last executing test programs: 2m49.921413161s ago: executing program 32 (id=2086): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="40000600000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="cebe8ba2084ace111620", 0xa, 0xfffffffffffffffe) 2m48.564187055s ago: executing program 33 (id=2095): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74f", 0x86}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388", 0x73}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5", 0x53}], 0x5}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m48.45500606s ago: executing program 2 (id=2098): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000680)="d7447f7f97", 0x5}, {&(0x7f0000000800)="3730f1b0", 0x4}], 0x2}}], 0x1, 0x20000800) (fail_nth: 1) 2m47.982237045s ago: executing program 2 (id=2099): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b", 0x83}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbd", 0x52}], 0x4}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m47.56691673s ago: executing program 2 (id=2101): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74f", 0x86}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5", 0x53}], 0x4}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m47.096140736s ago: executing program 2 (id=2106): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x1) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000003400)='./file1\x00', &(0x7f0000000140)='./file0\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f00000002c0)={0x33, 0x40000020, 0xffffffff}) setpgid(r1, r2) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000d, 0x2010, r0, 0x70af0000) 2m47.006767748s ago: executing program 2 (id=2107): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b", 0x83}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbd", 0x52}], 0x4}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m46.346457117s ago: executing program 2 (id=2108): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be1", 0x65}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222", 0x81}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91f", 0x51}], 0x5}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m45.878281746s ago: executing program 34 (id=2108): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be1", 0x65}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222", 0x81}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91f", 0x51}], 0x5}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m15.831802893s ago: executing program 4 (id=2189): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000017c0)=""/4113, 0x1011}, {&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000003840)=""/4160, 0x1040}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000000c0)=""/193, 0xc1}, {&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f0000000880)=""/108, 0x6c}], 0x7}, 0x12100) 2m14.666173334s ago: executing program 4 (id=2200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = epoll_create(0x6) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0xbb447000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 2m14.425974081s ago: executing program 4 (id=2203): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000017c0)=""/4113, 0x1011}, {&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000003840)=""/4160, 0x1040}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000000c0)=""/193, 0xc1}, {&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f0000000480)=""/64, 0x40}], 0x7}, 0x12100) 2m13.938627399s ago: executing program 4 (id=2205): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x1) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000003400)='./file1\x00', &(0x7f0000000140)='./file0\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 2m13.787312604s ago: executing program 4 (id=2207): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcd", 0x7b}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f8", 0x59}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5", 0x53}], 0x5}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m12.971516552s ago: executing program 4 (id=2209): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x76}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x58}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80040}, 0x80) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x40000000000000da, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2m12.789221537s ago: executing program 35 (id=2209): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x76}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x58}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80040}, 0x80) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x40000000000000da, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2m9.138000504s ago: executing program 6 (id=2226): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x1) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000003400)='./file1\x00', &(0x7f0000000140)='./file0\x00') ptrace(0x10, 0x0) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 2m8.895167914s ago: executing program 6 (id=2227): readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x4000) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="fc4406008e199ae0898c7a8988823619ba", 0xc}, {&(0x7f00000048c0)="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", 0x35f}], 0x0, 0x0, 0x0, 0x30008804}], 0x1, 0x4815) recvmmsg(r4, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/83, 0x53}, {&(0x7f00000002c0)=""/46, 0x2e}, {&(0x7f0000000400)=""/234, 0xea}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000000380)=""/54, 0x36}, {&(0x7f0000000600)=""/105, 0x69}], 0x6}, 0x3}], 0x1, 0x2100, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12015002c9825f2082057400702a0102030109021b000205e820040904000000ffdda50309040006"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 2m6.872318466s ago: executing program 6 (id=2230): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000017c0)=""/4113, 0x1011}, {&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000003840)=""/4160, 0x1040}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000000c0)=""/193, 0xc1}, {&(0x7f0000000300)=""/184, 0xb8}, {0x0}, {&(0x7f0000000480)=""/64, 0x40}], 0x8}, 0x12100) 2m6.653208093s ago: executing program 6 (id=2232): r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x7fffffffffffffff, 0x8, 0x1}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000003c80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000011c0)={0x0, 0x3, 0x8}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000015c0)={0x1, 0x7, {0x5, @usage=0x2, r1, 0xffffffffffffffff, 0x4, 0xbb, 0x6, 0x2, 0x0, @struct={0x3, 0x3}, 0x6, 0x5, [0x7fffffff, 0x5e, 0x8, 0xfffffffffffffff4, 0xf343, 0x7]}, {0x4, @usage=0x8, r2, 0x46, 0xd, 0x9, 0x6, 0x2, 0x1, @struct={0x9, 0xd7b}, 0x4, 0x0, [0x0, 0x4, 0x99a, 0x0, 0x103, 0x5]}, {0x7e, @struct={0x8000, 0x4}, r3, 0x2, 0xfffffffffffffffe, 0x2, 0x0, 0x8, 0x2a, @usage=0x8000, 0x100, 0x6, [0x6, 0x7142, 0x8, 0x5aa5, 0x2, 0x81]}, {0x9, 0x1ff, 0x1}}) (async) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) (async) ioctl$TCSETA(r4, 0x5401, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000000c0)={0x1, 0xb, 0x0, "e97e32e744844206e7136b6fbe7f704bd6d35d47be1970788862a991329890c1"}) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8044) writev(r0, &(0x7f0000003c00)=[{&(0x7f00000019c0)="392a92f7a0545e91ed23106fe7891151dc6e07c1ac09f34e6dcc581607a48a84bbdf6e86379c5d1fce99f204ac21d84134f178b185ddc220c8217cd57635df51b74472121ae3bcfe5bcab539580d59a7ba98feb87ac357c3beb2a62ca33dda4f0fc9733853639d4e73badf8323320b1c213ab2637a470efc47fabbbb5ee54bb557331a137b038a438a65b792b682d87ffc7b26a29093c62bd2bb99c57fd2e00ba65fd44676e41888f998c5478a4c7bf0d422ea516d3cc11b69db671fa722fdac974e166698bd10d09ce34fac3c3143bf7132a416f5e1d66c70adb47d3becb18f4ddd4b63c60222505f311014c1e6f9cce9c769273cec9ad1a0c08e1a4afbd21b064dbcd0ef2d81587678e6b7f7c52af33ad32710d463206b87b75ea48c0e3967e2e3a626db1cd7084592225b8e2cd9a22b9ee884a04a173afdf47d350d6e54e4b19f4e2d0d604604806a63dbbd93f0767fdb9192425a5215c09a51baa569a707f932a61d29dfc91db7eca49cd0d1699994a014e6acb1a8f5d6fbe8a55eac97ea1903cf8d2c272c683332e89f36dbad0eb31e131ffc7f647a27031e4c2feab90672b7f40afb6ffd643acb0990ffaa0871c855c5f150c1ca3706c4040b28ef4bf4360b0681060511c7c914abb32d6de69068f8badddbe9a757c3270ac340641cc4f3447bab4a4ab48e0821253009e372bcf283683393c514da3b10bf4d40b9949f556340a2c13d9fd317d18100a059babcc4d2805f79a8c88b39afd70c8454639895aab2070ee384eb35c913f9fcfcfa61f20208308dd758f337e4ffb338096fb1795f54b061f4d5b96fbde5ed144c17ee3879598f2a91f6cafc1cc90a7d887c2aa111d331e7a1eb3f38d0093844b7ba837501f353271d2e37ea1003ac405b55257902274c8309d0778fc8ff95c637eecbdc92b4546bef48f48ab0075fd5162c645226312e02b97dbf45dc3c77598891749f70706ecd5232bb16e1f7adced9f9183a3b8e1954ed103ef1e548273d330b6c2fe86e81c9140258c285cf0a9979233dc4820c35e0652d32bd7ab9c14619e3184019e60c3e1075874aa2e7a502eaef181bc7c9df17ab4d0e730158499abcaa68c23fb4addf825909af7ef028229e06520ada38181d8979656f895b133dc713d5ca39c0a8e9e550f598ea464ee6ae8b483e3e66cf32b027b82447f9c09932d55878e387909cfcc57579fed730e8e7681e3cf54a49bdabe96c42e3d3c1cfa77cb7fdc821a795080c72f7977596467d1e9d661b28ce6fff2574c90c6c92d919fd80c36287c8979b44cd6c0cfe0c041b1b9f6b2abfc2b5b1f3c85fed8cc4f2c58cac40e4b8748855cf3e5a9797e2e000908ba7458e994d9770eaa8ba7dc87f37738eb84f223bcbfde3e639da8ba6d4d41e2570fe759ba9f57d358baa2506e64687d65cd7a209b444df5435dbc6e9abff2055d03423e17c3c74b0525332e64f0b5bb86ee1b91aa1e2e353d3770c8038e5b0e074c8c0bab3f049231d5a311e96092f6e4bc5b71302c5e13c8c7a4d9c775a8c061946e50af29d735917be1a5032586a7ecba772fa94468b63c8e495397a2dd22abbb98548ce3ccfdc46fbfe7789a3a32cf0bc55c3f18537231b1aef5715333f1161b0d0308b19f3423c0a91719241df11a06f4bb5a5c8f25c58c8bfa49c48cb77e01812e9bc6c55b48b52f913591c095419c4baea53ab7cefe429f8094c6fef2ebd1316a0167395080f63cfdb999b83058d9a99b5b67cce5afbac66be23d45cec91e09ba5459b7572af397051ddc3a0fab82552e08af1e907e6920afa1c13abdafd8e05a5c232042531725320723d74bfc540a2f034aef78a924a0101c0492395f4fdfb0e07b220d5381b9f4ab44451dfc9e34a89cfb5490ba8ed65ca97b946f3f157fb98782ff79eb7463b93b55b72cc1fff53241b6825bdfbfe631d3b2271854595878aa5e255fe64212d2ff62595946a706764ca27457f5b372421168ff5ae0729d5724c6beba6ad772d2d1f29080a4b2258ba15db0f8c2c8359781f1e891d50063f7d65cd8017a4518958d671a1445a67a8aee582e2ceb26282e2fac13a454a630d77953d17bfd2b8eac8b0c927ecf7dfbaaba822e68c9f84fa1659b838ea20b66908b4dcf09767673f3fd82155204e18a832418a69e27eae46756df9620b2578e707927eb948f57257fcbfa9bfebbfb5028dfa92705ebcc954332002c91b0554daf087a499a0450f12803833d7dce41638c60ceb985ab0c4c1741fd26ac2dd3e7ef37e4debd4b6cdf44b111f90a3ca9360afdc58842d7a7d2fe793d5b1430042e0d060901977112ee5b22996dadf67feaf296c8935287671a16615a6050a5d2a2b1b55144a63da8d55ba2a45fe4074bf3cd8372da77820fa13a588ac2f2150302d4b588934264a47d38bd08a9c55c5c300d4c4f03049fb398b0486a99c5cfde0af77ebb55f28cab1da0b859eee2a029f26fffdcd6133d9c21000fcefda899cc80f46c59c65239630f68c5838cad85a6c6c0fd1a6384860260bdb88a49836386101659f963ef43478c1a091774d7ccfdf623bb20e6d9e71ee7ca46baed87cffd55618018f9a7fc28ca5eecfa40757b69e09916c56ff944cacce3655951f68bc80bc7e62815d489420169f37bfcd23e7301f09e46854d167c0c7105ebdf98d31d03923e2e07eb69fcd9ea12407957683a333157e571babc1132fa5fc4c2ccedc620cb7db8d5e6e4316bc55ab6785cfeda7b4fad09f20f3513f58ec747138f0986f57b5082fcc5ebe5c8dc800fa784f20a45448b37d462f25ad650eae420fe2eb4d4da6b61aef956a296981291b3d06cd65457a9e3034ba60eed2f09b7b4cf653d812736ae8730eaa07f0302904f925abf5822521d42892a6efa915abe2561adf9aead2dc52bddc9aea7fe24c29e8f39de110e7e78164f057b65abb62cbbc98dfdd56f879cacd40565cb72c6d929bcf5bba80fe3be81c3904bca3fea7078f280d1fa7bd6d5ced66fb8beca757aab56e8165b3fd08cb63dbf6da9583989acaf29bce37b2879eb14a44bebd87ba1da9b843335e33b5523f3b7ff401bfa3ee239acb5e93bbb918f760bbd39468d8d32811e5152918a274e70e32058adc281629630d6c9a3347bb74d6c0458b6a0c04140383f81f340e8d5c46dcee43209eb13d79920174b4d8ccf4585d0a608ea5882277e19b76ba30eb4266060c907f272f269a31f8809a8fe9940f48b5a9fd3699bcc0b590b04aa112609408bdac78dc59264a56d840daae56fb73da797b7a9f48381cdedf6fafc30d9cb81626ee058be886e6d34d58fb9c46aa2fa132c2df5950f5bf3706dc54c5dafea703675db31c471c38976b00469ba10bb26afa49fb3771e0ea94792e7864a6a54e8d0666744bf0e1eecf83cb539347c09853b77a26fae6169ad2fe0aeac1f53c2239c0632936929aa88e994c60c34fd201c825e3d063ab45d938d4efff11b9ac440d890ae9fdf83ce592a1938b9a00bc7b2f48a4c19bf63910932d757e9c9c8ddb978856e927069246d4bd1c01148d43fb147b9068283328c11cc516f30cf377b66b8db05ddad257ffdaee5252478e5a867cc2623be6adfe1341e6f35139afdce64fa0a21d6f6f8954300c45b9796d711ff09686ad7355a847efab21f357f58520203f8829bcaf2b23692b8625c9b2a206e280a71721c8ef534b18c8f72cd1010a1d74225e5ba6464897497a473c39e9a8aef39786b8166dc72d1990221ac333b1a2130ff4de8d8cc0847f4b0bca218340380de9b29d33e47ecfe06ab2d5f838184fae73dcf2b77ef67729f783b58f36937ff0edd0bcd161f6630f988749e089d6bd6b238ad8f3d352f8df925c5cff20a7cff9316194b266be4b469f9c57fedbb356c5cc3d5b66e9d5dfcbdffd1c4de7d29a550f1006d0bfd57933f0d15454c9c3f0153a33564bcdf31faf81d00b0454328afff5893003e43c140307f5c62e9d8c8c069e8b5110110c7fdb193a0dae869d2bda0aae2284730d4d4f405446d5b34e0d33b7255eb0ce3a49645ffac04c4ee32b81cd2eb2de270cbee0e6b6110c19a91372ffcf464763204bccb357e0c0e149bfc67259f81767fcd948931b599dcdf2665a6c73e0df61c4a06df43f7816370d2b1d8daf3d16a96a9ff32e0e1866da99662613759b231ab7cc28db07f97f27da4a118dcc2de777b6fc547dbd5eb33639fadca40918d809f961635533285492f4d006675afcb9dd68cc2758f602014eaeae356d7c5275a03641169932e318962f6bd0ecc6237101bbd4e9b5a1f359702093fd7e45a3a1784d6fc693b421275591e8d3e69edf9b2406c80faf9289b84861bc94e9f2816de976dea88ea1f583aacdd531c73a818b20a439f55ab5d79a891e2582c332b4b4ca47ca695055e28ad1c7c99d9bdf598772ea0060576cee3802b970dcdea80009de01fa11322d456b93956b76aee67d455ba4063e1ded06bda630ea62e4e2c8816c97081f010d88cabdbe89ed07dfc88827506fc1614b34fe37574db4474a5f683a13962619f8c1ba6dbd1a0d3e353d8b7766d0941f07d8fb8a454e6d70e97374300eff779bbaf6485ce42d92635c1f869f3613f18670f75c063507e0fb46e8887962e718322318854186bb98e80bb036f47016acc96e2b1b30e5dddeadde7ea16878e5cb6d6b3029edef1180ce3a170497db5c074ddc94aafd12fd0c5ebe91b2ee1de65a6b0b92aa60185bedf67da4e82b34bd7d45e6a0d1370092a16e23a16b60006f19f37702bf6d24733593ca02738a447abb3ba5a9ab4dc2dd03d1f22b277b929a81306371426a8cb965650face445f2040207f95ce2f81f9b0a01fff68e51db8020792a9b8c5ad20af51006663b8fbae6497348e33c19caf24013669097c370b4cfbb219882e163d91ae2f9298675f9f37cdd2b04da63812f1add857da0abc23283eb00c8b944490cc1c66800da700a579392f457c43bc33f9906433b804a40a40730fe862e6a32539590385c92f3195615274b8af31fa7adcf0d842fcaeec098f2b3c2ee53f67af76babdbc6f55865cd6289cc1f6663e8cbb589e61321fef83fb23a7631279ece1964665a786f1aba443e516e0de0580e4ec96a48f3441f6d4a56b028fe3601a2d17e689195a22734ea25bae6d172df0022f27b366b7ac1f90a0e705cccff3c3695c3a2b18d4f2d43a14914ba1bbaa42720a357e77d955b249b93a3fd7c06b0cd506345838b17328bd1dad651c525ab8055ce27c5bb31835a24379f56d2b504e2688e206cee0281c3d00c3baa599a3c513fb8c3e30307886f0b26aa22969770cff7dd005acad845b2015070f2bd6fea2facf0a38fea6d71792959a11bbf1583c4b14779cecc62d1b901055365fcbe86b7e69adff0a097a58a40700de806f7b03ab5ec044b0fa630be54b8f98cbe789845e768541e4ff60457dc681c80147c4b917a2f11a96db35811eac52231d3375ca6af14aa4fe2f1d202d2766169f44e6714a636d41a7fe7b5361913c5db442e1cdf807e5ce633fd1b0c005791eb10be62f080f02c933b03561d0158ea0407ca123942f38233637b6c139e0d54a7647bd2ff151621fccfa8ca18a1e07943cfb306426fbe87e7eeeb17a2a5c452d91032491eb6e89829384576fd165fdc49012077e1e63a804b9369951b450170adecc426f6b7a4c76fc849fa8c72121f06058fb70cdaf8ddf6e91cb4c5d27b7a0c7f1842f424bcf60aca792757c39da18457d8df7504c4ad09668fd38689bd27ebe8dd215fd2c9940877169099071d9b12c36a79df54937281ebbb6963", 0x1000}, {&(0x7f00000029c0)="c24602c2a506aed055f8c0005ceb6e5d74444f408a2a81724d2ab7f3fc181bc4a9603d6aaf3c404d07e1d60b2918f9c2eb5c14f615e3b4bb04e56da84d28ccd6b42f3aa9144a2b5922dc8b62e96e8924b05173a62ea50ad740b439fb96cf3ccf1c2ba6982b9ea94efba37e36b151ef7b6187bd8a20c97f5f1441ee15146f5109787ad056d7c0d7501d8a162001c860aa234cef326b10321e04a4f93f810b86bca8483d560da588eb0e9bc1ad366459bb8b6791ec47990e8c44", 0xb9}, {&(0x7f0000002a80)="952015109c0db55d0870207b680d1ba785a0a9cc40312a9897c24c82b23c4dd44b8f62f374395cbb480425309b0ce752a393c4678186242f601795ac9810ff869bbfb13f32aa333970bd54ed3d5a316d6ab3b232763130326e95aa3dbac2693a2ab58c8a1c89c813f1d1a44f3e", 0x6d}, {&(0x7f0000002b00)="f5026c81c067e6f5504a1c30ee9e87604b9a26e2c8e30c4eac01e7ffcaaa162bfd062258942dc87f907c9f49a919e0e33f518b09382d9c04215db7b344f30c4ae65bf26da254884d484049f830ec76810827b35970b0efd131579d9adffcf6252e28352d4ea797afd6561dbe831aa5222158594bbbe1aee0b35c3dc55907fb1740d9f68bc4725a77990128bc4f8908d54b43b90020073a91015ebb0a5bedcf3c0f769a59df5014f7ccc6f7076a5425be4d4af382dc737b484f7f5b76baf8b24beaab6babf494b03ea1838571c405a10398a503715446ad1be605df0575e10a8bf8aedfb845c1613f14699a4bd6590ef640e52ebeb18f7324572b8cb40834e9c1fdc75711e2f5693e18b57eaeb6ce8382fab22957699e8945c719df25a8042f2068683538a5325ceca23f7468eb8513796d3dbfe49e97ef6d863e4cf4426a1a3dcfadae004e886d262fa2d004defce6086201209bcee0be3889898d50da07f8a09902ea9eb584a704b4e512a17f4ca4434dfbffea5c8950acfa01b03f9a0f7d8f91ab7c0a9d2e88dd86bd337d7a930391e77da912b76a0b8615434f2360cebfb9273bbf1b88dd915a5a80becf4b4a03e4ac608012d4b0a6ecb8a417149180742686adf516cecca5e759819e601ab4373357716714f432eabee42a6f930c85b2d868f1608ed9e632f4b5f591240b984e9fac0dbf7cc6fb1e6aaf35e50359f2019397e9b26ef0db280be7a3ad3ef1550835505fbacb4a3eb0b2423ee61abb9d212715bf1aabdd8eceea5d5dc67735a78acbe01aa867e3d96ccda9f72db1c21cf37d2d20703616ceca5e02307c07b6aba444f25c38cb89179c5ef8d3f20fb4da6ddb0bcf82e103b4d50e83a6ba7bef6168433abfe4b282c2d353069be4dd4c9578a14a6f5493172509e028994b5a597bf3bce01cb5b5373932aa3a3d71787186dde9eddaeb4c663fb754c65f3c8010d64fc8e1da942fcc78aec3b2f81a9dcb416f320ce18eceb96b607d42d5629b2f37a3967fdff8b0f87cad59439647f86716cc780d4dfc2b874ea984bf0ce6bf1c145afd1b22f28196137733537000ed11dad55d1646679fccdaf3ea31a73c4f577eb04ede8a6b8fe16b24778b43196837a3a1f3e0bc0bae5ffb7c5235c7afaa205ca0b9cc18316ef18ba9b5ef3c633b583f338279bfd3ed28451980364443030ad01333635bdf22c589f321898fe5843ba06da10b496d1ac0f355b5147782a8dd385d688e3526ec7f8cfa9d2862cb627f1f81d0ab6ff88ae4deaf75927a03cf635f0fe6de0954f22b0692901f758d8dc473b8c26a8f1d033ea460624d0b425074578f40eb0d76b92c247841dd53b016870876e8cacb794ab4737d62a9c59a99ea7085bd2d0ccbeb5809175a7ef315fdaaadc63441fce995de815933177714c18b6aa7b4f5b760b49692d5bfc70e30468ddcce8138da3d7b5f286ed2b411404c3815bf81be96593b4f73c7ab8f48bcced0cca436fbd3a03a5c87527df929a3341d6ed7f86547d0ffe14ab9617ca55abb30d23409ab2da70a55247f5fab81616ed4a7dfdf8f383b99e947afc8b51b479cf60b64aa1d16cacffded95dbc437ced6da44d5be01c614b85871a598f3fa913d46ff5f7328a8e0047a4e7657faefda000909ea62ea54d7db6350ac596dbf2cc6ec56dd3c064f3f6ac1f56595c09c7d443968b8ab1ea25aa71bda035836401af72ae2339a0f6eee796d0233fbe798cea078ef4cb1a8af7dfb0c87c684fe8ea3e62f6311d02c81a0e21061ea40f4ca4d6e799d69a751f6b121cf112b947188ef85476954958ee003c7f34ee79b1f038e401ddda5af5ccd0a09f30deb21caceaf0c8ea747cc634d6513a7b0f00981f1e3eb0673622316f48399b609e1951340220b4aeae7e4466273574e8bce786d636477d08bd0502b9eae3d1ecc57d3cfab6f7249a905f626f7d70874dc32e070f26b9f1aa75a433589a5ac3a2265201ede9f057a7b37b67a0c7474b3d5c4db60a2a4b199e7b82c8b5917d28f240366945d2a32403c8b6421bd4200207cd0e29db0c33697ff8a4198e67105f4b516ee24a620b8e5a60ac4f58bbc1b9a719017cfb8e8f82f884bc1cf365a6e06679f5c5eb3fa4dbffac0f820a03961dabcfd58fe025e06463f49f0d98074cbe9a2f10ab6815711e23260d4366efaf0c6307479a0b3d863dcd7a93fa3059a30ec6c8fc5eecf1a154994c6707bd517be7c717094e66568997c146475d82e38bd1dbf0a6ffd96ef8e98cca7a41f008a611a103df80d2801ae76f29edd9ca71609ea234b96879daaf2549f0d092b68190e658d9e0be410f7a788082bc48c7f33277b3b87c1282cc13c6bbfdd5516d6c301348c9f5e4ac213bd7451749dfe4a0c56be6d364181bb5ed584cef0635933646cf60f83aee8f5ccffda201c1b9c5d572b47cf4586fee54db942fca9a85762b56ff38990db26f27dfafcbb640b8a0943158d4009831161f52ff78ffb736ab03ad5bd7cbf994b38b40456a95caa4cf87c9db287156a182bc94a5d247b503f19ea36c14e38b2a633c6917a9ade7e76901516cbc989aab9bbab03461072b8ae917e07321f67775dbd6f920595456e1ff9d1234542f56f22894c98fc8de491f77811481f08fffe394a04692c0274f89ad1215a7346a5ae81fcad4917ca872dbe9f6e0a57d1be6a9a15dec7cff94f69d635720d1b51ae69da931c854fcfd58e11f293dad76c4508b30c18c7afcde2f44a996f7a0b1522b39f6ccd5da75b36bbff71a25ae18de6a4a4e5322f60541f1b01087182394ee2535a576815a9e01642127465cb0779afb6796a8467609c3fde31fd0fef9158a9afbac6f8f7763471df18ff7df7eb511c6926b6138f16b0bc87cc8282caf9c0e254f7756bf440e20d7d688ef89c1a826ab31bdb616049e7651436b11edeebd83d5c59c6ebab37845ed30a33acaf875be15962a2b3da8b91d241ee0800846fd17cc52a580a2e8cc58d660f595aace0429bf471809092d7457dbd126b44faeb1112b580915be69b8cd6aa6695c2e78ae7bf45625a5f8a21c00a2a3258cf5b76e796ad39b42b275c9569ca3fedf3ee7e8ce595ce432d9899b445adbd4ab0b099e2db429fa29ab094577202f4d4fb898b480d2fdba11b43504639d262157b8c7d2c236d424fd887ce6d5e4a841b16d60fd85ac76352fef11ed4a5a3c2459be1068f3bd8e23aa6ef263ef255b5f5fe437c30b7f372cd836c48ebd16f2a24553c6522929d24858c985e071416ba31ee79da7d6fca4ac37445145cfdaadbbfb93f6c600968986895a35df390bd76eb2011687bb4634fd6c1e8669c90e9dc4e4839f090dff2ba57d1ab6a87043cf229debd012f6bc7fdde5c61d8e870d95e8bf60c33f5adb31f3acaedb65396bdd7fca1054923c4b9e84622d681790b4c3b7cab8db0139178000d5da59a9379b8bcb160017bde5ef46ba84730bda20489c31011393173fc081e1adb29267e453c26ce93cfb998e1158ca30cc7b308500dd4152e6fd031f68e2c88eb320ed774f871d11fd25e3c96bd822117a7811ed7347ff6283228be41345b7fd74ec0f363b6955520734d4b98eee4fa0156bd09323cef247009599fe456603f2b2bc87fa6d0e0cc7e37c94bc6378357b5ecec7d22161f2bb428c7bdd0ca22b3d91d262b9f0f1f408bc1b91b1683d31dcff5409cd1c2ba86dbb16a112b6e2a47cd381dd87ba8e95a45348b0dfa05a9cee6e75b270ed0bf75f4d77ee384633d69d29c43e666d9685627118f9da8c88f809b13d51b67cd6ef6db8cdd86801d80d4f25a5adf4c1580e72b32e8926cf41ab4e8e9366cd567c1bc35d0d3f7a3884c75d7d4f64b0813e21ebcf17bcd676d88afadb26fa43b57a76ac97ee1cb4e61a7e88aa85489b2b7a296fcb8568f7659e88b130cf31802a650412c95baf5eacf72ad49733deae8162273e5a7bf0d5310788818710205a020014606b955298e37917fab95ae2f0c2611ebaefc5267cebff87b837b71015108e65c59fc63ecb809865bdf845a4ac7a7313602c4002284331c21a4f7f2cbce6155bb219150f4f3f8bd7a0df63432f287b7b8ca57e221059d3cadb41623ee47a5cd3e96ab561eaa1e8b356644ee703dc902aeeece54eeaecf27b2afe7f94191419922969371990641312424f80765d8deb88f07430891ead0f341bd59f7eac92963c9211cc3c784274beb6053713ba9c7919f7a36ff3fbea167a8d7afbc6724679fd92befe7298086a8539c630605611354496f12a2a58437a8cabe0b215fd6ee334e24adcce80877664631ad9f6cd0bf58b143a77318e95578bade06154273ac2633ac171abc16722b53b13eef4742c6ee9416bf52363e1ada9d465f9efe3ce13c3f5a7e2d49f6fa48e3ae9152e5fac3da052eb739faaa3b2a9d0360a2317f479d5a682b824257dfb3f36f65eb558264b6752e6fdde8e2d8f3bfd1ca00676fe2ab28c223f6c77865dd67d87c95c9bf28724b755ff61d552e76402253c211865cf5b6d6b68c24b8d18200d0d5139851b08224e350af871cd95e011a6595d82792649440725534001418c17ada317293b284a9fdad29bdcd2ef632d3bb7a7f0c683c8676f81a84a2fb0b39451b9623418dbdc7eabb8c90f210074467717f6dd2d00930d64d9922c2040b9a2519ea6e7456d65f800c3f39dc222b4e30681a74d4927c8d81169e17a135cb4f8ed5511e5556cbe32528e4822a9e21d80620e22b9fea31b713f78ba198e60364459ae850b5df7839f8b00ea3a2de865bf0a1aa558c4a04069be8ac23ca1de97311414a8b48a1bb83012838d552cf68cc65716b8c7584aabd2f83986c2074579f557ffa0d8e80cd5a24148ac58670e161e2497ee6d2a684cb48d94cae26dc8a55c47d9e8ab8b792f77ad6d81058d4f227f8c2a1e2f9a66ba3b63445a37fda546bf74f97885fdf4b2eeb23945ad23cc2ccd79dc9791860f11a5453cbd4dc58645c77c22cb7480e162b54cbe6c953c9adba213e5c2764daaf545b5c5493d123342c3c6ed7584b8b5f1174dfdf83f3b646c8f31c03b498d81ff77b44d4c460280e8ba1a1a3c43c6631f6c481565db908dea2ff4a3c7685f530f6d30c516409d2f2be3c0c26443ff333a0c9b59c0fd840b0c17067f9bf3fe82d9ce6c599161b0925b8098f0d7b14e4fc48ad0f01967942d7c77a2683be386fd5679a1ce44e477d22190b55b9ad536418c17d82bad786fb119efef37d37efcabf27d8515e80c0cf548ff3352f78aaacabb38281d3f7e951798db566af1dd15611fb22fd182ff00cc8628ce3172446b01c9913941d287b73992536f8b6066a0b070e51e2ea0cc0afa49a496c6788a18aac677a4a702002529987b039d3b2143dc5ede1e1f09e9bd5c97d8f35d7add7e6fe93a50ae3716c30244e91d247feebb020a083c913df980b77c0a2248f97661c811da4a401a1f3565be1471b21b02d79eca8efdf05f858c44223be956e7d0343bc1ab1609c437411165930bb79f91448240aee63d85f14e4dad5da5ad66e161547aea926fe7538465756212404e20d90727d5f4c27a2cc4492669dcb44d8150352fa907e9f0eed6955293aed815897841b2cb8082352be8a605639e64432176703b8d8e7f5005f472b44319d8bbbc3afb3479c2fa59d15d2c48bce00f2f7bf8cd913245bd36bfe59d92dd3f8708da8f16e4c1dac003d9cd312efa43106448738652c23dca8717da21186e4c753392e2655f440c7f997fd8da85d044ec38c69a6353fc4baf149738dfcc2403117d154438ab5c8eaae634bc19c1b9e295aa7dd37", 