last executing test programs: 12m30.100791627s ago: executing program 2 (id=316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040), 0x0, 0x0, 0x2) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000040)=""/170, &(0x7f0000000140)=0xaa) r2 = socket$igmp(0x2, 0x3, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x541482, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r3}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x8, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0xfffffffe], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x40, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x2d, &(0x7f0000000000)=0x92d2, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @private0, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000000706010800000000000000000a0001070500010007000000080006400000000c"], 0x24}, 0x1, 0x0, 0x0, 0x4c085}, 0x20000000) 12m29.854927292s ago: executing program 2 (id=317): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d", 0x15}], 0x1}}], 0x1, 0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r0, 0x47bc, 0x1, 0x49, 0x0, 0x0) 12m29.105018191s ago: executing program 2 (id=320): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), 0x4) 12m28.799762524s ago: executing program 2 (id=321): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) preadv(r1, 0x0, 0x0, 0x1ff, 0xb1) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x8b}, 0x15, 0x3, 'fo\x00', 0x1, 0x400000, 0x4}, 0x2c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 12m27.411939712s ago: executing program 2 (id=328): socket$caif_stream(0x25, 0x1, 0x4) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) fanotify_init(0x200, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) 12m25.855038811s ago: executing program 2 (id=330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x81, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x401, 0x0) capset(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmmsg$unix(r4, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000400)="199f43adfbb84d3e47f518b783fe03149c1cc110ba347cc1617de4d619c2ad66e3d423212af315e22f3ccec044377ac43da9e30c2963faafee06f022f1d344baa7f2695c15ce96d52a4a7f94b136b2036575242f06773ee22c0923de4dd831e893701cd808f76212e38ef27b53e9b9ba99da1b836e1ff7f9081a4194b16580ad0f697bdc0f05ec912c997506a59cc3680a03ad15aa5933b68d4cd631c1481aa063e98a0f859b4aae7de231ffc3ac687c", 0xb0}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r8}}}], 0x20, 0x4800}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="2c4636cff2a64ef77c9ac402b90de356c0b0c97de5a9a881caae5219a18fae2460fe6160d8f231891c5671415ca4b103beab92ffa4255d30507c3dbc88e502682379a0cb4b765ed8999fe9cc595f8fb7fb5bcdeec3e9022a7f44e8b366a2c92752b17d53ce27b1589cf2a6f541aac46a4728b4b16ee1111d", 0x78}], 0x1, 0x0, 0x0, 0x4880}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640), 0x0, &(0x7f0000000680)=[@rights={{0x2c, 0x1, 0x1, [r3, r1, r1, r6, r4, r0, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r5, r8}}}, @rights={{0x18, 0x1, 0x1, [r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, 0xee01}}}], 0xe0, 0x8000}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)="e6a554715245865874c4391e00c7dcd54e90378260de17f4a65284a251de0e3e2b157de5c93aa3082c03f5e1b3564052b07b4a72bd7dcfc4127cf8842cbd3338bf6fc301e04cf611b854514faa246537ad4d487b4ca2ad0a6b4f004056b3b41dc3c469ae4018aa4e0e06de19b5b8e4f8dfd2ca260287c4ace173b76d220ce75b943b55222afded67f1532ea8f747f6fa7430046f4cac1fa40131dd2e995bcaec3b3f2bc356a5d3e3e317c20d3383302cad1e83", 0xb3}], 0x1, &(0x7f0000000900), 0x0, 0xc014}}, {{&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000ac0)="97019edfb3f69ee99b9f37aceb74e048bf2aca041308b5dccca57f479e6f1c97518debb42eda35003e6df489ab31030e033e1d6dbae8ae1af576de3e5ce25e4078cd99830dbfa84f4f9acfc780a374cda3ad526126312f93fcdb967eb396371d9a1088dad01dcca6ff921fff7afc3c1ae5d4a1577bcfef0d189d50176fcdfe2000d9930158dd", 0x86}, {&(0x7f0000000b80)="5f6e88d3f668cc5bbcef17fbe7754514dc502a6b87a600644ca113153095fd6218fa3de69631c5c397d897df34b8befffc32205d8668c13c0ff6327759de330d52885d605c55e13fd52ad6d4db70ac3925641624eb0a7ec79ab35a7081af84fb1827e91228caa4c20c9af6127433f0cf0b7331b0bb75085a6287f2069f99ab05fd3a82c913a8c1458e13f834927e14a4cd85763d72eeb87f8ecac160a7213c357484ab6283c3d4762c", 0xa9}, {&(0x7f0000000c40)="017efb392ae597afc90799db4bd3d3344055de13d39690df19dd8cbad62c1d41bfdaf77a12ecdd16533820a8c947cea5ab040bfab800d9531418d163ff47e6750d597f8ca5e69151bf83948ea90ec05743acc55ca9d5d2784ee5f3c6525d365336eb8685bfdc53520e9971f95fb2d1ca5128c7f59026c3e8e9566b12e0452640d263cebdd2dbfc1d328c427e18e82742049af06c4d44ae6dff33732c8c0f36882b0dfcf6d2bb369e7807a4ef45b3448b8dc0688b0bf08a19acafb6603a51217d7c680b18366d49140f163196153b42ed5a6b2e64ff0fe37d5cda1a0a8b40b68b616a85e64428fdd96fe68ca45c", 0xed}, {&(0x7f0000000d40)="b8c2abc1c350ee768b641b511a3a2a003d23fe861e732af02e8c1a33cb7d6859fcba8aeabfa2f09075799e3d", 0x2c}, {&(0x7f0000000d80)="c375be0591cc8a7fd510a0758e59b6e014dfa87696b2bfd752f69bf84a72ce5bd75a87d1b17aff9f4970ac695e4eb376c0aa0d98ec802e92c255ce86d2ab17c8a8065da13b3ae732b5d68e5dc060d56af5fb863b2155865df6c7db3d1e4bc1d802fae425a28b0ed9591f07f07b9bbb15430c796260ddd155f9594c7117206f64f73212b28ebc65b47b6b20344cc08d6813d085b75b645b8f2c06456360df5daf2b00d2d444dc365b", 0xa8}, {&(0x7f0000000e80)="1403014e67511379cb24137353df46d5d9c96ead1b76a6186a2b97206d6ae51d172900bdb70f6a9577d76fa2885a2e502662cf3225fc9c64fcd025da75d9800a2cb50475aaacafc21e17ad078553bad34e27cec190dd8dec8a955df052ac067ed300c40866475c21c302cb4f54937ed1e503a152ea7392f34d431c29fd4a40af1a8715342e02f997bc46352562220c442295dbbaa1783ea547c3d118dd5ccaefa9d2a67f4c08fee47075d2cb", 0xac}], 0x6, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r1, r6, r2, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8}}}, @rights={{0x1c, 0x1, 0x1, [r3, r3, r3]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, r9}}}, @rights={{0x24, 0x1, 0x1, [r0, r6, r1, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x128, 0x8044}}], 0x5, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) capset(0x0, 0x0) ioctl$sock_bt_hci(r4, 0x800448d3, 0x0) r11 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r10, 0x4004af07, &(0x7f0000000240)=r11) ioctl$VHOST_SET_VRING_KICK(r10, 0x4008af20, &(0x7f0000000040)={0x1, r11}) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000380)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r10, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) syz_80211_inject_frame(0x0, 0x0, 0x1e) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)=@assoc_value={0x0, 0xfffffffc}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x400000009) close_range(r0, 0xffffffffffffffff, 0x0) 12m10.24283043s ago: executing program 32 (id=330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x81, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x401, 0x0) capset(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmmsg$unix(r4, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000400)="199f43adfbb84d3e47f518b783fe03149c1cc110ba347cc1617de4d619c2ad66e3d423212af315e22f3ccec044377ac43da9e30c2963faafee06f022f1d344baa7f2695c15ce96d52a4a7f94b136b2036575242f06773ee22c0923de4dd831e893701cd808f76212e38ef27b53e9b9ba99da1b836e1ff7f9081a4194b16580ad0f697bdc0f05ec912c997506a59cc3680a03ad15aa5933b68d4cd631c1481aa063e98a0f859b4aae7de231ffc3ac687c", 0xb0}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r8}}}], 0x20, 0x4800}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="2c4636cff2a64ef77c9ac402b90de356c0b0c97de5a9a881caae5219a18fae2460fe6160d8f231891c5671415ca4b103beab92ffa4255d30507c3dbc88e502682379a0cb4b765ed8999fe9cc595f8fb7fb5bcdeec3e9022a7f44e8b366a2c92752b17d53ce27b1589cf2a6f541aac46a4728b4b16ee1111d", 0x78}], 0x1, 0x0, 0x0, 0x4880}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640), 0x0, &(0x7f0000000680)=[@rights={{0x2c, 0x1, 0x1, [r3, r1, r1, r6, r4, r0, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r5, r8}}}, @rights={{0x18, 0x1, 0x1, [r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, 0xee01}}}], 0xe0, 0x8000}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)="e6a554715245865874c4391e00c7dcd54e90378260de17f4a65284a251de0e3e2b157de5c93aa3082c03f5e1b3564052b07b4a72bd7dcfc4127cf8842cbd3338bf6fc301e04cf611b854514faa246537ad4d487b4ca2ad0a6b4f004056b3b41dc3c469ae4018aa4e0e06de19b5b8e4f8dfd2ca260287c4ace173b76d220ce75b943b55222afded67f1532ea8f747f6fa7430046f4cac1fa40131dd2e995bcaec3b3f2bc356a5d3e3e317c20d3383302cad1e83", 0xb3}], 0x1, &(0x7f0000000900), 0x0, 0xc014}}, {{&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000ac0)="97019edfb3f69ee99b9f37aceb74e048bf2aca041308b5dccca57f479e6f1c97518debb42eda35003e6df489ab31030e033e1d6dbae8ae1af576de3e5ce25e4078cd99830dbfa84f4f9acfc780a374cda3ad526126312f93fcdb967eb396371d9a1088dad01dcca6ff921fff7afc3c1ae5d4a1577bcfef0d189d50176fcdfe2000d9930158dd", 0x86}, {&(0x7f0000000b80)="5f6e88d3f668cc5bbcef17fbe7754514dc502a6b87a600644ca113153095fd6218fa3de69631c5c397d897df34b8befffc32205d8668c13c0ff6327759de330d52885d605c55e13fd52ad6d4db70ac3925641624eb0a7ec79ab35a7081af84fb1827e91228caa4c20c9af6127433f0cf0b7331b0bb75085a6287f2069f99ab05fd3a82c913a8c1458e13f834927e14a4cd85763d72eeb87f8ecac160a7213c357484ab6283c3d4762c", 0xa9}, {&(0x7f0000000c40)="017efb392ae597afc90799db4bd3d3344055de13d39690df19dd8cbad62c1d41bfdaf77a12ecdd16533820a8c947cea5ab040bfab800d9531418d163ff47e6750d597f8ca5e69151bf83948ea90ec05743acc55ca9d5d2784ee5f3c6525d365336eb8685bfdc53520e9971f95fb2d1ca5128c7f59026c3e8e9566b12e0452640d263cebdd2dbfc1d328c427e18e82742049af06c4d44ae6dff33732c8c0f36882b0dfcf6d2bb369e7807a4ef45b3448b8dc0688b0bf08a19acafb6603a51217d7c680b18366d49140f163196153b42ed5a6b2e64ff0fe37d5cda1a0a8b40b68b616a85e64428fdd96fe68ca45c", 0xed}, {&(0x7f0000000d40)="b8c2abc1c350ee768b641b511a3a2a003d23fe861e732af02e8c1a33cb7d6859fcba8aeabfa2f09075799e3d", 0x2c}, {&(0x7f0000000d80)="c375be0591cc8a7fd510a0758e59b6e014dfa87696b2bfd752f69bf84a72ce5bd75a87d1b17aff9f4970ac695e4eb376c0aa0d98ec802e92c255ce86d2ab17c8a8065da13b3ae732b5d68e5dc060d56af5fb863b2155865df6c7db3d1e4bc1d802fae425a28b0ed9591f07f07b9bbb15430c796260ddd155f9594c7117206f64f73212b28ebc65b47b6b20344cc08d6813d085b75b645b8f2c06456360df5daf2b00d2d444dc365b", 0xa8}, {&(0x7f0000000e80)="1403014e67511379cb24137353df46d5d9c96ead1b76a6186a2b97206d6ae51d172900bdb70f6a9577d76fa2885a2e502662cf3225fc9c64fcd025da75d9800a2cb50475aaacafc21e17ad078553bad34e27cec190dd8dec8a955df052ac067ed300c40866475c21c302cb4f54937ed1e503a152ea7392f34d431c29fd4a40af1a8715342e02f997bc46352562220c442295dbbaa1783ea547c3d118dd5ccaefa9d2a67f4c08fee47075d2cb", 0xac}], 0x6, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r1, r6, r2, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8}}}, @rights={{0x1c, 0x1, 0x1, [r3, r3, r3]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, r9}}}, @rights={{0x24, 0x1, 0x1, [r0, r6, r1, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x128, 0x8044}}], 0x5, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) capset(0x0, 0x0) ioctl$sock_bt_hci(r4, 0x800448d3, 0x0) r11 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r10, 0x4004af07, &(0x7f0000000240)=r11) ioctl$VHOST_SET_VRING_KICK(r10, 0x4008af20, &(0x7f0000000040)={0x1, r11}) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000380)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r10, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) syz_80211_inject_frame(0x0, 0x0, 0x1e) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)=@assoc_value={0x0, 0xfffffffc}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x400000009) close_range(r0, 0xffffffffffffffff, 0x0) 8m19.079938876s ago: executing program 0 (id=1556): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee5", 0x44}], 0x1}}], 0x1, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x90, &(0x7f0000000100)=""/144}, 0x94) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e62, 0x6, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x24}, 0x1c) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ptrace(0x10, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100157ca15708460d81002b0f010203010902120001003560090904190052"], 0x0) 8m15.73787322s ago: executing program 0 (id=1571): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) 8m15.579883616s ago: executing program 0 (id=1574): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) close(0x4) r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) r1 = syz_io_uring_setup(0x8d2, &(0x7f0000000700)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r4 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='scalable', 0x8) sendmsg$inet(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb2504"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5e}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x10080}, 0x4004000) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 8m15.03756722s ago: executing program 0 (id=1578): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x8) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)={0x54, r1, 0x1, 0xfffffffd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x0, 0x2, 0x6, 0xfffa}, 0x3d, [0x8000, 0x1, 0xf, 0x5, 0x80, 0x2, 0x3, 0x7f, 0x17f, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x800, 0x2003c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x0, 0x3, 0xc, 0x4, 0x80000000, 0x8bd, 0x3, 0xe, 0x0, 0x80008071, 0x8, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc5a, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000007, 0xaa, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6ca, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0xcc, 0xe, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x2, 0x440, 0x401, 0x6, 0x0, 0xffffffff, 0x5, 0x1000005, 0x0, 0xd, 0x4e4, 0x2, 0x4, 0xb, 0x4, 0x9, 0x9, 0x20000009, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x7e78, 0x2, 0x4, 0x9, 0x200003, 0x4, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x1000000b, 0x4, 0x4, 0x9, 0x8, 0x1ef, 0x5, 0x20008, 0x8e, 0x3, 0x303c, 0x1, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x81, 0x5, 0x9, 0xac8, 0xbf, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x5, 0x80a2ed, 0x4, 0x25], [0x8, 0x800bb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x410000, 0x80000001, 0x7fff, 0xffff, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x0, 0x7e, 0x8, 0x35, 0x7, 0xab, 0x8, 0x6, 0x8000, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x101, 0xffff3441, 0xfff]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fcntl$lock(r6, 0x0, &(0x7f00000000c0)={0x2, 0x2, 0xfffffffffffffffd, 0xf}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x3) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000009e02"]) msgget(0x0, 0x83) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0xa4, 0x4) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x24000885) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8m14.515251705s ago: executing program 0 (id=1582): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="0500000004"], 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f0000000040)=0x3, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket(0x40000000015, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 8m11.279724855s ago: executing program 0 (id=1606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000), 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdir(0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0xfffc, 0x103, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}, 0x1000, {[0x9, 0xdaa, 0x7fff, 0x31, 0x5, 0x1, 0x6d2e, 0xc33]}}, 0x5c) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 8m10.778417184s ago: executing program 33 (id=1606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000), 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdir(0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0xfffc, 0x103, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}, 0x1000, {[0x9, 0xdaa, 0x7fff, 0x31, 0x5, 0x1, 0x6d2e, 0xc33]}}, 0x5c) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 56.495401458s ago: executing program 4 (id=3118): syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x10000001, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) write$binfmt_format(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)=""/194, 0xc2}], 0x1}, 0x6}], 0x1, 0x40000001, 0x0) r4 = syz_io_uring_setup(0x10e, &(0x7f0000001cc0)={0x0, 0xf07d, 0x400, 0x40000, 0x101}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x3, 0x8, &(0x7f00000002c0), 0x0, 0x1d}) io_uring_enter(r4, 0x8aa, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x10002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='b *:*'], 0x9) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4000010) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) fsopen(0x0, 0x0) 55.819693015s ago: executing program 4 (id=3122): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) listen(r0, 0xfffffffe) accept4$unix(r0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) write(r1, &(0x7f0000000100)="1800000016005f0214fffffffffffff80700400001000000", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x72, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2e, @rand_addr=0x64010102, 0x4e23, 0x2, 'sed\x00', 0x2e, 0x8, 0x2c}, {@remote, 0x4e22, 0x1, 0x7, 0x7fffffff, 0x4}}, 0x44) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000580)={0x601, 0x1, &(0x7f0000000180)=[r9], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r10, r10, r10], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 53.71395814s ago: executing program 4 (id=3129): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000140)={0x0, 0x30, 0xa7, {0xa7, 0x5, "b289dd76c1b60df569b9efe10a540d3fdaa4d852acce21b37cf6f0db792fda457998819104183ebd36ef046a4aec6fbbe7ff0847f1099b30f12600fccefdc9aa60b109005eff8cbbe6d2a73dcbc34d37bb3b7ed14466350189e1f0c5c1388ce7a4ed8c9c1eb32dc6ae422a767c78d983c53b40e298e1371ff973b6bda169d0d5cbe977f5fde682bcdd0ce74bd528fdd5bfaed5b2012d315cc6e4a6647be54036ee64379d2d"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000300)={0x0, 0x31, 0xe2, "cfdfaced345d5874439cdbccc5f567f4d0dbf48d277ec207920c2cb1f8fe73bf01627e5dfa150d0a8c8dcb8fb892f009bbd572b3be37c2e7a53f13fe5cfd38cd82aa43075b7221a9414eadcf59c56294e2d492f161c00910bb38863ea8e8a7090437ff9a672aa7c5fda9aeba7665a16d854e1a612a127dfdaed99c6f0e69cb397e55f379596448120a945c04a91a0d524f539120dba53f4079a2d5a43658dbefb5a999b535ff3d0c89907747bce73ba593c47b028d9df8bf412bf85118bf5ecc35c6deebcf4779c081f4ef6e778556b00a6fa0384fd8f86257fc19b117b96c68c24d"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x81, 0x3, "f201fd"}, &(0x7f00000004c0)={0x20, 0x82, 0x3, "0a8c2b"}, &(0x7f0000000500)={0x20, 0x83, 0x3, "8859ef"}, &(0x7f0000000540)={0x20, 0x84, 0x3, "e055cc"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "89233c"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000840)={0x14080000, &(0x7f0000000640)=0xffffffffffffffff, &(0x7f0000000680), &(0x7f00000006c0), {0x3a}, &(0x7f0000000700)=""/18, 0x12, &(0x7f0000000740)=""/187, &(0x7f0000000800)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) close_range(0xffffffffffffffff, r1, 0x0) 49.645504834s ago: executing program 4 (id=3153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 48.214564089s ago: executing program 4 (id=3158): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x5}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x9, 0x1000000200000009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 45.494789475s ago: executing program 4 (id=3163): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000140)={0x0, 0x30, 0xa7, {0xa7, 0x5, "b289dd76c1b60df569b9efe10a540d3fdaa4d852acce21b37cf6f0db792fda457998819104183ebd36ef046a4aec6fbbe7ff0847f1099b30f12600fccefdc9aa60b109005eff8cbbe6d2a73dcbc34d37bb3b7ed14466350189e1f0c5c1388ce7a4ed8c9c1eb32dc6ae422a767c78d983c53b40e298e1371ff973b6bda169d0d5cbe977f5fde682bcdd0ce74bd528fdd5bfaed5b2012d315cc6e4a6647be54036ee64379d2d"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000300)={0x0, 