last executing test programs: 29m29.574598761s ago: executing program 32 (id=38): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080) 28m33.257588593s ago: executing program 33 (id=229): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_int(r2, 0x1, 0x10, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) write$6lowpan_control(r3, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='cmdline\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000500)=""/146, 0x92}], 0x1, 0xdffff62d, 0x0) socket$kcm(0x2d, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000001c0)={r7, 0x0, r8, 0x8000, 0x20, 0x10001, 0x1, 0x8001, 0x2, 0xff, 0x2, 0x6}) 28m28.948592703s ago: executing program 34 (id=246): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_int(r2, 0x1, 0x10, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) write$6lowpan_control(r3, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='cmdline\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000500)=""/146, 0x92}], 0x1, 0xdffff62d, 0x0) 27m45.894325912s ago: executing program 35 (id=347): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10b, &(0x7f00000003c0)={0x0, 0x334b, 0x80, 0x3, 0x805}, &(0x7f00000001c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x40000084}]}) 26m55.720027966s ago: executing program 36 (id=472): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x7}, 0x0) gettid() r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) sync() syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40000) 26m4.413241427s ago: executing program 37 (id=630): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xce, 0xf8, 0xbd, 0x8, 0xe41, 0x4142, 0xbc76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x6a, 0x2f, 0xf6, 0x0, [], [{{0x9, 0x5, 0x1, 0x8, 0x200, 0xb, 0x8, 0x64}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x118000}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 25m58.843897845s ago: executing program 38 (id=646): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xce, 0xf8, 0xbd, 0x8, 0xe41, 0x4142, 0xbc76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x6a, 0x2f, 0xf6, 0x0, [], [{{0x9, 0x5, 0x1, 0x8, 0x200, 0xb, 0x8, 0x64}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r7) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x118000}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 25m53.650099886s ago: executing program 39 (id=658): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xce, 0xf8, 0xbd, 0x8, 0xe41, 0x4142, 0xbc76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x6a, 0x2f, 0xf6, 0x0, [], [{{0x9, 0x5, 0x1, 0x8, 0x200, 0xb, 0x8, 0x64}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x118000}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 21m55.826321578s ago: executing program 40 (id=1970): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x7, @rand_addr=' \x01\x00', 0xa, 0x1}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21m31.88256974s ago: executing program 41 (id=2069): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x225e, 0x2, 0x0, 0x0) 21m27.005865932s ago: executing program 42 (id=2081): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 21m8.056854814s ago: executing program 43 (id=2130): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) 20m59.202231154s ago: executing program 44 (id=2160): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x0, 0x9, 0x73, {0x73, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd4b2f1a4a63c8489cad1c191f9313389d889e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 20m22.129259286s ago: executing program 45 (id=2336): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @loopback, 0x10000000}, 0x1c) 18m48.579514611s ago: executing program 46 (id=2762): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x7, @rand_addr=' \x01\x00', 0xa, 0x1}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00', @ANYBLOB="01000000000000000000090000003000038014"], 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17m38.690517159s ago: executing program 47 (id=3008): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x48c2, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[]) 17m0.711225136s ago: executing program 48 (id=3079): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000400)=0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) io_pgetevents(r2, 0x1, 0x0, &(0x7f0000000040), 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 16m52.004204465s ago: executing program 49 (id=3074): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16m19.875228044s ago: executing program 50 (id=3123): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xffffffffffffff29) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) write$cgroup_pressure(r1, &(0x7f0000000140)={'some', 0x20, 0x5, 0x20, 0xffffffff}, 0x2f) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xcc53, &(0x7f0000000d40)={[{@commit={'commit', 0x3d, 0x5}}, {@noquota}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@nouid32}, {@usrjquota}]}, 0x0, 0x527, &(0x7f0000000800)="$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") 14m24.988490522s ago: executing program 51 (id=3505): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 14m16.264814434s ago: executing program 2 (id=3528): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 14m14.532176984s ago: executing program 2 (id=3532): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(0x0, 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x1e, 0x1, 0x0, 0x0}], 0x1}) 14m12.782270447s ago: executing program 2 (id=3536): r0 = socket$alg(0x26, 0x5, 0x0) openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x400c80, 0x68, 0x14}, 0x18) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x3, 0x1) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0xb) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000e3c30000000001000095"], &(0x7f0000000000)='syzkaller\x00', 0xf}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 14m11.740632224s ago: executing program 2 (id=3538): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(0x0, &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010003000000000002000100", @ANYRES32=0x0, @ANYBLOB="0400000000000000100005000000000020"], 0x2c, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 14m10.714434075s ago: executing program 2 (id=3545): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, 0x0) 14m10.009614333s ago: executing program 2 (id=3546): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0x2, 0xbfe00000}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 14m8.646709832s ago: executing program 52 (id=3546): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0x2, 0xbfe00000}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 14m6.759976704s ago: executing program 6 (id=3556): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, 0x0) 14m5.043440466s ago: executing program 6 (id=3561): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x30, 0x80}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xfffffffffffffffe}, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)={0xda}) 14m4.764411743s ago: executing program 6 (id=3562): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b0000000800", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 14m4.454605555s ago: executing program 6 (id=3563): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x19a) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000200)='./bus\x00', 0x28600, 0x0, 0xbc, 0x0, &(0x7f0000000300)) lseek(0xffffffffffffffff, 0x100, 0x0) getdents(0xffffffffffffffff, 0x0, 0x7) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 14m3.716035671s ago: executing program 6 (id=3565): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r3], 0x0) 14m3.192602347s ago: executing program 6 (id=3568): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) eventfd(0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5bc, 0x0, 0x20000000000, 0x11d, 0x0, 0xffffffffffffffff, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 14m1.686041238s ago: executing program 53 (id=3568): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) eventfd(0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5bc, 0x0, 0x20000000000, 0x11d, 0x0, 0xffffffffffffffff, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 13m1.548563168s ago: executing program 8 (id=3754): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r3], 0x0) 12m59.632933243s ago: executing program 8 (id=3762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={0x34, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12m59.137282509s ago: executing program 8 (id=3763): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 12m58.075050908s ago: executing program 8 (id=3764): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e9000000000000000000", @ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000400)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 12m57.166481931s ago: executing program 8 (id=3768): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) 12m56.508551009s ago: executing program 8 (id=3772): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r3], 0x0) 12m55.250298419s ago: executing program 54 (id=3772): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r3], 0x0) 2m15.366220872s ago: executing program 7 (id=6930): socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x834, &(0x7f0000001200)={0x0, 0xa846, 0x4000, 0x1, 0x20094}, &(0x7f0000000200), &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x402aedf, 0x400, 0xffffffff, 0x266}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2m14.492426117s ago: executing program 7 (id=6933): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x0, 0x9, 0x72, {0x72, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd4b2f1a4a63c8489cad1c191f9313389d88"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 2m12.619613107s ago: executing program 7 (id=6944): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x20, 0x3f, 0x1, 0x70bd2c, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m11.855555003s ago: executing program 7 (id=6946): fsopen(0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0xa048c5, &(0x7f0000000400)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@utf8no}, {@utf8no}, {@fat=@dmask={'dmask', 0x3d, 0x9c94}}, {@uni_xlateno}, {@shortname_win95}, {@fat=@quiet}, {@numtail}, {@fat=@fmask={'fmask', 0x3d, 0x7}}]}, 0x0, 0x2a2, &(0x7f0000000580)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x2020) (fail_nth: 1) 2m10.98900961s ago: executing program 7 (id=6948): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x54dc, 0x9, &(0x7f0000000280)="546285bc6b2342a9e6dbba2ae8e471d2ad4d0e3a11fb05d4c469e3fe7d62ec43a9f34b97989ee484d67eb905771b709fbfa9a328b213d3803ff82f380d305af4d7924050fbceb57a6e48bc678a2c33c00178604638832b2d89718011afe9aefadb6016", 0x63) dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @empty}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000180)="88", 0x1}], 0x1}, 0x4048043) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000140)={@hyper, 0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r4, 0x7b0, &(0x7f00000001c0)={@my=0x0, 0xc}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000080)=0x97f, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x11) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000540)=0x1) r6 = dup(r0) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r8) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r11 = socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x0) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) shutdown(r0, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 2m10.73971958s ago: executing program 7 (id=6950): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) 2m7.387781601s ago: executing program 55 (id=6950): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) 46.138505772s ago: executing program 4 (id=7345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r1, 0x200}, {r1, 0x202}, {0xffffffffffffffff, 0x24a9}, {0xffffffffffffffff, 0x15013}, {r1, 0xa341}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0xc521}], 0x7, &(0x7f0000000180)={r2, r3+10000000}, &(0x7f00000001c0)={[0x0, 0x5]}, 0x8) 44.79991499s ago: executing program 4 (id=7351): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@local, 0x1, 0xfff9, 0x4e21, 0x41, 0x0, 0x0, 0x20, 0x5e, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010100, 0xfffffffe, 0x6c}, @in6=@empty, {0x0, 0x40000000, 0x8000, 0x0, 0x8000000001, 0xfffffffffffffffd, 0x4}, {0x2, 0x4, 0x40000000}, {0x2000000}, 0x70bd25, 0x0, 0xa, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'rfc4309(rfc4106(morus640-sse2))\x00'}, 0x0, 0x180}}]}, 0x184}, 0x1, 0x0, 0x0, 0x44}, 0x4810) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 44.152683568s ago: executing program 4 (id=7353): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x0, 0x9, 0x66, {0x66, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd4b2f1a4a63"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 42.328268086s ago: executing program 4 (id=7362): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = getuid() setitimer(0x2, &(0x7f0000000000)={{0x0, 0xb00}, {0xffffffff}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000500", @ANYRES32=r0, @ANYBLOB="02000200", @ANYRES32=r0, @ANYBLOB="02000300", @ANYRES32=r0, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="0400000000000000100000000000000020000e6c6c275b42"], 0x4c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_clone(0x82000400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) prlimit64(r1, 0x0, &(0x7f0000000140)={0x6, 0x8a}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 41.747346005s ago: executing program 4 (id=7365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800"], 0xc4}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffc, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x0) r6 = getpgrp(0x0) ptrace(0xffffffffffffffff, r6) prctl$PR_SET_THP_DISABLE(0x44, 0x4) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x0, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000041) 38.260555788s ago: executing program 4 (id=7375): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5, 0x0}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, 0x0, 0x0, r0}, 0x94) r2 = epoll_create1(0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r2, @ANYRESDEC], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) 36.659724373s ago: executing program 56 (id=7375): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5, 0x0}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, 0x0, 0x0, r0}, 0x94) r2 = epoll_create1(0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r2, @ANYRESDEC], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) 8.732474836s ago: executing program 0 (id=7481): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x0, 0x9, 0x6b, {0x6b, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd4b2f1a4a63c8489cad1c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 8.440924395s ago: executing program 3 (id=7482): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@ipv6_newroute={0xf4, 0x18, 0x400, 0x70bd2d, 0x25dfdbfd, {0xa, 0x10, 0xa, 0x4, 0x0, 0x0, 0xff, 0x8, 0x6a00}, [@RTA_METRICS={0xd7, 0x8, 0x0, 0x1, "4e6c697f675af3405c5d3a2e17199ae4e1744b0d6e111f2f048ee7cbef46c5301001d08bb99f8a2b8bb1afe53918397c7dc7a2fa9ecaf08c7d659b6a7c4d32a60ed057d06495c61ec91cce825201a16d1f0a29b597d711b26e012e7f11289275538905b0f09a42581ccd6264da5f6174f41af76fb5c60aad65bb15c84f30397adbf1203c0241abe49fd6a2e2955e6752eb0cd9116f63d04d21ad2d7c6d3966473fff473b9e90c9005e830d2a830237405cdfc718e9bc67f8301a479bd5e6db87fb122991585686e472b7a7602120f75989108a"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7.980566546s ago: executing program 3 (id=7485): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}}, 0x0) 7.801501512s ago: executing program 5 (id=7486): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x0, 0x9, 0x71, {0x71, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd4b2f1a4a63c8489cad1c191f9313389d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 7.614834991s ago: executing program 3 (id=7488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/144, 0x90}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000008c0)=""/235, 0xeb}], 0x6}, 0x2040) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb4d, 0x200200000002, 0x8000, 0x8, 0x5}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a400000002f3fba5f3a501dd117e8d0805000000000000000000070000040600000600024088640000ba959be459be464a881bd48b7eaca0cfbcb907b97805d33aad38f70de37de0eedc3e53d412881815ae8744c756d6b81b71fe58d9514f7a7114eb"], 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000100003040000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070"], 0x40}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 6.69938728s ago: executing program 0 (id=7491): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x0, 0x9, 0x64, {0x64, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd4b2f1a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 5.951896371s ago: executing program 5 (id=7496): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x101042) writev(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000100)="eeb825d5", 0x4}], 0x2) acct(0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='system.sockprotoname\x00') 5.564691489s ago: executing program 9 (id=7497): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) 5.389925184s ago: executing program 9 (id=7499): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) acct(0x0) 5.24059977s ago: executing program 5 (id=7500): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000090601020000000000020000000000000900020073797a3100000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.071682456s ago: executing program 0 (id=7501): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x0, 0x9, 0x6b, {0x6b, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd4b2f1a4a63c8489cad1c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 5.055554859s ago: executing program 9 (id=7502): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) (fail_nth: 1) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x1, 0xfffffffffffffffd, 0x80000000000, 0x80000000004, 0x400000000000, 0x4000000000006, 0x0, 0xfffffffd, 0x1, 0x4000, 0x4000000, r2, r3, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.942711792s ago: executing program 