0x1000}, {&(0x7f0000003b00)="1724e51c5ad74e5e6c9da7f75737d6706f79ddfa57b3d2a473d369be44a54174d5a958c1067e64621abdd258b397177706f36e66a93d53c80714c585745998e9cde7cc165badcef2de0f6e46360cc3f37deb5f9d47d2f9f7c5e941483e8737feb5a9e1abaae791b1da42cacd45f92507e1e3a8e1e02791356132c04ccb25e5e15518fb926f4cd0be33a6831b4504ea7d71fd1109840035d43f189f9fbff761569dc51ee0ed9a3eb152bf2a6694f4733008aa1be82173e4838da5c3f1c0b2ebced88487", 0xc3}], 0x5) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) umount2(&(0x7f0000000080)='./file0\x00', 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) connect$unix(r7, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 2m6.328654708s ago: executing program 6 (id=2235): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b", 0x83}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbd", 0x52}], 0x4}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m5.074917961s ago: executing program 6 (id=2238): rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6901d000) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000002440)={0x0, 0x2c, 0x0, @thr={&(0x7f0000001380)="13bccaafaef4a6f8dd03e9ff8075b8e4d632a98a1d84b5141f923d3b8b3f27477be0884c087dd9a5f003d75611da513442f72e4fd6c347f4e3aeab74a0917b7869b671c2e1785ff3a981bd3752e608e80ea970419a8e33b00ddb848cb397b6b1a0ed169f0bb701acf08e01673204b9907875a68843f284953e4241c57de685a0836c7d49e1bc706748b729faa06025984f9da4efe56a020cbc", &(0x7f0000001440)="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"}}, &(0x7f0000002480)) clock_gettime(0x0, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000080), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x1, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x4bf79010b1377d51, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x17e0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x40, 0x7, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x80, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x371}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x3, 0xf7}}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x19, 0x0}) 2m4.671988201s ago: executing program 36 (id=2238): rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6901d000) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000002440)={0x0, 0x2c, 0x0, @thr={&(0x7f0000001380)="13bccaafaef4a6f8dd03e9ff8075b8e4d632a98a1d84b5141f923d3b8b3f27477be0884c087dd9a5f003d75611da513442f72e4fd6c347f4e3aeab74a0917b7869b671c2e1785ff3a981bd3752e608e80ea970419a8e33b00ddb848cb397b6b1a0ed169f0bb701acf08e01673204b9907875a68843f284953e4241c57de685a0836c7d49e1bc706748b729faa06025984f9da4efe56a020cbc", &(0x7f0000001440)="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"}}, &(0x7f0000002480)) clock_gettime(0x0, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000080), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x1, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x4bf79010b1377d51, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x17e0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x40, 0x7, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x80, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x371}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x3, 0xf7}}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x19, 0x0}) 2m3.115263222s ago: executing program 0 (id=2243): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x1) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000003400)='./file1\x00', &(0x7f0000000140)='./file0\x00') ptrace(0x10, 0x0) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 2m2.967963432s ago: executing program 0 (id=2244): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffbb, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000003640)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1, 0x6, 0x4) (fail_nth: 1) 2m2.474505139s ago: executing program 0 (id=2245): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b", 0x83}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbd", 0x52}], 0x4}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m1.807701776s ago: executing program 0 (id=2250): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x1) chdir(&(0x7f0000000140)='./bus\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 2m1.433393848s ago: executing program 0 (id=2252): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="001503000000c39242"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="001503000000c39242"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 2m0.383716757s ago: executing program 0 (id=2256): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b", 0x83}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbd", 0x52}], 0x4}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m0.190824651s ago: executing program 37 (id=2256): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b", 0x83}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbd", 0x52}], 0x4}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m35.69041604s ago: executing program 9 (id=2257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x84) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000780), 0x4880, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x1}) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80100, 0x13) umount2(&(0x7f0000000340)='./file0\x00', 0x4) setuid(0xffffffffffffffff) ioctl$FIONREAD(0xffffffffffffffff, 0x8020699d, 0x0) r2 = semget(0x0, 0x1, 0x281) semctl$GETZCNT(r2, 0x3, 0x7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) futex(0x0, 0x84, 0x2, 0x0, 0x0, 0x22) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000364000/0x2000)=nil, 0x2000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x5, 0x6, 0x7ff, 0xe, 0x2004cb, 0x0, 0xa1d, 0x48ff, 0x7, 0x0, 0x3, 0x2], 0x1000, 0x202}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="c4a12d6b32f30f090f23aa66baf80cb8a2092a87ef66bafc0c66ed66baf80cb86c0bf28fef66bafc0cec66b832018ed066660f38f69a0400000066baf80cb83cedee86ef66bafc0cedb9800000c00f3235001000000f30c744240000000000c744240206000000c7442406000000000f011424", 0x73}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m34.087664296s ago: executing program 9 (id=2309): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000017c0)=""/4113, 0x1011}, {&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000003840)=""/4160, 0x1040}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f0000000880)=""/108, 0x6c}, {&(0x7f0000000480)=""/64, 0x40}], 0x7}, 0x12100) 1m26.72463791s ago: executing program 5 (id=2331): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000017c0)=""/4113, 0x1011}, {&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000003840)=""/4160, 0x1040}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000000c0)=""/193, 0xc1}, {&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f0000000880)=""/108, 0x6c}], 0x7}, 0x12100) 1m25.47639416s ago: executing program 5 (id=2337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000070102000000000000eeffffffff060900010073797a300000000008000540000000020c00064000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x10) 1m25.335033295s ago: executing program 5 (id=2339): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcd", 0x7b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae996", 0x5e}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5", 0x53}], 0x4}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m25.143866094s ago: executing program 5 (id=2341): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000340)={0xf93a, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r3}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3000004, 0x11, r0, 0x100000000) (fail_nth: 1) 1m24.55939321s ago: executing program 5 (id=2342): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74f", 0x86}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355", 0x5b}, {&(0x7f0000000480)}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4", 0x49}], 0x5}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m24.304600073s ago: executing program 5 (id=2344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x20800) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000340)={0xf93a, 0xffffffffffffffff, 0x2}) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000040)=0x2800000, 0x4) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_notify(r5, &(0x7f0000000280)={0x0, 0x18, 0x0, @thr={0x0, 0x0}}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r7, 0x40025b0c, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r4}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3000004, 0x11, r2, 0x100000000) 1m18.785989005s ago: executing program 38 (id=2309): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000017c0)=""/4113, 0x1011}, {&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000003840)=""/4160, 0x1040}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f0000000880)=""/108, 0x6c}, {&(0x7f0000000480)=""/64, 0x40}], 0x7}, 0x12100) 1m9.041790111s ago: executing program 39 (id=2344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x20800) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000340)={0xf93a, 0xffffffffffffffff, 0x2}) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000040)=0x2800000, 0x4) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_notify(r5, &(0x7f0000000280)={0x0, 0x18, 0x0, @thr={0x0, 0x0}}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r7, 0x40025b0c, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r4}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3000004, 0x11, r2, 0x100000000) 7.074850479s ago: executing program 7 (id=2633): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000002, 0x80000000000d, 0x2000004, 0x0, 0x0, 0x401) r1 = signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x4}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x282002, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_channels={0x0, 0x6, 0x400, 0x15800, 0xe, 0x7, 0x5, 0xcd7, 0x1}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000040)={0x10, 0x20}) syz_usb_connect(0x0, 0x73, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ea7c5708f0031d58b3120000000109026100040007200709045805007ec8ee020904fa0200ff"], 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYRES16=0x0], 0x14}], 0x1, 0x0, 0x0, 0x4814}, 0x300) 6.419038221s ago: executing program 3 (id=2637): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000240)=[@authinfo={0x12, 0x84, 0x6, {0x8}}, @init={0x18, 0x84, 0x0, {0x80, 0x0, 0xb, 0x140}}], 0x30, 0x4}, 0x40) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000019080)=0x30) 6.27033798s ago: executing program 3 (id=2638): socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x800, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x3, 0x6, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0xb639, 0x2, 0x1000000c, 0x0, 0x6, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x1ff, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0], 0x0) 3.890343102s ago: executing program 7 (id=2652): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x2}, 0x0) (fail_nth: 1) 3.467491801s ago: executing program 7 (id=2654): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r2 = eventfd2(0x2002, 0x80001) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) write$eventfd(r2, &(0x7f0000000080)=0x430f, 0x8) 3.246251864s ago: executing program 8 (id=2657): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000017c0)=""/4113, 0x1011}, {&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000003840)=""/4160, 0x1040}, {&(0x7f00000000c0)=""/193, 0xc1}, {&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f0000000880)=""/108, 0x6c}], 0x6}, 0x12100) 2.8073863s ago: executing program 7 (id=2658): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcd", 0x7b}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae996", 0x5e}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5", 0x53}], 0x4}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.675942488s ago: executing program 3 (id=2659): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x2, {0x2, 0xff, 0x3}, 0xff}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x800000000f, &(0x7f0000003780)=0x7, 0x4) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) listen(r3, 0xb5d6) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000080)=@generic={0x1, 0x5, 0x8000000000000000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)={0x2, 0x0, [{0xa000, 0x19, &(0x7f0000000180)=""/30}, {0x5000, 0x13, &(0x7f0000000640)=""/78}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r6 = socket(0x11, 0x3, 0x0) setsockopt(r6, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg(r6, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x86dd, r7, 0x1, 0xe5}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000004c0)="2d0402000b00280084002d3922ff65b4355e953d23d254f0", 0xfe4d}], 0x1}, 0x4) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x151400, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x6, &(0x7f0000000040)=0x100000001, 0x4) 2.661864568s ago: executing program 8 (id=2660): mkdir(&(0x7f0000000400)='./file0\x00', 0x3f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 2.52108232s ago: executing program 7 (id=2662): mkdir(&(0x7f0000000400)='./file0\x00', 0x3f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (fail_nth: 1) 2.366920277s ago: executing program 7 (id=2663): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd5, 0x28, 0x1b, 0x8, 0x9c0, 0x201, 0xfa4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3d, 0xae, 0xa0, 0x2, "", [{{0x9, 0x4, 0x25, 0x7, 0x0, 0x13, 0xfd, 0x42, 0xfb}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000540)={0x0, 'virt_wifi0\x00', {0x2}, 0x7ff}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x3f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "f819ebf45608e22e7a4944572ae210d0125a4b55b61c5deb3eb574c486d27eb2"}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x2f, 0x804c040}, 0xc851) sendmmsg$inet_sctp(r3, &(0x7f0000001880)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0xb54, 0xffff070d}}], 0x20}], 0x1, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x4001, &(0x7f0000000240)={[{@userxattr}, {@nfs_export_on}, {@index_on}, {@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.[:&.].'}}, {@audit}, {@obj_user={'obj_user', 0x3d, 'upperdir'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20004000) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 2.362622559s ago: executing program 8 (id=2665): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x2a, [0xfffffff8, 0x1, 0x5, 0x9, 0x10004, 0x155f, 0x6, 0x4, 0x25cd, 0x4, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0x2, 0x6, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x76, 0x25713dc3, 0x10000, 0x0, 0x7, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x7e, 0x9, 0xf9a2, 0x80000001, 0xfc, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x2400006f, 0x8e, 0xd50, 0x9, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x7, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x5, 0x8000007, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x0, 0x7, 0xf1, 0x6, 0x1, 0xffff, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x401, 0x80000002, 0x3, 0x2, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x10000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x7, 0x8000, 0x400, 0x2, 0x5, 0xd2, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x7, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x143, 0x2, 0x2, 0x6, 0x8000, 0xe7, 0x3, 0xd500, 0x5, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x8, 0x1afc, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0x9, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0xfffffffffffffffa, 0xfff, 0x4, 0x40000000000180, 0xb, 0x80000000, 0xf2, 0xd, 0x7fffffffffffd, 0x7, 0xbc, 0x7, 0x0, 0x5, 0x1004, 0x8], 0x80a0000, 0x304}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.259180355s ago: executing program 8 (id=2666): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x2a, [0xfffffff8, 0x1, 0x5, 0x9, 0x10004, 0x155f, 0x6, 0x4, 0x25cd, 0x4, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0x2, 0x6, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x76, 0x25713dc3, 0x10000, 0x0, 0x7, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x7e, 0x9, 0xf9a2, 0x80000001, 0xfc, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x2400006f, 0x8e, 0xd50, 0x9, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x7, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x5, 0x8000007, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x0, 0x7, 0xf1, 0x6, 0x1, 0xffff, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x401, 0x80000002, 0x3, 0x2, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x10000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x7, 0x8000, 0x400, 0x2, 0x5, 0xd2, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x7, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x143, 0x2, 0x2, 0x6, 0x8000, 0xe7, 0x3, 0xd500, 0x5, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x8, 0x1afc, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0x9, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0xfffffffffffffffa, 0xfff, 0x4, 0x40000000000180, 0xb, 0x80000000, 0xf2, 0xd, 0x7fffffffffffd, 0x7, 0xbc, 0x7, 0x0, 0x5, 0x1004, 0x8], 0x80a0000, 0x304}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (fail_nth: 1) 2.183789836s ago: executing program 3 (id=2667): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74f", 0x86}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b", 0x83}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}], 0x4}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcc2, 0x4, @mcast1, @empty, 0x8000, 0x8, 0x2, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @loopback, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x18, 0x1402, 0x300, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0xc004085) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r1, 0x0, 0x0, 0x800) (async) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.014162497s ago: executing program 8 (id=2668): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000017c0)=""/4113, 0x1011}, {&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000003840)=""/4160, 0x1040}, {&(0x7f00000000c0)=""/193, 0xc1}, {&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f0000000880)=""/108, 0x6c}], 0x6}, 0x12100) 1.945045365s ago: executing program 3 (id=2669): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x1fb, 0x248, 0x9b99}, 0x2a, [0xfffffff8, 0x1, 0x5, 0x9, 0x10004, 0x155f, 0x6, 0x4, 0x25cd, 0x4, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0x2, 0x6, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x76, 0x25713dc3, 0x10000, 0x0, 0x7, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x7e, 0x9, 0xf9a2, 0x80000001, 0xfc, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x2400006f, 0x8e, 0xd50, 0x9, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x7, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x5, 0x8000007, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x0, 0x7, 0xf1, 0x6, 0x1, 0xffff, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x401, 0x80000002, 0x3, 0x2, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x10000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x7, 0x8000, 0x400, 0x2, 0x5, 0xd2, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x7, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x143, 0x2, 0x2, 0x6, 0x8000, 0xe7, 0x3, 0xd500, 0x5, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x8, 0x1afc, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0x9, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x220fc, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0xfffffffffffffffa, 0xfff, 0x4, 0x40000000000180, 0xb, 0x80000000, 0xf2, 0xd, 0x7fffffffffffd, 0x7, 0xbc, 0x7, 0x0, 0x5, 0x1004, 0x8], 0x80a0000, 0x304}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.865845915s ago: executing program 8 (id=2671): syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) futex(&(0x7f0000000500), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x2, 0x25000000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) read$fb(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x575, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x85, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x2, 0x1, 0x3a, 0xa0, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "924a91f9b3ed"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xec8b, 0x401, 0xc69, 0x2}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@country_functional={0xa, 0x24, 0x7, 0xf, 0x725, [0x1000, 0x200]}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x1, 0xfa, 0x46}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0xa, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x40, 0x2}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x9, 0x7, 0x0, 0xff, 0x9}, 0x29, &(0x7f0000000300)={0x5, 0xf, 0x29, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x0, 0xff00, 0x8, [0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "c0f2d8fb9f0a9c4ef97284aab57655f9"}]}, 0x3, [{0x30, &(0x7f0000000340)=@string={0x30, 0x3, "163550b2166a059a819f782e6b42fd4ee52cb08404c82e102b8184914b515a858a398bd5b3b1df592741240368db"}}, {0xfb, &(0x7f0000000380)=@string={0xfb, 