0x31, 0xe2, "cfdfaced345d5874439cdbccc5f567f4d0dbf48d277ec207920c2cb1f8fe73bf01627e5dfa150d0a8c8dcb8fb892f009bbd572b3be37c2e7a53f13fe5cfd38cd82aa43075b7221a9414eadcf59c56294e2d492f161c00910bb38863ea8e8a7090437ff9a672aa7c5fda9aeba7665a16d854e1a612a127dfdaed99c6f0e69cb397e55f379596448120a945c04a91a0d524f539120dba53f4079a2d5a43658dbefb5a999b535ff3d0c89907747bce73ba593c47b028d9df8bf412bf85118bf5ecc35c6deebcf4779c081f4ef6e778556b00a6fa0384fd8f86257fc19b117b96c68c24d"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x81, 0x3, "f201fd"}, &(0x7f00000004c0)={0x20, 0x82, 0x3, "0a8c2b"}, &(0x7f0000000500)={0x20, 0x83, 0x3, "8859ef"}, &(0x7f0000000540)={0x20, 0x84, 0x3, "e055cc"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "89233c"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000840)={0x14080000, &(0x7f0000000640)=0xffffffffffffffff, &(0x7f0000000680), &(0x7f00000006c0), {0x3a}, &(0x7f0000000700)=""/18, 0x12, &(0x7f0000000740)=""/187, &(0x7f0000000800)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) close_range(0xffffffffffffffff, r1, 0x0) 16.495928397s ago: executing program 6 (id=3287): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fb00000000fb"], 0xc34200) 16.275472476s ago: executing program 6 (id=3289): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f00000004c0)=[{{}, {0x80000000, 0x0}}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) unshare(0x22020400) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r7, 0x401054d5, &(0x7f0000000380)=ANY=[]) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000001040)=ANY=[@ANYRESHEX=r2]) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') write(r11, &(0x7f0000000000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d63", 0x58) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x1, 0xa1, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x8, 0x8, 0x3, 0x5}}) openat$dsp(0xffffffffffffff9c, &(0x7f0000001000), 0x500, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xffff, 0xf}, {0xffe0, 0x12}, {0xa, 0xffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008041}, 0x8000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000001340)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f00000010c0)={0x238, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x551}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$}@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/media#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/dsp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#{,\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x8000}, 0x4004090) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x33}}}}}, 0x28}}, 0x20040040) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 8.029726924s ago: executing program 1 (id=3300): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) chown(&(0x7f0000000180)='./file1\x00', 0x0, 0xffffffffffffffff) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0xc048aeca, &(0x7f0000000080)) 6.263980124s ago: executing program 6 (id=3304): r0 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = add_key$fscrypt_v1(0x0, &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "9ca226c9feba6997f180ce817932fa021170f02a10fa6e657dfff1793d69f8875616c7091a45d69ed537865040bc7bb5c7c68f8115ac6808db18b137c6d49acc", 0x16}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1, @in=@multicast2}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) getgid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000240)=0x9, 0x4) 5.954947831s ago: executing program 1 (id=3306): r0 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000003c0)={0x16, 0x1, 0x2, "00000040800000f7c28dca4c210000000000000000ff0700", 0x50424752}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_fuse_handle_req(r6, &(0x7f00000020c0)="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", 0x2000, &(0x7f00000006c0)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42, 0x0, 0xfffc, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000dc0)={&(0x7f00000002c0)={0xff0c, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0xb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="02"], 0x4, 0x1) 5.354606092s ago: executing program 6 (id=3308): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fb00000000fb"], 0xc34200) 3.880097069s ago: executing program 1 (id=3309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x2, 0x80805, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x388) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e24, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) syz_io_uring_setup(0x1727, &(0x7f00000002c0)={0x0, 0x7f9d, 0x4000, 0x1, 0xba}, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25030117800c00160006ac0f00000000001400010000000000000000000000ffff0000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0dd8553f985bb6bead734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be0400eb0000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) writev(r5, &(0x7f0000001640)=[{&(0x7f0000001080)="e12c20255d232d65c7973a4775d48e65e5fd177b3b53a4a382d70692476c6ac0ab7b13b42bda89d9c50f4d89a57da13dbd80a1da35656ef5111f2b93b5a3c47ea84dd0243d9c22c674bf88f80e7bdbe5574c3304107e7aa0f5960426d3294950ea3f4dfa94e76c60e1", 0x69}, {&(0x7f0000001100)="1ed510d111e636511e361bbc26131cc057c20143a7e7957c3ff845e9bada7082e4a54221d1a7171c273552d3de1d0b2e1a3ce9333964b08227b3944d22388272c7f4f43cc85810f4db86abcd82a835fb96e34eca383f8ebcf6df8fb310843474663daec934f421272a30a856dc9298ee6da4cc9dd6c9007c9a8b2d", 0x7b}, {&(0x7f0000001180)="efa68c98e7ed0c75342494564e5edc263faa5be65d94f879046219d8e983ef3ec0c4f65000211db849bf8c43bcb9ce7d9584fd4955ec1605c7b3317021c484ffc68d20b2ec7e604fa3bf76253bdaf9cba663e37a959b2aa102260f2a73fc289a0c8c4255f01b3953f62c", 0x6a}, {&(0x7f0000001200)="7d26c5a78abb9cbc885564efec735954dd4d9abaa637fe944eb8ca07507364ab8dccb9988347a65ca68ef8404f1fce130e92c53bbae42754d42e4e1409e3a6b7dd3deb5f924e6363438782cf4677f0ed85975906b9fa00dfc1adcf5b93cde3d3f6f39fa0397a628fbaad9f6c416f0e0c1162f2a689e51b98a1c24303c5d23941f14c646cdf8fc040843c13c3580d5a4ca7378b347dae5909fb99ca13dc7ef77793cd829f7d2893f0a9f682e69a204c3febc3de255142", 0xb6}, {&(0x7f00000012c0)="d073022d51f559549d31e4f74b6e46a652a427b4dec024d853ee6b0894ce694509f3c1febc8fbe3b4fa5426473b4b004fe8390b6456ea400f793f318ec15bd64957b82082fa043367adca9021ebcbfd2475a795350b04d7e14610c1c5e4901a1866ddf2a3f17fcd6b5542c0213a2bf3fcacc7e332bfd3e709c19423d01e8e31a2630d375b58dc3242dbe58f15da9a6fd22fe7252a6056d2c9cc6e46d0d2948bb90ba86e0c4f190e21c9b7fdae34451ca01fbc9ef7b3a43b45fb91bbf0f8a33a0a0e4f18a778acb33257eb2fd4ce65e408957bf42bd1722fbcbbde65184", 0xdd}, {&(0x7f00000013c0)="2b5330ea8e602e2ac442ba4fba978c42604a", 0x12}, {&(0x7f0000001400)="13459acc4ff567721dcfb8010776c220cc19c294f8dabc34903d5f1d5e30f90ce0a969d9d1a64b34fa387a9b74cb51e48717016becddd8ac606b400e0a705b89ea8aaea63f4bcefd5aa1bc7a32a7240d94cc8026373e4efe4aa9b5dd99dd9be1192433753ba19f531fdddc8a911905970c6a1cfba9e60a66b43517a74e21109b60dc81d67be24db5ff201f8e6e8bf5", 0x8f}, {&(0x7f00000014c0)="373c437c25b896840dbb2957e29f288aebbe3a4b9b464ec5df51192bf53a5c8394f143509f0acab29e1f80a6f93918cfdd7cd642b7d877920994094c3d5326c70f6ef73d63656c30c199e03310598b995df860399725a1bb8c8e9d60a3e975f560e72b4f35b4e8156994fa99a7da7be6c584cbfcb5509a593a12bbdd1b1e620938396d896fc902d87d586d48e5d02cde7cb43a82c0d7cd32ffa2202402324ed1f6ce46b1360b757e748e5eccd9ab312e4e8ca0698b32b55c050a22e6ef53017e573045bd7461ed03973f61ccc8704c7f905f4c8981c126", 0xd7}, {&(0x7f00000015c0)}, {&(0x7f0000001600)="913a6ec2645932ec0d99c63080b145f8c6bce5bd0a67b27ad9cff93f0b684cdd9f5a9c2c2718df550165041fa31f25", 0x2f}], 0xa) socket$nl_route(0x10, 0x3, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x1, 0x1012) 3.772988771s ago: executing program 3 (id=3310): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e032", 0x3a}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 3.631791552s ago: executing program 6 (id=3312): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e12"], 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x8000000000000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0x0, 0xb, "88bd91aa28528000000000007500000400"}) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x200}}, './file0\x00'}) r6 = signalfd(r4, &(0x7f0000000280)={[0x4]}, 0x8) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f00000003c0)) write$cgroup_int(r5, &(0x7f0000000240)=0x6, 0x12) socket(0x10, 0x3, 0xa) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0xcb, 0x4000000000e, 0x4, 0x4, 0x5, 0x1002, 0x3, 0xfffffffffffffffe, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0x0, 0x5, 0x1, 0xbde], 0x0, 0x67a64fa265d49713}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=r6, @ANYRESDEC=r7, @ANYBLOB="8ddd08de3f92ae3d0618943aafce766ef65d9dcc3d698aa13915acf2194a200241f7b9f3283628fb28451e24cd8af7c971092a11157f2dcaa46dec2a609cef6e6d3c7ad23c58cec4c66a15c27f5cecb6a2fe6f001f33021ae9ea46a7028f4af7b9e6f95b5b68327e9acfa24e54baa1523f9659cc8b016d4b1ffe5ed0010f4b4dbeea4cf6402d4a1b97a600a8b76aba954cf16cc99f9ea5d1cf97787660069a8b2701c81e3b26df7540a915da34d526927646c01288d7f060c48bd12bacd93c05846cf687f36ff7dd49eb9f2679a66e03e0f0d6e6735c18e4da81"], 0x6c}}, 0x40) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f00000002c0)="36d8b300000000660f38f6f966baa00066ed3626420f0964f20f073e460fc79b000000000f20d835080000000f22d866ba2100b8cf680000ef66baf80cb860b9bc8def66bafc0c66b8fa0066ef66b82a018ee0", 0x53}], 0x1, 0xa, &(0x7f0000000380)=[@vmwrite={0x8, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff1}], 0x1) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=""/168, &(0x7f00000004c0)=""/115, &(0x7f00000001c0)=""/36, 0x5000}) 2.454571376s ago: executing program 1 (id=3314): creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000380), &(0x7f0000000640)=ANY=[@ANYBLOB="04"], 0x2, 0x0) (fail_nth: 3) 2.452471463s ago: executing program 3 (id=3315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f2c00128020000180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0xb8}}, 0x20050800) (fail_nth: 4) 2.235625081s ago: executing program 1 (id=3317): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) listen(r0, 0xfffffffe) accept4$unix(r0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) write(r1, &(0x7f0000000100)="1800000016005f0214fffffffffffff80700400001000000", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2e, @rand_addr=0x64010102, 0x4e23, 0x2, 'sed\x00', 0x2e, 0x8, 0x2c}, {@remote, 0x4e22, 0x1, 0x7, 0x7fffffff, 0x4}}, 0x44) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r10}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000580)={0x601, 0x1, &(0x7f0000000180)=[r10], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r11, r11, r11], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.163039798s ago: executing program 3 (id=3318): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setuid(0xee00) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x2000400, 0x3f00}) munlock(&(0x7f00007ff000/0x800000)=nil, 0x800000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x80, 0xa, 0x800, 0x5b, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, 0x10, 0x8, 0x68, 0x6}}) 1.739725495s ago: executing program 3 (id=3320): r0 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x6, 0xe7, &(0x7f0000000140)=ANY=[@ANYBLOB="12013d7f000000106b1d01014000010203010902d50003f504d0050904000000010100000a24010700080201020624040605910b240602050206000200ff0b240704040004411ed6fb0724070402006d0a24080202000b41de1709240406321c2f3a3b09040100000102000009040101010102000009240201a6027f078610240201fd040e049cc87f5f988c0d87112402010504e6000618174d7a8f5e85ea072401090a0110072401000b03000824020109030180090501090004050f000725010308020009040200000102000009040201010102000009058209200002060007250180a70900"], &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x9, 0x5, 0xb9, 0xff, 0x6}, 0x3a, &(0x7f0000000880)=ANY=[@ANYBLOB="050f3a000503100b141004072ae8cdefb6da8a1592046ae8e27939e10a10030202000e1402000a1003021d00050296000a10030001000206f9ff7d6ac1b3b21043fdf855c19accaef0fe82ba87276b4187def997dd4a89e0a4a63b13788d12e238b92249c6f4708ed2b50b88168fa283a824"], 0x9, [{0x45, &(0x7f0000000280)=@string={0x45, 0x3, "8e35533686e8754b1686007e80442e2c646486b4cc6a3e8effcf8979f5f764f265ac0c53b84a8ebfe74fed6a41d8d2086661f108396215db63c716117d5a49883a82cb"}}, {0xfc, &(0x7f0000000300)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2001}}, {0x9e, &(0x7f0000000480)=@string={0x9e, 0x3, "6ddc509580409e18a9b16a5b28767fda6cdaa434dc00d4d1eabe09fee9c37be96549c1532c8515ec5c4fc6ad1a9f8537015e5761fec58e3e5eb54c113601826c38bcad0a6a922fe0c866a6c75301938fded2d2ff61a361f4bf8246b4bde12ad27cee8b30760eab6e1a214cfaf39856674336b5f3ad26d52ca8f62d277a0a4e98773a429d2b611c8f6baea40d1fa574a4b7913bc74b921babdf7f453d"}}, {0xd1, &(0x7f0000000600)=@string={0xd1, 0x3, "2c05b6df8d81189a2a717f4d2da5ab83be25f5cb33185bde2d7cfd48fb20098d8135c2749f94381cb98141c669afe84779c13c0204216d380efe982134fe88b5bf321065a3eb691513e90e337e638177acee1b818acf572882bafcfd826efa6a8519d091ee5a6acbb7f93d41547add62846250130184cc440d15f00ff4e0bd696caa2eadd2f838c4506b1651a20e09a84d99aebe6e5de7f5c2b1b7b554019a1365266e727c1fd7c7993718155354d7627ac3bd5a3c18e86253c88802e01a4cc70daade25c6f28b7fe1bae2c02a1243"}}, {0x63, &(0x7f0000000540)=@string={0x63, 0x3, "5c6aa4aae1b715865014314a21a95e3c34ef473f3320ecb535d1cceaed0cacae702964c1e49b7788f3ca7e5a65b88895179c9b8ac6c48e3d02055d3ffbde9aa845fab4394ce064f5c0b94f8edf19c8a48d552afc51a2327227ddb51ebbfb384935"}}, {0x74, &(0x7f0000000700)=@string={0x74, 0x3, "d4e22cf658571f0e79cc98509c488dbad0c7ab2cd2a423af65727bab17bb9a1ba73836e0f089e865594e051802fb63748e658fcdff521066c681354f188c8459ba899332f0cef1bb27d22cc8cd473578928f123bd95a7e5617242c809fc7d8c054534f522935851a7bbee3f8b54ee8c774a2"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x449}}]}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x100, 0x1000}, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000940)={0x1000000}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000070000000c0016000000000200000000140008"], 0x34}}, 0x40880) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x400, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x40010) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x2e}], 0x1}, 0x40000) ppoll(&(0x7f00000005c0)=[{r0, 0x2743}], 0x1, 0x0, 0x0, 0x0) 1.664579878s ago: executing program 5 (id=3321): r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) (fail_nth: 2) 1.331441992s ago: executing program 5 (id=3322): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0xa3, 0xd, 0x4, 0xfe, 0xe0, 0xfeff, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) 1.183779839s ago: executing program 6 (id=3323): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @loopback, 0xcd89}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000380)=';', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x75f3}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="e5", 0x1}], 0x1, 0xfffffffffffffffd}}], 0x2, 0x4004851) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00"/14], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_usb_connect(0x2, 0x5b2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000085b6d40351210002c2c010203010902a005020400508009043f0c01cb06de00090461010c8a000000000000"], 0x0) r5 = dup2(r2, r1) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000240), 0x4) prctl$PR_SET_TSC(0x1a, 0x1) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x400000000000121, 0x200000d1) sendmmsg$inet(r2, 0x0, 0x0, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4008af14, &(0x7f0000000100)={0x3, 0xce2}) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @local, 0x2}, 0x1c) r7 = socket(0xa, 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r9, 0x0, 0x7ffffffe}}, 0x20) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) r10 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 1.17367846s ago: executing program 5 (id=3324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 1.053601646s ago: executing program 1 (id=3325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 776.924114ms ago: executing program 5 (id=3326): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff28, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b61ba1f848430000005e140602000000000e000a00100000000280000000000000", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c000080280001"], 0xec}}, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="00d8d3a7ef623b719caf897f0f94d8db776b8b7b16df960efa1e138f8f90f7a5d49660ca0fa401", 0x27) (async) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$inet6(r4, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000d40)="04", 0x1}, {&(0x7f0000000dc0)="7f", 0x1}, {&(0x7f0000000e00)='X', 0x1}], 0x3}}], 0x1, 0x804) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xc000) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r9 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x34}}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) 351.776135ms ago: executing program 3 (id=3327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000030301"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x8008800) (fail_nth: 2) 335.509136ms ago: executing program 5 (id=3328): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) writev(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 107.447689ms ago: executing program 3 (id=3329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00000000000000000000000000001800028014000180080001803e0000000800010000000000040003"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000a40), 0x1, 0x0, &(0x7f0000000900)='r'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1440}], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000780)='sys_exit\x00', r5}, 0x18) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r6, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70600000000000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002d40)=@newchain={0x470, 0x64, 0x2, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x1}, {}, {0x16, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x444, 0x2, [@TCA_FW_ACT={0x41c, 0x4, [@m_sample={0x70, 0x1d, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9aa3}]}, {0x3a, 0x6, "62f02d0dc19ac1cdb69ba3eb649092cf7f601e8d811d21c42224cbe117eb2914a85e6f5b50f8673f535f520267b6f27d87f024808716"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xe0, 0x5, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x10000}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xab0}, @TCA_CTINFO_ACT={0x18, 0x3, {0x40003, 0x5, 0x4, 0x1, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0x81, 0x6, "607230578bfe13cca35be68afc34497bc514b9cf17bc54dc974e30173b6533e62710e164943d294709bed36c793ecedeb52e00b9ca3d480379209e121c3d9296aacd02690ab7dcab0639102be2f9a99456ffa8dba00fc25caabc7b3a81b12164cd7bc07a6f402130967b6e9ff2625ae9d0c9d9ed4924760c868b0dbcbd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0xb4, 0x8, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x15b4, 0x5}}]}, {0x7b, 0x6, "770dd2a309ef4c791d4ba6727a263765befaa67964787b3467d42e94f7b092208895f675f7c484f7d248948f1b7b8d158356220776201358f0156fed4a3e1344fdbca1bedf423eb9e4db6d0387862d79d0fc848cb8576e38e8713368efce00b1e3c69df759b90581bef1621d654f383d08981dcc0c7652"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x180, 0x12, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x10, 0x1, 0x5, 0x40}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x0, 0x2, 0xffffffff, 0x5}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x10000000, 0x51, 0x5}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x70, 0x6, 0x4, 0x1}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff3, 0x6, 0x20000000, 0x800, 0xe}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x0, 0x1, 0xc06d, 