit(1755585868.322:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9408 comm="syz.4.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0eaf98e7eb code=0x7ffc0000 [ 447.510548][ T9412] netlink: 16 bytes leftover after parsing attributes in process `syz.5.805'. [ 447.894704][ T9419] FAULT_INJECTION: forcing a failure. [ 447.894704][ T9419] name failslab, interval 1, probability 0, space 0, times 0 [ 447.990380][ T9420] mkiss: ax0: crc mode is auto. [ 448.530128][ T9419] CPU: 0 UID: 0 PID: 9419 Comm: syz.3.806 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 448.530170][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.530184][ T9419] Call Trace: [ 448.530193][ T9419] [ 448.530204][ T9419] dump_stack_lvl+0x189/0x250 [ 448.530234][ T9419] ? __pfx____ratelimit+0x10/0x10 [ 448.530259][ T9419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.530284][ T9419] ? __pfx__printk+0x10/0x10 [ 448.530320][ T9419] ? __pfx___might_resched+0x10/0x10 [ 448.530343][ T9419] ? fs_reclaim_acquire+0x7d/0x100 [ 448.530376][ T9419] should_fail_ex+0x414/0x560 [ 448.530406][ T9419] should_failslab+0xa8/0x100 [ 448.530433][ T9419] __kmalloc_cache_noprof+0x70/0x3d0 [ 448.530461][ T9419] ? alloc_mnt_ns+0xb1/0x410 [ 448.530491][ T9419] alloc_mnt_ns+0xb1/0x410 [ 448.530523][ T9419] ? vfs_clean_context+0x16e/0x220 [ 448.530554][ T9419] __se_sys_fsmount+0x55f/0x880 [ 448.530587][ T9419] ? __pfx___se_sys_fsmount+0x10/0x10 [ 448.530611][ T9419] ? rcu_is_watching+0x15/0xb0 [ 448.530642][ T9419] ? do_syscall_64+0xbe/0x3b0 [ 448.530671][ T9419] do_syscall_64+0xfa/0x3b0 [ 448.530698][ T9419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.530719][ T9419] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 448.530741][ T9419] ? clear_bhb_loop+0x60/0xb0 [ 448.530768][ T9419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.530790][ T9419] RIP: 0033:0x7fbb0918ebe9 [ 448.530809][ T9419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.530827][ T9419] RSP: 002b:00007fbb0a0c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 448.530851][ T9419] RAX: ffffffffffffffda RBX: 00007fbb093b5fa0 RCX: 00007fbb0918ebe9 [ 448.530867][ T9419] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000003 [ 448.530880][ T9419] RBP: 00007fbb0a0c1090 R08: 0000000000000000 R09: 0000000000000000 [ 448.530894][ T9419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.530907][ T9419] R13: 00007fbb093b6038 R14: 00007fbb093b5fa0 R15: 00007ffc04becf58 [ 448.530943][ T9419] [ 448.742347][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.064341][ T5906] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 450.240668][ T5906] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 451.768313][ T9450] tmpfs: Cannot change global quota limit on remount [ 452.518706][ T9458] FAULT_INJECTION: forcing a failure. [ 452.518706][ T9458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.576198][ T9458] CPU: 0 UID: 0 PID: 9458 Comm: syz.2.817 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 452.576229][ T9458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.576243][ T9458] Call Trace: [ 452.576252][ T9458] [ 452.576262][ T9458] dump_stack_lvl+0x189/0x250 [ 452.576293][ T9458] ? __pfx____ratelimit+0x10/0x10 [ 452.576318][ T9458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.576343][ T9458] ? __pfx__printk+0x10/0x10 [ 452.576371][ T9458] ? __might_fault+0xb0/0x130 [ 452.576406][ T9458] should_fail_ex+0x414/0x560 [ 452.576436][ T9458] _copy_from_iter+0x1db/0x16f0 [ 452.576475][ T9458] ? policy_nodemask+0x27c/0x720 [ 452.576497][ T9458] ? __pfx__copy_from_iter+0x10/0x10 [ 452.576533][ T9458] ? set_page_refcounted+0xa0/0x1e0 [ 452.576556][ T9458] ? page_copy_sane+0x4e/0x280 [ 452.576586][ T9458] copy_page_from_iter+0xdd/0x170 [ 452.576620][ T9458] tun_get_user+0x1c4d/0x3ce0 [ 452.576651][ T9458] ? tun_get_user+0x693/0x3ce0 [ 452.576698][ T9458] ? __pfx_tun_get_user+0x10/0x10 [ 452.576736][ T9458] ? __lock_acquire+0xab9/0xd20 [ 452.576765][ T9458] ? ref_tracker_alloc+0x318/0x460 [ 452.576787][ T9458] ? __lock_acquire+0xab9/0xd20 [ 452.576810][ T9458] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 452.576841][ T9458] ? tun_get+0x1c/0x2f0 [ 452.576875][ T9458] ? tun_get+0x1c/0x2f0 [ 452.576902][ T9458] ? tun_get+0x1c/0x2f0 [ 452.576935][ T9458] tun_chr_write_iter+0x113/0x200 [ 452.576966][ T9458] vfs_write+0x54b/0xa90 [ 452.576993][ T9458] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 452.577023][ T9458] ? __pfx_vfs_write+0x10/0x10 [ 452.577055][ T9458] ? __fget_files+0x2a/0x420 [ 452.577099][ T9458] ksys_write+0x145/0x250 [ 452.577123][ T9458] ? __pfx_ksys_write+0x10/0x10 [ 452.577151][ T9458] ? do_syscall_64+0xbe/0x3b0 [ 452.577181][ T9458] do_syscall_64+0xfa/0x3b0 [ 452.577204][ T9458] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.577227][ T9458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.577250][ T9458] ? clear_bhb_loop+0x60/0xb0 [ 452.577277][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.577299][ T9458] RIP: 0033:0x7f2d3898d69f [ 452.577318][ T9458] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 452.577338][ T9458] RSP: 002b:00007f2d36bf6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 452.577362][ T9458] RAX: ffffffffffffffda RBX: 00007f2d38bb5fa0 RCX: 00007f2d3898d69f [ 452.577378][ T9458] RDX: 0000000000000046 RSI: 0000200000000080 RDI: 00000000000000c8 [ 452.577392][ T9458] RBP: 00007f2d36bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 452.577405][ T9458] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 452.577418][ T9458] R13: 00007f2d38bb6038 R14: 00007f2d38bb5fa0 R15: 00007ffecfcbd148 [ 452.577453][ T9458] [ 457.575660][ T9495] FAULT_INJECTION: forcing a failure. [ 457.575660][ T9495] name failslab, interval 1, probability 0, space 0, times 0 [ 457.588347][ T9495] CPU: 0 UID: 0 PID: 9495 Comm: syz.0.827 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 457.588367][ T9495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.588377][ T9495] Call Trace: [ 457.588384][ T9495] [ 457.588390][ T9495] dump_stack_lvl+0x189/0x250 [ 457.588411][ T9495] ? __pfx____ratelimit+0x10/0x10 [ 457.588428][ T9495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.588444][ T9495] ? __pfx__printk+0x10/0x10 [ 457.588468][ T9495] ? __pfx___might_resched+0x10/0x10 [ 457.588506][ T9495] should_fail_ex+0x414/0x560 [ 457.588526][ T9495] should_failslab+0xa8/0x100 [ 457.588546][ T9495] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 457.588563][ T9495] ? __alloc_skb+0x112/0x2d0 [ 457.588588][ T9495] __alloc_skb+0x112/0x2d0 [ 457.588613][ T9495] netlink_sendmsg+0x5c6/0xb30 [ 457.588644][ T9495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.588672][ T9495] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.588688][ T9495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.588716][ T9495] __sock_sendmsg+0x21c/0x270 [ 457.588738][ T9495] ____sys_sendmsg+0x505/0x830 [ 457.588767][ T9495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.588797][ T9495] ? import_iovec+0x74/0xa0 [ 457.588822][ T9495] ___sys_sendmsg+0x21f/0x2a0 [ 457.588847][ T9495] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.588898][ T9495] ? __fget_files+0x2a/0x420 [ 457.588915][ T9495] ? __fget_files+0x3a0/0x420 [ 457.588940][ T9495] __x64_sys_sendmsg+0x19b/0x260 [ 457.588966][ T9495] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.588998][ T9495] ? __pfx_ksys_write+0x10/0x10 [ 457.589016][ T9495] ? do_syscall_64+0xbe/0x3b0 [ 457.589036][ T9495] do_syscall_64+0xfa/0x3b0 [ 457.589052][ T9495] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.589068][ T9495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.589083][ T9495] ? clear_bhb_loop+0x60/0xb0 [ 457.589102][ T9495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.589117][ T9495] RIP: 0033:0x7fcc8598ebe9 [ 457.589131][ T9495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.589145][ T9495] RSP: 002b:00007fcc86769038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.589161][ T9495] RAX: ffffffffffffffda RBX: 00007fcc85bb5fa0 RCX: 00007fcc8598ebe9 [ 457.589173][ T9495] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000008 [ 457.589183][ T9495] RBP: 00007fcc86769090 R08: 0000000000000000 R09: 0000000000000000 [ 457.589193][ T9495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.589202][ T9495] R13: 00007fcc85bb6038 R14: 00007fcc85bb5fa0 R15: 00007ffec2e123f8 [ 457.589225][ T9495] [ 458.615759][ T9505] vlan2: entered allmulticast mode [ 458.626047][ T9505] macvlan0: entered allmulticast mode [ 458.666128][ T9505] veth1_vlan: entered allmulticast mode [ 459.867445][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 460.126173][ T5906] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 460.214072][ T9501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.296010][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 460.311719][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.343952][ T5906] usb 1-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 460.372462][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.411117][ T5906] usb 1-1: config 0 descriptor?? [ 460.440595][ T5906] usb 1-1: Found UVC 0.00 device (05a9:2630) [ 460.460322][ T5906] usb 1-1: No valid video chain found. [ 460.659265][ T5906] usb 1-1: USB disconnect, device number 14 [ 461.614668][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 461.696200][ T7238] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 461.737813][ T9] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 462.031770][ T7238] usb 6-1: Using ep0 maxpacket: 32 [ 462.265340][ T7238] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.305438][ T7238] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 462.320430][ T7238] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 