0x3, "b2b6df4fe0c1e55ae9dfd5294f714c97a85bdd8858624acdbb09873218389083ab8770980b03a36153a4d2a3ffa20fbcd8bc626c484548d1e4e7cc09f0e0199a33a6cf1a74438379c405bc930f0d02c690675d181ae536131443d803710c5a3444de017f1b83228866b5c7eaa1bf4009bccd041ec09f4ff4c2004ce8c7ab841997caff58efa6f26940ca9b26e351b1495a88f3cec731f6fb184d9a3a86f8f76162523bd58b41496d14c70a91d7f36b05dc1d90cfc56407b1efe141d63a884f3ad52e7654a9191a83b199bcee7f2318746d563c1045e2c56aae9aa92e1322f53ecffa6b03e4a0dd1766deca7fe4169d4401e2c42cca54f82b69"}}, {0xc5, &(0x7f0000000500)=@string={0xc5, 0x3, "5cbadcf667ea860c87255210fbc843399130367db4b292e127becd7c2a6623025e691f5c622e4765359846f8cd8079102498aabec8e4dbc462229eb1a46148c1bb2f912fd71d0900f5053400365f97880f40a1c18093056bad338d9484117134d918352b0d362c38edd13707f84981017c10ce2d13fa322b7b2769eece8b86b425bc433adc6d003a9afc9680621379e1048a32552959289e71121b289739070bda196e701b94169bab58b4d95d248b88c3567cb93381b2c34e5ff204311a10c63ea303"}}]}) (async) syz_usb_connect$cdc_ncm(0x4, 0x85, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x2, 0x1, 0x3a, 0xa0, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "924a91f9b3ed"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xec8b, 0x401, 0xc69, 0x2}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@country_functional={0xa, 0x24, 0x7, 0xf, 0x725, [0x1000, 0x200]}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x1, 0xfa, 0x46}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0xa, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x40, 0x2}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x9, 0x7, 0x0, 0xff, 0x9}, 0x29, &(0x7f0000000300)={0x5, 0xf, 0x29, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x0, 0xff00, 0x8, [0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "c0f2d8fb9f0a9c4ef97284aab57655f9"}]}, 0x3, [{0x30, &(0x7f0000000340)=@string={0x30, 0x3, "163550b2166a059a819f782e6b42fd4ee52cb08404c82e102b8184914b515a858a398bd5b3b1df592741240368db"}}, {0xfb, &(0x7f0000000380)=@string={0xfb, 0x3, "b2b6df4fe0c1e55ae9dfd5294f714c97a85bdd8858624acdbb09873218389083ab8770980b03a36153a4d2a3ffa20fbcd8bc626c484548d1e4e7cc09f0e0199a33a6cf1a74438379c405bc930f0d02c690675d181ae536131443d803710c5a3444de017f1b83228866b5c7eaa1bf4009bccd041ec09f4ff4c2004ce8c7ab841997caff58efa6f26940ca9b26e351b1495a88f3cec731f6fb184d9a3a86f8f76162523bd58b41496d14c70a91d7f36b05dc1d90cfc56407b1efe141d63a884f3ad52e7654a9191a83b199bcee7f2318746d563c1045e2c56aae9aa92e1322f53ecffa6b03e4a0dd1766deca7fe4169d4401e2c42cca54f82b69"}}, {0xc5, &(0x7f0000000500)=@string={0xc5, 0x3, "5cbadcf667ea860c87255210fbc843399130367db4b292e127becd7c2a6623025e691f5c622e4765359846f8cd8079102498aabec8e4dbc462229eb1a46148c1bb2f912fd71d0900f5053400365f97880f40a1c18093056bad338d9484117134d918352b0d362c38edd13707f84981017c10ce2d13fa322b7b2769eece8b86b425bc433adc6d003a9afc9680621379e1048a32552959289e71121b289739070bda196e701b94169bab58b4d95d248b88c3567cb93381b2c34e5ff204311a10c63ea303"}}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf25030000000c00018008000700", @ANYRES32=0x0, @ANYBLOB="a9714028ee91e6f1a7e4f3e0197c2538dc6657e9392b4b8d19887fdaa0b75c14e9b4caf8e40aaa426f219e070039028844ee3f9ae21e4260810933787fe6293a3c4550599f42f936afc11a709506012a1662b0e0eccbb687de9831c33caed586fde128869eccbcf0a012bc48c5e7f29ad3e98eacc18f7ac2c26f3151338e2868b8a78f71178d9f3f2552bd5a57b47f59"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf25030000000c00018008000700", @ANYRES32=0x0, @ANYBLOB="a9714028ee91e6f1a7e4f3e0197c2538dc6657e9392b4b8d19887fdaa0b75c14e9b4caf8e40aaa426f219e070039028844ee3f9ae21e4260810933787fe6293a3c4550599f42f936afc11a709506012a1662b0e0eccbb687de9831c33caed586fde128869eccbcf0a012bc48c5e7f29ad3e98eacc18f7ac2c26f3151338e2868b8a78f71178d9f3f2552bd5a57b47f59"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.735689868s ago: executing program 1 (id=2672): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') preadv2(r1, &(0x7f0000000340)=[{&(0x7f0000000480)=""/148, 0x94}], 0x1, 0x3, 0x88c7, 0x4) 1.509397197s ago: executing program 1 (id=2673): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') preadv2(r1, &(0x7f0000000340)=[{&(0x7f0000000480)=""/148, 0x94}], 0x1, 0x3, 0x88c7, 0x4) 1.287643765s ago: executing program 1 (id=2674): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x54) (async) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00050000000500f6000e00000014002c80080000000000000008"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) syz_usb_connect$uac1(0x2, 0x85, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0x0, 0x0, 0x45, 0x0}) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) (rerun: 64) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000040)={0x2, 0x0, [{0x1, 0x6b1, 0x4004, 0xfffffff7, 0x4be1}, {0x4, 0x3, 0x400ffc, 0x3, 0x804}]}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r9, &(0x7f0000005840)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/122, 0x7a}], 0x1, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000980), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000a80)=""/215, 0xd7}, {&(0x7f0000000c00)=""/240, 0xf0}, {&(0x7f0000000d00)=""/191, 0xbf}], 0x3}}, {{&(0x7f0000000e00)=@abs, 0x6e, &(0x7f0000002140)=[{&(0x7f0000000e80)=""/96, 0x60}, {&(0x7f0000000f80)=""/99, 0x63}, {&(0x7f0000001000)=""/202, 0xca}, {&(0x7f0000001100)=""/59, 0x3b}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x5, &(0x7f00000021c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000002200)=@abs, 0x6e, &(0x7f0000002380)=[{&(0x7f0000002280)=""/222, 0xde}], 0x1, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000002480)=@abs, 0x6e, &(0x7f0000002580)=[{&(0x7f0000002500)=""/122, 0x7a}], 0x1, &(0x7f00000025c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002600), 0x6e, &(0x7f0000003780)=[{&(0x7f0000002680)=""/215, 0xd7}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x2, &(0x7f00000037c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f00000038c0), 0x6e, &(0x7f0000003a40)=[{&(0x7f0000003940)=""/46, 0x2e}, {&(0x7f0000003980)=""/35, 0x23}, {&(0x7f00000039c0)=""/89, 0x59}], 0x3}}, {{&(0x7f0000003a80), 0x6e, &(0x7f0000003f80)=[{&(0x7f0000003b00)=""/208, 0xd0}, {&(0x7f0000003c00)=""/71, 0x47}, {&(0x7f0000003c80)=""/216, 0xd8}, {&(0x7f0000003d80)=""/176, 0xb0}, {&(0x7f0000003e40)=""/185, 0xb9}, {&(0x7f0000003f00)=""/74, 0x4a}], 0x6, &(0x7f0000004000)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}}, {{&(0x7f00000040c0)=@abs, 0x6e, &(0x7f0000005580)=[{&(0x7f0000004140)=""/68, 0x44}, {&(0x7f00000041c0)=""/170, 0xaa}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/116, 0x74}, {&(0x7f0000005300)=""/86, 0x56}, {&(0x7f0000005380)=""/167, 0xa7}, {&(0x7f0000005440)=""/152, 0x98}, {&(0x7f0000005500)=""/38, 0x26}, {&(0x7f0000005540)}], 0x9, &(0x7f0000005640)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000005680)=@abs, 0x6e, &(0x7f0000005800)=[{&(0x7f0000005700)=""/57, 0x39}, {&(0x7f0000005740)=""/179, 0xb3}], 0x2}}], 0xa, 0x1, &(0x7f0000005ac0)={0x77359400}) (async) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x1, 0x1, 0x1, 0x946, 0x5, 0x8, 0x3}, {0x6, 0x80000000, 0x0, 0x4, 0x6, 0x10, 0x8}]}) (async, rerun: 32) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x8802, &(0x7f0000000400)=ANY=[@ANYBLOB="7400000000000000059d487266646e", @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',access=user,\x00']) r12 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r12, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) (async) ioctl$XFS_IOC_FREE_EOFBLOCKS(r8, 0x8080583a, &(0x7f00000000c0)={0x6, 0x4, 0x9c11, 0x3, 0x4, 0x0, 0x2}) r13 = syz_open_dev$sg(&(0x7f0000001b40), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r13, 0x227e, 0xfffffffffffffffe) (async) recvmsg$can_bcm(r12, &(0x7f00000004c0)={&(0x7f0000000200)=@sco, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000280)=""/12, 0xc}, 0x9cb8ad7b68bc3f87) 786.960335ms ago: executing program 1 (id=2675): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xd5ec, 0x9, 0xc3f, 0x8, 0x10000, 0x1, 0x4002004c2, 0x2000000000fff, 0x1400000000000000, 0x0, 0x3fd, 0x1080, 0x1, 0xfff7ffffffffffff, 0x8a, 0x4000000000008d], 0x100000, 0x40000}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48", 0x7}], 0x1}], 0x1, 0x40800) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 627.235413ms ago: executing program 3 (id=2676): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xd5ec, 0x9, 0xc3f, 0x8, 0x10000, 0x1, 0x4002004c2, 0x2000000000fff, 0x1400000000000000, 0x0, 0x3fd, 0x1080, 0x1, 0xfff7ffffffffffff, 0x8a, 0x4000000000008d], 0x100000, 0x40000}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48", 0x7}], 0x1}], 0x1, 0x40800) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 182.556766ms ago: executing program 1 (id=2677): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[], 0x8) 0s ago: executing program 1 (id=2678): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xd5ec, 0x9, 0xc3f, 0x8, 0x10000, 0x1, 0x4002004c2, 0x2000000000fff, 0x1400000000000000, 0x0, 0x3fd, 0x1080, 0x1, 0xfff7ffffffffffff, 0x8a, 0x4000000000008d], 0x100000, 0x40000}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48", 0x7}], 0x1}], 0x1, 0x40800) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ? lockdep_hardirqs_on+0x7a/0x110 [ 353.231377][T11844] ? __pfx_do_mmap+0x10/0x10 [ 353.231398][T11844] ? rwbase_write_lock+0x568/0x730 [ 353.231438][T11844] vm_mmap_pgoff+0x2cc/0x4f0 [ 353.231467][T11844] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 353.231495][T11844] ? __fget_files+0x2a/0x420 [ 353.231516][T11844] ? __fget_files+0x3a6/0x420 [ 353.231536][T11844] ? __fget_files+0x2a/0x420 [ 353.231567][T11844] ksys_mmap_pgoff+0x4e8/0x720 [ 353.231592][T11844] ? __x64_sys_mmap+0x7f/0x140 [ 353.231612][T11844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.231632][T11844] do_syscall_64+0x15f/0xf80 [ 353.231661][T11844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.231680][T11844] ? clear_bhb_loop+0x40/0x90 [ 353.231703][T11844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.231721][T11844] RIP: 0033:0x7f7a0204c819 [ 353.231739][T11844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.231754][T11844] RSP: 002b:00007f7a002a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 353.231774][T11844] RAX: ffffffffffffffda RBX: 00007f7a022c5fa0 RCX: 00007f7a0204c819 [ 353.231791][T11844] RDX: 0000000003000004 RSI: 0000000000002000 RDI: 0000200000003000 [ 353.231804][T11844] RBP: 00007f7a002a6090 R08: 0000000000000003 R09: 0000000100000000 [ 353.231816][T11844] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 353.231827][T11844] R13: 00007f7a022c6038 R14: 00007f7a022c5fa0 R15: 00007ffd97b77278 [ 353.231854][T11844] [ 353.849657][T11848] netlink: 'syz.5.2342': attribute type 72 has an invalid length. [ 354.387605][ T32] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 354.538686][ T32] usb 6-1: Using ep0 maxpacket: 8 [ 354.542179][ T32] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 354.542240][ T32] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.542266][ T32] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.542292][ T32] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 354.542319][ T32] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.542363][ T32] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 354.542390][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.863778][ T32] usb 6-1: GET_CAPABILITIES returned 0 [ 354.863834][ T32] usbtmc 6-1:16.0: can't read capabilities [ 355.639228][ T5981] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 355.909333][ T5981] usb 9-1: Using ep0 maxpacket: 16 [ 355.914670][ T5981] usb 9-1: unable to get BOS descriptor or descriptor too short [ 355.928416][ T5981] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 355.928453][ T5981] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 355.943113][ T5981] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 355.943203][ T5981] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.943241][ T5981] usb 9-1: Product: syz [ 355.943279][ T5981] usb 9-1: Manufacturer: syz [ 355.943315][ T5981] usb 9-1: SerialNumber: syz [ 356.243386][T11860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.267290][T11860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.302626][ T5981] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 356.302664][ T5981] cdc_ncm 9-1:1.0: bind() failure [ 356.420442][ T5981] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 356.420498][ T5981] cdc_ncm 9-1:1.1: bind() failure [ 356.577835][ T5981] usb 9-1: USB disconnect, device number 2 [ 357.165193][T11870] FAULT_INJECTION: forcing a failure. [ 357.165193][T11870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.165229][T11870] CPU: 0 UID: 0 PID: 11870 Comm: syz.8.2348 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 357.165255][T11870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 357.165269][T11870] Call Trace: [ 357.165277][T11870] [ 357.165287][T11870] dump_stack_lvl+0xe8/0x150 [ 357.165319][T11870] should_fail_ex+0x46b/0x600 [ 357.165349][T11870] _copy_to_user+0x31/0xb0 [ 357.165388][T11870] simple_read_from_buffer+0xe1/0x170 [ 357.165420][T11870] proc_fail_nth_read+0x1be/0x230 [ 357.165452][T11870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.165482][T11870] ? rw_verify_area+0x2ac/0x4e0 [ 357.165512][T11870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.165541][T11870] vfs_read+0x212/0xa80 [ 357.165580][T11870] ? __pfx_vfs_read+0x10/0x10 [ 357.165614][T11870] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 357.165645][T11870] ? lockdep_hardirqs_on+0x7a/0x110 [ 357.165676][T11870] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 357.165707][T11870] ? mutex_lock_nested+0x152/0x1d0 [ 357.165729][T11870] ? fdget_pos+0x252/0x320 [ 357.165765][T11870] ksys_read+0x156/0x270 [ 357.165799][T11870] ? __pfx_ksys_read+0x10/0x10 [ 357.165839][T11870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.165865][T11870] do_syscall_64+0x15f/0xf80 [ 357.165894][T11870] ? trace_irq_disable+0x3b/0x140 [ 357.165924][T11870] ? clear_bhb_loop+0x40/0x90 [ 357.165952][T11870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.165975][T11870] RIP: 0033:0x7f5662b8d04e [ 357.165995][T11870] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 357.166015][T11870] RSP: 002b:00007f5660dfcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 357.166038][T11870] RAX: ffffffffffffffda RBX: 00007f5660dfd6c0 RCX: 00007f5662b8d04e [ 357.166054][T11870] RDX: 000000000000000f RSI: 00007f5660dfd0a0 RDI: 0000000000000004 [ 357.166068][T11870] RBP: 00007f5660dfd090 R08: 0000000000000000 R09: 0000000000000000 [ 357.166082][T11870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.166095][T11870] R13: 00007f5662e46128 R14: 00007f5662e46090 R15: 00007fff2d2dc108 [ 357.166130][T11870] [ 357.823448][T11878] Zero length message leads to an empty skb [ 358.304307][T11883] netlink: 'syz.7.2352': attribute type 72 has an invalid length. [ 358.989639][ T32] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 359.158058][ T32] usb 9-1: Using ep0 maxpacket: 16 [ 359.162220][ T32] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 359.162258][ T32] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 359.162296][ T32] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 359.162341][ T32] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 359.162367][ T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.244627][ T32] usb 9-1: config 0 descriptor?? [ 359.252541][T11890] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 359.621360][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2355'. [ 360.746242][T11906] FAULT_INJECTION: forcing a failure. [ 360.746242][T11906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.746281][T11906] CPU: 0 UID: 0 PID: 11906 Comm: syz.7.2358 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 360.746307][T11906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 360.746322][T11906] Call Trace: [ 360.746331][T11906] [ 360.746340][T11906] dump_stack_lvl+0xe8/0x150 [ 360.746371][T11906] should_fail_ex+0x46b/0x600 [ 360.746401][T11906] _copy_from_user+0x2d/0xb0 [ 360.746432][T11906] __se_sys_migrate_pages+0x54a/0xca0 [ 360.746470][T11906] ? fput+0xa0/0xd0 [ 360.746495][T11906] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 360.746526][T11906] ? ksys_write+0x248/0x270 [ 360.746560][T11906] ? __pfx_ksys_write+0x10/0x10 [ 360.746602][T11906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.746626][T11906] do_syscall_64+0x15f/0xf80 [ 360.746656][T11906] ? trace_irq_disable+0x3b/0x140 [ 360.746682][T11906] ? clear_bhb_loop+0x40/0x90 [ 360.746710][T11906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.746734][T11906] RIP: 0033:0x7faa50a7c819 [ 360.746756][T11906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.746776][T11906] RSP: 002b:00007faa4ecd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 360.746799][T11906] RAX: ffffffffffffffda RBX: 00007faa50cf5fa0 RCX: 00007faa50a7c819 [ 360.746816][T11906] RDX: 0000200000000040 RSI: 0000000000000005 RDI: 0000000000000000 [ 360.746830][T11906] RBP: 00007faa4ecd6090 R08: 0000000000000000 R09: 0000000000000000 [ 360.746843][T11906] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 360.746858][T11906] R13: 00007faa50cf6038 R14: 00007faa50cf5fa0 R15: 00007ffcb65d9ef8 [ 360.746891][T11906] [ 361.395935][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.454454][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.467979][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.488240][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.540425][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.576808][T11939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.613561][T11939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.004538][ T60] Bluetooth: hci4: command tx timeout [ 365.055808][ T32] usbhid 9-1:0.0: can't add hid device: -32 [ 365.055943][ T32] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 365.236239][T11953] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.2369'. [ 366.007226][ T1501] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.077684][ T60] Bluetooth: hci4: command tx timeout [ 366.196667][ T5915] usb 9-1: USB disconnect, device number 3 [ 366.796333][T11965] FAULT_INJECTION: forcing a failure. [ 366.796333][T11965] name failslab, interval 1, probability 0, space 0, times 0 [ 366.796371][T11965] CPU: 0 UID: 0 PID: 11965 Comm: syz.7.2370 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 366.796396][T11965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 366.796409][T11965] Call Trace: [ 366.796417][T11965] [ 366.796427][T11965] dump_stack_lvl+0xe8/0x150 [ 366.796458][T11965] should_fail_ex+0x46b/0x600 [ 366.796495][T11965] should_failslab+0xa8/0x100 [ 366.796529][T11965] __kmalloc_noprof+0xdf/0x7b0 [ 366.796558][T11965] ? kfree+0x4d/0x6c0 [ 366.796584][T11965] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 366.796618][T11965] tomoyo_realpath_from_path+0xe3/0x5d0 [ 366.796646][T11965] ? tomoyo_domain+0xd7/0x130 [ 366.796679][T11965] ? tomoyo_path_number_perm+0x219/0x630 [ 366.796712][T11965] tomoyo_path_number_perm+0x246/0x630 [ 366.796750][T11965] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 366.796784][T11965] ? __lock_acquire+0x6b5/0x2cf0 [ 366.796818][T11965] ? do_raw_spin_lock+0x12b/0x2f0 [ 366.796877][T11965] ? __fget_files+0x2a/0x420 [ 366.796908][T11965] ? __fget_files+0x2a/0x420 [ 366.796933][T11965] ? __fget_files+0x3a6/0x420 [ 366.796959][T11965] ? __fget_files+0x2a/0x420 [ 366.796989][T11965] security_file_ioctl+0xc3/0x2a0 [ 366.797025][T11965] __se_sys_ioctl+0x47/0x170 [ 366.797058][T11965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.797083][T11965] do_syscall_64+0x15f/0xf80 [ 366.797113][T11965] ? trace_irq_disable+0x3b/0x140 [ 366.797143][T11965] ? clear_bhb_loop+0x40/0x90 [ 366.797177][T11965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.797199][T11965] RIP: 0033:0x7faa50a7c819 [ 366.797220][T11965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.797239][T11965] RSP: 002b:00007faa4ecd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.797261][T11965] RAX: ffffffffffffffda RBX: 00007faa50cf5fa0 RCX: 00007faa50a7c819 [ 366.797277][T11965] RDX: 0000200000000040 RSI: 000000004008ae90 RDI: 0000000000000005 [ 366.797291][T11965] RBP: 00007faa4ecd6090 R08: 0000000000000000 R09: 0000000000000000 [ 366.797305][T11965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.797318][T11965] R13: 00007faa50cf6038 R14: 00007faa50cf5fa0 R15: 00007ffcb65d9ef8 [ 366.797352][T11965] [ 366.902077][T11965] ERROR: Out of memory at tomoyo_realpath_from_path. [ 367.602365][ T1501] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.157705][ T60] Bluetooth: hci4: command tx timeout [ 368.231581][T11985] tmpfs: Bad value for 'mpol' [ 368.533399][T11991] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.2377'. [ 368.674391][ T1501] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.870688][T11903] chnl_net:caif_netlink_parms(): no params data found [ 369.306091][T11852] Set syz1 is full, maxelem 65536 reached [ 369.553464][T12002] FAULT_INJECTION: forcing a failure. [ 369.553464][T12002] name failslab, interval 1, probability 0, space 0, times 0 [ 369.553501][T12002] CPU: 1 UID: 0 PID: 12002 Comm: syz.8.2380 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 369.553527][T12002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 369.553541][T12002] Call Trace: [ 369.553550][T12002] [ 369.553560][T12002] dump_stack_lvl+0xe8/0x150 [ 369.553592][T12002] should_fail_ex+0x46b/0x600 [ 369.553623][T12002] should_failslab+0xa8/0x100 [ 369.553659][T12002] __kvmalloc_node_noprof+0x170/0x8e0 [ 369.553695][T12002] ? traverse+0xde/0x580 [ 369.553737][T12002] traverse+0xde/0x580 [ 369.553768][T12002] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 369.553803][T12002] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 369.553836][T12002] ? seq_read_iter+0xb8/0xe20 [ 369.553874][T12002] seq_read_iter+0xd09/0xe20 [ 369.553919][T12002] ? __asan_memset+0x22/0x50 [ 369.553952][T12002] seq_read+0x36a/0x490 [ 369.553984][T12002] ? get_pid_task+0x20/0x1f0 [ 369.554021][T12002] ? __pfx_seq_read+0x10/0x10 [ 369.554064][T12002] ? apparmor_file_permission+0x1f4/0x300 [ 369.554105][T12002] ? __pfx_seq_read+0x10/0x10 [ 369.554137][T12002] proc_reg_read+0x1f6/0x2f0 [ 369.554168][T12002] ? __pfx_proc_reg_read+0x10/0x10 [ 369.554201][T12002] vfs_read+0x212/0xa80 [ 369.554248][T12002] ? __pfx_vfs_read+0x10/0x10 [ 369.554287][T12002] ? __fget_files+0x2a/0x420 [ 369.554318][T12002] ? __fget_files+0x2a/0x420 [ 369.554343][T12002] ? __fget_files+0x3a6/0x420 [ 369.554368][T12002] ? __fget_files+0x2a/0x420 [ 369.554405][T12002] __x64_sys_pread64+0x19c/0x230 [ 369.554442][T12002] ? __pfx___x64_sys_pread64+0x10/0x10 [ 