0x83eb}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xfff, 0x4, 0xfffffff9, 0x8}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x401, 0xffffffffffffffff, 0x2, 0x6}, 0x69}}]}, {0x73, 0x6, "90b99d7e838dff3b7c932f40afca3f0564e80b24a38a5f8ebaff378fbe03ae5fc0a7a0c0a546c4b25ae04d616da628830575e0971d47e6360eb5ebae7e6c5a35e6dadd80960b96d948d0cc3a7b536378860ff9db7d06c27fdefa9b01d63ab97923cf6fb2053c435cc10ac0bc421356"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x94, 0xb, 0x0, 0x0, {{0xffffff3f}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3ff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x84}]}, {0x46, 0x6, "2b1cdb3023f4ecd1b3f30710bb8fe154c4a00005fde7ae9d988f3b7497531c0ac3a3acff988c49dfaf1f81ebec799fd6a7d110e1c83ce9d8f12a6bd29cf650e23788"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x200}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_INDEV={0x14, 0x3, 'ip6_vti0\x00'}]}}]}, 0x470}}, 0x0) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 5 (id=3330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xb, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x20000) kernel console output (not intermixed with test programs): 9][T14533] ksys_write+0x14b/0x260 [ 793.893567][T14533] ? __pfx_ksys_write+0x10/0x10 [ 793.893595][T14533] ? do_syscall_64+0xbe/0xfa0 [ 793.893624][T14533] do_syscall_64+0xfa/0xfa0 [ 793.893646][T14533] ? lockdep_hardirqs_on+0x9c/0x150 [ 793.893670][T14533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.893690][T14533] ? clear_bhb_loop+0x60/0xb0 [ 793.893714][T14533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.893734][T14533] RIP: 0033:0x7f03ec48da7f [ 793.893751][T14533] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 793.893768][T14533] RSP: 002b:00007f03ea6ee000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 793.893788][T14533] RAX: ffffffffffffffda RBX: 00007f03ec6e5fa0 RCX: 00007f03ec48da7f [ 793.893803][T14533] RDX: 000000000000006e RSI: 00002000000007c0 RDI: 00000000000000c8 [ 793.893816][T14533] RBP: 00007f03ea6ee090 R08: 0000000000000000 R09: 0000000000000000 [ 793.893829][T14533] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 793.893840][T14533] R13: 00007f03ec6e6038 R14: 00007f03ec6e5fa0 R15: 00007ffcf2a67408 [ 793.893879][T14533] [ 793.945875][ T44] usb 4-1: USB disconnect, device number 50 [ 795.751703][T14557] ALSA: seq fatal error: cannot create timer (-22) [ 795.762238][T14557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2800'. [ 796.014558][ T5820] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 796.395489][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.458929][T14569] input: syz1 as /devices/virtual/input/input35 [ 796.467806][ T5820] usb 5-1: Using ep0 maxpacket: 16 [ 796.592483][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.624018][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.748933][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.891155][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.915646][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.915681][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.915728][ T5820] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 796.915841][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.931603][ T5820] usb 5-1: config 0 descriptor?? [ 797.357910][ T5820] mcp2200 0003:04D8:00DF.0004: unknown main item tag 0x2 [ 797.357950][ T5820] mcp2200 0003:04D8:00DF.0004: item fetching failed at offset 4/5 [ 797.358817][ T5820] mcp2200 0003:04D8:00DF.0004: can't parse reports [ 797.358932][ T5820] mcp2200 0003:04D8:00DF.0004: probe with driver mcp2200 failed with error -22 [ 797.544071][ T10] usb 5-1: USB disconnect, device number 55 [ 798.590294][T14605] Malformed UNC in devname [ 798.590294][T14605] [ 798.590577][T14605] CIFS: VFS: Malformed UNC in devname [ 799.616910][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.809844][T14612] overlayfs: failed to clone lowerpath [ 799.939295][T14614] netlink: 'syz.4.2820': attribute type 4 has an invalid length. [ 799.939319][T14614] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2820'. [ 799.980718][T14614] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 800.212563][T14595] 9pnet_fd: Insufficient options for proto=fd [ 800.538964][ T44] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 803.704092][ T44] usb 5-1: device not accepting address 56, error -71 [ 805.443899][ C0] vkms_vblank_simulate: vblank timer overrun [ 806.186903][ C0] vkms_vblank_simulate: vblank timer overrun [ 806.249714][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.895851][T14653] veth2: entered allmulticast mode [ 808.408464][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.550366][T14662] 9pnet: Could not find request transport: f [ 808.661228][T14666] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.780103][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.780176][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.934075][ C0] vkms_vblank_simulate: vblank timer overrun [ 810.100241][T14678] Falling back ldisc for ptm0. [ 810.234493][T14690] netlink: 'syz.5.2842': attribute type 11 has an invalid length. [ 810.601785][T14695] overlayfs: conflicting lowerdir path [ 811.513954][T14699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2846'. [ 811.568223][T14699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 811.980808][T14714] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2849'. [ 812.411032][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 812.411051][ T37] audit: type=1326 audit(1762103182.325:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f3b6efc9 code=0x7ffc0000 [ 812.411146][ T37] audit: type=1326 audit(1762103182.325:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f3b6efc9 code=0x7ffc0000 [ 812.411903][ T37] audit: type=1326 audit(1762103182.325:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f89f3b6efc9 code=0x7ffc0000 [ 812.412042][ T37] audit: type=1326 audit(1762103182.325:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f3b6efc9 code=0x7ffc0000 [ 812.412975][ T37] audit: type=1326 audit(1762103182.325:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f3b6efc9 code=0x7ffc0000 [ 812.413089][ T37] audit: type=1326 audit(1762103182.325:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f89f3b6efc9 code=0x7ffc0000 [ 812.420599][ T37] audit: type=1326 audit(1762103182.335:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f3b6efc9 code=0x7ffc0000 [ 812.420647][ T37] audit: type=1326 audit(1762103182.335:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f3b6efc9 code=0x7ffc0000 [ 812.421636][ T37] audit: type=1326 audit(1762103182.335:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f89f3b6efc9 code=0x7ffc0000 [ 812.421681][ T37] audit: type=1326 audit(1762103182.335:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14721 comm="syz.1.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f3b6efc9 code=0x7ffc0000 [ 812.486002][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'. [ 812.759345][T14728] FAULT_INJECTION: forcing a failure. [ 812.759345][T14728] name failslab, interval 1, probability 0, space 0, times 0 [ 812.759380][T14728] CPU: 1 UID: 0 PID: 14728 Comm: syz.1.2858 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 812.759402][T14728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 812.759413][T14728] Call Trace: [ 812.759422][T14728] [ 812.759430][T14728] dump_stack_lvl+0x189/0x250 [ 812.759462][T14728] ? __pfx____ratelimit+0x10/0x10 [ 812.759486][T14728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.759514][T14728] ? __pfx__printk+0x10/0x10 [ 812.759543][T14728] ? __pfx___might_resched+0x10/0x10 [ 812.759564][T14728] ? fs_reclaim_acquire+0x7d/0x100 [ 812.759594][T14728] should_fail_ex+0x46c/0x600 [ 812.759626][T14728] should_failslab+0xa8/0x100 [ 812.759654][T14728] __kmalloc_noprof+0xcc/0x7d0 [ 812.759678][T14728] ? tomoyo_encode+0x28b/0x550 [ 812.759707][T14728] tomoyo_encode+0x28b/0x550 [ 812.759736][T14728] tomoyo_realpath_from_path+0x58d/0x5d0 [ 812.759771][T14728] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 812.759799][T14728] tomoyo_path_number_perm+0x1e8/0x5a0 [ 812.759830][T14728] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 812.759863][T14728] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 812.759888][T14728] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.759945][T14728] ? __fget_files+0x2a/0x420 [ 812.759976][T14728] ? __fget_files+0x3a6/0x420 [ 812.759999][T14728] ? __fget_files+0x2a/0x420 [ 812.760027][T14728] security_file_ioctl+0xcb/0x2d0 [ 812.760051][T14728] __se_sys_ioctl+0x47/0x170 [ 812.760075][T14728] do_syscall_64+0xfa/0xfa0 [ 812.760098][T14728] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.760121][T14728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.760142][T14728] ? clear_bhb_loop+0x60/0xb0 [ 812.760166][T14728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.760185][T14728] RIP: 0033:0x7f89f3b6efc9 [ 812.760203][T14728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.760221][T14728] RSP: 002b:00007f89f1dce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 812.760242][T14728] RAX: ffffffffffffffda RBX: 00007f89f3dc5fa0 RCX: 00007f89f3b6efc9 [ 812.760258][T14728] RDX: 0000200000002400 RSI: 00000000c018937e RDI: 0000000000000004 [ 812.760272][T14728] RBP: 00007f89f1dce090 R08: 0000000000000000 R09: 0000000000000000 [ 812.760285][T14728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.760297][T14728] R13: 00007f89f3dc6038 R14: 00007f89f3dc5fa0 R15: 00007ffdce9865a8 [ 812.760337][T14728] [ 812.760357][T14728] ERROR: Out of memory at tomoyo_realpath_from_path. [ 813.983906][T14741] openvswitch: netlink: Duplicate or invalid key (type 0). [ 813.983963][T14741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.946277][ T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 815.118287][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 815.119491][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 815.121722][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 815.121746][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.121757][ T10] usb 5-1: Product: syz [ 815.121765][ T10] usb 5-1: Manufacturer: syz [ 815.121773][ T10] usb 5-1: SerialNumber: syz [ 816.115305][T14760] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 816.189066][ T10] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input36 [ 816.204643][ T5164] bcm5974 5-1:1.0: could not read from device [ 816.246575][T14764] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2871'. [ 816.270063][ T10] usb 5-1: USB disconnect, device number 58 [ 816.328407][T14764] 8021q: adding VLAN 0 to HW filter on device bond3 [ 818.349247][T14793] overlayfs: failed to clone upperpath [ 818.472986][ T37] kauditd_printk_skb: 111 callbacks suppressed [ 818.473005][ T37] audit: type=1326 audit(1762103188.385:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fe27efc9 code=0x7ffc0000 [ 818.477641][ T37] audit: type=1326 audit(1762103188.395:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fe27efc9 code=0x7ffc0000 [ 818.541516][ T37] audit: type=1326 audit(1762103188.395:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f66fe27efc9 code=0x7ffc0000 [ 818.541567][ T37] audit: type=1326 audit(1762103188.455:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fe27efc9 code=0x7ffc0000 [ 818.541610][ T37] audit: type=1326 audit(1762103188.455:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fe27efc9 code=0x7ffc0000 [ 818.613027][ T37] audit: type=1326 audit(1762103188.525:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f66fe27efc9 code=0x7ffc0000 [ 818.613079][ T37] audit: type=1326 audit(1762103188.525:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fe27efc9 code=0x7ffc0000 [ 818.631353][ T37] audit: type=1326 audit(1762103188.525:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fe27efc9 code=0x7ffc0000 [ 818.631408][ T37] audit: type=1326 audit(1762103188.535:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66fe27efc9 code=0x7ffc0000 [ 818.631449][ T37] audit: type=1326 audit(1762103188.535:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fe27efc9 code=0x7ffc0000 [ 821.101117][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.260354][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.534927][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.751819][T14845] overlayfs: failed to clone upperpath [ 821.970696][T14853] veth2: entered allmulticast mode [ 823.015799][T14869] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 823.015799][T14869] The task syz.1.2900 (14869) triggered the difference, watch for misbehavior. [ 823.842752][T14874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.845626][T14874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.083033][ T5889] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 824.245358][ T5889] usb 7-1: config 16 has an invalid interface number: 188 but max is 0 [ 824.245393][ T5889] usb 7-1: config 16 has no interface number 0 [ 824.245442][ T5889] usb 7-1: config 16 interface 188 altsetting 0 has an endpoint descriptor with address 0x7B, changing to 0xB [ 824.245487][ T5889] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=f2.88 [ 824.245512][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.268473][ T5889] imon_raw 7-1:16.188: IR endpoint missing [ 824.458761][ T5889] usb 7-1: USB disconnect, device number 30 [ 825.162969][ T37] kauditd_printk_skb: 80 callbacks suppressed [ 825.162987][ T37] audit: type=1326 audit(1762103195.076:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.6.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ec48efc9 code=0x7ffc0000 [ 825.163482][ T37] audit: type=1326 audit(1762103195.086:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.6.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03ec48efc9 code=0x7ffc0000 [ 825.164080][ T37] audit: type=1326 audit(1762103195.086:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.6.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ec48efc9 code=0x7ffc0000 [ 825.166140][ T37] audit: type=1326 audit(1762103195.086:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.6.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03ec48efc9 code=0x7ffc0000 [ 825.175737][ T37] audit: type=1326 audit(1762103195.086:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.6.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ec48efc9 code=0x7ffc0000 [ 825.176255][ T37] audit: type=1326 audit(1762103195.096:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.6.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03ec48efc9 code=0x7ffc0000 [ 825.183109][ T37] audit: type=1326 audit(1762103195.096:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.6.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ec48efc9 code=0x7ffc0000 [ 825.183276][ T37] audit: type=1326 audit(1762103195.096:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.6.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ec48efc9 code=0x7ffc0000 [ 825.183328][ T37] audit: type=1326 audit(1762103195.096:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.6.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03ec48efc9 code=0x7ffc0000 [ 825.183377][ T37] audit: type=1326 audit(1762103195.096:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.6.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ec48efc9 code=0x7ffc0000 [ 825.601897][T14898] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 828.478219][T14938] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 828.771212][T14947] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2925'. [ 829.347612][T14950] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2924'. [ 829.347652][T14950] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2924'. [ 829.821566][ C1] vkms_vblank_simulate: vblank timer overrun [ 829.844619][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 830.175325][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 830.175360][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 830.175394][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 830.175417][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 830.175471][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 830.175496][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.182193][ T10] usb 7-1: config 0 descriptor?? [ 830.292740][T14958] FAULT_INJECTION: forcing a failure. [ 830.292740][T14958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.292800][T14958] CPU: 0 UID: 0 PID: 14958 Comm: syz.3.2928 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 830.292824][T14958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 830.292837][T14958] Call Trace: [ 830.292846][T14958] [ 830.292856][T14958] dump_stack_lvl+0x189/0x250 [ 830.292887][T14958] ? __pfx____ratelimit+0x10/0x10 [ 830.292912][T14958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 830.292939][T14958] ? __pfx__printk+0x10/0x10 [ 830.292962][T14958] ? __might_fault+0xb0/0x130 [ 830.292999][T14958] should_fail_ex+0x46c/0x600 [ 830.293031][T14958] _copy_from_iter+0x1de/0x1790 [ 830.293057][T14958] ? lockdep_hardirqs_on+0x9c/0x150 [ 830.293094][T14958] ? __build_skb_around+0x242/0x3f0 [ 830.293115][T14958] ? __pfx__copy_from_iter+0x10/0x10 [ 830.293140][T14958] ? __pfx_kcov_common_handle+0x10/0x10 [ 830.293169][T14958] ? __build_skb_around+0x262/0x3f0 [ 830.293193][T14958] ? skb_put+0x11b/0x210 [ 830.293218][T14958] pfkey_sendmsg+0x230/0x1090 [ 830.293251][T14958] ? rcu_is_watching+0x15/0xb0 [ 830.293270][T14958] ? smack_socket_sendmsg+0x1a7/0x520 [ 830.293293][T14958] ? preempt_schedule_irq+0xde/0x150 [ 830.293317][T14958] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 830.293348][T14958] ? irqentry_exit+0x74/0x90 [ 830.293371][T14958] ? lockdep_hardirqs_on+0x9c/0x150 [ 830.293402][T14958] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 830.293428][T14958] ? security_socket_sendmsg+0x19/0x2b0 [ 830.293468][T14958] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 830.293493][T14958] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 830.293519][T14958] __sock_sendmsg+0x21c/0x270 [ 830.293549][T14958] ____sys_sendmsg+0x508/0x820 [ 830.293577][T14958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 830.293609][T14958] ? import_iovec+0x74/0xa0 [ 830.293634][T14958] ___sys_sendmsg+0x21f/0x2a0 [ 830.293659][T14958] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.293719][T14958] ? __fget_files+0x2a/0x420 [ 830.293744][T14958] ? __fget_files+0x3a6/0x420 [ 830.293779][T14958] __x64_sys_sendmsg+0x1a1/0x260 [ 830.293805][T14958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 830.293846][T14958] ? do_syscall_64+0xbe/0xfa0 [ 830.293874][T14958] do_syscall_64+0xfa/0xfa0 [ 830.293899][T14958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.293918][T14958] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 830.293937][T14958] ? clear_bhb_loop+0x60/0xb0 [ 830.293961][T14958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.293980][T14958] RIP: 0033:0x7fc04d3aefc9 [ 830.293997][T14958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.294014][T14958] RSP: 002b:00007fc04b5d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.294036][T14958] RAX: ffffffffffffffda RBX: 00007fc04d606180 RCX: 00007fc04d3aefc9 [ 830.294051][T14958] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 830.294064][T14958] RBP: 00007fc04b5d4090 R08: 0000000000000000 R09: 0000000000000000 [ 830.294077][T14958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.294089][T14958] R13: 00007fc04d606218 R14: 00007fc04d606180 R15: 00007ffee8ded3a8 [ 830.294123][T14958] [ 830.518037][ C1] vkms_vblank_simulate: vblank timer overrun [ 831.313591][ C1] vkms_vblank_simulate: vblank timer overrun [ 831.322215][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 