1 (id=7503): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@local, 0x1, 0xfff9, 0x4e21, 0x41, 0x0, 0x0, 0x20, 0x5e, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010100, 0xfffffffe, 0x6c}, @in6=@empty, {0x0, 0x40000000, 0x8000, 0x0, 0x8000000001, 0xfffffffffffffffd, 0x4}, {0x2, 0x4, 0x40000000}, {0x2000000}, 0x70bd25, 0x0, 0xa, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'rfc4309(rfc4106(morus640-sse2))\x00'}, 0x0, 0x180}}]}, 0x184}, 0x1, 0x0, 0x0, 0x44}, 0x4810) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f406", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.913650183s ago: executing program 5 (id=7504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240"], 0xc4}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x0) r6 = getpgrp(0x0) ptrace(0xffffffffffffffff, r6) prctl$PR_SET_THP_DISABLE(0x44, 0x4) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x0, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000041) 4.344881296s ago: executing program 1 (id=7505): ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0xdceb, 0x4, 0x2, 0x0, 0x81}) 4.22012181s ago: executing program 3 (id=7506): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x0, 0x9, 0x71, {0x71, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd4b2f1a4a63c8489cad1c191f9313389d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 4.197485266s ago: executing program 5 (id=7507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) io_setup(0x3, &(0x7f00000003c0)=0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) io_submit(r5, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0xdd60}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x35}]}, 0x54}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x1, 0x8}}, 0x10) bind$tipc(r7, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r8 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x88) ftruncate(r8, 0x2007ffc) sendfile(r8, r8, 0x0, 0x800000009) lseek(r8, 0x400000000000004, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r4, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 3.948458743s ago: executing program 1 (id=7508): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.807051609s ago: executing program 9 (id=7509): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xfe46) 3.37296399s ago: executing program 9 (id=7510): socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x10c) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 3.264626853s ago: executing program 0 (id=7511): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x0, 0x9, 0x64, {0x64, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd4b2f1a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 2.936487902s ago: executing program 5 (id=7512): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@errors_continue}, {@noquota}, {@jqfmt_vfsv1}, {@noblock_validity}, {@delalloc}, {@data_err_ignore}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@nolazytime}]}, 0x1, 0x553, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000400)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x1000) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x202080, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904"], 0x0) 2.528478097s ago: executing program 1 (id=7513): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8}]}, 0x54}}, 0x0) 2.11475019s ago: executing program 3 (id=7514): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.784625605s ago: executing program 1 (id=7515): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@local, 0x1, 0xfff9, 0x4e21, 0x41, 0x0, 0x0, 0x20, 0x5e, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010100, 0xfffffffe, 0x6c}, @in6=@empty, {0x0, 0x40000000, 0x8000, 0x0, 0x8000000001, 0xfffffffffffffffd, 0x4}, {0x2, 0x4, 0x40000000}, {0x2000000}, 0x70bd25, 0x0, 0xa, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'rfc4309(rfc4106(morus640-sse2))\x00'}, 0x0, 0x180}}]}, 0x184}, 0x1, 0x0, 0x0, 0x44}, 0x4810) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f406", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.596336666s ago: executing program 3 (id=7516): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x2040) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb4d, 0x200200000002, 0x8000, 0x8, 0x5}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a400000002f3fba5f3a501dd117e8d0805000000000000000000070000040600000600024088640000ba959be459be464a881bd48b7eaca0cfbcb907b97805d33aad38f70de37de0eedc3e53d412881815ae8744c756d6b81b71fe58d9514f7a7114eb"], 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000100003040000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070"], 0x40}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 1.503483468s ago: executing program 0 (id=7517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240"], 0xc4}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x0) r6 = getpgrp(0x0) ptrace(0xffffffffffffffff, r6) prctl$PR_SET_THP_DISABLE(0x44, 0x4) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x0, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000041) 861.290713ms ago: executing program 1 (id=7518): ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0xdceb, 0x4, 0x2, 0x0, 0x81}) 556.645495ms ago: executing program 9 (id=7519): r0 = memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="3800000002000000000000001f00000071a20400000000009500000080000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x19, &(0x7f0000000080)=""/25, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0x1000, 0xffffffffffffff90) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8580, 0x102) 0s ago: executing program 0 (id=7520): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xfe46) kernel console output (not intermixed with test programs): 39 [ 1880.012165][T25209] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1880.012238][T25209] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1880.012317][T25209] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 1880.012374][T25209] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 1880.012427][T25209] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1880.012478][T25209] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1880.012528][T25209] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1880.012599][T25209] [ 1880.271273][T25209] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1880.280292][T25209] binder_alloc: 25207: binder_alloc_buf size 64768 failed, no address space [ 1880.292654][T25209] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1880.983059][T25217] bridge0: entered promiscuous mode [ 1880.990143][T25214] bridge0: left promiscuous mode [ 1881.084657][T25219] FAULT_INJECTION: forcing a failure. [ 1881.084657][T25219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1881.102012][T25219] CPU: 0 UID: 0 PID: 25219 Comm: syz.4.7117 Not tainted syzkaller #0 PREEMPT(none) [ 1881.102155][T25219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1881.102231][T25219] Call Trace: [ 1881.102278][T25219] [ 1881.102329][T25219] __dump_stack+0x26/0x30 [ 1881.102479][T25219] dump_stack_lvl+0x1df/0x270 [ 1881.102634][T25219] dump_stack+0x1e/0x25 [ 1881.102767][T25219] should_fail_ex+0x7dc/0x8a0 [ 1881.102935][T25219] should_fail+0x2a/0x40 [ 1881.103083][T25219] should_fail_usercopy+0x2e/0x40 [ 1881.103234][T25219] _copy_from_user+0x33/0x100 [ 1881.103382][T25219] io_register_file_alloc_range+0x5b/0x2e0 [ 1881.103557][T25219] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1881.103696][T25219] __se_sys_io_uring_register+0x14f2/0x1e50 [ 1881.103848][T25219] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1881.104038][T25219] __ia32_sys_io_uring_register+0xb8/0x110 [ 1881.104202][T25219] ia32_sys_call+0x311a/0x4340 [ 1881.104316][T25219] __do_fast_syscall_32+0x155/0x310 [ 1881.104499][T25219] do_fast_syscall_32+0x38/0x80 [ 1881.104659][T25219] do_SYSENTER_32+0x1f/0x30 [ 1881.104769][T25219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1881.104916][T25219] RIP: 0023:0xf709d539 [ 1881.105003][T25219] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1881.105112][T25219] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab [ 1881.105227][T25219] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000019 [ 1881.105307][T25219] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1881.105383][T25219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1881.105453][T25219] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1881.105526][T25219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1881.105643][T25219] [ 1881.791944][T25230] netlink: 1608 bytes leftover after parsing attributes in process `syz.9.7121'. [ 1881.959903][T25236] netlink: 'syz.5.7125': attribute type 10 has an invalid length. [ 1881.983856][T25236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1881.998919][T25236] bond0: (slave team0): Enslaving as an active interface with an up link [ 1882.419153][T25240] sp0: Synchronizing with TNC [ 1882.601300][T25243] FAULT_INJECTION: forcing a failure. [ 1882.601300][T25243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1882.614979][T25243] CPU: 1 UID: 0 PID: 25243 Comm: syz.5.7127 Not tainted syzkaller #0 PREEMPT(none) [ 1882.615105][T25243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1882.615179][T25243] Call Trace: [ 1882.615224][T25243] [ 1882.615271][T25243] __dump_stack+0x26/0x30 [ 1882.615418][T25243] dump_stack_lvl+0x1df/0x270 [ 1882.615566][T25243] dump_stack+0x1e/0x25 [ 1882.615698][T25243] should_fail_ex+0x7dc/0x8a0 [ 1882.615885][T25243] should_fail+0x2a/0x40 [ 1882.616031][T25243] should_fail_usercopy+0x2e/0x40 [ 1882.616195][T25243] _copy_from_user+0x33/0x100 [ 1882.616357][T25243] get_compat_msghdr+0x63/0x740 [ 1882.616503][T25243] ? kmsan_get_metadata+0xfb/0x160 [ 1882.616646][T25243] ___sys_sendmsg+0x198/0x3b0 [ 1882.616795][T25243] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1882.616939][T25243] ? __rcu_read_unlock+0x6d/0xd0 [ 1882.617094][T25243] ? __fget_files+0x3b4/0x4a0 [ 1882.617223][T25243] ? __fget_files+0x3b9/0x4a0 [ 1882.617359][T25243] ? kmsan_get_metadata+0xfb/0x160 [ 1882.617489][T25243] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1882.617637][T25243] __sys_sendmsg+0x1aa/0x300 [ 1882.617782][T25243] ? kmsan_get_metadata+0xfb/0x160 [ 1882.617929][T25243] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1882.618083][T25243] ia32_sys_call+0x35f2/0x4340 [ 1882.618203][T25243] __do_fast_syscall_32+0x155/0x310 [ 1882.618396][T25243] do_fast_syscall_32+0x38/0x80 [ 1882.618567][T25243] do_SYSENTER_32+0x1f/0x30 [ 1882.618678][T25243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1882.618839][T25243] RIP: 0023:0xf7f42539 [ 1882.618931][T25243] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1882.619040][T25243] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1882.619162][T25243] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000600 [ 1882.619250][T25243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1882.619326][T25243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1882.619396][T25243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1882.619470][T25243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1882.619581][T25243] [ 1882.862097][T25241] 9pnet_fd: Insufficient options for proto=fd [ 1883.348225][T25240] loop9: detected capacity change from 0 to 2048 [ 1883.380365][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1883.386964][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1883.401151][T25246] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7128'. [ 1883.434310][T25240] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1883.444216][T25240] NILFS (loop9): too large filesystem blocksize: 2 ^ 347668480 KiB [ 1883.478378][T25248] netlink: 'syz.4.7129': attribute type 10 has an invalid length. [ 1883.504941][T25248] 8021q: adding VLAN 0 to HW filter on device team0 [ 1883.520596][T25248] bond0: (slave team0): Enslaving as an active interface with an up link [ 1883.605992][T25240] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7126'. [ 1883.948978][T25253] bridge0: entered promiscuous mode [ 1883.956754][T25252] bridge0: left promiscuous mode [ 1883.986402][T25255] FAULT_INJECTION: forcing a failure. [ 1883.986402][T25255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1884.001690][T25255] CPU: 1 UID: 0 PID: 25255 Comm: syz.9.7132 Not tainted syzkaller #0 PREEMPT(none) [ 1884.001832][T25255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1884.001908][T25255] Call Trace: [ 1884.001958][T25255] [ 1884.002006][T25255] __dump_stack+0x26/0x30 [ 1884.002156][T25255] dump_stack_lvl+0x1df/0x270 [ 1884.002304][T25255] dump_stack+0x1e/0x25 [ 1884.002431][T25255] should_fail_ex+0x7dc/0x8a0 [ 1884.002606][T25255] should_fail+0x2a/0x40 [ 1884.002744][T25255] should_fail_usercopy+0x2e/0x40 [ 1884.002909][T25255] _copy_to_user+0x35/0x120 [ 1884.003058][T25255] simple_read_from_buffer+0x1b2/0x340 [ 1884.003238][T25255] proc_fail_nth_read+0x1e0/0x2d0 [ 1884.003407][T25255] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1884.003565][T25255] vfs_read+0x27c/0xf90 [ 1884.003709][T25255] ? stack_depot_save_flags+0x35/0x790 [ 1884.003861][T25255] ? kmsan_get_metadata+0xfb/0x160 [ 1884.003985][T25255] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1884.004167][T25255] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1884.004304][T25255] __ia32_sys_read+0x1f9/0x4d0 [ 1884.004479][T25255] ia32_sys_call+0x191f/0x4340 [ 1884.004593][T25255] __do_fast_syscall_32+0x155/0x310 [ 1884.004773][T25255] do_fast_syscall_32+0x38/0x80 [ 1884.004937][T25255] do_SYSENTER_32+0x1f/0x30 [ 1884.005047][T25255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1884.005196][T25255] RIP: 0023:0xf703d539 [ 1884.005282][T25255] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1884.005388][T25255] RSP: 002b:00000000f542d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1884.005505][T25255] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f542d620 [ 1884.005604][T25255] RDX: 000000000000000f RSI: 00000000f73d6ff4 RDI: 0000000000000000 [ 1884.005678][T25255] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1884.005752][T25255] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1884.005829][T25255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1884.005930][T25255] [ 1884.427239][T25259] openvswitch: netlink: IP tunnel dst address not specified [ 1884.455116][T25259] loop1: detected capacity change from 0 to 512 [ 1884.467912][T25259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1884.482396][T25259] EXT4-fs: Ignoring removed mblk_io_submit option [ 1884.502532][T25259] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1884.513252][T25259] EXT4-fs (loop1): group descriptors corrupted! [ 1884.539637][T25259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7134'. [ 1884.553702][T25263] netlink: 1608 bytes leftover after parsing attributes in process `syz.4.7136'. [ 1884.749470][T13432] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1884.915025][T25267] loop1: detected capacity change from 0 to 2048 [ 1884.930245][ T5870] usb 10-1: new full-speed USB device number 76 using dummy_hcd [ 1884.939141][T13432] usb 6-1: Using ep0 maxpacket: 16 [ 1884.957943][T13432] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1884.969275][T13432] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1884.980507][T13432] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1884.993270][T13432] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1885.007302][T13432] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1885.016854][T13432] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.042341][T25267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1885.056301][T13432] usb 6-1: config 0 descriptor?? [ 1885.161073][ T5870] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.171792][ T5870] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1885.222547][ T5870] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1885.232487][ T5870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.240960][ T5870] usb 10-1: Product: syz [ 1885.245502][ T5870] usb 10-1: Manufacturer: syz [ 1885.250636][ T5870] usb 10-1: SerialNumber: syz [ 1885.372250][T25275] overlayfs: failed to get inode (-116) [ 1885.378497][T25275] overlayfs: failed to get inode (-116) [ 1885.395858][T25275] overlayfs: failed to get inode (-116) [ 1885.419068][T25275] overlayfs: failed to get inode (-116) [ 1885.435327][T25275] overlayfs: failed to get inode (-116) [ 1885.450084][T24087] Bluetooth: hci2: command 0x0406 tx timeout [ 1885.460616][T25275] overlayfs: failed to get inode (-116) [ 1885.486488][T25267] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 28672 lbcount: 32768 extent 129+31744 [ 1885.516786][ T5870] usb 10-1: 0:2 : does not exist [ 1885.610340][ T5870] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1885.634888][T13432] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0050/input/input32 [ 1885.660248][T13432] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0050/input/input33 [ 1885.717318][ T5870] usb 10-1: USB disconnect, device number 76 [ 1885.752985][T13432] kye 0003:0458:5013.0050: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 1885.755224][T25261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7135'. [ 1885.775438][T25261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1885.895875][T25261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1885.992265][T25278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7143'. [ 1886.069010][ T5870] usb 6-1: USB disconnect, device number 101 [ 1886.182922][T25282] FAULT_INJECTION: forcing a failure. [ 1886.182922][T25282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1886.196868][T25282] CPU: 1 UID: 0 PID: 25282 Comm: syz.4.7144 Not tainted syzkaller #0 PREEMPT(none) [ 1886.197001][T25282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1886.197077][T25282] Call Trace: [ 1886.197127][T25282] [ 1886.197174][T25282] __dump_stack+0x26/0x30 [ 1886.197324][T25282] dump_stack_lvl+0x1df/0x270 [ 1886.197484][T25282] dump_stack+0x1e/0x25 [ 1886.197616][T25282] should_fail_ex+0x7dc/0x8a0 [ 1886.197796][T25282] should_fail+0x2a/0x40 [ 1886.197941][T25282] should_fail_usercopy+0x2e/0x40 [ 1886.198108][T25282] _copy_from_user+0x33/0x100 [ 1886.198266][T25282] get_compat_msghdr+0x63/0x740 [ 1886.198447][T25282] ? kmsan_get_metadata+0xfb/0x160 [ 1886.198592][T25282] ___sys_sendmsg+0x198/0x3b0 [ 1886.198740][T25282] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1886.198886][T25282] ? __rcu_read_unlock+0x6d/0xd0 [ 1886.199027][T25282] ? __fget_files+0x3b4/0x4a0 [ 1886.199157][T25282] ? __fget_files+0x3b9/0x4a0 [ 1886.199292][T25282] ? kmsan_get_metadata+0xfb/0x160 [ 1886.199419][T25282] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1886.199558][T25282] __sys_sendmsg+0x1aa/0x300 [ 1886.199698][T25282] ? kmsan_get_metadata+0xfb/0x160 [ 1886.199841][T25282] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1886.199998][T25282] ia32_sys_call+0x35f2/0x4340 [ 1886.200119][T25282] __do_fast_syscall_32+0x155/0x310 [ 1886.200306][T25282] do_fast_syscall_32+0x38/0x80 [ 1886.200479][T25282] do_SYSENTER_32+0x1f/0x30 [ 1886.200590][T25282] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1886.200743][T25282] RIP: 0023:0xf709d539 [ 1886.200835][T25282] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1886.200944][T25282] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1886.201065][T25282] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800007c0 [ 1886.201151][T25282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1886.201223][T25282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1886.201300][T25282] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1886.201383][T25282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1886.201487][T25282] [ 1886.654326][T25286] FAULT_INJECTION: forcing a failure. [ 1886.654326][T25286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1886.667964][T25286] CPU: 0 UID: 0 PID: 25286 Comm: syz.1.7145 Not tainted syzkaller #0 PREEMPT(none) [ 1886.668110][T25286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1886.668181][T25286] Call Trace: [ 1886.668228][T25286] [ 1886.668275][T25286] __dump_stack+0x26/0x30 [ 1886.668426][T25286] dump_stack_lvl+0x1df/0x270 [ 1886.668572][T25286] dump_stack+0x1e/0x25 [ 1886.668709][T25286] should_fail_ex+0x7dc/0x8a0 [ 1886.668877][T25286] should_fail+0x2a/0x40 [ 1886.669020][T25286] should_fail_usercopy+0x2e/0x40 [ 1886.669190][T25286] _copy_to_user+0x35/0x120 [ 1886.669342][T25286] simple_read_from_buffer+0x1b2/0x340 [ 1886.669533][T25286] proc_fail_nth_read+0x1e0/0x2d0 [ 1886.669751][T25286] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1886.669928][T25286] vfs_read+0x27c/0xf90 [ 1886.670081][T25286] ? stack_depot_save_flags+0x35/0x790 [ 1886.670241][T25286] ? kmsan_get_metadata+0xfb/0x160 [ 1886.670372][T25286] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1886.670565][T25286] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1886.670728][T25286] __ia32_sys_read+0x1f9/0x4d0 [ 1886.670908][T25286] ia32_sys_call+0x191f/0x4340 [ 1886.671027][T25286] __do_fast_syscall_32+0x155/0x310 [ 1886.671216][T25286] do_fast_syscall_32+0x38/0x80 [ 1886.671391][T25286] do_SYSENTER_32+0x1f/0x30 [ 1886.671511][T25286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1886.671675][T25286] RIP: 0023:0xf7f96539 [ 1886.671770][T25286] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1886.671882][T25286] RSP: 002b:00000000f5486590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1886.672001][T25286] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5486620 [ 1886.672086][T25286] RDX: 000000000000000f RSI: 00000000f7426ff4 RDI: 0000000000000000 [ 1886.672160][T25286] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1886.672237][T25286] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1886.672308][T25286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1886.672417][T25286] [ 1886.931510][T25284] bridge0: entered promiscuous mode [ 1886.945305][T25283] bridge0: left promiscuous mode [ 1887.115622][T25293] netlink: 1608 bytes leftover after parsing attributes in process `syz.4.7149'. [ 1887.256310][T25299] netlink: 172 bytes leftover after parsing attributes in process `syz.1.7150'. [ 1887.457775][T25302] loop9: detected capacity change from 0 to 2048 [ 1887.516667][T25302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1887.520832][T25306] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 1887.738702][T25310] loop5: detected capacity change from 0 to 512 [ 1887.777809][T25310] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1887.798697][T25310] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7155: bg 0: block 248: padding at end of block bitmap is not set [ 1887.820964][T25310] __quota_error: 18 callbacks suppressed [ 1887.821126][T25310] Quota error (device loop5): write_blk: dquota write failed [ 1887.835373][T25310] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1887.840136][T25307] UDF-fs: warning (device loop9): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 28672 lbcount: 32768 extent 129+31744 [ 1887.845616][T25310] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.7155: Failed to acquire dquot type 1 [ 1887.888828][T25310] EXT4-fs (loop5): 1 truncate cleaned up [ 1887.913083][T25310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1887.975201][T25310] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 1888.078479][T23615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1888.364577][T25317] FAULT_INJECTION: forcing a failure. [ 1888.364577][T25317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1888.381517][T25317] CPU: 0 UID: 0 PID: 25317 Comm: syz.5.7158 Not tainted syzkaller #0 PREEMPT(none) [ 1888.381650][T25317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1888.381729][T25317] Call Trace: [ 1888.381776][T25317] [ 1888.381825][T25317] __dump_stack+0x26/0x30 [ 1888.381974][T25317] dump_stack_lvl+0x1df/0x270 [ 1888.382126][T25317] dump_stack+0x1e/0x25 [ 1888.382264][T25317] should_fail_ex+0x7dc/0x8a0 [ 1888.382440][T25317] should_fail_alloc_page+0x222/0x240 [ 1888.382591][T25317] __alloc_frozen_pages_noprof+0x30f/0xf00 [ 1888.382787][T25317] alloc_pages_mpol+0x328/0x860 [ 1888.382935][T25317] alloc_pages_noprof+0x102/0x280 [ 1888.383071][T25317] get_free_pages_noprof+0x39/0xf0 [ 1888.383239][T25317] __pollwait+0x213/0x6a0 [ 1888.383415][T25317] ? __pfx___pollwait+0x10/0x10 [ 1888.383576][T25317] mptcp_poll+0x106/0x1d80 [ 1888.383722][T25317] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1888.383861][T25317] ? __pfx_mptcp_poll+0x10/0x10 [ 1888.383989][T25317] sock_poll+0x5c1/0x6f0 [ 1888.384140][T25317] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1888.384281][T25317] ? __pfx_sock_poll+0x10/0x10 [ 1888.384424][T25317] do_select+0x152f/0x2a80 [ 1888.384581][T25317] ? __pfx___pollwait+0x10/0x10 [ 1888.384748][T25317] ? __pfx_pollwake+0x10/0x10 [ 1888.384873][T25317] ? __pfx_pollwake+0x10/0x10 [ 1888.384995][T25317] ? __pfx_pollwake+0x10/0x10 [ 1888.385136][T25317] ? __pfx_pollwake+0x10/0x10 [ 1888.385263][T25317] ? __pfx_pollwake+0x10/0x10 [ 1888.385387][T25317] ? __pfx_pollwake+0x10/0x10 [ 1888.385509][T25317] ? __pfx_pollwake+0x10/0x10 [ 1888.385631][T25317] ? __pfx_pollwake+0x10/0x10 [ 1888.385756][T25317] ? __pfx_pollwake+0x10/0x10 [ 1888.385903][T25317] ? kmsan_get_metadata+0xfb/0x160 [ 1888.386126][T25317] compat_core_sys_select+0x8d5/0xe80 [ 1888.386316][T25317] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1888.386504][T25317] ? set_compat_user_sigmask+0x3d/0x310 [ 1888.386641][T25317] ? do_compat_pselect+0x47b/0x5b0 [ 1888.386771][T25317] ? set_compat_user_sigmask+0xcc/0x310 [ 1888.386904][T25317] ? do_compat_pselect+0x70/0x5b0 [ 1888.387026][T25317] ? __ia32_compat_sys_pselect6_time32+0x314/0x4d0 [ 1888.387176][T25317] do_compat_pselect+0x501/0x5b0 [ 1888.387310][T25317] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1888.387479][T25317] ? kmsan_get_metadata+0xfb/0x160 [ 1888.387606][T25317] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1888.387745][T25317] __ia32_compat_sys_pselect6_time32+0x314/0x4d0 [ 1888.387922][T25317] ia32_sys_call+0x3086/0x4340 [ 1888.388044][T25317] __do_fast_syscall_32+0x155/0x310 [ 1888.388237][T25317] do_fast_syscall_32+0x38/0x80 [ 1888.388408][T25317] do_SYSENTER_32+0x1f/0x30 [ 1888.388528][T25317] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1888.388683][T25317] RIP: 0023:0xf7f42539 [ 1888.388778][T25317] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1888.388888][T25317] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000134 [ 1888.389010][T25317] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00000000800001c0 [ 1888.389099][T25317] RDX: 0000000000000000 RSI: 00000000800002c0 RDI: 0000000000000000 [ 1888.389191][T25317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1888.389268][T25317] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1888.389344][T25317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1888.389451][T25317] [ 1889.144594][T24087] Bluetooth: hci5: unexpected subevent 0x0e length: 30 > 15 [ 1889.152403][T24087] Bluetooth: hci5: Unable to find connection for dst 61:61:61:61:61:61 sid 0x61 [ 1889.454667][T25327] FAULT_INJECTION: forcing a failure. [ 1889.454667][T25327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1889.468624][T25327] CPU: 0 UID: 0 PID: 25327 Comm: syz.9.7163 Not tainted syzkaller #0 PREEMPT(none) [ 1889.468762][T25327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1889.468838][T25327] Call Trace: [ 1889.468888][T25327] [ 1889.468935][T25327] __dump_stack+0x26/0x30 [ 1889.469092][T25327] dump_stack_lvl+0x1df/0x270 [ 1889.469246][T25327] dump_stack+0x1e/0x25 [ 1889.469378][T25327] should_fail_ex+0x7dc/0x8a0 [ 1889.469547][T25327] should_fail+0x2a/0x40 [ 1889.469691][T25327] should_fail_usercopy+0x2e/0x40 [ 1889.469859][T25327] _copy_from_user+0x33/0x100 [ 1889.470016][T25327] get_compat_msghdr+0x63/0x740 [ 1889.470165][T25327] ? kmsan_get_metadata+0xfb/0x160 [ 1889.470312][T25327] ___sys_sendmsg+0x198/0x3b0 [ 1889.470454][T25327] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1889.470594][T25327] ? __rcu_read_unlock+0x6d/0xd0 [ 1889.470738][T25327] ? __fget_files+0x3b4/0x4a0 [ 1889.470866][T25327] ? __fget_files+0x3b9/0x4a0 [ 1889.470997][T25327] ? kmsan_get_metadata+0xfb/0x160 [ 1889.471134][T25327] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1889.471276][T25327] __sys_sendmsg+0x1aa/0x300 [ 1889.471419][T25327] ? kmsan_get_metadata+0xfb/0x160 [ 1889.471562][T25327] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1889.471717][T25327] ia32_sys_call+0x35f2/0x4340 [ 1889.471837][T25327] __do_fast_syscall_32+0x155/0x310 [ 1889.472027][T25327] do_fast_syscall_32+0x38/0x80 [ 1889.472201][T25327] do_SYSENTER_32+0x1f/0x30 [ 1889.472317][T25327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1889.472471][T25327] RIP: 0023:0xf703d539 [ 1889.472563][T25327] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1889.472675][T25327] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1889.472797][T25327] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000000 [ 1889.472882][T25327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1889.472960][T25327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1889.473038][T25327] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1889.473123][T25327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1889.473236][T25327] [ 1889.842890][T25326] bridge0: entered promiscuous mode [ 1889.892076][T25324] bridge0: left promiscuous mode [ 1890.301623][T25336] loop4: detected capacity change from 0 to 2048 [ 1890.344330][T25336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1890.422813][T25341] loop9: detected capacity change from 0 to 8 [ 1890.456291][T25341] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1890.464563][T25341] SQUASHFS error: Failed to read block 0x91: -5 [ 1890.471518][T25341] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1890.478897][T25341] SQUASHFS error: Unable to read inode 0x11f [ 1890.550112][ T5935] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1890.694520][T25347] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7170'. [ 1890.698478][T25343] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 24576 lbcount: 28672 extent 129+27648 [ 1890.740478][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 1890.771131][ T5935] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1890.780783][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.840368][ T5935] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1891.139644][ T2041] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1891.307286][ T2041] usb 10-1: Using ep0 maxpacket: 8 [ 1891.354267][ T2041] usb 10-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 1891.366811][ T2041] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.375324][ T2041] usb 10-1: Product: syz [ 1891.380045][ T2041] usb 10-1: Manufacturer: syz [ 1891.385036][ T2041] usb 10-1: SerialNumber: syz [ 1891.398599][ T2041] usb 10-1: config 0 descriptor?? [ 1891.422702][ T2041] go7007 10-1:0.0: probe with driver go7007 failed with error -12 [ 1891.604449][T25355] FAULT_INJECTION: forcing a failure. [ 1891.604449][T25355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1891.617989][T25355] CPU: 0 UID: 0 PID: 25355 Comm: syz.4.7174 Not tainted syzkaller #0 PREEMPT(none) [ 1891.618120][T25355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1891.618197][T25355] Call Trace: [ 1891.618241][T25355] [ 1891.618289][T25355] __dump_stack+0x26/0x30 [ 1891.618442][T25355] dump_stack_lvl+0x1df/0x270 [ 1891.618598][T25355] dump_stack+0x1e/0x25 [ 1891.618732][T25355] should_fail_ex+0x7dc/0x8a0 [ 1891.618913][T25355] should_fail+0x2a/0x40 [ 1891.619058][T25355] should_fail_usercopy+0x2e/0x40 [ 1891.619227][T25355] strncpy_from_user+0x38/0x4c0 [ 1891.619370][T25355] ? __se_sys_add_key+0x4c/0x870 [ 1891.619489][T25355] ? __ia32_sys_add_key+0xe2/0x150 [ 1891.619615][T25355] __se_sys_add_key+0xa2/0x870 [ 1891.619733][T25355] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1891.619914][T25355] ? kmsan_get_metadata+0xfb/0x160 [ 1891.620045][T25355] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1891.620192][T25355] __ia32_sys_add_key+0xe2/0x150 [ 1891.620336][T25355] ia32_sys_call+0x37fa/0x4340 [ 1891.620456][T25355] __do_fast_syscall_32+0x155/0x310 [ 1891.620649][T25355] do_fast_syscall_32+0x38/0x80 [ 1891.620820][T25355] do_SYSENTER_32+0x1f/0x30 [ 1891.620972][T25355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1891.621129][T25355] RIP: 0023:0xf709d539 [ 1891.621223][T25355] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1891.621337][T25355] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 000000000000011e [ 1891.621464][T25355] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000080 [ 1891.621556][T25355] RDX: 00000000800000c0 RSI: 000000000000005b RDI: 0000000033ad7a8a [ 1891.621640][T25355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1891.621720][T25355] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1891.621800][T25355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1891.621915][T25355] [ 1891.631445][ T2041] usb 10-1: USB disconnect, device number 77 [ 1891.719556][ T5870] usb 6-1: new full-speed USB device number 102 using dummy_hcd [ 1892.044932][ T5870] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 1892.056302][ T5870] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.067570][ T5870] usb 6-1: config 8 has no interface number 0 [ 1892.074186][ T5870] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1892.085606][ T5870] usb 6-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1892.148127][ T5870] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1892.160264][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.169635][ T5870] usb 6-1: Product: syz [ 1892.174061][ T5870] usb 6-1: Manufacturer: syz [ 1892.178823][ T5870] usb 6-1: SerialNumber: syz [ 1892.315929][T13432] usb 2-1: USB disconnect, device number 88 [ 1892.422547][T25353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1892.431971][T25353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1892.545830][ T5870] usb 6-1: USB disconnect, device number 102 [ 1892.765578][T25369] bridge0: entered promiscuous mode [ 1892.778032][T25368] bridge0: left promiscuous mode [ 1893.209578][ T5870] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1893.280024][T13432] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1893.389451][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 1893.411272][ T5870] usb 5-1: config 27 has an invalid descriptor of length 118, skipping remainder of the config [ 1893.422045][ T5870] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1893.461861][ T5870] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1893.471425][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.480074][ T5870] usb 5-1: Product: syz [ 1893.484401][ T5870] usb 5-1: Manufacturer: syz [ 1893.491916][ T5870] usb 5-1: SerialNumber: syz [ 1893.499738][T13432] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1893.511349][T13432] usb 2-1: not running at top speed; connect to a high speed hub [ 1893.523888][T13432] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.534353][T13432] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1893.543763][T13432] usb 2-1: config 1 has no interface number 1 [ 1893.550281][T13432] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1893.563787][T13432] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1893.586156][T13432] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1893.598284][T13432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.613075][T13432] usb 2-1: Product: syz [ 1893.619752][T13432] usb 2-1: Manufacturer: syz [ 1893.624662][T13432] usb 2-1: SerialNumber: syz [ 1893.788739][T25371] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7180'. [ 1893.918778][T13432] hub 2-1:1.0: Invalid hub with more than one config or interface [ 1893.935404][T13432] hub 2-1:1.0: probe with driver hub failed with error -22 [ 1893.967526][T13432] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1894.020202][ T5870] usb 5-1: USB disconnect, device number 46 [ 1894.064436][T13432] usb 2-1: USB disconnect, device number 89 [ 1894.238115][T25384] loop9: detected capacity change from 0 to 512 [ 1894.251230][T25384] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1894.270698][T25384] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1894.282290][T25384] EXT4-fs (loop9): group descriptors corrupted! [ 1894.562289][ T5935] usb 10-1: new full-speed USB device number 78 using dummy_hcd [ 1894.810868][ T5935] usb 10-1: config 0 