369.554485][T12002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.554510][T12002] do_syscall_64+0x15f/0xf80 [ 369.554541][T12002] ? trace_irq_disable+0x3b/0x140 [ 369.554567][T12002] ? clear_bhb_loop+0x40/0x90 [ 369.554596][T12002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.554619][T12002] RIP: 0033:0x7f5662bcc819 [ 369.554639][T12002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.554659][T12002] RSP: 002b:00007f5660e1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 369.554684][T12002] RAX: ffffffffffffffda RBX: 00007f5662e45fa0 RCX: 00007f5662bcc819 [ 369.554701][T12002] RDX: 000000000000009c RSI: 0000200000002100 RDI: 0000000000000003 [ 369.554716][T12002] RBP: 00007f5660e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 369.554730][T12002] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 369.554744][T12002] R13: 00007f5662e46038 R14: 00007f5662e45fa0 R15: 00007fff2d2dc108 [ 369.554781][T12002] [ 370.193619][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.211299][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.214508][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.215718][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.216528][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.251977][ T5834] Bluetooth: hci4: command tx timeout [ 370.269100][ T1501] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.857371][T12014] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 370.926465][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.926592][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.926856][T11903] bridge_slave_0: entered allmulticast mode [ 370.946494][T11903] bridge_slave_0: entered promiscuous mode [ 370.963782][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.963892][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.964104][T11903] bridge_slave_1: entered allmulticast mode [ 371.003866][T11903] bridge_slave_1: entered promiscuous mode [ 371.595392][ T5915] usb 6-1: USB disconnect, device number 5 [ 371.682109][T11903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.794606][T11903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.125462][T11903] team0: Port device team_slave_0 added [ 372.271988][T12039] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.2385'. [ 372.321234][ T5831] Bluetooth: hci1: command tx timeout [ 372.368278][T11903] team0: Port device team_slave_1 added [ 372.615720][T11903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.615740][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.615771][T11903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.656723][T11903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.656778][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.656894][T11903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.872876][T12048] binder: BINDER_SET_CONTEXT_MGR already set [ 372.872888][T12048] binder: 12047:12048 ioctl 4018620d 200000004a80 returned -16 [ 373.018048][T11903] hsr_slave_0: entered promiscuous mode [ 373.021856][T11903] hsr_slave_1: entered promiscuous mode [ 373.025895][T11903] debugfs: 'hsr0' already exists in 'hsr' [ 373.025921][T11903] Cannot create hsr debugfs directory [ 373.041813][ T1501] bridge_slave_1: left allmulticast mode [ 373.041885][ T1501] bridge_slave_1: left promiscuous mode [ 373.042564][ T1501] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.215308][ T1501] bridge_slave_0: left allmulticast mode [ 373.215340][ T1501] bridge_slave_0: left promiscuous mode [ 373.215588][ T1501] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.289698][ T1501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.348258][ T1501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.382782][ T1501] bond0 (unregistering): Released all slaves [ 374.397637][ T5831] Bluetooth: hci1: command tx timeout [ 375.104541][T12086] netlink: 'syz.7.2393': attribute type 4 has an invalid length. [ 375.947795][ T5981] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 376.098751][ T5981] usb 9-1: Using ep0 maxpacket: 32 [ 376.101282][ T5981] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 376.101319][ T5981] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 376.101349][ T5981] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 376.101395][ T5981] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 376.101421][ T5981] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.206057][ T5981] usb 9-1: config 0 descriptor?? [ 376.207231][T12101] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 376.265936][ T5981] hub 9-1:0.0: USB hub found [ 376.420320][ T5981] hub 9-1:0.0: 2 ports detected [ 376.426324][T12113] FAULT_INJECTION: forcing a failure. [ 376.426324][T12113] name failslab, interval 1, probability 0, space 0, times 0 [ 376.426355][T12113] CPU: 1 UID: 0 PID: 12113 Comm: syz.7.2399 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.426377][T12113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 376.426389][T12113] Call Trace: [ 376.426396][T12113] [ 376.426404][T12113] dump_stack_lvl+0xe8/0x150 [ 376.426431][T12113] should_fail_ex+0x46b/0x600 [ 376.426456][T12113] should_failslab+0xa8/0x100 [ 376.426486][T12113] __kmalloc_noprof+0xdf/0x7b0 [ 376.426511][T12113] ? kfree+0x4d/0x6c0 [ 376.426533][T12113] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 376.426560][T12113] tomoyo_realpath_from_path+0xe3/0x5d0 [ 376.426583][T12113] ? tomoyo_domain+0xd7/0x130 [ 376.426610][T12113] ? tomoyo_path_number_perm+0x219/0x630 [ 376.426639][T12113] tomoyo_path_number_perm+0x246/0x630 [ 376.426670][T12113] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 376.426697][T12113] ? __lock_acquire+0x6b5/0x2cf0 [ 376.426724][T12113] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.426822][T12113] ? __fget_files+0x2a/0x420 [ 376.426848][T12113] ? __fget_files+0x2a/0x420 [ 376.426869][T12113] ? __fget_files+0x3a6/0x420 [ 376.426889][T12113] ? __fget_files+0x2a/0x420 [ 376.426914][T12113] security_file_ioctl+0xc3/0x2a0 [ 376.426944][T12113] __se_sys_ioctl+0x47/0x170 [ 376.426971][T12113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.426992][T12113] do_syscall_64+0x15f/0xf80 [ 376.427018][T12113] ? trace_irq_disable+0x3b/0x140 [ 376.427040][T12113] ? clear_bhb_loop+0x40/0x90 [ 376.427063][T12113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.427082][T12113] RIP: 0033:0x7faa50a7c819 [ 376.427106][T12113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.427123][T12113] RSP: 002b:00007faa4ecd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 376.427143][T12113] RAX: ffffffffffffffda RBX: 00007faa50cf5fa0 RCX: 00007faa50a7c819 [ 376.427157][T12113] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 376.427168][T12113] RBP: 00007faa4ecd6090 R08: 0000000000000000 R09: 0000000000000000 [ 376.427179][T12113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.427190][T12113] R13: 00007faa50cf6038 R14: 00007faa50cf5fa0 R15: 00007ffcb65d9ef8 [ 376.427219][T12113] [ 376.494370][T12113] ERROR: Out of memory at tomoyo_realpath_from_path. [ 376.582643][ T5831] Bluetooth: hci1: command tx timeout [ 377.077740][ T1501] hsr_slave_0: left promiscuous mode [ 377.117562][ T1501] hsr_slave_1: left promiscuous mode [ 377.125121][ T1501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.130631][ T1501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.168884][ T1501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.168915][ T1501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.374664][ T1501] veth1_macvtap: left promiscuous mode [ 377.395740][ T1501] veth0_macvtap: left promiscuous mode [ 377.404395][ T1501] veth1_vlan: left promiscuous mode [ 377.417731][ T1501] veth0_vlan: left promiscuous mode [ 377.849476][ T5981] hub 9-1:0.0: hub_hub_status failed (err = -32) [ 377.849507][ T5981] hub 9-1:0.0: config failed, can't get hub status (err -32) [ 377.862435][ T5981] usbhid 9-1:0.0: can't add hid device: -32 [ 377.862741][ T5981] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 378.428392][ T1501] team0 (unregistering): Port device team_slave_1 removed [ 378.490069][ T1501] team0 (unregistering): Port device team_slave_0 removed [ 378.640190][ T5831] Bluetooth: hci1: command tx timeout [ 378.737029][T12007] chnl_net:caif_netlink_parms(): no params data found [ 378.807139][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.807209][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.857771][ T58] block nbd0: Possible stuck request ffff888026fc0000: control (read@0,1024B). Runtime 270 seconds [ 378.857820][ T58] block nbd0: Possible stuck request ffff888026fc01c0: control (read@1024,1024B). Runtime 270 seconds [ 378.857862][ T58] block nbd0: Possible stuck request ffff888026fc0380: control (read@2048,1024B). Runtime 270 seconds [ 378.857896][ T58] block nbd0: Possible stuck request ffff888026fc0540: control (read@3072,1024B). Runtime 270 seconds [ 379.158348][ T5832] usb 9-1: USB disconnect, device number 4 [ 380.313238][T12007] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.313378][T12007] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.313604][T12007] bridge_slave_0: entered allmulticast mode [ 380.316869][T12007] bridge_slave_0: entered promiscuous mode [ 380.400964][T12007] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.401179][T12007] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.401449][T12007] bridge_slave_1: entered allmulticast mode [ 380.406554][T12007] bridge_slave_1: entered promiscuous mode [ 380.952503][T12007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.974329][T12007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.102459][T12161] FAULT_INJECTION: forcing a failure. [ 381.102459][T12161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.102486][T12161] CPU: 1 UID: 0 PID: 12161 Comm: syz.8.2406 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.102505][T12161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 381.102515][T12161] Call Trace: [ 381.102526][T12161] [ 381.102532][T12161] dump_stack_lvl+0xe8/0x150 [ 381.102555][T12161] should_fail_ex+0x46b/0x600 [ 381.102577][T12161] _copy_from_user+0x2d/0xb0 [ 381.102598][T12161] ___sys_sendmsg+0x1c6/0x360 [ 381.102615][T12161] ? __lock_acquire+0x6b5/0x2cf0 [ 381.102639][T12161] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.102660][T12161] ? kstrtouint+0x6e/0xe0 [ 381.102702][T12161] ? __fget_files+0x2a/0x420 [ 381.102726][T12161] ? __fget_files+0x3a6/0x420 [ 381.102753][T12161] __sys_sendmmsg+0x282/0x4e0 [ 381.102773][T12161] ? __pfx___sys_sendmmsg+0x10/0x10 [ 381.102796][T12161] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 381.102824][T12161] ? ksys_write+0x248/0x270 [ 381.102849][T12161] ? __pfx_ksys_write+0x10/0x10 [ 381.102875][T12161] __x64_sys_sendmmsg+0xa0/0xc0 [ 381.102892][T12161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.102909][T12161] do_syscall_64+0x15f/0xf80 [ 381.102931][T12161] ? trace_irq_disable+0x3b/0x140 [ 381.102949][T12161] ? clear_bhb_loop+0x40/0x90 [ 381.102969][T12161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.102985][T12161] RIP: 0033:0x7f5662bcc819 [ 381.102999][T12161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.103013][T12161] RSP: 002b:00007f5660e1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 381.103030][T12161] RAX: ffffffffffffffda RBX: 00007f5662e45fa0 RCX: 00007f5662bcc819 [ 381.103042][T12161] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 381.103053][T12161] RBP: 00007f5660e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 381.103063][T12161] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 381.103073][T12161] R13: 00007f5662e46038 R14: 00007f5662e45fa0 R15: 00007fff2d2dc108 [ 381.103097][T12161] [ 381.606677][T12007] team0: Port device team_slave_0 added [ 381.623345][T12007] team0: Port device team_slave_1 added [ 381.720119][T12007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.720138][T12007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.720168][T12007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.849175][T12007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.849192][T12007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.849218][T12007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.992526][ T142] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.065910][T12007] hsr_slave_0: entered promiscuous mode [ 383.066952][T12007] hsr_slave_1: entered promiscuous mode [ 383.081581][T12007] debugfs: 'hsr0' already exists in 'hsr' [ 383.081603][T12007] Cannot create hsr debugfs directory [ 383.084122][ T5489] 8021q: adding VLAN 0 to HW filter on device eth17 [ 383.323054][T12197] FAULT_INJECTION: forcing a failure. [ 383.323054][T12197] name failslab, interval 1, probability 0, space 0, times 0 [ 383.323092][T12197] CPU: 1 UID: 0 PID: 12197 Comm: syz.8.2416 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 383.323118][T12197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 383.323132][T12197] Call Trace: [ 383.323140][T12197] [ 383.323162][T12197] dump_stack_lvl+0xe8/0x150 [ 383.323199][T12197] should_fail_ex+0x46b/0x600 [ 383.323238][T12197] should_failslab+0xa8/0x100 [ 383.323272][T12197] __kmalloc_noprof+0xdf/0x7b0 [ 383.323312][T12197] ? kfree+0x4d/0x6c0 [ 383.323339][T12197] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 383.323381][T12197] tomoyo_realpath_from_path+0xe3/0x5d0 [ 383.323412][T12197] ? tomoyo_domain+0xd7/0x130 [ 383.323451][T12197] ? tomoyo_path_number_perm+0x219/0x630 [ 383.323486][T12197] tomoyo_path_number_perm+0x246/0x630 [ 383.323546][T12197] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 383.323579][T12197] ? __lock_acquire+0x6b5/0x2cf0 [ 383.323612][T12197] ? do_raw_spin_lock+0x12b/0x2f0 [ 383.323667][T12197] ? __fget_files+0x2a/0x420 [ 383.323697][T12197] ? __fget_files+0x2a/0x420 [ 383.323722][T12197] ? __fget_files+0x3a6/0x420 [ 383.323750][T12197] ? __fget_files+0x2a/0x420 [ 383.323779][T12197] security_file_ioctl+0xc3/0x2a0 [ 383.323814][T12197] __se_sys_ioctl+0x47/0x170 [ 383.323850][T12197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.323869][T12197] do_syscall_64+0x15f/0xf80 [ 383.323893][T12197] ? trace_irq_disable+0x3b/0x140 [ 383.323913][T12197] ? clear_bhb_loop+0x40/0x90 [ 383.323936][T12197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.323955][T12197] RIP: 0033:0x7f5662bcc819 [ 383.323973][T12197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.323989][T12197] RSP: 002b:00007f5660e1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.324009][T12197] RAX: ffffffffffffffda RBX: 00007f5662e45fa0 RCX: 00007f5662bcc819 [ 383.324022][T12197] RDX: 0000200000000040 RSI: 00000000c040565f RDI: 0000000000000003 [ 383.324034][T12197] RBP: 00007f5660e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 383.324045][T12197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.324056][T12197] R13: 00007f5662e46038 R14: 00007f5662e45fa0 R15: 00007fff2d2dc108 [ 383.324083][T12197] [ 383.324129][T12197] ERROR: Out of memory at tomoyo_realpath_from_path. [ 383.662437][T12199] tmpfs: Unknown parameter 'grpqﯺ儱de_hardl[6$6imit' [ 383.663703][T12199] tmpfs: Unknown parameter 'grpqﯺ儱de_hardl[6$6imit' [ 383.741903][ T142] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.972194][ T142] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.257360][ T142] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.318361][T11903] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.394702][T11903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.428180][T11903] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 385.524924][T11903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.558667][T11903] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 385.643136][T11903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.673045][T12210] FAULT_INJECTION: forcing a failure. [ 385.673045][T12210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.673073][T12210] CPU: 1 UID: 0 PID: 12210 Comm: syz.8.2422 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 385.673093][T12210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 385.673110][T12210] Call Trace: [ 385.673116][T12210] [ 385.673123][T12210] dump_stack_lvl+0xe8/0x150 [ 385.673147][T12210] should_fail_ex+0x46b/0x600 [ 385.673173][T12210] _copy_from_user+0x2d/0xb0 [ 385.673194][T12210] ___sys_sendmsg+0x1c6/0x360 [ 385.673211][T12210] ? __lock_acquire+0x6b5/0x2cf0 [ 385.673235][T12210] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.673277][T12210] ? __fget_files+0x2a/0x420 [ 385.673297][T12210] ? __fget_files+0x3a6/0x420 [ 385.673322][T12210] __x64_sys_sendmsg+0x1c3/0x2a0 [ 385.673342][T12210] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.673367][T12210] ? __pfx_ksys_write+0x10/0x10 [ 385.673396][T12210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.673414][T12210] do_syscall_64+0x15f/0xf80 [ 385.673436][T12210] ? trace_irq_disable+0x3b/0x140 [ 385.673455][T12210] ? clear_bhb_loop+0x40/0x90 [ 385.673475][T12210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.673492][T12210] RIP: 0033:0x7f5662bcc819 [ 385.673507][T12210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.673522][T12210] RSP: 002b:00007f5660e1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.673538][T12210] RAX: ffffffffffffffda RBX: 00007f5662e45fa0 RCX: 00007f5662bcc819 [ 385.673551][T12210] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000004 [ 385.673561][T12210] RBP: 00007f5660e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 385.673572][T12210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.673581][T12210] R13: 00007f5662e46038 R14: 00007f5662e45fa0 R15: 00007fff2d2dc108 [ 385.673605][T12210] [ 385.771372][T11903] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 386.042824][T11903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.093461][T12212] netlink: 'syz.8.2423': attribute type 4 has an invalid length. [ 387.167147][T12248] FAULT_INJECTION: forcing a failure. [ 387.167147][T12248] name failslab, interval 1, probability 0, space 0, times 0 [ 387.167184][T12248] CPU: 1 UID: 0 PID: 12248 Comm: syz.8.2430 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 387.167208][T12248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 387.167221][T12248] Call Trace: [ 387.167229][T12248] [ 387.167238][T12248] dump_stack_lvl+0xe8/0x150 [ 387.167267][T12248] should_fail_ex+0x46b/0x600 [ 387.167294][T12248] should_failslab+0xa8/0x100 [ 387.167323][T12248] kmem_cache_alloc_noprof+0x87/0x680 [ 387.167348][T12248] ? __se_sys_mbind+0x82e/0x10f0 [ 387.167386][T12248] __se_sys_mbind+0x82e/0x10f0 [ 387.167422][T12248] ? __pfx___se_sys_mbind+0x10/0x10 [ 387.167446][T12248] ? rt_mutex_slowunlock+0x1cb/0x300 [ 387.167476][T12248] ? fput+0xa0/0xd0 [ 387.167496][T12248] ? ksys_write+0x248/0x270 [ 387.167523][T12248] ? __pfx_ksys_write+0x10/0x10 [ 387.167553][T12248] ? __x64_sys_mbind+0x21/0xf0 [ 387.167577][T12248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.167598][T12248] do_syscall_64+0x15f/0xf80 [ 387.167621][T12248] ? trace_irq_disable+0x3b/0x140 [ 387.167643][T12248] ? clear_bhb_loop+0x40/0x90 [ 387.167665][T12248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.167683][T12248] RIP: 0033:0x7f5662bcc819 [ 387.167699][T12248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.167715][T12248] RSP: 002b:00007f5660dfd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 387.167736][T12248] RAX: ffffffffffffffda RBX: 00007f5662e46090 RCX: 00007f5662bcc819 [ 387.167750][T12248] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000001000 [ 387.167762][T12248] RBP: 00007f5660dfd090 R08: 0000000000000000 R09: 0000000000000002 [ 387.167773][T12248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.167784][T12248] R13: 00007f5662e46128 R14: 00007f5662e46090 R15: 00007fff2d2dc108 [ 387.167811][T12248] [ 387.855495][ T5489] 8021q: adding VLAN 0 to HW filter on device eth18 [ 387.867545][ T5897] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 388.023775][ T5897] usb 9-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 388.023814][ T5897] usb 9-1: config 1 interface 0 altsetting 9 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 388.023844][ T5897] usb 9-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 388.023876][ T5897] usb 9-1: config 1 interface 0 has no altsetting 0 [ 388.048042][ T5897] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.048156][ T5897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.048220][ T5897] usb 9-1: Product: ࠬ [ 388.048264][ T5897] usb 9-1: Manufacturer: ﮤ峈ʐ끲둆䙝ꎾ瘣弽羑잉籢쾴噊蔐﹯௡깄귵⨤ᮩ⚣㔗䓢持䙣넀꧂䠢咽狎ፖ죊坫龁╳㤉瓼缘추ꕉ낟ἃ迠⹩㪭혭糴∣칓椟뎻ﮄ䋞洜㣹⤊ऄﶢᑪ昄Ꮴ봿ꥄꜶ뒗㚑೵墭庾䯟姇ᐺ퇗䲋ꥍﱒ텟䭺⢸⁧⌀笑ᴦ굮銲䈘黖건⹇꿶䵇㩨୐졥䞉 [ 388.048363][ T5897] usb 9-1: SerialNumber: 缢ᑞු䱕藿숙ུ붗︸細䢛｣媩㲙皔༣쉆∦㗸ᛸ쓒꯸黿帤祚㷂ᭅ䝪䰈忀㵙ᒤ코꧜ཋᲺ첖ꪀႁ̧偃㘘胇❞Đ簷탽濁⚛缀塪ك偙됨쌁骑噕궺 [ 388.159885][T12254] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 388.160021][T12254] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 388.160128][T12254] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 388.573103][T12254] netlink: 'syz.8.2432': attribute type 21 has an invalid length. [ 388.652802][ T142] bridge_slave_1: left allmulticast mode [ 388.652835][ T142] bridge_slave_1: left promiscuous mode [ 388.653096][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.751899][ T142] bridge_slave_0: left allmulticast mode [ 388.751929][ T142] bridge_slave_0: left promiscuous mode [ 388.753542][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.752199][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.808300][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.850796][ T142] bond0 (unregistering): Released all slaves [ 389.898025][T12254] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2432'. [ 389.950565][ T5897] usb 9-1: No union descriptors [ 389.993516][ T5897] usb 9-1: USB disconnect, device number 5 [ 390.700593][T12278] FAULT_INJECTION: forcing a failure. [ 390.700593][T12278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.700621][T12278] CPU: 0 UID: 0 PID: 12278 Comm: syz.8.2441 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 390.700640][T12278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 390.700651][T12278] Call Trace: [ 390.700657][T12278] [ 390.700664][T12278] dump_stack_lvl+0xe8/0x150 [ 390.700687][T12278] should_fail_ex+0x46b/0x600 [ 390.700708][T12278] _copy_from_user+0x2d/0xb0 [ 390.700730][T12278] ___sys_sendmsg+0x1c6/0x360 [ 390.700746][T12278] ? __lock_acquire+0x6b5/0x2cf0 [ 390.700778][T12278] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.700852][T12278] ? __fget_files+0x2a/0x420 [ 390.700872][T12278] ? __fget_files+0x3a6/0x420 [ 390.700897][T12278] __x64_sys_sendmsg+0x1c3/0x2a0 [ 390.700917][T12278] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.700940][T12278] ? __pfx_ksys_write+0x10/0x10 [ 390.700969][T12278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.700987][T12278] do_syscall_64+0x15f/0xf80 [ 