462.360323][ T7238] usb 6-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 462.442087][ T7238] usb 6-1: Product: syz [ 462.595552][ T7238] usb 6-1: Manufacturer: syz [ 462.640445][ T7238] usb 6-1: SerialNumber: syz [ 463.054196][ T9551] FAULT_INJECTION: forcing a failure. [ 463.054196][ T9551] name failslab, interval 1, probability 0, space 0, times 0 [ 463.142392][ T9551] CPU: 1 UID: 0 PID: 9551 Comm: syz.2.840 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 463.142422][ T9551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 463.142435][ T9551] Call Trace: [ 463.142444][ T9551] [ 463.142453][ T9551] dump_stack_lvl+0x189/0x250 [ 463.142482][ T9551] ? __pfx____ratelimit+0x10/0x10 [ 463.142508][ T9551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.142533][ T9551] ? __pfx__printk+0x10/0x10 [ 463.142563][ T9551] ? __pfx___might_resched+0x10/0x10 [ 463.142587][ T9551] ? fs_reclaim_acquire+0x7d/0x100 [ 463.142619][ T9551] should_fail_ex+0x414/0x560 [ 463.142648][ T9551] should_failslab+0xa8/0x100 [ 463.142672][ T9551] __kmalloc_noprof+0xcb/0x4f0 [ 463.142692][ T9551] ? tomoyo_encode+0x28b/0x550 [ 463.142722][ T9551] tomoyo_encode+0x28b/0x550 [ 463.142756][ T9551] tomoyo_realpath_from_path+0x58d/0x5d0 [ 463.142797][ T9551] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 463.142822][ T9551] tomoyo_path_number_perm+0x1e8/0x5a0 [ 463.142850][ T9551] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 463.142894][ T9551] ? __lock_acquire+0xab9/0xd20 [ 463.142941][ T9551] ? __fget_files+0x2a/0x420 [ 463.142970][ T9551] ? __fget_files+0x2a/0x420 [ 463.142994][ T9551] ? __fget_files+0x3a0/0x420 [ 463.143018][ T9551] ? __fget_files+0x2a/0x420 [ 463.143048][ T9551] security_file_ioctl+0xcb/0x2d0 [ 463.143078][ T9551] __se_sys_ioctl+0x47/0x170 [ 463.143114][ T9551] do_syscall_64+0xfa/0x3b0 [ 463.143139][ T9551] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.143163][ T9551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.143199][ T9551] ? clear_bhb_loop+0x60/0xb0 [ 463.143226][ T9551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.143248][ T9551] RIP: 0033:0x7f2d3898ebe9 [ 463.143268][ T9551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.143287][ T9551] RSP: 002b:00007f2d36bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.143310][ T9551] RAX: ffffffffffffffda RBX: 00007f2d38bb5fa0 RCX: 00007f2d3898ebe9 [ 463.143326][ T9551] RDX: 0000200000000300 RSI: 00000000c01864ba RDI: 0000000000000003 [ 463.143341][ T9551] RBP: 00007f2d36bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 463.143355][ T9551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.143368][ T9551] R13: 00007f2d38bb6038 R14: 00007f2d38bb5fa0 R15: 00007ffecfcbd148 [ 463.143401][ T9551] [ 463.143872][ T9533] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 463.391625][ T9551] ERROR: Out of memory at tomoyo_realpath_from_path. [ 464.532434][ T7238] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 464.865973][ T7238] cdc_ncm 6-1:1.0: bind() failure [ 465.006080][ T7238] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 465.016139][ T7238] cdc_ncm 6-1:1.1: bind() failure [ 465.421461][ T9568] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 465.886448][ T7238] usb 6-1: USB disconnect, device number 16 [ 465.892104][ T9574] Cannot find add_set index 0 as target [ 466.081504][ T9586] FAULT_INJECTION: forcing a failure. [ 466.081504][ T9586] name failslab, interval 1, probability 0, space 0, times 0 [ 466.492570][ T9586] CPU: 1 UID: 0 PID: 9586 Comm: syz.5.850 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 466.492600][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 466.492613][ T9586] Call Trace: [ 466.492621][ T9586] [ 466.492630][ T9586] dump_stack_lvl+0x189/0x250 [ 466.492659][ T9586] ? __pfx____ratelimit+0x10/0x10 [ 466.492681][ T9586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.492705][ T9586] ? __pfx__printk+0x10/0x10 [ 466.492738][ T9586] ? __pfx___might_resched+0x10/0x10 [ 466.492766][ T9586] should_fail_ex+0x414/0x560 [ 466.492794][ T9586] should_failslab+0xa8/0x100 [ 466.492819][ T9586] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 466.492842][ T9586] ? __alloc_skb+0x112/0x2d0 [ 466.492877][ T9586] __alloc_skb+0x112/0x2d0 [ 466.492923][ T9586] netlink_sendmsg+0x5c6/0xb30 [ 466.492964][ T9586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.493003][ T9586] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.493025][ T9586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.493057][ T9586] __sock_sendmsg+0x21c/0x270 [ 466.493086][ T9586] ____sys_sendmsg+0x52d/0x830 [ 466.493125][ T9586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.493166][ T9586] ? import_iovec+0x74/0xa0 [ 466.493200][ T9586] ___sys_sendmsg+0x21f/0x2a0 [ 466.493235][ T9586] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.493307][ T9586] ? __fget_files+0x2a/0x420 [ 466.493330][ T9586] ? __fget_files+0x3a0/0x420 [ 466.493365][ T9586] __sys_sendmmsg+0x227/0x430 [ 466.493405][ T9586] ? __pfx___sys_sendmmsg+0x10/0x10 [ 466.493436][ T9586] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 466.493489][ T9586] ? ksys_write+0x22a/0x250 [ 466.493512][ T9586] ? __pfx_ksys_write+0x10/0x10 [ 466.493529][ T9586] ? rcu_is_watching+0x15/0xb0 [ 466.493560][ T9586] __x64_sys_sendmmsg+0xa0/0xc0 [ 466.493596][ T9586] do_syscall_64+0xfa/0x3b0 [ 466.493619][ T9586] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.493641][ T9586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.493662][ T9586] ? clear_bhb_loop+0x60/0xb0 [ 466.493688][ T9586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.493709][ T9586] RIP: 0033:0x7f7c0158ebe9 [ 466.493727][ T9586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.493745][ T9586] RSP: 002b:00007f7c02481038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 466.493767][ T9586] RAX: ffffffffffffffda RBX: 00007f7c017b5fa0 RCX: 00007f7c0158ebe9 [ 466.493783][ T9586] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000005 [ 466.493798][ T9586] RBP: 00007f7c02481090 R08: 0000000000000000 R09: 0000000000000000 [ 466.493812][ T9586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.493825][ T9586] R13: 00007f7c017b6038 R14: 00007f7c017b5fa0 R15: 00007ffddf74ce28 [ 466.493858][ T9586] [ 467.009314][ T9592] FAULT_INJECTION: forcing a failure. [ 467.009314][ T9592] name failslab, interval 1, probability 0, space 0, times 0 [ 467.022712][ T9592] CPU: 0 UID: 0 PID: 9592 Comm: syz.4.851 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 467.022743][ T9592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.022756][ T9592] Call Trace: [ 467.022764][ T9592] [ 467.022772][ T9592] dump_stack_lvl+0x189/0x250 [ 467.022794][ T9592] ? __pfx____ratelimit+0x10/0x10 [ 467.022810][ T9592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.022828][ T9592] ? __pfx__printk+0x10/0x10 [ 467.022853][ T9592] ? __pfx___might_resched+0x10/0x10 [ 467.022873][ T9592] should_fail_ex+0x414/0x560 [ 467.022898][ T9592] should_failslab+0xa8/0x100 [ 467.022916][ T9592] kmem_cache_alloc_noprof+0x73/0x3c0 [ 467.022932][ T9592] ? mas_alloc_nodes+0x2e9/0x8e0 [ 467.022951][ T9592] mas_alloc_nodes+0x2e9/0x8e0 [ 467.022974][ T9592] mas_preallocate+0x3ad/0x6f0 [ 467.022993][ T9592] ? __pfx_mas_preallocate+0x10/0x10 [ 467.023016][ T9592] ? __mas_set_range+0x12f/0x3c0 [ 467.023044][ T9592] __split_vma+0x2fa/0xa00 [ 467.023074][ T9592] ? __pfx___split_vma+0x10/0x10 [ 467.023103][ T9592] ? preempt_schedule_irq+0xde/0x150 [ 467.023119][ T9592] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 467.023141][ T9592] vms_gather_munmap_vmas+0x2de/0x12b0 [ 467.023163][ T9592] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.023188][ T9592] ? mtree_range_walk+0x6a7/0x840 [ 467.023204][ T9592] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 467.023241][ T9592] mmap_region+0x678/0x1f30 [ 467.023279][ T9592] ? __pfx_mmap_region+0x10/0x10 [ 467.023302][ T9592] ? kvm_sched_clock_read+0x11/0x20 [ 467.023315][ T9592] ? sched_clock+0x3f/0x60 [ 467.023380][ T9592] ? __pfx___schedule+0x10/0x10 [ 467.023394][ T9592] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 467.023420][ T9592] ? cap_mmap_addr+0xb0/0x100 [ 467.023439][ T9592] ? bpf_lsm_mmap_addr+0x9/0x20 [ 467.023455][ T9592] ? security_mmap_addr+0x71/0x270 [ 467.023479][ T9592] do_mmap+0xc45/0x10d0 [ 467.023513][ T9592] ? __pfx_do_mmap+0x10/0x10 [ 467.023535][ T9592] ? down_write_killable+0x178/0x230 [ 467.023557][ T9592] ? __pfx_down_write_killable+0x10/0x10 [ 467.023590][ T9592] vm_mmap_pgoff+0x31b/0x4c0 [ 467.023619][ T9592] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 467.023639][ T9592] ? ksys_write+0x22a/0x250 [ 467.023656][ T9592] ? __pfx_ksys_write+0x10/0x10 [ 467.023671][ T9592] ? ksys_mmap_pgoff+0xf4/0x760 [ 467.023686][ T9592] ? __x64_sys_mmap+0x7f/0x140 [ 467.023704][ T9592] do_syscall_64+0xfa/0x3b0 [ 467.023722][ T9592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.023737][ T9592] ? asm_sysvec_call_function_single+0x1a/0x20 [ 467.023753][ T9592] ? clear_bhb_loop+0x60/0xb0 [ 467.023771][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.023786][ T9592] RIP: 0033:0x7f0eaf98ebe9 [ 467.023801][ T9592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.023815][ T9592] RSP: 002b:00007f0eb07f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 467.023831][ T9592] RAX: ffffffffffffffda RBX: 00007f0eafbb6180 RCX: 00007f0eaf98ebe9 [ 467.023843][ T9592] RDX: 0000000001000001 RSI: 0000000000002000 RDI: 0000200000330000 [ 467.023854][ T9592] RBP: 00007f0eb07f5090 R08: ffffffffffffffff R09: 0000000000000000 [ 467.023864][ T9592] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001 [ 467.023874][ T9592] R13: 00007f0eafbb6218 R14: 00007f0eafbb6180 