has an invalid interface number: 195 but max is 0 [ 1894.824072][ T5935] usb 10-1: config 0 has no interface number 0 [ 1894.831856][ T5935] usb 10-1: config 0 interface 195 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1894.856156][ T5935] usb 10-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=fd.08 [ 1894.866045][ T5935] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.874517][ T5935] usb 10-1: Product: syz [ 1894.878924][ T5935] usb 10-1: Manufacturer: syz [ 1894.883994][ T5935] usb 10-1: SerialNumber: syz [ 1894.893687][ T5935] usb 10-1: config 0 descriptor?? [ 1894.910079][T25384] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1895.006009][T25397] bridge0: entered promiscuous mode [ 1895.014450][T25395] bridge0: left promiscuous mode [ 1895.135216][ T5935] asix 10-1:0.195: probe with driver asix failed with error -71 [ 1895.171063][ T5935] usb 10-1: USB disconnect, device number 78 [ 1895.522830][T25405] FAULT_INJECTION: forcing a failure. [ 1895.522830][T25405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1895.541565][T25405] CPU: 1 UID: 0 PID: 25405 Comm: syz.1.7193 Not tainted syzkaller #0 PREEMPT(none) [ 1895.541696][T25405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1895.541770][T25405] Call Trace: [ 1895.541818][T25405] [ 1895.541866][T25405] __dump_stack+0x26/0x30 [ 1895.542017][T25405] dump_stack_lvl+0x1df/0x270 [ 1895.542170][T25405] dump_stack+0x1e/0x25 [ 1895.542302][T25405] should_fail_ex+0x7dc/0x8a0 [ 1895.542489][T25405] should_fail+0x2a/0x40 [ 1895.542634][T25405] should_fail_usercopy+0x2e/0x40 [ 1895.542793][T25405] _copy_from_user+0x33/0x100 [ 1895.542947][T25405] get_compat_msghdr+0x63/0x740 [ 1895.543085][T25405] ? kmsan_get_metadata+0xfb/0x160 [ 1895.543224][T25405] ___sys_sendmsg+0x198/0x3b0 [ 1895.543371][T25405] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1895.543521][T25405] ? __rcu_read_unlock+0x6d/0xd0 [ 1895.543672][T25405] ? __fget_files+0x3b4/0x4a0 [ 1895.543800][T25405] ? __fget_files+0x3b9/0x4a0 [ 1895.543933][T25405] ? kmsan_get_metadata+0xfb/0x160 [ 1895.544062][T25405] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1895.544208][T25405] __sys_sendmsg+0x1aa/0x300 [ 1895.544350][T25405] ? kmsan_get_metadata+0xfb/0x160 [ 1895.544517][T25405] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1895.544675][T25405] ia32_sys_call+0x35f2/0x4340 [ 1895.544797][T25405] __do_fast_syscall_32+0x155/0x310 [ 1895.544980][T25405] do_fast_syscall_32+0x38/0x80 [ 1895.545151][T25405] do_SYSENTER_32+0x1f/0x30 [ 1895.545260][T25405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1895.545412][T25405] RIP: 0023:0xf7f96539 [ 1895.545508][T25405] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1895.545618][T25405] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1895.545740][T25405] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 1895.545825][T25405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1895.545902][T25405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1895.545976][T25405] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1895.546051][T25405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1895.546160][T25405] [ 1895.622293][T25407] loop4: detected capacity change from 0 to 2048 [ 1895.912751][T25407] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1896.299558][T25407] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 16384 lbcount: 20480 extent 129+19456 [ 1896.377164][T25420] loop5: detected capacity change from 0 to 512 [ 1896.418323][T25420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1896.431583][T25420] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1896.496112][T25420] EXT4-fs error (device loop5): ext4_add_entry:2417: inode #12: comm syz.5.7199: Directory hole found for htree leaf block 0 [ 1896.745356][T23615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1897.044177][T25433] bridge0: entered promiscuous mode [ 1897.051910][T25432] bridge0: left promiscuous mode [ 1897.489713][T25443] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1e [ 1897.569144][T13432] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1897.591630][ T5870] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1897.741047][T23075] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1897.760096][T13432] usb 10-1: Using ep0 maxpacket: 32 [ 1897.771614][T13432] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1897.780191][T13432] usb 10-1: config 0 has no interface number 0 [ 1897.803278][ T5870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1897.813771][ T5870] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1897.823145][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.838807][ T5870] usb 6-1: config 0 descriptor?? [ 1897.844923][T13432] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1897.854655][T13432] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.863132][T13432] usb 10-1: Product: syz [ 1897.867506][T13432] usb 10-1: Manufacturer: syz [ 1897.872564][T13432] usb 10-1: SerialNumber: syz [ 1897.885119][ T5870] pwc: Askey VC010 type 2 USB webcam detected. [ 1897.900891][T13432] usb 10-1: config 0 descriptor?? [ 1897.919713][T13432] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1897.930320][T23075] usb 5-1: Using ep0 maxpacket: 16 [ 1897.972782][T23075] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 1897.982391][T23075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.990924][T23075] usb 5-1: Product: syz [ 1897.997943][T23075] usb 5-1: Manufacturer: syz [ 1898.003694][T23075] usb 5-1: SerialNumber: syz [ 1898.015410][T23075] usb 5-1: config 0 descriptor?? [ 1898.032056][T23075] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 1898.239068][T23075] pwc: Warning: more than 1 configuration available. [ 1898.260507][T23075] pwc: Failed to set LED on/off time (-71) [ 1898.268897][T23075] pwc: send_video_command error -71 [ 1898.274928][T23075] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1898.283245][T23075] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1898.298174][T23075] usb 5-1: USB disconnect, device number 47 [ 1898.315720][ T5870] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1898.327490][ T5870] pwc: recv_control_msg error -32 req 02 val 2700 [ 1898.343932][ T5870] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1898.356316][T25440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.365846][T25440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1898.380947][ T5870] pwc: recv_control_msg error -32 req 04 val 1000 [ 1898.523746][T13432] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1898.546629][T13432] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1898.626663][ T5870] pwc: recv_control_msg error -32 req 04 val 1400 [ 1898.635878][ T5870] pwc: recv_control_msg error -32 req 02 val 2000 [ 1898.644635][ T5870] pwc: recv_control_msg error -32 req 02 val 2100 [ 1898.654037][ T5870] pwc: recv_control_msg error -32 req 04 val 1500 [ 1898.662681][ T5870] pwc: recv_control_msg error -32 req 02 val 2500 [ 1898.675144][ T5870] pwc: recv_control_msg error -32 req 02 val 2400 [ 1898.698482][ T5870] pwc: recv_control_msg error -32 req 02 val 2600 [ 1898.728946][ T5870] pwc: recv_control_msg error -32 req 02 val 2900 [ 1898.738562][ T5870] pwc: recv_control_msg error -32 req 02 val 2800 [ 1898.758332][ T5870] pwc: recv_control_msg error -32 req 04 val 1100 [ 1898.793744][ T5870] pwc: Registered as video103. [ 1898.803275][ T5870] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input34 [ 1898.995251][ T5870] usb 6-1: USB disconnect, device number 103 [ 1899.302632][T25458] loop4: detected capacity change from 0 to 512 [ 1899.512659][T25458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1899.526169][T25458] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1899.968541][T24742] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1899.983633][T25467] FAULT_INJECTION: forcing a failure. [ 1899.983633][T25467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1899.997175][T25467] CPU: 0 UID: 0 PID: 25467 Comm: syz.5.7214 Not tainted syzkaller #0 PREEMPT(none) [ 1899.997318][T25467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1899.997394][T25467] Call Trace: [ 1899.997441][T25467] [ 1899.997492][T25467] __dump_stack+0x26/0x30 [ 1899.997644][T25467] dump_stack_lvl+0x1df/0x270 [ 1899.997796][T25467] dump_stack+0x1e/0x25 [ 1899.997929][T25467] should_fail_ex+0x7dc/0x8a0 [ 1899.998106][T25467] should_fail+0x2a/0x40 [ 1899.998260][T25467] should_fail_usercopy+0x2e/0x40 [ 1899.998422][T25467] _copy_from_user+0x33/0x100 [ 1899.998582][T25467] get_compat_msghdr+0x63/0x740 [ 1899.998727][T25467] ? kmsan_get_metadata+0xfb/0x160 [ 1899.998875][T25467] ___sys_sendmsg+0x198/0x3b0 [ 1899.999023][T25467] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1899.999166][T25467] ? __rcu_read_unlock+0x6d/0xd0 [ 1899.999317][T25467] ? __fget_files+0x3b4/0x4a0 [ 1899.999446][T25467] ? __fget_files+0x3b9/0x4a0 [ 1899.999579][T25467] ? kmsan_get_metadata+0xfb/0x160 [ 1899.999706][T25467] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1899.999850][T25467] __sys_sendmsg+0x1aa/0x300 [ 1899.999990][T25467] ? kmsan_get_metadata+0xfb/0x160 [ 1900.000132][T25467] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1900.000295][T25467] ia32_sys_call+0x35f2/0x4340 [ 1900.000414][T25467] __do_fast_syscall_32+0x155/0x310 [ 1900.000605][T25467] do_fast_syscall_32+0x38/0x80 [ 1900.000769][T25467] do_SYSENTER_32+0x1f/0x30 [ 1900.000879][T25467] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1900.001029][T25467] RIP: 0023:0xf7f42539 [ 1900.001123][T25467] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1900.001239][T25467] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1900.001359][T25467] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1900.001447][T25467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1900.001525][T25467] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1900.001602][T25467] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1900.001675][T25467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1900.001782][T25467] [ 1900.606148][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1900.617097][ T5870] usb 10-1: USB disconnect, device number 79 [ 1900.681276][ T5870] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1900.736185][ T5870] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1900.750085][ T5870] quatech2 10-1:0.51: device disconnected [ 1900.905933][T25471] bridge0: entered promiscuous mode [ 1900.913150][T25470] bridge0: left promiscuous mode [ 1900.960734][T25476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7218'. [ 1901.340767][T25482] Bluetooth: hci0: unsupported parameter 512 [ 1901.347071][T25482] Bluetooth: hci0: invalid len left 32, exp >= 258 [ 1901.805758][T25496] loop1: detected capacity change from 0 to 64 [ 1902.279413][ T5870] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1902.489514][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 1902.505592][ T5870] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 1902.515054][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.527512][ T5870] usb 5-1: config 0 descriptor?? [ 1902.543480][ T5870] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35 [ 1902.762955][T25503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1902.772313][T25503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.787219][ T5146] bcm5974 5-1:0.0: could not read from device [ 1902.812811][ T5146] bcm5974 5-1:0.0: could not read from device [ 1902.833794][ T5870] usb 5-1: USB disconnect, device number 48 [ 1902.845642][ T5146] bcm5974 5-1:0.0: could not read from device [ 1903.062417][T25512] bridge0: entered promiscuous mode [ 1903.076982][T25511] bridge0: left promiscuous mode [ 1903.469985][ T5870] Process accounting resumed [ 1903.569872][ T5935] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1903.642112][ T2041] Process accounting resumed [ 1903.760850][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 1903.782424][ T5935] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1903.793781][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1903.805066][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1903.818545][ T5935] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 1903.830427][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.927544][ T5935] usb 2-1: config 0 descriptor?? [ 1904.062830][T25531] loop4: detected capacity change from 0 to 256 [ 1904.086738][T25531] exfat: Invalid uid '0x00000000ffffffff' [ 1904.100885][ T5870] Process accounting resumed [ 1904.196946][T25531] bpf: Bad value for 'uid' [ 1904.366200][ T5935] belkin 0003:1020:0006.0051: global environment stack underflow [ 1904.374533][ T5935] belkin 0003:1020:0006.0051: item 0 1 1 11 parsing failed [ 1904.381666][T25531] loop4: detected capacity change from 0 to 512 [ 1904.423663][ T5935] belkin 0003:1020:0006.0051: parse failed [ 1904.430243][ T5935] belkin 0003:1020:0006.0051: probe with driver belkin failed with error -22 [ 1904.636573][ T5935] usb 2-1: USB disconnect, device number 90 [ 1905.195377][T25550] bridge0: entered promiscuous mode [ 1905.207262][T25549] bridge0: left promiscuous mode [ 1905.482438][T25554] netlink: 'syz.9.7246': attribute type 1 has an invalid length. [ 1905.697608][T25560] FAULT_INJECTION: forcing a failure. [ 1905.697608][T25560] name failslab, interval 1, probability 0, space 0, times 0 [ 1905.710946][T25560] CPU: 0 UID: 0 PID: 25560 Comm: syz.5.7248 Not tainted syzkaller #0 PREEMPT(none) [ 1905.711079][T25560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1905.711155][T25560] Call Trace: [ 1905.711206][T25560] [ 1905.711253][T25560] __dump_stack+0x26/0x30 [ 1905.711406][T25560] dump_stack_lvl+0x1df/0x270 [ 1905.711567][T25560] dump_stack+0x1e/0x25 [ 1905.711700][T25560] should_fail_ex+0x7dc/0x8a0 [ 1905.711879][T25560] should_failslab+0x15b/0x200 [ 1905.712016][T25560] kmem_cache_alloc_node_noprof+0xf0/0x16b0 [ 1905.712159][T25560] ? __alloc_skb+0x1e4/0xc10 [ 1905.712343][T25560] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1905.712492][T25560] __alloc_skb+0x1e4/0xc10 [ 1905.712656][T25560] ? kmsan_get_metadata+0xfb/0x160 [ 1905.712800][T25560] tcp_stream_alloc_skb+0x4c/0x5f0 [ 1905.712977][T25560] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1905.713129][T25560] tcp_sendmsg_locked+0x1db5/0x7680 [ 1905.713320][T25560] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1905.713493][T25560] ? stack_depot_save_flags+0x35/0x790 [ 1905.713651][T25560] ? kmsan_get_metadata+0xfb/0x160 [ 1905.713813][T25560] ? kmsan_report+0x281/0x320 [ 1905.713959][T25560] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1905.714078][T25560] tcp_sendmsg+0x4b/0x90 [ 1905.714189][T25560] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1905.714308][T25560] inet_sendmsg+0x134/0x2a0 [ 1905.714474][T25560] __sock_sendmsg+0x278/0x3d0 [ 1905.714644][T25560] __sys_sendto+0x593/0x720 [ 1905.714766][T25560] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1905.714950][T25560] ? vfs_write+0x13e2/0x15d0 [ 1905.715109][T25560] ? kmsan_get_metadata+0xfb/0x160 [ 1905.715278][T25560] __ia32_sys_sendto+0x12f/0x200 [ 1905.715436][T25560] ia32_sys_call+0x1a3d/0x4340 [ 1905.715556][T25560] __do_fast_syscall_32+0x155/0x310 [ 1905.715746][T25560] do_fast_syscall_32+0x38/0x80 [ 1905.715914][T25560] do_SYSENTER_32+0x1f/0x30 [ 1905.716030][T25560] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1905.716185][T25560] RIP: 0023:0xf7f42539 [ 1905.716280][T25560] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1905.716392][T25560] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1905.716519][T25560] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 1905.716607][T25560] RDX: 00000000ffffff94 RSI: 0000000000000000 RDI: 0000000000000000 [ 1905.716689][T25560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1905.716768][T25560] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1905.716846][T25560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1905.716956][T25560] [ 1905.980259][ C0] vkms_vblank_simulate: vblank timer overrun [ 1906.553103][T25566] loop9: detected capacity change from 0 to 512 [ 1906.626760][T25566] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1906.640348][T25566] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1906.789525][T25566] EXT4-fs error (device loop9): ext4_add_entry:2417: inode #12: comm syz.9.7251: Directory hole found for htree leaf block 0 [ 1907.116669][T23803] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1907.330668][T25580] bridge0: entered promiscuous mode [ 1907.354525][T25579] bridge0: left promiscuous mode [ 1907.360849][ T5935] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1907.423204][T25584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7258'. [ 1907.432933][T25584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7258'. [ 1907.483351][T25583] kvm: Disabled LAPIC found during irq injection [ 1907.509236][ T5935] usb 5-1: device descriptor read/64, error -71 [ 1907.695352][T25584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7258'. [ 1907.705369][T25584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7258'. [ 1907.792764][ T5935] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1907.961238][ T5935] usb 5-1: device descriptor read/64, error -71 [ 1908.042479][T25584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7258'. [ 1908.052840][T25584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7258'. [ 1908.070367][ T5935] usb usb5-port1: attempt power cycle [ 1908.138763][ T5870] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1908.298629][ T5870] usb 10-1: Using ep0 maxpacket: 32 [ 1908.318673][ T5870] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1908.328174][ T5870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.340271][ T5870] usb 10-1: Product: syz [ 1908.345608][ T5870] usb 10-1: Manufacturer: syz [ 1908.350557][ T5870] usb 10-1: SerialNumber: syz [ 1908.359876][ T5870] usb 10-1: config 0 descriptor?? [ 1908.448711][ T5935] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1908.470384][ T5935] usb 5-1: device descriptor read/8, error -71 [ 1908.708837][ T5935] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1908.736552][ T5935] usb 5-1: device descriptor read/8, error -71 [ 1908.853544][ T5935] usb usb5-port1: unable to enumerate USB device [ 1908.992665][T25593] /dev/sg0: Can't lookup blockdev [ 1909.000108][ T5870] peak_usb 10-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1909.061061][ T5870] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -71 [ 1909.093143][ T5870] usb 10-1: USB disconnect, device number 80 [ 1909.331009][ T30] audit: type=1800 audit(2000003551.882:1561): pid=25604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7265" name="file1" dev="tmpfs" ino=2092 res=0 errno=0 [ 1909.610093][T25608] loop5: detected capacity change from 0 to 512 [ 1909.730501][T25608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1909.743827][T25608] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1909.845702][T25608] EXT4-fs error (device loop5): ext4_add_entry:2417: inode #12: comm syz.5.7267: Directory hole found for htree leaf block 0 [ 1910.028541][T25618] loop1: detected capacity change from 0 to 2048 [ 1910.046104][T25619] bridge0: entered promiscuous mode [ 1910.055295][T25616] bridge0: left promiscuous mode [ 1910.127227][T25618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1910.212176][T23615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1910.341255][T25622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7273'. [ 1910.722144][T25629] FAULT_INJECTION: forcing a failure. [ 1910.722144][T25629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1910.736927][T25629] CPU: 0 UID: 0 PID: 25629 Comm: syz.9.7275 Not tainted syzkaller #0 PREEMPT(none) [ 1910.737067][T25629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1910.737144][T25629] Call Trace: [ 1910.737191][T25629] [ 1910.737241][T25629] __dump_stack+0x26/0x30 [ 1910.737392][T25629] dump_stack_lvl+0x1df/0x270 [ 1910.737550][T25629] dump_stack+0x1e/0x25 [ 1910.737682][T25629] should_fail_ex+0x7dc/0x8a0 [ 1910.737859][T25629] should_fail+0x2a/0x40 [ 1910.738011][T25629] should_fail_usercopy+0x2e/0x40 [ 1910.738175][T25629] _copy_from_iter+0x39d/0x2fe0 [ 1910.738316][T25629] ? __msan_warning+0x1b/0x30 [ 1910.738490][T25629] ? filter_irq_stacks+0x13f/0x190 [ 1910.738652][T25629] ? stack_depot_save_flags+0x35/0x790 [ 1910.738805][T25629] ? kmsan_get_metadata+0xfb/0x160 [ 1910.738960][T25629] tun_get_user+0x258/0x6c20 [ 1910.739126][T25629] ? filter_irq_stacks+0x49/0x190 [ 1910.739277][T25629] ? stack_depot_save_flags+0x35/0x790 [ 1910.739427][T25629] ? kmsan_get_metadata+0xfb/0x160 [ 1910.739550][T25629] ? kmsan_get_metadata+0xfb/0x160 [ 1910.739671][T25629] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1910.739846][T25629] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1910.740023][T25629] ? ref_tracker_alloc+0x4c6/0x7a0 [ 1910.740185][T25629] ? kmsan_get_metadata+0xfb/0x160 [ 1910.740310][T25629] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1910.740459][T25629] tun_chr_write_iter+0x3e9/0x5c0 [ 1910.740638][T25629] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1910.740798][T25629] do_iter_readv_writev+0x9e1/0xc20 [ 1910.740939][T25629] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1910.741103][T25629] vfs_writev+0x52a/0x1500 [ 1910.741254][T25629] ? stack_depot_save_flags+0x35/0x790 [ 1910.741416][T25629] ? kmsan_get_metadata+0xfb/0x160 [ 1910.741543][T25629] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1910.741682][T25629] do_writev+0x1b5/0x580 [ 1910.741825][T25629] __ia32_sys_writev+0x9c/0xf0 [ 1910.741950][T25629] ia32_sys_call+0x26cc/0x4340 [ 1910.742069][T25629] __do_fast_syscall_32+0x155/0x310 [ 1910.742252][T25629] do_fast_syscall_32+0x38/0x80 [ 1910.742415][T25629] do_SYSENTER_32+0x1f/0x30 [ 1910.742525][T25629] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1910.742672][T25629] RIP: 0023:0xf703d539 [ 1910.742759][T25629] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1910.742864][T25629] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1910.743027][T25629] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1910.743110][T25629] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 1910.743183][T25629] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1910.743256][T25629] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1910.743329][T25629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1910.743431][T25629] [ 1911.028341][ C0] vkms_vblank_simulate: vblank timer overrun [ 1911.155823][T25635] netlink: 'syz.4.7276': attribute type 1 has an invalid length. [ 1911.231570][T25635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1911.307285][T25640] bond1: (slave ip6gretap1): making interface the new active one [ 1911.321577][T25640] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1912.092074][T25652] FAULT_INJECTION: forcing a failure. [ 1912.092074][T25652] name failslab, interval 1, probability 0, space 0, times 0 [ 1912.105538][T25652] CPU: 0 UID: 0 PID: 25652 Comm: syz.4.7283 Not tainted syzkaller #0 PREEMPT(none) [ 1912.105672][T25652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1912.105752][T25652] Call Trace: [ 1912.105799][T25652] [ 1912.105848][T25652] __dump_stack+0x26/0x30 [ 1912.106000][T25652] dump_stack_lvl+0x1df/0x270 [ 1912.106157][T25652] dump_stack+0x1e/0x25 [ 1912.106287][T25652] should_fail_ex+0x7dc/0x8a0 [ 1912.106459][T25652] should_failslab+0x15b/0x200 [ 1912.106595][T25652] __kmalloc_noprof+0x18d/0x1b40 [ 1912.106723][T25652] ? copy_splice_read+0x12a/0x1160 [ 1912.106881][T25652] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1912.107054][T25652] ? kmsan_get_metadata+0xfb/0x160 [ 1912.107184][T25652] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1912.107321][T25652] copy_splice_read+0x12a/0x1160 [ 1912.107474][T25652] ? kmsan_get_metadata+0xfb/0x160 [ 1912.107603][T25652] ? kmsan_get_metadata+0xfb/0x160 [ 1912.107732][T25652] ? kmsan_get_metadata+0xfb/0x160 [ 1912.107853][T25652] ? kmsan_get_metadata+0xfb/0x160 [ 1912.107982][T25652] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1912.108157][T25652] ? kmsan_get_metadata+0xfb/0x160 [ 1912.108282][T25652] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1912.108420][T25652] sock_splice_read+0x116/0x150 [ 1912.108574][T25652] ? __pfx_sock_splice_read+0x10/0x10 [ 1912.108717][T25652] splice_file_to_pipe+0x5b4/0x8f0 [ 1912.108912][T25652] do_splice+0x29d8/0x30d0 [ 1912.109067][T25652] ? __ia32_sys_splice+0x112/0x1a0 [ 1912.109183][T25652] ? __msan_warning+0x1b/0x30 [ 1912.109339][T25652] ? filter_irq_stacks+0x12c/0x190 [ 1912.109492][T25652] ? kmsan_get_metadata+0xfb/0x160 [ 1912.109641][T25652] ? pipe_clear_nowait+0x115/0x130 [ 1912.109761][T25652] __se_sys_splice+0x549/0x8c0 [ 1912.109948][T25652] __ia32_sys_splice+0x112/0x1a0 [ 1912.110086][T25652] ia32_sys_call+0x31a6/0x4340 [ 1912.110201][T25652] __do_fast_syscall_32+0x155/0x310 [ 1912.110382][T25652] do_fast_syscall_32+0x38/0x80 [ 1912.110546][T25652] do_SYSENTER_32+0x1f/0x30 [ 1912.110656][T25652] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1912.110805][T25652] RIP: 0023:0xf709d539 [ 1912.110891][T25652] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1912.110995][T25652] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 1912.111113][T25652] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 1912.111193][T25652] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 000000007ffff000 [ 1912.111269][T25652] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 1912.111341][T25652] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1912.111416][T25652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1912.111520][T25652] [ 1912.396635][T24087] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 1912.404792][T24087] Bluetooth: hci3: Unable to find connection for dst 61:61:61:61:61:61 sid 0x61 [ 1912.575190][T25656] loop5: detected capacity change from 0 to 512 [ 1912.623413][T25656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1912.640018][T25656] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1912.668982][T25656] EXT4-fs error (device loop5): ext4_add_entry:2417: inode #12: comm syz.5.7284: Directory hole found for htree leaf block 0 [ 1912.793468][T25660] bridge0: entered promiscuous mode [ 1912.887646][T25659] bridge0: left promiscuous mode [ 1912.959472][T25663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7286'. [ 1913.065561][T23615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1913.264502][T25666] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.7287'. [ 1913.586398][T25672] loop5: detected capacity change from 0 to 2048 [ 1913.613612][T25674] FAULT_INJECTION: forcing a failure. [ 1913.613612][T25674] name failslab, interval 1, probability 0, space 0, times 0 [ 1913.627287][T25674] CPU: 1 UID: 0 PID: 25674 Comm: syz.4.7291 Not tainted syzkaller #0 PREEMPT(none) [ 1913.627418][T25674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1913.627493][T25674] Call Trace: [ 1913.627537][T25674] [ 1913.627583][T25674] __dump_stack+0x26/0x30 [ 1913.627742][T25674] dump_stack_lvl+0x1df/0x270 [ 1913.627892][T25674] dump_stack+0x1e/0x25 [ 1913.628022][T25674] should_fail_ex+0x7dc/0x8a0 [ 1913.628198][T25674] should_failslab+0x15b/0x200 [ 1913.628339][T25674] kmem_cache_alloc_node_noprof+0xf0/0x16b0 [ 1913.628479][T25674] ? __alloc_skb+0x1e4/0xc10 [ 1913.628665][T25674] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1913.628803][T25674] __alloc_skb+0x1e4/0xc10 [ 1913.628956][T25674] ? kmsan_get_metadata+0xfb/0x160 [ 1913.629093][T25674] tcp_stream_alloc_skb+0x4c/0x5f0 [ 1913.629260][T25674] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1913.629396][T25674] tcp_sendmsg_locked+0x1db5/0x7680 [ 1913.629574][T25674] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1913.629765][T25674] ? stack_depot_save_flags+0x35/0x790 [ 1913.629914][T25674] ? kmsan_get_metadata+0xfb/0x160 [ 1913.630065][T25674] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1913.630220][T25674] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1913.630331][T25674] tcp_sendmsg+0x4b/0x90 [ 1913.630435][T25674] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1913.630546][T25674] inet_sendmsg+0x134/0x2a0 [ 1913.630707][T25674] __sock_sendmsg+0x278/0x3d0 [ 1913.630858][T25674] __sys_sendto+0x593/0x720 [ 1913.630971][T25674] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1913.631142][T25674] ? vfs_write+0x13e2/0x15d0 [ 1913.631294][T25674] ? kmsan_get_metadata+0xfb/0x160 [ 1913.631450][T25674] __ia32_sys_sendto+0x12f/0x200 [ 1913.631589][T25674] ia32_sys_call+0x1a3d/0x4340 [ 1913.631707][T25674] __do_fast_syscall_32+0x155/0x310 [ 1913.631883][T25674] do_fast_syscall_32+0x38/0x80 [ 1913.632047][T25674] do_SYSENTER_32+0x1f/0x30 [ 1913.632157][T25674] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1913.632303][T25674] RIP: 0023:0xf709d539 [ 1913.632392][T25674] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1913.632497][T25674] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1913.632611][T25674] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 1913.632700][T25674] RDX: 000000000000059a RSI: 0000000010008095 RDI: 0000000000000000 [ 1913.632778][T25674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1913.632850][T25674] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1913.632921][T25674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1913.633024][T25674] [ 1913.932323][T25672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1914.154424][T25678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1914.163840][T25678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1914.218064][T25683] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7292'. [ 1914.358288][T13432] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1914.529874][T13432] usb 10-1: device descriptor read/64, error -71 [ 1914.715751][T25693] bridge0: entered promiscuous mode [ 1914.734849][T25691] bridge0: left promiscuous mode [ 1914.768151][T13432] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 1914.958570][T13432] usb 10-1: device descriptor read/64, error -71 [ 1915.009539][T25697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7300'. [ 1915.070485][T13432] usb usb10-port1: attempt power cycle [ 1915.240003][T25699] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.7301'. [ 1915.467931][T13432] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1915.491573][T13432] usb 10-1: device descriptor read/8, error -71 [ 1915.748075][T13432] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1915.788020][T13432] usb 10-1: device descriptor read/8, error -71 [ 1915.874114][T25710] loop1: detected capacity change from 0 to 2048 [ 1915.903377][T25710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1915.913499][T13432] usb usb10-port1: unable to enumerate USB device [ 1916.076007][T25713] netlink: 'syz.5.7307': attribute type 21 has an invalid length. [ 1916.084877][T25713] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7307'. [ 1916.259026][T25715] loop5: detected capacity change from 0 to 256 [ 1916.671933][T25719] FAULT_INJECTION: forcing a failure. [ 1916.671933][T25719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1916.685499][T25719] CPU: 1 UID: 0 PID: 25719 Comm: syz.4.7308 Not tainted syzkaller #0 PREEMPT(none) [ 1916.685633][T25719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1916.685710][T25719] Call Trace: [ 1916.685757][T25719] [ 1916.685806][T25719] __dump_stack+0x26/0x30 [ 1916.685960][T25719] dump_stack_lvl+0x1df/0x270 [ 1916.686114][T25719] dump_stack+0x1e/0x25 [ 1916.686248][T25719] should_fail_ex+0x7dc/0x8a0 [ 1916.686428][T25719] should_fail+0x2a/0x40 [ 1916.686580][T25719] should_fail_usercopy+0x2e/0x40 [ 1916.686749][T25719] _copy_to_user+0x35/0x120 [ 1916.686907][T25719] simple_read_from_buffer+0x1b2/0x340 [ 1916.687099][T25719] proc_fail_nth_read+0x1e0/0x2d0 [ 1916.687274][T25719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1916.687446][T25719] vfs_read+0x27c/0xf90 [ 1916.687594][T25719] ? stack_depot_save_flags+0x35/0x790 [ 1916.687745][T25719] ? kmsan_get_metadata+0xfb/0x160 [ 1916.687877][T25719] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1916.688066][T25719] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1916.688210][T25719] __ia32_sys_read+0x1f9/0x4d0 [ 1916.688397][T25719] ia32_sys_call+0x191f/0x4340 [ 1916.688521][T25719] __do_fast_syscall_32+0x155/0x310 [ 1916.688712][T25719] do_fast_syscall_32+0x38/0x80 [ 1916.688879][T25719] do_SYSENTER_32+0x1f/0x30 [ 1916.688993][T25719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1916.689139][T25719] RIP: 0023:0xf709d539 [ 1916.689233][T25719] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1916.689340][T25719] RSP: 002b:00000000f548d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1916.689466][T25719] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f548d620 [ 1916.689552][T25719] RDX: 000000000000000f RSI: 00000000f7436ff4 RDI: 0000000000000000 [ 1916.689633][T25719] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1916.689711][T25719] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1916.689791][T25719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1916.689902][T25719] [ 1917.226713][T25723] loop5: detected capacity change from 0 to 512 [ 1917.362237][T25723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1917.375791][T25723] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1917.465921][T25731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7312'. [ 1917.521402][T25722] EXT4-fs error (device loop5): ext4_add_entry:2417: inode #12: comm syz.5.7309: Directory hole found for htree leaf block 0 [ 1917.612185][T25733] netlink: 1688 bytes leftover after parsing attributes in process `syz.9.7313'. [ 1917.775057][T25735] bridge0: entered promiscuous mode [ 1917.792311][T25734] bridge0: left promiscuous mode [ 1917.849697][T23615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1918.496148][T25750] loop4: detected capacity change from 0 to 16 [ 1918.507592][T25750] erofs (device loop4): mounted with root inode @ nid 36. [ 1918.756781][T25752] loop4: detected capacity change from 0 to 2048 [ 1918.788375][T25752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1919.229376][T25755] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 1919.837399][T25761] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7324'. [ 1919.925721][T25765] loop1: detected capacity change from 0 to 128 [ 1920.061997][T25765] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1920.105767][T25765] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1920.269789][T25770] bridge0: entered promiscuous mode [ 1920.278792][T25769] bridge0: left promiscuous mode [ 1921.453666][T22940] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1921.612607][T25794] overlayfs: failed to clone upperpath [ 1922.009811][T25804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7341'. [ 1922.419224][T25807] bridge0: entered promiscuous mode [ 1922.445462][T25806] bridge0: left promiscuous mode [ 1922.498391][T25810] FAULT_INJECTION: forcing a failure. [ 1922.498391][T25810] name failslab, interval 1, probability 0, space 0, times 0 [ 1922.511629][T25810] CPU: 1 UID: 0 PID: 25810 Comm: syz.1.7344 Not tainted syzkaller #0 PREEMPT(none) [ 1922.511755][T25810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1922.511833][T25810] Call Trace: [ 1922.511883][T25810] [ 1922.511928][T25810] __dump_stack+0x26/0x30 [ 1922.512078][T25810] dump_stack_lvl+0x1df/0x270 [ 1922.512234][T25810] dump_stack+0x1e/0x25 [ 1922.512366][T25810] should_fail_ex+0x7dc/0x8a0 [ 1922.512535][T25810] should_failslab+0x15b/0x200 [ 1922.512672][T25810] __kmalloc_noprof+0x18d/0x1b40 [ 1922.512806][T25810] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 1922.512967][T25810] ? __msan_warning+0x1b/0x30 [ 1922.513124][T25810] ? filter_irq_stacks+0x13f/0x190 [ 1922.513266][T25810] ? kmsan_get_metadata+0xfb/0x160 [ 1922.513391][T25810] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1922.513535][T25810] tomoyo_realpath_from_path+0xeb/0x9f0 [ 1922.513695][T25810] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1922.513839][T25810] ? __srcu_read_lock+0x5e/0xd0 [ 1922.514012][T25810] tomoyo_path_number_perm+0x1d0/0x7d0 [ 1922.514147][T25810] ? stack_depot_save_flags+0x35/0x790 [ 1922.514314][T25810] ? kmsan_get_metadata+0xfb/0x160 [ 1922.514438][T25810] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1922.514607][T25810] tomoyo_file_ioctl+0x3d/0x50 [ 1922.514766][T25810] security_file_ioctl_compat+0x141/0x590 [ 1922.514908][T25810] __ia32_compat_sys_ioctl+0x150/0x1270 [ 