390.701009][T12278] ? trace_irq_disable+0x3b/0x140 [ 390.701029][T12278] ? clear_bhb_loop+0x40/0x90 [ 390.701050][T12278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.701066][T12278] RIP: 0033:0x7f5662bcc819 [ 390.701081][T12278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.701095][T12278] RSP: 002b:00007f5660e1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.701111][T12278] RAX: ffffffffffffffda RBX: 00007f5662e45fa0 RCX: 00007f5662bcc819 [ 390.701123][T12278] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 390.701133][T12278] RBP: 00007f5660e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 390.701143][T12278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.701152][T12278] R13: 00007f5662e46038 R14: 00007f5662e45fa0 R15: 00007fff2d2dc108 [ 390.701176][T12278] [ 391.790477][T12302] FAULT_INJECTION: forcing a failure. [ 391.790477][T12302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.790510][T12302] CPU: 0 UID: 0 PID: 12302 Comm: syz.7.2450 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 391.790532][T12302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 391.790544][T12302] Call Trace: [ 391.790551][T12302] [ 391.790563][T12302] dump_stack_lvl+0xe8/0x150 [ 391.790591][T12302] should_fail_ex+0x46b/0x600 [ 391.790617][T12302] _copy_from_user+0x2d/0xb0 [ 391.790661][T12302] ___sys_sendmsg+0x1c6/0x360 [ 391.790680][T12302] ? __lock_acquire+0x6b5/0x2cf0 [ 391.790718][T12302] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.790770][T12302] ? __fget_files+0x2a/0x420 [ 391.790791][T12302] ? __fget_files+0x3a6/0x420 [ 391.790819][T12302] __x64_sys_sendmsg+0x1c3/0x2a0 [ 391.790839][T12302] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.790866][T12302] ? __pfx_ksys_write+0x10/0x10 [ 391.790897][T12302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.790917][T12302] do_syscall_64+0x15f/0xf80 [ 391.790946][T12302] ? trace_irq_disable+0x3b/0x140 [ 391.790966][T12302] ? clear_bhb_loop+0x40/0x90 [ 391.790989][T12302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.791007][T12302] RIP: 0033:0x7faa50a7c819 [ 391.791024][T12302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.791040][T12302] RSP: 002b:00007faa4ecd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.791063][T12302] RAX: ffffffffffffffda RBX: 00007faa50cf5fa0 RCX: 00007faa50a7c819 [ 391.791077][T12302] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000005 [ 391.791088][T12302] RBP: 00007faa4ecd6090 R08: 0000000000000000 R09: 0000000000000000 [ 391.791099][T12302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.791109][T12302] R13: 00007faa50cf6038 R14: 00007faa50cf5fa0 R15: 00007ffcb65d9ef8 [ 391.791137][T12302] [ 392.083489][T11903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.336959][T12304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.867861][ T142] hsr_slave_0: left promiscuous mode [ 392.916353][ T142] hsr_slave_1: left promiscuous mode [ 392.924077][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.924107][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.964364][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.964395][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.175791][ T142] veth1_macvtap: left promiscuous mode [ 393.175896][ T142] veth0_macvtap: left promiscuous mode [ 393.176141][ T142] veth1_vlan: left promiscuous mode [ 393.230944][ T142] veth0_vlan: left promiscuous mode [ 393.256522][T12330] FAULT_INJECTION: forcing a failure. [ 393.256522][T12330] name failslab, interval 1, probability 0, space 0, times 0 [ 393.256558][T12330] CPU: 0 UID: 0 PID: 12330 Comm: syz.7.2457 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 393.256591][T12330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 393.256607][T12330] Call Trace: [ 393.256616][T12330] [ 393.256625][T12330] dump_stack_lvl+0xe8/0x150 [ 393.256658][T12330] should_fail_ex+0x46b/0x600 [ 393.256687][T12330] should_failslab+0xa8/0x100 [ 393.256722][T12330] __kmalloc_noprof+0xdf/0x7b0 [ 393.256752][T12330] ? kfree+0x4d/0x6c0 [ 393.256778][T12330] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 393.256811][T12330] tomoyo_realpath_from_path+0xe3/0x5d0 [ 393.256839][T12330] ? tomoyo_domain+0xd7/0x130 [ 393.256872][T12330] ? tomoyo_path_number_perm+0x219/0x630 [ 393.256908][T12330] tomoyo_path_number_perm+0x246/0x630 [ 393.256947][T12330] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 393.256982][T12330] ? __lock_acquire+0x6b5/0x2cf0 [ 393.257014][T12330] ? do_raw_spin_lock+0x12b/0x2f0 [ 393.257074][T12330] ? __fget_files+0x2a/0x420 [ 393.257105][T12330] ? __fget_files+0x2a/0x420 [ 393.257130][T12330] ? __fget_files+0x3a6/0x420 [ 393.257156][T12330] ? __fget_files+0x2a/0x420 [ 393.257187][T12330] security_file_ioctl+0xc3/0x2a0 [ 393.257221][T12330] __se_sys_ioctl+0x47/0x170 [ 393.257255][T12330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.257280][T12330] do_syscall_64+0x15f/0xf80 [ 393.257310][T12330] ? trace_irq_disable+0x3b/0x140 [ 393.257336][T12330] ? clear_bhb_loop+0x40/0x90 [ 393.257369][T12330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.257391][T12330] RIP: 0033:0x7faa50a7c819 [ 393.257410][T12330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.257430][T12330] RSP: 002b:00007faa4ecd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.257453][T12330] RAX: ffffffffffffffda RBX: 00007faa50cf5fa0 RCX: 00007faa50a7c819 [ 393.257468][T12330] RDX: 00002000000001c0 RSI: 000000004138ae84 RDI: 0000000000000005 [ 393.257482][T12330] RBP: 00007faa4ecd6090 R08: 0000000000000000 R09: 0000000000000000 [ 393.257495][T12330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.257508][T12330] R13: 00007faa50cf6038 R14: 00007faa50cf5fa0 R15: 00007ffcb65d9ef8 [ 393.257541][T12330] [ 393.281281][T12330] ERROR: Out of memory at tomoyo_realpath_from_path. [ 394.480688][ T142] team0 (unregistering): Port device team_slave_1 removed [ 394.538798][ T142] team0 (unregistering): Port device team_slave_0 removed [ 394.782862][T11903] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.843714][ T5489] 8021q: adding VLAN 0 to HW filter on device eth19 [ 395.020683][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.020928][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.102698][ T1422] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.102861][ T1422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.319999][ T5832] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 395.467508][ T5832] usb 9-1: Using ep0 maxpacket: 16 [ 395.470578][ T5832] usb 9-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 395.470613][ T5832] usb 9-1: config 0 interface 0 has no altsetting 0 [ 395.470644][ T5832] usb 9-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 395.470669][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.543568][ T5832] usb 9-1: config 0 descriptor?? [ 395.726626][T12354] FAULT_INJECTION: forcing a failure. [ 395.726626][T12354] name failslab, interval 1, probability 0, space 0, times 0 [ 395.726667][T12354] CPU: 0 UID: 0 PID: 12354 Comm: syz.7.2464 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 395.726690][T12354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 395.726702][T12354] Call Trace: [ 395.726709][T12354] [ 395.726717][T12354] dump_stack_lvl+0xe8/0x150 [ 395.726743][T12354] should_fail_ex+0x46b/0x600 [ 395.726767][T12354] should_failslab+0xa8/0x100 [ 395.726797][T12354] __kmalloc_noprof+0xdf/0x7b0 [ 395.726821][T12354] ? kfree+0x4d/0x6c0 [ 395.726841][T12354] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 395.726868][T12354] tomoyo_realpath_from_path+0xe3/0x5d0 [ 395.726893][T12354] ? tomoyo_domain+0xd7/0x130 [ 395.726918][T12354] ? tomoyo_path_number_perm+0x219/0x630 [ 395.726946][T12354] tomoyo_path_number_perm+0x246/0x630 [ 395.726977][T12354] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 395.727004][T12354] ? __lock_acquire+0x6b5/0x2cf0 [ 395.727030][T12354] ? do_raw_spin_lock+0x12b/0x2f0 [ 395.727078][T12354] ? __fget_files+0x2a/0x420 [ 395.727104][T12354] ? __fget_files+0x2a/0x420 [ 395.727125][T12354] ? __fget_files+0x3a6/0x420 [ 395.727147][T12354] ? __fget_files+0x2a/0x420 [ 395.727175][T12354] security_file_ioctl+0xc3/0x2a0 [ 395.727206][T12354] __se_sys_ioctl+0x47/0x170 [ 395.727239][T12354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.727260][T12354] do_syscall_64+0x15f/0xf80 [ 395.727285][T12354] ? trace_irq_disable+0x3b/0x140 [ 395.727305][T12354] ? clear_bhb_loop+0x40/0x90 [ 395.727327][T12354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.727346][T12354] RIP: 0033:0x7faa50a7c819 [ 395.727365][T12354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.727381][T12354] RSP: 002b:00007faa4ecd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.727401][T12354] RAX: ffffffffffffffda RBX: 00007faa50cf5fa0 RCX: 00007faa50a7c819 [ 395.727417][T12354] RDX: 00002000000001c0 RSI: 000000000000560a RDI: 0000000000000003 [ 395.727428][T12354] RBP: 00007faa4ecd6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.727439][T12354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.727450][T12354] R13: 00007faa50cf6038 R14: 00007faa50cf5fa0 R15: 00007ffcb65d9ef8 [ 395.727478][T12354] [ 395.729127][T12354] ERROR: Out of memory at tomoyo_realpath_from_path. [ 396.194967][T12007] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 396.396709][T12358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.409205][T12358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.494647][T12348] Bluetooth: MGMT ver 1.23 [ 396.552889][T12007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.629201][ T5832] usbhid 9-1:0.0: can't add hid device: -71 [ 396.629313][ T5832] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 396.631693][T12007] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 396.776864][ T5832] usb 9-1: USB disconnect, device number 6 [ 396.796901][T12007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.837126][T12007] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 396.871921][T12007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.894691][T12007] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 396.951451][T12007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 396.980589][ T142] IPVS: stop unused estimator thread 0... [ 397.571886][ T5489] 8021q: adding VLAN 0 to HW filter on device eth20 [ 397.894493][T12007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.030366][T12007] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.118004][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.118109][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.202744][ T209] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.202840][ T209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.250138][T11903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.682584][T11903] veth0_vlan: entered promiscuous mode [ 398.814111][T11903] veth1_vlan: entered promiscuous mode [ 398.844145][T12408] netlink: 'syz.8.2471': attribute type 6 has an invalid length. [ 399.005414][T12405] : entered promiscuous mode [ 399.395556][T11903] veth0_macvtap: entered promiscuous mode [ 399.492508][T11903] veth1_macvtap: entered promiscuous mode [ 399.633291][ T32] IPVS: starting estimator thread 0... [ 399.719087][T12007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.739701][T11903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.825541][T11903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.897665][T12422] IPVS: using max 7 ests per chain, 16800 per kthread [ 399.907309][ T1452] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.972009][ T1452] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.997252][ T1452] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.048603][ T1452] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.491830][T12441] FAULT_INJECTION: forcing a failure. [ 400.491830][T12441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.491863][T12441] CPU: 1 UID: 0 PID: 12441 Comm: syz.8.2478 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 400.491885][T12441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 400.491898][T12441] Call Trace: [ 400.491906][T12441] [ 400.491913][T12441] dump_stack_lvl+0xe8/0x150 [ 400.491939][T12441] should_fail_ex+0x46b/0x600 [ 400.491963][T12441] _copy_from_user+0x2d/0xb0 [ 400.491987][T12441] do_ip_vs_set_ctl+0x353/0xb00 [ 400.492017][T12441] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 400.492055][T12441] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 400.492081][T12441] ? rt_mutex_slowunlock+0x1cb/0x300 [ 400.492101][T12441] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 400.492141][T12441] nf_setsockopt+0x26f/0x290 [ 400.492167][T12441] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 400.492197][T12441] do_sock_setsockopt+0x17c/0x1b0 [ 400.492219][T12441] __x64_sys_setsockopt+0x143/0x1b0 [ 400.492239][T12441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.492263][T12441] do_syscall_64+0x15f/0xf80 [ 400.492290][T12441] ? trace_irq_disable+0x3b/0x140 [ 400.492314][T12441] ? clear_bhb_loop+0x40/0x90 [ 400.492337][T12441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.492354][T12441] RIP: 0033:0x7f5662bcc819 [ 400.492376][T12441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.492392][T12441] RSP: 002b:00007f5660dfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 400.492411][T12441] RAX: ffffffffffffffda RBX: 00007f5662e46090 RCX: 00007f5662bcc819 [ 400.492424][T12441] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000003 [ 400.492435][T12441] RBP: 00007f5660dfd090 R08: 0000000000000000 R09: 0000000000000000 [ 400.492446][T12441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.492456][T12441] R13: 00007f5662e46128 R14: 00007f5662e46090 R15: 00007fff2d2dc108 [ 400.492483][T12441] [ 401.252412][T12007] veth0_vlan: entered promiscuous mode [ 401.266945][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.266966][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.313322][T12007] veth1_vlan: entered promiscuous mode [ 401.669101][ T1501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.669124][ T1501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.690805][T12007] veth0_macvtap: entered promiscuous mode [ 401.790514][T12007] veth1_macvtap: entered promiscuous mode [ 401.866624][T12007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.895139][T12007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.985528][ T197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.000040][ T197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.016489][ T197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.025696][ T197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.287529][ T5832] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 402.585709][ T5832] usb 9-1: Using ep0 maxpacket: 32 [ 402.590176][ T5832] usb 9-1: config index 0 descriptor too short (expected 164, got 36) [ 402.590230][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.590258][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.590297][ T5832] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 402.590322][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.671848][ T5832] usb 9-1: config 0 descriptor?? [ 403.613364][ T1459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.613386][ T1459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.051501][T12486] FAULT_INJECTION: forcing a failure. [ 404.051501][T12486] name failslab, interval 1, probability 0, space 0, times 0 [ 404.051538][T12486] CPU: 0 UID: 0 PID: 12486 Comm: syz.1.2485 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 404.051564][T12486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 404.051583][T12486] Call Trace: [ 404.051591][T12486] [ 404.051601][T12486] dump_stack_lvl+0xe8/0x150 [ 404.051635][T12486] should_fail_ex+0x46b/0x600 [ 404.051666][T12486] should_failslab+0xa8/0x100 [ 404.051708][T12486] __kmalloc_noprof+0xdf/0x7b0 [ 404.051738][T12486] ? kfree+0x4d/0x6c0 [ 404.051766][T12486] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 404.051801][T12486] tomoyo_realpath_from_path+0xe3/0x5d0 [ 404.051864][T12486] ? tomoyo_domain+0xd7/0x130 [ 404.051895][T12486] ? tomoyo_path_number_perm+0x219/0x630 [ 404.051932][T12486] tomoyo_path_number_perm+0x246/0x630 [ 404.051972][T12486] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 404.052005][T12486] ? __lock_acquire+0x6b5/0x2cf0 [ 404.052038][T12486] ? do_raw_spin_lock+0x12b/0x2f0 [ 404.052096][T12486] ? __fget_files+0x2a/0x420 [ 404.052129][T12486] ? __fget_files+0x2a/0x420 [ 404.052155][T12486] ? __fget_files+0x3a6/0x420 [ 404.052181][T12486] ? __fget_files+0x2a/0x420 [ 404.052211][T12486] security_file_ioctl+0xc3/0x2a0 [ 404.052247][T12486] __se_sys_ioctl+0x47/0x170 [ 404.052283][T12486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.052309][T12486] do_syscall_64+0x15f/0xf80 [ 404.052339][T12486] ? trace_irq_disable+0x3b/0x140 [ 404.052364][T12486] ? clear_bhb_loop+0x40/0x90 [ 404.052393][T12486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.052417][T12486] RIP: 0033:0x7fc4c5e6c819 [ 404.052438][T12486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.052459][T12486] RSP: 002b:00007fc4c40c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.052483][T12486] RAX: ffffffffffffffda RBX: 00007fc4c60e5fa0 RCX: 00007fc4c5e6c819 [ 404.052500][T12486] RDX: 0000000000000000 RSI: 00000000400448c9 RDI: 0000000000000004 [ 404.052515][T12486] RBP: 00007fc4c40c6090 R08: 0000000000000000 R09: 0000000000000000 [ 404.052529][T12486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.052544][T12486] R13: 00007fc4c60e6038 R14: 00007fc4c60e5fa0 R15: 00007ffe8ae1d1b8 [ 404.052580][T12486] [ 404.055798][T12486] ERROR: Out of memory at tomoyo_realpath_from_path. [ 404.522776][ T1004] IPVS: starting estimator thread 0... [ 404.523864][ T1459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.523886][ T1459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.631267][T12492] IPVS: using max 7 ests per chain, 16800 per kthread [ 404.892625][ T5832] usbhid 9-1:0.0: can't add hid device: -71 [ 404.892737][ T5832] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 404.915718][ T5832] usb 9-1: USB disconnect, device number 7 [ 405.784199][T12519] FAULT_INJECTION: forcing a failure. [ 405.784199][T12519] name failslab, interval 1, probability 0, space 0, times 0 [ 405.784236][T12519] CPU: 0 UID: 0 PID: 12519 Comm: syz.3.2493 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 405.784263][T12519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 405.784277][T12519] Call Trace: [ 405.784286][T12519] [ 405.784295][T12519] dump_stack_lvl+0xe8/0x150 [ 405.784325][T12519] should_fail_ex+0x46b/0x600 [ 405.784354][T12519] should_failslab+0xa8/0x100 [ 405.784388][T12519] __kmalloc_noprof+0xdf/0x7b0 [ 405.784418][T12519] ? kfree+0x4d/0x6c0 [ 405.784444][T12519] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 405.784476][T12519] tomoyo_realpath_from_path+0xe3/0x5d0 [ 405.784505][T12519] ? tomoyo_domain+0xd7/0x130 [ 405.784538][T12519] ? tomoyo_path_number_perm+0x219/0x630 [ 405.784573][T12519] tomoyo_path_number_perm+0x246/0x630 [ 405.784612][T12519] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 405.784644][T12519] ? __lock_acquire+0x6b5/0x2cf0 [ 405.784677][T12519] ? do_raw_spin_lock+0x12b/0x2f0 [ 405.784744][T12519] ? __fget_files+0x2a/0x420 [ 405.784774][T12519] ? __fget_files+0x2a/0x420 [ 405.784800][T12519] ? __fget_files+0x3a6/0x420 [ 405.784825][T12519] ? __fget_files+0x2a/0x420 [ 405.784857][T12519] security_file_ioctl+0xc3/0x2a0 [ 405.784896][T12519] __se_sys_ioctl+0x47/0x170 [ 405.784931][T12519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.784956][T12519] do_syscall_64+0x15f/0xf80 [ 405.784987][T12519] ? trace_irq_disable+0x3b/0x140 [ 405.785014][T12519] ? clear_bhb_loop+0x40/0x90 [ 405.785043][T12519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.785067][T12519] RIP: 0033:0x7f615ee2c819 [ 405.785088][T12519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.785109][T12519] RSP: 002b:00007f615d086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.785133][T12519] RAX: ffffffffffffffda RBX: 00007f615f0a5fa0 RCX: 00007f615ee2c819 [ 405.785150][T12519] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 405.785163][T12519] RBP: 00007f615d086090 R08: 0000000000000000 R09: 0000000000000000 [ 405.785177][T12519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.785190][T12519] R13: 00007f615f0a6038 R14: 00007f615f0a5fa0 R15: 00007fffcc16bdf8 [ 405.785224][T12519] [ 405.804002][T12519] ERROR: Out of memory at tomoyo_realpath_from_path. [ 406.403546][ T5832] IPVS: starting estimator thread 0... [ 406.492084][T12535] IPVS: using max 7 ests per chain, 16800 per kthread [ 406.942328][T12549] FAULT_INJECTION: forcing a failure. [ 406.942328][T12549] name failslab, interval 1, probability 0, space 0, times 0 [ 406.942360][T12549] CPU: 0 UID: 0 PID: 12549 Comm: syz.3.2500 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 406.942380][T12549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 406.942392][T12549] Call Trace: [ 406.942398][T12549] [ 406.942406][T12549] dump_stack_lvl+0xe8/0x150 [ 406.942432][T12549] should_fail_ex+0x46b/0x600 [ 406.942456][T12549] should_failslab+0xa8/0x100 [ 406.942486][T12549] __kmalloc_noprof+0xdf/0x7b0 [ 406.942510][T12549] ? kfree+0x4d/0x6c0 [ 406.942532][T12549] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 406.942559][T12549] tomoyo_realpath_from_path+0xe3/0x5d0 [ 406.942581][T12549] ? tomoyo_domain+0xd7/0x130 [ 406.942619][T12549] ? tomoyo_path_number_perm+0x219/0x630 [ 406.942648][T12549] tomoyo_path_number_perm+0x246/0x630 [ 406.942678][T12549] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 406.942707][T12549] ? __lock_acquire+0x6b5/0x2cf0 [ 406.942739][T12549] ? do_raw_spin_lock+0x12b/0x2f0 [ 406.942793][T12549] ? __fget_files+0x2a/0x420 [ 406.942819][T12549] ? __fget_files+0x2a/0x420 [ 406.942841][T12549] ? __fget_files+0x3a6/0x420 [ 406.942863][T12549] ? __fget_files+0x2a/0x420 [ 406.942892][T12549] security_file_ioctl+0xc3/0x2a0 [ 406.942921][T12549] __se_sys_ioctl+0x47/0x170 [ 406.942954][T12549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.942978][T12549] do_syscall_64+0x15f/0xf80 [ 406.943008][T12549] ? trace_irq_disable+0x3b/0x140 [ 406.943034][T12549] ? clear_bhb_loop+0x40/0x90 [ 406.943067][T12549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.943090][T12549] RIP: 0033:0x7f615ee2c819 [ 406.943111][T12549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.943131][T12549] RSP: 002b:00007f615d086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.943156][T12549] RAX: ffffffffffffffda RBX: 00007f615f0a5fa0 RCX: 00007f615ee2c819 [ 406.943172][T12549] RDX: 0000200000000180 RSI: 0000000000008916 RDI: 0000000000000003 [ 406.943184][T12549] RBP: 00007f615d086090 R08: 0000000000000000 