R15: 00007fff634ee9f8 [ 467.023898][ T9592] [ 467.354090][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.368373][ T9591] overlayfs: missing 'workdir' [ 468.766721][ T9605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.782359][ T9605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.064989][ T9636] input: syz0 as /devices/virtual/input/input24 [ 471.356405][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 471.356426][ T30] audit: type=1326 audit(1755585891.800:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9637 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 471.384038][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.446032][ T9640] netlink: 'syz.4.866': attribute type 3 has an invalid length. [ 471.469104][ T30] audit: type=1326 audit(1755585891.800:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9637 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 471.502596][ T30] audit: type=1326 audit(1755585891.870:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9637 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 471.531441][ T30] audit: type=1326 audit(1755585891.880:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9637 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 471.552847][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.677045][ T30] audit: type=1326 audit(1755585891.880:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9637 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 472.764602][ T30] audit: type=1326 audit(1755585891.880:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9637 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb0918d550 code=0x7ffc0000 [ 472.850960][ T30] audit: type=1326 audit(1755585891.880:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9637 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 473.015949][ T30] audit: type=1326 audit(1755585891.880:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9637 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 473.552107][ T30] audit: type=1326 audit(1755585891.880:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9637 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 473.665006][ T30] audit: type=1326 audit(1755585891.880:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9637 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb0918ebe9 code=0x7ffc0000 [ 473.721741][ T9653] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 473.831274][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.876'. [ 474.214286][ T9671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.364909][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 476.451120][ T9710] netlink: 'syz.0.889': attribute type 27 has an invalid length. [ 476.473038][ T9710] netlink: 164 bytes leftover after parsing attributes in process `syz.0.889'. [ 476.699507][ T9713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.890'. [ 478.095999][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 479.096149][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 479.113366][ T9699] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 479.123725][ T9699] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 479.129799][ T9726] sctp: [Deprecated]: syz.3.893 (pid 9726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.129799][ T9726] Use struct sctp_sack_info instead [ 480.868888][ T9755] FAULT_INJECTION: forcing a failure. [ 480.868888][ T9755] name failslab, interval 1, probability 0, space 0, times 0 [ 480.882542][ T9755] CPU: 0 UID: 0 PID: 9755 Comm: syz.5.904 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 480.882572][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 480.882588][ T9755] Call Trace: [ 480.882604][ T9755] [ 480.882614][ T9755] dump_stack_lvl+0x189/0x250 [ 480.882644][ T9755] ? __pfx____ratelimit+0x10/0x10 [ 480.882668][ T9755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.882693][ T9755] ? __pfx__printk+0x10/0x10 [ 480.882728][ T9755] ? __pfx___might_resched+0x10/0x10 [ 480.882758][ T9755] should_fail_ex+0x414/0x560 [ 480.882787][ T9755] should_failslab+0xa8/0x100 [ 480.882813][ T9755] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 480.882836][ T9755] ? __alloc_skb+0x112/0x2d0 [ 480.882871][ T9755] __alloc_skb+0x112/0x2d0 [ 480.882907][ T9755] netlink_sendmsg+0x5c6/0xb30 [ 480.882949][ T9755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.882990][ T9755] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 480.883013][ T9755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.883045][ T9755] __sock_sendmsg+0x21c/0x270 [ 480.883076][ T9755] ____sys_sendmsg+0x505/0x830 [ 480.883116][ T9755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.883161][ T9755] ? import_iovec+0x74/0xa0 [ 480.883197][ T9755] ___sys_sendmsg+0x21f/0x2a0 [ 480.883233][ T9755] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.883310][ T9755] ? __fget_files+0x2a/0x420 [ 480.883334][ T9755] ? __fget_files+0x3a0/0x420 [ 480.883370][ T9755] __x64_sys_sendmsg+0x19b/0x260 [ 480.883408][ T9755] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.883453][ T9755] ? __pfx_ksys_write+0x10/0x10 [ 480.883471][ T9755] ? rcu_is_watching+0x15/0xb0 [ 480.883500][ T9755] ? do_syscall_64+0xbe/0x3b0 [ 480.883529][ T9755] do_syscall_64+0xfa/0x3b0 [ 480.883552][ T9755] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.883575][ T9755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.883602][ T9755] ? clear_bhb_loop+0x60/0xb0 [ 480.883628][ T9755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.883650][ T9755] RIP: 0033:0x7f7c0158ebe9 [ 480.883669][ T9755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.883689][ T9755] RSP: 002b:00007f7c02481038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.883712][ T9755] RAX: ffffffffffffffda RBX: 00007f7c017b5fa0 RCX: 00007f7c0158ebe9 [ 480.883729][ T9755] RDX: 0000000000040010 RSI: 0000200000006040 RDI: 0000000000000007 [ 480.883744][ T9755] RBP: 00007f7c02481090 R08: 0000000000000000 R09: 0000000000000000 [ 480.883757][ T9755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.883770][ T9755] R13: 00007f7c017b6038 R14: 00007f7c017b5fa0 R15: 00007ffddf74ce28 [ 480.883805][ T9755] [ 481.146176][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 481.156341][ T7238] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 481.301557][ T9735] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 481.353489][ T7238] usb 1-1: Using ep0 maxpacket: 8 [ 481.418683][ T7238] usb 1-1: unable to get BOS descriptor or descriptor too short [ 481.453905][ T7238] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 481.483551][ T7238] usb 1-1: config 0 has no interface number 0 [ 481.513963][ T7238] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 481.696074][ T7238] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 481.706198][ T7238] usb 1-1: config 0 interface 88 has no altsetting 0 [ 481.854310][ T7238] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 481.863927][ T7238] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 481.886096][ T7238] usb 1-1: Product: syz [ 481.893625][ T7238] usb 1-1: Manufacturer: syz [ 481.913459][ T7238] usb 1-1: SerialNumber: syz [ 481.929231][ T7238] usb 1-1: config 0 descriptor?? [ 482.002792][ T9771] lo speed is unknown, defaulting to 1000 [ 482.009564][ T9771] lo speed is unknown, defaulting to 1000 [ 482.025931][ T9771] lo speed is unknown, defaulting to 1000 [ 482.066244][ T9771] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 482.180132][ T9771] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 482.343420][ T9772] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 482.350967][ T9772] overlayfs: failed to set xattr on upper [ 482.356833][ T9772] overlayfs: ...falling back to redirect_dir=nofollow. [ 482.363785][ T9772] overlayfs: ...falling back to index=off. [ 482.470457][ T9771] lo speed is unknown, defaulting to 1000 [ 482.489779][ T9771] lo speed is unknown, defaulting to 1000 [ 482.508406][ T9771] lo speed is unknown, defaulting to 1000 [ 482.529755][ T9771] lo speed is unknown, defaulting to 1000 [ 482.536952][ T9771] lo speed is unknown, defaulting to 1000 [ 482.627535][ T9752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.733636][ T9752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.777062][ T7238] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input25 [ 482.835767][ T7238] usb 1-1: USB disconnect, device number 15 [ 482.973109][ T5881] udevd[5881]: Error opening device "/dev/input/event4": No such file or directory [ 483.014592][ T5881] udevd[5881]: Unable to EVIOCGABS device "/dev/input/event4" [ 483.061159][ T5881] udevd[5881]: Unable to EVIOCGABS device "/dev/input/event4" [ 483.583517][ T9780] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 483.624628][ T9780] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 483.950379][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 483.959747][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 485.456213][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 485.772277][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 491.156947][ T9850] FAULT_INJECTION: forcing a failure. [ 491.156947][ T9850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.170268][ T9850] CPU: 0 UID: 60928 PID: 9850 Comm: syz.0.928 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 491.170297][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.170312][ T9850] Call Trace: [ 491.170321][ T9850] [ 491.170331][ T9850] dump_stack_lvl+0x189/0x250 [ 491.170361][ T9850] ? __pfx____ratelimit+0x10/0x10 [ 491.170386][ T9850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.170411][ T9850] ? __pfx__printk+0x10/0x10 [ 491.170441][ T9850] ? __might_fault+0xb0/0x130 [ 491.170483][ T9850] should_fail_ex+0x414/0x560 [ 491.170513][ T9850] _copy_from_user+0x2d/0xb0 [ 491.170550][ T9850] copy_clone_args_from_user+0x565/0x6d0 [ 491.170594][ T9850] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 491.170625][ T9850] ? rcu_read_lock_any_held+0xb3/0x120 [ 491.170674][ T9850] __se_sys_clone3+0xf1/0x2d0 [ 491.170707][ T9850] ? __pfx___se_sys_clone3+0x10/0x10 [ 491.170733][ T9850] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 491.170774][ T9850] ? __fget_files+0x3a0/0x420 [ 491.170818][ T9850] ? __pfx_ksys_write+0x10/0x10 [ 491.170836][ T9850] ? rcu_is_watching+0x15/0xb0 [ 491.170866][ T9850] ? do_syscall_64+0xbe/0x3b0 [ 491.170896][ T9850] do_syscall_64+0xfa/0x3b0 [ 491.170919][ T9850] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.170942][ T9850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.170965][ T9850] ? clear_bhb_loop+0x60/0xb0 [ 491.170992][ T9850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.171013][ T9850] RIP: 0033:0x7fcc8598ebe9 [ 491.171032][ T9850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.171051][ T9850] RSP: 002b:00007fcc86747f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 491.171074][ T9850] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fcc8598ebe9 [ 491.171090][ T9850] RDX: 00007fcc86747f20 RSI: 0000000000000058 RDI: 00007fcc86747f20 [ 491.171105][ T9850] RBP: 00007fcc86748090 R08: 0000000000000000 R09: 0000000000000058 [ 491.171119][ T9850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.171133][ T9850] R13: 00007fcc85bb6128 R14: 00007fcc85bb6090 R15: 00007ffec2e123f8 [ 491.171166][ T9850] [ 494.359706][ T9868] _ÐZ`Ô€@ÿÃ: entered promiscuous mode [ 494.540683][ T9859] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 494.567768][ T9859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 495.076307][ T9] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 495.146845][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 495.146864][ T30] audit: type=1326 audit(1755585914.597:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9877 comm="syz.4.937" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0eaf98ebe9 code=0x0 [ 495.267860][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 495.293226][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.334043][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 495.364015][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.403673][ T9] hub 3-1:4.0: USB hub found [ 495.628366][ T9] hub 3-1:4.0: 2 ports detected [ 495.639527][ T9] usb 3-1: selecting invalid altsetting 1 [ 495.651603][ T9] hub 3-1:4.0: Using single TT (err -22) [ 495.832278][ T9] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 495.844198][ T9] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 495.901857][ T9] usb 3-1: USB disconnect, device number 17 [ 495.938761][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 496.393384][ T9891] IPVS: set_ctl: invalid protocol: 44 172.20.20.36:0 [ 496.576270][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 497.519200][ T9901] netlink: 'syz.4.942': attribute type 1 has an invalid length. [ 497.527064][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.942'. [ 497.546277][ T9901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.942'. [ 497.607082][ T9901] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.616307][ T9901] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.625038][ T9901] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.633905][ T9901] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.894586][ T9901] lo speed is unknown, defaulting to 1000 [ 498.144732][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 499.060208][ T9912] FAULT_INJECTION: forcing a failure. [ 499.060208][ T9912] name failslab, interval 1, probability 0, space 0, times 0 [ 499.075933][ T9912] CPU: 0 UID: 0 PID: 9912 Comm: syz.4.946 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 499.075961][ T9912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 499.075974][ T9912] Call Trace: [ 499.075982][ T9912] [ 499.075991][ T9912] dump_stack_lvl+0x189/0x250 [ 499.076021][ T9912] ? __pfx____ratelimit+0x10/0x10 [ 499.076044][ T9912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.076068][ T9912] ? __pfx__printk+0x10/0x10 [ 499.076101][ T9912] ? __pfx___might_resched+0x10/0x10 [ 499.076130][ T9912] should_fail_ex+0x414/0x560 [ 499.076158][ T9912] should_failslab+0xa8/0x100 [ 499.076183][ T9912] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 499.076204][ T9912] ? __alloc_skb+0x112/0x2d0 [ 499.076239][ T9912] __alloc_skb+0x112/0x2d0 [ 499.076274][ T9912] netlink_sendmsg+0x5c6/0xb30 [ 499.076315][ T9912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.076355][ T9912] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 499.076376][ T9912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.076407][ T9912] __sock_sendmsg+0x21c/0x270 [ 499.076437][ T9912] ____sys_sendmsg+0x505/0x830 [ 499.076477][ T9912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.076521][ T9912] ? import_iovec+0x74/0xa0 [ 499.076554][ T9912] ___sys_sendmsg+0x21f/0x2a0 [ 499.076590][ T9912] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.076664][ T9912] ? __fget_files+0x2a/0x420 [ 499.076687][ T9912] ? __fget_files+0x3a0/0x420 [ 499.076731][ T9912] __x64_sys_sendmsg+0x19b/0x260 [ 499.076768][ T9912] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.076811][ T9912] ? __pfx_ksys_write+0x10/0x10 [ 499.076829][ T9912] ? rcu_is_watching+0x15/0xb0 [ 499.076858][ T9912] ? do_syscall_64+0xbe/0x3b0 [ 499.076888][ T9912] do_syscall_64+0xfa/0x3b0 [ 499.076911][ T9912] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.076932][ T9912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.076952][ T9912] ? clear_bhb_loop+0x60/0xb0 [ 499.076979][ T9912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.077000][ T9912] RIP: 0033:0x7f0eaf98ebe9 [ 499.077019][ T9912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.077037][ T9912] RSP: 002b:00007f0eb0837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.077060][ T9912] RAX: ffffffffffffffda RBX: 00007f0eafbb5fa0 RCX: 00007f0eaf98ebe9 [ 499.077076][ T9912] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 499.077090][ T9912] RBP: 00007f0eb0837090 R08: 0000000000000000 R09: 0000000000000000 [ 499.077103][ T9912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.077116][ T9912] R13: 00007f0eafbb6038 R14: 00007f0eafbb5fa0 R15: 00007fff634ee9f8 [ 499.077150][ T9912] [ 499.433777][ T5906] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 499.494203][ T5906] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 500.333993][ T9935] FAULT_INJECTION: forcing a failure. [ 500.333993][ T9935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.347303][ T9935] CPU: 0 UID: 0 PID: 9935 Comm: syz.4.950 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 500.347322][ T9935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.347331][ T9935] Call Trace: [ 500.347338][ T9935] [ 500.347344][ T9935] dump_stack_lvl+0x189/0x250 [ 500.347366][ T9935] ? __pfx____ratelimit+0x10/0x10 [ 500.347383][ T9935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.347400][ T9935] ? __pfx__printk+0x10/0x10 [ 500.347430][ T9935] should_fail_ex+0x414/0x560 [ 500.347450][ T9935] strncpy_from_user+0x36/0x290 [ 500.347477][ T9935] getname_flags+0xf3/0x540 [ 500.347499][ T9935] do_sys_openat2+0xbc/0x1c0 [ 500.347522][ T9935] ? __pfx_do_sys_openat2+0x10/0x10 [ 500.347543][ T9935] ? ksys_write+0x22a/0x250 [ 500.347559][ T9935] ? __pfx_ksys_write+0x10/0x10 [ 500.347576][ T9935] __x64_sys_openat+0x138/0x170 [ 500.347600][ T9935] do_syscall_64+0xfa/0x3b0 [ 500.347617][ T9935] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.347633][ T9935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.347650][ T9935] ? clear_bhb_loop+0x60/0xb0 [ 500.347669][ T9935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.347684][ T9935] RIP: 0033:0x7f0eaf98d550 [ 500.347697][ T9935] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 500.347711][ T9935] RSP: 002b:00007f0eb07f4f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 500.347726][ T9935] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0eaf98d550 [ 500.347737][ T9935] RDX: 0000000000000002 RSI: 00007f0eb07f4fa0 RDI: 00000000ffffff9c [ 500.347747][ T9935] RBP: 00007f0eb07f4fa0 R08: 0000000000000000 R09: 0000000000000000 [ 500.347757][ T9935] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 500.347766][ T9935] R13: 00007f0eafbb6218 R14: 00007f0eafbb6180 R15: 00007fff634ee9f8 [ 500.347790][ T9935] [ 500.670030][ T9934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.683907][ T9934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.223695][ T9940] FAULT_INJECTION: forcing a failure. [ 501.223695][ T9940] name failslab, interval 1, probability 0, space 0, times 0 [ 501.237004][ T9940] CPU: 0 UID: 0 PID: 9940 Comm: syz.3.954 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 501.237031][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.237045][ T9940] Call Trace: [ 501.237053][ T9940] [ 501.237063][ T9940] dump_stack_lvl+0x189/0x250 [ 501.237093][ T9940] ? __pfx____ratelimit+0x10/0x10 [ 501.237116][ T9940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.237139][ T9940] ? __pfx__printk+0x10/0x10 [ 501.237174][ T9940] ? __pfx___might_resched+0x10/0x10 [ 501.237205][ T9940] should_fail_ex+0x414/0x560 [ 501.237232][ T9940] should_failslab+0xa8/0x100 [ 501.237256][ T9940] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 501.237279][ T9940] ? __alloc_skb+0x112/0x2d0 [ 501.237316][ T9940] __alloc_skb+0x112/0x2d0 [ 501.237349][ T9940] pfkey_sendmsg+0x1dd/0x1090 [ 501.237384][ T9940] ? preempt_schedule_irq+0xb5/0x150 [ 501.237407][ T9940] ? smack_socket_sendmsg+0x1a7/0x520 [ 501.237438][ T9940] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 501.237471][ T9940] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.237501][ T9940] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 501.237545][ T9940] ? preempt_schedule_irq+0xde/0x150 [ 501.237573][ T9940] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.237594][ T9940] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 501.237619][ T9940] __sock_sendmsg+0x21c/0x270 [ 501.237649][ T9940] ____sys_sendmsg+0x505/0x830 [ 501.237690][ T9940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.237731][ T9940] ? import_iovec+0x74/0xa0 [ 501.237766][ T9940] ___sys_sendmsg+0x21f/0x2a0 [ 501.237803][ T9940] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.237833][ T9940] ? preempt_schedule_common+0x83/0xd0 [ 501.237895][ T9940] ? __fget_files+0x2a/0x420 [ 501.237919][ T9940] ? __fget_files+0x3a0/0x420 [ 501.237952][ T9940] __x64_sys_sendmsg+0x19b/0x260 [ 501.237990][ T9940] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.238035][ T9940] ? __pfx_ksys_write+0x10/0x10 [ 501.238063][ T9940] ? do_syscall_64+0xbe/0x3b0 [ 501.238092][ T9940] do_syscall_64+0xfa/0x3b0 [ 501.238118][ T9940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.238139][ T9940] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 501.238162][ T9940] ? clear_bhb_loop+0x60/0xb0 [ 501.238188][ T9940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.238210][ T9940] RIP: 0033:0x7fbb0918ebe9 [ 501.238230][ T9940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.238249][ T9940] RSP: 002b:00007fbb0a07f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.238272][ T9940] RAX: ffffffffffffffda RBX: 00007fbb093b6180 RCX: 00007fbb0918ebe9 [ 501.238288][ T9940] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 501.238302][ T9940] RBP: 00007fbb0a07f090 R08: 0000000000000000 R09: 0000000000000000 [ 501.238317][ T9940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.238330][ T9940] R13: 00007fbb093b6218 R14: 00007fbb093b6180 R15: 00007ffc04becf58 [ 501.238365][ T9940] [ 503.337892][ T9954] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 503.344585][ T9954] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 503.486644][ T9960] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 503.498539][ T9960] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 504.027599][ T9954] vhci_hcd vhci_hcd.0: Device attached [ 504.216244][ T9961] fuse: Bad value for 'fd' [ 504.242962][ T9957] vhci_hcd: connection closed [ 504.247630][ T49] vhci_hcd: stop threads [ 504.272044][ T49] vhci_hcd: release socket [ 504.283353][ T49] vhci_hcd: disconnect device [ 504.316441][ T9] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 504.365937][ T9] usb 37-1: enqueue for inactive port 0 [ 504.466004][ T9] vhci_hcd: vhci_device speed not set [ 504.916274][ T5906] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 505.315450][ T5906] usb 4-1: device descriptor read/64, error -71 [ 505.414341][ T9978] netlink: 'syz.5.965': attribute type 21 has an invalid length. [ 505.732925][ T5906] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 505.876350][ T5906] usb 4-1: device descriptor read/64, error -71 [ 505.990738][ T5906] usb usb4-port1: attempt power cycle [ 506.787557][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.793951][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.956634][ T5906] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 507.137275][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.973'. [ 507.174945][ T5906] usb 4-1: device descriptor read/8, error -71 [ 507.244644][T10000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 507.280444][T10000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 507.505887][ T5906] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 507.610437][ T30] audit: type=1326 audit(1755585927.067:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10002 comm="syz.5.974" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c0158ebe9 code=0x0 [ 509.489236][ T5906] usb 4-1: device descriptor read/8, error -71 [ 509.605937][ T5906] usb usb4-port1: unable to enumerate USB device [ 511.028105][T10041] binder: BINDER_SET_CONTEXT_MGR already set [ 511.034428][T10041] binder: 10033:10041 ioctl 4018620d 200000000040 returned -16 [ 512.611903][T10055] fuseblk: Unknown parameter '' [ 513.225929][ T5906] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 514.011946][ T5906] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 514.022392][ T5906] usb 1-1: config 0 has no interface number 0 [ 514.032305][ T5906] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 514.042243][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.156180][ T5906] usb 1-1: Product: syz [ 514.160463][ T5906] usb 1-1: Manufacturer: syz [ 514.165180][ T5906] usb 1-1: SerialNumber: syz [ 514.174933][ T5906] usb 1-1: config 0 descriptor?? [ 514.697794][ T5906] usb 1-1: Firmware: major: 0, minor: 174, hardware type: UNKNOWN (19) [ 515.008031][ T5906] usb 1-1: failed to fetch extended address, random address set [ 515.162695][ T5906] usb 1-1: atusb_probe: initialization failed, error = -524 [ 515.251014][ T5906] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 515.281238][ T5906] usb 1-1: USB disconnect, device number 16 [ 515.484665][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1000'. [ 516.817248][T10108] fuseblk: Unknown parameter '' [ 521.515208][T10153] fuseblk: Unknown parameter '' [ 522.785970][T10170] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1023'. [ 524.509866][T10191] syz_tun: entered allmulticast mode [ 525.801982][T10181] syz_tun: left allmulticast mode [ 525.992084][T10202] fuseblk: Unknown parameter '' [ 526.127882][ T30] audit: type=1326 audit(1755585945.577:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaf98ebe9 code=0x7ffc0000 [ 526.439208][ T30] audit: type=1326 audit(1755585945.577:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaf98ebe9 code=0x7ffc0000 [ 526.448630][T10210] syz.2.1035: attempt to access beyond end of device [ 526.448630][T10210] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 526.485734][T10210] syz.2.1035: attempt to access beyond end of device [ 526.485734][T10210] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 526.504668][T10210] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 526.536867][T10210] syz.2.1035: attempt to access beyond end of device [ 526.536867][T10210] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 526.540723][ T30] audit: type=1326 audit(1755585945.577:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaf98ebe9 code=0x7ffc0000 [ 526.555925][T10210] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 526.615862][T10210] syz.2.1035: attempt to access beyond end of device [ 526.615862][T10210] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 526.640230][T10210] syz.2.1035: attempt to access beyond end of device [ 526.640230][T10210] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 526.657051][T10210] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 526.674662][T10210] syz.2.1035: attempt to access beyond end of device [ 526.674662][T10210] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 526.693456][T10210] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 526.736022][T10210] syz.2.1035: attempt to access beyond end of device [ 526.736022][T10210] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 526.743855][ T30] audit: type=1326 audit(1755585945.577:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaf98ebe9 code=0x7ffc0000 [ 526.751445][T10210] syz.2.1035: attempt to access beyond end of device [ 526.751445][T10210] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 526.772123][ T30] audit: type=1326 audit(1755585945.577:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0eaf98d550 code=0x7ffc0000 [ 526.784074][T10210] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 526.825149][T10210] syz.2.1035: attempt to access beyond end of device [ 526.825149][T10210] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 526.845722][T10210] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 526.874609][T10210] syz.2.1035: attempt to access beyond end of device [ 526.874609][T10210] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 526.888579][T10210] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 527.393553][T10210] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 527.471805][ T30] audit: type=1326 audit(1755585945.577:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0eaf98e7eb code=0x7ffc0000 [ 527.503816][T10210] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 527.564821][ T30] audit: type=1326 audit(1755585945.577:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0eaf98e7eb code=0x7ffc0000 [ 527.600960][ T30] audit: type=1326 audit(1755585945.577:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eaf98ebe9 code=0x7ffc0000 [ 527.628079][ T30] audit: type=1326 audit(1755585945.577:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0eaf98e7eb code=0x7ffc0000 [ 527.650181][ T30] audit: type=1326 audit(1755585945.577:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0eaf98e7eb code=0x7ffc0000 [ 527.671763][ C1] vkms_vblank_simulate: vblank timer overrun [ 530.001562][T10223] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 530.052453][T10223] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 530.368210][T10246] trusted_key: encrypted_key: insufficient parameters specified [ 530.976538][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 532.099113][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 532.459251][T10258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.628887][T10258] lo speed is