831.322254][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 831.322282][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 831.322309][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 831.322356][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 831.362591][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 831.517590][ T10] usb 7-1: USB disconnect, device number 31 [ 831.557563][ T37] kauditd_printk_skb: 111 callbacks suppressed [ 831.557581][ T37] audit: type=1326 audit(1762103201.476:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14964 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 831.557705][ T37] audit: type=1326 audit(1762103201.476:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14964 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 831.558047][ T37] audit: type=1326 audit(1762103201.476:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14964 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 831.558552][ T37] audit: type=1326 audit(1762103201.476:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14964 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 831.558699][ T37] audit: type=1326 audit(1762103201.476:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14964 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 831.559102][ T37] audit: type=1326 audit(1762103201.476:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14964 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 831.561587][ T37] audit: type=1326 audit(1762103201.476:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14964 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 831.566077][ T37] audit: type=1326 audit(1762103201.476:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14964 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 831.566136][ T37] audit: type=1326 audit(1762103201.486:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14964 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 831.566187][ T37] audit: type=1326 audit(1762103201.486:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14964 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 831.887195][T14973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.035541][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.090917][T14974] option changes via remount are deprecated (pid=14972 comm=syz.3.2934) [ 832.207787][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.790817][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.865692][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.963690][T14982] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2938'. [ 833.475360][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.392497][T15004] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2941'. [ 834.922286][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.284833][T11893] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 835.329415][T15023] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2950'. [ 835.879916][ C1] vkms_vblank_simulate: vblank timer overrun [ 836.243073][ C1] vkms_vblank_simulate: vblank timer overrun [ 836.563515][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.288654][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.722178][ T6685] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 837.785212][ T5990] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 837.862205][ T6685] usb 7-1: device descriptor read/64, error -71 [ 837.932160][ T5990] usb 5-1: Using ep0 maxpacket: 16 [ 837.935607][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 837.937913][ T5990] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 837.937941][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.937963][ T5990] usb 5-1: Product: syz [ 837.937974][ T5990] usb 5-1: Manufacturer: syz [ 837.937982][ T5990] usb 5-1: SerialNumber: syz [ 837.941225][ T5990] usb 5-1: config 0 descriptor?? [ 837.966987][ T5990] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 837.967026][ T5990] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 838.034348][T15059] 9pnet_fd: Insufficient options for proto=fd [ 838.062303][ T5889] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 838.101897][T15063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2966'. [ 838.132234][ T6685] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 838.395739][ C1] vkms_vblank_simulate: vblank timer overrun [ 838.432156][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 838.437486][ T5889] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 838.437517][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.437538][ T5889] usb 4-1: Product: syz [ 838.437553][ T5889] usb 4-1: Manufacturer: syz [ 838.437568][ T5889] usb 4-1: SerialNumber: syz [ 838.445440][ T5889] r8152-cfgselector 4-1: Unknown version 0x0000 [ 838.445465][ T5889] r8152-cfgselector 4-1: config 0 descriptor?? [ 838.475285][ T6685] usb 7-1: device descriptor read/64, error -71 [ 838.549704][ C1] vkms_vblank_simulate: vblank timer overrun [ 839.119627][ C1] vkms_vblank_simulate: vblank timer overrun [ 839.335040][ T6685] usb usb7-port1: attempt power cycle [ 839.384130][ T5990] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 839.788776][T15071] fuse: Unknown parameter 'fd0x000000000000000b' [ 840.294887][T15055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.295319][T15055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.321743][ T5999] r8152-cfgselector 4-1: USB disconnect, device number 51 [ 840.482099][ T5990] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 840.482132][ T5990] em28xx 5-1:0.0: board has no eeprom [ 840.562275][ T5990] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 840.562305][ T5990] em28xx 5-1:0.0: dvb set to bulk mode. [ 840.563874][ T10] em28xx 5-1:0.0: Binding DVB extension [ 840.593781][ T5990] usb 5-1: USB disconnect, device number 59 [ 840.596205][ T5990] em28xx 5-1:0.0: Disconnecting em28xx [ 840.659720][ T10] em28xx 5-1:0.0: Registering input extension [ 840.660256][ T5990] em28xx 5-1:0.0: Closing input extension [ 840.688508][ T5990] em28xx 5-1:0.0: Freeing device [ 840.766895][T15086] input: syz0 as /devices/virtual/input/input38 [ 841.034828][T15094] 9pnet_fd: Insufficient options for proto=fd [ 841.632585][T15116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2986'. [ 841.632609][T15116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2986'. [ 841.723407][T15117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2986'. [ 841.723433][T15117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2986'. [ 841.808776][T15121] netlink: 'syz.5.2987': attribute type 2 has an invalid length. [ 842.441257][T15129] FAULT_INJECTION: forcing a failure. [ 842.441257][T15129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.441290][T15129] CPU: 0 UID: 0 PID: 15129 Comm: syz.6.2989 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 842.441330][T15129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 842.441340][T15129] Call Trace: [ 842.441346][T15129] [ 842.441354][T15129] dump_stack_lvl+0x189/0x250 [ 842.441380][T15129] ? __pfx____ratelimit+0x10/0x10 [ 842.441400][T15129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 842.441421][T15129] ? __pfx__printk+0x10/0x10 [ 842.441448][T15129] should_fail_ex+0x46c/0x600 [ 842.441472][T15129] _copy_from_user+0x2d/0xb0 [ 842.441490][T15129] bpf_test_init+0xd8/0x150 [ 842.441508][T15129] bpf_prog_test_run_flow_dissector+0x1e1/0x5c0 [ 842.441534][T15129] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 842.441560][T15129] ? __fget_files+0x2a/0x420 [ 842.441583][T15129] ? __fget_files+0x2a/0x420 [ 842.441602][T15129] ? __fget_files+0x3a6/0x420 [ 842.441620][T15129] ? __fget_files+0x2a/0x420 [ 842.441643][T15129] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 842.441661][T15129] bpf_prog_test_run+0x2cd/0x340 [ 842.441685][T15129] __sys_bpf+0x562/0x860 [ 842.441705][T15129] ? __pfx___sys_bpf+0x10/0x10 [ 842.441722][T15129] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 842.441760][T15129] ? ksys_write+0x230/0x260 [ 842.441783][T15129] ? __pfx_ksys_write+0x10/0x10 [ 842.441810][T15129] __x64_sys_bpf+0x7c/0x90 [ 842.441833][T15129] do_syscall_64+0xfa/0xfa0 [ 842.441854][T15129] ? lockdep_hardirqs_on+0x9c/0x150 [ 842.441876][T15129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.441895][T15129] ? clear_bhb_loop+0x60/0xb0 [ 842.441917][T15129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.441935][T15129] RIP: 0033:0x7f03ec48efc9 [ 842.441952][T15129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.441969][T15129] RSP: 002b:00007f03ea6ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 842.441989][T15129] RAX: ffffffffffffffda RBX: 00007f03ec6e5fa0 RCX: 00007f03ec48efc9 [ 842.442004][T15129] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 842.442017][T15129] RBP: 00007f03ea6ee090 R08: 0000000000000000 R09: 0000000000000000 [ 842.442030][T15129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.442041][T15129] R13: 00007f03ec6e6038 R14: 00007f03ec6e5fa0 R15: 00007ffcf2a67408 [ 842.442073][T15129] [ 842.706359][T15131] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2990'. [ 843.067882][T15147] overlayfs: failed to resolve './file0': -2 [ 843.994654][ T10] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 844.130549][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3002'. [ 844.163133][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 844.166788][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 844.168514][ T10] usb 7-1: config 164 has an invalid interface number: 246 but max is 0 [ 844.168539][ T10] usb 7-1: config 164 has an invalid descriptor of length 53, skipping remainder of the config [ 844.168560][ T10] usb 7-1: config 164 has no interface number 0 [ 844.168609][ T10] usb 7-1: config 164 interface 246 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 844.168638][ T10] usb 7-1: config 164 interface 246 has no altsetting 0 [ 844.231694][ T10] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice= f.fe [ 844.231725][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.231746][ T10] usb 7-1: Product: syz [ 844.231760][ T10] usb 7-1: Manufacturer: syz [ 844.231775][ T10] usb 7-1: SerialNumber: syz [ 844.304189][T15170] bond3 (unregistering): Released all slaves [ 844.730530][T15179] overlayfs: failed to resolve './file0': -2 [ 845.023097][ T10] powermate 7-1:164.246: probe with driver powermate failed with error -22 [ 845.031118][ T10] usb 7-1: USB disconnect, device number 35 [ 845.681420][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3012'. [ 846.505616][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.477153][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.593836][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.612090][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.877530][ C0] vkms_vblank_simulate: vblank timer overrun [ 849.198470][T15218] overlayfs: failed to resolve './file0': -2 [ 849.342785][T15222] overlayfs: failed to clone lowerpath [ 849.663729][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.291515][T15232] netlink: 'syz.3.3020': attribute type 1 has an invalid length. [ 850.291539][T15232] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3020'. [ 850.291572][T15232] NCSI netlink: No device for ifindex 0 [ 851.151478][T15232] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3020'. [ 851.329496][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.679553][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.729188][T15241] FAULT_INJECTION: forcing a failure. [ 851.729188][T15241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.729210][T15241] CPU: 1 UID: 0 PID: 15241 Comm: syz.3.3025 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 851.729224][T15241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 851.729231][T15241] Call Trace: [ 851.729236][T15241] [ 851.729241][T15241] dump_stack_lvl+0x189/0x250 [ 851.729261][T15241] ? __pfx____ratelimit+0x10/0x10 [ 851.729276][T15241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 851.729292][T15241] ? __pfx__printk+0x10/0x10 [ 851.729305][T15241] ? __might_fault+0xb0/0x130 [ 851.729326][T15241] should_fail_ex+0x46c/0x600 [ 851.729344][T15241] _copy_from_iter+0x1de/0x1790 [ 851.729364][T15241] ? kmalloc_reserve+0xbd/0x290 [ 851.729376][T15241] ? rcu_is_watching+0x15/0xb0 [ 851.729387][T15241] ? kmalloc_reserve+0xbd/0x290 [ 851.729397][T15241] ? __alloc_skb+0x112/0x2d0 [ 851.729407][T15241] ? __pfx__copy_from_iter+0x10/0x10 [ 851.729425][T15241] ? __build_skb_around+0x262/0x3f0 [ 851.729437][T15241] ? netlink_sendmsg+0x642/0xb30 [ 851.729456][T15241] ? skb_put+0x11b/0x210 [ 851.729469][T15241] netlink_sendmsg+0x6b2/0xb30 [ 851.729479][T15241] ? is_bpf_text_address+0x26/0x2b0 [ 851.729500][T15241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 851.729516][T15241] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 851.729531][T15241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 851.729543][T15241] __sock_sendmsg+0x21c/0x270 [ 851.729560][T15241] ____sys_sendmsg+0x508/0x820 [ 851.729576][T15241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 851.729594][T15241] ? import_iovec+0x74/0xa0 [ 851.729607][T15241] ___sys_sendmsg+0x21f/0x2a0 [ 851.729621][T15241] ? __pfx____sys_sendmsg+0x10/0x10 [ 851.729655][T15241] ? __fget_files+0x2a/0x420 [ 851.729670][T15241] ? __fget_files+0x3a6/0x420 [ 851.729692][T15241] __x64_sys_sendmsg+0x1a1/0x260 [ 851.729709][T15241] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 851.729727][T15241] ? __pfx_ksys_write+0x10/0x10 [ 851.729742][T15241] ? do_syscall_64+0xbe/0xfa0 [ 851.729759][T15241] do_syscall_64+0xfa/0xfa0 [ 851.729772][T15241] ? lockdep_hardirqs_on+0x9c/0x150 [ 851.729788][T15241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.729799][T15241] ? clear_bhb_loop+0x60/0xb0 [ 851.729812][T15241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.729823][T15241] RIP: 0033:0x7fc04d3aefc9 [ 851.729833][T15241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.729843][T15241] RSP: 002b:00007fc04b616038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 851.729856][T15241] RAX: ffffffffffffffda RBX: 00007fc04d605fa0 RCX: 00007fc04d3aefc9 [ 851.729864][T15241] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 851.729871][T15241] RBP: 00007fc04b616090 R08: 0000000000000000 R09: 0000000000000000 [ 851.729878][T15241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.729885][T15241] R13: 00007fc04d606038 R14: 00007fc04d605fa0 R15: 00007ffee8ded3a8 [ 851.729903][T15241] [ 851.829821][T15242] overlayfs: missing 'lowerdir' [ 851.831178][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.930942][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.389627][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.081749][T15252] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 853.083987][T15252] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 853.084025][T15252] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 853.084086][T15252] UDF-fs: Scanning with blocksize 512 failed [ 853.100204][T15252] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 853.101820][T15252] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 853.101902][T15252] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 853.101954][T15252] UDF-fs: Scanning with blocksize 1024 failed [ 853.122179][T15252] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 853.125166][T15252] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 853.125332][T15252] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 853.125387][T15252] UDF-fs: Scanning with blocksize 2048 failed [ 853.141244][T15252] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 853.142909][T15252] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 853.142946][T15252] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 853.143008][T15252] UDF-fs: Scanning with blocksize 4096 failed [ 853.143020][T15252] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 853.331695][T15249] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3029'. [ 853.333643][T15249] overlayfs: failed to resolve './file1/file0': -2 [ 853.694966][T15258] overlayfs: failed to resolve './file1': -2 [ 854.552766][T15267] fuse: Bad value for 'fd' [ 855.559846][T15271] netlink: 'syz.3.3035': attribute type 1 has an invalid length. [ 855.559922][T15271] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3035'. [ 855.559994][T15271] NCSI netlink: No device for ifindex 0 [ 857.751451][ T5990] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 857.911154][ T5990] usb 4-1: Using ep0 maxpacket: 32 [ 857.913590][ T5990] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 857.913619][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.919075][ T5990] usb 4-1: config 0 descriptor?? [ 857.963986][ T5990] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 858.168884][ T5990] gspca_vc032x: reg_r err -71 [ 858.168923][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.168935][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.168945][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.168956][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.168967][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.168976][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.168986][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.168996][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.169005][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.169015][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.169024][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.169034][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.169043][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.169053][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.169062][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.169072][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.169143][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.169154][ T5990] gspca_vc032x: I2c Bus Busy Wait 00 [ 858.169164][ T5990] gspca_vc032x: Unknown sensor... [ 858.169260][ T5990] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 858.297521][ T5990] usb 4-1: USB disconnect, device number 52 [ 858.785832][T15286] binder: 15285:15286 ioctl c0306201 0 returned -14 [ 858.932623][ C0] vkms_vblank_simulate: vblank timer overrun [ 859.199604][ C0] vkms_vblank_simulate: vblank timer overrun [ 859.332386][ C0] vkms_vblank_simulate: vblank timer overrun [ 860.047426][ C0] vkms_vblank_simulate: vblank timer overrun [ 860.178757][ C0] vkms_vblank_simulate: vblank timer overrun [ 860.461605][T15306] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3048'. [ 860.461642][T15306] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3048'. [ 860.611789][ C0] vkms_vblank_simulate: vblank timer overrun [ 860.809444][T15309] fuse: Bad value for 'fd' [ 861.529337][ C0] vkms_vblank_simulate: vblank timer overrun [ 861.920020][T15318] netlink: 'syz.4.3047': attribute type 1 has an invalid length. [ 861.920092][T15318] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3047'. [ 861.920143][T15318] NCSI netlink: No device for ifindex 0 [ 862.607094][ C0] vkms_vblank_simulate: vblank timer overrun [ 862.675776][ C0] vkms_vblank_simulate: vblank timer overrun [ 865.796789][T15340] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3057'. [ 865.799313][T15340] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 865.845330][T15341] netlink: 'syz.3.3058': attribute type 7 has an invalid length. [ 865.845353][T15341] netlink: 'syz.3.3058': attribute type 8 has an invalid length. [ 865.854033][T15342] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 866.722189][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.819175][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.936417][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.165252][T15348] FAULT_INJECTION: forcing a failure. [ 867.165252][T15348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.165296][T15348] CPU: 1 UID: 0 PID: 15348 Comm: syz.3.3060 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 867.165318][T15348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 867.165328][T15348] Call Trace: [ 867.165336][T15348] [ 867.165345][T15348] dump_stack_lvl+0x189/0x250 [ 867.165375][T15348] ? __pfx____ratelimit+0x10/0x10 [ 867.165399][T15348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 867.165424][T15348] ? __pfx__printk+0x10/0x10 [ 867.165446][T15348] ? __might_fault+0xb0/0x130 [ 867.165483][T15348] should_fail_ex+0x46c/0x600 [ 867.165511][T15348] _copy_from_iter+0x1de/0x1790 [ 867.165543][T15348] ? kmalloc_reserve+0xbd/0x290 [ 867.165563][T15348] ? rcu_is_watching+0x15/0xb0 [ 867.165583][T15348] ? kmalloc_reserve+0xbd/0x290 [ 867.165599][T15348] ? __alloc_skb+0x112/0x2d0 [ 867.165619][T15348] ? __pfx__copy_from_iter+0x10/0x10 [ 867.165647][T15348] ? __build_skb_around+0x262/0x3f0 [ 867.165670][T15348] ? netlink_sendmsg+0x642/0xb30 [ 867.165688][T15348] ? skb_put+0x11b/0x210 [ 867.165711][T15348] netlink_sendmsg+0x6b2/0xb30 [ 867.165729][T15348] ? is_bpf_text_address+0x26/0x2b0 [ 867.165765][T15348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.165792][T15348] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 867.165824][T15348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.165845][T15348] __sock_sendmsg+0x21c/0x270 [ 867.165873][T15348] ____sys_sendmsg+0x508/0x820 [ 867.165902][T15348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 867.165933][T15348] ? import_iovec+0x74/0xa0 [ 867.165957][T15348] ___sys_sendmsg+0x21f/0x2a0 [ 867.165982][T15348] ? __pfx____sys_sendmsg+0x10/0x10 [ 867.166038][T15348] ? __fget_files+0x2a/0x420 [ 867.166064][T15348] ? __fget_files+0x3a6/0x420 [ 867.166105][T15348] __x64_sys_sendmsg+0x1a1/0x260 [ 867.166129][T15348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 867.166161][T15348] ? __pfx_ksys_write+0x10/0x10 [ 867.166187][T15348] ? do_syscall_64+0xbe/0xfa0 [ 867.166216][T15348] do_syscall_64+0xfa/0xfa0 [ 867.166238][T15348] ? lockdep_hardirqs_on+0x9c/0x150 [ 867.166271][T15348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.166291][T15348] ? clear_bhb_loop+0x60/0xb0 [ 867.166315][T15348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.166334][T15348] RIP: 0033:0x7fc04d3aefc9 [ 867.166352][T15348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.166369][T15348] RSP: 002b:00007fc04b616038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.166390][T15348] RAX: ffffffffffffffda RBX: 00007fc04d605fa0 RCX: 00007fc04d3aefc9 [ 867.166404][T15348] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 867.166417][T15348] RBP: 00007fc04b616090 R08: 0000000000000000 R09: 0000000000000000 [ 867.166429][T15348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.166441][T15348] R13: 00007fc04d606038 R14: 00007fc04d605fa0 R15: 00007ffee8ded3a8 [ 867.166474][T15348] [ 867.534232][ C0] vkms_vblank_simulate: vblank timer overrun [ 868.047466][T15357] netlink: 'syz.6.3064': attribute type 1 has an invalid length. [ 868.047775][T15357] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3064'. [ 868.047920][T15357] NCSI netlink: No device for ifindex 0 [ 870.252906][T15367] FAULT_INJECTION: forcing a failure. [ 870.252906][T15367] name failslab, interval 1, probability 0, space 0, times 0 [ 870.252938][T15367] CPU: 0 UID: 0 PID: 15367 Comm: syz.6.3068 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 870.252962][T15367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 870.252981][T15367] Call Trace: [ 870.252990][T15367] [ 870.252999][T15367] dump_stack_lvl+0x189/0x250 [ 870.253030][T15367] ? __pfx____ratelimit+0x10/0x10 [ 870.253054][T15367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 870.253080][T15367] ? __pfx__printk+0x10/0x10 [ 870.253109][T15367] ? __pfx___might_resched+0x10/0x10 [ 870.253135][T15367] should_fail_ex+0x46c/0x600 [ 870.253167][T15367] should_failslab+0xa8/0x100 [ 870.253196][T15367] __kmalloc_cache_noprof+0x6f/0x6c0 [ 870.253222][T15367] ? ipv6_flowlabel_opt+0x16a6/0x23e0 [ 870.253251][T15367] ipv6_flowlabel_opt+0x16a6/0x23e0 [ 870.253288][T15367] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 870.253313][T15367] ? __local_bh_enable+0x28c/0x410 [ 870.253339][T15367] ? __pfx___local_bh_enable+0x10/0x10 [ 870.253362][T15367] ? __pfx_handle_softirqs+0x10/0x10 [ 870.253388][T15367] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 870.253410][T15367] ? lockdep_hardirqs_on+0x9c/0x150 [ 870.253439][T15367] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 870.253461][T15367] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 870.253490][T15367] ? rt_spin_unlock+0x161/0x200 [ 870.253509][T15367] ? lock_sock_nested+0x5f/0x130 [ 870.253533][T15367] ? lock_sock_nested+0xdd/0x130 [ 870.253561][T15367] do_ipv6_setsockopt+0xdb0/0x2eb0 [ 870.253592][T15367] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 870.253624][T15367] ? get_pid_task+0x20/0x1f0 [ 870.253653][T15367] ? __lock_acquire+0xab9/0xd20 [ 870.253685][T15367] ? do_raw_spin_lock+0x121/0x290 [ 870.253715][T15367] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 870.253739][T15367] ? lockdep_hardirqs_on+0x9c/0x150 [ 870.253766][T15367] ? __lock_acquire+0xab9/0xd20 [ 870.253796][T15367] ipv6_setsockopt+0x59/0x170 [ 870.253823][T15367] rawv6_setsockopt+0x23b/0x5b0 [ 870.253851][T15367] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 870.253873][T15367] ? __fget_files+0x2a/0x420 [ 870.253900][T15367] ? sock_common_setsockopt+0x36/0xc0 [ 870.253926][T15367] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 870.253954][T15367] do_sock_setsockopt+0x17c/0x1b0 [ 870.253989][T15367] __x64_sys_setsockopt+0x145/0x1b0 [ 870.254016][T15367] do_syscall_64+0xfa/0xfa0 [ 870.254039][T15367] ? lockdep_hardirqs_on+0x9c/0x150 [ 870.254061][T15367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.254080][T15367] ? clear_bhb_loop+0x60/0xb0 [ 870.254103][T15367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.254120][T15367] RIP: 0033:0x7f03ec48efc9 [ 870.254137][T15367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.254153][T15367] RSP: 002b:00007f03ea6ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 870.254174][T15367] RAX: ffffffffffffffda RBX: 00007f03ec6e5fa0 RCX: 00007f03ec48efc9 [ 870.254188][T15367] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000004 [ 870.254201][T15367] RBP: 00007f03ea6ee090 R08: 0000000000000020 R09: 0000000000000000 [ 870.254213][T15367] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 870.254226][T15367] R13: 00007f03ec6e6038 R14: 00007f03ec6e5fa0 R15: 00007ffcf2a67408 [ 870.254261][T15367] [ 870.598578][ C0] vkms_vblank_simulate: vblank timer overrun [ 870.674034][ C0] vkms_vblank_simulate: vblank timer overrun [ 871.044301][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.044816][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.328241][T15370] FAULT_INJECTION: forcing a failure. [ 871.328241][T15370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.328276][T15370] CPU: 0 UID: 0 PID: 15370 Comm: syz.6.3070 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 871.328298][T15370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 871.328310][T15370] Call Trace: [ 871.328318][T15370] [ 871.328327][T15370] dump_stack_lvl+0x189/0x250 [ 871.328358][T15370] ? __pfx____ratelimit+0x10/0x10 [ 871.328381][T15370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 871.328407][T15370] ? __pfx__printk+0x10/0x10 [ 871.328445][T15370] should_fail_ex+0x46c/0x600 [ 871.328476][T15370] _copy_to_user+0x31/0xb0 [ 871.328500][T15370] simple_read_from_buffer+0xe1/0x170 [ 871.328530][T15370] proc_fail_nth_read+0x1b6/0x220 [ 871.328555][T15370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 871.328579][T15370] ? rw_verify_area+0x2ac/0x4e0 [ 871.328601][T15370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 871.328623][T15370] vfs_read+0x206/0xa30 [ 871.328655][T15370] ? __pfx_vfs_read+0x10/0x10 [ 871.328673][T15370] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 871.328705][T15370] ? mutex_lock_nested+0x154/0x1d0 [ 871.328723][T15370] ? fdget_pos+0x253/0x320 [ 871.328756][T15370] ksys_read+0x14b/0x260 [ 871.328781][T15370] ? __pfx_ksys_read+0x10/0x10 [ 871.328807][T15370] ? do_syscall_64+0xbe/0xfa0 [ 871.328835][T15370] do_syscall_64+0xfa/0xfa0 [ 871.328857][T15370] ? lockdep_hardirqs_on+0x9c/0x150 [ 871.328880][T15370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.328899][T15370] ? clear_bhb_loop+0x60/0xb0 [ 871.328923][T15370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.328941][T15370] RIP: 0033:0x7f03ec48d9dc [ 871.328965][T15370] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 871.328981][T15370] RSP: 002b:00007f03ea6ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 871.329002][T15370] RAX: ffffffffffffffda RBX: 00007f03ec6e5fa0 RCX: 00007f03ec48d9dc [ 871.329016][T15370] RDX: 000000000000000f RSI: 00007f03ea6ee0a0 RDI: 0000000000000004 [ 871.329029][T15370] RBP: 00007f03ea6ee090 R08: 0000000000000000 R09: 0000000000000000 [ 871.329040][T15370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.329052][T15370] R13: 00007f03ec6e6038 R14: 00007f03ec6e5fa0 R15: 00007ffcf2a67408 [ 871.329086][T15370] [ 871.900454][T15377] sg_write: data in/out 65500/17 bytes for SCSI command 0x8-- guessing data in; [ 871.900454][T15377] program syz.1.3069 not setting count and/or reply_len properly [ 872.525281][ T6685] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 873.020186][ C0] vkms_vblank_simulate: vblank timer overrun [ 873.240373][ C0] vkms_vblank_simulate: vblank timer overrun [ 873.338709][ C0] vkms_vblank_simulate: vblank timer overrun [ 873.637390][ C0] vkms_vblank_simulate: vblank timer overrun [ 873.835079][T15406] overlayfs: failed to resolve './file0': -2 [ 874.581218][ C0] vkms_vblank_simulate: vblank timer overrun [ 874.948199][ C0] vkms_vblank_simulate: vblank timer overrun [ 875.041801][ C0] vkms_vblank_simulate: vblank timer overrun [ 875.185604][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3087'. [ 875.185634][T15423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3087'. [ 875.907687][T15440] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3090'. [ 875.907716][T15440] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3090'. [ 875.907734][T15440] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3090'. [ 876.146923][ C0] vkms_vblank_simulate: vblank timer overrun [ 876.288686][ C0] vkms_vblank_simulate: vblank timer overrun [ 876.792549][ C0] vkms_vblank_simulate: vblank timer overrun [ 876.856392][T15448] overlayfs: failed to resolve './file0': -2 [ 877.093126][ C0] vkms_vblank_simulate: vblank timer overrun [ 877.119115][ C0] vkms_vblank_simulate: vblank timer overrun [ 877.153424][ C0] vkms_vblank_simulate: vblank timer overrun [ 877.210521][ C0] vkms_vblank_simulate: vblank timer overrun [ 877.259681][ C0] vkms_vblank_simulate: vblank timer overrun [ 877.360472][ C0] vkms_vblank_simulate: vblank timer overrun [ 877.448483][T15452] FAULT_INJECTION: forcing a failure. [ 877.448483][T15452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.448517][T15452] CPU: 0 UID: 0 PID: 15452 Comm: syz.4.3096 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 877.448540][T15452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 877.448551][T15452] Call Trace: [ 877.448559][T15452] [ 877.448569][T15452] dump_stack_lvl+0x189/0x250 [ 877.448600][T15452] ? __pfx____ratelimit+0x10/0x10 [ 877.448624][T15452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 877.448651][T15452] ? __pfx__printk+0x10/0x10 [ 877.448675][T15452] ? __might_fault+0xb0/0x130 [ 877.448711][T15452] should_fail_ex+0x46c/0x600 [ 877.448742][T15452] _copy_from_iter+0x1de/0x1790 [ 877.448775][T15452] ? kmalloc_reserve+0xbd/0x290 [ 877.448794][T15452] ? rcu_is_watching+0x15/0xb0 [ 877.448815][T15452] ? kmalloc_reserve+0xbd/0x290 [ 877.448833][T15452] ? __alloc_skb+0x112/0x2d0 [ 877.448852][T15452] ? __pfx__copy_from_iter+0x10/0x10 [ 877.448882][T15452] ? __build_skb_around+0x262/0x3f0 [ 877.448906][T15452] ? netlink_sendmsg+0x642/0xb30 [ 877.448925][T15452] ? skb_put+0x11b/0x210 [ 877.448948][T15452] netlink_sendmsg+0x6b2/0xb30 [ 877.448967][T15452] ? is_bpf_text_address+0x26/0x2b0 [ 877.449003][T15452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 877.449032][T15452] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 877.449058][T15452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 877.449080][T15452] __sock_sendmsg+0x21c/0x270 [ 877.449110][T15452] ____sys_sendmsg+0x508/0x820 [ 877.449138][T15452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 877.449170][T15452] ? import_iovec+0x74/0xa0 [ 877.449195][T15452] ___sys_sendmsg+0x21f/0x2a0 [ 877.449220][T15452] ? __pfx____sys_sendmsg+0x10/0x10 [ 877.449280][T15452] ? __fget_files+0x2a/0x420 [ 877.449304][T15452] ? __fget_files+0x3a6/0x420 [ 877.449340][T15452] __x64_sys_sendmsg+0x1a1/0x260 [ 877.449374][T15452] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 877.449408][T15452] ? __pfx_ksys_write+0x10/0x10 [ 877.449435][T15452] ? do_syscall_64+0xbe/0xfa0 [ 877.449463][T15452] do_syscall_64+0xfa/0xfa0 [ 877.449485][T15452] ? lockdep_hardirqs_on+0x9c/0x150 [ 877.449508][T15452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.449529][T15452] ? clear_bhb_loop+0x60/0xb0 [ 877.449552][T15452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.449571][T15452] RIP: 0033:0x7f66fe27efc9 [ 877.449589][T15452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 877.449606][T15452] RSP: 002b:00007f66fc4de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 877.449627][T15452] RAX: ffffffffffffffda RBX: 00007f66fe4d5fa0 RCX: 00007f66fe27efc9 [ 877.449642][T15452] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 877.449655][T15452] RBP: 00007f66fc4de090 R08: 0000000000000000 R09: 0000000000000000 [ 877.449668][T15452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.449681][T15452] R13: 00007f66fe4d6038 R14: 00007f66fe4d5fa0 R15: 00007ffdd1ad8de8 [ 877.449715][T15452] [ 878.069352][T15459] FAULT_INJECTION: forcing a failure. [ 878.069352][T15459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.069387][T15459] CPU: 0 UID: 0 PID: 15459 Comm: syz.1.3100 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 878.069410][T15459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 878.069422][T15459] Call Trace: [ 878.069430][T15459] [ 878.069440][T15459] dump_stack_lvl+0x189/0x250 [ 878.069471][T15459] ? __pfx____ratelimit+0x10/0x10 [ 878.069496][T15459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 878.069523][T15459] ? __pfx__printk+0x10/0x10 [ 878.069547][T15459] ? __might_fault+0xb0/0x130 [ 878.069585][T15459] should_fail_ex+0x46c/0x600 [ 878.069617][T15459] _copy_from_iter+0x1de/0x1790 [ 878.069651][T15459] ? kmalloc_reserve+0xbd/0x290 [ 878.069671][T15459] ? rcu_is_watching+0x15/0xb0 [ 878.069692][T15459] ? kmalloc_reserve+0xbd/0x290 [ 878.069710][T15459] ? __alloc_skb+0x112/0x2d0 [ 878.069730][T15459] ? __pfx__copy_from_iter+0x10/0x10 [ 878.069761][T15459] ? __build_skb_around+0x262/0x3f0 [ 878.069782][T15459] ? netlink_sendmsg+0x642/0xb30 [ 878.069801][T15459] ? skb_put+0x11b/0x210 [ 878.069824][T15459] netlink_sendmsg+0x6b2/0xb30 [ 878.069843][T15459] ? is_bpf_text_address+0x26/0x2b0 [ 878.069880][T15459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.069910][T15459] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 878.069936][T15459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.069959][T15459] __sock_sendmsg+0x21c/0x270 [ 878.069987][T15459] ____sys_sendmsg+0x508/0x820 [ 878.070016][T15459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 878.070049][T15459] ? import_iovec+0x74/0xa0 [ 878.070074][T15459] ___sys_sendmsg+0x21f/0x2a0 [ 878.070100][T15459] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.070161][T15459] ? __fget_files+0x2a/0x420 [ 878.070186][T15459] ? __fget_files+0x3a6/0x420 [ 878.070222][T15459] __x64_sys_sendmsg+0x1a1/0x260 [ 878.070254][T15459] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 878.070286][T15459] ? __pfx_ksys_write+0x10/0x10 [ 878.070314][T15459] ? do_syscall_64+0xbe/0xfa0 [ 878.070343][T15459] do_syscall_64+0xfa/0xfa0 [ 878.070365][T15459] ? lockdep_hardirqs_on+0x9c/0x150 [ 878.070389][T15459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.070409][T15459] ? clear_bhb_loop+0x60/0xb0 [ 878.070433][T15459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.070452][T15459] RIP: 0033:0x7f89f3b6efc9 [ 878.070469][T15459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.070486][T15459] RSP: 002b:00007f89f1dce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.070507][T15459] RAX: ffffffffffffffda RBX: 00007f89f3dc5fa0 RCX: 00007f89f3b6efc9 [ 878.070521][T15459] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 878.070534][T15459] RBP: 00007f89f1dce090 R08: 0000000000000000 R09: 0000000000000000 [ 878.070547][T15459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.070559][T15459] R13: 00007f89f3dc6038 R14: 00007f89f3dc5fa0 R15: 00007ffdce9865a8 [ 878.070593][T15459] [ 878.200812][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 878.200829][ T37] audit: type=1326 audit(1762103248.109:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15460 comm="syz.3.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 878.200876][ T37] audit: type=1326 audit(1762103248.109:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15460 comm="syz.3.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 878.239574][ T37] audit: type=1326 audit(1762103248.149:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15460 comm="syz.3.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 878.274054][ T37] audit: type=1326 audit(1762103248.189:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15460 comm="syz.3.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 878.285692][ T37] audit: type=1326 audit(1762103248.189:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15460 comm="syz.3.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 878.392809][ T37] audit: type=1326 audit(1762103248.279:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15460 comm="syz.3.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 878.511670][ T37] audit: type=1326 audit(1762103248.339:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15460 comm="syz.3.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 878.896886][ T37] audit: type=1326 audit(1762103248.809:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15460 comm="syz.3.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 878.896972][ T37] audit: type=1326 audit(1762103248.809:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15460 comm="syz.3.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 878.897017][ T37] audit: type=1326 audit(1762103248.809:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15460 comm="syz.3.