R09: 0000000000000000 [ 406.943197][T12549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.943208][T12549] R13: 00007f615f0a6038 R14: 00007f615f0a5fa0 R15: 00007fffcc16bdf8 [ 406.943238][T12549] [ 406.956546][T12549] ERROR: Out of memory at tomoyo_realpath_from_path. [ 408.092910][ T10] IPVS: starting estimator thread 0... [ 408.187616][T12574] IPVS: using max 10 ests per chain, 24000 per kthread [ 408.634366][T12586] FAULT_INJECTION: forcing a failure. [ 408.634366][T12586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.634403][T12586] CPU: 0 UID: 0 PID: 12586 Comm: syz.7.2509 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 408.634429][T12586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 408.634443][T12586] Call Trace: [ 408.634451][T12586] [ 408.634461][T12586] dump_stack_lvl+0xe8/0x150 [ 408.634493][T12586] should_fail_ex+0x46b/0x600 [ 408.634524][T12586] _copy_to_user+0x31/0xb0 [ 408.634564][T12586] simple_read_from_buffer+0xe1/0x170 [ 408.634597][T12586] proc_fail_nth_read+0x1be/0x230 [ 408.634628][T12586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.634660][T12586] ? rw_verify_area+0x2ac/0x4e0 [ 408.634692][T12586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.634722][T12586] vfs_read+0x212/0xa80 [ 408.634762][T12586] ? __pfx_vfs_read+0x10/0x10 [ 408.634796][T12586] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 408.634828][T12586] ? lockdep_hardirqs_on+0x7a/0x110 [ 408.634859][T12586] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 408.634889][T12586] ? mutex_lock_nested+0x152/0x1d0 [ 408.634911][T12586] ? fdget_pos+0x252/0x320 [ 408.634948][T12586] ksys_read+0x156/0x270 [ 408.634982][T12586] ? __pfx_ksys_read+0x10/0x10 [ 408.635022][T12586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.635047][T12586] do_syscall_64+0x15f/0xf80 [ 408.635080][T12586] ? trace_irq_disable+0x3b/0x140 [ 408.635107][T12586] ? clear_bhb_loop+0x40/0x90 [ 408.635135][T12586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.635159][T12586] RIP: 0033:0x7faa50a3d04e [ 408.635179][T12586] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 408.635199][T12586] RSP: 002b:00007faa4ecd5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.635221][T12586] RAX: ffffffffffffffda RBX: 00007faa4ecd66c0 RCX: 00007faa50a3d04e [ 408.635238][T12586] RDX: 000000000000000f RSI: 00007faa4ecd60a0 RDI: 0000000000000005 [ 408.635252][T12586] RBP: 00007faa4ecd6090 R08: 0000000000000000 R09: 0000000000000000 [ 408.635265][T12586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.635278][T12586] R13: 00007faa50cf6038 R14: 00007faa50cf5fa0 R15: 00007ffcb65d9ef8 [ 408.635311][T12586] [ 408.653818][T12588] netlink: 'syz.8.2510': attribute type 29 has an invalid length. [ 408.822795][T12588] netlink: 'syz.8.2510': attribute type 29 has an invalid length. [ 408.834325][T12588] netlink: 500 bytes leftover after parsing attributes in process `syz.8.2510'. [ 408.923610][ T58] block nbd0: Possible stuck request ffff888026fc0000: control (read@0,1024B). Runtime 300 seconds [ 408.923658][ T58] block nbd0: Possible stuck request ffff888026fc01c0: control (read@1024,1024B). Runtime 300 seconds [ 408.923691][ T58] block nbd0: Possible stuck request ffff888026fc0380: control (read@2048,1024B). Runtime 300 seconds [ 408.923721][ T58] block nbd0: Possible stuck request ffff888026fc0540: control (read@3072,1024B). Runtime 300 seconds [ 408.942901][T12591] netlink: 790 bytes leftover after parsing attributes in process `syz.8.2510'. [ 408.983313][ T5832] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 409.160537][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.160577][ T5832] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 409.160623][ T5832] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 409.160649][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.242172][ T5832] usb 2-1: config 0 descriptor?? [ 409.418672][T12601] FAULT_INJECTION: forcing a failure. [ 409.418672][T12601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.418713][T12601] CPU: 1 UID: 0 PID: 12601 Comm: syz.3.2515 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 409.418740][T12601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 409.418754][T12601] Call Trace: [ 409.418763][T12601] [ 409.418772][T12601] dump_stack_lvl+0xe8/0x150 [ 409.418803][T12601] should_fail_ex+0x46b/0x600 [ 409.418832][T12601] _copy_from_iter+0x1d3/0x1670 [ 409.418857][T12601] ? finish_task_switch+0x15f/0xbe0 [ 409.418889][T12601] ? lock_acquire+0x106/0x350 [ 409.418922][T12601] ? __lock_acquire+0x6b5/0x2cf0 [ 409.418951][T12601] ? __pfx__copy_from_iter+0x10/0x10 [ 409.418991][T12601] tun_get_user+0x264/0x4400 [ 409.419027][T12601] ? aa_file_perm+0x192/0x15f0 [ 409.419065][T12601] ? aa_file_perm+0x192/0x15f0 [ 409.419094][T12601] ? aa_file_perm+0x51a/0x15f0 [ 409.419118][T12601] ? __pfx_tun_get_user+0x10/0x10 [ 409.419153][T12601] ? __lock_acquire+0x6b5/0x2cf0 [ 409.419185][T12601] ? kstrtoull+0x12f/0x1d0 [ 409.419226][T12601] ? ref_tracker_alloc+0x332/0x4a0 [ 409.419249][T12601] ? get_pid_task+0x20/0x1f0 [ 409.419280][T12601] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 409.419308][T12601] ? tun_get+0x1c/0x2f0 [ 409.419339][T12601] ? tun_get+0x1c/0x2f0 [ 409.419375][T12601] ? tun_get+0x1c/0x2f0 [ 409.419405][T12601] ? tun_get+0x1c/0x2f0 [ 409.419455][T12601] tun_chr_write_iter+0x119/0x200 [ 409.419491][T12601] vfs_write+0x629/0xba0 [ 409.419531][T12601] ? __pfx_vfs_write+0x10/0x10 [ 409.419572][T12601] ? __fget_files+0x2a/0x420 [ 409.419609][T12601] ksys_write+0x156/0x270 [ 409.419642][T12601] ? __pfx_ksys_write+0x10/0x10 [ 409.419682][T12601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.419707][T12601] do_syscall_64+0x15f/0xf80 [ 409.419737][T12601] ? trace_irq_disable+0x3b/0x140 [ 409.419763][T12601] ? clear_bhb_loop+0x40/0x90 [ 409.419791][T12601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.419813][T12601] RIP: 0033:0x7f615ee2c819 [ 409.419833][T12601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.419852][T12601] RSP: 002b:00007f615d086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 409.419875][T12601] RAX: ffffffffffffffda RBX: 00007f615f0a5fa0 RCX: 00007f615ee2c819 [ 409.419891][T12601] RDX: 000000000000003e RSI: 00002000000004c0 RDI: 0000000000000003 [ 409.419905][T12601] RBP: 00007f615d086090 R08: 0000000000000000 R09: 0000000000000000 [ 409.419919][T12601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.419931][T12601] R13: 00007f615f0a6038 R14: 00007f615f0a5fa0 R15: 00007fffcc16bdf8 [ 409.419965][T12601] [ 409.723548][ T5832] usbhid 2-1:0.0: can't add hid device: -71 [ 409.723671][ T5832] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 409.751620][ T5832] usb 2-1: USB disconnect, device number 8 [ 410.776758][T12628] FAULT_INJECTION: forcing a failure. [ 410.776758][T12628] name failslab, interval 1, probability 0, space 0, times 0 [ 410.776796][T12628] CPU: 1 UID: 0 PID: 12628 Comm: syz.1.2527 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 410.776823][T12628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 410.776837][T12628] Call Trace: [ 410.776846][T12628] [ 410.776856][T12628] dump_stack_lvl+0xe8/0x150 [ 410.776888][T12628] should_fail_ex+0x46b/0x600 [ 410.776919][T12628] should_failslab+0xa8/0x100 [ 410.776957][T12628] __kmalloc_noprof+0xdf/0x7b0 [ 410.776986][T12628] ? kfree+0x4d/0x6c0 [ 410.777013][T12628] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 410.777045][T12628] tomoyo_realpath_from_path+0xe3/0x5d0 [ 410.777070][T12628] ? tomoyo_domain+0xd7/0x130 [ 410.777099][T12628] ? tomoyo_path_number_perm+0x219/0x630 [ 410.777131][T12628] tomoyo_path_number_perm+0x246/0x630 [ 410.777164][T12628] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 410.777194][T12628] ? __lock_acquire+0x6b5/0x2cf0 [ 410.777224][T12628] ? do_raw_spin_lock+0x12b/0x2f0 [ 410.777275][T12628] ? __fget_files+0x2a/0x420 [ 410.777302][T12628] ? __fget_files+0x2a/0x420 [ 410.777334][T12628] ? __fget_files+0x3a6/0x420 [ 410.777361][T12628] ? __fget_files+0x2a/0x420 [ 410.777392][T12628] security_file_ioctl+0xc3/0x2a0 [ 410.777428][T12628] __se_sys_ioctl+0x47/0x170 [ 410.777458][T12628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.777481][T12628] do_syscall_64+0x15f/0xf80 [ 410.777508][T12628] ? trace_irq_disable+0x3b/0x140 [ 410.777531][T12628] ? clear_bhb_loop+0x40/0x90 [ 410.777556][T12628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.777577][T12628] RIP: 0033:0x7fc4c5e6c819 [ 410.777596][T12628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.777614][T12628] RSP: 002b:00007fc4c40c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.777637][T12628] RAX: ffffffffffffffda RBX: 00007fc4c60e5fa0 RCX: 00007fc4c5e6c819 [ 410.777653][T12628] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 410.777665][T12628] RBP: 00007fc4c40c6090 R08: 0000000000000000 R09: 0000000000000000 [ 410.777678][T12628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.777690][T12628] R13: 00007fc4c60e6038 R14: 00007fc4c60e5fa0 R15: 00007ffe8ae1d1b8 [ 410.777720][T12628] [ 410.897047][T12628] ERROR: Out of memory at tomoyo_realpath_from_path. [ 411.171566][T12634] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2521'. [ 411.723790][ C1] sd 0:0:1:0: [sda] tag#1959 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 411.723971][ C1] sd 0:0:1:0: [sda] tag#1959 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00 [ 412.147572][ T5832] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 412.301675][ T5832] usb 2-1: unable to get BOS descriptor or descriptor too short [ 412.303075][ T5832] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 412.303103][ T5832] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 412.303125][ T5832] usb 2-1: config 63 has no interface number 0 [ 412.303159][ T5832] usb 2-1: config 63 interface 66 has no altsetting 0 [ 412.350856][ T5832] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 412.350890][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.350912][ T5832] usb 2-1: Product: syz [ 412.350928][ T5832] usb 2-1: Manufacturer: syz [ 412.350945][ T5832] usb 2-1: SerialNumber: syz [ 412.447954][T12674] FAULT_INJECTION: forcing a failure. [ 412.447954][T12674] name failslab, interval 1, probability 0, space 0, times 0 [ 412.448067][T12674] CPU: 1 UID: 0 PID: 12674 Comm: syz.7.2534 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 412.448094][T12674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 412.448108][T12674] Call Trace: [ 412.448117][T12674] [ 412.448127][T12674] dump_stack_lvl+0xe8/0x150 [ 412.448163][T12674] should_fail_ex+0x46b/0x600 [ 412.448194][T12674] should_failslab+0xa8/0x100 [ 412.448229][T12674] __kmalloc_noprof+0xdf/0x7b0 [ 412.448260][T12674] ? kfree+0x4d/0x6c0 [ 412.448286][T12674] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 412.448320][T12674] tomoyo_realpath_from_path+0xe3/0x5d0 [ 412.448348][T12674] ? tomoyo_domain+0xd7/0x130 [ 412.448382][T12674] ? tomoyo_path_number_perm+0x219/0x630 [ 412.448417][T12674] tomoyo_path_number_perm+0x246/0x630 [ 412.448463][T12674] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 412.448497][T12674] ? __lock_acquire+0x6b5/0x2cf0 [ 412.448530][T12674] ? do_raw_spin_lock+0x12b/0x2f0 [ 412.448590][T12674] ? __fget_files+0x2a/0x420 [ 412.448619][T12674] ? __fget_files+0x2a/0x420 [ 412.448645][T12674] ? __fget_files+0x3a6/0x420 [ 412.448671][T12674] ? __fget_files+0x2a/0x420 [ 412.448703][T12674] security_file_ioctl+0xc3/0x2a0 [ 412.448739][T12674] __se_sys_ioctl+0x47/0x170 [ 412.448772][T12674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.448798][T12674] do_syscall_64+0x15f/0xf80 [ 412.448829][T12674] ? trace_irq_disable+0x3b/0x140 [ 412.448856][T12674] ? clear_bhb_loop+0x40/0x90 [ 412.448885][T12674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.448907][T12674] RIP: 0033:0x7faa50a7c819 [ 412.448928][T12674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.448949][T12674] RSP: 002b:00007faa4ecd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.448972][T12674] RAX: ffffffffffffffda RBX: 00007faa50cf5fa0 RCX: 00007faa50a7c819 [ 412.448990][T12674] RDX: 0000000000400004 RSI: 000000004004556d RDI: 0000000000000003 [ 412.449004][T12674] RBP: 00007faa4ecd6090 R08: 0000000000000000 R09: 0000000000000000 [ 412.449017][T12674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.449030][T12674] R13: 00007faa50cf6038 R14: 00007faa50cf5fa0 R15: 00007ffcb65d9ef8 [ 412.449065][T12674] [ 412.449203][T12674] ERROR: Out of memory at tomoyo_realpath_from_path. [ 412.851126][ T5832] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 412.851857][ T5832] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 412.852413][ T5832] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 412.853778][ T5832] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 412.854337][ T5832] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 412.854889][ T5832] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 412.854978][ T5832] uvcvideo 2-1:63.66: No streaming interface found for terminal 29. [ 412.855013][ T5832] uvcvideo 2-1:63.66: Entity type for entity Output 32773 was not initialized! [ 412.950151][ T5832] usb 2-1: USB disconnect, device number 9 [ 413.271504][T12690] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2537'. [ 413.790818][T12708] FAULT_INJECTION: forcing a failure. [ 413.790818][T12708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.790856][T12708] CPU: 1 UID: 0 PID: 12708 Comm: syz.1.2542 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 413.790882][T12708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 413.790896][T12708] Call Trace: [ 413.790904][T12708] [ 413.790914][T12708] dump_stack_lvl+0xe8/0x150 [ 413.790945][T12708] should_fail_ex+0x46b/0x600 [ 413.790974][T12708] _copy_from_user+0x2d/0xb0 [ 413.791008][T12708] ___sys_sendmsg+0x1c6/0x360 [ 413.791032][T12708] ? __lock_acquire+0x6b5/0x2cf0 [ 413.791066][T12708] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.791125][T12708] ? __fget_files+0x2a/0x420 [ 413.791152][T12708] ? __fget_files+0x3a6/0x420 [ 413.791189][T12708] __x64_sys_sendmsg+0x1c3/0x2a0 [ 413.791216][T12708] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.791251][T12708] ? __pfx_ksys_write+0x10/0x10 [ 413.791294][T12708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.791319][T12708] do_syscall_64+0x15f/0xf80 [ 413.791348][T12708] ? trace_irq_disable+0x3b/0x140 [ 413.791382][T12708] ? clear_bhb_loop+0x40/0x90 [ 413.791411][T12708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.791433][T12708] RIP: 0033:0x7fc4c5e6c819 [ 413.791453][T12708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.791473][T12708] RSP: 002b:00007fc4c40c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.791497][T12708] RAX: ffffffffffffffda RBX: 00007fc4c60e5fa0 RCX: 00007fc4c5e6c819 [ 413.791514][T12708] RDX: 0000000000000014 RSI: 0000200000001640 RDI: 0000000000000003 [ 413.791529][T12708] RBP: 00007fc4c40c6090 R08: 0000000000000000 R09: 0000000000000000 [ 413.791543][T12708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.791557][T12708] R13: 00007fc4c60e6038 R14: 00007fc4c60e5fa0 R15: 00007ffe8ae1d1b8 [ 413.791593][T12708] [ 416.206454][T12768] FAULT_INJECTION: forcing a failure. [ 416.206454][T12768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.206494][T12768] CPU: 0 UID: 0 PID: 12768 Comm: syz.1.2551 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 416.206521][T12768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 416.206534][T12768] Call Trace: [ 416.206543][T12768] [ 416.206552][T12768] dump_stack_lvl+0xe8/0x150 [ 416.206583][T12768] should_fail_ex+0x46b/0x600 [ 416.206614][T12768] _copy_from_user+0x2d/0xb0 [ 416.206642][T12768] uhid_char_write+0x122/0xd10 [ 416.206666][T12768] ? rw_verify_area+0x25b/0x4e0 [ 416.206698][T12768] ? __pfx_uhid_char_write+0x10/0x10 [ 416.206723][T12768] vfs_write+0x2a3/0xba0 [ 416.206763][T12768] ? __pfx_vfs_write+0x10/0x10 [ 416.206797][T12768] ? __fget_files+0x2a/0x420 [ 416.206827][T12768] ? __fget_files+0x2a/0x420 [ 416.206852][T12768] ? __fget_files+0x3a6/0x420 [ 416.206877][T12768] ? __fget_files+0x2a/0x420 [ 416.206913][T12768] ksys_write+0x156/0x270 [ 416.206948][T12768] ? __pfx_ksys_write+0x10/0x10 [ 416.206989][T12768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.207015][T12768] do_syscall_64+0x15f/0xf80 [ 416.207045][T12768] ? trace_irq_disable+0x3b/0x140 [ 416.207071][T12768] ? clear_bhb_loop+0x40/0x90 [ 416.207099][T12768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.207121][T12768] RIP: 0033:0x7fc4c5e6c819 [ 416.207142][T12768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.207161][T12768] RSP: 002b:00007fc4c40c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 416.207185][T12768] RAX: ffffffffffffffda RBX: 00007fc4c60e5fa0 RCX: 00007fc4c5e6c819 [ 416.207209][T12768] RDX: 000000000000011c RSI: 0000200000000280 RDI: 0000000000000003 [ 416.207224][T12768] RBP: 00007fc4c40c6090 R08: 0000000000000000 R09: 0000000000000000 [ 416.207237][T12768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.207250][T12768] R13: 00007fc4c60e6038 R14: 00007fc4c60e5fa0 R15: 00007ffe8ae1d1b8 [ 416.207285][T12768] [ 416.807634][ T5832] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 416.938494][T12787] netlink: 'syz.3.2549': attribute type 19 has an invalid length. [ 416.938518][T12787] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2549'. [ 416.957675][ T5832] usb 2-1: Using ep0 maxpacket: 32 [ 416.960267][ T5832] usb 2-1: config 0 has an invalid interface number: 111 but max is 1 [ 416.960295][ T5832] usb 2-1: config 0 has no interface number 1 [ 416.973007][T12783] UHID_CREATE from different security context by process 232 (syz.7.2548), this is not allowed. [ 417.009199][ T5832] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 417.009231][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.009253][ T5832] usb 2-1: Product: syz [ 417.009269][ T5832] usb 2-1: Manufacturer: syz [ 417.009284][ T5832] usb 2-1: SerialNumber: syz [ 417.061431][ T5832] usb 2-1: config 0 descriptor?? [ 417.275690][ T5832] snd-usb-6fire 2-1:0.111: unable to receive device firmware state. [ 417.275751][ T5832] snd-usb-6fire 2-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 417.326562][ T5832] usb 2-1: USB disconnect, device number 10 [ 417.588357][T12808] netlink: 228 bytes leftover after parsing attributes in process `syz.8.2556'. [ 417.926446][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 418.045244][ T38] audit: type=1326 audit(1776194177.939:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.8.2561" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5662bcc819 code=0x0 [ 418.220414][T12834] FAULT_INJECTION: forcing a failure. [ 418.220414][T12834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.220451][T12834] CPU: 1 UID: 0 PID: 12834 Comm: syz.1.2563 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 418.220477][T12834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 418.220491][T12834] Call Trace: [ 418.220499][T12834] [ 418.220509][T12834] dump_stack_lvl+0xe8/0x150 [ 418.220539][T12834] should_fail_ex+0x46b/0x600 [ 418.220569][T12834] _copy_from_user+0x2d/0xb0 [ 418.220598][T12834] ___sys_sendmsg+0x1c6/0x360 [ 418.220622][T12834] ? __lock_acquire+0x6b5/0x2cf0 [ 418.220655][T12834] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.220715][T12834] ? __fget_files+0x2a/0x420 [ 418.220742][T12834] ? __fget_files+0x3a6/0x420 [ 418.220779][T12834] __x64_sys_sendmsg+0x1c3/0x2a0 [ 418.220817][T12834] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.220851][T12834] ? __pfx_ksys_write+0x10/0x10 [ 418.220891][T12834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.220916][T12834] do_syscall_64+0x15f/0xf80 [ 418.220947][T12834] ? trace_irq_disable+0x3b/0x140 [ 418.220974][T12834] ? clear_bhb_loop+0x40/0x90 [ 418.221003][T12834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.221026][T12834] RIP: 0033:0x7fc4c5e6c819 [ 418.221047][T12834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.221068][T12834] RSP: 002b:00007fc4c40c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.221092][T12834] RAX: ffffffffffffffda RBX: 00007fc4c60e5fa0 RCX: 00007fc4c5e6c819 [ 418.221109][T12834] RDX: 0000000020000000 RSI: 0000200000000540 RDI: 0000000000000005 [ 418.221124][T12834] RBP: 00007fc4c40c6090 R08: 0000000000000000 R09: 0000000000000000 [ 418.221138][T12834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.221151][T12834] R13: 00007fc4c60e6038 R14: 00007fc4c60e5fa0 R15: 00007ffe8ae1d1b8 [ 418.221185][T12834] [ 418.579723][T12840] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2565'. [ 419.035878][T12855] netlink: 'syz.3.2567': attribute type 1 has an invalid length. [ 419.577521][ T5915] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 419.738334][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 419.746385][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.746414][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.781074][ T5915] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.781098][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.781113][ T5915] usb 4-1: Product: syz [ 419.781124][ T5915] usb 4-1: Manufacturer: syz [ 419.781134][ T5915] usb 4-1: SerialNumber: syz [ 419.880690][ T5915] usb 4-1: 0:2 : does not exist [ 420.054149][ T5915] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 420.350089][T12888] FAULT_INJECTION: forcing a failure. [ 420.350089][T12888] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 420.350127][T12888] CPU: 0 UID: 0 PID: 12888 Comm: syz.1.2573 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 420.350152][T12888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 420.350165][T12888] Call Trace: [ 420.350174][T12888] [ 420.350183][T12888] dump_stack_lvl+0xe8/0x150 [ 420.350214][T12888] should_fail_ex+0x46b/0x600 [ 420.350245][T12888] prepare_alloc_pages+0x22a/0x6b0 [ 420.350288][T12888] __alloc_frozen_pages_noprof+0x12f/0x380 [ 420.350330][T12888] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 420.350371][T12888] ? __pfx_policy_nodemask+0x10/0x10 [ 420.350407][T12888] ? __lock_acquire+0x6b5/0x2cf0 [ 420.350444][T12888] alloc_pages_mpol+0xd1/0x380 [ 420.350483][T12888] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 420.350521][T12888] vma_alloc_folio_noprof+0xe1/0x1e0 [ 420.350557][T12888] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 420.350592][T12888] ? __pte_offset_map+0x29/0x200 [ 420.350628][T12888] do_pte_missing+0x822/0x2950 [ 420.350685][T12888] handle_mm_fault+0xdb5/0x14c0 [ 420.350721][T12888] ? handle_mm_fault+0xed/0x14c0 [ 420.350757][T12888] ? __pfx_handle_mm_fault+0x10/0x10 [ 420.350785][T12888] ? lock_vma_under_rcu+0x45a/0x500 [ 420.350848][T12888] do_user_addr_fault+0xa73/0x1340 [ 420.350879][T12888] ? rcu_is_watching+0x15/0xb0 [ 