unknown, defaulting to 1000 [ 532.687287][T10265] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 532.696321][T10265] ref_ctr increment failed for inode: 0x4e4 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888032bb3200 [ 532.712266][ T30] audit: type=1804 audit(1755585952.137:564): pid=10265 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1048" name="/newroot/221/file0" dev="tmpfs" ino=1252 res=1 errno=0 [ 534.973600][ T30] audit: type=1326 audit(1755585954.427:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10286 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 535.036073][ T30] audit: type=1326 audit(1755585954.457:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10286 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 535.112455][ T30] audit: type=1326 audit(1755585954.457:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10286 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 535.136240][ T30] audit: type=1326 audit(1755585954.457:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10286 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 535.200129][ T30] audit: type=1326 audit(1755585954.457:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10286 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d3898d550 code=0x7ffc0000 [ 535.246000][ T5906] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 535.270333][ T30] audit: type=1326 audit(1755585954.457:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10286 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d3898e7eb code=0x7ffc0000 [ 535.328283][ T30] audit: type=1326 audit(1755585954.457:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10286 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d3898e7eb code=0x7ffc0000 [ 535.406807][ T30] audit: type=1326 audit(1755585954.457:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10286 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3898ebe9 code=0x7ffc0000 [ 535.433960][ T30] audit: type=1326 audit(1755585954.457:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10286 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d3898e7eb code=0x7ffc0000 [ 535.458402][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.473186][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.483606][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 535.497939][ T5906] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 535.508340][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.519332][ T5906] usb 3-1: config 0 descriptor?? [ 535.971400][ T5906] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x5 [ 535.995111][ T5906] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 536.020073][T10305] bio_check_eod: 2 callbacks suppressed [ 536.020096][T10305] syz.4.1059: attempt to access beyond end of device [ 536.020096][T10305] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 536.084950][T10305] syz.4.1059: attempt to access beyond end of device [ 536.084950][T10305] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 536.127125][T10305] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 536.240189][T10305] syz.4.1059: attempt to access beyond end of device [ 536.240189][T10305] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 536.268906][ T10] usb 3-1: USB disconnect, device number 18 [ 536.316993][T10305] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 536.463098][T10305] syz.4.1059: attempt to access beyond end of device [ 536.463098][T10305] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 536.526967][T10313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.553285][T10305] syz.4.1059: attempt to access beyond end of device [ 536.553285][T10305] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 536.766030][T10305] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 536.881832][T10305] syz.4.1059: attempt to access beyond end of device [ 536.881832][T10305] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 536.938687][T10313] lo speed is unknown, defaulting to 1000 [ 536.986066][T10305] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 537.066428][T10305] syz.4.1059: attempt to access beyond end of device [ 537.066428][T10305] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 537.087763][T10305] syz.4.1059: attempt to access beyond end of device [ 537.087763][T10305] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 537.189873][T10305] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 537.207080][T10305] syz.4.1059: attempt to access beyond end of device [ 537.207080][T10305] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 537.533828][T10305] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 537.955158][T10305] syz.4.1059: attempt to access beyond end of device [ 537.955158][T10305] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 537.996919][T10305] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 538.081630][T10305] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 538.104655][T10305] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 538.448554][T10332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.752482][T10332] lo speed is unknown, defaulting to 1000 [ 539.610185][T10340] input: syz0 as /devices/virtual/input/input26 [ 540.332033][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'. [ 540.415131][T10353] FAULT_INJECTION: forcing a failure. [ 540.415131][T10353] name failslab, interval 1, probability 0, space 0, times 0 [ 540.588408][T10353] CPU: 0 UID: 0 PID: 10353 Comm: syz.0.1070 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 540.588440][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 540.588450][T10353] Call Trace: [ 540.588457][T10353] [ 540.588464][T10353] dump_stack_lvl+0x189/0x250 [ 540.588487][T10353] ? __pfx____ratelimit+0x10/0x10 [ 540.588503][T10353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.588521][T10353] ? __pfx__printk+0x10/0x10 [ 540.588543][T10353] ? __pfx___might_resched+0x10/0x10 [ 540.588560][T10353] ? fs_reclaim_acquire+0x7d/0x100 [ 540.588582][T10353] should_fail_ex+0x414/0x560 [ 540.588602][T10353] should_failslab+0xa8/0x100 [ 540.588620][T10353] __kmalloc_noprof+0xcb/0x4f0 [ 540.588635][T10353] ? tomoyo_encode+0x28b/0x550 [ 540.588659][T10353] tomoyo_encode+0x28b/0x550 [ 540.588683][T10353] tomoyo_realpath_from_path+0x58d/0x5d0 [ 540.588705][T10353] ? tomoyo_domain+0xda/0x130 [ 540.588733][T10353] tomoyo_path_perm+0x213/0x4b0 [ 540.588750][T10353] ? tomoyo_path_perm+0x1e3/0x4b0 [ 540.588765][T10353] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 540.588788][T10353] ? vfs_write+0x8d8/0xa90 [ 540.588818][T10353] ? __lock_acquire+0xab9/0xd20 [ 540.588843][T10353] security_file_truncate+0xb1/0x270 [ 540.588863][T10353] do_ftruncate+0x270/0x540 [ 540.588883][T10353] ? __pfx_do_ftruncate+0x10/0x10 [ 540.588897][T10353] ? __fget_files+0x3a0/0x420 [ 540.588913][T10353] ? __fget_files+0x2a/0x420 [ 540.588937][T10353] __x64_sys_ftruncate+0x92/0xf0 [ 540.588954][T10353] do_syscall_64+0xfa/0x3b0 [ 540.588970][T10353] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.588986][T10353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.589002][T10353] ? clear_bhb_loop+0x60/0xb0 [ 540.589020][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.589035][T10353] RIP: 0033:0x7fcc8598ebe9 [ 540.589048][T10353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.589069][T10353] RSP: 002b:00007fcc86737038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 540.589085][T10353] RAX: ffffffffffffffda RBX: 00007fcc85bb6090 RCX: 00007fcc8598ebe9 [ 540.589097][T10353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 540.589105][T10353] RBP: 00007fcc86737090 R08: 0000000000000000 R09: 0000000000000000 [ 540.589115][T10353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.589124][T10353] R13: 00007fcc85bb6128 R14: 00007fcc85bb6090 R15: 00007ffec2e123f8 [ 540.589148][T10353] [ 540.589164][T10353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 540.912940][T10358] FAULT_INJECTION: forcing a failure. [ 540.912940][T10358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.914454][T10358] [ 540.914464][T10358] ====================================================== [ 540.914472][T10358] WARNING: possible circular locking dependency detected [ 540.914489][T10358] 6.16.0-syzkaller #0 Not tainted [ 540.914499][T10358] ------------------------------------------------------ [ 540.914508][T10358] syz.3.1071/10358 is trying to acquire lock: [ 540.914520][T10358] ffffffff8e133300 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 540.914583][T10358] [ 540.914583][T10358] but task is already holding lock: [ 540.914590][T10358] ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 540.914637][T10358] [ 540.914637][T10358] which lock already depends on the new lock. [ 540.914637][T10358] [ 540.914644][T10358] [ 540.914644][T10358] the existing dependency chain (in reverse order) is: [ 540.914652][T10358] [ 540.914652][T10358] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 540.914680][T10358] lock_acquire+0x120/0x360 [ 540.914698][T10358] _raw_spin_lock_nested+0x32/0x50 [ 540.914718][T10358] raw_spin_rq_lock_nested+0x2a/0x140 [ 540.914738][T10358] task_rq_lock+0xbc/0x470 [ 540.914756][T10358] cgroup_move_task+0x9a/0x590 [ 540.914779][T10358] css_set_move_task+0x658/0x9e0 [ 540.914803][T10358] cgroup_post_fork+0x1ef/0x790 [ 540.914826][T10358] copy_process+0x37e6/0x3b80 [ 540.914848][T10358] kernel_clone+0x224/0x7f0 [ 540.914871][T10358] user_mode_thread+0xdd/0x140 [ 540.914894][T10358] rest_init+0x23/0x300 [ 540.914920][T10358] start_kernel+0x47d/0x500 [ 540.914942][T10358] x86_64_start_reservations+0x24/0x30 [ 540.914970][T10358] x86_64_start_kernel+0x143/0x1c0 [ 540.914998][T10358] common_startup_64+0x13e/0x147 [ 540.915024][T10358] [ 540.915024][T10358] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 540.915051][T10358] lock_acquire+0x120/0x360 [ 540.915068][T10358] _raw_spin_lock_irqsave+0xa7/0xf0 [ 540.915099][T10358] try_to_wake_up+0x6e/0x1290 [ 540.915125][T10358] __wake_up_common_lock+0x137/0x1f0 [ 540.915155][T10358] tty_port_default_wakeup+0xa2/0xf0 [ 540.915187][T10358] serial8250_tx_chars+0x72e/0x970 [ 540.915215][T10358] serial8250_handle_irq+0x633/0xbb0 [ 540.915242][T10358] serial8250_default_handle_irq+0xbf/0x1b0 [ 540.915262][T10358] serial8250_interrupt+0xa2/0x1d0 [ 540.915290][T10358] __handle_irq_event_percpu+0x289/0x980 [ 540.915318][T10358] handle_irq_event+0x8b/0x1e0 [ 540.915344][T10358] handle_edge_irq+0x267/0x9c0 [ 540.915367][T10358] __common_interrupt+0x140/0x250 [ 540.915397][T10358] common_interrupt+0xb6/0xe0 [ 540.915423][T10358] asm_common_interrupt+0x26/0x40 [ 540.915443][T10358] pv_native_safe_halt+0x13/0x20 [ 540.915461][T10358] default_idle+0x13/0x20 [ 540.915485][T10358] default_idle_call+0x74/0xb0 [ 540.915509][T10358] do_idle+0x1e8/0x510 [ 540.915530][T10358] cpu_startup_entry+0x44/0x60 [ 540.915551][T10358] rest_init+0x2de/0x300 [ 540.915576][T10358] start_kernel+0x47d/0x500 [ 540.915597][T10358] x86_64_start_reservations+0x24/0x30 [ 540.915626][T10358] x86_64_start_kernel+0x143/0x1c0 [ 540.915654][T10358] common_startup_64+0x13e/0x147 [ 540.915680][T10358] [ 540.915680][T10358] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 540.915708][T10358] lock_acquire+0x120/0x360 [ 540.915725][T10358] _raw_spin_lock_irqsave+0xa7/0xf0 [ 540.915756][T10358] __wake_up_common_lock+0x2f/0x1f0 [ 540.915788][T10358] tty_port_default_wakeup+0xa2/0xf0 [ 540.915816][T10358] serial8250_tx_chars+0x72e/0x970 [ 540.915839][T10358] serial8250_handle_irq+0x633/0xbb0 [ 540.915865][T10358] serial8250_default_handle_irq+0xbf/0x1b0 [ 540.915884][T10358] serial8250_interrupt+0xa2/0x1d0 [ 540.915906][T10358] __handle_irq_event_percpu+0x289/0x980 [ 540.915932][T10358] handle_irq_event+0x8b/0x1e0 [ 540.915958][T10358] handle_edge_irq+0x267/0x9c0 [ 540.915980][T10358] __common_interrupt+0x140/0x250 [ 540.916010][T10358] common_interrupt+0xb6/0xe0 [ 540.916035][T10358] asm_common_interrupt+0x26/0x40 [ 540.916055][T10358] pv_native_safe_halt+0x13/0x20 [ 540.916073][T10358] default_idle+0x13/0x20 [ 540.916096][T10358] default_idle_call+0x74/0xb0 [ 540.916120][T10358] do_idle+0x1e8/0x510 [ 540.916141][T10358] cpu_startup_entry+0x44/0x60 [ 540.916161][T10358] rest_init+0x2de/0x300 [ 540.916186][T10358] start_kernel+0x47d/0x500 [ 540.916206][T10358] x86_64_start_reservations+0x24/0x30 [ 540.916235][T10358] x86_64_start_kernel+0x143/0x1c0 [ 540.916263][T10358] common_startup_64+0x13e/0x147 [ 540.916295][T10358] [ 540.916295][T10358] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 540.916324][T10358] lock_acquire+0x120/0x360 [ 540.916340][T10358] _raw_spin_lock_irqsave+0xa7/0xf0 [ 540.916372][T10358] serial8250_console_write+0x17e/0x1ba0 [ 540.916402][T10358] console_flush_all+0x728/0xc40 [ 540.916427][T10358] console_unlock+0xc4/0x270 [ 540.916449][T10358] vprintk_emit+0x5b7/0x7a0 [ 540.916470][T10358] _printk+0xcf/0x120 [ 540.916494][T10358] register_console+0xa8b/0xf90 [ 540.916520][T10358] univ8250_console_init+0x52/0x90 [ 540.916546][T10358] console_init+0x1a1/0x670 [ 540.916571][T10358] start_kernel+0x2cc/0x500 [ 540.916591][T10358] x86_64_start_reservations+0x24/0x30 [ 540.916620][T10358] x86_64_start_kernel+0x143/0x1c0 [ 540.916648][T10358] common_startup_64+0x13e/0x147 [ 540.916674][T10358] [ 540.916674][T10358] -> #0 (console_owner){-.-.}-{0:0}: [ 540.916702][T10358] validate_chain+0xb9b/0x2140 [ 540.916724][T10358] __lock_acquire+0xab9/0xd20 [ 540.916740][T10358] lock_acquire+0x120/0x360 [ 540.916757][T10358] console_flush_all+0x6d2/0xc40 [ 540.916782][T10358] console_unlock+0xc4/0x270 [ 540.916803][T10358] vprintk_emit+0x5b7/0x7a0 [ 540.916825][T10358] _printk+0xcf/0x120 [ 540.916848][T10358] should_fail_ex+0x3f5/0x560 [ 540.916866][T10358] strncpy_from_user+0x36/0x290 [ 540.916896][T10358] strncpy_from_user_nofault+0x72/0x150 [ 540.916917][T10358] bpf_bprintf_prepare+0xb9b/0x1410 [ 540.916945][T10358] bpf_trace_printk+0xdb/0x190 [ 540.916964][T10358] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 540.916981][T10358] bpf_trace_run2+0x284/0x4b0 [ 540.917007][T10358] __bpf_trace_contention_begin+0xdc/0x130 [ 540.917031][T10358] trace_contention_begin+0x114/0x140 [ 540.917057][T10358] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 540.917079][T10358] queued_spin_lock_slowpath+0x43/0x50 [ 540.917107][T10358] do_raw_spin_lock+0x21f/0x290 [ 540.917133][T10358] raw_spin_rq_lock_nested+0xad/0x140 [ 540.917153][T10358] __schedule+0x330/0x4c90 [ 540.917170][T10358] preempt_schedule_irq+0xb5/0x150 [ 540.917189][T10358] irqentry_exit+0x6f/0x90 [ 540.917208][T10358] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 540.917229][T10358] __sanitizer_cov_trace_pc+0x0/0x70 [ 540.917255][T10358] prepend_path+0x862/0x970 [ 540.917288][T10358] d_absolute_path+0xa1/0x140 [ 540.917315][T10358] tomoyo_realpath_from_path+0x2c8/0x5d0 [ 540.917342][T10358] tomoyo_path_number_perm+0x1e8/0x5a0 [ 540.917362][T10358] security_file_ioctl+0xcb/0x2d0 [ 540.917385][T10358] __se_sys_ioctl+0x47/0x170 [ 540.917413][T10358] do_syscall_64+0xfa/0x3b0 [ 540.917435][T10358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.917455][T10358] [ 540.917455][T10358] other info that might help us debug this: [ 540.917455][T10358] [ 540.917462][T10358] Chain exists of: [ 540.917462][T10358] console_owner --> &p->pi_lock --> &rq->__lock [ 540.917462][T10358] [ 540.917496][T10358] Possible unsafe locking scenario: [ 540.917496][T10358] [ 540.917502][T10358] CPU0 CPU1 [ 540.917509][T10358] ---- ---- [ 540.917516][T10358] lock(&rq->__lock); [ 540.917529][T10358] lock(&p->pi_lock); [ 540.917545][T10358] lock(&rq->__lock); [ 540.917560][T10358] lock(console_owner); [ 540.917574][T10358] [ 540.917574][T10358] *** DEADLOCK *** [ 540.917574][T10358] [ 540.917580][T10358] 5 locks held by syz.3.1071/10358: [ 540.917593][T10358] #0: ffffffff8e84a090 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x1bc/0x5a0 [ 540.917643][T10358] #1: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 540.917693][T10358] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 540.917749][T10358] #3: ffffffff8e133360 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 540.917802][T10358] #4: ffffffff8e01ac30 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 540.917857][T10358] [ 540.917857][T10358] stack backtrace: [ 540.917868][T10358] CPU: 0 UID: 0 PID: 10358 Comm: syz.3.1071 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 540.917892][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 540.917905][T10358] Call Trace: [ 540.917913][T10358] [ 540.917922][T10358] dump_stack_lvl+0x189/0x250 [ 540.917949][T10358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.917973][T10358] ? __pfx__printk+0x10/0x10 [ 540.918001][T10358] ? print_lock_name+0xde/0x100 [ 540.918029][T10358] print_circular_bug+0x2ee/0x310 [ 540.918054][T10358] check_noncircular+0x134/0x160 [ 540.918083][T10358] validate_chain+0xb9b/0x2140 [ 540.918120][T10358] __lock_acquire+0xab9/0xd20 [ 540.918144][T10358] ? console_flush_all+0x13a/0xc40 [ 540.918170][T10358] lock_acquire+0x120/0x360 [ 540.918189][T10358] ? console_flush_all+0x13a/0xc40 [ 540.918221][T10358] ? do_raw_spin_unlock+0x122/0x240 [ 540.918249][T10358] ? console_flush_all+0x13a/0xc40 [ 540.918284][T10358] console_flush_all+0x6d2/0xc40 [ 540.918311][T10358] ? console_flush_all+0x13a/0xc40 [ 540.918340][T10358] ? console_flush_all+0x13a/0xc40 [ 540.918371][T10358] ? __pfx_console_flush_all+0x10/0x10 [ 540.918405][T10358] ? is_printk_cpu_sync_owner+0x32/0x40 [ 540.918438][T10358] console_unlock+0xc4/0x270 [ 540.918464][T10358] ? __pfx_console_unlock+0x10/0x10 [ 540.918491][T10358] ? is_printk_cpu_sync_owner+0x32/0x40 [ 540.918523][T10358] vprintk_emit+0x5b7/0x7a0 [ 540.918549][T10358] ? __pfx_vprintk_emit+0x10/0x10 [ 540.918573][T10358] ? rcu_is_watching+0x15/0xb0 [ 540.918605][T10358] _printk+0xcf/0x120 [ 540.918630][T10358] ? __pfx____ratelimit+0x10/0x10 [ 540.918653][T10358] ? __pfx__printk+0x10/0x10 [ 540.918683][T10358] ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40 [ 540.918719][T10358] should_fail_ex+0x3f5/0x560 [ 540.918741][T10358] strncpy_from_user+0x36/0x290 [ 540.918777][T10358] strncpy_from_user_nofault+0x72/0x150 [ 540.918801][T10358] bpf_bprintf_prepare+0xb9b/0x1410 [ 540.918830][T10358] ? rcu_is_watching+0x15/0xb0 [ 540.918858][T10358] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 540.918891][T10358] ? bpf_trace_printk+0xc1/0x190 [ 540.918914][T10358] bpf_trace_printk+0xdb/0x190 [ 540.918936][T10358] ? __lock_acquire+0xab9/0xd20 [ 540.918955][T10358] ? __pfx_bpf_trace_printk+0x10/0x10 [ 540.918978][T10358] ? bpf_trace_run2+0x186/0x4b0 [ 540.919015][T10358] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 540.919032][T10358] bpf_trace_run2+0x284/0x4b0 [ 540.919061][T10358] ? bpf_trace_run2+0x186/0x4b0 [ 540.919090][T10358] ? __pfx_bpf_trace_run2+0x10/0x10 [ 540.919116][T10358] ? search_extable+0x8f/0xd0 [ 540.919140][T10358] ? __pfx_search_extable+0x10/0x10 [ 540.919164][T10358] ? __bpf_trace_contention_begin+0xcd/0x130 [ 540.919192][T10358] __bpf_trace_contention_begin+0xdc/0x130 [ 540.919216][T10358] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 540.919241][T10358] ? fixup_exception+0xe2f/0x1c30 [ 540.919271][T10358] trace_contention_begin+0x114/0x140 [ 540.919305][T10358] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 540.919329][T10358] ? rcu_qs+0xc4/0x170 [ 540.919349][T10358] ? __pfx_rcu_qs+0x10/0x10 [ 