1922.515073][T25810] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1922.515200][T25810] ? kmsan_get_metadata+0xfb/0x160 [ 1922.515320][T25810] ? kmsan_get_metadata+0xfb/0x160 [ 1922.515461][T25810] ia32_sys_call+0x25d9/0x4340 [ 1922.515574][T25810] __do_fast_syscall_32+0x155/0x310 [ 1922.515753][T25810] do_fast_syscall_32+0x38/0x80 [ 1922.515921][T25810] do_SYSENTER_32+0x1f/0x30 [ 1922.516030][T25810] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1922.516177][T25810] RIP: 0023:0xf7f96539 [ 1922.516268][T25810] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1922.516369][T25810] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1922.516483][T25810] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008208ae63 [ 1922.516565][T25810] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1922.516644][T25810] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1922.516718][T25810] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1922.516793][T25810] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1922.516905][T25810] [ 1922.774097][T25810] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1923.089238][ T30] audit: type=1326 audit(2000003565.643:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25818 comm="syz.1.7347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1923.165380][ T30] audit: type=1326 audit(2000003565.683:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25818 comm="syz.1.7347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1923.190536][ T30] audit: type=1326 audit(2000003565.703:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25818 comm="syz.1.7347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1923.201311][T25820] input: syz0 as /devices/virtual/input/input36 [ 1923.213904][ T30] audit: type=1326 audit(2000003565.703:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25818 comm="syz.1.7347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1923.242145][ T30] audit: type=1326 audit(2000003565.713:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25818 comm="syz.1.7347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1923.264653][ T30] audit: type=1326 audit(2000003565.713:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25818 comm="syz.1.7347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1923.289626][ T30] audit: type=1326 audit(2000003565.723:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25818 comm="syz.1.7347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1923.312985][ T30] audit: type=1326 audit(2000003565.753:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25818 comm="syz.1.7347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1923.335479][ T30] audit: type=1326 audit(2000003565.753:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25818 comm="syz.1.7347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1923.358405][ T30] audit: type=1326 audit(2000003565.753:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25818 comm="syz.1.7347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 1923.604666][T25823] loop9: detected capacity change from 0 to 2048 [ 1923.701910][T25823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1923.753151][T25827] FAULT_INJECTION: forcing a failure. [ 1923.753151][T25827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1923.766911][T25827] CPU: 0 UID: 0 PID: 25827 Comm: syz.5.7349 Not tainted syzkaller #0 PREEMPT(none) [ 1923.767051][T25827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1923.767130][T25827] Call Trace: [ 1923.767178][T25827] [ 1923.767226][T25827] __dump_stack+0x26/0x30 [ 1923.767380][T25827] dump_stack_lvl+0x1df/0x270 [ 1923.767535][T25827] dump_stack+0x1e/0x25 [ 1923.767667][T25827] should_fail_ex+0x7dc/0x8a0 [ 1923.767845][T25827] should_fail+0x2a/0x40 [ 1923.767997][T25827] should_fail_usercopy+0x2e/0x40 [ 1923.768166][T25827] _copy_to_user+0x35/0x120 [ 1923.768324][T25827] simple_read_from_buffer+0x1b2/0x340 [ 1923.768521][T25827] proc_fail_nth_read+0x1e0/0x2d0 [ 1923.768699][T25827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1923.768867][T25827] vfs_read+0x27c/0xf90 [ 1923.769022][T25827] ? stack_depot_save_flags+0x35/0x790 [ 1923.769168][T25827] ? kmsan_get_metadata+0xfb/0x160 [ 1923.769298][T25827] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1923.769483][T25827] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1923.769628][T25827] __ia32_sys_read+0x1f9/0x4d0 [ 1923.769816][T25827] ia32_sys_call+0x191f/0x4340 [ 1923.769938][T25827] __do_fast_syscall_32+0x155/0x310 [ 1923.770134][T25827] do_fast_syscall_32+0x38/0x80 [ 1923.770308][T25827] do_SYSENTER_32+0x1f/0x30 [ 1923.770422][T25827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1923.770578][T25827] RIP: 0023:0xf7f42539 [ 1923.770672][T25827] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1923.770782][T25827] RSP: 002b:00000000f5436590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1923.770903][T25827] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5436620 [ 1923.770999][T25827] RDX: 000000000000000f RSI: 00000000f73d6ff4 RDI: 0000000000000000 [ 1923.771081][T25827] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1923.771159][T25827] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1923.771237][T25827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1923.771348][T25827] [ 1924.808308][T25841] bridge0: entered promiscuous mode [ 1924.816269][T25840] bridge0: left promiscuous mode [ 1925.387970][T13432] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1925.471719][T25855] FAULT_INJECTION: forcing a failure. [ 1925.471719][T25855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1925.485212][T25855] CPU: 0 UID: 0 PID: 25855 Comm: syz.9.7360 Not tainted syzkaller #0 PREEMPT(none) [ 1925.485348][T25855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1925.485403][T25855] Call Trace: [ 1925.485434][T25855] [ 1925.485467][T25855] __dump_stack+0x26/0x30 [ 1925.485571][T25855] dump_stack_lvl+0x1df/0x270 [ 1925.485671][T25855] dump_stack+0x1e/0x25 [ 1925.485758][T25855] should_fail_ex+0x7dc/0x8a0 [ 1925.485920][T25855] should_fail+0x2a/0x40 [ 1925.486064][T25855] should_fail_usercopy+0x2e/0x40 [ 1925.486188][T25855] _copy_from_user+0x33/0x100 [ 1925.486324][T25855] sctp_getsockopt_paddr_thresholds+0x9a/0xb70 [ 1925.486482][T25855] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1925.486635][T25855] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1925.486730][T25855] ? __local_bh_enable_ip+0x75/0xb0 [ 1925.486825][T25855] ? _raw_spin_unlock_bh+0x2d/0x40 [ 1925.486955][T25855] ? lock_sock_nested+0x1f5/0x210 [ 1925.487121][T25855] sctp_getsockopt+0xd3b/0x14b0 [ 1925.487277][T25855] ? __pfx_sctp_getsockopt+0x10/0x10 [ 1925.487417][T25855] sock_common_getsockopt+0x9a/0xe0 [ 1925.487558][T25855] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1925.487666][T25855] do_sock_getsockopt+0x3a8/0x4c0 [ 1925.487770][T25855] __ia32_sys_getsockopt+0x32c/0x520 [ 1925.487857][T25855] ? kmsan_internal_set_shadow_origin+0x50/0x110 [ 1925.487985][T25855] ? kmsan_internal_set_shadow_origin+0x50/0x110 [ 1925.488107][T25855] ia32_sys_call+0x3fde/0x4340 [ 1925.488185][T25855] __do_fast_syscall_32+0x155/0x310 [ 1925.488345][T25855] do_fast_syscall_32+0x38/0x80 [ 1925.488518][T25855] do_SYSENTER_32+0x1f/0x30 [ 1925.488603][T25855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1925.488709][T25855] RIP: 0023:0xf703d539 [ 1925.488777][T25855] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1925.488853][T25855] RSP: 002b:00000000f540c55c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 1925.488935][T25855] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 1925.488991][T25855] RDX: 000000000000001f RSI: 0000000080000100 RDI: 0000000080000080 [ 1925.489047][T25855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1925.489097][T25855] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1925.489148][T25855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1925.489220][T25855] [ 1925.806583][T13432] usb 2-1: Using ep0 maxpacket: 32 [ 1925.813873][T13432] usb 2-1: too many configurations: 42, using maximum allowed: 8 [ 1925.860894][T13432] usb 2-1: New USB device found, idVendor=054c, idProduct=0025, bcdDevice= 1.00 [ 1925.870714][T13432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.879064][T13432] usb 2-1: Product: syz [ 1925.883392][T13432] usb 2-1: Manufacturer: syz [ 1925.888237][T13432] usb 2-1: SerialNumber: syz [ 1925.897707][T13432] usb 2-1: config 0 descriptor?? [ 1925.909113][T13432] cdc_acm 2-1:0.0: Zero length descriptor references [ 1925.916007][T13432] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 1925.924610][T13432] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1925.937486][T13432] usb-storage 2-1:0.0: Quirks match for vid 054c pid 0025: 1 [ 1926.363114][T25859] loop4: detected capacity change from 0 to 128 [ 1926.428710][T25859] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1926.473123][T25859] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1926.808699][T24742] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 1926.898411][T24742] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 1926.916585][T25868] loop5: detected capacity change from 0 to 2048 [ 1926.945323][T25868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1926.991201][T24742] EXT4-fs error (device loop4): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 1927.021191][T24742] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 1927.039434][T24742] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 1927.061481][T24742] EXT4-fs error (device loop4): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 1927.087128][T24742] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 1927.143606][T24742] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 1927.161830][T24742] EXT4-fs error (device loop4): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 1927.191347][T24742] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 1927.656558][T25872] bridge0: entered promiscuous mode [ 1927.699128][T25871] bridge0: left promiscuous mode [ 1928.591464][T13432] usb 2-1: USB disconnect, device number 91 [ 1929.253406][T25878] FAULT_INJECTION: forcing a failure. [ 1929.253406][T25878] name failslab, interval 1, probability 0, space 0, times 0 [ 1929.266610][T25878] CPU: 1 UID: 0 PID: 25878 Comm: syz.5.7369 Not tainted syzkaller #0 PREEMPT(none) [ 1929.266743][T25878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1929.266823][T25878] Call Trace: [ 1929.266871][T25878] [ 1929.266919][T25878] __dump_stack+0x26/0x30 [ 1929.267071][T25878] dump_stack_lvl+0x1df/0x270 [ 1929.267225][T25878] dump_stack+0x1e/0x25 [ 1929.267364][T25878] should_fail_ex+0x7dc/0x8a0 [ 1929.267548][T25878] should_failslab+0x15b/0x200 [ 1929.267690][T25878] __kmalloc_noprof+0x18d/0x1b40 [ 1929.267825][T25878] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 1929.267995][T25878] ? tomoyo_path_number_perm+0x21/0x7d0 [ 1929.268131][T25878] ? filter_irq_stacks+0x49/0x190 [ 1929.268281][T25878] ? kmsan_get_metadata+0xfb/0x160 [ 1929.268420][T25878] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1929.268568][T25878] tomoyo_realpath_from_path+0xeb/0x9f0 [ 1929.268742][T25878] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1929.268889][T25878] ? __srcu_read_lock+0x5e/0xd0 [ 1929.269065][T25878] tomoyo_path_number_perm+0x1d0/0x7d0 [ 1929.269208][T25878] ? stack_depot_save_flags+0x35/0x790 [ 1929.269392][T25878] ? kmsan_get_metadata+0xfb/0x160 [ 1929.269524][T25878] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1929.269705][T25878] tomoyo_file_ioctl+0x3d/0x50 [ 1929.269872][T25878] security_file_ioctl_compat+0x141/0x590 [ 1929.270021][T25878] __ia32_compat_sys_ioctl+0x150/0x1270 [ 1929.270195][T25878] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1929.270331][T25878] ? kmsan_get_metadata+0xfb/0x160 [ 1929.270465][T25878] ? kmsan_get_metadata+0xfb/0x160 [ 1929.270613][T25878] ia32_sys_call+0x25d9/0x4340 [ 1929.270733][T25878] __do_fast_syscall_32+0x155/0x310 [ 1929.270925][T25878] do_fast_syscall_32+0x38/0x80 [ 1929.271101][T25878] do_SYSENTER_32+0x1f/0x30 [ 1929.271216][T25878] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1929.271374][T25878] RIP: 0023:0xf7f42539 [ 1929.271473][T25878] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1929.271586][T25878] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1929.271707][T25878] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae01 [ 1929.271792][T25878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1929.271872][T25878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1929.271950][T25878] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1929.272031][T25878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1929.272143][T25878] [ 1929.272193][T25878] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1930.177863][T24742] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1930.192920][ T8078] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.293810][ T8078] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.390910][ T8078] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.700953][ T8078] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.121544][ T8078] bridge_slave_1: left allmulticast mode [ 1931.127599][ T8078] bridge_slave_1: left promiscuous mode [ 1931.134165][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1931.187095][ T8078] bridge_slave_0: left allmulticast mode [ 1931.192956][ T8078] bridge_slave_0: left promiscuous mode [ 1931.199682][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1931.424370][ T8078] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1931.635373][ T8078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1931.654477][ T8078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1931.676753][ T8078] bond0 (unregistering): (slave team0): Releasing backup interface [ 1931.707255][ T8078] bond0 (unregistering): Released all slaves [ 1931.740070][ T8078] bond1 (unregistering): Released all slaves [ 1932.164402][T24087] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15 [ 1932.172269][T24087] Bluetooth: hci0: Unable to find connection for dst 61:61:61:61:61:61 sid 0x61 [ 1932.281516][T25900] bridge0: entered promiscuous mode [ 1932.450228][T25898] bridge0: left promiscuous mode [ 1932.620957][T25901] loop5: detected capacity change from 0 to 4096 [ 1932.655767][ T8078] hsr_slave_0: left promiscuous mode [ 1932.681322][T15856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1932.685795][ T8078] hsr_slave_1: left promiscuous mode [ 1932.702466][ T8078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1932.717417][ T8078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1932.727064][T15856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1932.730019][T25901] nilfs2: Unknown parameter 'cgroup.type' [ 1932.736117][T15856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1932.752685][T15856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1932.763498][T15856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1932.800295][ T8078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1932.810453][ T8078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1932.836201][ T8078] veth1_macvtap: left promiscuous mode [ 1932.841904][ T8078] veth0_macvtap: left promiscuous mode [ 1932.847865][ T8078] veth1_vlan: left promiscuous mode [ 1932.853355][ T8078] veth0_vlan: left promiscuous mode [ 1933.497939][ T8078] team0 (unregistering): Port device team_slave_1 removed [ 1933.539376][ T8078] team0 (unregistering): Port device team_slave_0 removed [ 1934.633595][T25923] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1934.814358][T15856] Bluetooth: hci1: command tx timeout [ 1934.966684][T25935] FAULT_INJECTION: forcing a failure. [ 1934.966684][T25935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1934.982697][T25935] CPU: 0 UID: 0 PID: 25935 Comm: syz.1.7391 Not tainted syzkaller #0 PREEMPT(none) [ 1934.982834][T25935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1934.982913][T25935] Call Trace: [ 1934.982961][T25935] [ 1934.983009][T25935] __dump_stack+0x26/0x30 [ 1934.983159][T25935] dump_stack_lvl+0x1df/0x270 [ 1934.983312][T25935] dump_stack+0x1e/0x25 [ 1934.983446][T25935] should_fail_ex+0x7dc/0x8a0 [ 1934.983623][T25935] should_fail+0x2a/0x40 [ 1934.983772][T25935] should_fail_usercopy+0x2e/0x40 [ 1934.983940][T25935] _copy_to_user+0x35/0x120 [ 1934.984096][T25935] simple_read_from_buffer+0x1b2/0x340 [ 1934.984282][T25935] proc_fail_nth_read+0x1e0/0x2d0 [ 1934.984456][T25935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1934.984619][T25935] vfs_read+0x27c/0xf90 [ 1934.984770][T25935] ? stack_depot_save_flags+0x35/0x790 [ 1934.984930][T25935] ? kmsan_get_metadata+0xfb/0x160 [ 1934.985060][T25935] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1934.985251][T25935] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1934.985396][T25935] __ia32_sys_read+0x1f9/0x4d0 [ 1934.985574][T25935] ia32_sys_call+0x191f/0x4340 [ 1934.985691][T25935] __do_fast_syscall_32+0x155/0x310 [ 1934.985872][T25935] do_fast_syscall_32+0x38/0x80 [ 1934.986044][T25935] do_SYSENTER_32+0x1f/0x30 [ 1934.986157][T25935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1934.986316][T25935] RIP: 0023:0xf7f96539 [ 1934.986408][T25935] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1934.986511][T25935] RSP: 002b:00000000f5486590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1934.986620][T25935] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5486620 [ 1934.986699][T25935] RDX: 000000000000000f RSI: 00000000f7426ff4 RDI: 0000000000000000 [ 1934.986775][T25935] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1934.986846][T25935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1934.986924][T25935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1934.987029][T25935] [ 1935.247785][T25906] chnl_net:caif_netlink_parms(): no params data found [ 1935.762275][T25945] netlink: 'syz.0.7393': attribute type 4 has an invalid length. [ 1935.900252][T25939] loop1: detected capacity change from 0 to 8192 [ 1935.973511][T25906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1935.984936][T25906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.993016][T25906] bridge_slave_0: entered allmulticast mode [ 1936.003743][T25906] bridge_slave_0: entered promiscuous mode [ 