420.350921][T12888] ? trace_page_fault_user+0x84/0x1e0 [ 420.350947][T12888] exc_page_fault+0x6a/0xc0 [ 420.350980][T12888] asm_exc_page_fault+0x26/0x30 [ 420.351001][T12888] RIP: 0033:0x7fc4c5d2adaa [ 420.351022][T12888] Code: 48 83 c4 08 5b 5d e9 c5 fa ff ff 0f 1f 44 00 00 41 57 45 31 ff 41 56 41 55 41 54 41 bc 00 00 c0 fe 55 53 48 81 ec 38 1b 00 00 <48> 89 bc 24 a8 00 00 00 4c 8d ac 24 20 07 00 00 48 89 b4 24 a0 00 [ 420.351041][T12888] RSP: 002b:00007fc4c40c44b0 EFLAGS: 00010202 [ 420.351060][T12888] RAX: 00007fc4c5d2ad90 RBX: 00007fc4c60e5fa0 RCX: 00002000000001c0 [ 420.351076][T12888] RDX: 0000200000fe8000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 420.351091][T12888] RBP: 00007fc4c40c6090 R08: 0000000000000001 R09: 0000000000000004 [ 420.351105][T12888] R10: 0000000000000004 R11: 0000200000fe8000 R12: 00000000fec00000 [ 420.351118][T12888] R13: 00007fc4c60e6038 R14: 00007fc4c60e5fa0 R15: 0000000000000000 [ 420.351152][T12888] [ 420.361492][T12888] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 420.641144][ T5915] usb 4-1: USB disconnect, device number 13 [ 420.808197][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2574'. [ 421.131815][T12905] FAULT_INJECTION: forcing a failure. [ 421.131815][T12905] name failslab, interval 1, probability 0, space 0, times 0 [ 421.131853][T12905] CPU: 0 UID: 0 PID: 12905 Comm: syz.3.2577 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 421.131879][T12905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 421.131894][T12905] Call Trace: [ 421.131903][T12905] [ 421.131914][T12905] dump_stack_lvl+0xe8/0x150 [ 421.131946][T12905] should_fail_ex+0x46b/0x600 [ 421.131977][T12905] should_failslab+0xa8/0x100 [ 421.132015][T12905] kmem_cache_alloc_noprof+0x87/0x680 [ 421.132045][T12905] ? locks_get_lock_context+0x33f/0x5b0 [ 421.132078][T12905] ? flock_lock_inode+0x23a/0x1310 [ 421.132118][T12905] flock_lock_inode+0x23a/0x1310 [ 421.132155][T12905] ? kstrtoull+0x12f/0x1d0 [ 421.132188][T12905] ? aa_file_perm+0x192/0x15f0 [ 421.132222][T12905] ? __pfx_flock_lock_inode+0x10/0x10 [ 421.132267][T12905] locks_lock_inode_wait+0x10d/0x460 [ 421.132303][T12905] ? __pfx_locks_lock_inode_wait+0x10/0x10 [ 421.132348][T12905] ? apparmor_file_lock+0x252/0x360 [ 421.132390][T12905] __se_sys_flock+0x4ba/0x660 [ 421.132425][T12905] ? __pfx___se_sys_flock+0x10/0x10 [ 421.132487][T12905] ? __pfx_ksys_write+0x10/0x10 [ 421.132531][T12905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.132664][T12905] do_syscall_64+0x15f/0xf80 [ 421.132698][T12905] ? trace_irq_disable+0x3b/0x140 [ 421.132730][T12905] ? clear_bhb_loop+0x40/0x90 [ 421.132758][T12905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.132783][T12905] RIP: 0033:0x7f615ee2c819 [ 421.132805][T12905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.132825][T12905] RSP: 002b:00007f615d065028 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 421.132848][T12905] RAX: ffffffffffffffda RBX: 00007f615f0a6090 RCX: 00007f615ee2c819 [ 421.132866][T12905] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003 [ 421.132880][T12905] RBP: 00007f615d065090 R08: 0000000000000000 R09: 0000000000000000 [ 421.132895][T12905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.132908][T12905] R13: 00007f615f0a6128 R14: 00007f615f0a6090 R15: 00007fffcc16bdf8 [ 421.132944][T12905] [ 422.254606][T12932] FAULT_INJECTION: forcing a failure. [ 422.254606][T12932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.254644][T12932] CPU: 1 UID: 0 PID: 12932 Comm: syz.1.2584 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 422.254670][T12932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 422.254685][T12932] Call Trace: [ 422.254693][T12932] [ 422.254711][T12932] dump_stack_lvl+0xe8/0x150 [ 422.254743][T12932] should_fail_ex+0x46b/0x600 [ 422.254773][T12932] _copy_from_user+0x2d/0xb0 [ 422.254803][T12932] ___sys_sendmsg+0x1c6/0x360 [ 422.254826][T12932] ? __lock_acquire+0x6b5/0x2cf0 [ 422.254859][T12932] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.254918][T12932] ? __fget_files+0x2a/0x420 [ 422.254944][T12932] ? __fget_files+0x3a6/0x420 [ 422.254981][T12932] __x64_sys_sendmsg+0x1c3/0x2a0 [ 422.255008][T12932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.255042][T12932] ? __pfx_ksys_write+0x10/0x10 [ 422.255081][T12932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.255106][T12932] do_syscall_64+0x15f/0xf80 [ 422.255136][T12932] ? trace_irq_disable+0x3b/0x140 [ 422.255161][T12932] ? clear_bhb_loop+0x40/0x90 [ 422.255190][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.255212][T12932] RIP: 0033:0x7fc4c5e6c819 [ 422.255233][T12932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.255253][T12932] RSP: 002b:00007fc4c40c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.255275][T12932] RAX: ffffffffffffffda RBX: 00007fc4c60e5fa0 RCX: 00007fc4c5e6c819 [ 422.255291][T12932] RDX: 00000000040408c0 RSI: 0000200000000440 RDI: 0000000000000003 [ 422.255306][T12932] RBP: 00007fc4c40c6090 R08: 0000000000000000 R09: 0000000000000000 [ 422.255320][T12932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.255333][T12932] R13: 00007fc4c60e6038 R14: 00007fc4c60e5fa0 R15: 00007ffe8ae1d1b8 [ 422.255372][T12932] [ 422.465222][ T5836] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 422.598070][ T5836] usb 4-1: device descriptor read/64, error -71 [ 422.841282][ T5836] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 422.969416][ T5836] usb 4-1: device descriptor read/64, error -71 [ 423.077985][ T5836] usb usb4-port1: attempt power cycle [ 423.455779][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 423.463259][ T5895] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 423.467585][ T5836] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 423.498584][ T5836] usb 4-1: device descriptor read/8, error -71 [ 423.609194][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 423.624820][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.624858][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.624901][ T5895] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 423.624925][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.689764][ T5895] usb 2-1: config 0 descriptor?? [ 423.778784][ T5836] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 423.806635][ T5836] usb 4-1: device descriptor read/8, error -71 [ 423.907931][ T5836] usb usb4-port1: unable to enumerate USB device [ 424.149046][ T5895] ntrig 0003:1B96:0008.0006: unknown main item tag 0x0 [ 424.149086][ T5895] ntrig 0003:1B96:0008.0006: unknown main item tag 0x0 [ 424.149115][ T5895] ntrig 0003:1B96:0008.0006: unknown main item tag 0x0 [ 424.149141][ T5895] ntrig 0003:1B96:0008.0006: unknown main item tag 0x0 [ 424.149169][ T5895] ntrig 0003:1B96:0008.0006: unknown main item tag 0x0 [ 424.149196][ T5895] ntrig 0003:1B96:0008.0006: unknown main item tag 0x0 [ 424.149222][ T5895] ntrig 0003:1B96:0008.0006: unknown main item tag 0x0 [ 424.258822][ T5895] ntrig 0003:1B96:0008.0006: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.1-1/input0 [ 424.404553][ T5895] ntrig 0003:1B96:0008.0006: Firmware version: 6.6.18.29.4 (dacd bc43) [ 424.514370][T12997] netlink: 774 bytes leftover after parsing attributes in process `syz.8.2602'. [ 424.610597][ T5915] usb 2-1: USB disconnect, device number 11 [ 424.744201][ T5489] 8021q: adding VLAN 0 to HW filter on device eth3 [ 425.513083][T13026] FAULT_INJECTION: forcing a failure. [ 425.513083][T13026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.513123][T13026] CPU: 0 UID: 0 PID: 13026 Comm: syz.1.2606 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 425.513146][T13026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 425.513160][T13026] Call Trace: [ 425.513166][T13026] [ 425.513172][T13026] dump_stack_lvl+0xe8/0x150 [ 425.513195][T13026] should_fail_ex+0x46b/0x600 [ 425.513217][T13026] _copy_from_iter+0x1d3/0x1670 [ 425.513233][T13026] ? unwind_next_frame+0xa6/0x2550 [ 425.513259][T13026] ? __lock_acquire+0x6b5/0x2cf0 [ 425.513283][T13026] ? __pfx__copy_from_iter+0x10/0x10 [ 425.513311][T13026] tun_get_user+0x264/0x4400 [ 425.513337][T13026] ? aa_file_perm+0x192/0x15f0 [ 425.513364][T13026] ? aa_file_perm+0x192/0x15f0 [ 425.513414][T13026] ? aa_file_perm+0x51a/0x15f0 [ 425.513439][T13026] ? __pfx_tun_get_user+0x10/0x10 [ 425.513474][T13026] ? __lock_acquire+0x6b5/0x2cf0 [ 425.513510][T13026] ? kstrtoull+0x12f/0x1d0 [ 425.513546][T13026] ? ref_tracker_alloc+0x332/0x4a0 [ 425.513563][T13026] ? get_pid_task+0x20/0x1f0 [ 425.513585][T13026] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 425.513604][T13026] ? tun_get+0x1c/0x2f0 [ 425.513626][T13026] ? tun_get+0x1c/0x2f0 [ 425.513653][T13026] ? tun_get+0x1c/0x2f0 [ 425.513674][T13026] ? tun_get+0x1c/0x2f0 [ 425.513700][T13026] tun_chr_write_iter+0x119/0x200 [ 425.513725][T13026] vfs_write+0x629/0xba0 [ 425.513754][T13026] ? __pfx_vfs_write+0x10/0x10 [ 425.513783][T13026] ? __fget_files+0x2a/0x420 [ 425.513809][T13026] ksys_write+0x156/0x270 [ 425.513833][T13026] ? __pfx_ksys_write+0x10/0x10 [ 425.513861][T13026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.513879][T13026] do_syscall_64+0x15f/0xf80 [ 425.513900][T13026] ? trace_irq_disable+0x3b/0x140 [ 425.513919][T13026] ? clear_bhb_loop+0x40/0x90 [ 425.513938][T13026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.513958][T13026] RIP: 0033:0x7fc4c5e6c819 [ 425.513973][T13026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.513987][T13026] RSP: 002b:00007fc4c40c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 425.514004][T13026] RAX: ffffffffffffffda RBX: 00007fc4c60e5fa0 RCX: 00007fc4c5e6c819 [ 425.514016][T13026] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 425.514026][T13026] RBP: 00007fc4c40c6090 R08: 0000000000000000 R09: 0000000000000000 [ 425.514036][T13026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.514045][T13026] R13: 00007fc4c60e6038 R14: 00007fc4c60e5fa0 R15: 00007ffe8ae1d1b8 [ 425.514069][T13026] [ 425.989726][ T5895] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 426.063747][ T5489] 8021q: adding VLAN 0 to HW filter on device eth4 [ 426.193475][ T5895] usb 4-1: unable to get BOS descriptor or descriptor too short [ 426.216279][ T5895] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.216310][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.266085][ T5895] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 426.266119][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.266134][ T5895] usb 4-1: Product: syz [ 426.266145][ T5895] usb 4-1: Manufacturer: syz [ 426.266156][ T5895] usb 4-1: SerialNumber: syz [ 426.686555][ T5895] usb 4-1: Unsupported UAC3 BADD profile [ 426.694065][ T5836] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 426.841624][ T5836] usb 2-1: unable to get BOS descriptor or descriptor too short [ 426.869796][ T5836] usb 2-1: config 194 has an invalid interface number: 4 but max is 0 [ 426.869828][ T5836] usb 2-1: config 194 has no interface number 0 [ 426.869863][ T5836] usb 2-1: config 194 interface 4 has no altsetting 0 [ 426.924279][ T5836] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.85 [ 426.924311][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.924334][ T5836] usb 2-1: Product: ⑹队境䧔텗嘽ꔧ竢荦裊ꢎ흿᜚贇괓仩힔ઐ緄䯀궰ㅆ [ 426.924355][ T5836] usb 2-1: Manufacturer: 揁 [ 427.198817][ T5831] Bluetooth: hci1: command tx timeout [ 427.242828][ T5836] usbhid 2-1:194.4: couldn't find an input interrupt endpoint [ 427.244824][ T5895] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 427.333453][ T5895] usb 4-1: USB disconnect, device number 18 [ 427.364324][ T5836] usb 2-1: USB disconnect, device number 12 [ 427.427717][ T7589] udevd[7589]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.914692][T13065] FAULT_INJECTION: forcing a failure. [ 427.914692][T13065] name failslab, interval 1, probability 0, space 0, times 0 [ 427.914732][T13065] CPU: 0 UID: 0 PID: 13065 Comm: syz.1.2613 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 427.914763][T13065] Tainted: [L]=SOFTLOCKUP [ 427.914771][T13065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 427.914785][T13065] Call Trace: [ 427.914794][T13065] [ 427.914803][T13065] dump_stack_lvl+0xe8/0x150 [ 427.914835][T13065] should_fail_ex+0x46b/0x600 [ 427.914865][T13065] should_failslab+0xa8/0x100 [ 427.914900][T13065] __kmalloc_noprof+0xdf/0x7b0 [ 427.914930][T13065] ? kfree+0x4d/0x6c0 [ 427.914957][T13065] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 427.914995][T13065] tomoyo_realpath_from_path+0xe3/0x5d0 [ 427.915023][T13065] ? tomoyo_domain+0xd7/0x130 [ 427.915055][T13065] ? tomoyo_path_number_perm+0x219/0x630 [ 427.915090][T13065] tomoyo_path_number_perm+0x246/0x630 [ 427.915138][T13065] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 427.915172][T13065] ? __lock_acquire+0x6b5/0x2cf0 [ 427.915204][T13065] ? __seccomp_filter+0xaf7/0x1ef0 [ 427.915270][T13065] ? __fget_files+0x2a/0x420 [ 427.915300][T13065] ? __fget_files+0x2a/0x420 [ 427.915325][T13065] ? __fget_files+0x3a6/0x420 [ 427.915351][T13065] ? __fget_files+0x2a/0x420 [ 427.915382][T13065] security_file_ioctl+0xc3/0x2a0 [ 427.915417][T13065] __se_sys_ioctl+0x47/0x170 [ 427.915456][T13065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.915482][T13065] do_syscall_64+0x15f/0xf80 [ 427.915512][T13065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.915537][T13065] ? clear_bhb_loop+0x40/0x90 [ 427.915565][T13065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.915588][T13065] RIP: 0033:0x7fc4c5e6c819 [ 427.915609][T13065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.915628][T13065] RSP: 002b:00007fc4c40c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.915652][T13065] RAX: ffffffffffffffda RBX: 00007fc4c60e5fa0 RCX: 00007fc4c5e6c819 [ 427.915669][T13065] RDX: 0000200000000540 RSI: 0000000040086200 RDI: 0000000000000007 [ 427.915684][T13065] RBP: 00007fc4c40c6090 R08: 0000000000000000 R09: 0000000000000000 [ 427.915697][T13065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.915710][T13065] R13: 00007fc4c60e6038 R14: 00007fc4c60e5fa0 R15: 00007ffe8ae1d1b8 [ 427.915744][T13065] [ 427.916640][T13065] ERROR: Out of memory at tomoyo_realpath_from_path. [ 428.558336][T13079] FAULT_INJECTION: forcing a failure. [ 428.558336][T13079] name failslab, interval 1, probability 0, space 0, times 0 [ 428.558377][T13079] CPU: 1 UID: 0 PID: 13079 Comm: syz.7.2616 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 428.558408][T13079] Tainted: [L]=SOFTLOCKUP [ 428.558416][T13079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 428.558430][T13079] Call Trace: [ 428.558438][T13079] [ 428.558447][T13079] dump_stack_lvl+0xe8/0x150 [ 428.558479][T13079] should_fail_ex+0x46b/0x600 [ 428.558509][T13079] should_failslab+0xa8/0x100 [ 428.558545][T13079] __kmalloc_cache_noprof+0x84/0x690 [ 428.558578][T13079] ? alloc_pipe_info+0xe8/0x4d0 [ 428.558617][T13079] alloc_pipe_info+0xe8/0x4d0 [ 428.558652][T13079] splice_direct_to_actor+0xa19/0xc80 [ 428.558695][T13079] ? kstrtouint+0x6e/0xe0 [ 428.558732][T13079] ? __pfx_direct_splice_actor+0x10/0x10 [ 428.558762][T13079] ? __pfx_aa_file_perm+0x10/0x10 [ 428.558791][T13079] ? __lock_acquire+0x6b5/0x2cf0 [ 428.558820][T13079] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 428.558859][T13079] do_splice_direct+0x19b/0x2a0 [ 428.558891][T13079] ? __pfx_do_splice_direct+0x10/0x10 [ 428.558921][T13079] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 428.558958][T13079] ? rw_verify_area+0x25b/0x4e0 [ 428.558994][T13079] do_sendfile+0x547/0x7e0 [ 428.559018][T13079] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 428.559057][T13079] ? __pfx_do_sendfile+0x10/0x10 [ 428.559100][T13079] __se_sys_sendfile64+0x144/0x1a0 [ 428.559127][T13079] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 428.559160][T13079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.559186][T13079] do_syscall_64+0x15f/0xf80 [ 428.559216][T13079] ? trace_irq_disable+0x3b/0x140 [ 428.559243][T13079] ? clear_bhb_loop+0x40/0x90 [ 428.559272][T13079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.559295][T13079] RIP: 0033:0x7faa50a7c819 [ 428.559323][T13079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.559342][T13079] RSP: 002b:00007faa4ecd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 428.559366][T13079] RAX: ffffffffffffffda RBX: 00007faa50cf5fa0 RCX: 00007faa50a7c819 [ 428.559383][T13079] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 428.559397][T13079] RBP: 00007faa4ecd6090 R08: 0000000000000000 R09: 0000000000000000 [ 428.559411][T13079] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001 [ 428.559425][T13079] R13: 00007faa50cf6038 R14: 00007faa50cf5fa0 R15: 00007ffcb65d9ef8 [ 428.559461][T13079] [ 429.405188][T13107] FAULT_INJECTION: forcing a failure. [ 429.405188][T13107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.405228][T13107] CPU: 0 UID: 0 PID: 13107 Comm: syz.7.2624 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 429.405259][T13107] Tainted: [L]=SOFTLOCKUP [ 429.405267][T13107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 429.405288][T13107] Call Trace: [ 429.405297][T13107] [ 429.405307][T13107] dump_stack_lvl+0xe8/0x150 [ 429.405338][T13107] should_fail_ex+0x46b/0x600 [ 429.405368][T13107] _copy_from_user+0x2d/0xb0 [ 429.405398][T13107] ___sys_sendmsg+0x1c6/0x360 [ 429.405421][T13107] ? __lock_acquire+0x6b5/0x2cf0 [ 429.405460][T13107] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.405519][T13107] ? __fget_files+0x2a/0x420 [ 429.405544][T13107] ? __fget_files+0x3a6/0x420 [ 429.405581][T13107] __x64_sys_sendmsg+0x1c3/0x2a0 [ 429.405607][T13107] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.405642][T13107] ? __pfx_ksys_write+0x10/0x10 [ 429.405684][T13107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.405709][T13107] do_syscall_64+0x15f/0xf80 [ 429.405739][T13107] ? trace_irq_disable+0x3b/0x140 [ 429.405766][T13107] ? clear_bhb_loop+0x40/0x90 [ 429.405795][T13107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.405818][T13107] RIP: 0033:0x7faa50a7c819 [ 429.405839][T13107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.405859][T13107] RSP: 002b:00007faa4ecd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.405883][T13107] RAX: ffffffffffffffda RBX: 00007faa50cf5fa0 RCX: 00007faa50a7c819 [ 429.405900][T13107] RDX: 0000000004040004 RSI: 0000200000000780 RDI: 0000000000000003 [ 429.405914][T13107] RBP: 00007faa4ecd6090 R08: 0000000000000000 R09: 0000000000000000 [ 429.405928][T13107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.405941][T13107] R13: 00007faa50cf6038 R14: 00007faa50cf5fa0 R15: 00007ffcb65d9ef8 [ 429.405974][T13107] [ 429.911671][T13116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.912322][T13116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.957080][T13116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.968535][T13116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.167020][T13119] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2628'. [ 430.187687][ T819] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 430.672190][T13144] FAULT_INJECTION: forcing a failure. [ 430.672190][T13144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.672225][T13144] CPU: 1 UID: 0 PID: 13144 Comm: syz.3.2631 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 430.672250][T13144] Tainted: [L]=SOFTLOCKUP [ 430.672257][T13144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 430.672272][T13144] Call Trace: [ 430.672279][T13144] [ 430.672287][T13144] dump_stack_lvl+0xe8/0x150 [ 430.672314][T13144] should_fail_ex+0x46b/0x600 [ 430.672338][T13144] _copy_to_user+0x31/0xb0 [ 430.672363][T13144] simple_read_from_buffer+0xe1/0x170 [ 430.672389][T13144] proc_fail_nth_read+0x1be/0x230 [ 430.672416][T13144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.672441][T13144] ? rw_verify_area+0x2ac/0x4e0 [ 430.672465][T13144] ? tun_chr_write_iter+0xe6/0x200 [ 430.672490][T13144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.672513][T13144] vfs_read+0x212/0xa80 [ 430.672545][T13144] ? __pfx_vfs_read+0x10/0x10 [ 430.672571][T13144] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 430.672599][T13144] ? lockdep_hardirqs_on+0x7a/0x110 [ 430.672624][T13144] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 430.672650][T13144] ? mutex_lock_nested+0x152/0x1d0 [ 430.672670][T13144] ? fdget_pos+0x252/0x320 [ 430.672702][T13144] ksys_read+0x156/0x270 [ 430.672732][T13144] ? __pfx_ksys_read+0x10/0x10 [ 430.672764][T13144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.672785][T13144] do_syscall_64+0x15f/0xf80 [ 430.672810][T13144] ? trace_irq_disable+0x3b/0x140 [ 430.672831][T13144] ? clear_bhb_loop+0x40/0x90 [ 430.672854][T13144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.672872][T13144] RIP: 0033:0x7f615eded04e [ 430.672890][T13144] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 430.672914][T13144] RSP: 002b:00007f615d043fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 430.672934][T13144] RAX: ffffffffffffffda RBX: 00007f615d0446c0 RCX: 00007f615eded04e [ 430.672947][T13144] RDX: 000000000000000f RSI: 00007f615d0440a0 RDI: 0000000000000005 [ 430.672958][T13144] RBP: 00007f615d044090 R08: 0000000000000000 R09: 0000000000000000 [ 430.672969][T13144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.672979][T13144] R13: 00007f615f0a6218 R14: 00007f615f0a6180 R15: 00007fffcc16bdf8 [ 430.673007][T13144] [ 431.530624][T13162] FAULT_INJECTION: forcing a failure. [ 431.530624][T13162] name failslab, interval 1, probability 0, space 0, times 0 [ 431.530665][T13162] CPU: 0 UID: 0 PID: 13162 Comm: syz.1.2635 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 431.530697][T13162] Tainted: [L]=SOFTLOCKUP [ 431.530705][T13162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 431.530718][T13162] Call Trace: [ 431.530727][T13162] [ 431.530737][T13162] dump_stack_lvl+0xe8/0x150 [ 431.530768][T13162] should_fail_ex+0x46b/0x600 [ 431.530799][T13162] should_failslab+0xa8/0x100 [ 431.530835][T13162] __kmalloc_noprof+0xdf/0x7b0 [ 431.530913][T13162] ? kfree+0x4d/0x6c0 [ 431.530940][T13162] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 431.530973][T13162] tomoyo_realpath_from_path+0xe3/0x5d0 [ 431.531002][T13162] ? tomoyo_domain+0xd7/0x130 [ 431.531035][T13162] ? tomoyo_path_number_perm+0x219/0x630 [ 431.531069][T13162] tomoyo_path_number_perm+0x246/0x630 [ 431.531107][T13162] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 431.531139][T13162] ? __lock_acquire+0x6b5/0x2cf0 [ 431.531172][T13162] ? do_raw_spin_lock+0x12b/0x2f0 [ 431.531231][T13162] ? __fget_files+0x2a/0x420 [ 431.531261][T13162] ? __fget_files+0x2a/0x420 [ 431.531287][T13162] ? __fget_files+0x3a6/0x420 [ 431.531312][T13162] ? __fget_files+0x2a/0x420 [ 431.531344][T13162] security_file_ioctl+0xc3/0x2a0 [ 431.531379][T13162] __se_sys_ioctl+0x47/0x170 [ 431.531413][T13162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.531439][T13162] do_syscall_64+0x15f/0xf80 [ 431.531470][T13162] ? trace_irq_disable+0x3b/0x140 [ 431.531495][T13162] ? clear_bhb_loop+0x40/0x90 [ 431.531523][T13162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.531546][T13162] RIP: 0033:0x7fc4c5e6c819 [ 431.531567][T13162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.531587][T13162] RSP: 002b:00007fc4c40c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.531611][T13162] RAX: ffffffffffffffda RBX: 00007fc4c60e5fa0 RCX: 00007fc4c5e6c819 [ 431.531627][T13162] RDX: 0000200000019080 RSI: 0000000000005412 RDI: 0000000000000003 [ 431.531642][T13162] RBP: 00007fc4c40c6090 R08: 0000000000000000 R09: 0000000000000000 [ 431.531655][T13162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.531668][T13162] R13: 00007fc4c60e6038 R14: 00007fc4c60e5fa0 R15: 00007ffe8ae1d1b8 [ 431.531703][T13162] [ 431.531712][T13162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 431.884461][T13167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2637'. [ 432.080905][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 432.437550][ T5895] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 432.572121][ T5895] usb 4-1: device descriptor read/64, error -71 [ 432.818624][ T5895] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 432.947518][ T5895] usb 4-1: device descriptor read/64, error -71 [ 433.058235][ T5895] usb usb4-port1: attempt power cycle [ 433.507551][ T5895] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 433.531274][ T5895] usb 4-1: device descriptor read/8, error -71 [ 433.792512][ T5895] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 433.822301][ T5895] usb 4-1: device descriptor read/8, error -71 [ 433.958540][ T5895] usb usb4-port1: unable to enumerate USB device [ 434.104000][ T819] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 434.282837][ T819] usb 2-1: unable to get BOS descriptor or descriptor too short [ 434.283907][ T819] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 434.283951][ T819] usb 2-1: can't read configurations, error -71 [ 434.446618][T13253] FAULT_INJECTION: forcing a failure. [ 434.446618][T13253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.446658][T13253] CPU: 0 UID: 0 PID: 13253 Comm: syz.7.2652 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 434.446689][T13253] Tainted: [L]=SOFTLOCKUP [ 434.446697][T13253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 434.446711][T13253] Call Trace: [ 434.446720][T13253] [ 434.446728][T13253] dump_stack_lvl+0xe8/0x150 [ 434.446759][T13253] should_fail_ex+0x46b/0x600 [ 434.446789][T13253] _copy_from_user+0x2d/0xb0 [ 434.446816][T13253] ___sys_recvmsg+0x175/0x590 [ 434.446839][T13253] ? get_pid_task+0x20/0x1f0 [ 434.446866][T13253] ? get_pid_task+0x20/0x1f0 [ 434.446898][T13253] ? __pfx____sys_recvmsg+0x10/0x10 [ 434.446926][T13253] ? __fget_files+0x2a/0x420 [ 434.446970][T13253] ? __fget_files+0x3a6/0x420 [ 434.447006][T13253] __x64_sys_recvmsg+0x1c0/0x2a0 [ 434.447031][T13253] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 434.447065][T13253] ? __pfx_ksys_write+0x10/0x10 [ 434.447104][T13253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.447134][T13253] do_syscall_64+0x15f/0xf80 [ 434.447162][T13253] ? trace_irq_disable+0x3b/0x140 [ 434.447188][T13253] ? clear_bhb_loop+0x40/0x90 [ 434.447214][T13253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.447236][T13253] RIP: 0033:0x7faa50a7c819 [ 434.447256][T13253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.447275][T13253] RSP: 002b:00007faa4ecd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 434.447298][T13253] RAX: ffffffffffffffda RBX: 00007faa50cf5fa0 RCX: 00007faa50a7c819 [ 434.447313][T13253] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 434.447327][T13253] RBP: 00007faa4ecd6090 R08: 0000000000000000 R09: 0000000000000000 [ 434.447340][T13253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.447353][T13253] R13: 00007faa50cf6038 R14: 00007faa50cf5fa0 R15: 00007ffcb65d9ef8 [ 434.447384][T13253] [ 435.083753][T13267] FAULT_INJECTION: forcing a failure. [ 435.083753][T13267] name failslab, interval 1, probability 0, space 0, times 0 [ 435.083801][T13267] CPU: 1 UID: 0 PID: 13267 Comm: syz.1.2656 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 435.083832][T13267] Tainted: [L]=SOFTLOCKUP [ 435.083840][T13267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 435.083855][T13267] Call Trace: [ 435.083864][T13267] [ 435.083873][T13267] dump_stack_lvl+0xe8/0x150 [ 435.083906][T13267] should_fail_ex+0x46b/0x600 [ 435.083936][T13267] should_failslab+0xa8/0x100 [ 435.083972][T13267] __kmalloc_noprof+0xdf/0x7b0 [ 435.084001][T13267] ? kfree+0x4d/0x6c0 [ 435.084028][T13267] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 435.084061][T13267] tomoyo_realpath_from_path+0xe3/0x5d0 [ 435.084090][T13267] ? tomoyo_domain+0xd7/0x130 [ 435.084123][T13267] ? tomoyo_path_number_perm+0x219/0x630 [ 435.084171][T13267] tomoyo_path_number_perm+0x246/0x630 [ 435.084211][T13267] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 435.084246][T13267] ? __lock_acquire+0x6b5/0x2cf0 [ 435.084278][T13267] ? do_raw_spin_lock+0x12b/0x2f0 [ 435.084341][T13267] ? __fget_files+0x2a/0x420 [ 435.084377][T13267] ? __fget_files+0x2a/0x420 [ 435.084401][T13267] ? __fget_files+0x3a6/0x420 [ 435.084426][T13267] ? __fget_files+0x2a/0x420 [ 435.084459][T13267] security_file_ioctl+0xc3/0x2a0 [ 435.084494][T13267] __se_sys_ioctl+0x47/0x170 [ 435.084528][T13267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.084563][T13267] do_syscall_64+0x15f/0xf80 [ 435.084594][T13267] ? trace_irq_disable+0x3b/0x140 [ 435.084620][T13267] ? clear_bhb_loop+0x40/0x90 [ 435.084650][T13267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.084673][T13267] RIP: 0033:0x7fc4c5e6c819 [ 435.084694][T13267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.084715][T13267] RSP: 002b:00007fc4c40c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.084737][T13267] RAX: ffffffffffffffda RBX: 00007fc4c60e5fa0 RCX: 00007fc4c5e6c819 [ 435.084750][T13267] RDX: 00002000000005c0 RSI: 000000004008af04 RDI: 0000000000000003 [ 435.084763][T13267] RBP: 00007fc4c40c6090 R08: 0000000000000000 R09: 0000000000000000 [ 435.084777][T13267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.084787][T13267] R13: 00007fc4c60e6038 R14: 00007fc4c60e5fa0 R15: 00007ffe8ae1d1b8 [ 435.084817][T13267] [ 435.213482][T13267] ERROR: Out of memory at tomoyo_realpath_from_path. [ 435.720994][T13280] overlayfs: failed to clone upperpath [ 435.787038][T13290] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 435.900931][T13287] binder: 13277:13287 ioctl c0306201 200000000480 returned -14 [ 437.197533][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 437.242579][ T10] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 437.754396][T13357] FAULT_INJECTION: forcing a failure. [ 437.754396][T13357] name failslab, interval 1, probability 0, space 0, times 0 [ 437.754437][T13357] CPU: 0 UID: 0 PID: 13357 Comm: syz.3.2676 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 437.754468][T13357] Tainted: [L]=SOFTLOCKUP [ 437.754477][T13357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 437.754491][T13357] Call Trace: [ 437.754499][T13357] [ 437.754508][T13357] dump_stack_lvl+0xe8/0x150 [ 437.754540][T13357] should_fail_ex+0x46b/0x600 [ 437.754571][T13357] should_failslab+0xa8/0x100 [ 437.754613][T13357] __kmalloc_noprof+0xdf/0x7b0 [ 437.754641][T13357] ? kfree+0x4d/0x6c0 [ 437.754669][T13357] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 437.754702][T13357] tomoyo_realpath_from_path+0xe3/0x5d0 [ 437.754732][T13357] ? tomoyo_domain+0xd7/0x130 [ 437.754764][T13357] ? tomoyo_path_number_perm+0x219/0x630 [ 437.754800][T13357] tomoyo_path_number_perm+0x246/0x630 [ 437.754842][T13357] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 437.754876][T13357] ? __lock_acquire+0x6b5/0x2cf0 [ 437.754907][T13357] ? do_raw_spin_lock+0x12b/0x2f0 [ 437.754965][T13357] ? __fget_files+0x2a/0x420 [ 437.754996][T13357] ? __fget_files+0x2a/0x420 [ 437.755021][T13357] ? __fget_files+0x3a6/0x420 [ 437.755047][T13357] ? __fget_files+0x2a/0x420 [ 437.755077][T13357] security_file_ioctl+0xc3/0x2a0 [ 437.755113][T13357] __se_sys_ioctl+0x47/0x170 [ 437.755148][T13357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.755173][T13357] do_syscall_64+0x15f/0xf80 [ 437.755203][T13357] ? trace_irq_disable+0x3b/0x140 [ 437.755228][T13357] ? clear_bhb_loop+0x40/0x90 [ 437.755257][T13357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.755281][T13357] RIP: 0033:0x7f615ee2c819 [ 437.755301][T13357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.755321][T13357] RSP: 002b:00007f615d086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.755345][T13357] RAX: ffffffffffffffda RBX: 00007f615f0a5fa0 RCX: 00007f615ee2c819 [ 437.755360][T13357] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 437.755371][T13357] RBP: 00007f615d086090 R08: 0000000000000000 R09: 0000000000000000 [ 437.755384][T13357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.755398][T13357] R13: 00007f615f0a6038 R14: 00007f615f0a5fa0 R15: 00007fffcc16bdf8 [ 437.755432][T13357] [ 437.755557][T13357] ERROR: Out of memory at tomoyo_realpath_from_path. [ 438.318196][ T39] INFO: task udevd:5838 blocked in I/O wait for more than 143 seconds. [ 438.318224][ T39] Tainted: G L syzkaller #0 [ 438.318237][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.318248][ T39] task:udevd state:D stack:22024 pid:5838 tgid:5838 ppid:5194 task_flags:0x400140 flags:0x00080002 [ 438.318312][ T39] Call Trace: [ 438.318320][ T39] [ 438.318343][ T39] __schedule+0x169e/0x54f0 [ 438.318380][ T39] ? __lock_acquire+0x6b5/0x2cf0 [ 438.318421][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 438.318462][ T39] ? __pfx___schedule+0x10/0x10 [ 438.318499][ T39] ? schedule+0x90/0x360 [ 438.318531][ T39] schedule+0x164/0x360 [ 438.318563][ T39] io_schedule+0x7f/0xd0 [ 438.318596][ T39] folio_wait_bit_common+0x6dd/0xbc0 [ 438.318652][ T39] ? __pfx_[ 438.318652][ T39] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 438.318691][ T39] ? __pfx_wake_page_function+0x10/0x10 [ 438.318728][ T39] ? filemap_add_folio+0x3d9/0x610 [ 438.318768][ T39] ? __filemap_get_folio_mpol+0x6fa/0xa50 [ 438.318805][ T39] ? do_read_cache_folio+0x433/0x560 [ 438.318836][ T39] do_read_cache_folio+0x1a7/0x560 [ 438.318861][ T39] ? __pfx_blkdev_read_folio+0x10/0x10 [ 438.318890][ T39] read_part_sector+0xb8/0x2b0 [ 438.318927][ T39] adfspart_check_POWERTEC+0x9a/0x7a0 [ 438.318964][ T39] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 438.319003][ T39] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 438.319038][ T39] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 438.319084][ T39] bdev_disk_changed+0x817/0x1770 [ 438.319142][ T39] ? __pfx_bdev_disk_changed+0x10/0x10 [ 438.319183][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 438.319220][ T39] blkdev_get_whole+0x2e5/0x480 [ 438.319262][ T39] bdev_open+0x31e/0xcc0 [ 438.319306][ T39] blkdev_open+0x485/0x620 [ 438.319342][ T39] ? __pfx_blkdev_open+0x10/0x10 [ 438.319365][ T39] do_dentry_open+0x83d/0x13e0 [ 438.319405][ T39] vfs_open+0x3b/0x350 [ 438.319427][ T39] ? path_openat+0x2e2b/0x38a0 [ 438.319464][ T39] path_openat+0x2e43/0x38a0 [ 438.319565][ T39] ? __pfx_path_openat+0x10/0x10 [ 438.319602][ T39] ? kasan_save_track+0x4f/0x80 [ 438.319631][ T39] ? kasan_save_track+0x3e/0x80 [ 438.319658][ T39] ? __kasan_slab_alloc+0x6c/0x80 [ 438.319687][ T39] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 438.319726][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 438.319762][ T39] do_file_open+0x23e/0x4a0 [ 438.319793][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 438.319829][ T39] ? __pfx_do_file_open+0x10/0x10 [ 438.319858][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 438.319907][ T39] ? alloc_fd+0x64e/0x6c0 [ 438.319945][ T39] do_sys_openat2+0x113/0x200 [ 438.319970][ T39] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 438.319997][ T39] ? __pfx_do_sys_openat2+0x10/0x10 [ 438.320029][ T39] ? rcu_is_watching+0x15/0xb0 [ 438.320068][ T39] __x64_sys_openat+0x138/0x170 [ 438.320097][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.320122][ T39] do_syscall_64+0x15f/0xf80 [ 438.320154][ T39] ? clear_bhb_loop+0x40/0x90 [ 438.320185][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.320209][ T39] RIP: 0033:0x7f7d0e371407 [ 438.320230][ T39] RSP: 002b:00007ffcd2d70360 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 438.320255][ T39] RAX: ffffffffffffffda RBX: 00007f7d0e283880 RCX: 00007f7d0e371407 [ 438.320271][ T39] RDX: 00000000000a0800 RSI: 0000556bfaa044a0 RDI: ffffffffffffff9c [ 438.320287][ T39] RBP: 0000556bfa9f7910 R08: 0000000000000000 R09: 0000000000000000 [ 438.320302][ T39] R10: 0000000000000000 R11: 0000000000000202 R12: 0000556bfaa0c830 [ 438.320316][ T39] R13: 0000556bfaa05190 R14: 0000000000000000 R15: 0000556bfaa0c830 [ 438.320358][ T39] [ 438.320434][ T39] [ 438.320434][ T39] Showing all locks held in the system: [ 438.320444][ T39] 3 locks held by kworker/0:1/10: [ 438.320458][ T39] #0: ffff88801a709938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 438.320521][ T39] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 438.320575][ T39] #2: ffff88802a952210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 438.320635][ T39] 1 lock held by khungtaskd/39: [ 438.320648][ T39] #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 438.320715][ T39] 4 locks held by kworker/u8:7/209: [ 438.320727][ T39] #0: ffff88813fe1c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 438.320781][ T39] #1: ffffc90003b77c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 438.320835][ T39] #2: ffff888035894310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 438.320901][ T39] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 438.320959][ T39] 2 locks held by kworker/u8:10/1358: [ 438.320972][ T39] #0: ffff88813fe1c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 438.321026][ T39] #1: ffffc9000665fc40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 438.321093][ T39] 1 lock held by udevd/5194: [ 438.321105][ T39] #0: ffffffff8eae50b8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 438.321173][ T39] 2 locks held by getty/5578: [ 438.321186][ T39] #0: ffff888037c730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 438.321245][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 438.321311][ T39] 1 lock held by udevd/5838: [ 438.321322][ T39] #0: ffff888026f914c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 438.321403][ T39] 5 locks held by syz-executor/11903: [ 438.321416][ T39] #0: ffffffff8e499210 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x130/0x4a0 [ 438.321469][ T39] #1: ffff888011ef44b0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x181/0x1d50 [ 438.321532][ T39] #2: ffff8880606b44b0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x26f/0x1d50 [ 438.321600][ T39] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 438.321658][ T39] #4: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 438.321716][ T39] 5 locks held by syz.3.2676/13357: [ 438.321729][ T39] #0: ffff888038bb2ab0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0 [ 438.321789][ T39] #1: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 438.321848][ T39] #2: ffff88802abe9c58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 438.321913][ T39] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 438.323626][ T39] #4: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: page_table_check_clear+0x124/0x4f0 [ 438.323697][ T39] [ 438.323703][ T39] ============================================= [ 438.323703][ T39] [ 438.323720][ T39] NMI backtrace for cpu 1 [ 438.323739][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 438.323769][ T39] Tainted: [L]=SOFTLOCKUP [ 438.323777][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 438.323792][ T39] Call Trace: [ 438.323800][ T39] [ 438.323809][ T39] dump_stack_lvl+0xe8/0x150 [ 438.323837][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 438.323860][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 438.323887][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 438.323914][ T39] sys_info+0x135/0x170 [ 438.323946][ T39] watchdog+0xfd3/0x1030 [ 438.323979][ T39] ? watchdog+0x1c9/0x1030 [ 438.324010][ T39] kthread+0x388/0x470 [ 438.324040][ T39] ? __pfx_watchdog+0x10/0x10 [ 438.324062][ T39] ? __pfx_kthread+0x10/0x10 [ 438.324092][ T39] ret_from_fork+0x514/0xb70 [ 438.324119][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 438.324144][ T39] ? __switch_to+0xc79/0x1410 [ 438.324178][ T39] ? __pfx_kthread+0x10/0x10 [ 438.324215][ T39] ret_from_fork_asm+0x1a/0x30 [ 438.324259][ T39] [ 438.324278][ T39] Sending NMI from CPU 1 to CPUs 0: [ 438.324309][ C0] NMI backtrace for cpu 0 [ 438.324326][ C0] CPU: 0 UID: 0 PID: 7589 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 438.324352][ C0] Tainted: [L]=SOFTLOCKUP [ 438.324359][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 438.324370][ C0] RIP: 0010:__asan_memset+0x26/0x50 [ 438.324393][ C0] Code: 90 90 90 90 f3 0f 1e fa 55 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 1e e5 ff ff 84 c0 74 11 <4c> 89 f7 89 ee 48 89 da 5b 41 5e 5d e9 b9 8a 12 09 31 c0 5b 41 5e [ 438.324409][ C0] RSP: 0018:ffffc900064df038 EFLAGS: 00000202 [ 438.324425][ C0] RAX: 1ffff92000c9be01 RBX: 0000000000000010 RCX: ffffffff817760b3 [ 438.324438][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc900064df178 [ 438.324450][ C0] RBP: 0000000000000000 R08: ffffc900064df187 R09: 1ffff92000c9be30 [ 438.324462][ C0] R10: dffffc0000000000 R11: fffff52000c9be31 R12: ffffc900064df540 [ 438.324475][ C0] R13: 1ffff92000c9be27 R14: ffffc900064df178 R15: ffffc900064df170 [ 438.324489][ C0] FS: 00007f7d0e283880(0000) GS:ffff888125a68000(0000) knlGS:0000000000000000 [ 438.324504][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.324516][ C0] CR2: 00007fc4c6c156b8 CR3: 0000000031c52000 CR4: 00000000003526f0 [ 438.324532][ C0] Call Trace: [ 438.324538][ C0] [ 438.324546][ C0] unwind_next_frame+0xf33/0x2550 [ 438.324572][ C0] ? unwind_next_frame+0xa6/0x2550 [ 438.324601][ C0] ? __kmalloc_noprof+0x3e7/0x7b0 [ 438.324628][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 438.324649][ C0] arch_stack_walk+0x11b/0x150 [ 438.324674][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 438.324698][ C0] stack_trace_save+0xa9/0x100 [ 438.324718][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 438.324736][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 438.324762][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 438.324786][ C0] kasan_save_track+0x3e/0x80 [ 438.324808][ C0] ? kasan_save_track+0x3e/0x80 [ 438.324829][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 438.324851][ C0] ? __kmalloc_noprof+0x3e7/0x7b0 [ 438.324905][ C0] __kasan_kmalloc+0x93/0xb0 [ 438.324930][ C0] __kmalloc_noprof+0x3e7/0x7b0 [ 438.324955][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 438.324978][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 438.325006][ C0] tomoyo_check_open_permission+0x229/0x470 [ 438.325034][ C0] ? tomoyo_check_open_permission+0x1d3/0x470 [ 438.325067][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 438.325096][ C0] ? __asan_memset+0x22/0x50 [ 438.325130][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 438.325152][ C0] ? tomoyo_file_open+0x166/0x220 [ 438.325175][ C0] security_file_open+0xa9/0x240 [ 438.325202][ C0] do_dentry_open+0x4c0/0x13e0 [ 438.325224][ C0] ? vfs_open+0x31/0x350 [ 438.325245][ C0] vfs_open+0x3b/0x350 [ 438.325262][ C0] ? path_openat+0x2e2b/0x38a0 [ 438.325289][ C0] path_openat+0x2e43/0x38a0 [ 438.325331][ C0] ? __pfx_path_openat+0x10/0x10 [ 438.325359][ C0] ? kasan_save_track+0x4f/0x80 [ 438.325380][ C0] ? kasan_save_track+0x3e/0x80 [ 438.325402][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 438.325424][ C0] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 438.325452][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 438.325475][ C0] do_file_open+0x23e/0x4a0 [ 438.325500][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 438.325526][ C0] ? __pfx_do_file_open+0x10/0x10 [ 438.325550][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 438.325574][ C0] ? __pfx_kfree_link+0x10/0x10 [ 438.325607][ C0] ? alloc_fd+0x64e/0x6c0 [ 438.325632][ C0] do_sys_openat2+0x113/0x200 [ 438.325651][ C0] ? __pfx_lo_ioctl+0x10/0x10 [ 438.325678][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 438.325697][ C0] ? blkdev_ioctl+0x5e6/0x750 [ 438.325716][ C0] ? __pfx_blkdev_ioctl+0x10/0x10 [ 438.325732][ C0] ? rcu_is_watching+0x15/0xb0 [ 438.325761][ C0] __x64_sys_openat+0x138/0x170 [ 438.325782][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.325801][ C0] do_syscall_64+0x15f/0xf80 [ 438.325826][ C0] ? clear_bhb_loop+0x40/0x90 [ 438.325848][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.325865][ C0] RIP: 0033:0x7f7d0e371407 [ 438.325881][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 438.325896][ C0] RSP: 002b:00007ffcd2d69e00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 438.325913][ C0] RAX: ffffffffffffffda RBX: 00007f7d0e283880 RCX: 00007f7d0e371407 [ 438.325926][ C0] RDX: 0000000000080000 RSI: 0000556bfaa15fa0 RDI: ffffffffffffff9c [ 438.325938][ C0] RBP: 0000556bfaa15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 438.325949][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 438.325960][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000009 [ 438.325979][ C0] [ 438.420565][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 438.420592][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 438.420622][ T39] Tainted: [L]=SOFTLOCKUP [ 438.420630][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 438.420644][ T39] Call Trace: [ 438.420653][ T39] [ 438.420661][ T39] vpanic+0x56c/0xa60 [ 438.420693][ T39] ? __pfx___schedule+0x10/0x10 [ 438.420726][ T39] ? __pfx_vpanic+0x10/0x10 [ 438.420761][ T39] panic+0xc5/0xd0 [ 438.420787][ T39] ? __pfx_panic+0x10/0x10 [ 438.420816][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 438.420853][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 438.420882][ T39] watchdog+0x102c/0x1030 [ 438.420915][ T39] ? watchdog+0x1c9/0x1030 [ 438.420945][ T39] kthread+0x388/0x470 [ 438.420974][ T39] ? __pfx_watchdog+0x10/0x10 [ 438.420996][ T39] ? __pfx_kthread+0x10/0x10 [ 438.421026][ T39] ret_from_fork+0x514/0xb70 [ 438.421054][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 438.421078][ T39] ? __switch_to+0xc79/0x1410 [ 438.421113][ T39] ? __pfx_kthread+0x10/0x10 [ 438.421142][ T39] ret_from_fork_asm+0x1a/0x30 [ 438.421184][ T39] [ 438.421791][ T39] Kernel Offset: disabled