540.919371][T10358] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 540.919404][T10358] queued_spin_lock_slowpath+0x43/0x50 [ 540.919434][T10358] do_raw_spin_lock+0x21f/0x290 [ 540.919464][T10358] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 540.919497][T10358] raw_spin_rq_lock_nested+0xad/0x140 [ 540.919521][T10358] __schedule+0x330/0x4c90 [ 540.919540][T10358] ? is_bpf_text_address+0x292/0x2b0 [ 540.919560][T10358] ? is_bpf_text_address+0x26/0x2b0 [ 540.919583][T10358] ? kernel_text_address+0xa5/0xe0 [ 540.919616][T10358] ? unwind_get_return_address+0x4d/0x90 [ 540.919639][T10358] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 540.919667][T10358] ? arch_stack_walk+0xfc/0x150 [ 540.919691][T10358] ? preempt_schedule_irq+0xb5/0x150 [ 540.919715][T10358] ? __pfx___schedule+0x10/0x10 [ 540.919737][T10358] ? stack_depot_save_flags+0x40/0x900 [ 540.919764][T10358] ? preempt_schedule_irq+0xaa/0x150 [ 540.919787][T10358] preempt_schedule_irq+0xb5/0x150 [ 540.919807][T10358] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 540.919833][T10358] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 540.919858][T10358] irqentry_exit+0x6f/0x90 [ 540.919879][T10358] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 540.919900][T10358] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 540.919930][T10358] Code: 89 fb e8 23 00 00 00 48 8b 3d 74 6e fa 0b 48 89 de 5b e9 33 20 55 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 90 9c 92 65 8b 15 58 6a [ 540.919949][T10358] RSP: 0018:ffffc9000cd4fa50 EFLAGS: 00000293 [ 540.919967][T10358] RAX: ffffffff82408535 RBX: 0000000000000001 RCX: 0000000000000000 [ 540.919981][T10358] RDX: ffff88806f16da00 RSI: 0000000000000ffd RDI: 0000000000000fe3 [ 540.919995][T10358] RBP: 0000000000000fe3 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 540.920010][T10358] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffff8880315cc080 [ 540.920026][T10358] R13: dffffc0000000000 R14: 0000000000000ffd R15: 0000000000000000 [ 540.920045][T10358] ? prepend_path+0x815/0x970 [ 540.920077][T10358] prepend_path+0x862/0x970 [ 540.920106][T10358] ? prepend_path+0x4b/0x970 [ 540.920139][T10358] d_absolute_path+0xa1/0x140 [ 540.920171][T10358] tomoyo_realpath_from_path+0x2c8/0x5d0 [ 540.920206][T10358] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 540.920228][T10358] tomoyo_path_number_perm+0x1e8/0x5a0 [ 540.920252][T10358] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 540.920283][T10358] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 540.920318][T10358] ? rcu_is_watching+0x15/0xb0 [ 540.920345][T10358] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 540.920389][T10358] ? __rcu_read_unlock+0x84/0xe0 [ 540.920419][T10358] ? __fget_files+0x2a/0x420 [ 540.920443][T10358] ? __fget_files+0x3a0/0x420 [ 540.920465][T10358] ? __fget_files+0x2a/0x420 [ 540.920491][T10358] security_file_ioctl+0xcb/0x2d0 [ 540.920516][T10358] __se_sys_ioctl+0x47/0x170 [ 540.920553][T10358] do_syscall_64+0xfa/0x3b0 [ 540.920575][T10358] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.920597][T10358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.920619][T10358] ? clear_bhb_loop+0x60/0xb0 [ 540.920643][T10358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.920663][T10358] RIP: 0033:0x7fbb0918ebe9 [ 540.920681][T10358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.920700][T10358] RSP: 002b:00007fbb0a07f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.920720][T10358] RAX: ffffffffffffffda RBX: 00007fbb093b6180 RCX: 00007fbb0918ebe9 [ 540.920736][T10358] RDX: 0000200000000bc0 RSI: 00000000c0405519 RDI: 0000000000000006 [ 540.920751][T10358] RBP: 00007fbb0a07f090 R08: 0000000000000000 R09: 0000000000000000 [ 540.920764][T10358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.920776][T10358] R13: 00007fbb093b6218 R14: 00007fbb093b6180 R15: 00007ffc04becf58 [ 540.920801][T10358] [ 542.457328][T10358] CPU: 0 UID: 0 PID: 10358 Comm: syz.3.1071 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 542.457357][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 542.457371][T10358] Call Trace: [ 542.457382][T10358] [ 542.457393][T10358] dump_stack_lvl+0x189/0x250 [ 542.457422][T10358] ? __pfx____ratelimit+0x10/0x10 [ 542.457445][T10358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.457469][T10358] ? __pfx__printk+0x10/0x10 [ 542.457499][T10358] ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40 [ 542.457536][T10358] should_fail_ex+0x414/0x560 [ 542.457560][T10358] strncpy_from_user+0x36/0x290 [ 542.457597][T10358] strncpy_from_user_nofault+0x72/0x150 [ 542.457622][T10358] bpf_bprintf_prepare+0xb9b/0x1410 [ 542.457651][T10358] ? rcu_is_watching+0x15/0xb0 [ 542.457681][T10358] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 542.457713][T10358] ? bpf_trace_printk+0xc1/0x190 [ 542.457737][T10358] bpf_trace_printk+0xdb/0x190 [ 542.457758][T10358] ? __lock_acquire+0xab9/0xd20 [ 542.457779][T10358] ? __pfx_bpf_trace_printk+0x10/0x10 [ 542.457802][T10358] ? bpf_trace_run2+0x186/0x4b0 [ 542.457838][T10358] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 542.457858][T10358] bpf_trace_run2+0x284/0x4b0 [ 542.457910][T10358] ? bpf_trace_run2+0x186/0x4b0 [ 542.457939][T10358] ? __pfx_bpf_trace_run2+0x10/0x10 [ 542.457966][T10358] ? search_extable+0x8f/0xd0 [ 542.457991][T10358] ? __pfx_search_extable+0x10/0x10 [ 542.458015][T10358] ? __bpf_trace_contention_begin+0xcd/0x130 [ 542.458044][T10358] __bpf_trace_contention_begin+0xdc/0x130 [ 542.458070][T10358] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 542.458095][T10358] ? fixup_exception+0xe2f/0x1c30 [ 542.458125][T10358] trace_contention_begin+0x114/0x140 [ 542.458153][T10358] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 542.458180][T10358] ? rcu_qs+0xc4/0x170 [ 542.458199][T10358] ? __pfx_rcu_qs+0x10/0x10 [ 542.458223][T10358] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 542.458256][T10358] queued_spin_lock_slowpath+0x43/0x50 [ 542.458286][T10358] do_raw_spin_lock+0x21f/0x290 [ 542.458317][T10358] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 542.458350][T10358] raw_spin_rq_lock_nested+0xad/0x140 [ 542.458376][T10358] __schedule+0x330/0x4c90 [ 542.458395][T10358] ? is_bpf_text_address+0x292/0x2b0 [ 542.458417][T10358] ? is_bpf_text_address+0x26/0x2b0 [ 542.458440][T10358] ? kernel_text_address+0xa5/0xe0 [ 542.458474][T10358] ? unwind_get_return_address+0x4d/0x90 [ 542.458497][T10358] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 542.458525][T10358] ? arch_stack_walk+0xfc/0x150 [ 542.458550][T10358] ? preempt_schedule_irq+0xb5/0x150 [ 542.458575][T10358] ? __pfx___schedule+0x10/0x10 [ 542.458597][T10358] ? stack_depot_save_flags+0x40/0x900 [ 542.458624][T10358] ? preempt_schedule_irq+0xaa/0x150 [ 542.458647][T10358] preempt_schedule_irq+0xb5/0x150 [ 542.458669][T10358] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 542.458696][T10358] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 542.458721][T10358] irqentry_exit+0x6f/0x90 [ 542.458743][T10358] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 542.458766][T10358] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 542.458797][T10358] Code: 89 fb e8 23 00 00 00 48 8b 3d 74 6e fa 0b 48 89 de 5b e9 33 20 55 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 90 9c 92 65 8b 15 58 6a [ 542.458817][T10358] RSP: 0018:ffffc9000cd4fa50 EFLAGS: 00000293 [ 542.458837][T10358] RAX: ffffffff82408535 RBX: 0000000000000001 RCX: 0000000000000000 [ 542.458853][T10358] RDX: ffff88806f16da00 RSI: 0000000000000ffd RDI: 0000000000000fe3 [ 542.458868][T10358] RBP: 0000000000000fe3 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 542.458885][T10358] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffff8880315cc080 [ 542.458909][T10358] R13: dffffc0000000000 R14: 0000000000000ffd R15: 0000000000000000 [ 542.458928][T10358] ? prepend_path+0x815/0x970 [ 542.458960][T10358] prepend_path+0x862/0x970 [ 542.458990][T10358] ? prepend_path+0x4b/0x970 [ 542.459024][T10358] d_absolute_path+0xa1/0x140 [ 542.459056][T10358] tomoyo_realpath_from_path+0x2c8/0x5d0 [ 542.459091][T10358] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 542.459115][T10358] tomoyo_path_number_perm+0x1e8/0x5a0 [ 542.459138][T10358] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 542.459161][T10358] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 542.459196][T10358] ? rcu_is_watching+0x15/0xb0 [ 542.459223][T10358] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 542.459267][T10358] ? __rcu_read_unlock+0x84/0xe0 [ 542.459296][T10358] ? __fget_files+0x2a/0x420 [ 542.459320][T10358] ? __fget_files+0x3a0/0x420 [ 542.459343][T10358] ? __fget_files+0x2a/0x420 [ 542.459369][T10358] security_file_ioctl+0xcb/0x2d0 [ 542.459394][T10358] __se_sys_ioctl+0x47/0x170 [ 542.459428][T10358] do_syscall_64+0xfa/0x3b0 [ 542.459451][T10358] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.459472][T10358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.459494][T10358] ? clear_bhb_loop+0x60/0xb0 [ 542.459518][T10358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.459539][T10358] RIP: 0033:0x7fbb0918ebe9 [ 542.459557][T10358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.459575][T10358] RSP: 002b:00007fbb0a07f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 542.459597][T10358] RAX: ffffffffffffffda RBX: 00007fbb093b6180 RCX: 00007fbb0918ebe9 [ 542.459614][T10358] RDX: 0000200000000bc0 RSI: 00000000c0405519 RDI: 0000000000000006 [ 542.459629][T10358] RBP: 00007fbb0a07f090 R08: 0000000000000000 R09: 0000000000000000 [ 542.459643][T10358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.459656][T10358] R13: 00007fbb093b6218 R14: 00007fbb093b6180 R15: 00007ffc04becf58 [ 542.459681][T10358]