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 879.355995][ C1] vkms_vblank_simulate: vblank timer overrun [ 879.489835][ T5889] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 879.672751][ C1] vkms_vblank_simulate: vblank timer overrun [ 879.751882][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 879.758196][ T5889] usb 4-1: unable to get BOS descriptor or descriptor too short [ 879.767543][ T5889] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 879.767605][ T5889] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 879.817846][ T5889] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.817876][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.817897][ T5889] usb 4-1: Product: syz [ 879.817912][ T5889] usb 4-1: Manufacturer: syz [ 879.817934][ T5889] usb 4-1: SerialNumber: syz [ 880.194148][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.246550][T15475] loop7: detected capacity change from 0 to 7 [ 880.506772][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.173109][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.253081][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 881.253257][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 881.256612][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 881.256646][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 881.270148][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.279682][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 881.279717][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 881.280028][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 881.280055][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 881.280325][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 881.280350][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 881.282328][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 881.282355][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 881.282678][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 881.282705][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 881.282851][T15475] ldm_validate_partition_table(): Disk read failed. [ 881.283069][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 881.283131][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 881.283461][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 881.283488][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 881.283808][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 881.283833][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 881.284200][T15475] Dev loop7: unable to read RDB block 0 [ 881.285438][T15475] loop7: unable to read partition table [ 881.285733][T15475] loop7: partition table beyond EOD, truncated [ 881.285752][T15475] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 881.953266][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.140540][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.699671][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.828257][ C1] vkms_vblank_simulate: vblank timer overrun [ 883.022351][ C1] vkms_vblank_simulate: vblank timer overrun [ 883.203687][ T5889] cdc_ncm 4-1:1.0: skipping garbage [ 883.203709][ T5889] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 883.203752][ T5889] cdc_ncm 4-1:1.0: bind() failure [ 883.244910][ T5889] usb 4-1: USB disconnect, device number 54 [ 883.282075][T15512] tmpfs: Bad value for 'mpol' [ 883.434645][ C1] vkms_vblank_simulate: vblank timer overrun [ 883.499719][T15509] usb usb1: check_ctrlrecip: process 15509 (syz.1.3115) requesting ep 01 but needs 81 [ 883.499740][T15509] usb usb1: usbfs: process 15509 (syz.1.3115) did not claim interface 0 before use [ 883.662980][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.524884][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.736826][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.915880][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.973642][ C1] vkms_vblank_simulate: vblank timer overrun [ 885.639751][ C1] vkms_vblank_simulate: vblank timer overrun [ 885.949221][ C1] vkms_vblank_simulate: vblank timer overrun [ 885.994388][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.450935][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.568883][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.070407][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.159217][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.304715][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.501977][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3130'. [ 887.649348][ T5889] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 887.660033][ T37] kauditd_printk_skb: 67 callbacks suppressed [ 887.660050][ T37] audit: type=1326 audit(1762103257.579:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15557 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 887.660644][ T37] audit: type=1326 audit(1762103257.579:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15557 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 887.666366][ T37] audit: type=1326 audit(1762103257.579:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15557 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 887.666415][ T37] audit: type=1326 audit(1762103257.579:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15557 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 887.666457][ T37] audit: type=1326 audit(1762103257.579:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15557 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 887.666907][ T37] audit: type=1326 audit(1762103257.579:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15557 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 887.667548][ T37] audit: type=1326 audit(1762103257.579:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15557 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 887.672605][ T37] audit: type=1326 audit(1762103257.579:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15557 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 887.672902][ T37] audit: type=1326 audit(1762103257.589:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15557 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 887.673447][ T37] audit: type=1326 audit(1762103257.589:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15557 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 887.707265][T15564] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 887.870432][ T5889] usb 5-1: device descriptor read/64, error -71 [ 888.109488][ T5889] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 888.241405][ T10] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 888.241489][ T5889] usb 5-1: device descriptor read/64, error -71 [ 888.349854][ T5889] usb usb5-port1: attempt power cycle [ 888.412143][ T10] usb 4-1: config 4 has an invalid interface number: 63 but max is 1 [ 888.412172][ T10] usb 4-1: config 4 has an invalid interface number: 97 but max is 1 [ 888.412194][ T10] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 888.412215][ T10] usb 4-1: config 4 has no interface number 0 [ 888.412233][ T10] usb 4-1: config 4 has no interface number 1 [ 888.412294][ T10] usb 4-1: config 4 interface 63 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 888.412345][ T10] usb 4-1: config 4 interface 97 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 888.412374][ T10] usb 4-1: config 4 interface 63 has no altsetting 0 [ 888.412393][ T10] usb 4-1: config 4 interface 97 has no altsetting 0 [ 888.415601][ T10] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=2c.2c [ 888.415631][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.415652][ T10] usb 4-1: Product: syz [ 888.415668][ T10] usb 4-1: Manufacturer: syz [ 888.415683][ T10] usb 4-1: SerialNumber: syz [ 888.721372][ T5999] usb 4-1: USB disconnect, device number 55 [ 888.799366][ T5889] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 888.849896][ T5889] usb 5-1: device descriptor read/8, error -71 [ 889.089424][ T5889] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 889.110409][ T5889] usb 5-1: device descriptor read/8, error -71 [ 889.219612][ T5889] usb usb5-port1: unable to enumerate USB device [ 890.170910][ C1] vkms_vblank_simulate: vblank timer overrun [ 890.428440][ C1] vkms_vblank_simulate: vblank timer overrun [ 891.281492][ C1] vkms_vblank_simulate: vblank timer overrun [ 891.674464][ C1] vkms_vblank_simulate: vblank timer overrun [ 891.676698][T15622] FAULT_INJECTION: forcing a failure. [ 891.676698][T15622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.676753][T15622] CPU: 1 UID: 0 PID: 15622 Comm: syz.1.3154 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 891.676775][T15622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 891.676786][T15622] Call Trace: [ 891.676794][T15622] [ 891.676803][T15622] dump_stack_lvl+0x189/0x250 [ 891.676833][T15622] ? __pfx____ratelimit+0x10/0x10 [ 891.676856][T15622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 891.676882][T15622] ? __pfx__printk+0x10/0x10 [ 891.676904][T15622] ? __might_fault+0xb0/0x130 [ 891.676939][T15622] should_fail_ex+0x46c/0x600 [ 891.676968][T15622] _copy_from_user+0x2d/0xb0 [ 891.676989][T15622] __sys_bpf+0x1e3/0x860 [ 891.677015][T15622] ? __pfx___sys_bpf+0x10/0x10 [ 891.677035][T15622] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 891.677071][T15622] ? ksys_write+0x230/0x260 [ 891.677096][T15622] ? __pfx_ksys_write+0x10/0x10 [ 891.677123][T15622] __x64_sys_bpf+0x7c/0x90 [ 891.677146][T15622] do_syscall_64+0xfa/0xfa0 [ 891.677168][T15622] ? lockdep_hardirqs_on+0x9c/0x150 [ 891.677190][T15622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.677208][T15622] ? clear_bhb_loop+0x60/0xb0 [ 891.677231][T15622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.677248][T15622] RIP: 0033:0x7f89f3b6efc9 [ 891.677265][T15622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.677282][T15622] RSP: 002b:00007f89f1dce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 891.677302][T15622] RAX: ffffffffffffffda RBX: 00007f89f3dc5fa0 RCX: 00007f89f3b6efc9 [ 891.677316][T15622] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 891.677329][T15622] RBP: 00007f89f1dce090 R08: 0000000000000000 R09: 0000000000000000 [ 891.677341][T15622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.677353][T15622] R13: 00007f89f3dc6038 R14: 00007f89f3dc5fa0 R15: 00007ffdce9865a8 [ 891.677384][T15622] [ 891.854922][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.784236][ C1] vkms_vblank_simulate: vblank timer overrun [ 893.022642][ C1] vkms_vblank_simulate: vblank timer overrun [ 893.906924][T15632] FAULT_INJECTION: forcing a failure. [ 893.906924][T15632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.906947][T15632] CPU: 1 UID: 0 PID: 15632 Comm: syz.1.3156 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 893.906960][T15632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 893.906967][T15632] Call Trace: [ 893.906972][T15632] [ 893.906977][T15632] dump_stack_lvl+0x189/0x250 [ 893.906998][T15632] ? __pfx____ratelimit+0x10/0x10 [ 893.907013][T15632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 893.907029][T15632] ? __pfx__printk+0x10/0x10 [ 893.907042][T15632] ? __might_fault+0xb0/0x130 [ 893.907063][T15632] should_fail_ex+0x46c/0x600 [ 893.907081][T15632] _copy_from_iter+0x1de/0x1790 [ 893.907101][T15632] ? kmalloc_reserve+0xbd/0x290 [ 893.907112][T15632] ? rcu_is_watching+0x15/0xb0 [ 893.907123][T15632] ? kmalloc_reserve+0xbd/0x290 [ 893.907133][T15632] ? __alloc_skb+0x112/0x2d0 [ 893.907143][T15632] ? __pfx__copy_from_iter+0x10/0x10 [ 893.907160][T15632] ? __build_skb_around+0x262/0x3f0 [ 893.907173][T15632] ? netlink_sendmsg+0x642/0xb30 [ 893.907184][T15632] ? skb_put+0x11b/0x210 [ 893.907197][T15632] netlink_sendmsg+0x6b2/0xb30 [ 893.907207][T15632] ? is_bpf_text_address+0x26/0x2b0 [ 893.907228][T15632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.907243][T15632] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 893.907258][T15632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.907270][T15632] __sock_sendmsg+0x21c/0x270 [ 893.907287][T15632] ____sys_sendmsg+0x508/0x820 [ 893.907303][T15632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.907320][T15632] ? import_iovec+0x74/0xa0 [ 893.907333][T15632] ___sys_sendmsg+0x21f/0x2a0 [ 893.907347][T15632] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.907378][T15632] ? __fget_files+0x2a/0x420 [ 893.907392][T15632] ? __fget_files+0x3a6/0x420 [ 893.907412][T15632] __x64_sys_sendmsg+0x1a1/0x260 [ 893.907425][T15632] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 893.907443][T15632] ? __pfx_ksys_write+0x10/0x10 [ 893.907458][T15632] ? do_syscall_64+0xbe/0xfa0 [ 893.907474][T15632] do_syscall_64+0xfa/0xfa0 [ 893.907487][T15632] ? lockdep_hardirqs_on+0x9c/0x150 [ 893.907501][T15632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.907511][T15632] ? clear_bhb_loop+0x60/0xb0 [ 893.907523][T15632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.907534][T15632] RIP: 0033:0x7f89f3b6efc9 [ 893.907549][T15632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.907559][T15632] RSP: 002b:00007f89f1dce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 893.907571][T15632] RAX: ffffffffffffffda RBX: 00007f89f3dc5fa0 RCX: 00007f89f3b6efc9 [ 893.907579][T15632] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 893.907585][T15632] RBP: 00007f89f1dce090 R08: 0000000000000000 R09: 0000000000000000 [ 893.907592][T15632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.907598][T15632] R13: 00007f89f3dc6038 R14: 00007f89f3dc5fa0 R15: 00007ffdce9865a8 [ 893.907615][T15632] [ 894.409018][ T10] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 894.774935][ T10] usb 4-1: config 4 has an invalid interface number: 63 but max is 1 [ 894.775410][ T10] usb 4-1: config 4 has an invalid interface number: 97 but max is 1 [ 894.775598][ T10] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 894.776127][ T10] usb 4-1: config 4 has no interface number 0 [ 894.776541][ T10] usb 4-1: config 4 has no interface number 1 [ 894.792769][ T10] usb 4-1: config 4 interface 63 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 894.797942][ T10] usb 4-1: config 4 interface 97 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 894.798499][ T10] usb 4-1: config 4 interface 63 has no altsetting 0 [ 894.798763][ T10] usb 4-1: config 4 interface 97 has no altsetting 0 [ 894.967503][ T10] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=2c.2c [ 894.974457][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.975307][ T10] usb 4-1: Product: syz [ 894.975556][ T10] usb 4-1: Manufacturer: syz [ 894.975752][ T10] usb 4-1: SerialNumber: syz [ 895.402344][ T6685] usb 4-1: USB disconnect, device number 56 [ 896.138873][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 896.236528][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3164'. [ 896.268943][ T10] usb 5-1: device descriptor read/64, error -71 [ 896.323998][T15666] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3166'. [ 896.484365][T15666] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.508887][ T10] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 896.966941][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.080188][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.097934][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.214469][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.388618][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.448789][ T10] usb 5-1: device descriptor read/64, error -71 [ 897.492568][T15684] netlink: 'syz.6.3172': attribute type 72 has an invalid length. [ 897.492590][T15684] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3172'. [ 897.559336][ T10] usb usb5-port1: attempt power cycle [ 897.899120][ T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 897.919560][ T10] usb 5-1: device descriptor read/8, error -71 [ 898.158793][ T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 898.179546][ T10] usb 5-1: device descriptor read/8, error -71 [ 898.289595][ T10] usb usb5-port1: unable to enumerate USB device [ 898.351076][T11893] block nbd3: Receive control failed (result -32) [ 898.608684][ C0] vkms_vblank_simulate: vblank timer overrun [ 898.640453][T15677] block nbd3: shutting down sockets [ 898.836378][ C0] vkms_vblank_simulate: vblank timer overrun [ 898.871551][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.448621][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.705399][ C0] vkms_vblank_simulate: vblank timer overrun [ 900.864186][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.009097][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.813076][T15725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 901.833482][T15725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 901.835300][T15725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 901.836958][T15725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 901.838584][T15725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 902.566144][T15728] IPVS: length: 139 != 8 [ 902.653581][T15719] lo speed is unknown, defaulting to 1000 [ 902.902359][T15734] ALSA: seq fatal error: cannot create timer (-22) [ 902.942604][T15734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3189'. [ 903.299140][T15719] chnl_net:caif_netlink_parms(): no params data found [ 904.069871][T11893] Bluetooth: hci4: command tx timeout [ 906.359187][T11893] Bluetooth: hci4: command tx timeout [ 906.734730][T15787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 908.263533][T15809] FAULT_INJECTION: forcing a failure. [ 908.263533][T15809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.263568][T15809] CPU: 1 UID: 0 PID: 15809 Comm: syz.6.3214 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 908.263591][T15809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 908.263603][T15809] Call Trace: [ 908.263612][T15809] [ 908.263621][T15809] dump_stack_lvl+0x189/0x250 [ 908.263654][T15809] ? __pfx____ratelimit+0x10/0x10 [ 908.263678][T15809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 908.263706][T15809] ? __pfx__printk+0x10/0x10 [ 908.263729][T15809] ? __might_fault+0xb0/0x130 [ 908.263767][T15809] should_fail_ex+0x46c/0x600 [ 908.263798][T15809] _copy_from_iter+0x1de/0x1790 [ 908.263832][T15809] ? kmalloc_reserve+0xbd/0x290 [ 908.263851][T15809] ? rcu_is_watching+0x15/0xb0 [ 908.263873][T15809] ? kmalloc_reserve+0xbd/0x290 [ 908.263890][T15809] ? __alloc_skb+0x112/0x2d0 [ 908.263910][T15809] ? __pfx__copy_from_iter+0x10/0x10 [ 908.263940][T15809] ? __build_skb_around+0x262/0x3f0 [ 908.263964][T15809] ? netlink_sendmsg+0x642/0xb30 [ 908.263984][T15809] ? skb_put+0x11b/0x210 [ 908.264008][T15809] netlink_sendmsg+0x6b2/0xb30 [ 908.264027][T15809] ? is_bpf_text_address+0x26/0x2b0 [ 908.264063][T15809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.264093][T15809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 908.264118][T15809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.264140][T15809] __sock_sendmsg+0x21c/0x270 [ 908.264169][T15809] ____sys_sendmsg+0x508/0x820 [ 908.264197][T15809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 908.264229][T15809] ? import_iovec+0x74/0xa0 [ 908.264254][T15809] ___sys_sendmsg+0x21f/0x2a0 [ 908.264280][T15809] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.264341][T15809] ? __fget_files+0x2a/0x420 [ 908.264365][T15809] ? __fget_files+0x3a6/0x420 [ 908.264401][T15809] __x64_sys_sendmsg+0x1a1/0x260 [ 908.264426][T15809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 908.264474][T15809] ? __pfx_ksys_write+0x10/0x10 [ 908.264501][T15809] ? do_syscall_64+0xbe/0xfa0 [ 908.264530][T15809] do_syscall_64+0xfa/0xfa0 [ 908.264552][T15809] ? lockdep_hardirqs_on+0x9c/0x150 [ 908.264576][T15809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.264596][T15809] ? clear_bhb_loop+0x60/0xb0 [ 908.264619][T15809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.264638][T15809] RIP: 0033:0x7f03ec48efc9 [ 908.264656][T15809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.264673][T15809] RSP: 002b:00007f03ea6ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.264695][T15809] RAX: ffffffffffffffda RBX: 00007f03ec6e5fa0 RCX: 00007f03ec48efc9 [ 908.264710][T15809] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 908.264724][T15809] RBP: 00007f03ea6ee090 R08: 0000000000000000 R09: 0000000000000000 [ 908.264737][T15809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.264750][T15809] R13: 00007f03ec6e6038 R14: 00007f03ec6e5fa0 R15: 00007ffcf2a67408 [ 908.264784][T15809] [ 908.378167][T11893] Bluetooth: hci4: command tx timeout [ 908.390338][T15810] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 908.643129][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.643173][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 908.711334][T15815] overlayfs: missing 'lowerdir' [ 908.894326][T15821] FAULT_INJECTION: forcing a failure. [ 908.894326][T15821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.894360][T15821] CPU: 1 UID: 0 PID: 15821 Comm: syz.1.3218 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 908.894381][T15821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 908.894392][T15821] Call Trace: [ 908.894401][T15821] [ 908.894410][T15821] dump_stack_lvl+0x189/0x250 [ 908.894441][T15821] ? __pfx____ratelimit+0x10/0x10 [ 908.894466][T15821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 908.894493][T15821] ? __pfx__printk+0x10/0x10 [ 908.894516][T15821] ? __might_fault+0xb0/0x130 [ 908.894553][T15821] should_fail_ex+0x46c/0x600 [ 908.894583][T15821] _copy_from_user+0x2d/0xb0 [ 908.894604][T15821] ___sys_sendmsg+0x158/0x2a0 [ 908.894630][T15821] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.894690][T15821] ? __fget_files+0x2a/0x420 [ 908.894714][T15821] ? __fget_files+0x3a6/0x420 [ 908.894749][T15821] __sys_sendmmsg+0x22d/0x430 [ 908.894777][T15821] ? __pfx___sys_sendmmsg+0x10/0x10 [ 908.894810][T15821] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 908.894848][T15821] ? ksys_write+0x230/0x260 [ 908.894874][T15821] ? __pfx_ksys_write+0x10/0x10 [ 908.894902][T15821] __x64_sys_sendmmsg+0xa0/0xc0 [ 908.894926][T15821] do_syscall_64+0xfa/0xfa0 [ 908.894950][T15821] ? lockdep_hardirqs_on+0x9c/0x150 [ 908.894973][T15821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.894992][T15821] ? clear_bhb_loop+0x60/0xb0 [ 908.895015][T15821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.895034][T15821] RIP: 0033:0x7f89f3b6efc9 [ 908.895051][T15821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.895067][T15821] RSP: 002b:00007f89f1dce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 908.895089][T15821] RAX: ffffffffffffffda RBX: 00007f89f3dc5fa0 RCX: 00007f89f3b6efc9 [ 908.895104][T15821] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000003 [ 908.895117][T15821] RBP: 00007f89f1dce090 R08: 0000000000000000 R09: 0000000000000000 [ 908.895152][T15821] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 908.895164][T15821] R13: 00007f89f3dc6038 R14: 00007f89f3dc5fa0 R15: 00007ffdce9865a8 [ 908.895197][T15821] [ 910.461630][T11893] Bluetooth: hci4: command tx timeout [ 910.484480][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.484516][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 910.591089][T15719] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.591245][T15719] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.591473][T15719] bridge_slave_0: entered allmulticast mode [ 910.594383][T15719] bridge_slave_0: entered promiscuous mode [ 910.619726][T15719] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.619858][T15719] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.620111][T15719] bridge_slave_1: entered allmulticast mode [ 910.630069][T15719] bridge_slave_1: entered promiscuous mode [ 910.771723][T15845] overlayfs: failed to clone lowerpath [ 910.797519][T15847] overlayfs: missing 'lowerdir' [ 910.944300][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 910.944319][ T37] audit: type=1326 audit(1762103280.861:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15850 comm="syz.6.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03ec485e67 code=0x7ffc0000 [ 910.944654][ T37] audit: type=1326 audit(1762103280.861:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15850 comm="syz.6.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f03ec42b099 code=0x7ffc0000 [ 910.944887][ T37] audit: type=1326 audit(1762103280.861:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15850 comm="syz.6.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ec48efc9 code=0x7ffc0000 [ 910.946427][ T37] audit: type=1326 audit(1762103280.861:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15850 comm="syz.6.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03ec485e67 code=0x7ffc0000 [ 910.946812][ T37] audit: type=1326 audit(1762103280.861:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15850 comm="syz.6.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f03ec42b099 code=0x7ffc0000 [ 910.947005][ T37] audit: type=1326 audit(1762103280.861:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15850 comm="syz.6.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f03ec48efc9 code=0x7ffc0000 [ 910.947397][ T37] audit: type=1326 audit(1762103280.861:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15850 comm="syz.6.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03ec485e67 code=0x7ffc0000 [ 910.947664][ T37] audit: type=1326 audit(1762103280.861:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15850 comm="syz.6.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f03ec42b099 code=0x7ffc0000 [ 910.958109][ T37] audit: type=1326 audit(1762103280.861:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15850 comm="syz.6.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ec48efc9 code=0x7ffc0000 [ 910.958171][ T37] audit: type=1326 audit(1762103280.871:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15850 comm="syz.6.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03ec485e67 code=0x7ffc0000 [ 911.151353][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.151389][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 911.188600][T15854] overlayfs: failed to resolve './file1': -2 [ 911.292605][T15856] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3232'. [ 911.589030][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 911.590767][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.590787][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 912.644987][T15719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.692955][T15719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.788063][T15725] Bluetooth: hci2: command 0x1003 tx timeout [ 912.788438][T11893] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 912.996211][T15875] overlayfs: missing 'lowerdir' [ 913.097526][T15719] team0: Port device team_slave_0 added [ 913.109941][T15719] team0: Port device team_slave_1 added [ 913.341850][T15719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.341865][T15719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.341884][T15719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.344324][T15719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.344339][T15719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.344366][T15719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.618257][T15886] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3243'. [ 913.760506][T15719] hsr_slave_0: entered promiscuous mode [ 913.761942][T15719] hsr_slave_1: entered promiscuous mode [ 913.762913][T15719] debugfs: 'hsr0' already exists in 'hsr' [ 913.762936][T15719] Cannot create hsr debugfs directory [ 913.850020][T15891] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3245'. [ 914.019875][T15899] FAULT_INJECTION: forcing a failure. [ 914.019875][T15899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.019911][T15899] CPU: 0 UID: 0 PID: 15899 Comm: syz.1.3250 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 914.019934][T15899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 914.019944][T15899] Call Trace: [ 914.019952][T15899] [ 914.019961][T15899] dump_stack_lvl+0x189/0x250 [ 914.019993][T15899] ? __pfx____ratelimit+0x10/0x10 [ 914.020017][T15899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 914.020045][T15899] ? __pfx__printk+0x10/0x10 [ 914.020068][T15899] ? __might_fault+0xb0/0x130 [ 914.020105][T15899] should_fail_ex+0x46c/0x600 [ 914.020135][T15899] _copy_from_iter+0x1de/0x1790 [ 914.020168][T15899] ? kmalloc_reserve+0xbd/0x290 [ 914.020188][T15899] ? rcu_is_watching+0x15/0xb0 [ 914.020209][T15899] ? kmalloc_reserve+0xbd/0x290 [ 914.020227][T15899] ? __alloc_skb+0x112/0x2d0 [ 914.020246][T15899] ? __pfx__copy_from_iter+0x10/0x10 [ 914.020276][T15899] ? __build_skb_around+0x262/0x3f0 [ 914.020300][T15899] ? netlink_sendmsg+0x642/0xb30 [ 914.020319][T15899] ? skb_put+0x11b/0x210 [ 914.020343][T15899] netlink_sendmsg+0x6b2/0xb30 [ 914.020362][T15899] ? is_bpf_text_address+0x26/0x2b0 [ 914.020398][T15899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.020434][T15899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 914.020459][T15899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.020481][T15899] __sock_sendmsg+0x21c/0x270 [ 914.020511][T15899] ____sys_sendmsg+0x508/0x820 [ 914.020539][T15899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 914.020571][T15899] ? import_iovec+0x74/0xa0 [ 914.020596][T15899] ___sys_sendmsg+0x21f/0x2a0 [ 914.020621][T15899] ? __pfx____sys_sendmsg+0x10/0x10 [ 914.020681][T15899] ? __fget_files+0x2a/0x420 [ 914.020711][T15899] ? __fget_files+0x3a6/0x420 [ 914.020746][T15899] __x64_sys_sendmsg+0x1a1/0x260 [ 914.020772][T15899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 914.020805][T15899] ? __pfx_ksys_write+0x10/0x10 [ 914.020833][T15899] ? do_syscall_64+0xbe/0xfa0 [ 914.020860][T15899] do_syscall_64+0xfa/0xfa0 [ 914.020883][T15899] ? lockdep_hardirqs_on+0x9c/0x150 [ 914.020907][T15899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.020926][T15899] ? clear_bhb_loop+0x60/0xb0 [ 914.020949][T15899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.020968][T15899] RIP: 0033:0x7f89f3b6efc9 [ 914.020986][T15899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.021002][T15899] RSP: 002b:00007f89f1dce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.021023][T15899] RAX: ffffffffffffffda RBX: 00007f89f3dc5fa0 RCX: 00007f89f3b6efc9 [ 914.021039][T15899] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 914.021052][T15899] RBP: 00007f89f1dce090 R08: 0000000000000000 R09: 0000000000000000 [ 914.021065][T15899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.021077][T15899] R13: 00007f89f3dc6038 R14: 00007f89f3dc5fa0 R15: 00007ffdce9865a8 [ 914.021111][T15899] [ 914.038125][ T68] bridge_slave_1: left allmulticast mode [ 914.038154][ T68] bridge_slave_1: left promiscuous mode [ 914.038403][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.132930][ T68] bridge_slave_0: left allmulticast mode [ 914.132961][ T68] bridge_slave_0: left promiscuous mode [ 914.133228][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.552748][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.704470][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.101291][T15920] ALSA: seq fatal error: cannot create timer (-22) [ 916.277237][T15926] FAULT_INJECTION: forcing a failure. [ 916.277237][T15926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.277277][T15926] CPU: 0 UID: 0 PID: 15926 Comm: syz.6.3256 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 916.277312][T15926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 916.277336][T15926] Call Trace: [ 916.277353][T15926] [ 916.277372][T15926] dump_stack_lvl+0x189/0x250 [ 916.277438][T15926] ? __pfx____ratelimit+0x10/0x10 [ 916.277471][T15926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 916.277498][T15926] ? __pfx__printk+0x10/0x10 [ 916.277534][T15926] should_fail_ex+0x46c/0x600 [ 916.277565][T15926] _copy_to_user+0x31/0xb0 [ 916.277593][T15926] bpf_test_finish+0x1ab/0x700 [ 916.277620][T15926] ? __pfx_bpf_test_finish+0x10/0x10 [ 916.277653][T15926] bpf_prog_test_run_flow_dissector+0x44e/0x5c0 [ 916.277689][T15926] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 916.277714][T15926] ? __fget_files+0x2a/0x420 [ 916.277747][T15926] ? __fget_files+0x2a/0x420 [ 916.277777][T15926] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 916.277800][T15926] bpf_prog_test_run+0x2cd/0x340 [ 916.277832][T15926] __sys_bpf+0x562/0x860 [ 916.277859][T15926] ? __pfx___sys_bpf+0x10/0x10 [ 916.277881][T15926] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 916.277921][T15926] ? ksys_write+0x230/0x260 [ 916.277947][T15926] ? __pfx_ksys_write+0x10/0x10 [ 916.277977][T15926] __x64_sys_bpf+0x7c/0x90 [ 916.278001][T15926] do_syscall_64+0xfa/0xfa0 [ 916.278024][T15926] ? lockdep_hardirqs_on+0x9c/0x150 [ 916.278048][T15926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.278068][T15926] ? clear_bhb_loop+0x60/0xb0 [ 916.278092][T15926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.278110][T15926] RIP: 0033:0x7f03ec48efc9 [ 916.278129][T15926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.278147][T15926] RSP: 002b:00007f03ea6ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 916.278169][T15926] RAX: ffffffffffffffda RBX: 00007f03ec6e5fa0 RCX: 00007f03ec48efc9 [ 916.278184][T15926] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 916.278198][T15926] RBP: 00007f03ea6ee090 R08: 0000000000000000 R09: 0000000000000000 [ 916.278210][T15926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.278223][T15926] R13: 00007f03ec6e6038 R14: 00007f03ec6e5fa0 R15: 00007ffcf2a67408 [ 916.278257][T15926] [ 916.433210][T15928] binder: 15927:15928 unknown command 0 [ 916.433237][T15928] binder: 15927:15928 ioctl c0306201 200000000080 returned -22 [ 917.347260][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.437904][ T10] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 917.604998][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.620596][ T10] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 917.620666][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.698310][ T10] usb 7-1: config 0 descriptor?? [ 918.480982][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.792040][ T10] ath6kl: Failed to submit usb control message: -110 [ 918.792295][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 918.794237][ T10] ath6kl: Unable to send get target info: -110 [ 918.859138][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.859592][ T10] ath6kl: Failed to init ath6kl core: -110 [ 918.861752][ T10] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 919.297810][ C0] vkms_vblank_simulate: vblank timer overrun [ 919.347967][ C0] vkms_vblank_simulate: vblank timer overrun [ 919.679406][ T10] usb 7-1: USB disconnect, device number 36 [ 919.750621][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.004868][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.276340][ T37] kauditd_printk_skb: 169 callbacks suppressed [ 920.276358][ T37] audit: type=1326 audit(1762103290.191:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15944 comm="syz.5.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effed36efc9 code=0x7ffc0000 [ 920.276533][ T37] audit: type=1326 audit(1762103290.191:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15944 comm="syz.5.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effed36efc9 code=0x7ffc0000 [ 920.315863][ T37] audit: type=1326 audit(1762103290.231:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15944 comm="syz.5.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7effed36efc9 code=0x7ffc0000 [ 920.315917][ T37] audit: type=1326 audit(1762103290.231:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15944 comm="syz.5.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effed36efc9 code=0x7ffc0000 [ 920.315959][ T37] audit: type=1326 audit(1762103290.231:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15944 comm="syz.5.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effed36efc9 code=0x7ffc0000 [ 920.315999][ T37] audit: type=1326 audit(1762103290.231:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15944 comm="syz.5.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7effed36efc9 code=0x7ffc0000 [ 920.316721][ T37] audit: type=1326 audit(1762103290.231:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15944 comm="syz.5.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effed36efc9 code=0x7ffc0000 [ 920.330981][ T37] audit: type=1326 audit(1762103290.231:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15944 comm="syz.5.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effed36efc9 code=0x7ffc0000 [ 920.331032][ T37] audit: type=1326 audit(1762103290.231:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15944 comm="syz.5.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7effed36efc9 code=0x7ffc0000 [ 920.331074][ T37] audit: type=1326 audit(1762103290.241:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15944 comm="syz.5.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effed36efc9 code=0x7ffc0000 [ 920.590556][ T68] dvmrp0 (unregistering): left allmulticast mode [ 920.616234][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.747970][ T68] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 921.937924][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.997914][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.067919][ T68] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 922.113406][ T68] bond0 (unregistering): Released all slaves [ 922.126814][ T68] bond1 (unregistering): Released all slaves [ 922.142694][ T68] bond2 (unregistering): Released all slaves [ 922.157056][ T68] bond3 (unregistering): Released all slaves [ 922.171642][ T68] bond4 (unregistering): Released all slaves [ 922.185092][ T68] bond5 (unregistering): Released all slaves [ 922.245024][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3249'. [ 922.253839][T15920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3254'. [ 923.311538][T15978] overlayfs: missing 'workdir' [ 923.572354][ T3698] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.574012][T15986] ALSA: seq fatal error: cannot create timer (-22) [ 923.604780][ T3698] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.604894][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3278'. [ 923.638627][ T3698] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.679447][ T3698] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.582724][T16011] overlayfs: missing 'workdir' [ 924.760414][ T68] hsr_slave_0: left promiscuous mode [ 924.802296][ T68] hsr_slave_1: left promiscuous mode [ 924.803274][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.803299][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.850765][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.850791][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.953902][ T68] veth1_macvtap: left promiscuous mode [ 924.954014][ T68] veth0_macvtap: left promiscuous mode [ 924.968971][ T68] veth1_vlan: left promiscuous mode [ 924.969158][ T68] veth0_vlan: left promiscuous mode [ 925.067278][ T5820] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 925.075684][T16021] ALSA: seq fatal error: cannot create timer (-22) [ 925.226183][ T5820] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 925.226216][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.253055][ T5820] usb 7-1: config 0 descriptor?? [ 925.271077][ T5820] cp210x 7-1:0.0: cp210x converter detected [ 925.696383][ T5820] usb 7-1: cp210x converter now attached to ttyUSB0 [ 925.890399][T16027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.890839][T16027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.017637][ T68] team0 (unregistering): Port device team_slave_1 removed [ 928.248069][ T68] team0 (unregistering): Port device team_slave_0 removed [ 930.558667][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3290'. [ 930.674432][ T6685] usb 7-1: USB disconnect, device number 37 [ 930.697982][ T6685] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 930.698497][ T6685] cp210x 7-1:0.0: device disconnected [ 930.797350][ T37] kauditd_printk_skb: 79 callbacks suppressed [ 930.797368][ T37] audit: type=1326 