1936.074131][T25906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1936.084931][T25906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1936.092783][T25906] bridge_slave_1: entered allmulticast mode [ 1936.102165][T25906] bridge_slave_1: entered promiscuous mode [ 1936.342262][T25906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1936.354260][T25939] loop1: detected capacity change from 0 to 4096 [ 1936.374479][T25906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1936.417642][T15856] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15 [ 1936.426193][T15856] Bluetooth: hci0: Unable to find connection for dst 61:61:61:61:61:61 sid 0x61 [ 1936.538647][T25951] loop5: detected capacity change from 0 to 4096 [ 1936.547712][T25951] nilfs2: Unknown parameter 'cgroup.type' [ 1936.689089][T25906] team0: Port device team_slave_0 added [ 1936.720049][T25906] team0: Port device team_slave_1 added [ 1936.834647][T25906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1936.843076][T25906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1936.869769][T25906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1936.893870][T25906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1936.897305][T15856] Bluetooth: hci1: command tx timeout [ 1936.904099][T25906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1936.904244][T25906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1936.988234][T25956] netlink: 'syz.1.7397': attribute type 21 has an invalid length. [ 1936.996611][T25956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7397'. [ 1937.132689][T25906] hsr_slave_0: entered promiscuous mode [ 1937.142601][T25906] hsr_slave_1: entered promiscuous mode [ 1937.151264][T25906] debugfs: 'hsr0' already exists in 'hsr' [ 1937.157312][T25906] Cannot create hsr debugfs directory [ 1937.727817][ T5935] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1937.917103][ T5935] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1937.934393][ T5935] usb 6-1: config 0 has an invalid interface number: 144 but max is 1 [ 1937.943329][ T5935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1937.953876][ T5935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1937.963229][ T5935] usb 6-1: config 0 has no interface number 0 [ 1937.969656][ T5935] usb 6-1: config 0 interface 144 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 1937.983267][ T5935] usb 6-1: config 0 interface 144 has no altsetting 0 [ 1938.297331][ T5935] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=d0.ae [ 1938.306930][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.315603][ T5935] usb 6-1: Product: syz [ 1938.319925][ T5935] usb 6-1: Manufacturer: syz [ 1938.325255][ T5935] usb 6-1: SerialNumber: syz [ 1938.470961][ T5935] usb 6-1: config 0 descriptor?? [ 1938.487742][T25906] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1938.523835][T25906] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1938.557638][T25906] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1938.755005][T25906] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1938.955059][T15856] Bluetooth: hci1: command tx timeout [ 1939.084119][T25960] loop5: detected capacity change from 0 to 2048 [ 1939.217807][T25960] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz.5.7399: inode has both inline data and extents flags [ 1939.323089][T25960] EXT4-fs (loop5): get root inode failed [ 1939.329251][T25960] EXT4-fs (loop5): mount failed [ 1939.415135][ T2041] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1939.530636][T25960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1939.539949][T25960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1939.550559][T25960] bridge0: left allmulticast mode [ 1939.628709][T25906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1939.698367][ T5935] ims_pcu 6-1:0.144: Missing CDC union descriptor [ 1939.699044][T25906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1939.705600][ T5935] ims_pcu 6-1:0.144: probe with driver ims_pcu failed with error -22 [ 1939.736028][ T3761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1939.743628][ T3761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1939.802328][ T2041] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 1939.811763][ T2041] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1939.822118][ T2041] usb 2-1: config 0 has no interfaces? [ 1939.823805][ T3761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1939.827862][ T2041] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1939.835194][ T3761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1939.844121][ T2041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.863266][ T5935] usb 6-1: USB disconnect, device number 104 [ 1939.882837][ T2041] usb 2-1: config 0 descriptor?? [ 1941.038729][T15856] Bluetooth: hci1: command tx timeout [ 1941.086591][T25906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1941.351549][T13432] usb 2-1: USB disconnect, device number 92 [ 1941.571479][T25906] veth0_vlan: entered promiscuous mode [ 1941.701044][T25906] veth1_vlan: entered promiscuous mode [ 1942.030850][T15856] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 1942.040357][T15856] Bluetooth: hci3: Unable to find connection for dst 61:61:61:61:61:61 sid 0x61 [ 1942.299714][T25995] loop5: detected capacity change from 0 to 8192 [ 1942.383970][T25906] veth0_macvtap: entered promiscuous mode [ 1942.384074][T26001] loop1: detected capacity change from 0 to 4096 [ 1942.445453][T25906] veth1_macvtap: entered promiscuous mode [ 1942.466603][T26001] nilfs2: Unknown parameter 'cgroup.type' [ 1942.569914][T25906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1942.629012][T25906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1942.693164][T19940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1942.728092][T19940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1942.780164][T19940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1942.807160][T19940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.474777][T15856] Bluetooth: Wrong link type (-22) [ 1944.252857][T26035] bridge0: entered promiscuous mode [ 1944.279131][T26034] bridge0: left promiscuous mode [ 1944.661395][T26043] openvswitch: netlink: IP tunnel dst address not specified [ 1944.811232][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1944.817975][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1944.836213][T26043] loop1: detected capacity change from 0 to 512 [ 1944.857681][T26043] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1944.865643][T26043] EXT4-fs: Ignoring removed mblk_io_submit option [ 1944.895526][T26043] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1944.905550][T26043] EXT4-fs (loop1): group descriptors corrupted! [ 1944.980821][T26043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7418'. [ 1945.562044][T26055] loop1: detected capacity change from 0 to 1024 [ 1946.085949][T26063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7423'. [ 1946.394396][ T5935] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 1946.549449][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1946.558177][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1946.577135][T19940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1946.585996][T19940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1946.643953][ T5935] usb 6-1: config 0 has an invalid interface number: 110 but max is 0 [ 1946.653271][ T5935] usb 6-1: config 0 has no interface number 0 [ 1946.660022][ T5935] usb 6-1: config 0 interface 110 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1946.671318][ T5935] usb 6-1: config 0 interface 110 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 1946.682774][ T5935] usb 6-1: config 0 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1946.692961][ T5935] usb 6-1: config 0 interface 110 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1946.706880][ T5935] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=17.65 [ 1946.718783][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.788834][ T5935] usb 6-1: config 0 descriptor?? [ 1946.798544][T26065] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1946.798582][T26073] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 1946.798701][T26073] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1946.820695][T26073] vhci_hcd vhci_hcd.0: Device attached [ 1946.861379][ T5935] adutux 6-1:0.110: interrupt endpoints not found [ 1946.898855][T26074] vhci_hcd: connection closed [ 1946.901856][ T3795] vhci_hcd: stop threads [ 1946.911351][ T3795] vhci_hcd: release socket [ 1946.916221][ T3795] vhci_hcd: disconnect device [ 1947.112422][T26065] xt_ecn: cannot match TCP bits for non-tcp packets [ 1947.151505][T26077] loop3: detected capacity change from 0 to 2048 [ 1947.168525][T26065] loop5: detected capacity change from 0 to 128 [ 1947.186731][T26065] udf: Unknown parameter '' [ 1947.223849][T26077] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1947.288904][T13432] usb 6-1: USB disconnect, device number 105 [ 1947.675916][T26079] fuse: Bad value for 'fd' [ 1948.363002][T26088] openvswitch: netlink: IP tunnel dst address not specified [ 1948.459040][T26088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7430'. [ 1948.817776][T26099] loop9: detected capacity change from 0 to 16 [ 1948.841015][T26099] erofs (device loop9): mounted with root inode @ nid 36. [ 1950.244356][T13432] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1950.261454][T26117] syz.9.7440 (26117) used greatest stack depth: 1272 bytes left [ 1950.542977][T13432] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 1950.551683][T13432] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1950.562147][T13432] usb 6-1: config 0 has no interfaces? [ 1950.567822][T13432] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1950.577116][T13432] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.681903][T13432] usb 6-1: config 0 descriptor?? [ 1951.242626][T26126] loop9: detected capacity change from 0 to 8192 [ 1951.374667][T26126] vlan0: entered allmulticast mode [ 1951.379908][T26126] hsr0: entered allmulticast mode [ 1951.385288][T26126] hsr_slave_0: entered allmulticast mode [ 1951.391016][T26126] hsr_slave_1: entered allmulticast mode [ 1951.670601][T26133] openvswitch: netlink: IP tunnel dst address not specified [ 1951.722258][T26133] loop1: detected capacity change from 0 to 512 [ 1951.764523][T26133] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1951.772900][T26133] EXT4-fs: Ignoring removed mblk_io_submit option [ 1951.804897][T26133] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1951.815859][T26133] EXT4-fs (loop1): group descriptors corrupted! [ 1951.896615][T26133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7446'. [ 1951.930053][T26137] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7448'. [ 1952.322685][T26144] loop3: detected capacity change from 0 to 1024 [ 1952.369074][T13432] usb 6-1: USB disconnect, device number 106 [ 1952.379409][T26144] EXT4-fs: Ignoring removed nobh option [ 1952.386394][T26144] EXT4-fs: inline encryption not supported [ 1952.604779][T26144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1952.786158][T26155] loop5: detected capacity change from 0 to 164 [ 1952.831788][T25906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1952.870627][T26155] rock: directory entry would overflow storage [ 1952.881651][T26155] rock: sig=0x4543, size=28, remaining=18 [ 1953.603140][T13432] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1953.650231][T26166] fuse: Bad value for 'fd' [ 1953.781396][T13432] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1953.791482][T13432] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.810718][T13432] usb 4-1: config 0 descriptor?? [ 1953.848073][T13432] cp210x 4-1:0.0: cp210x converter detected [ 1954.163477][ T5870] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 1954.243244][T13432] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 1954.251241][T13432] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 1954.262358][T13432] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1954.338808][ T5870] usb 6-1: not running at top speed; connect to a high speed hub [ 1954.350495][ T5870] usb 6-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1954.361937][ T5870] usb 6-1: config 1 interface 0 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1954.363288][ T5935] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 1954.375331][ T5870] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1954.388319][ T5870] usb 6-1: string descriptor 0 read error: -22 [ 1954.399057][ T5870] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1954.410915][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.426509][T26168] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1954.438099][T26168] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1954.451260][ T5870] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1954.471376][ T2041] usb 4-1: USB disconnect, device number 56 [ 1954.483663][ T2041] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1954.492366][ T2041] cp210x 4-1:0.0: device disconnected [ 1954.580642][ T5935] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1954.591859][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1954.604218][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 4 [ 1954.618803][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 0 [ 1954.630725][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1954.643012][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 1954.653668][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1954.663783][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1954.685971][ T5935] usb 2-1: string descriptor 0 read error: -22 [ 1954.692690][ T5935] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1954.702409][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.743157][ T5935] usb 2-1: config 0 descriptor?? [ 1954.751821][T26173] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1954.770363][ T5935] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1954.821761][ T5870] usb 6-1: USB disconnect, device number 107 [ 1954.977492][T26175] openvswitch: netlink: IP tunnel dst address not specified [ 1954.997046][ T5935] usb 2-1: USB disconnect, device number 93 [ 1955.047989][T26175] loop9: detected capacity change from 0 to 512 [ 1955.066169][T26175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1955.075128][T26175] EXT4-fs: Ignoring removed mblk_io_submit option [ 1955.086209][T26175] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1955.096601][T26175] EXT4-fs (loop9): group descriptors corrupted! [ 1955.150959][T26175] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7461'. [ 1955.235644][T26177] FAULT_INJECTION: forcing a failure. [ 1955.235644][T26177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1955.249326][T26177] CPU: 0 UID: 0 PID: 26177 Comm: syz.3.7462 Not tainted syzkaller #0 PREEMPT(none) [ 1955.249462][T26177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1955.249536][T26177] Call Trace: [ 1955.249583][T26177] [ 1955.249634][T26177] __dump_stack+0x26/0x30 [ 1955.249793][T26177] dump_stack_lvl+0x1df/0x270 [ 1955.249939][T26177] dump_stack+0x1e/0x25 [ 1955.250075][T26177] should_fail_ex+0x7dc/0x8a0 [ 1955.250250][T26177] should_fail+0x2a/0x40 [ 1955.250395][T26177] should_fail_usercopy+0x2e/0x40 [ 1955.250556][T26177] _copy_from_iter+0x1b8/0x2fe0 [ 1955.250699][T26177] ? tun_get_user+0x1/0x6c20 [ 1955.250863][T26177] ? filter_irq_stacks+0x49/0x190 [ 1955.251024][T26177] ? stack_depot_save_flags+0x35/0x790 [ 1955.251179][T26177] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1955.251313][T26177] ? kmsan_get_metadata+0xfb/0x160 [ 1955.251439][T26177] ? kmsan_get_metadata+0xfb/0x160 [ 1955.251569][T26177] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1955.251748][T26177] ? kmsan_get_metadata+0xfb/0x160 [ 1955.251892][T26177] tun_get_user+0x258/0x6c20 [ 1955.252069][T26177] ? stack_depot_save_flags+0x35/0x790 [ 1955.252223][T26177] ? kmsan_get_metadata+0xfb/0x160 [ 1955.252352][T26177] ? kmsan_get_metadata+0xfb/0x160 [ 1955.252483][T26177] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1955.252662][T26177] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1955.252850][T26177] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1955.252994][T26177] ? kmsan_get_metadata+0xfb/0x160 [ 1955.253126][T26177] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1955.253280][T26177] tun_chr_write_iter+0x3e9/0x5c0 [ 1955.253472][T26177] vfs_write+0xbe2/0x15d0 [ 1955.253653][T26177] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1955.253846][T26177] __ia32_sys_write+0x1f9/0x4d0 [ 1955.254030][T26177] ia32_sys_call+0x3d5e/0x4340 [ 1955.254148][T26177] __do_fast_syscall_32+0x155/0x310 [ 1955.254340][T26177] do_fast_syscall_32+0x38/0x80 [ 1955.254515][T26177] do_SYSENTER_32+0x1f/0x30 [ 1955.254634][T26177] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1955.254795][T26177] RIP: 0023:0xf708d539 [ 1955.254891][T26177] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1955.255005][T26177] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1955.255123][T26177] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1955.255210][T26177] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000000 [ 1955.255288][T26177] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1955.255364][T26177] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1955.255442][T26177] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1955.255551][T26177] [ 1956.593130][ T2041] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1956.770355][T26193] loop1: detected capacity change from 0 to 2048 [ 1956.784012][ T2041] usb 10-1: config index 0 descriptor too short (expected 28277, got 36) [ 1956.793804][ T2041] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1956.802959][T26193] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1956.804673][ T2041] usb 10-1: config 0 has no interfaces? [ 1956.818878][ T2041] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1956.828593][ T2041] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.843398][ T5870] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 1956.920319][ T2041] usb 10-1: config 0 descriptor?? [ 1957.035418][T26198] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 16384 lbcount: 20480 extent 129+19456 [ 1957.048644][ T5870] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1957.088020][ T5870] usb 4-1: config 64 has an invalid interface number: 227 but max is 0 [ 1957.098163][ T5870] usb 4-1: config 64 has no interface number 0 [ 1957.104654][ T5870] usb 4-1: config 64 interface 227 altsetting 9 endpoint 0x4 is Bulk; changing to Interrupt [ 1957.115228][ T5870] usb 4-1: config 64 interface 227 altsetting 9 endpoint 0xC has an invalid bInterval 226, changing to 4 [ 1957.126921][ T5870] usb 4-1: config 64 interface 227 altsetting 9 endpoint 0xC has invalid maxpacket 512, setting to 0 [ 1957.138052][ T5870] usb 4-1: config 64 interface 227 has no altsetting 0 [ 1957.194448][ T5870] usb 4-1: language id specifier not provided by device, defaulting to English [ 1957.239308][T26197] overlayfs: missing 'lowerdir' [ 1957.831388][T26208] openvswitch: netlink: IP tunnel dst address not specified [ 1957.893330][T26208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7473'. [ 1958.159250][T26211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7474'. [ 1958.733101][ T2041] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1958.886345][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7477'. [ 1958.938667][ T2041] usb 2-1: not running at top speed; connect to a high speed hub [ 1958.959541][ T5935] usb 10-1: USB disconnect, device number 85 [ 1959.006058][ T2041] usb 2-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1959.021321][ T2041] usb 2-1: config 1 interface 0 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1959.036653][ T2041] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1959.089459][T26217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7477'. [ 1959.173916][ T2041] usb 2-1: string descriptor 0 read error: -22 [ 1959.180939][ T2041] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1959.192071][ T2041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.355005][T26213] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1959.413391][T26213] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1959.459108][ T2041] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1959.984885][ T5870] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=cc.bf [ 1959.994505][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.048838][ T5870] usb 4-1: can't set config #64, error -71 [ 1960.059964][ T5870] usb 4-1: USB disconnect, device number 57 [ 1960.060811][T26221] loop5: detected capacity change from 0 to 512 [ 1960.096476][T13432] usb 2-1: USB disconnect, device number 94 [ 1960.101708][T26221] EXT4-fs: Ignoring removed oldalloc option [ 1960.229413][T26221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1960.242753][T26221] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1960.302931][T26221] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.7479: iget: bad i_size value: 2533274857506816 [ 1960.408401][T26221] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.7479: iget: bad i_size value: 2533274857506816 [ 1960.613022][T26235] openvswitch: netlink: IP tunnel dst address not specified [ 1960.671004][T26235] loop9: detected capacity change from 0 to 512 [ 1960.725524][T23615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1960.740541][T26235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1960.747735][T26235] EXT4-fs: Ignoring removed mblk_io_submit option [ 1960.805750][T26235] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1960.816101][T26235] EXT4-fs (loop9): group descriptors corrupted! [ 1960.944692][T26235] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7484'. [ 1961.139934][T26244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7487'. [ 1961.407495][T26249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7487'. [ 1962.044826][T26256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7491'. [ 1962.122389][T13432] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1962.311453][T13432] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 1962.321182][T13432] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1962.331958][T13432] usb 4-1: config 0 has no interfaces? [ 1962.337649][T13432] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1962.347125][T13432] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.360816][T13432] usb 4-1: config 0 descriptor?? [ 1962.593448][T26265] FAULT_INJECTION: forcing a failure. [ 1962.593448][T26265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1962.611523][T26265] CPU: 1 UID: 0 PID: 26265 Comm: syz.9.7495 Not tainted syzkaller #0 PREEMPT(none) [ 1962.611660][T26265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1962.611736][T26265] Call Trace: [ 1962.611785][T26265] [ 1962.611832][T26265] __dump_stack+0x26/0x30 [ 1962.611985][T26265] dump_stack_lvl+0x1df/0x270 [ 1962.612133][T26265] dump_stack+0x1e/0x25 [ 1962.612260][T26265] should_fail_ex+0x7dc/0x8a0 [ 1962.612430][T26265] should_fail+0x2a/0x40 [ 1962.612568][T26265] should_fail_usercopy+0x2e/0x40 [ 1962.612728][T26265] _copy_to_user+0x35/0x120 [ 1962.612878][T26265] simple_read_from_buffer+0x1b2/0x340 [ 1962.613066][T26265] proc_fail_nth_read+0x1e0/0x2d0 [ 1962.613234][T26265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1962.613392][T26265] vfs_read+0x27c/0xf90 [ 1962.613538][T26265] ? stack_depot_save_flags+0x35/0x790 [ 1962.613685][T26265] ? kmsan_get_metadata+0xfb/0x160 [ 1962.613809][T26265] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1962.613990][T26265] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1962.614128][T26265] __ia32_sys_read+0x1f9/0x4d0 [ 1962.614302][T26265] ia32_sys_call+0x191f/0x4340 [ 1962.614415][T26265] __do_fast_syscall_32+0x155/0x310 [ 1962.614595][T26265] do_fast_syscall_32+0x38/0x80 [ 1962.614755][T26265] do_SYSENTER_32+0x1f/0x30 [ 1962.614864][T26265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1962.615015][T26265] RIP: 0023:0xf703d539 [ 1962.615101][T26265] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1962.615203][T26265] RSP: 002b:00000000f542d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1962.615314][T26265] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f542d620 [ 1962.615393][T26265] RDX: 000000000000000f RSI: 00000000f73d6ff4 RDI: 0000000000000000 [ 1962.615469][T26265] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1962.615539][T26265] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1962.615609][T26265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1962.615713][T26265] [ 1963.449743][T26275] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7500'. [ 1963.774940][T26277] FAULT_INJECTION: forcing a failure. [ 1963.774940][T26277] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.788086][T26277] CPU: 1 UID: 0 PID: 26277 Comm: syz.9.7502 Not tainted syzkaller #0 PREEMPT(none) [ 1963.788214][T26277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1963.788267][T26277] Call Trace: [ 1963.788298][T26277] [ 1963.788335][T26277] __dump_stack+0x26/0x30 [ 1963.788437][T26277] dump_stack_lvl+0x1df/0x270 [ 1963.788537][T26277] dump_stack+0x1e/0x25 [ 1963.788623][T26277] should_fail_ex+0x7dc/0x8a0 [ 1963.788743][T26277] should_failslab+0x15b/0x200 [ 1963.788843][T26277] kmem_cache_alloc_noprof+0xed/0x1640 [ 1963.788929][T26277] ? getname_flags+0x102/0xac0 [ 1963.789022][T26277] ? kmsan_get_metadata+0xfb/0x160 [ 1963.789109][T26277] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1963.789204][T26277] getname_flags+0x102/0xac0 [ 1963.789290][T26277] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1963.789385][T26277] __ia32_sys_mkdir+0x6a/0xf0 [ 1963.789501][T26277] ia32_sys_call+0x201d/0x4340 [ 1963.789582][T26277] __do_fast_syscall_32+0x155/0x310 [ 1963.789708][T26277] do_fast_syscall_32+0x38/0x80 [ 1963.789825][T26277] do_SYSENTER_32+0x1f/0x30 [ 1963.789898][T26277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1963.790002][T26277] RIP: 0023:0xf703d539 [ 1963.790064][T26277] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1963.790143][T26277] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 1963.790223][T26277] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 1963.790305][T26277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1963.790383][T26277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1963.790456][T26277] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1963.790534][T26277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1963.790618][T26277] [ 1964.283997][ T5870] usb 4-1: USB disconnect, device number 58 [ 1964.794661][T26293] syzkaller0: entered promiscuous mode [ 1964.800418][T26293] syzkaller0: entered allmulticast mode [ 1965.521342][T26303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7511'. [ 1965.929764][T26305] loop5: detected capacity change from 0 to 1024 [ 1965.952624][T26305] EXT4-fs: Ignoring removed orlov option [ 1966.959756][T26305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1968.393853][ T5935] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 1968.837252][T26332] ------------[ cut here ]------------ [ 1968.843359][T26332] ===================================================== [ 1968.850535][T26332] BUG: KMSAN: uninit-value in vsnprintf+0x15d2/0x1b20 [ 1968.857449][T26332] vsnprintf+0x15d2/0x1b20 [ 1968.862027][T26332] vprintk_store+0x3ae/0x1530 [ 1968.866865][T26332] vprintk_emit+0x21a/0xb60 [ 1968.871512][T26332] vprintk_default+0x3f/0x50 [ 1968.876299][T26332] vprintk+0x36/0x50 [ 1968.880321][T26332] __report_bug+0xa53/0xe80 [ 1968.885005][T26332] report_bug_entry+0x148/0x1d0 [ 1968.890028][T26332] handle_bug+0xe1/0x230 [ 1968.894400][T26332] exc_invalid_op+0x1f/0x50 [ 1968.899024][T26332] asm_exc_invalid_op+0x1f/0x30 [ 1968.904003][T26332] reg_bounds_sanity_check+0x577/0x1450 [ 1968.909695][T26332] reg_set_min_max+0x267/0x440 [ 1968.914594][T26332] check_cond_jmp_op+0x3c34/0x5410 [ 1968.919844][T26332] do_check+0x22f7/0x168c0 [ 1968.924427][T26332] do_check_common+0x205b/0x3180 [ 1968.929536][T26332] bpf_check+0x5d49/0x29d50 [ 1968.934186][T26332] bpf_prog_load+0x2af2/0x3040 [ 1968.939125][T26332] __sys_bpf+0x7df/0xeb0 [ 1968.943534][T26332] __ia32_sys_bpf+0xa4/0xf0 [ 1968.948196][T26332] ia32_sys_call+0xa53/0x4340 [ 1968.952993][T26332] __do_fast_syscall_32+0x155/0x310 [ 1968.958375][T26332] do_fast_syscall_32+0x38/0x80 [ 1968.963379][T26332] do_SYSENTER_32+0x1f/0x30 [ 1968.967969][T26332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1968.974440][T26332] [ 1968.976793][T26332] Uninit was stored to memory at: [ 1968.981988][T26332] vsnprintf+0x15cb/0x1b20 [ 1968.986517][T26332] vprintk_store+0x3ae/0x1530 [ 1968.991309][T26332] vprintk_emit+0x21a/0xb60 [ 1968.995935][T26332] vprintk_default+0x3f/0x50 [ 1969.000724][T26332] vprintk+0x36/0x50 [ 1969.004704][T26332] __report_bug+0xa53/0xe80 [ 1969.009350][T26332] report_bug_entry+0x148/0x1d0 [ 1969.014346][T26332] handle_bug+0xe1/0x230 [ 1969.018681][T26332] exc_invalid_op+0x1f/0x50 [ 1969.023274][T26332] asm_exc_invalid_op+0x1f/0x30 [ 1969.028240][T26332] [ 1969.030610][T26332] Local variable pflags created at: [ 1969.035852][T26332] try_charge_memcg+0x63/0x1c50 [ 1969.040835][T26332] obj_cgroup_charge_pages+0x2ed/0x600 [ 1969.046414][T26332] [ 1969.048782][T26332] CPU: 0 UID: 0 PID: 26332 Comm: syz.9.7519 Not tainted syzkaller #0 PREEMPT(none) [ 1969.058543][T26332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1969.068685][T26332] ===================================================== [ 1969.075664][T26332] Disabling lock debugging due to kernel taint [ 1969.081882][T26332] Kernel panic - not syncing: kmsan.panic set ... [ 1969.088491][T26332] CPU: 0 UID: 0 PID: 26332 Comm: syz.9.7519 Tainted: G B syzkaller #0 PREEMPT(none) [ 1969.099584][T26332] Tainted: [B]=BAD_PAGE [ 1969.103815][T26332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1969.113953][T26332] Call Trace: [ 1969.117314][T26332] [ 1969.120316][T26332] __dump_stack+0x26/0x30 [ 1969.124793][T26332] dump_stack_lvl+0x53/0x270 [ 1969.129533][T26332] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1969.135479][T26332] dump_stack+0x1e/0x25 [ 1969.139767][T26332] vpanic+0x435/0xd30 [ 1969.143902][T26332] panic+0x15d/0x160 [ 1969.147958][T26332] kmsan_report+0x31c/0x320 [ 1969.152606][T26332] ? __msan_warning+0x1b/0x30 [ 1969.157461][T26332] ? vsnprintf+0x15d2/0x1b20 [ 1969.162179][T26332] ? vprintk_store+0x3ae/0x1530 [ 1969.167166][T26332] ? vprintk_emit+0x21a/0xb60 [ 1969.171992][T26332] ? vprintk_default+0x3f/0x50 [ 1969.176991][T26332] ? vprintk+0x36/0x50 [ 1969.181157][T26332] ? __report_bug+0xa53/0xe80 [ 1969.186015][T26332] ? report_bug_entry+0x148/0x1d0 [ 1969.191200][T26332] ? handle_bug+0xe1/0x230 [ 1969.195735][T26332] ? exc_invalid_op+0x1f/0x50 [ 1969.200514][T26332] ? asm_exc_invalid_op+0x1f/0x30 [ 1969.205653][T26332] ? reg_bounds_sanity_check+0x577/0x1450 [ 1969.211516][T26332] ? reg_set_min_max+0x267/0x440 [ 1969.216594][T26332] ? check_cond_jmp_op+0x3c34/0x5410 [ 1969.222003][T26332] ? do_check+0x22f7/0x168c0 [ 1969.226750][T26332] ? do_check_common+0x205b/0x3180 [ 1969.232026][T26332] ? bpf_check+0x5d49/0x29d50 [ 1969.236853][T26332] ? bpf_prog_load+0x2af2/0x3040 [ 1969.241943][T26332] ? __sys_bpf+0x7df/0xeb0 [ 1969.246537][T26332] ? __ia32_sys_bpf+0xa4/0xf0 [ 1969.251386][T26332] ? ia32_sys_call+0xa53/0x4340 [ 1969.256369][T26332] ? __do_fast_syscall_32+0x155/0x310 [ 1969.261930][T26332] ? do_fast_syscall_32+0x38/0x80 [ 1969.267119][T26332] ? do_SYSENTER_32+0x1f/0x30 [ 1969.271901][T26332] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1969.278548][T26332] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1969.285214][T26332] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1969.291186][T26332] ? kmsan_get_metadata+0xfb/0x160 [ 1969.296453][T26332] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1969.302412][T26332] ? format_decode+0xc1f/0x1100 [ 1969.307410][T26332] ? kmsan_get_metadata+0xfb/0x160 [ 1969.312652][T26332] __msan_warning+0x1b/0x30 [ 1969.317322][T26332] vsnprintf+0x15d2/0x1b20 [ 1969.321939][T26332] vprintk_store+0x3ae/0x1530 [ 1969.326787][T26332] ? kmsan_get_metadata+0xfb/0x160 [ 1969.332052][T26332] ? kmsan_get_metadata+0xfb/0x160 [ 1969.337426][T26332] ? kmsan_get_metadata+0xfb/0x160 [ 1969.342733][T26332] vprintk_emit+0x21a/0xb60 [ 1969.347428][T26332] vprintk_default+0x3f/0x50 [ 1969.352181][T26332] vprintk+0x36/0x50 [ 1969.356362][T26332] __report_bug+0xa53/0xe80 [ 1969.361099][T26332] report_bug_entry+0x148/0x1d0 [ 1969.366353][T26332] ? reg_bounds_sanity_check+0x57c/0x1450 [ 1969.372247][T26332] ? reg_bounds_sanity_check+0x577/0x1450 [ 1969.378120][T26332] handle_bug+0xe1/0x230 [ 1969.382691][T26332] exc_invalid_op+0x1f/0x50 [ 1969.387416][T26332] asm_exc_invalid_op+0x1f/0x30 [ 1969.392386][T26332] RIP: 0010:reg_bounds_sanity_check+0x577/0x1450 [ 1969.398864][T26332] Code: ff b5 d8 fe ff ff ff b5 d0 fe ff ff ff b5 c8 fe ff ff ff b5 c0 fe ff ff ff b5 b8 fe ff ff ff b5 b0 fe ff ff ff b5 28 ff ff ff <67> 48 0f b9 3a 48 83 c4 38 48 8b bd a0 fe ff ff 48 8b 07 48 89 85 [ 1969.418632][T26332] RSP: 0018:ffff88805526eec8 EFLAGS: 00010246 [ 1969.424920][T26332] RAX: 0000000000000000 RBX: ffff888103082cd0 RCX: 00000000ffffdfcd [ 1969.433008][T26332] RDX: ffffffff91c43aaa RSI: ffffffff91ab2f36 RDI: ffffffff92726540 [ 1969.441101][T26332] RBP: ffff88805526f078 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 1969.449203][T26332] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1969.457312][T26332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1969.465469][T26332] reg_set_min_max+0x267/0x440 [ 1969.470393][T26332] check_cond_jmp_op+0x3c34/0x5410 [ 1969.475694][T26332] do_check+0x22f7/0x168c0 [ 1969.480306][T26332] ? kmsan_get_metadata+0xfb/0x160 [ 1969.485667][T26332] do_check_common+0x205b/0x3180 [ 1969.490829][T26332] bpf_check+0x5d49/0x29d50 [ 1969.495465][T26332] ? pcpu_block_refresh_hint+0x450/0x580 [ 1969.501284][T26332] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1969.507254][T26332] ? pcpu_block_update_hint_alloc+0x12df/0x1390 [ 1969.513689][T26332] ? kmsan_get_metadata+0x150/0x160 [ 1969.519033][T26332] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1969.525540][T26332] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1969.531810][T26332] ? kmsan_get_metadata+0xfb/0x160 [ 1969.537048][T26332] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1969.543012][T26332] ? kmsan_get_metadata+0xfb/0x160 [ 1969.548292][T26332] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1969.554258][T26332] ? strncpy_from_user+0xc1/0x4c0 [ 1969.559439][T26332] ? filter_irq_stacks+0x49/0x190 [ 1969.564636][T26332] ? stack_depot_save_flags+0x35/0x790 [ 1969.570969][T26332] ? kmsan_get_metadata+0xfb/0x160 [ 1969.576228][T26332] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1969.582745][T26332] ? kmsan_get_metadata+0xfb/0x160 [ 1969.588000][T26332] ? kmsan_get_metadata+0xfb/0x160 [ 1969.593280][T26332] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1969.599874][T26332] ? kmsan_get_metadata+0xfb/0x160 [ 1969.605129][T26332] ? kmsan_get_metadata+0xfb/0x160 [ 1969.610368][T26332] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1969.616334][T26332] bpf_prog_load+0x2af2/0x3040 [ 1969.621340][T26332] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1969.627874][T26332] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1969.634128][T26332] ? security_bpf+0x88/0x620 [ 1969.638881][T26332] ? _copy_from_user+0xcb/0x100 [ 1969.643889][T26332] __sys_bpf+0x7df/0xeb0 [ 1969.648343][T26332] __ia32_sys_bpf+0xa4/0xf0 [ 1969.652995][T26332] ia32_sys_call+0xa53/0x4340 [ 1969.657775][T26332] __do_fast_syscall_32+0x155/0x310 [ 1969.663141][T26332] do_fast_syscall_32+0x38/0x80 [ 1969.668176][T26332] do_SYSENTER_32+0x1f/0x30 [ 1969.672919][T26332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1969.679431][T26332] RIP: 0023:0xf703d539 [ 1969.683589][T26332] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1969.703331][T26332] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1969.711891][T26332] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0 [ 1969.719974][T26332] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1969.728047][T26332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1969.736102][T26332] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1969.744160][T26332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1969.752282][T26332] [ 1969.755770][T26332] Kernel Offset: disabled [ 1969.760141][T26332] Rebooting in 86400 seconds..