audit(1762103300.722:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16035 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 930.797798][ T37] audit: type=1326 audit(1762103300.722:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16035 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 930.798083][ T37] audit: type=1326 audit(1762103300.722:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16035 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 930.798370][ T37] audit: type=1326 audit(1762103300.722:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16035 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 930.798722][ T37] audit: type=1326 audit(1762103300.722:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16035 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 930.806151][ T37] audit: type=1326 audit(1762103300.722:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16035 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 930.806536][ T37] audit: type=1326 audit(1762103300.722:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16035 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 930.806962][ T37] audit: type=1326 audit(1762103300.722:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16035 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 930.807479][ T37] audit: type=1326 audit(1762103300.732:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16035 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 930.807856][ T37] audit: type=1326 audit(1762103300.732:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16035 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 931.666034][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.666107][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.911916][T16049] overlayfs: missing 'workdir' [ 934.686086][T16063] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3303'. [ 934.691829][T16063] overlayfs: failed to clone upperpath [ 936.186102][T16079] overlayfs: missing 'lowerdir' [ 936.417476][T15719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 937.017672][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.150367][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.311115][T15719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 937.367393][T15719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 937.665544][T15719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 937.880406][T16097] netlink: 'syz.1.3309': attribute type 1 has an invalid length. [ 937.880479][T16097] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3309'. [ 937.880546][T16097] NCSI netlink: No device for ifindex 0 [ 938.113705][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.573233][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.709986][T16106] FAULT_INJECTION: forcing a failure. [ 938.709986][T16106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.710021][T16106] CPU: 1 UID: 0 PID: 16106 Comm: syz.3.3315 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 938.710042][T16106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 938.710055][T16106] Call Trace: [ 938.710063][T16106] [ 938.710072][T16106] dump_stack_lvl+0x189/0x250 [ 938.710105][T16106] ? __pfx____ratelimit+0x10/0x10 [ 938.710129][T16106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 938.710154][T16106] ? __pfx__printk+0x10/0x10 [ 938.710177][T16106] ? __might_fault+0xb0/0x130 [ 938.710213][T16106] should_fail_ex+0x46c/0x600 [ 938.710243][T16106] _copy_from_iter+0x1de/0x1790 [ 938.710276][T16106] ? kmalloc_reserve+0xbd/0x290 [ 938.710295][T16106] ? rcu_is_watching+0x15/0xb0 [ 938.710315][T16106] ? kmalloc_reserve+0xbd/0x290 [ 938.710332][T16106] ? __alloc_skb+0x112/0x2d0 [ 938.710351][T16106] ? __pfx__copy_from_iter+0x10/0x10 [ 938.710378][T16106] ? __build_skb_around+0x262/0x3f0 [ 938.710401][T16106] ? netlink_sendmsg+0x642/0xb30 [ 938.710427][T16106] ? skb_put+0x11b/0x210 [ 938.710447][T16106] netlink_sendmsg+0x6b2/0xb30 [ 938.710464][T16106] ? is_bpf_text_address+0x26/0x2b0 [ 938.710500][T16106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 938.710529][T16106] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 938.710554][T16106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 938.710575][T16106] __sock_sendmsg+0x21c/0x270 [ 938.710604][T16106] ____sys_sendmsg+0x508/0x820 [ 938.710631][T16106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 938.710662][T16106] ? import_iovec+0x74/0xa0 [ 938.710687][T16106] ___sys_sendmsg+0x21f/0x2a0 [ 938.710711][T16106] ? __pfx____sys_sendmsg+0x10/0x10 [ 938.710771][T16106] ? __fget_files+0x2a/0x420 [ 938.710795][T16106] ? __fget_files+0x3a6/0x420 [ 938.710830][T16106] __x64_sys_sendmsg+0x1a1/0x260 [ 938.710854][T16106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 938.710886][T16106] ? __pfx_ksys_write+0x10/0x10 [ 938.710912][T16106] ? do_syscall_64+0xbe/0xfa0 [ 938.710940][T16106] do_syscall_64+0xfa/0xfa0 [ 938.710961][T16106] ? lockdep_hardirqs_on+0x9c/0x150 [ 938.710984][T16106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.711004][T16106] ? clear_bhb_loop+0x60/0xb0 [ 938.711027][T16106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.711046][T16106] RIP: 0033:0x7fc04d3aefc9 [ 938.711063][T16106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 938.711079][T16106] RSP: 002b:00007fc04b616038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.711099][T16106] RAX: ffffffffffffffda RBX: 00007fc04d605fa0 RCX: 00007fc04d3aefc9 [ 938.711114][T16106] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 938.711127][T16106] RBP: 00007fc04b616090 R08: 0000000000000000 R09: 0000000000000000 [ 938.711140][T16106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.711153][T16106] R13: 00007fc04d606038 R14: 00007fc04d605fa0 R15: 00007ffee8ded3a8 [ 938.711184][T16106] [ 938.720859][T16105] FAULT_INJECTION: forcing a failure. [ 938.720859][T16105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.720895][T16105] CPU: 0 UID: 0 PID: 16105 Comm: syz.1.3314 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 938.720916][T16105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 938.720928][T16105] Call Trace: [ 938.720936][T16105] [ 938.720945][T16105] dump_stack_lvl+0x189/0x250 [ 938.720975][T16105] ? __pfx____ratelimit+0x10/0x10 [ 938.720999][T16105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 938.721024][T16105] ? __pfx__printk+0x10/0x10 [ 938.721047][T16105] ? __might_fault+0xb0/0x130 [ 938.721084][T16105] should_fail_ex+0x46c/0x600 [ 938.721113][T16105] _copy_from_user+0x2d/0xb0 [ 938.721136][T16105] vmemdup_user+0x5e/0xd0 [ 938.721158][T16105] path_setxattrat+0x244/0x3a0 [ 938.721188][T16105] ? __pfx_path_setxattrat+0x10/0x10 [ 938.721233][T16105] ? ksys_write+0x230/0x260 [ 938.721258][T16105] ? __pfx_ksys_write+0x10/0x10 [ 938.721284][T16105] __x64_sys_lsetxattr+0xbf/0xe0 [ 938.721313][T16105] do_syscall_64+0xfa/0xfa0 [ 938.721335][T16105] ? lockdep_hardirqs_on+0x9c/0x150 [ 938.721359][T16105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.721378][T16105] ? clear_bhb_loop+0x60/0xb0 [ 938.721401][T16105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.721419][T16105] RIP: 0033:0x7f89f3b6efc9 [ 938.721436][T16105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 938.721452][T16105] RSP: 002b:00007f89f1dce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 938.721472][T16105] RAX: ffffffffffffffda RBX: 00007f89f3dc5fa0 RCX: 00007f89f3b6efc9 [ 938.721486][T16105] RDX: 0000200000000640 RSI: 0000200000000380 RDI: 00002000000002c0 [ 938.721499][T16105] RBP: 00007f89f1dce090 R08: 0000000000000000 R09: 0000000000000000 [ 938.721512][T16105] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 938.721524][T16105] R13: 00007f89f3dc6038 R14: 00007f89f3dc5fa0 R15: 00007ffdce9865a8 [ 938.721556][T16105] [ 939.024406][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 939.024424][ T37] audit: type=1326 audit(1762103308.942:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16113 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 939.024598][ T37] audit: type=1326 audit(1762103308.942:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16113 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 939.048280][ T37] audit: type=1326 audit(1762103308.972:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16113 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 939.051958][ T37] audit: type=1326 audit(1762103308.972:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16113 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 939.058807][ T37] audit: type=1326 audit(1762103308.982:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16113 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 939.062102][ T37] audit: type=1326 audit(1762103308.982:1596): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=16113 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 939.062151][ T37] audit: type=1326 audit(1762103308.982:1597): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=16113 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 939.062195][ T37] audit: type=1326 audit(1762103308.982:1598): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=16113 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 939.062236][ T37] audit: type=1326 audit(1762103308.982:1599): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=16113 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 939.062278][ T37] audit: type=1326 audit(1762103308.982:1600): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=16113 comm="syz.3.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04d3aefc9 code=0x7ffc0000 [ 939.377075][T15719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.501026][T15719] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.549119][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.561416][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.608008][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.608172][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.216443][ T5889] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 940.254929][ C0] vkms_vblank_simulate: vblank timer overrun [ 940.314134][T16136] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3326'. [ 940.387637][ T5889] usb 7-1: config 4 has an invalid interface number: 63 but max is 1 [ 940.387666][ T5889] usb 7-1: config 4 has an invalid interface number: 97 but max is 1 [ 940.387688][ T5889] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 940.387709][ T5889] usb 7-1: config 4 has no interface number 0 [ 940.387726][ T5889] usb 7-1: config 4 has no interface number 1 [ 940.387790][ T5889] usb 7-1: config 4 interface 63 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 940.387834][ T5889] usb 7-1: config 4 interface 97 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 940.387863][ T5889] usb 7-1: config 4 interface 63 has no altsetting 0 [ 940.387882][ T5889] usb 7-1: config 4 interface 97 has no altsetting 0 [ 940.391043][ T5889] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=2c.2c [ 940.391071][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.391092][ T5889] usb 7-1: Product: syz [ 940.391108][ T5889] usb 7-1: Manufacturer: syz [ 940.391123][ T5889] usb 7-1: SerialNumber: syz [ 940.766672][ T10] usb 7-1: USB disconnect, device number 38 [ 940.812011][T16143] FAULT_INJECTION: forcing a failure. [ 940.812011][T16143] name failslab, interval 1, probability 0, space 0, times 0 [ 940.812046][T16143] CPU: 0 UID: 0 PID: 16143 Comm: syz.3.3327 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 940.812070][T16143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 940.812082][T16143] Call Trace: [ 940.812090][T16143] [ 940.812099][T16143] dump_stack_lvl+0x189/0x250 [ 940.812131][T16143] ? __pfx____ratelimit+0x10/0x10 [ 940.812156][T16143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.812207][T16143] ? __pfx__printk+0x10/0x10 [ 940.812236][T16143] ? __pfx___might_resched+0x10/0x10 [ 940.812257][T16143] ? fs_reclaim_acquire+0x7d/0x100 [ 940.812288][T16143] should_fail_ex+0x46c/0x600 [ 940.812318][T16143] ? __alloc_skb+0x112/0x2d0 [ 940.812336][T16143] should_failslab+0xa8/0x100 [ 940.812364][T16143] ? __alloc_skb+0x112/0x2d0 [ 940.812381][T16143] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 940.812407][T16143] ? netlink_autobind+0xdb/0x300 [ 940.812439][T16143] __alloc_skb+0x112/0x2d0 [ 940.812465][T16143] netlink_sendmsg+0x5c6/0xb30 [ 940.812484][T16143] ? is_bpf_text_address+0x26/0x2b0 [ 940.812519][T16143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.812549][T16143] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 940.812575][T16143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.812597][T16143] __sock_sendmsg+0x21c/0x270 [ 940.812627][T16143] ____sys_sendmsg+0x508/0x820 [ 940.812656][T16143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 940.812688][T16143] ? import_iovec+0x74/0xa0 [ 940.812714][T16143] ___sys_sendmsg+0x21f/0x2a0 [ 940.812739][T16143] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.812799][T16143] ? __fget_files+0x2a/0x420 [ 940.812824][T16143] ? __fget_files+0x3a6/0x420 [ 940.812860][T16143] __x64_sys_sendmsg+0x1a1/0x260 [ 940.812886][T16143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 940.812919][T16143] ? __pfx_ksys_write+0x10/0x10 [ 940.812946][T16143] ? do_syscall_64+0xbe/0xfa0 [ 940.812975][T16143] do_syscall_64+0xfa/0xfa0 [ 940.812997][T16143] ? lockdep_hardirqs_on+0x9c/0x150 [ 940.813021][T16143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.813040][T16143] ? clear_bhb_loop+0x60/0xb0 [ 940.813064][T16143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.813083][T16143] RIP: 0033:0x7fc04d3aefc9 [ 940.813100][T16143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.813117][T16143] RSP: 002b:00007fc04b616038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.813139][T16143] RAX: ffffffffffffffda RBX: 00007fc04d605fa0 RCX: 00007fc04d3aefc9 [ 940.813153][T16143] RDX: 0000000008008800 RSI: 0000200000000300 RDI: 0000000000000004 [ 940.813167][T16143] RBP: 00007fc04b616090 R08: 0000000000000000 R09: 0000000000000000 [ 940.813180][T16143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.813192][T16143] R13: 00007fc04d606038 R14: 00007fc04d605fa0 R15: 00007ffee8ded3a8 [ 940.813225][T16143] [ 941.122360][T10891] ------------[ cut here ]------------ [ 941.122378][T10891] WARNING: CPU: 0 PID: 10891 at kernel/kcov.c:872 kcov_remote_start+0x5d9/0x6f0 [ 941.122425][T10891] Modules linked in: [ 941.122445][T10891] CPU: 0 UID: 0 PID: 10891 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 941.122477][T10891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 941.122494][T10891] Workqueue: events_unbound cfg80211_wiphy_work [ 941.122524][T10891] RIP: 0010:kcov_remote_start+0x5d9/0x6f0 [ 941.122554][T10891] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 41 93 ba 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 39 ab 01 09 89 c0 48 c7 c7 b8 fb a2 [ 941.122576][T10891] RSP: 0018:ffffc900089a7958 EFLAGS: 00010202 [ 941.122595][T10891] RAX: 0000000000000002 RBX: ffff888028643c00 RCX: 0000000000000000 [ 941.122611][T10891] RDX: 0000000000000000 RSI: ffffffff8b3ddd40 RDI: ffffffff8b3ddd00 [ 941.122628][T10891] RBP: ffff88803b80fc80 R08: 0000000000000000 R09: ffffffff8ac2ab41 [ 941.122645][T10891] R10: dffffc0000000000 R11: fffffbfff1dac5ef R12: ffff888035c75d08 [ 941.122663][T10891] R13: ffff88803ad907c0 R14: 0000000000000000 R15: ffff888035c75d20 [ 941.122680][T10891] FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 941.122719][T10891] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.122736][T10891] CR2: 00007f2206d78df6 CR3: 0000000026c9e000 CR4: 00000000003526f0 [ 941.122756][T10891] Call Trace: [ 941.122765][T10891] [ 941.122781][T10891] ieee80211_iface_work+0x211/0x12d0 [ 941.122825][T10891] cfg80211_wiphy_work+0x2bb/0x470 [ 941.122855][T10891] ? process_scheduled_works+0x9ef/0x17b0 [ 941.122885][T10891] process_scheduled_works+0xae1/0x17b0 [ 941.122948][T10891] ? __pfx_process_scheduled_works+0x10/0x10 [ 941.122998][T10891] worker_thread+0x8a0/0xda0 [ 941.123058][T10891] kthread+0x711/0x8a0 [ 941.123094][T10891] ? __pfx_worker_thread+0x10/0x10 [ 941.123121][T10891] ? __pfx_kthread+0x10/0x10 [ 941.123150][T10891] ? rt_spin_unlock+0x150/0x200 [ 941.123180][T10891] ? rt_spin_unlock+0x161/0x200 [ 941.123201][T10891] ? __pfx_kthread+0x10/0x10 [ 941.123230][T10891] ret_from_fork+0x4bc/0x870 [ 941.123259][T10891] ? __pfx_ret_from_fork+0x10/0x10 [ 941.123296][T10891] ? __switch_to_asm+0x39/0x70 [ 941.123319][T10891] ? __switch_to_asm+0x33/0x70 [ 941.123340][T10891] ? __pfx_kthread+0x10/0x10 [ 941.123373][T10891] ret_from_fork_asm+0x1a/0x30 [ 941.123418][T10891] [ 941.123436][T10891] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 941.123452][T10891] CPU: 0 UID: 0 PID: 10891 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 941.123483][T10891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 941.123498][T10891] Workqueue: events_unbound cfg80211_wiphy_work [ 941.123526][T10891] Call Trace: [ 941.123535][T10891] [ 941.123545][T10891] dump_stack_lvl+0x99/0x250 [ 941.123578][T10891] ? __asan_memcpy+0x40/0x70 [ 941.123604][T10891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 941.123638][T10891] ? __pfx__printk+0x10/0x10 [ 941.123683][T10891] vpanic+0x237/0x6d0 [ 941.123705][T10891] ? __pfx_vpanic+0x10/0x10 [ 941.123741][T10891] panic+0xb9/0xc0 [ 941.123762][T10891] ? __pfx_panic+0x10/0x10 [ 941.123803][T10891] __warn+0x31b/0x4b0 [ 941.123823][T10891] ? kcov_remote_start+0x5d9/0x6f0 [ 941.123855][T10891] ? kcov_remote_start+0x5d9/0x6f0 [ 941.123884][T10891] report_bug+0x2be/0x4f0 [ 941.123912][T10891] ? kcov_remote_start+0x5d9/0x6f0 [ 941.123941][T10891] ? kcov_remote_start+0x5d9/0x6f0 [ 941.123970][T10891] ? kcov_remote_start+0x5db/0x6f0 [ 941.123999][T10891] handle_bug+0x84/0x160 [ 941.124032][T10891] exc_invalid_op+0x1a/0x50 [ 941.124064][T10891] asm_exc_invalid_op+0x1a/0x20 [ 941.124085][T10891] RIP: 0010:kcov_remote_start+0x5d9/0x6f0 [ 941.124114][T10891] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 41 93 ba 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 39 ab 01 09 89 c0 48 c7 c7 b8 fb a2 [ 941.124133][T10891] RSP: 0018:ffffc900089a7958 EFLAGS: 00010202 [ 941.124152][T10891] RAX: 0000000000000002 RBX: ffff888028643c00 RCX: 0000000000000000 [ 941.124168][T10891] RDX: 0000000000000000 RSI: ffffffff8b3ddd40 RDI: ffffffff8b3ddd00 [ 941.124183][T10891] RBP: ffff88803b80fc80 R08: 0000000000000000 R09: ffffffff8ac2ab41 [ 941.124200][T10891] R10: dffffc0000000000 R11: fffffbfff1dac5ef R12: ffff888035c75d08 [ 941.124216][T10891] R13: ffff88803ad907c0 R14: 0000000000000000 R15: ffff888035c75d20 [ 941.124235][T10891] ? rt_spin_lock+0x1c1/0x3e0 [ 941.124269][T10891] ? kcov_remote_start+0xe1/0x6f0 [ 941.124302][T10891] ieee80211_iface_work+0x211/0x12d0 [ 941.124342][T10891] cfg80211_wiphy_work+0x2bb/0x470 [ 941.124373][T10891] ? process_scheduled_works+0x9ef/0x17b0 [ 941.124403][T10891] process_scheduled_works+0xae1/0x17b0 [ 941.124472][T10891] ? __pfx_process_scheduled_works+0x10/0x10 [ 941.124521][T10891] worker_thread+0x8a0/0xda0 [ 941.124581][T10891] kthread+0x711/0x8a0 [ 941.124618][T10891] ? __pfx_worker_thread+0x10/0x10 [ 941.124645][T10891] ? __pfx_kthread+0x10/0x10 [ 941.124674][T10891] ? rt_spin_unlock+0x150/0x200 [ 941.124704][T10891] ? rt_spin_unlock+0x161/0x200 [ 941.124726][T10891] ? __pfx_kthread+0x10/0x10 [ 941.124760][T10891] ret_from_fork+0x4bc/0x870 [ 941.124796][T10891] ? __pfx_ret_from_fork+0x10/0x10 [ 941.124833][T10891] ? __switch_to_asm+0x39/0x70 [ 941.124855][T10891] ? __switch_to_asm+0x33/0x70 [ 941.124875][T10891] ? __pfx_kthread+0x10/0x10 [ 941.124910][T10891] ret_from_fork_asm+0x1a/0x30 [ 941.124954][T10891] [ 941.125205][T10891] Kernel Offset: disabled